# \[Solved\] Filebeat on Raspberry Pi?

**URL:** <https://discuss.elastic.co/t/solved-filebeat-on-raspberry-pi/112099>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [December 16, 2017, 6:23pm UTC](https://discuss.elastic.co/t/solved-filebeat-on-raspberry-pi/112099 "2017-12-16T18:23:09Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![andig](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/andig/32/25705_2.png) [@andig](https://discuss.elastic.co/u/andig)\
**Post date:** [December 16, 2017, 6:23pm UTC](https://discuss.elastic.co/t/solved-filebeat-on-raspberry-pi/112099/1 "2017-12-16T18:23:09Z")

</div>

I'm new to ELK and have problems getting started. I got:

- ELK stack installed on nas via docker
- filebeat compiled from source on mac via docker image and scp'ed to raspberry
- beats git cloned to Raspberry

Did it this way because go build did not produce a binary on the raspi (and no error).

Now trying to run filebeat from the beats/filebeat directory on raspi:

```
2017/12/16 18:17:04.488090 beat.go:635: CRIT Exiting: Error importing Kibana dashboards: fail to import the dashboards in Kibana: Error importing directory /home/pi/beats/filebeat/kibana: No directory /home/pi/beats/filebeat/kibana/default
Exiting: Error importing Kibana dashboards: fail to import the dashboards in Kibana: Error importing directory /home/pi/beats/filebeat/kibana: No directory /home/pi/beats/filebeat/kibana/default
pi@server:~/beats/filebeat $ ls /usr/share/

```

Indeed this folder does not exist. I assume I'm missing some vital step here, maybe due to the failed build on the actual target machine?

Thanks,  
Andreas

---

<div class="post-metadata">

**Author:** ![andig](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/andig/32/25705_2.png) [@andig](https://discuss.elastic.co/u/andig)\
**Post date:** [December 17, 2017, 7:27pm UTC](https://discuss.elastic.co/t/solved-filebeat-on-raspberry-pi/112099/2 "2017-12-17T19:27:17Z")

</div>

I've managed to compile and run filebeat on raspberry. Please feel free to reply below for an in-depth description how to do this.

---

<div class="post-metadata">

**Author:** ![ruflin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ruflin/32/3116_2.png) [@ruflin](https://discuss.elastic.co/u/ruflin)\
**Post date:** [December 19, 2017, 3:47am UTC](https://discuss.elastic.co/t/solved-filebeat-on-raspberry-pi/112099/3 "2017-12-19T03:47:43Z")

</div>

@andig I did run beats myself on Raspberry PI in the past and now that we added quite a few "dependency" files it got a bit trickier to have all files included. One trick to make sure having all files is running `go build` with the right flags for the PI on your machine, use one of the existing tar we ship, replace the binary in there with yours and tar it again. Then you have all the files with the correct paths.

---

<div class="post-metadata">

**Author:** ![andig](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/andig/32/25705_2.png) [@andig](https://discuss.elastic.co/u/andig)\
**Post date:** [December 19, 2017, 10:32pm UTC](https://discuss.elastic.co/t/solved-filebeat-on-raspberry-pi/112099/4 "2017-12-19T22:32:03Z")

</div>

@ruflin great advise, thank you!

My compile instructions (and a bit more) can be found here: [https://gist.github.com/andig/650915e02b18cfe38de6516686977bca](https://gist.github.com/andig/650915e02b18cfe38de6516686977bca)

---

<div class="post-metadata">

**Author:** ![andig](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/andig/32/25705_2.png) [@andig](https://discuss.elastic.co/u/andig)\
**Post date:** [December 21, 2017, 6:31pm UTC](https://discuss.elastic.co/t/solved-filebeat-on-raspberry-pi/112099/5 "2017-12-21T18:31:23Z")

</div>

I've also added a Docker that does the compiling and packaging here: [https://github.com/andig/beats4pi](https://github.com/andig/beats4pi)

---

<div class="post-metadata">

**Author:** ![ruflin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ruflin/32/3116_2.png) [@ruflin](https://discuss.elastic.co/u/ruflin)\
**Post date:** [December 22, 2017, 4:46am UTC](https://discuss.elastic.co/t/solved-filebeat-on-raspberry-pi/112099/6 "2017-12-22T04:46:12Z")

</div>

@andig Thanks for sharing this with the community.

One note: I saw you pointed to Golang 1.8. So far this works fine but I think we will start pretty soon to use Go 1.9 feature, so better jump to 1.9 directly 😉

---

<div class="post-metadata">

**Author:** ![andig](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/andig/32/25705_2.png) [@andig](https://discuss.elastic.co/u/andig)\
**Post date:** [December 22, 2017, 7:32am UTC](https://discuss.elastic.co/t/solved-filebeat-on-raspberry-pi/112099/7 "2017-12-22T07:32:59Z")

</div>

Thanks for the hint- will update.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [January 19, 2018, 7:33am UTC](https://discuss.elastic.co/t/solved-filebeat-on-raspberry-pi/112099/8 "2018-01-19T07:33:11Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
