arm-beats

Automated Elastic filebeat, metricbeat, heartbeat & packagebeat builds for linux/armv7 & linux/armv6 32bits.

Goal

Currently elasticsearch team do not provide any arm 32bits (armv7 / armv6) builds for filebeat, metricbeat, heartbeat & packagebeat this repository fixes this.

latest builds

official builds

Run filebeat on a raspberry pi

wget https://github.com/kylemclaren/arm-beats/releases/download/v8.3.3/filebeat-8.3.3-linux-armv7l.tar.gz
tar -xf filebeat-8.3.3-linux-armv7l.tar.gz
cd filebeat-8.3.3-linux-armv7l
file ./filebeat

Should return:

./filebeat: ELF 32-bit LSB executable, ARM, EABI5 version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-armhf.so.3, for GNU/Linux 3.2.0, Go BuildID=q4tFca9OleP0Dj0JFsYO/wQvX_IvIiVb7CA7NFq-6/-Rsiwc2soS0qHYJ-YXvB/uOnOPHVTGBXMRzHgpC_p, BuildID[sha1]=0e3df053441d84a4a3e6aa3de827bd6984c2dd3a, not stripped

For more information about how to configure filebeat --> documentation

Run metricbeat on raspberry pi

wget https://github.com/kylemclaren/arm-beats/releases/download/v8.3.3/metricbeat-8.3.3-linux-armv7l.tar.gz
tar -xf metricbeat-8.3.3-linux-armv7l.tar.gz
cd metricbeat-8.3.3-linux-armv7l
file ./metricbeat

Should return:

./metricbeat: ELF 32-bit LSB executable, ARM, EABI5 version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-armhf.so.3, for GNU/Linux 3.2.0, Go BuildID=KYjs2CEqzT9uxFYhahi8/A1OvIW-ClpB3kNBN-iU3/QZUh6d5es2uGo50jjYgF/i5J85A49bJtxHOYThpA7, BuildID[sha1]=6e5aa658d895ea6c01e21286b29faaedd658803f, not stripped

For more information about how to configure metricbeat --> documentation

Builds

This automation script uses emulated (qemu) multi-arch capability of docker. Performance is really not that great, so we only perform go get to build necessary binary file. Finally we patch official elasticsearch (arm64) beat package swapping the main binary.

Reference

• Elastic beat : https://www.elastic.co/beats/
• Built from source : https://github.com/elastic/beats