Unable to start Packetbeat in elastic 7.5.1

862 Views Asked by At

I am using elastic stack of version 7.5.1 with x-pack installed and i'm getting the following error when i trying to run packetbeat.

Please help me solve it.

2020-01-08T11:56:23.202+0530    ERROR   instance/beat.go:916    Exiting: Sniffer main loop failed: Error starting sniffer: any: You don't have permission to capture on that device (socket: Operation not permitted)
Exiting: Sniffer main loop failed: Error starting sniffer: any: You don't have permission to capture on that device (socket: Operation not permitted)
1

There are 1 best solutions below

0
Umar Hayat On

Start Pakcketbeat with Root access. It will solve this permission problem.

It is obvious from error:

 Error starting sniffer: any: You don't have permission to capture on that device (socket: Operation not permitted

That the current user does not have permission to capture socket activities.