# Install metricbeat with Homebrew, chocolatey, Nix Collect metrics from your systems and services. Version 9.4.3 via Homebrew; verified 2026-06-30. ## Install ```sh sudo av install brew:metricbeat ``` Additional install commands: ### macOS - Homebrew (100%): ```sh brew install metricbeat ``` Evidence: local Homebrew formula metadata ### Linux - Nix (92%): ```sh nix profile install nixpkgs#metricbeat ``` Evidence: nixpkgs package indexes: metricbeat from https://raw.githubusercontent.com/NixOS/nixpkgs/master/pkgs/top-level/all-packages.nix ### Windows - Chocolatey (92%): ```sh choco install metricbeat ``` Evidence: Chocolatey community package catalog: metricbeat from http://community.chocolatey.org/api/v2/Packages?$filter=IsLatestVersion&$select=Id&$top=1000&$skiptoken='11','meshlab' ## Package facts - **Package key:** brew:metricbeat - **Package manager:** Homebrew - **Package manager page:** - **Version:** 9.4.3 - **Source summary:** Collect metrics from your systems and services - **Homepage:** - **Repository:** - **Upstream docs:** - **License:** Apache-2.0 - **Source archive:** - **Last updated:** 2026-06-30T18:45:32Z - **Generated:** 2026-07-08T07:18:31+00:00 ## Executables - metricbeat (cli) - metricbeat (alias) ## Build dependencies - go - mage ## Install behavior - Post-install hook: not defined - Service: declared - Bottle: available on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux ## Freshness - Page generated: 2026-07-08 - Package-manager version: 9.4.3 - Package-manager updated: 2026-06-30 - Local data: ok - Upstream repository: https://github.com/elastic/beats - info: No cached GitHub release or tag data was available. ## Project history and usage Metricbeat is one of Elastic's Beats, the lightweight data shippers used with Elasticsearch, Logstash, and Kibana. Elastic documentation defines it as a shipper installed on servers to collect operating-system and service metrics and send them to outputs such as Elasticsearch or Logstash; the Beats platform describes the broader family as small agents for moving operational data from many machines. ### Project history Metricbeat entered the Elastic Stack 5.0 line as the successor to Topbeat. Elastic's 5.0.0 release material says Metricbeat replaced Topbeat as the primary metrics collection tool in the stack, preserving host and process resource statistics while adding modules for systems such as Apache, HAProxy, MongoDB, MySQL, Nginx, PostgreSQL, Redis, and ZooKeeper. A 5.0 alpha announcement introduced it as an extension of Topbeat for server-service metrics. ### How it is used In practice, Metricbeat is deployed as an agent on hosts, containers, or service nodes, with modules enabling metricsets for specific systems. It can send metrics directly to Elasticsearch or through Logstash, Redis, or Kafka, and it is often used to populate Elastic observability dashboards and stack monitoring indexes. In package-manager terms it is the metrics-focused Beat, adjacent to Filebeat for logs, Packetbeat for network data, Heartbeat for uptime, and Auditbeat for audit/security events. ### Sources - - - - - - - ## Security Notes formula declares a Homebrew service. - **Geiger risk:** orange / medium - formula declares a Homebrew service ## Configuration and credential file locations These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval. ## Configuration files - Linux: /etc/metricbeat/metricbeat.yml, /etc/metricbeat/modules.d/*.yml - Unix: {path.home}/metricbeat.yml, {path.config}/modules.d/*.yml - Windows: {path.home}\metricbeat.yml, {path.config}\modules.d\*.yml ## Credential files - Linux: /var/lib/metricbeat/metricbeat.keystore - Unix: {path.data}/metricbeat.keystore - Windows: {path.data}\metricbeat.keystore ## Source Database Details - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** metricbeat - **Version Scheme:** 0 - **Revision:** 0 - **Head Version:** HEAD - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** no - **URL Keys:** head, stable ## Other Package-Manager Records - Nix - metricbeat: normalized package name match | nixpkgs package indexes: metricbeat from https://raw.githubusercontent.com/NixOS/nixpkgs/master/pkgs/top-level/all-packages.nix - Chocolatey - metricbeat: normalized package name match | Chocolatey community package catalog: metricbeat from http://community.chocolatey.org/api/v2/Packages?$filter=IsLatestVersion&$select=Id&$top=1000&$skiptoken='11','meshlab' ## Related links - [Secret-risk packages](https://www.automicvault.com/pkg/secret-risk-packages/) - Has protected-tool coverage, approval-gate, or non-low Geiger security signals. - [Terminal utility packages](https://www.automicvault.com/pkg/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [Networking and protocol packages](https://www.automicvault.com/pkg/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata. - [Homebrew utility packages](https://www.automicvault.com/pkg/brew-utility-packages/) - Matched Homebrew package provider. - [go](https://www.automicvault.com/pkg/brew/go/) - Build dependency declared by Homebrew. - [mage](https://www.automicvault.com/pkg/brew/mage/) - Build dependency declared by Homebrew. - [auditbeat](https://www.automicvault.com/pkg/brew/auditbeat/) - Shares the same upstream source repository. - [filebeat](https://www.automicvault.com/pkg/brew/filebeat/) - Shares the same upstream source repository. - [heartbeat](https://www.automicvault.com/pkg/brew/heartbeat/) - Shares the same upstream source repository. - [packetbeat](https://www.automicvault.com/pkg/brew/packetbeat/) - Shares the same upstream source repository. - [bpftop](https://www.automicvault.com/pkg/brew/bpftop/) - Shares av.db curated category or tags: cli, monitoring, observability, system. - [collectd](https://www.automicvault.com/pkg/brew/collectd/) - Shares av.db curated category or tags: cli, metrics, monitoring, system. - [netdata](https://www.automicvault.com/pkg/brew/netdata/) - Shares av.db curated category or tags: cli, metrics, monitoring, observability, system. - [rhit](https://www.automicvault.com/pkg/brew/rhit/) - Shares av.db curated category or tags: cli, observability, system. - [sysdig](https://www.automicvault.com/pkg/brew/sysdig/) - Shares av.db curated category or tags: cli, observability, system. - [zabbix](https://www.automicvault.com/pkg/brew/zabbix/) - Shares av.db curated category or tags: cli, metrics, monitoring, observability, system. - [ctop](https://www.automicvault.com/pkg/brew/ctop/) - Shares av.db curated category or tags: cli, metrics, monitoring, system. - [node_exporter](https://www.automicvault.com/pkg/brew/node-exporter/) - Shares av.db curated category or tags: cli, metrics, monitoring, system. ## Combined YAML source View the package source record on GitHub. [combined/metricbeat.yml](https://github.com/automic-vault/db/blob/main/combined/metricbeat.yml) ## Sources - Nucleus package database - Geiger risk classifier - package-page enrichment - curated configuration and credential file locations - curated package history - package version freshness - av.db category and tag curation - package relationship graph - external package-manager database matches - cross-ecosystem install command graph