How to install Filebeat on a ARM based SBC (eg. Raspberry Pi 3)

Elastic Stack Beats
1

I have read through several threads, forums, and guides. But have not succeded in getting filebeat running on a arm based single board computer.
This link do not seem to work anymore:
https://beats-nightlies.s3.amazonaws.com/index.html?prefix=jenkins/filebeat/1268-625bd02cb57e7140800e76131e9ac1977772fb62/244

I have tried to build it myself but so far no succes.

Please advice....

2

Perhaps try an older nightly build? These are bleeding edge, and so may not always work. I know I got an older build (month or 2 ago) to work on an Espressobin, which uses a similar 64-bit ARM chip as the RPi3.

3

Thanks for your reply. Do you have a link to a previous version. Havn't been able to find any.

4

@Peter_Poulsen There are no releases or packages generated for ARM. But you can build a binary yourself from one of the release tags. Here's an example using a docker environment to cross-compile for ARM.

macbook$ mkdir filebeat-arm-bin && cd filebeat-arm-bin
macbook$ docker run -it --rm -v `pwd`:/build golang:1.8.3 /bin/bash
root@1465b1675279:/go# go get github.com/elastic/beats       
package github.com/elastic/beats: no buildable Go source files in /go/src/github.com/elastic/beats
root@1465b1675279:/go# cd /go/src/github.com/elastic/beats/filebeat/
root@1465b1675279:/go# git checkout v5.6.3
root@1465b1675279:/go/src/github.com/elastic/beats/filebeat# GOARCH=arm go build
root@1465b1675279:/go/src/github.com/elastic/beats/filebeat# cp filebeat /build
root@1465b1675279:/go/src/github.com/elastic/beats/filebeat# exit
exit
macbook$ file filebeat 
filebeat: ELF 32-bit LSB executable, ARM, EABI5 version 1 (SYSV), statically linked, not stripped

Now you can download the linux tar.gz file from the website and replace the filebeat binary with the one you just built for ARM.

3 Likes
5

Thanks for the reply.....I will give it a try....

6

This topic was automatically closed after 21 days. New replies are no longer allowed.