# Service Crowdsec cant start on Windows

**URL:** <https://discourse.crowdsec.net/t/service-crowdsec-cant-start-on-windows/759>\
**Category:** crowdsec\
**Created:** [April 29, 2022, 4:33am UTC](https://discourse.crowdsec.net/t/service-crowdsec-cant-start-on-windows/759 "2022-04-29T04:33:56Z")\
**Posts on this page:** 11\
**Page:** 1

<div class="post-metadata">

**Author:** ![Pensel](https://avatars.discourse-cdn.com/v4/letter/p/f05b48/32.png) [@Pensel](https://discourse.crowdsec.net/u/Pensel)\
**Post date:** [April 29, 2022, 4:33am UTC](https://discourse.crowdsec.net/t/service-crowdsec-cant-start-on-windows/759/1 "2022-04-29T04:33:56Z")

</div>

i can not start services Crowdsec on Windows. How can start it ??

![image](https://europe1.discourse-cdn.com/flex013/uploads/crowdsec/original/1X/c19e36af93daf8c9caf6b9380b40f13cc39abcb4.png)

---

<div class="post-metadata">

**Author:** ![alteredCoder](https://dub1.discourse-cdn.com/flex013/user_avatar/discourse.crowdsec.net/alteredcoder/32/44_2.png) [@alteredCoder](https://discourse.crowdsec.net/u/alteredCoder)\
**Post date:** [May 4, 2022, 9:04am UTC](https://discourse.crowdsec.net/t/service-crowdsec-cant-start-on-windows/759/2 "2022-05-04T09:04:58Z")

</div>

Hello,

Can you paste the crowdsec logs please?  
They are located in `C:\ProgramData\CrowdSec\log`

---

<div class="post-metadata">

**Author:** ![Pensel](https://avatars.discourse-cdn.com/v4/letter/p/f05b48/32.png) [@Pensel](https://discourse.crowdsec.net/u/Pensel)\
**Post date:** [May 5, 2022, 4:42am UTC](https://discourse.crowdsec.net/t/service-crowdsec-cant-start-on-windows/759/3 "2022-05-05T04:42:37Z")

</div>

> [@alteredCoder](#):
>
> C:\ProgramData\CrowdSec\log

Hi, AlteredCoder

If use default config acquis.yaml. i can start service crowdsec. But i add more config for iis so it cant start

source: wineventlog  
event\_channel: Application  
event\_ids:

- 18456  
event\_level: information  
labels:  
type: eventlog

* * *

use\_time\_machine: true  
filenames:

- C:\inetpub\logs\LogFiles\_\_.log  
labels:  
type: iis

---

<div class="post-metadata">

**Author:** ![alteredCoder](https://dub1.discourse-cdn.com/flex013/user_avatar/discourse.crowdsec.net/alteredcoder/32/44_2.png) [@alteredCoder](https://discourse.crowdsec.net/u/alteredCoder)\
**Post date:** [May 6, 2022, 8:53am UTC](https://discourse.crowdsec.net/t/service-crowdsec-cant-start-on-windows/759/4 "2022-05-06T08:53:32Z")

</div>

Hello,

Can you show me the crowdsec logs please? Without this i can’t see what error is occuring

---

<div class="post-metadata">

**Author:** ![Pensel](https://avatars.discourse-cdn.com/v4/letter/p/f05b48/32.png) [@Pensel](https://discourse.crowdsec.net/u/Pensel)\
**Post date:** [May 9, 2022, 4:34am UTC](https://discourse.crowdsec.net/t/service-crowdsec-cant-start-on-windows/759/5 "2022-05-09T04:34:05Z")

</div>

Hi AlteredCoder,

I so sorry about my late

This is error log

 ![image](https://europe1.discourse-cdn.com/flex013/uploads/crowdsec/original/1X/32f2e2651d6c41a6b20d2c427f1f44c68da111cd.png)

What wrong is my config ?

---

<div class="post-metadata">

**Author:** ![alteredCoder](https://dub1.discourse-cdn.com/flex013/user_avatar/discourse.crowdsec.net/alteredcoder/32/44_2.png) [@alteredCoder](https://discourse.crowdsec.net/u/alteredCoder)\
**Post date:** [May 10, 2022, 3:52pm UTC](https://discourse.crowdsec.net/t/service-crowdsec-cant-start-on-windows/759/6 "2022-05-10T15:52:20Z")

</div>

Hello, can you paste your acquis.yaml file in a block code please? so we can see that is the formatting error

---

<div class="post-metadata">

**Author:** ![Pensel](https://avatars.discourse-cdn.com/v4/letter/p/f05b48/32.png) [@Pensel](https://discourse.crowdsec.net/u/Pensel)\
**Post date:** [May 11, 2022, 3:55am UTC](https://discourse.crowdsec.net/t/service-crowdsec-cant-start-on-windows/759/7 "2022-05-11T03:55:42Z")

</div>

Hi AlteredCoder,

My acquis.yml :  
source: wineventlog  
event\_channel: Microsoft-IIS-Logging/Logs  
event\_ids:

- 6200  
event\_level: information  
labels:  
type: iis

* * *

use\_time\_machine: true  
filenames:

- C:\inetpub\logs\LogFiles\_\_.log  
labels:  
type: iis

![image](https://europe1.discourse-cdn.com/flex013/uploads/crowdsec/original/1X/047097916714aa7c72f3ab66d189e0fce6dee01f.png)

---

<div class="post-metadata">

**Author:** ![alteredCoder](https://dub1.discourse-cdn.com/flex013/user_avatar/discourse.crowdsec.net/alteredcoder/32/44_2.png) [@alteredCoder](https://discourse.crowdsec.net/u/alteredCoder)\
**Post date:** [May 11, 2022, 8:29am UTC](https://discourse.crowdsec.net/t/service-crowdsec-cant-start-on-windows/759/8 "2022-05-11T08:29:36Z")

</div>

Hello,

Can you try to put only `---` as a separator please?

---

<div class="post-metadata">

**Author:** ![Pensel](https://avatars.discourse-cdn.com/v4/letter/p/f05b48/32.png) [@Pensel](https://discourse.crowdsec.net/u/Pensel)\
**Post date:** [May 11, 2022, 9:08am UTC](https://discourse.crowdsec.net/t/service-crowdsec-cant-start-on-windows/759/9 "2022-05-11T09:08:01Z")

</div>

Hi,

I tried 2 options:

- remove "---- " —\> not working ☹
- remove “----” and space —\> not working ☹

 ![image](https://europe1.discourse-cdn.com/flex013/uploads/crowdsec/original/1X/ff8ce5f56d0e5077e5a4a63c9a59354fa6700934.png)

---

<div class="post-metadata">

**Author:** ![alteredCoder](https://dub1.discourse-cdn.com/flex013/user_avatar/discourse.crowdsec.net/alteredcoder/32/44_2.png) [@alteredCoder](https://discourse.crowdsec.net/u/alteredCoder)\
**Post date:** [May 11, 2022, 9:15am UTC](https://discourse.crowdsec.net/t/service-crowdsec-cant-start-on-windows/759/10 "2022-05-11T09:15:04Z")

</div>

In yaml, the separator is `---` so can you please use `---` to separe the 2 yaml blocs ?

---

<div class="post-metadata">

**Author:** ![Pensel](https://avatars.discourse-cdn.com/v4/letter/p/f05b48/32.png) [@Pensel](https://discourse.crowdsec.net/u/Pensel)\
**Post date:** [May 12, 2022, 9:08am UTC](https://discourse.crowdsec.net/t/service-crowdsec-cant-start-on-windows/759/11 "2022-05-12T09:08:40Z")

</div>

Hi AlteredCoder,

I solved the problem. Before “—” have a white space, i copy/paste from blog but don’t paying this attention.

Thanks your supporting