Auditbeat won't start on deb 8_11

Elastic Stack Beats
1

Attempts to start auditbeat on this system give these errors:

instance/beat.go:916 Exiting: 1 error: 1 error: system/socket dataset setup failed: unable to guess one or more required parameters: guess_sk_buff_proto failed: timeout while waiting for trigger to complete

Suggestions on how to get around this?

 #  apt list --installed | grep beat

auditbeat/stable,now 7.5.0 amd64 [installed]
2

Can you share the output of running auditbeat in debug mode? auditbeat run -e -d '*'.

Also, does setting socket.enable_ipv6: false make it work?

3

This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.