# Segfault when starting filebeat on RHEL5.5 **URL:** \ **Category:** Beats\ **Tags:** filebeat\ **Created:** [January 14, 2016, 6:21pm UTC](https://discuss.elastic.co/t/segfault-when-starting-filebeat-on-rhel5-5/39258 "2016-01-14T18:21:15Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![jkpaye](https://avatars.discourse-cdn.com/v4/letter/j/8e8cbc/32.png) [@jkpaye](https://discuss.elastic.co/u/jkpaye)\ **Post date:** [January 14, 2016, 6:21pm UTC](https://discuss.elastic.co/t/segfault-when-starting-filebeat-on-rhel5-5/39258/1 "2016-01-14T18:21:15Z")
Having issues getting filebeat to run on RHEL5.5. Running kernel 2.6.18-238. Any ideas? strace -f /usr/bin/filebeat -c /etc/filebeat/filebeat.yml -e figtest execve("/usr/bin/filebeat", ["/usr/bin/filebeat", "-c", "/etc/filebeat/filebeat.yml",", "-configtest"], [/\* 23 vars \*/]) = 0 brk(0) = 0x18473000 mmap(NULL, 4096, PROT\_READ|PROT\_WRITE, MAP\_PRIVATE|MAP\_ANONYMOUS, -1, 0) = 0x2b63b1ce mmap(NULL, 4096, PROT\_READ|PROT\_WRITE, MAP\_PRIVATE|MAP\_ANONYMOUS, -1, 0) = 0x2b63b1ce access("/etc/ld.so.preload", R\_OK) = -1 ENOENT (No such file or directory) open("/etc/ld.so.cache", O\_RDONLY) = 3 fstat(3, {st\_mode=S\_IFREG|0644, st\_size=64050, ...}) = 0 mmap(NULL, 64050, PROT\_READ, MAP\_PRIVATE, 3, 0) = 0x2b63b1cec000 close(3) = 0 open("/lib64/libpthread.so.0", O\_RDONLY) = 3 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0\>\0\1\0\0\0\240W\00076\0\0\0"..., 832) = fstat(3, {st\_mode=S\_IFREG|0755, st\_size=145824, ...}) = 0 mmap(0x3637000000, 2204528, PROT\_READ|PROT\_EXEC, MAP\_PRIVATE|MAP\_DENYWRITE, 3, 0) = 07000000 mprotect(0x3637016000, 2093056, PROT\_NONE) = 0 mmap(0x3637215000, 8192, PROT\_READ|PROT\_WRITE, MAP\_PRIVATE|MAP\_FIXED|MAP\_DENYWRITE, 315000) = 0x3637215000 mmap(0x3637217000, 13168, PROT\_READ|PROT\_WRITE, MAP\_PRIVATE|MAP\_FIXED|MAP\_ANONYMOUS, 0) = 0x3637217000 close(3) = 0 open("/lib64/libc.so.6", O\_RDONLY) = 3 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0\>\0\1\0\0\0\220\332A66\0\0\0"..., 832) = fstat(3, {st\_mode=S\_IFREG|0755, st\_size=1722304, ...}) = 0 mmap(0x3636400000, 3502424, PROT\_READ|PROT\_EXEC, MAP\_PRIVATE|MAP\_DENYWRITE, 3, 0) = 06400000 mprotect(0x363654e000, 2097152, PROT\_NONE) = 0 mmap(0x363674e000, 20480, PROT\_READ|PROT\_WRITE, MAP\_PRIVATE|MAP\_FIXED|MAP\_DENYWRITE, x14e000) = 0x363674e000 mmap(0x3636753000, 16728, PROT\_READ|PROT\_WRITE, MAP\_PRIVATE|MAP\_FIXED|MAP\_ANONYMOUS, 0) = 0x3636753000 close(3) = 0 mmap(NULL, 4096, PROT\_READ|PROT\_WRITE, MAP\_PRIVATE|MAP\_ANONYMOUS, -1, 0) = 0x2b63b1cf mmap(NULL, 4096, PROT\_READ|PROT\_WRITE, MAP\_PRIVATE|MAP\_ANONYMOUS, -1, 0) = 0x2b63b1cf arch\_prctl(ARCH\_SET\_FS, 0x2b63b1cfcb10) = 0 mprotect(0x363674e000, 16384, PROT\_READ) = 0 mprotect(0x3637215000, 4096, PROT\_READ) = 0 mprotect(0x363621b000, 4096, PROT\_READ) = 0 munmap(0x2b63b1cec000, 64050) = 0 set\_tid\_address(0x2b63b1cfcba0) = 8810 set\_robust\_list(0x2b63b1cfcbb0, 0x18) = 0 futex(0x7fffad7d7f0c, FUTEX\_WAKE\_PRIVATE, 1) = 0 rt\_sigaction(SIGRTMIN, {0x3637005380, [], SA\_RESTORER|SA\_SIGINFO, 0x363700eb10}, NULL = 0 rt\_sigaction(SIGRT\_1, {0x36370052b0, [], SA\_RESTORER|SA\_RESTART|SA\_SIGINFO, 0x363700e, NULL, 8) = 0 rt\_sigprocmask(SIG\_UNBLOCK, [RTMIN RT\_1], NULL, 8) = 0 getrlimit(RLIMIT\_STACK, {rlim\_cur=10240\*1024, rlim\_max=RLIM\_INFINITY}) = 0 sched\_getaffinity(0, 8192, { ffff, 0, 0, 0 }) = 32 mmap(0xc000000000, 65536, PROT\_NONE, MAP\_PRIVATE|MAP\_ANONYMOUS, -1, 0) = 0xc000000000 munmap(0xc000000000, 65536) = 0 mmap(NULL, 262144, PROT\_READ|PROT\_WRITE, MAP\_PRIVATE|MAP\_ANONYMOUS, -1, 0) = 0x2b63b100 mmap(0xc820000000, 1048576, PROT\_READ|PROT\_WRITE, MAP\_PRIVATE|MAP\_ANONYMOUS, -1, 0) =820000000 mmap(0xc81fff8000, 32768, PROT\_READ|PROT\_WRITE, MAP\_PRIVATE|MAP\_ANONYMOUS, -1, 0) = 0fff8000 mmap(0xc000000000, 4096, PROT\_READ|PROT\_WRITE, MAP\_PRIVATE|MAP\_ANONYMOUS, -1, 0) = 0x000000 mmap(NULL, 65536, PROT\_READ|PROT\_WRITE, MAP\_PRIVATE|MAP\_ANONYMOUS, -1, 0) = 0x2b63b1d0 --- SIGSEGV (Segmentation fault) @ 0 (0) --- +++ killed by SIGSEGV +++ ---
**Author:** ![andrewkroh](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/andrewkroh/32/3784_2.png) [@andrewkroh](https://discuss.elastic.co/u/andrewkroh)\ **Post date:** [January 14, 2016, 8:51pm UTC](https://discuss.elastic.co/t/segfault-when-starting-filebeat-on-rhel5-5/39258/2 "2016-01-14T20:51:38Z")
Hi @jkpaye, please see [https://github.com/elastic/beats/issues/727](https://github.com/elastic/beats/issues/727). I think you need a slightly newer kernel. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [July 5, 2017, 9:56pm UTC](https://discuss.elastic.co/t/segfault-when-starting-filebeat-on-rhel5-5/39258/3 "2017-07-05T21:56:41Z")