# Failed to install filebeat RPM on EL5 Linux machine

**URL:** <https://discuss.elastic.co/t/failed-to-install-filebeat-rpm-on-el5-linux-machine/76638>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [February 27, 2017, 2:44pm UTC](https://discuss.elastic.co/t/failed-to-install-filebeat-rpm-on-el5-linux-machine/76638 "2017-02-27T14:44:12Z")\
**Posts on this page:** 11\
**Page:** 1

<div class="post-metadata">

**Author:** ![ssasporta](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ssasporta/32/13695_2.png) [@ssasporta](https://discuss.elastic.co/u/ssasporta)\
**Post date:** [February 27, 2017, 2:44pm UTC](https://discuss.elastic.co/t/failed-to-install-filebeat-rpm-on-el5-linux-machine/76638/1 "2017-02-27T14:44:12Z")

</div>

I am trying to install filebeat-5.0.1 and getting the following error:

```
error: /petavm/abpapp1/inf/petavm2/Beats/packages/filebeat-5.0.1-x86_64.rpm: Header V4 RSA/SHA512 signature: BAD, key ID d88e42b4
error: /petavm/abpapp1/inf/petavm2/Beats/packages/filebeat-5.0.1-x86_64.rpm cannot be installed

```

Any idea what the problem is?

Thanks  
Sharon.

---

<div class="post-metadata">

**Author:** ![andrewkroh](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/andrewkroh/32/3784_2.png) [@andrewkroh](https://discuss.elastic.co/u/andrewkroh)\
**Post date:** [February 27, 2017, 11:38pm UTC](https://discuss.elastic.co/t/failed-to-install-filebeat-rpm-on-el5-linux-machine/76638/2 "2017-02-27T23:38:34Z")

</div>

Did you follow the instructions from [here](https://www.elastic.co/guide/en/beats/filebeat/current/setup-repositories.html#_yum)? Specifically did you install the public signing key used by Elastic to sign the packages (key id: d88e42b4)?

---

<div class="post-metadata">

**Author:** ![ssasporta](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ssasporta/32/13695_2.png) [@ssasporta](https://discuss.elastic.co/u/ssasporta)\
**Post date:** [February 28, 2017, 8:33am UTC](https://discuss.elastic.co/t/failed-to-install-filebeat-rpm-on-el5-linux-machine/76638/3 "2017-02-28T08:33:46Z")

</div>

Hi,

I didn't understand your answer @ all.  
I am using an RPM that I downloaded from Elastic to Install the Filebeat. (5.0.1)  
I already installed it in various machine and it is working with no issues.  
In a specific machine I suddenly got that error. I didn't do nothing different from other host that I installed Filebeat on them.  
I am trying to understand what is different on that machine?

Thanks  
Sharon.

---

<div class="post-metadata">

**Author:** ![ssasporta](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ssasporta/32/13695_2.png) [@ssasporta](https://discuss.elastic.co/u/ssasporta)\
**Post date:** [February 28, 2017, 2:08pm UTC](https://discuss.elastic.co/t/failed-to-install-filebeat-rpm-on-el5-linux-machine/76638/4 "2017-02-28T14:08:28Z")

</div>

I did the process, created the elastic.repo file as indicated but it didn't solve the problem.

Still getting the same error during running the installation using the rpm.

---

<div class="post-metadata">

**Author:** ![andrewkroh](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/andrewkroh/32/3784_2.png) [@andrewkroh](https://discuss.elastic.co/u/andrewkroh)\
**Post date:** [February 28, 2017, 4:16pm UTC](https://discuss.elastic.co/t/failed-to-install-filebeat-rpm-on-el5-linux-machine/76638/5 "2017-02-28T16:16:08Z")

</div>

> [@andrewkroh](#):
>
> Did you follow the instructions from here? Specifically did you install the public signing key used by Elastic to sign the packages (key id: d88e42b4)?

Did you run the following command (step 1 of the instructions)?

`sudo rpm --import https://packages.elastic.co/GPG-KEY-elasticsearch`

---

<div class="post-metadata">

**Author:** ![ssasporta](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ssasporta/32/13695_2.png) [@ssasporta](https://discuss.elastic.co/u/ssasporta)\
**Post date:** [March 1, 2017, 8:19am UTC](https://discuss.elastic.co/t/failed-to-install-filebeat-rpm-on-el5-linux-machine/76638/6 "2017-03-01T08:19:37Z")

</div>

Hi,

Yes, I run it but still the same error.

Anyway, I am trying to understand why do I need it , as I am using the rpm for Installation and not having yum commands.

Thanks  
Sharon.

---

<div class="post-metadata">

**Author:** ![andrewkroh](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/andrewkroh/32/3784_2.png) [@andrewkroh](https://discuss.elastic.co/u/andrewkroh)\
**Post date:** [March 1, 2017, 4:03pm UTC](https://discuss.elastic.co/t/failed-to-install-filebeat-rpm-on-el5-linux-machine/76638/7 "2017-03-01T16:03:58Z")

</div>

You need to have the signing key installed for the signature check to pass.

What's the SHA sum of the file that you have? Perhaps it's corrupt.

What OS version are you using?

---

<div class="post-metadata">

**Author:** ![ssasporta](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ssasporta/32/13695_2.png) [@ssasporta](https://discuss.elastic.co/u/ssasporta)\
**Post date:** [March 1, 2017, 4:19pm UTC](https://discuss.elastic.co/t/failed-to-install-filebeat-rpm-on-el5-linux-machine/76638/8 "2017-03-01T16:19:57Z")

</div>

petavm2@hbdchl016!SAT:petavm2\> `uname -r`  
`2.6.18-274.el5`

petavm2@hbdchl016!SAT:petavm2/Beats/packages\> `cksum` filebeat-5.0.1-x86\_64.rpm  
`539366994 8649844 filebeat-5.0.1-x86_64.rpm`

---

<div class="post-metadata">

**Author:** ![andrewkroh](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/andrewkroh/32/3784_2.png) [@andrewkroh](https://discuss.elastic.co/u/andrewkroh)\
**Post date:** [March 1, 2017, 4:33pm UTC](https://discuss.elastic.co/t/failed-to-install-filebeat-rpm-on-el5-linux-machine/76638/9 "2017-03-01T16:33:18Z")

</div>

What's in /etc/redhat-release? What version of `rpm` (rpm --version)?

The file is not corrupt.

You are using el5 and Beats only [support](https://www.elastic.co/support/matrix) el6 and el7. Probably the version of `rpm` on your machine cannot validate the signature due to [bug 436812](https://bugzilla.redhat.com/show_bug.cgi?id=436812).

---

<div class="post-metadata">

**Author:** ![ssasporta](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ssasporta/32/13695_2.png) [@ssasporta](https://discuss.elastic.co/u/ssasporta)\
**Post date:** [March 1, 2017, 4:34pm UTC](https://discuss.elastic.co/t/failed-to-install-filebeat-rpm-on-el5-linux-machine/76638/10 "2017-03-01T16:34:58Z")

</div>

I understand.

We will need to upgrade the redhat version.

Thank you  
Sharon.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 29, 2017, 4:35pm UTC](https://discuss.elastic.co/t/failed-to-install-filebeat-rpm-on-el5-linux-machine/76638/11 "2017-03-29T16:35:01Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
