# Help with installing Filebeat ubuntu 20.04
**URL:** https://discuss.elastic.co/t/help-with-installing-filebeat-ubuntu-20-04/307599
**Category:** Beats
**Tags:** beats-module, filebeat
**Created:** [June 20, 2022, 4:46am UTC](https://discuss.elastic.co/t/help-with-installing-filebeat-ubuntu-20-04/307599 "2022-06-20T04:46:09Z")
**Posts on this page:** 5
**Page:** 1
### Author:  [@Badr\_Atouhlaten](https://discuss.elastic.co/u/Badr_Atouhlaten)
#### Post date: [June 20, 2022, 4:46am UTC](https://discuss.elastic.co/t/help-with-installing-filebeat-ubuntu-20-04/307599/1 "2022-06-20T04:46:09Z")
Please help to understand how [Filebeat] works,
i have elk stack installed with fleet server , system & fleet server integration installed in the stack
i have an ubuntu 18.04 added as client and i wanted to monitor /root & /home included subdirectories to be monitored for any activity (create, add, delete, modify....).
the elastic agent ins installed in the client server, i am confused not sure where will install the filebeat in the host or in the client. i am using elk stack v 8.2.2, also i want to know how to setup alert if any changes happen. Thanks
---
### Author:  [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [June 20, 2022, 4:47am UTC](https://discuss.elastic.co/t/help-with-installing-filebeat-ubuntu-20-04/307599/2 "2022-06-20T04:47:05Z")
> [@Badr\_Atouhlaten](#):
>
> i have an ubuntu 18.04 added as client and i wanted to monitor /root & /home included subdirectories to be monitored for any activity (create, add, delete, modify....).
You probably want to look at Auditbeat instead.
---
### Author:  [@Badr\_Atouhlaten](https://discuss.elastic.co/u/Badr_Atouhlaten)
#### Post date: [June 20, 2022, 4:59am UTC](https://discuss.elastic.co/t/help-with-installing-filebeat-ubuntu-20-04/307599/3 "2022-06-20T04:59:38Z")
> [@warkolm](#):
>
> Auditbeat instead
do i have to install Auditbeat in the client or only in the host ??
---
### Author:  [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [June 20, 2022, 5:06am UTC](https://discuss.elastic.co/t/help-with-installing-filebeat-ubuntu-20-04/307599/4 "2022-06-20T05:06:19Z")
I needs to be added to any host that you want to do the monitoring on.
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 18, 2022, 7:06am UTC](https://discuss.elastic.co/t/help-with-installing-filebeat-ubuntu-20-04/307599/5 "2022-07-18T07:06:57Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.