Misconfiguration of filebeat on debian

Elastic Stack Beats
1

Good morning, I am trying to install filebeat on debian with the deb file. The problem is that i have misconfigured it, so i tried to uninstall it.
After the second installation i encountered a problem: it does not download the config files anymore, e.g. i go to /etc/filebeat there is no more filebeat.yml but only modules.d which is an empty directory instead of containing all modules.

i installed it with

curl -L -O https://artifacts.elastic.co/downloads/beats/filebeat/filebeat-8.4.1-amd64.deb
sudo dpkg -i filebeat-8.4.1-amd64.deb

and uninstalled with

sudo dpkg -r filebeat

do you know why this happens? is there any way to have the right configuration back?
thanks

2

Hello There!
First of all, please remove old installation and purge it.

apt-get remove filebeat --purge

and

apt-get auteremove && apt-get autoclean

Also please remove filbeat directory:

rm -rv /etc/filebeat

Secondly you can use apt repository to install Filebeat - docs are here. I think it's the best way to install any software from Elastic.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.