FreeBSD: zeek module on beats

[David P. Discher]

Please vote up the git hub issue - so elastic will move FreeBSD to more of a “Tier 1” support platform.

 - https://twitter.com/daviddpd/status/1199395603639201792 <https://twitter.com/daviddpd/status/1199395603639201792>

 - https://github.com/elastic/beats/issues/1034#issuecomment-558401035 <https://github.com/elastic/beats/issues/1034#issuecomment-558401035>


I tried to force port beats-7.x … but there are goLang compile/types errors on FreeBSD.

--
David P. Discher 
https://davidpdischer.com/


> On Dec 5, 2019, at 7:42 AM, Davide Robusto <daviderobusto at gmail.com> wrote:
> 
> Hi Juraj
> 
> Thanks for the quick response.
> 
> I understand that will not be released immediately, in this regard I have
> two questions:
> 
> 1.       you could give me the instructions to be able to create the ports
> of the version of "beats-7.x" for FreeBSD starting from the port of the
> version 6.8.5 adding all the beats family programs updated to the 7.x
> version? I’m sure I will need to modify also the Makefile and the pkg-plist
> for that.
> 
> 2.       Using the version of filebeat8.0 (master branch) it can be
> installed with a custom path on FreeBSD 12.0 ?
> 
> 
> Best regards
> 
> Davide Robusto
> 
> Il giorno gio 5 dic 2019 alle ore 13:44 Juraj Lutter <juraj at lutter.sk> ha
> scritto:
> 
>> Hi,
>> 
>> not sure what you want to achieve, but:
>> 
>> The sysutils/beats is already at version 6.8.5.
>> For zeek, there already is security/zeek created.
>> 
>> However, zeek module is only supported in beats 7.x (as part of whole ES7
>> stack).
>> 
>> We currently do not have ES7 stack in ports, but if nothing serious
>> happens,
>> I will spend some time on getting ES7 ports polished, tested and commited.
>> 
>> Hope this helped.
>> 
>> —
>> Juraj Lutter
>> URL:  http://www.wilbury.sk/
>> XMPP: juraj at lutter.sk
>> Do not hesitate to inquiry for professional services!
>> 
>>> On 5 Dec 2019, at 12:27, Davide Robusto <daviderobusto at gmail.com> wrote:
>>> 
>>> Hello, my name is Davide.
>>> 
>>> I’m trying to install the ELK stack on FreeBSD but i have some problems.
>>> 
>>> In particular my problems it concernes “Beats” and his version on
>> FreeBSD.
>>> 
>>> I read on the web that the ports’s last version released of “Beats” is
>>> 6.8.5 but in this one the module “Zeek” is not supported, so i ask you if
>>> it’s possible to explain me how I can make an upgraded version of the
>> ports
>>> starting from the 6.8.5.
>>> 
>>> My attempt was a bit forcefull because i download the last version of
>>> “Beats”, i build all files (like filebeat, metricbeat etc with the
>> command
>>> gmake) but after that i dont like too much to move the binary file into
>> the
>>> installation location of (for example) beats-6.8.5.
>>> 
>>> Could you explain how to create the “ports for beats-6.8.5”, please?
>>> 
>>> I hope that the problem’s resolution can be helpful to the comunity of
>>> FreeBSD and also help you guys to release a new version of “beats” on
>>> FreeBSD.
>>> 
>>> Best regards,
>>> Davide Robusto
>>> _______________________________________________
>>> freebsd-elastic at freebsd.org mailing list
>>> https://lists.freebsd.org/mailman/listinfo/freebsd-elastic
>>> To unsubscribe, send any mail to "
>> freebsd-elastic-unsubscribe at freebsd.org"
>> 
>> 
> _______________________________________________
> freebsd-elastic at freebsd.org mailing list
> https://lists.freebsd.org/mailman/listinfo/freebsd-elastic
> To unsubscribe, send any mail to "freebsd-elastic-unsubscribe at freebsd.org"