# Unable to start filebeat

**URL:** <https://discuss.elastic.co/t/unable-to-start-filebeat/102869>\
**Category:** Beats\
**Created:** [October 5, 2017, 4:02pm UTC](https://discuss.elastic.co/t/unable-to-start-filebeat/102869 "2017-10-05T16:02:11Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![vinodjv3](https://avatars.discourse-cdn.com/v4/letter/v/5daacb/32.png) [@vinodjv3](https://discuss.elastic.co/u/vinodjv3)\
**Post date:** [October 5, 2017, 4:02pm UTC](https://discuss.elastic.co/t/unable-to-start-filebeat/102869/1 "2017-10-05T16:02:11Z")

</div>

Downloaded filebeat to Linux machine. Kernel version of the machine is "2.6.18-238.5.1.el5".  
I get error as below.  
ksh\> ./filebeat  
Memory fault

Please suggest

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [October 6, 2017, 1:26am UTC](https://discuss.elastic.co/t/unable-to-start-filebeat/102869/2 "2017-10-06T01:26:08Z")

</div>

That's a very old kernel. What OS, what version?

---

<div class="post-metadata">

**Author:** ![vinodjv3](https://avatars.discourse-cdn.com/v4/letter/v/5daacb/32.png) [@vinodjv3](https://discuss.elastic.co/u/vinodjv3)\
**Post date:** [October 6, 2017, 5:24am UTC](https://discuss.elastic.co/t/unable-to-start-filebeat/102869/3 "2017-10-06T05:24:17Z")

</div>

Below is the OS version.  
ksh\> cat /etc/redhat-release  
Red Hat Enterprise Linux Server release 5.6 (Tikanga)

---

<div class="post-metadata">

**Author:** ![steffens](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/steffens/32/79630_2.png) [@steffens](https://discuss.elastic.co/u/steffens)\
**Post date:** [October 6, 2017, 10:42am UTC](https://discuss.elastic.co/t/unable-to-start-filebeat/102869/4 "2017-10-06T10:42:30Z")

</div>

Seems to be related to the old kernel. The go runtime does not really support older kernels used in Red Hat/Centos 5 releases, due to missing features in these kernels.

---

<div class="post-metadata">

**Author:** ![vinodjv3](https://avatars.discourse-cdn.com/v4/letter/v/5daacb/32.png) [@vinodjv3](https://discuss.elastic.co/u/vinodjv3)\
**Post date:** [October 6, 2017, 1:04pm UTC](https://discuss.elastic.co/t/unable-to-start-filebeat/102869/5 "2017-10-06T13:04:17Z")

</div>

Thank you , Is there a way for the app to directly send the log info to elasticsearch ?

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [October 6, 2017, 8:25pm UTC](https://discuss.elastic.co/t/unable-to-start-filebeat/102869/6 "2017-10-06T20:25:56Z")

</div>

That really depends on too many things for us to answer.

---

<div class="post-metadata">

**Author:** ![vinodjv3](https://avatars.discourse-cdn.com/v4/letter/v/5daacb/32.png) [@vinodjv3](https://discuss.elastic.co/u/vinodjv3)\
**Post date:** [October 9, 2017, 2:26pm UTC](https://discuss.elastic.co/t/unable-to-start-filebeat/102869/7 "2017-10-09T14:26:33Z")

</div>

Is there any reference topic on this regard ?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [October 26, 2017, 4:03pm UTC](https://discuss.elastic.co/t/unable-to-start-filebeat/102869/8 "2017-10-26T16:03:20Z")

</div>

This topic was automatically closed after 21 days. New replies are no longer allowed.