WARNING: Version 1.2 of Winlogbeat has passed its EOL date.

This documentation is no longer being maintained and may be removed. If you are running this version, we strongly advise you to upgrade. For the latest information, see the current release documentation.

« Step 4: Loading the Index Template in Elasticsearch Step 6: Loading Sample Kibana Dashboards »
Elastic Docs ›Winlogbeat Reference [1.2] ›Getting Started With Winlogbeat

Step 5: Starting Winlogbeat

edit

Step 5: Starting Winlogbeat

edit

Start the Winlogbeat service with the following command:

PS C:\Program Files\Winlogbeat> Start-Service winlogbeat

Winlogbeat should now be running. If you used the configuration described here, then you can view the log file at C:\ProgramData\winlogbeat\Logs\winlogbeat.

You can view the status of the service and control it from the Services management console in Windows. To launch the management console, run this command:

PS C:\Program Files\Winlogbeat> services.msc

Stopping Winlogbeat

edit

Stop the Winlogbeat service with the following command:

PS C:\Program Files\Winlogbeat> Stop-Service winlogbeat
« Step 4: Loading the Index Template in Elasticsearch Step 6: Loading Sample Kibana Dashboards »