Windows collector fails to start after Windows 10 feature update

Problem:

After installing a Windows 10 feature update the collector fails to start. This issue has been noticed with the 1903 and 2004 updates, but might also happen with any other feature update, and only affects collectors running on Windows 10.

If you try to start the collector from PowerShell, you will get these errors:

PS C:\Program Files\Sumo Logic Collector> net start sumo-collector
The service is not responding to the control function.

More help is available by typing NET HELPMSG 2186.

PS C:\Program Files\Sumo Logic Collector> ./startCollectorService.bat

C:\Program Files\Sumo Logic Collector>sc start sumo-collector
[SC] StartService FAILED 1053:

Please note that cumulative Windows 10 updates are not known to cause this problem.

When upgrading to Windows 11 22H2, this will also cause the collector to fail to start and give the error in the screenshot.

Solution:

To fix this, you need to update the collector's image path in the Windows Registry. Please follow these instructions:

• Open the Registry Editor
• Navigate to: 

  HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sumo-collector

• Right-click on the parameter ImagePath and select Modify
• Change the Value data to:

  "C:\Program Files\Sumo Logic Collector\wrapper.exe" -s "C:\Program Files\Sumo Logic Collector\config\wrapper.conf"

• Click Ok

Now you should be able to start the collector from the Windows Service manager. 

If you continue to have issues after following the above steps, then please reach out to Sumo Logic Technical Support at support@sumologic.com.