# Missing packetbeat.yml file /etc/packetbeat

**URL:** <https://discuss.elastic.co/t/missing-packetbeat-yml-file-etc-packetbeat/350340>\
**Category:** Elastic Observability\
**Created:** [January 3, 2024, 9:03pm UTC](https://discuss.elastic.co/t/missing-packetbeat-yml-file-etc-packetbeat/350340 "2024-01-03T21:03:44Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![ACodingfreak](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/acodingfreak/32/130511_2.png) [@ACodingfreak](https://discuss.elastic.co/u/ACodingfreak)\
**Post date:** [January 3, 2024, 9:03pm UTC](https://discuss.elastic.co/t/missing-packetbeat-yml-file-etc-packetbeat/350340/1 "2024-01-03T21:03:45Z")

</div>

Hi All,

I am trying to install packetbeat in my ubuntu 22.04 machine following the instructions shared in

> **[Packetbeat quick start: installation and configuration | Packetbeat Reference...](https://www.elastic.co/guide/en/beats/packetbeat/current/packetbeat-installation-configuration.html)**

As shown in below logs, /etc/packetbeat is empty and I dont see the default template of packetbeat.yml file. Any pointers would be of great help.

```auto
test@mm310:~$ cd Elastic/
test@mm310:~/Elastic$ curl -L -O https://artifacts.elastic.co/downloads/beats/packetbeat/packetbeat-8.11.3-amd64.deb
  % Total % Received % Xferd Average Speed Time Time Time Current
                                 Dload Upload Total Spent Left Speed
100 32.4M 100 32.4M 0 0 9879k 0 0:00:03 0:00:03 --:--:-- 9882k
test@mm310:~/Elastic$ 
test@mm310:~/Elastic$ 
test@mm310:~/Elastic$ sudo dpkg -i packetbeat-8.11.3-amd64.deb
Selecting previously unselected package packetbeat.
(Reading database ... 208493 files and directories currently installed.)
Preparing to unpack packetbeat-8.11.3-amd64.deb ...
Unpacking packetbeat (8.11.3) ...
Setting up packetbeat (8.11.3) ...
test@mm310:~/Elastic$ 
test@mm310:~/Elastic$ 
test@mm310:~/Elastic$ ls -al /etc/packetbeat/
total 16
drwxr-xr-x 2 root root 4096 Jan 3 12:59 .
drwxr-xr-x 132 root root 12288 Jan 3 12:59 ..
test@mm310:~/Elastic$ 
test@mm310:~/Elastic$ ls -al /usr/share/pack
package-data-downloads/ packetbeat/             
test@mm310:~/Elastic$ ls -al /usr/share/packetbeat/
total 2844
drwxr-xr-x 4 root root 4096 Jan 3 12:59 .
drwxr-xr-x 244 root root 12288 Jan 3 12:59 ..
drwxr-xr-x 2 root root 4096 Jan 3 12:59 bin
-rw-r--r-- 1 root root 41 Dec 8 02:40 .build_hash.txt
drwxr-xr-x 3 root root 4096 Jan 3 12:59 kibana
-rw-r--r-- 1 root root 13675 Dec 8 02:08 LICENSE.txt
-rw-r--r-- 1 root root 2861222 Dec 8 02:08 NOTICE.txt
-rw-r--r-- 1 root root 844 Dec 8 02:40 README.md

```

---

<div class="post-metadata">

**Author:** ![ACodingfreak](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/acodingfreak/32/130511_2.png) [@ACodingfreak](https://discuss.elastic.co/u/ACodingfreak)\
**Post date:** [January 4, 2024, 2:38pm UTC](https://discuss.elastic.co/t/missing-packetbeat-yml-file-etc-packetbeat/350340/2 "2024-01-04T14:38:52Z")

</div>

In case of filebeats I dont see any issue with the filebeat.yml file when i try installing filebeat via deb package as shown in below logs.

```auto
test@mm310:~/Elastic$ cd fb/
test@mm310:~/Elastic/fb$ ls
test@mm310:~/Elastic/fb$
test@mm310:~/Elastic/fb$
test@mm310:~/Elastic/fb$ curl -L -O https://artifacts.elastic.co/downloads/beats/filebeat/filebeat-8.11.3-amd64.deb
  % Total % Received % Xferd Average Speed Time Time Time Current
                                 Dload Upload Total Spent Left Speed
100 47.8M 100 47.8M 0 0 9309k 0 0:00:05 0:00:05 --:--:-- 10.7M
test@mm310:~/Elastic/fb$ sudo dpkg -i filebeat-8.11.3-amd64.deb
[sudo] password for test:
Selecting previously unselected package filebeat.
(Reading database ... 208561 files and directories currently installed.)
Preparing to unpack filebeat-8.11.3-amd64.deb ...
Unpacking filebeat (8.11.3) ...
Setting up filebeat (8.11.3) ...
test@mm310:~/Elastic/fb$
test@mm310:~/Elastic/fb$
test@mm310:~/Elastic/fb$ cd /etc/filebeat/
test@mm310:/etc/filebeat$ ls
fields.yml filebeat.reference.yml filebeat.yml modules.d
test@mm310:/etc/filebeat$
test@mm310:/etc/filebeat$

```
