# Install packetbeat with Homebrew, chocolatey, Nix

Lightweight Shipper for Network Data. Version 9.4.4 via Homebrew; verified 2026-07-23. Also installable with nix: nix profile install nixpkgs#packetbeat.

## Install

```sh
sudo av install brew:packetbeat
```

Additional install commands:

### macOS

- Homebrew (100%):

```sh
brew install packetbeat
```

  Evidence: local Homebrew formula metadata

### Linux

- Nix (92%):

```sh
nix profile install nixpkgs#packetbeat
```

  Evidence: nixpkgs package indexes: packetbeat from https://raw.githubusercontent.com/NixOS/nixpkgs/master/pkgs/top-level/all-packages.nix

### Windows

- Chocolatey (92%):

```sh
choco install packetbeat
```

  Evidence: Chocolatey community package catalog: packetbeat from http://community.chocolatey.org/api/v2/Packages?$filter=IsLatestVersion&$select=Id&$top=1000&$skiptoken='11','p4'

## Package facts

- **Package key:** brew:packetbeat
- **Package manager:** Homebrew
- **Version:** 9.4.4
- **Source summary:** Lightweight Shipper for Network Data
- **Homepage:** <https://www.elastic.co/products/beats/packetbeat>
- **Repository:** <https://github.com/elastic/beats>
- **Last updated:** 2026-07-23T10:28:45Z
- **Generated:** 2026-08-03T19:37:03+00:00

## Executables

- packetbeat (alias)

## Install behavior

- Bottle: not available

## Freshness

- Page generated: 2026-08-03
- Package-manager version: 9.4.4

## Security Notes

formula declares a Homebrew service.

- **Geiger risk:** orange / medium
- formula declares a Homebrew service


## Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.


## Configuration files

- Linux: /etc/packetbeat/packetbeat.yml
- macOS: packetbeat.yml in the Packetbeat installation directory
- Windows: C:\Program Files\Packetbeat\packetbeat.yml

## Credential files

- Linux: Packetbeat keystore in the directory defined by path.data
- macOS: Packetbeat keystore in the directory defined by path.data
- Windows: Packetbeat keystore in the directory defined by path.data
## Other Package-Manager Records

- Nix - packetbeat: normalized package name match | nixpkgs package indexes: packetbeat from https://raw.githubusercontent.com/NixOS/nixpkgs/master/pkgs/top-level/all-packages.nix
- Chocolatey - packetbeat: normalized package name match | Chocolatey community package catalog: packetbeat from http://community.chocolatey.org/api/v2/Packages?$filter=IsLatestVersion&$select=Id&$top=1000&$skiptoken='11','p4'


## Combined YAML source

View the package source record on GitHub. [combined/packetbeat.yml](https://github.com/mxcl/pkgdb/blob/main/combined/packetbeat.yml)


## Sources

- pkg.so package database
- Geiger risk classifier
- curated configuration and credential file locations
- pkgdb category and tag curation
- external package-manager database matches
- cross-ecosystem install command graph