Giving filebeat admin rights to read from fileshare

Hi all, I have filebeat as a windows service, It supposed to read logs from a fileshare on my VM, which must be accessed using the admin account, when I log on the service of filebeat as the admin account it can't access the fileshare and can't read the logs,but when I open the powershell as admin, and run the command " ./filebeat.exe " , it can see the fileshare and successefully read the logs and send it to elasticsearch.

how to solve this issue without having to deal with powershell as I want to automate the process from ansible

by the way ansible is using the admin account to install and run the service of filebeat.

Thanks in advance.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.