New

The executive guide to generative AI

Read more
About usPartnersSupport|Login
IMPORTANT: No additional bug fixes or documentation updates will be released for this version. For the latest information, see the current release documentation.
« Quick start: modules for common log formats Set up and run Filebeat »
Elastic Docs ›Filebeat Reference [7.6] ›Get started with Filebeat

Repositories for APT and YUM

edit

Repositories for APT and YUM

edit

We have repositories available for APT and YUM-based distributions. Note that we provide binary packages, but no source packages.

We use the PGP key D88E42B4, Elasticsearch Signing Key, with fingerprint

4609 5ACC 8548 582C 1A26 99A9 D27D 666C D88E 42B4

to sign all our packages. It is available from https://pgp.mit.edu.

APT

edit

To add the Beats repository for APT:

  1. Download and install the Public Signing Key:

    wget -qO - https://artifacts.elastic.co/GPG-KEY-elasticsearch | sudo apt-key add -

  2. You may need to install the apt-transport-https package on Debian before proceeding:

    sudo apt-get install apt-transport-https

  3. Save the repository definition to /etc/apt/sources.list.d/elastic-7.x.list:

    echo "deb https://artifacts.elastic.co/packages/7.x/apt stable main" | sudo tee -a /etc/apt/sources.list.d/elastic-7.x.list

    The package is free to use under the Elastic license. An alternative package which contains only features that are available under the Apache 2.0 license is also available. To install it, use the following sources list:

    echo "deb https://artifacts.elastic.co/packages/oss-7.x/apt stable main" | sudo tee -a /etc/apt/sources.list.d/elastic-7.x.list

    To add the Elastic repository, make sure that you use the echo method shown in the example. Do not use add-apt-repository because it will add a deb-src entry, but we do not provide a source package.

    If you have added the deb-src entry by mistake, you will see an error like the following:

    Unable to find expected entry 'main/source/Sources' in Release file (Wrong sources.list entry or malformed file)

    Simply delete the deb-src entry from the /etc/apt/sources.list file, and the installation should work as expected.

  4. Run apt-get update, and the repository is ready for use. For example, you can install Filebeat by running:

    sudo apt-get update && sudo apt-get install filebeat

  5. To configure Filebeat to start automatically during boot, run:

    sudo systemctl enable filebeat

If your system does not use systemd then run:

+

sudo update-rc.d filebeat defaults 95 10

YUM

edit

To add the Beats repository for YUM:

  1. Download and install the public signing key:

    sudo rpm --import https://packages.elastic.co/GPG-KEY-elasticsearch

  2. Create a file with a .repo extension (for example, elastic.repo) in your /etc/yum.repos.d/ directory and add the following lines:

    [elastic-7.x]
name=Elastic repository for 7.x packages
baseurl=https://artifacts.elastic.co/packages/7.x/yum
gpgcheck=1
gpgkey=https://artifacts.elastic.co/GPG-KEY-elasticsearch
enabled=1
autorefresh=1
type=rpm-md

    The package is free to use under the Elastic license. An alternative package which contains only features that are available under the Apache 2.0 license is also available. To install it, use the following baseurl in your .repo file:

    baseurl=https://artifacts.elastic.co/packages/oss-7.x/yum

    Your repository is ready to use. For example, you can install Filebeat by running:

    sudo yum install filebeat

  3. To configure Filebeat to start automatically during boot, run:

    sudo systemctl enable filebeat

If your system does not use systemd then run:

+

sudo chkconfig --add filebeat
« Quick start: modules for common log formats Set up and run Filebeat »

On this page

Was this helpful?
Feedback