Error: system/socket dataset setup failed

Elastic Stack Beats
1

Hello all

I have this issus with auditeat, any help please

Apr 11 01:08:47 wnl03 auditbeat[13640]: 2023-04-11T01:08:47.574+0200        ERROR        instance/beat.go:989        Exiting: 1 error: system/socket dataset setup failed: unable to
Apr 11 01:08:47 wnl03 auditbeat[13640]: Exiting: 1 error: system/socket dataset setup failed: unable to guess one or more required parameters: guess_struct_creds failed: timeout wh
Apr 11 01:08:47 wnl03 systemd[1]: auditbeat.service: main process exited, code=exited, status=1/FAILURE
Apr 11 01:08:47 wnl03 systemd[1]: Unit auditbeat.service entered failed state.
Apr 11 01:08:47 wnl03 systemd[1]: auditbeat.service failed.
Apr 11 01:08:47 wnl03 systemd[1]: auditbeat.service holdoff time over, scheduling restart.
Apr 11 01:08:47 wnl03 systemd[1]: Stopped Audit the activities of users and processes on your system..
Apr 11 01:08:47 wnl03 systemd[1]: Started Audit the activities of users and processes on your system..
Apr 11 01:09:03 wnl03 auditbeat[13688]: 2023-04-11T01:09:03.095+0200        ERROR        instance/beat.go:989        Exiting: 1 error: system/socket dataset setup failed: unable to
Apr 11 01:09:03 wnl03 auditbeat[13688]: Exiting: 1 error: system/socket dataset setup failed: unable to guess one or more required parameters: guess_sk_buff_proto failed: timeout w
Apr 11 01:09:03 wnl03 systemd[1]: auditbeat.service: main process exited, code=exited, status=1/FAILURE
Apr 11 01:09:03 wnl03 systemd[1]: Unit auditbeat.service entered failed state.
Apr 11 01:09:03 wnl03 systemd[1]: auditbeat.service failed.
Apr 11 01:08:47 wnldft1odb01.webhelp.nl systemd[1]: Unit auditbeat.service entered failed state.
Apr 11 01:08:47 wnldft1odb01.webhelp.nl systemd[1]: auditbeat.service failed.
Apr 11 01:08:47 wnldft1odb01.webhelp.nl systemd[1]: auditbeat.service holdoff time over, scheduling restart.
Apr 11 01:08:47 wnldft1odb01.webhelp.nl systemd[1]: Stopped Audit the activities of users and processes on your system..
Apr 11 01:08:47 wnldft1odb01.webhelp.nl systemd[1]: Started Audit the activities of users and processes on your system..
Apr 11 01:09:03 wnldft1odb01.webhelp.nl auditbeat[13688]: 2023-04-11T01:09:03.095+0200        ERROR        instance/beat.go:989        Exiting: 1 error: system/socket dataset setup failed: unable to
Apr 11 01:09:03 wnldft1odb01.webhelp.nl auditbeat[13688]: Exiting: 1 error: system/socket dataset setup failed: unable to guess one or more required parameters: guess_sk_buff_proto failed: timeout w
Apr 11 01:09:03 wnldft1odb01.webhelp.nl systemd[1]: auditbeat.service: main process exited, code=exited, status=1/FAILURE
Apr 11 01:09:03 wnldft1odb01.webhelp.nl systemd[1]: Unit auditbeat.service entered failed state.
Apr 11 01:09:03 wnldft1odb01.webhelp.nl systemd[1]: auditbeat.service failed.

Thanks;

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.