Elastic does not provide Filebeat binaries for ARMv7. Luckily, Filebeat can easily be cross-compiled with: ```bash # ----- Instantiate an immutable Go container for cross-compilation ----- # mkdir build && cd $_ docker run -it --rm -v `pwd`:/build golang:1.9 /bin/bash # ----- Inside Go container ----- # go get github.com/elastic/beats cd /go/src/github.com/elastic/beats/filebeat/ git checkout v6.2.2 GOARCH=arm go build cp filebeat /build exit # ----- Verify the output file ----- # file filebeat #filebeat: ELF 32-bit LSB executable, ARM, EABI5 version 1 (SYSV), statically linked, not stripped ``` The newly built Filebeat binary can then be uploaded to the remote PCM3, for example with http://transfer.sh On the PCM3: - Download the official 32-bit Linux archive from https://www.elastic.co/downloads/beats/filebeat. Extract the archive and replace the Filebeat binary with the one you cross-compiled and uploaded. - Install Filebeat by following the Mac instructions at https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-installation.html - Configure Filebeat as described in the **Using Filebeat** section at https://logz.io/blog/docker-logging/ - Run Filebeat and confirm your logs show up in Kibana at `elk_stack_ip:5601` with a `filebeat-*` index pattern.