Filebeat output file permission

Elastic Stack Beats
#1

These are my configuration for filebeat

output.file:
  path: "/var/lib/filebeat-logs"
  filename: filebeat
  permissions: 0664

This is the permission is see when i use ls -l

-rw-r----- 1 root root 269219 Sep 7 17:01 filebeat.

When i change it to 0644,

-rw-r----- 1 root root 271676 Sep 7 17:04 filebeat

it does not change at all.

What i want to do is to give read permission to all users and groups.
I am using docker image docker.elastic.co/beats/filebeat:7.9.1

#2

I have the same issue. Logstash is trying to consume those files, but cannot due to permissions.
Will let you know if I find a solution.

#3

Wasn't able to directly solve the permissions issue. Ended up configuring my logstash.service agent to run as root. Not ideal.

#4

Yeah i had to do something similar to your solution, but i don't like it.
I was hoping on doing it the correct way.

#5

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.