Winlogbeat wont start as a Service


(Dfoley84) #1

Hi,

I am after install Elastic search and Kibana for the main task of holding WEF logs from our Servers:

while trying to start winlog "service-start winlogbeat" I am getting the following Error:

However I am able to start it "winlogbeat.exe -c winlogbeat.yml -e -v -d "*""

by which i can see logs within Kibana


(Andrew Kroh) #2

When it fails to start as a service what's written to the winlogbeat log file?


(Dfoley84) #3

When i open Services

"Windows could not start the winlogbeat service on Local Computer"

Error2: the system cannot find the file specified


(Andrew Kroh) #4

Did you move the folder containing the winlogbeat.exe after running the install script?

In any case, open the properties of the service and check the command that it's running to verify the path points to winlogbeat.exe you are running manually.