無法在彈性 7.5.1 中啟動 Packetbeat

Question

我正在使用安裝了 x-pack 的 7.5.1 版彈性堆棧，當我嘗試運行 packetbeat 時出現以下錯誤。

請幫我解決它。

2020-01-08T11:56:23.202+0530    ERROR   instance/beat.go:916    Exiting: Sniffer main loop failed: Error starting sniffer: any: You don't have permission to capture on that device (socket: Operation not permitted)
Exiting: Sniffer main loop failed: Error starting sniffer: any: You don't have permission to capture on that device (socket: Operation not permitted)

Answer 1

使用 Root 訪問權限啟動 Pakcketbeat。 它將解決這個權限問題。

從錯誤中可以看出：

 Error starting sniffer: any: You don't have permission to capture on that device (socket: Operation not permitted

當前用戶無權捕獲套接字活動。