Want to upgrade? We’ll give you a hand. Migration Guide »
- GA Release
- Preview Release
- Run with Docker
This default distribution is governed by the Elastic License, and includes the full set of free features.
AARCH64 downloads are available as a beta release and should not be used in production.
View the detailed release notes here.
Download and unpack Auditbeat
Edit the auditbeat.yml configuration file
Start the daemon by running
sudo ./auditbeat -e -c auditbeat.yml