elasticsearch - 无法在弹性 7.5.1 中启动 Packetbeat

Question

我正在使用安装了 x-pack 的 7.5.1 版弹性堆栈，当我尝试运行 packetbeat 时出现以下错误。

请帮我解决它。

2020-01-08T11:56:23.202+0530    ERROR   instance/beat.go:916    Exiting: Sniffer main loop failed: Error starting sniffer: any: You don't have permission to capture on that device (socket: Operation not permitted)
Exiting: Sniffer main loop failed: Error starting sniffer: any: You don't have permission to capture on that device (socket: Operation not permitted)

Answer 1

以 Root 访问权限启动 Pakcketbeat。它将解决这个权限问题。

从错误中可以明显看出：

 Error starting sniffer: any: You don't have permission to capture on that device (socket: Operation not permitted

即当前用户无权捕获套接字活动。