FROM docker.elastic.co/beats/filebeat:7.13.3 COPY ./filebeat.docker.yml /usr/share/filebeat/filebeat.yml USER root RUN chown root:filebeat /usr/share/filebeat/filebeat.yml USER filebeat