elasticsearch - 无法在弹性7.5.1中启动Packetbeat

Question

我正在使用安装了x-pack的7.5.1版本的 flex 堆栈，并且在尝试运行packetbeat时遇到以下错误。

请帮我解决。

2020-01-08T11:56:23.202+0530    ERROR   instance/beat.go:916    Exiting: Sniffer main loop failed: Error starting sniffer: any: You don't have permission to capture on that device (socket: Operation not permitted)
Exiting: Sniffer main loop failed: Error starting sniffer: any: You don't have permission to capture on that device (socket: Operation not permitted)

Answer 1

从根访问权限启动Pakcketbeat。它将解决此权限问题。

从错误显而易见:

 Error starting sniffer: any: You don't have permission to capture on that device (socket: Operation not permitted

当前用户无权捕获套接字 Activity 。