# Config file ownership and permissions- Filebeat

**URL:** <https://discuss.elastic.co/t/config-file-ownership-and-permissions-filebeat/131889>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [May 15, 2018, 8:49am UTC](https://discuss.elastic.co/t/config-file-ownership-and-permissions-filebeat/131889 "2018-05-15T08:49:07Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![Shatakshi\_Shukla](https://avatars.discourse-cdn.com/v4/letter/s/8baadc/32.png) [@Shatakshi\_Shukla](https://discuss.elastic.co/u/Shatakshi_Shukla)\
**Post date:** [May 15, 2018, 8:49am UTC](https://discuss.elastic.co/t/config-file-ownership-and-permissions-filebeat/131889/1 "2018-05-15T08:49:07Z")

</div>

**Filebeat Configuration**

shatakshis-MacBook-Air:filebeat-6.2.4-darwin-x86\_64 shatakshishukla$ vi filebeat.yml shatakshis-MacBook-Air:filebeat-6.2.4-darwin-x86\_64 shatakshishukla$ sudo ./filebeat -e -c filebeat.yml -d "publish" Password: Exiting: error loading config file: config file ("filebeat.yml") must be owned by the beat user (uid=0) or root shatakshis-MacBook-Air:filebeat-6.2.4-darwin-x86\_64 shatakshishukla$ chown 501 filebeat.yml shatakshis-MacBook-Air:filebeat-6.2.4-darwin-x86\_64 shatakshishukla$ sudo ./filebeat -e -c filebeat.yml -d "publish" Exiting: error loading config file: config file ("filebeat.yml") must be owned by the beat user (uid=0) or root shatakshis-MacBook-Air:filebeat-6.2.4-darwin-x86\_64 shatakshishukla$ chown 0 filebeat.yml chown: filebeat.yml: Operation not permitted shatakshis-MacBook-Air:filebeat-6.2.4-darwin-x86\_64 shatakshishukla$

## shows operation denied

---

<div class="post-metadata">

**Author:** ![ruflin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ruflin/32/3116_2.png) [@ruflin](https://discuss.elastic.co/u/ruflin)\
**Post date:** [May 15, 2018, 1:31pm UTC](https://discuss.elastic.co/t/config-file-ownership-and-permissions-filebeat/131889/2 "2018-05-15T13:31:54Z")

</div>

What is the question? The error message explains it pretty well:

```auto
 error loading config file: config file ("filebeat.yml") must be owned by the beat user (uid=0) or root 

```

---

<div class="post-metadata">

**Author:** ![Shatakshi\_Shukla](https://avatars.discourse-cdn.com/v4/letter/s/8baadc/32.png) [@Shatakshi\_Shukla](https://discuss.elastic.co/u/Shatakshi_Shukla)\
**Post date:** [May 15, 2018, 2:12pm UTC](https://discuss.elastic.co/t/config-file-ownership-and-permissions-filebeat/131889/3 "2018-05-15T14:12:48Z")

</div>

Thanks for the consideration

It would be of great help if you could help me with this .

---

<div class="post-metadata">

**Author:** ![ruflin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ruflin/32/3116_2.png) [@ruflin](https://discuss.elastic.co/u/ruflin)\
**Post date:** [May 16, 2018, 12:10pm UTC](https://discuss.elastic.co/t/config-file-ownership-and-permissions-filebeat/131889/4 "2018-05-16T12:10:51Z")

</div>

As it states in the error message, you need to change the owner of the file.

---

<div class="post-metadata">

**Author:** ![Shatakshi\_Shukla](https://avatars.discourse-cdn.com/v4/letter/s/8baadc/32.png) [@Shatakshi\_Shukla](https://discuss.elastic.co/u/Shatakshi_Shukla)\
**Post date:** [May 16, 2018, 2:04pm UTC](https://discuss.elastic.co/t/config-file-ownership-and-permissions-filebeat/131889/5 "2018-05-16T14:04:20Z")

</div>

How ?

---

<div class="post-metadata">

**Author:** ![ruflin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ruflin/32/3116_2.png) [@ruflin](https://discuss.elastic.co/u/ruflin)\
**Post date:** [May 16, 2018, 7:14pm UTC](https://discuss.elastic.co/t/config-file-ownership-and-permissions-filebeat/131889/6 "2018-05-16T19:14:14Z")

</div>

Best use `chown`

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [June 13, 2018, 7:14pm UTC](https://discuss.elastic.co/t/config-file-ownership-and-permissions-filebeat/131889/7 "2018-06-13T19:14:15Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
