# Unable to start Packbeat 7.1.1 on ELK 7.1.1

**URL:** https://discuss.elastic.co/t/unable-to-start-packbeat-7-1-1-on-elk-7-1-1/183915
**Category:** Beats
**Tags:** packetbeat
**Created:** [June 3, 2019, 8:44am UTC](https://discuss.elastic.co/t/unable-to-start-packbeat-7-1-1-on-elk-7-1-1/183915 "2019-06-03T08:44:09Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![Pradeep\_Kumar1](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/pradeep_kumar1/32/47001_2.png) [@Pradeep\_Kumar1](https://discuss.elastic.co/u/Pradeep_Kumar1)
#### Post date: [June 3, 2019, 8:44am UTC](https://discuss.elastic.co/t/unable-to-start-packbeat-7-1-1-on-elk-7-1-1/183915/1 "2019-06-03T08:44:09Z")

</div>

Hi Team,

Tried running below line -  
C:\elkbeats\packetbeat\>docker run -d e5a311b3b005 --name packetbeat --cap-add=NET\_ADMIN --network=host

================================================================  
C:\elkbeats\packetbeat\>docker container ls -a  
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES  
a483d2c1be25 e5a311b3b005 "/usr/local/bin/dock…" 7 seconds ago Exited (1) 5 seconds ago practical\_wiles  
b727fcdf5d66 [docker.elastic.co/logstash/logstash:7.1.1](http://docker.elastic.co/logstash/logstash:7.1.1) "/usr/local/bin/dock…" 3 hours ago Up 3 hours 0.0.0.0:5044-\>5044/tcp, 9600/tcp logstash  
f3a9f27f1faa [docker.elastic.co/kibana/kibana:7.1.1](http://docker.elastic.co/kibana/kibana:7.1.1) "/usr/local/bin/kiba…" 4 hours ago Up 4 hours 0.0.0.0:5601-\>5601/tcp kibana  
df3cdd1f2120 [docker.elastic.co/elasticsearch/elasticsearch:7.1.1](http://docker.elastic.co/elasticsearch/elasticsearch:7.1.1) "/usr/local/bin/dock…" 4 hours ago Up 4 hours 0.0.0.0:9200-\>9200/tcp, 0.0.0.0:9300-\>9300/tcp elasticsearch

==================================================================

C:\elkbeats\packetbeat\>docker container logs --details a483d2c1be25  
/usr/local/bin/docker-entrypoint: line 8: /usr/share/packetbeat/packetbeat: Operation not permitted

Please help,

Regards,  
Pradeep G

---

<div class="post-metadata">

### Author: ![adrisr](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/adrisr/32/25423_2.png) [@adrisr](https://discuss.elastic.co/u/adrisr)
#### Post date: [June 3, 2019, 6:12pm UTC](https://discuss.elastic.co/t/unable-to-start-packbeat-7-1-1-on-elk-7-1-1/183915/2 "2019-06-03T18:12:18Z")

</div>

The parameter ordering is wrong.

It should be:

> docker run {docker params} {image} {packetbeat params}

So instead of this:

> docker run -d **e5a311b3b005** --name packetbeat --cap-add=NET\_ADMIN --network=host

do this:

> docker run -d --name packetbeat --cap-add=NET\_ADMIN --network=host **e5a311b3b005**

---

<div class="post-metadata">

### Author: ![Pradeep\_Kumar1](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/pradeep_kumar1/32/47001_2.png) [@Pradeep\_Kumar1](https://discuss.elastic.co/u/Pradeep_Kumar1)
#### Post date: [June 4, 2019, 3:25am UTC](https://discuss.elastic.co/t/unable-to-start-packbeat-7-1-1-on-elk-7-1-1/183915/3 "2019-06-04T03:25:48Z")

</div>

It worked,

Thanks Adrian

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 2, 2019, 3:25am UTC](https://discuss.elastic.co/t/unable-to-start-packbeat-7-1-1-on-elk-7-1-1/183915/4 "2019-07-02T03:25:53Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
