following https://www.elastic.co/guide/en/beats/filebeat/6.1/running-on-kubernetes.html and the following post: [image] Shipping Kubernetes logs with Filebeat We recently wrote about the new Filebeat features to retrieve & enrich Docker logs using Filebeat, and since the 6.0 release, y…

Hi @dinaWork , Depending on your cluster settings this error may not be fatal. But let me explain what's going on: We setup RBAC roles to ensure filebeat has access to pods metadata when enriching logs. While this is what you want, it requires you have the cluster-admin role when deploying it, you…

Shiping logs from kubernetes to elasticsearch using beats - get: "clusterroles.rbac.authorization.k8s.io "filebeat" is forbidden: attempt to grant extra privileges"

Elastic Stack Beats

system (system) Closed January 7, 2018, 10:25pm 5

This topic was automatically closed after 21 days. New replies are no longer allowed.

Topic		Replies	Views
Failure to run Filebeat On K8s Cluster - using KubeCTL Beats filebeat	2	821	January 15, 2019
FIlebeat failed to connect to backoff(elasticsearch(http://elasticsearch:9200) Beats filebeat	1	1259	November 8, 2019
Shiping logs from kubernetes to elasticsearch using beats - Failed to connect: Get http://xxxxxx.us-central1.gcp.cloud.es.io:9243: read tcp 13.17.4.10:40766->31.177.77.2:9243: read: connection reset by peer Beats	4	821	January 8, 2018
No logs shipped from Kubernetes Filebeat Beats docker , filebeat	8	4508	March 10, 2020
Filebeat logs unauthorized when addressing old namespaces Elastic Cloud on Kubernetes (ECK)	8	3243	November 4, 2022

Shiping logs from kubernetes to elasticsearch using beats - get: "clusterroles.rbac.authorization.k8s.io "filebeat" is forbidden: attempt to grant extra privileges"

Related topics