Missing packetbeat.yml file /etc/packetbeat

Elastic Observability
1

Hi All,

I am trying to install packetbeat in my ubuntu 22.04 machine following the instructions shared in

As shown in below logs, /etc/packetbeat is empty and I dont see the default template of packetbeat.yml file. Any pointers would be of great help.

test@mm310:~$ cd Elastic/
test@mm310:~/Elastic$ curl -L -O https://artifacts.elastic.co/downloads/beats/packetbeat/packetbeat-8.11.3-amd64.deb
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100 32.4M  100 32.4M    0     0  9879k      0  0:00:03  0:00:03 --:--:-- 9882k
test@mm310:~/Elastic$ 
test@mm310:~/Elastic$ 
test@mm310:~/Elastic$ sudo dpkg -i packetbeat-8.11.3-amd64.deb
Selecting previously unselected package packetbeat.
(Reading database ... 208493 files and directories currently installed.)
Preparing to unpack packetbeat-8.11.3-amd64.deb ...
Unpacking packetbeat (8.11.3) ...
Setting up packetbeat (8.11.3) ...
test@mm310:~/Elastic$ 
test@mm310:~/Elastic$ 
test@mm310:~/Elastic$ ls -al /etc/packetbeat/
total 16
drwxr-xr-x   2 root root  4096 Jan  3 12:59 .
drwxr-xr-x 132 root root 12288 Jan  3 12:59 ..
test@mm310:~/Elastic$ 
test@mm310:~/Elastic$ ls -al /usr/share/pack
package-data-downloads/ packetbeat/             
test@mm310:~/Elastic$ ls -al /usr/share/packetbeat/
total 2844
drwxr-xr-x   4 root root    4096 Jan  3 12:59 .
drwxr-xr-x 244 root root   12288 Jan  3 12:59 ..
drwxr-xr-x   2 root root    4096 Jan  3 12:59 bin
-rw-r--r--   1 root root      41 Dec  8 02:40 .build_hash.txt
drwxr-xr-x   3 root root    4096 Jan  3 12:59 kibana
-rw-r--r--   1 root root   13675 Dec  8 02:08 LICENSE.txt
-rw-r--r--   1 root root 2861222 Dec  8 02:08 NOTICE.txt
-rw-r--r--   1 root root     844 Dec  8 02:40 README.md
2

In case of filebeats I dont see any issue with the filebeat.yml file when i try installing filebeat via deb package as shown in below logs.

test@mm310:~/Elastic$ cd fb/
test@mm310:~/Elastic/fb$ ls
test@mm310:~/Elastic/fb$
test@mm310:~/Elastic/fb$
test@mm310:~/Elastic/fb$ curl -L -O https://artifacts.elastic.co/downloads/beats/filebeat/filebeat-8.11.3-amd64.deb
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100 47.8M  100 47.8M    0     0  9309k      0  0:00:05  0:00:05 --:--:-- 10.7M
test@mm310:~/Elastic/fb$ sudo dpkg -i filebeat-8.11.3-amd64.deb
[sudo] password for test:
Selecting previously unselected package filebeat.
(Reading database ... 208561 files and directories currently installed.)
Preparing to unpack filebeat-8.11.3-amd64.deb ...
Unpacking filebeat (8.11.3) ...
Setting up filebeat (8.11.3) ...
test@mm310:~/Elastic/fb$
test@mm310:~/Elastic/fb$
test@mm310:~/Elastic/fb$ cd /etc/filebeat/
test@mm310:/etc/filebeat$ ls
fields.yml  filebeat.reference.yml  filebeat.yml  modules.d
test@mm310:/etc/filebeat$
test@mm310:/etc/filebeat$