# Filebeat output file permission

**URL:** <https://discuss.elastic.co/t/filebeat-output-file-permission/247793>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [September 7, 2020, 5:06pm UTC](https://discuss.elastic.co/t/filebeat-output-file-permission/247793 "2020-09-07T17:06:32Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Mostafa\_Hamdy](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mostafa_hamdy/32/75226_2.png) [@Mostafa\_Hamdy](https://discuss.elastic.co/u/Mostafa_Hamdy)\
**Post date:** [September 7, 2020, 5:06pm UTC](https://discuss.elastic.co/t/filebeat-output-file-permission/247793/1 "2020-09-07T17:06:33Z")

</div>

These are my configuration for filebeat

```auto
output.file:
  path: "/var/lib/filebeat-logs"
  filename: filebeat
  permissions: 0664

```

This is the permission is see when i use `ls -l`

> -rw-r----- 1 root root 269219 Sep 7 17:01 filebeat.

When i change it to `0644`,

> -rw-r----- 1 root root 271676 Sep 7 17:04 filebeat

it does not change at all.

What i want to do is to give read permission to all users and groups.  
I am using docker image `docker.elastic.co/beats/filebeat:7.9.1`

---

<div class="post-metadata">

**Author:** ![pmigrala](https://avatars.discourse-cdn.com/v4/letter/p/f08c70/32.png) [@pmigrala](https://discuss.elastic.co/u/pmigrala)\
**Post date:** [September 11, 2020, 7:36pm UTC](https://discuss.elastic.co/t/filebeat-output-file-permission/247793/2 "2020-09-11T19:36:31Z")

</div>

I have the same issue. Logstash is trying to consume those files, but cannot due to permissions.  
Will let you know if I find a solution.

---

<div class="post-metadata">

**Author:** ![pmigrala](https://avatars.discourse-cdn.com/v4/letter/p/f08c70/32.png) [@pmigrala](https://discuss.elastic.co/u/pmigrala)\
**Post date:** [September 13, 2020, 2:26pm UTC](https://discuss.elastic.co/t/filebeat-output-file-permission/247793/3 "2020-09-13T14:26:40Z")

</div>

Wasn't able to directly solve the permissions issue. Ended up configuring my logstash.service agent to run as root. Not ideal.

---

<div class="post-metadata">

**Author:** ![Mostafa\_Hamdy](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mostafa_hamdy/32/75226_2.png) [@Mostafa\_Hamdy](https://discuss.elastic.co/u/Mostafa_Hamdy)\
**Post date:** [September 14, 2020, 12:46pm UTC](https://discuss.elastic.co/t/filebeat-output-file-permission/247793/4 "2020-09-14T12:46:35Z")

</div>

Yeah i had to do something similar to your solution, but i don't like it.  
I was hoping on doing it the correct way.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [October 12, 2020, 2:46pm UTC](https://discuss.elastic.co/t/filebeat-output-file-permission/247793/5 "2020-10-12T14:46:50Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.