the filebeat Helm chart (https://raw.githubusercontent.com/elastic/beats/7.0/deploy/kubernetes/filebeat-kubernetes.yaml) specifies that the user shall be root (runAsUser: 0).
Is there any other way to achieve application container logging with the Elastic stack that does not rely on running filebeat as root?
Can filebeat be run as non-root to achieve logging?
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.