Winlogbeat installation error

Elastic Stack Beats
1

I am getting the error while starting the service post installation.

Error Message:

"error 1053 the service did not respond to the start or control request in a timely fashion"

Window 2016 Server

Winlogbeat version: 7.1

2

Try doing a config test. See #5 at https://www.elastic.co/guide/en/beats/winlogbeat/current/winlogbeat-configuration.html.

Also check the Winlogbeat logs file output for errors.

3

Thanks for the response.

I am getting the below error

" PS C:\ProgramData\Elastic\Winlogbeat> .\winlogbeat.exe test config -c .\winlogbeat.yml -e
2019-06-08T21:34:45.920-0400 INFO instance/beat.go:571 Home path: [C:\ProgramData\Elastic\Winlogbeat] Config pa
th: [C:\ProgramData\Elastic\Winlogbeat] Data path: [C:\ProgramData\Elastic\Winlogbeat\data] Logs path: [C:\ProgramData\E
lastic\Winlogbeat\logs]
2019-06-08T21:34:45.947-0400 INFO instance/beat.go:579 Beat ID: 7ec5c5e4-44bd-4291-831e-1d40735a84b2
2019-06-08T21:34:45.948-0400 INFO [index-management.ilm] ilm/ilm.go:129 Policy name: winlogbeat-7.1.1
2019-06-08T21:34:46.085-0400 INFO [beat] instance/beat.go:827 Beat info {"system_info": {"beat": {"path"
: {"config": "C:\ProgramData\Elastic\Winlogbeat", "data": "C:\ProgramData\Elastic\Winlogbeat\data", "home": "C:\
ProgramData\Elastic\Winlogbeat", "logs": "C:\ProgramData\Elastic\Winlogbeat\logs"}, "type": "winlogbeat", "uuid":
"7ec5c5e4-44bd-4291-831e-1d40735a84b2"}}}
2019-06-08T21:34:46.101-0400 INFO [beat] instance/beat.go:836 Build info {"system_info": {"build": {"comm
it": "3358d9a5a09e3c6709a2d3aaafde628ea34e8419", "libbeat": "7.1.1", "time": "2019-05-23T13:17:17.000Z", "version": "7.1
.1"}}}
2019-06-08T21:34:46.102-0400 INFO [beat] instance/beat.go:839 Go runtime info {"system_info": {"go": {"os":"wi
ndows","arch":"amd64","max_procs":4,"version":"go1.11.5"}}}
2019-06-08T21:34:46.111-0400 INFO [beat] instance/beat.go:843 Host info {"system_info": {"host": {"archi
tecture":"x86_64","boot_time":"2019-05-27T07:03:36.21-04:00","name":"host name","ip":["xx.xxx.xxx.xxx/xx","xx.xxx.
xx.xx/xx","::1/128","127.0.0.1/8"],"kernel_version":"6.3.9600.19358 (winblue_ltsb_escrow.190505-1600)","mac":["00:50:56:
85:0e:4d","00:50:56:85:21:0f"],"os":{"family":"windows","platform":"windows","name":"Windows Server 2012 R2 Datacenter",
"version":"6.3","major":3,"minor":0,"patch":0,"build":"9600.19356"},"timezone":"EDT","timezone_offset_sec":-14400,"id":"
32e1c222-7dab-48d4-a4f5-805c7fb65b2c"}}}
2019-06-08T21:34:46.118-0400 INFO [beat] instance/beat.go:872 Process info {"system_info": {"process": {"cw
d": "C:\ProgramData\Elastic\Winlogbeat", "exe": "C:\ProgramData\Elastic\Winlogbeat\winlogbeat.exe", "name": "winl
ogbeat.exe", "pid": 11852, "ppid": 9984, "start_time": "2019-06-08T21:34:45.690-0400"}}}
2019-06-08T21:34:46.119-0400 INFO instance/beat.go:280 Setup Beat: winlogbeat; Version: 7.1.1
2019-06-08T21:34:46.132-0400 INFO instance/beat.go:308 No outputs are defined. Please define one under the outp
ut section.
2019-06-08T21:34:46.133-0400 ERROR instance/beat.go:802 Exiting: No outputs are defined. Please define one under
the output section.
Exiting: No outputs are defined. Please define one under the output section."

4

Seems like you have a problem with your config file not specifying what output to send the events to (elasticsearch, logstash, etc.). Please post your configuration file.