# Filebeat 6 on Redhat (RHEL/CentOS 5) not supported!

**URL:** <https://discuss.elastic.co/t/filebeat-6-on-redhat-rhel-centos-5-not-supported/172049>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [March 13, 2019, 2:58am UTC](https://discuss.elastic.co/t/filebeat-6-on-redhat-rhel-centos-5-not-supported/172049 "2019-03-13T02:58:08Z")\
**Posts on this page:** 13\
**Page:** 1

<div class="post-metadata">

**Author:** ![knight](https://avatars.discourse-cdn.com/v4/letter/k/2bfe46/32.png) [@knight](https://discuss.elastic.co/u/knight)\
**Post date:** [March 13, 2019, 2:58am UTC](https://discuss.elastic.co/t/filebeat-6-on-redhat-rhel-centos-5-not-supported/172049/1 "2019-03-13T02:58:08Z")

</div>

OS ENV：  
cat /etc/redhat-release  
Red Hat Enterprise Linux Server release 5.4 (Tikanga)

uname -r  
2.6.18-164.el5

Filebeat version：  
6.6.2

when i run cmd：./filebeat -e -c ./filebeat.yml , i got those info：  
runtime: epollwait on fd 4 failed with 38  
fatal error: runtime: netpoll failed

runtime stack:  
runtime.throw(0x179661c, 0x17)  
/usr/local/go/src/runtime/panic.go:616 +0x81  
runtime.netpoll(0x158b63a61a3a5000, 0x0)  
/usr/local/go/src/runtime/netpoll\_epoll.go:75 +0x216  
runtime.sysmon()  
/usr/local/go/src/runtime/proc.go:4265 +0x424  
runtime.mstart1(0x0)  
/usr/local/go/src/runtime/proc.go:1227 +0xe7  
runtime.mstart()  
/usr/local/go/src/runtime/proc.go:1193 +0x76

goroutine 1 [runnable, locked to thread]:  
regexp/syntax.(\*Regexp).Simplify(0xc42032aa10, 0xc42032a930)  
/usr/local/go/src/regexp/syntax/simplify.go:99 +0xb19  
regexp/syntax.(\*Regexp).Simplify(0xc42032aa80, 0x2)  
/usr/local/go/src/regexp/syntax/simplify.go:23 +0xc0  
regexp/syntax.(\*Regexp).Simplify(0xc42032a8c0, 0xc42000df40)  
/usr/local/go/src/regexp/syntax/simplify.go:23 +0xc0  
regexp.compile(0xc4202e5480, 0x13, 0xd4, 0x13, 0xc4202e5480, 0x13)  
/usr/local/go/src/regexp/regexp.go:177 +0xb9  
regexp.Compile(0xc4202e5480, 0x13, 0x1, 0x2, 0xc4202e5480)  
/usr/local/go/src/regexp/regexp.go:133 +0x41  
regexp.MustCompile(0xc4202e5480, 0x13, 0x1)  
/usr/local/go/src/regexp/regexp.go:238 +0x4d  
[github.com/elastic/beats/vendor/github.com/docker/distribution/reference.capture](http://github.com/elastic/beats/vendor/github.com/docker/distribution/reference.capture)(0xc42000e2c8, 0x1, 0x1, 0xc4202f5d60)  
/go/src/github.com/elastic/beats/vendor/github.com/docker/distribution/reference/regexp.go:137 +0xb9

goroutine 5 [syscall]:  
os/signal.signal\_recv(0xc420078fc8)  
/usr/local/go/src/runtime/sigqueue.go:139 +0xa6  
os/signal.loop()  
/usr/local/go/src/os/signal/signal\_unix.go:22 +0x22  
created by os/signal.init.0  
/usr/local/go/src/os/signal/signal\_unix.go:28 +0x41

Please help me，my os server couldn't upgrade!  
Thanks!

---

<div class="post-metadata">

**Author:** ![Randy-312](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/randy-312/32/19451_2.png) [@Randy-312](https://discuss.elastic.co/u/Randy-312)\
**Post date:** [March 13, 2019, 3:08am UTC](https://discuss.elastic.co/t/filebeat-6-on-redhat-rhel-centos-5-not-supported/172049/2 "2019-03-13T03:08:46Z")

</div>

RHEL5 ... interesting since that's not a supported version for Filebeat

Did it work for you before the upgrade?

---

<div class="post-metadata">

**Author:** ![knight](https://avatars.discourse-cdn.com/v4/letter/k/2bfe46/32.png) [@knight](https://discuss.elastic.co/u/knight)\
**Post date:** [March 13, 2019, 3:16am UTC](https://discuss.elastic.co/t/filebeat-6-on-redhat-rhel-centos-5-not-supported/172049/3 "2019-03-13T03:16:50Z")

</div>

> [@Randy-312](#):
>
> Did it work for you before the upgrade?

1.Are there some other version could support RHEL5?  
2.yeah,in a short time ,my team couldn't upgrade the version of server.the jdk's version is 1.4 on the server.so the logstash is not be deployed.

---

<div class="post-metadata">

**Author:** ![Randy-312](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/randy-312/32/19451_2.png) [@Randy-312](https://discuss.elastic.co/u/Randy-312)\
**Post date:** [March 13, 2019, 5:09am UTC](https://discuss.elastic.co/t/filebeat-6-on-redhat-rhel-centos-5-not-supported/172049/4 "2019-03-13T05:09:52Z")

</div>

You may also want to take this a different way. Rather than solving a problem with getting logs to come off of a rhel5 sever, perhaps you should tell them to get off rhel5. I have to imagine the support cost are fairly High, especially where this platform is at from supportability perspective from Red Hat.

---

<div class="post-metadata">

**Author:** ![robincher](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/robincher/32/41282_2.png) [@robincher](https://discuss.elastic.co/u/robincher)\
**Post date:** [March 14, 2019, 3:02am UTC](https://discuss.elastic.co/t/filebeat-6-on-redhat-rhel-centos-5-not-supported/172049/5 "2019-03-14T03:02:37Z")

</div>

I am using RHEL 7,and its working fine for 6.6.1. Doubt a minor update will break the upgrade process.

---

<div class="post-metadata">

**Author:** ![knight](https://avatars.discourse-cdn.com/v4/letter/k/2bfe46/32.png) [@knight](https://discuss.elastic.co/u/knight)\
**Post date:** [March 14, 2019, 6:20am UTC](https://discuss.elastic.co/t/filebeat-6-on-redhat-rhel-centos-5-not-supported/172049/6 "2019-03-14T06:20:40Z")

</div>

thanks for your reply.  
i have to use logstash with jdk1.8 on the RHEL5,just ELK.

---

<div class="post-metadata">

**Author:** ![knight](https://avatars.discourse-cdn.com/v4/letter/k/2bfe46/32.png) [@knight](https://discuss.elastic.co/u/knight)\
**Post date:** [March 14, 2019, 6:22am UTC](https://discuss.elastic.co/t/filebeat-6-on-redhat-rhel-centos-5-not-supported/172049/7 "2019-03-14T06:22:33Z")

</div>

yeah.  
my os'version is rhel5,there are production server online.i have to use ELK

---

<div class="post-metadata">

**Author:** ![robincher](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/robincher/32/41282_2.png) [@robincher](https://discuss.elastic.co/u/robincher)\
**Post date:** [March 14, 2019, 11:30am UTC](https://discuss.elastic.co/t/filebeat-6-on-redhat-rhel-centos-5-not-supported/172049/8 "2019-03-14T11:30:18Z")

</div>

i am running on java-1.8.0-openjdk ,and since there are no major technical differences with Oracle JDK we can rule that out.

Possible to try running on a sandbox with RHEL 7 installed? RHEL 5 is like coming to end of its life

---

<div class="post-metadata">

**Author:** ![steffens](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/steffens/32/79630_2.png) [@steffens](https://discuss.elastic.co/u/steffens)\
**Post date:** [March 14, 2019, 3:29pm UTC](https://discuss.elastic.co/t/filebeat-6-on-redhat-rhel-centos-5-not-supported/172049/9 "2019-03-14T15:29:50Z")

</div>

RHEL5 uses a pretty old kernel, which I think is not supported by the go runtime. Which kernel version are you using? 2.6.18-398?

See: [https://github.com/golang/go/wiki/MinimumRequirements](https://github.com/golang/go/wiki/MinimumRequirements)  
It says 2.6.23+ is required.

The crash occurs on the epollwait syscall.

---

<div class="post-metadata">

**Author:** ![knight](https://avatars.discourse-cdn.com/v4/letter/k/2bfe46/32.png) [@knight](https://discuss.elastic.co/u/knight)\
**Post date:** [March 15, 2019, 2:02am UTC](https://discuss.elastic.co/t/filebeat-6-on-redhat-rhel-centos-5-not-supported/172049/10 "2019-03-15T02:02:47Z")

</div>

> [@steffens](#):
>
> version are you using? 2.6.18-398?

yes.  
Our servers'version is 2.6.18-164.el5.  
I have seen "MinimumRequirements" that about golang.  
The problem should be linux kernel's reason.  
Thanks

---

<div class="post-metadata">

**Author:** ![Randy-312](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/randy-312/32/19451_2.png) [@Randy-312](https://discuss.elastic.co/u/Randy-312)\
**Post date:** [March 20, 2019, 8:31pm UTC](https://discuss.elastic.co/t/filebeat-6-on-redhat-rhel-centos-5-not-supported/172049/11 "2019-03-20T20:31:12Z")

</div>

Can we change the title of this to FileBeat and RHEL5 ?  
I think most users who have read the manual undersatnd it's not supported, so drawing attention to this post is unneccesary, and is not something people need to spend time reading.

---

<div class="post-metadata">

**Author:** ![steffens](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/steffens/32/79630_2.png) [@steffens](https://discuss.elastic.co/u/steffens)\
**Post date:** [March 25, 2019, 1:53pm UTC](https://discuss.elastic.co/t/filebeat-6-on-redhat-rhel-centos-5-not-supported/172049/12 "2019-03-25T13:53:48Z")

</div>

Updated title.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [April 22, 2019, 1:53pm UTC](https://discuss.elastic.co/t/filebeat-6-on-redhat-rhel-centos-5-not-supported/172049/13 "2019-04-22T13:53:49Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
