# Filebeat install E: Unable to locate package filebeat

**URL:** <https://discuss.elastic.co/t/filebeat-install-e-unable-to-locate-package-filebeat/203921>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [October 16, 2019, 7:52pm UTC](https://discuss.elastic.co/t/filebeat-install-e-unable-to-locate-package-filebeat/203921 "2019-10-16T19:52:55Z")\
**Posts on this page:** 11\
**Page:** 1

<div class="post-metadata">

**Author:** ![Mehak\_Bhargava](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mehak_bhargava/32/54750_2.png) [@Mehak\_Bhargava](https://discuss.elastic.co/u/Mehak_Bhargava)\
**Post date:** [October 16, 2019, 7:52pm UTC](https://discuss.elastic.co/t/filebeat-install-e-unable-to-locate-package-filebeat/203921/1 "2019-10-16T19:52:55Z")

</div>

![filebeat_einstall](https://us1.discourse-cdn.com/elastic/original/3X/3/3/33306b9627d931a2df1ede47c1f884ea82606e2f.png)

Following Install Filebeat 7.x, I typed these commands in this order-

apt-get install  
apt-transport-https  
apt update apt install filebeat

But the last command gave me the error shown in picture. I tried sudo rm /var/lib/dpkg/lock but this didnt work because it is a read-only file and showed this error-  
rm: cannot remove '/var/lib/dpkg/lock': Read-only file system

---

<div class="post-metadata">

**Author:** ![arxo](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/arxo/32/56054_2.png) [@arxo](https://discuss.elastic.co/u/arxo)\
**Post date:** [October 16, 2019, 8:14pm UTC](https://discuss.elastic.co/t/filebeat-install-e-unable-to-locate-package-filebeat/203921/2 "2019-10-16T20:14:51Z")

</div>

That sounds like an underlying OS issue @Mehak_Bhargava . Can you touch a simple file in the /var/lib/dpkg directory?

---

<div class="post-metadata">

**Author:** ![Mehak\_Bhargava](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mehak_bhargava/32/54750_2.png) [@Mehak\_Bhargava](https://discuss.elastic.co/u/Mehak_Bhargava)\
**Post date:** [October 16, 2019, 8:28pm UTC](https://discuss.elastic.co/t/filebeat-install-e-unable-to-locate-package-filebeat/203921/4 "2019-10-16T20:28:13Z")

</div>

I changed directory to /var/lib/dpkg and opened one of the file but couldnt access its contents. Can You tell how to make sure I am able to touch files in this directory?

---

<div class="post-metadata">

**Author:** ![arxo](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/arxo/32/56054_2.png) [@arxo](https://discuss.elastic.co/u/arxo)\
**Post date:** [October 16, 2019, 8:31pm UTC](https://discuss.elastic.co/t/filebeat-install-e-unable-to-locate-package-filebeat/203921/5 "2019-10-16T20:31:19Z")

</div>

Ah ok, if you go to the terminal and cd to that directory

> cd /var/lib/dpkg

and then touch the file

> touch testfile

If you see a read only error there is probably a bigger problem on the system.

---

<div class="post-metadata">

**Author:** ![Mehak\_Bhargava](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mehak_bhargava/32/54750_2.png) [@Mehak\_Bhargava](https://discuss.elastic.co/u/Mehak_Bhargava)\
**Post date:** [October 16, 2019, 8:35pm UTC](https://discuss.elastic.co/t/filebeat-install-e-unable-to-locate-package-filebeat/203921/6 "2019-10-16T20:35:46Z")

</div>

I see a read only error- touch: cannot touch 'testfile': Read-only file system  
But I have done installations of ELk before so not sure how now there is a system error. and what is this system error?

---

<div class="post-metadata">

**Author:** ![arxo](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/arxo/32/56054_2.png) [@arxo](https://discuss.elastic.co/u/arxo)\
**Post date:** [October 16, 2019, 8:41pm UTC](https://discuss.elastic.co/t/filebeat-install-e-unable-to-locate-package-filebeat/203921/7 "2019-10-16T20:41:59Z")

</div>

I think the file system has an error and has gone read only. It doesn't look like it's related to filebeat. I would try a fresh build of the system if you can do so without losing anything important.

---

<div class="post-metadata">

**Author:** ![Mehak\_Bhargava](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mehak_bhargava/32/54750_2.png) [@Mehak\_Bhargava](https://discuss.elastic.co/u/Mehak_Bhargava)\
**Post date:** [October 16, 2019, 8:47pm UTC](https://discuss.elastic.co/t/filebeat-install-e-unable-to-locate-package-filebeat/203921/8 "2019-10-16T20:47:42Z")

</div>

Got it. fresh build in the sense where I delete all the installations made for filebeat or close the terminal and restart the system and restart the installation process?

---

<div class="post-metadata">

**Author:** ![arxo](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/arxo/32/56054_2.png) [@arxo](https://discuss.elastic.co/u/arxo)\
**Post date:** [October 16, 2019, 8:50pm UTC](https://discuss.elastic.co/t/filebeat-install-e-unable-to-locate-package-filebeat/203921/9 "2019-10-16T20:50:05Z")

</div>

I think if you are using osboxes, you can just relaunch a new instance?

---

<div class="post-metadata">

**Author:** ![kumarabhi](https://avatars.discourse-cdn.com/v4/letter/k/6a8cbe/32.png) [@kumarabhi](https://discuss.elastic.co/u/kumarabhi)\
**Post date:** [October 16, 2019, 9:42pm UTC](https://discuss.elastic.co/t/filebeat-install-e-unable-to-locate-package-filebeat/203921/10 "2019-10-16T21:42:14Z")

</div>

```
wget -qO - https://artifacts.elastic.co/GPG-KEY-elasticsearch | apt-key add - 

echo "deb https://artifacts.elastic.co/packages/oss-7.x/apt stable main" | tee -a /etc/apt/sources.list.d/elastic-7.x.list

apt get install apt-transport-https

apt-get update 

apt-get install filebeat
```

---

<div class="post-metadata">

**Author:** ![Mehak\_Bhargava](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mehak_bhargava/32/54750_2.png) [@Mehak\_Bhargava](https://discuss.elastic.co/u/Mehak_Bhargava)\
**Post date:** [October 28, 2019, 11:43pm UTC](https://discuss.elastic.co/t/filebeat-install-e-unable-to-locate-package-filebeat/203921/11 "2019-10-28T23:43:43Z")

</div>

curl -L -O [https://artifacts.elastic.co/downloads/beats/filebeat/filebeat-7.4.0-linux-x86\_64.tar.gz](https://artifacts.elastic.co/downloads/beats/filebeat/filebeat-7.4.0-linux-x86_64.tar.gz)  
tar xzvf filebeat-7.4.0-linux-x86\_64.tar.gz

I used this command instead and filebeat package is downloaded.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 25, 2019, 11:43pm UTC](https://discuss.elastic.co/t/filebeat-install-e-unable-to-locate-package-filebeat/203921/12 "2019-11-25T23:43:45Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
