在elastic 7.5.1中无法启动Packetbeat

Question

我使用的是安装了x-pack的7.5.1版本的弹性堆栈，当我试图运行packetbeat时，我得到了以下错误。

请帮我解决这个问题。

2020-01-08T11:56:23.202+0530    ERROR   instance/beat.go:916    Exiting: Sniffer main loop failed: Error starting sniffer: any: You don't have permission to capture on that device (socket: Operation not permitted)
Exiting: Sniffer main loop failed: Error starting sniffer: any: You don't have permission to capture on that device (socket: Operation not permitted)

Answer 1

启动带有Root访问权限的Pakcketbeat。它将解决此权限问题。

从错误中可以明显看出：

 Error starting sniffer: any: You don't have permission to capture on that device (socket: Operation not permitted

当前用户没有捕获套接字活动的权限。