Want to upgrade? We’ll give you a hand. Migration Guide »
- GA Release
- Run with Docker
AARCH64 downloads are available as a beta release and should not be used in production.
View the detailed release notes here.
Not the version you're looking for? View past releases.
Download and unpack Auditbeat
Edit the auditbeat.yml configuration file
Start the daemon by running
sudo ./auditbeat -e -c auditbeat.yml