# SIEM LAB02 Zeek instalation error

**URL:** <https://discuss.elastic.co/t/siem-lab02-zeek-instalation-error/340194>\
**Category:** Elastic Training\
**Created:** [August 6, 2023, 5:52am UTC](https://discuss.elastic.co/t/siem-lab02-zeek-instalation-error/340194 "2023-08-06T05:52:29Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Renato\_Arraes](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/renato_arraes/32/124209_2.png) [@Renato\_Arraes](https://discuss.elastic.co/u/Renato_Arraes)\
**Post date:** [August 6, 2023, 5:52am UTC](https://discuss.elastic.co/t/siem-lab02-zeek-instalation-error/340194/1 "2023-08-06T05:52:29Z")

</div>

Course: Elastic Security Fundamentals: SIEM  
Version: current  
Question: On lab 2 during the installation of zeek, there's a point in wich is requested to run a zeek.sh file, but when i try to run it, i receive the error message "/usr/bin/env: ‘python’: No such file or directory  
mv: cannot stat '/home/ubuntu/scripts/data/http.log': No such file or directory"

for better understanding this is the points informed to run the file:  
"At this point, the module zeek is enabled but is configured with default configuration which will look for any zeek log files in /var/log/bro/current directory.

We have a small script called zeek.sh inside the scripts directory that replays old zeek http.log file and dumps it into /var/log/bro/current directory. Let’s run that  
command:  
cd /home/ubuntu/scripts  
./zeek.sh  
"

After this point that i receive the erro i cannot get any logs of Filebeat on my Kibana

---

<div class="post-metadata">

**Author:** ![Wave](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/wave/32/117242_2.png) [@Wave](https://discuss.elastic.co/u/Wave)\
**Post date:** [August 10, 2023, 4:49pm UTC](https://discuss.elastic.co/t/siem-lab02-zeek-instalation-error/340194/2 "2023-08-10T16:49:09Z")

</div>

Hi @Renato_Arraes,

I have no access to that course, but sounds like python isn't available on that environment. Sometimes python3 is the actual name of the python executable. If you have shell access try running

> which python3

If you get back a path that would at least tell you where to start.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [September 9, 2023, 4:49pm UTC](https://discuss.elastic.co/t/siem-lab02-zeek-instalation-error/340194/3 "2023-09-09T16:49:18Z")

</div>

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.