# Auditbeat: system/socket dataset setup failed - guess\_inet\_sock failed: timeout while waiting

**URL:** <https://discuss.elastic.co/t/auditbeat-system-socket-dataset-setup-failed-guess-inet-sock-failed-timeout-while-waiting/347850>\
**Category:** Beats\
**Tags:** auditbeat\
**Created:** [November 23, 2023, 11:57am UTC](https://discuss.elastic.co/t/auditbeat-system-socket-dataset-setup-failed-guess-inet-sock-failed-timeout-while-waiting/347850 "2023-11-23T11:57:52Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Stefan\_Bauer](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stefan_bauer/32/46221_2.png) [@Stefan\_Bauer](https://discuss.elastic.co/u/Stefan_Bauer)\
**Post date:** [November 23, 2023, 11:57am UTC](https://discuss.elastic.co/t/auditbeat-system-socket-dataset-setup-failed-guess-inet-sock-failed-timeout-while-waiting/347850/1 "2023-11-23T11:57:52Z")

</div>

Hi folks,

auditbeat fails on 2 Ubuntu 20 systems with the following errors several times a day:

`auditbeat[1929153]: {"log.level":"error","@timestamp":"2023-11-23T08:29:49.984+0100","log.origin":{"file.name":"instance/beat.go","file.line":1274},"message":"Exiting: 1 error: system/socket dataset setup failed: unable to guess one or more required parameters: guess_inet_sock failed: timeout while waiting for event","service.name":"auditbeat","ecs.version":"1.6.0"}`

```auto
auditbeat version 8.9.0 (amd64), libbeat 8.9.0 [dd50d49baeb99e0d21a31adb621908a7f0091046 built 2023-07-19 01:22:57 +0000 UTC]
Linux 5.4.0-166-generic #183-Ubuntu SMP Mon Oct 2 11:28:33 UTC 2023 x86_64 x86_64 x86_64 GNU/Linux

```

```auto
# cat /sys/kernel/debug/kprobes/enabled
1
# cat /proc/sys/kernel/ftrace_enabled
1

```

any help is greatly appreciated.

Stefan

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [December 21, 2023, 1:58pm UTC](https://discuss.elastic.co/t/auditbeat-system-socket-dataset-setup-failed-guess-inet-sock-failed-timeout-while-waiting/347850/2 "2023-12-21T13:58:27Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.