﻿---
title: Start Winlogbeat
description: Before starting Winlogbeat: Follow the steps in Quick start: installation and configuration to install, configure, and set up the Winlogbeat environment.Make...
url: https://www.elastic.co/elastic/docs-builder/docs/2413/reference/beats/winlogbeat/winlogbeat-starting
---

# Start Winlogbeat
Before starting Winlogbeat:
- Follow the steps in [Quick start: installation and configuration](https://www.elastic.co/elastic/docs-builder/docs/2413/reference/beats/winlogbeat/winlogbeat-installation-configuration) to install, configure, and set up the Winlogbeat environment.
- Make sure Kibana and Elasticsearch are running.
- Make sure the user specified in `winlogbeat.yml` is [authorized to publish events](https://www.elastic.co/elastic/docs-builder/docs/2413/reference/beats/winlogbeat/privileges-to-publish-events).

To start Winlogbeat, run:
```shell
PS C:\Program Files\Winlogbeat> Start-Service winlogbeat
```

Winlogbeat should now be running. If you used the logging configuration described here, you can view the log file at `C:\Program Files\winlogbeat-Data\Logs`.
The default location where Windows log files are stored varies:
- `stack: ga 9.0.6` `C:\Program Files\Winlogbeat-Data\logs`
- `stack: ga 9.0` `C:\ProgramData\winlogbeat\logs`

You can view the status of the service and control it from the Services management console in Windows. To launch the management console, run this command:
```shell
PS C:\Program Files\Winlogbeat> services.msc
```