Hi, I'm running packetbeat and I'm not interested in the system metrics reported by it - I use a different method to monitoring the host. Because I didn't add the SYS_PTRACE capability to the docker container, I keep receiving an error of not enough privileges:
{
"log.level": "error",
"@timestamp": "2025-01-16T14:31:25.645Z",
"log.logger": "metrics",
"log.origin": {
"function": "github.com/elastic/elastic-agent-system-metrics/report.SetupLinuxBSDFDMetrics.FDUsageReporter.func1",
"file.name": "report/metrics_file_descriptors.go",
"file.line": 40
},
"message": "Error while retrieving FD information: %vNot enough privileges to fetch information: non-fatal error fetching PID metrics for 7, metrics are valid, but partial: Not enough privileges to fetch information: /io unavailable; if running inside a container, use SYS_PTRACE: error fetching IO metrics: open /proc/7/io: permission denied",
"service.name": "packetbeat",
"ecs.version": "1.6.0"
}
Ideally I'd like to add a parameter to packetbeat.yml to disable system metrics, however I couldn't find it.
Any advise on how to disable it would be highly appreciated.
I'm running docker.elastic.co/beats/packetbeat-oss:8.17.0