sudo apt updatesudo apt upgrade filebeatsudo systemctl restart filebeatfilebeat versionwget https://artifacts.elastic.co/downloads/beats/filebeat/filebeat-<version>-linux-x86_64.deb。/etc/filebeat/和數據目錄/var/lib/filebeat/。sudo dpkg -i filebeat-<version>-linux-x86_64.deb，解決依賴問題用sudo apt-get install -f。sudo systemctl start filebeat并驗證狀態sudo systemctl status filebeat。/etc/default/filebeat中BEAT_MEMORY_LIMIT參數。queue.type=persisted并調整queue.max_bytes。journalctl -u filebeat -f查看實時日志，或使用Elastic Stack監控指標。注意：更新前務必備份重要數據，若遇依賴問題可參考官方文檔或社區支持。
