# Auditbeat permission Error

**URL:** <https://discuss.elastic.co/t/auditbeat-permission-error/213318>\
**Category:** Beats\
**Tags:** auditbeat\
**Created:** [December 30, 2019, 8:02am UTC](https://discuss.elastic.co/t/auditbeat-permission-error/213318 "2019-12-30T08:02:21Z")\
**Posts on this page:** 1\
**Showing post:** 2

<div class="post-metadata">

**Author:** ![Dain.Perkins](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dain.perkins/32/41143_2.png) [@Dain.Perkins](https://discuss.elastic.co/u/Dain.Perkins)\
**Post date:** [December 31, 2019, 4:28pm UTC](https://discuss.elastic.co/t/auditbeat-permission-error/213318/2 "2019-12-31T16:28:00Z")

</div>

Hi Vamsi,

I believe the user account has insufficient privileges. Try "sudo " on linux/macos or "run as administrator" (on windows)

Here's a link to some info on running auditbeat as a non-root user as well (linux specific I believe)

> [@Run Auditbeat with non-root user](https://discuss.elastic.co/t/run-auditbeat-with-non-root-user/193707):
>
> Hi Elastic Team, I run ELK on Linux(CentOS7). Because of security issue, I need to run Auditbeat with non-root user. When runing Auditbeat with non-root user, it shows: 2019-08 WARN [cfgwarn] host/host.go:167 BETA: The system/host dataset is beta 2019-08 WARN [cfgwarn] login/login.go:95 BETA: The system/login dataset is beta 2019-08 WARN [cfgwarn] package/package.go:169 BETA: The system/package dataset is beta 2019-08 WARN [cfgwarn] …

Hope this helps!

---

_[View the full topic](https://discuss.elastic.co/t/auditbeat-permission-error/213318)._
