I want to install filebeat on my OpenWRT router. My router have MT7621AT SOC. I am
using Phicomm K2P router.
Thanks in advance.
Can you tell us what that is?
My web searches show that it's a log exporter. I'm not sure why you want to add software, when OpenWrt already does logging.
Nonetheless, if it's a software that doesn't exist in the Package Table, you'll have to cross compile it.
i want to use filebeat to collect snort data with the help of filebeat i will export data to logstash (external server for it) and show visuals on mongocharts.
i have read the documentation. i am stucked on make file. how to create a make file for filebeat package.
Is this the software you want to have on OpenWRT?
If you are using a x86 or arm device, then you can install docker and provision filebeat from within a container.
yes i want filebeat on my openwrt.
i am using MIPS. here is the CPU information
system type : MediaTek MT7621 ver:1 eco:3
machine : Phicomm K2P
processor : 0
cpu model : MIPS 1004Kc V2.15
BogoMIPS : 584.90
wait instruction : yes
microsecond timers : yes
tlb_entries : 32
extra interrupt vector : yes
hardware watchpoint : yes, count: 4, address/irw mask: [0x0ffc, 0x0ffc, 0x0ffb, 0x0ffb]
isa : mips1 mips2 mips32r1 mips32r2
ASEs implemented : mips16 dsp mt
shadow register sets : 1
kscratch registers : 0
package : 0
core : 0
VPE : 0
VCED exceptions : not available
VCEI exceptions : not available
processor : 1
cpu model : MIPS 1004Kc V2.15
BogoMIPS : 584.90
wait instruction : yes
microsecond timers : yes
tlb_entries : 32
extra interrupt vector : yes
hardware watchpoint : yes, count: 4, address/irw mask: [0x0ffc, 0x0ffc, 0x0ffb, 0x0ffb]
isa : mips1 mips2 mips32r1 mips32r2
ASEs implemented : mips16 dsp mt
shadow register sets : 1
kscratch registers : 0
package : 0
core : 0
VPE : 1
VCED exceptions : not available
VCEI exceptions : not available
processor : 2
cpu model : MIPS 1004Kc V2.15
BogoMIPS : 584.90
wait instruction : yes
microsecond timers : yes
tlb_entries : 32
extra interrupt vector : yes
hardware watchpoint : yes, count: 4, address/irw mask: [0x0ffc, 0x0ffc, 0x0ffb, 0x0ffb]
isa : mips1 mips2 mips32r1 mips32r2
ASEs implemented : mips16 dsp mt
shadow register sets : 1
kscratch registers : 0
package : 0
core : 1
VPE : 0
VCED exceptions : not available
VCEI exceptions : not available
processor : 3
cpu model : MIPS 1004Kc V2.15
BogoMIPS : 584.90
wait instruction : yes
microsecond timers : yes
tlb_entries : 32
extra interrupt vector : yes
hardware watchpoint : yes, count: 4, address/irw mask: [0x0ffc, 0x0ffc, 0x0ffb, 0x0ffb]
isa : mips1 mips2 mips32r1 mips32r2
ASEs implemented : mips16 dsp mt
shadow register sets : 1
kscratch registers : 0
package : 0
core : 1
VPE : 1
VCED exceptions : not available
VCEI exceptions : not available
You need to create a package with a Makefile.
You should take a look into the packages repo for examples how to build software that is written in go for your mips arch...
For example the docker package under utils/docker-ce.
okay i will take a look and let you know
any success on building this package or installing on MIPS?
sadly a big no. 
Another way to collect logs on elastic search can be syslog-ng + logstash :
- https://www.elastic.co/guide/en/logstash/current/plugins-inputs-syslog.html
- https://openwrt.org/docs/guide-user/perf_and_log/log.syslog-ng3
As logstash can be outside openwrt, only syslog-ng is needed on the router.
It seems a syslog-ng server can do the job too : https://www.syslog-ng.com/community/b/blog/posts/logging-to-elasticsearch-made-simple-with-syslog-ng (I don't know if logstash is needed).