无法在弹性7.5.1中启动Packetbeat

Question

我正在使用安装了x-pack的7.5.1版的弹性堆栈，并且在尝试运行packetbeat时出现以下错误。

请帮助我解决。

2020-01-08T11:56:23.202+0530    ERROR   instance/beat.go:916    Exiting: Sniffer main loop failed: Error starting sniffer: any: You don't have permission to capture on that device (socket: Operation not permitted)
Exiting: Sniffer main loop failed: Error starting sniffer: any: You don't have permission to capture on that device (socket: Operation not permitted)

Answer 1

使用根访问权限启动Pakcketbeat。它将解决此权限问题。

从错误显而易见：

 Error starting sniffer: any: You don't have permission to capture on that device (socket: Operation not permitted

当前用户无权捕获套接字活动。