# Filebeat v7.3 or above for FreeBSD to collect Bro/Zeek Log

**URL:** <https://discuss.elastic.co/t/filebeat-v7-3-or-above-for-freebsd-to-collect-bro-zeek-log/233226>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [May 19, 2020, 3:13am UTC](https://discuss.elastic.co/t/filebeat-v7-3-or-above-for-freebsd-to-collect-bro-zeek-log/233226 "2020-05-19T03:13:35Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Minh\_Ti\_n\_Tr\_n](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/minh_ti_n_tr_n/32/60754_2.png) [@Minh\_Ti\_n\_Tr\_n](https://discuss.elastic.co/u/Minh_Ti_n_Tr_n)\
**Post date:** [May 19, 2020, 3:13am UTC](https://discuss.elastic.co/t/filebeat-v7-3-or-above-for-freebsd-to-collect-bro-zeek-log/233226/1 "2020-05-19T03:13:35Z")

</div>

Anyone know how to install the lastest version v7.6.0 on freeBSD?  
I have a pfsense 2.4.5 with zeek log installed on it and want to ship log to ES Siem  
I tried the instruction: [https://blog.securitybits.io/2019/12/beats-7.5.0-on-pfsense-2.4.4/](https://blog.securitybits.io/2019/12/beats-7.5.0-on-pfsense-2.4.4/)  
but got error:

```auto
# cd filebeat/
# gmake
go build -ldflags "-X github.com/elastic/beats/libbeat/version.buildTime=2020-05-18T08:05:30Z -X github.com/elastic/beats/libbeat/version.commit=6a23e8f8f30f5001ba344e 4e54d8d9cb82cb107c"
# github.com/elastic/beats/vendor/github.com/DataDog/zstd
exec: "clang": executable file not found in $PATH
# github.com/elastic/beats/vendor/github.com/elastic/gosigar
exec: "clang": executable file not found in $PATH
gmake: *** [../libbeat/scripts/Makefile:121: filebeat] Error 2

```

If you have any solution please share with me.  
Thanks a lots

---

<div class="post-metadata">

**Author:** ![Andre\_Letterer](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/andre_letterer/32/42248_2.png) [@Andre\_Letterer](https://discuss.elastic.co/u/Andre_Letterer)\
**Post date:** [May 30, 2020, 6:58pm UTC](https://discuss.elastic.co/t/filebeat-v7-3-or-above-for-freebsd-to-collect-bro-zeek-log/233226/2 "2020-05-30T18:58:05Z")

</div>

I've tested and couldn't reproduce.  
I tested version 7.6.2

```auto
# ./filebeat version
  filebeat version 7.6.2 (amd64), libbeat 7.6.2 [d57bcf8684602e15000d65b75afcd110e2b12b59 built 2020-05-29 23:12:54 +0000 UTC]

```

and 7.7.0

```auto

# ./filebeat version
  filebeat version 7.7.0 (amd64), libbeat 7.7.0 [unknown built unknown]

```

What FreeBSD version are you using?  
`sysctl -n kern.osrelease kern.ostype`  
I used FreeBSD 11:

```auto
  11.3-RELEASE
   FreeBSD

```

I installed zeek as well and it works to use zeek module.  
Maybe you can install  
If you still had issues, please reach out again.  
Did you install the correct packages?

```auto
pkg install git gmake go bash

```

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [June 27, 2020, 7:06pm UTC](https://discuss.elastic.co/t/filebeat-v7-3-or-above-for-freebsd-to-collect-bro-zeek-log/233226/3 "2020-06-27T19:06:45Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.