# How to start Metricbeat as non root user?

**URL:** <https://discuss.elastic.co/t/how-to-start-metricbeat-as-non-root-user/344712>\
**Category:** Beats\
**Tags:** metricbeat\
**Created:** [October 10, 2023, 8:46am UTC](https://discuss.elastic.co/t/how-to-start-metricbeat-as-non-root-user/344712 "2023-10-10T08:46:09Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Gorkem\_Keskin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/gorkem_keskin/32/126404_2.png) [@Gorkem\_Keskin](https://discuss.elastic.co/u/Gorkem_Keskin)\
**Post date:** [October 10, 2023, 8:46am UTC](https://discuss.elastic.co/t/how-to-start-metricbeat-as-non-root-user/344712/1 "2023-10-10T08:46:09Z")

</div>

Hello,  
I am sending logs using Metricbeat system module to Elasticsearch. I have to send as a non root user, however it keeps on sending both as non root and root user. I tried to follow documentations to send only as non root user, but I couldn't achieve my goal. Can you help me or can you provide me with documents to help me out with my situation?

Thanks,  
Görkem

---

<div class="post-metadata">

**Author:** ![jsoriano](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jsoriano/32/27920_2.png) [@jsoriano](https://discuss.elastic.co/u/jsoriano)\
**Post date:** [October 18, 2023, 10:05am UTC](https://discuss.elastic.co/t/how-to-start-metricbeat-as-non-root-user/344712/2 "2023-10-18T10:05:00Z")

</div>

Hey @Gorkem_Keskin, welcome to discuss 🙂

> [@Gorkem\_Keskin](#):
>
> it keeps on sending both as non root and root user

What do you mean by this? Metricbeat can be running as root or as non root user, but not both.

How are you currently running Metricbeat?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 15, 2023, 12:05pm UTC](https://discuss.elastic.co/t/how-to-start-metricbeat-as-non-root-user/344712/3 "2023-11-15T12:05:50Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
