Before you begin: If you haven’t installed the Elastic Stack, do that now. See Getting started with the Elastic Stack.
To download and install Filebeat, use the commands that work with your system.
curl -L -O https://artifacts.elastic.co/downloads/beats/filebeat/filebeat-7.0.1-amd64.deb sudo dpkg -i filebeat-7.0.1-amd64.deb
curl -L -O https://artifacts.elastic.co/downloads/beats/filebeat/filebeat-7.0.1-x86_64.rpm sudo rpm -vi filebeat-7.0.1-x86_64.rpm
curl -L -O https://artifacts.elastic.co/downloads/beats/filebeat/filebeat-7.0.1-darwin-x86_64.tar.gz tar xzvf filebeat-7.0.1-darwin-x86_64.tar.gz
curl -L -O https://artifacts.elastic.co/downloads/beats/filebeat/filebeat-7.0.1-linux-x86_64.tar.gz tar xzvf filebeat-7.0.1-linux-x86_64.tar.gz
See Running on Docker for deploying Docker containers.
See Running on Kubernetes for deploying with Kubernetes.
- Download the Filebeat Windows zip file from the downloads page.
Extract the contents of the zip file into
- Open a PowerShell prompt as an Administrator (right-click the PowerShell icon and select Run As Administrator).
From the PowerShell prompt, run the following commands to install Filebeat as a Windows service:
PS > cd 'C:\Program Files\Filebeat' PS C:\Program Files\Filebeat> .\install-service-filebeat.ps1
If script execution is disabled on your system, you need to set the execution policy for the current session to allow the script to run. For example:
PowerShell.exe -ExecutionPolicy UnRestricted -File .\install-service-filebeat.ps1.