YoLoster
(Wieger van der Meulen)
October 29, 2017, 5:16pm
1
Hi there,
I want to start using my Pfsense box to get logs to a ELK instance. I'm following this tutorial: https://blog.reboost.net/suricata-on-pfsense-to-elk-stack/
It states that I need to download the latest build (with the according sha1 hash) from: https://beats-nightlies.s3.amazonaws.com/index.html?prefix=filebeat/
However, it seems that there are no builds in that directory (does contain builds for heartbeat and auditbeat). Can someone point me to the correct build servers?
Thanks.
warkolm
(Mark Walkom)
October 29, 2017, 7:57pm
2
FYI we’ve renamed ELK to the Elastic Stack, otherwise Beats and APM feel left out!
What OS is this for?
YoLoster
(Wieger van der Meulen)
October 29, 2017, 8:38pm
3
Sorry, quite new to the whole thing. I want to use my Pfsense box, which runs a version of FreeBSD.
warkolm
(Mark Walkom)
October 29, 2017, 8:39pm
4
No worries!
In that case you should be able to just grab the tar.gz from https://www.elastic.co/downloads/beats/filebeat , extract that and then use it
YoLoster
(Wieger van der Meulen)
October 29, 2017, 8:40pm
5
Thanks! Ill try this out in the next couple of days and will get back to you. Anything specific I should look out for?
warkolm
(Mark Walkom)
October 29, 2017, 8:48pm
6
The tar.gz doesn't come with an init/service file, that's the downside.
You could convert an rpm/deb to the pkg it normally uses, but that's well outside my experience sorry.
system
(system)
Closed
November 19, 2017, 5:16pm
7
This topic was automatically closed after 21 days. New replies are no longer allowed.