Did you move the folder containing the winlogbeat.exe after running the install script?
In any case, open the properties of the service and check the command that it's running to verify the path points to winlogbeat.exe you are running manually.
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.