无法在弹性 7.5.1 中启动 Packetbeat

Question

I am using elastic stack of version 7.5.1 with x-pack installed and i'm getting the following error when i trying to run packetbeat.

Please help me solve it.

2020-01-08T11:56:23.202+0530    ERROR   instance/beat.go:916    Exiting: Sniffer main loop failed: Error starting sniffer: any: You don't have permission to capture on that device (socket: Operation not permitted)
Exiting: Sniffer main loop failed: Error starting sniffer: any: You don't have permission to capture on that device (socket: Operation not permitted)

Answer 1

Start Pakcketbeat with Root access. It will solve this permission problem.

It is obvious from error:

 Error starting sniffer: any: You don't have permission to capture on that device (socket: Operation not permitted

That the current user does not have permission to capture socket activities.