# Filebeat installation in linux
**URL:** https://discuss.elastic.co/t/filebeat-installation-in-linux/95388
**Category:** Beats
**Tags:** filebeat
**Created:** [August 1, 2017, 5:13pm UTC](https://discuss.elastic.co/t/filebeat-installation-in-linux/95388 "2017-08-01T17:13:34Z")
**Posts on this page:** 6
**Page:** 1
### Author:  [@vaddanam](https://discuss.elastic.co/u/vaddanam)
#### Post date: [August 1, 2017, 5:13pm UTC](https://discuss.elastic.co/t/filebeat-installation-in-linux/95388/1 "2017-08-01T17:13:34Z")
Hi Team,
I installed the filebeat in linux environment using the rpm installation sudo install rpm filename. On observing that the default directory layout data folder "/var/lib/filebeat" and logs folder "/var/log/filebeat" are not created. Is this any issue. Do we need to create these folder manually? Can any one guide me why this happened. I am not able to see any logs whether the file beat is running or not. Please help me in this issue.
Thanks & Regards
Sri
---
### Author:  [@kvch](https://discuss.elastic.co/u/kvch)
#### Post date: [August 1, 2017, 8:47pm UTC](https://discuss.elastic.co/t/filebeat-installation-in-linux/95388/2 "2017-08-01T20:47:15Z")
Hi,
There is no need to create it manually. These folders are created when Filebeat is started.
If you run `filebeat.sh -e`, it logs to stderr, so you can see what is happening. If `-e` is not specified logs will be written to `/var/log/filebeat/filebeat` by default.
---
### Author:  [@vaddanam](https://discuss.elastic.co/u/vaddanam)
#### Post date: [August 2, 2017, 10:39am UTC](https://discuss.elastic.co/t/filebeat-installation-in-linux/95388/3 "2017-08-02T10:39:35Z")
Thanks for the reply. I am running this as a service. using the below command:
sudo service filebeat start
How do I change the above command to use -e option? Can I add it at the end after start?
---
### Author:  [@kvch](https://discuss.elastic.co/u/kvch)
#### Post date: [August 2, 2017, 9:38pm UTC](https://discuss.elastic.co/t/filebeat-installation-in-linux/95388/4 "2017-08-02T21:38:50Z")
It is not possible to use `-e` option in `sudo service filbeat start` command. If you want to use this option, you have to modify the initscript which is not advised.
Does `/var/log/filebeat/filebeat` is created after you start the service? What is the return value of `sudo service filebeat start`?
---
### Author:  [@steffens](https://discuss.elastic.co/u/steffens)
#### Post date: [August 7, 2017, 11:56am UTC](https://discuss.elastic.co/t/filebeat-installation-in-linux/95388/5 "2017-08-07T11:56:41Z")
The idea is to run filebeat in foreground for testing/debugging. Once you got the configuration to work, you can run filebeat as service again.
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [September 4, 2017, 11:56am UTC](https://discuss.elastic.co/t/filebeat-installation-in-linux/95388/6 "2017-09-04T11:56:41Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.