How to install Filebeat on a ARM based SBC (eg. Raspberry Pi 3)


(Peter Poulsen) #1

I have read through several threads, forums, and guides. But have not succeded in getting filebeat running on a arm based single board computer.
This link do not seem to work anymore:
https://beats-nightlies.s3.amazonaws.com/index.html?prefix=jenkins/filebeat/1268-625bd02cb57e7140800e76131e9ac1977772fb62/244

I have tried to build it myself but so far no succes.

Please advice....


(Aaron Mildenstein) #2

Perhaps try an older nightly build? These are bleeding edge, and so may not always work. I know I got an older build (month or 2 ago) to work on an Espressobin, which uses a similar 64-bit ARM chip as the RPi3.


(Peter Poulsen) #3

Thanks for your reply. Do you have a link to a previous version. Havn't been able to find any.


(Andrew Kroh) #4

@Peter_Poulsen There are no releases or packages generated for ARM. But you can build a binary yourself from one of the release tags. Here's an example using a docker environment to cross-compile for ARM.

macbook$ mkdir filebeat-arm-bin && cd filebeat-arm-bin
macbook$ docker run -it --rm -v `pwd`:/build golang:1.8.3 /bin/bash
root@1465b1675279:/go# go get github.com/elastic/beats       
package github.com/elastic/beats: no buildable Go source files in /go/src/github.com/elastic/beats
root@1465b1675279:/go# cd /go/src/github.com/elastic/beats/filebeat/
root@1465b1675279:/go# git checkout v5.6.3
root@1465b1675279:/go/src/github.com/elastic/beats/filebeat# GOARCH=arm go build
root@1465b1675279:/go/src/github.com/elastic/beats/filebeat# cp filebeat /build
root@1465b1675279:/go/src/github.com/elastic/beats/filebeat# exit
exit
macbook$ file filebeat 
filebeat: ELF 32-bit LSB executable, ARM, EABI5 version 1 (SYSV), statically linked, not stripped

Now you can download the linux tar.gz file from the website and replace the filebeat binary with the one you just built for ARM.


Filebeat on Raspberry Pi
(Peter Poulsen) #5

Thanks for the reply.....I will give it a try....


(system) #6

This topic was automatically closed after 21 days. New replies are no longer allowed.