## :frowning_person: Problem Statement It [isn't possible](https://github.com/elastic/beats-docker/issues/25#issuecomment-327838206) to run auditd in docker without specifying `--pid=host`. ## :grey_question: Possible Solution Add a driver option to specify `--pid`. ## :arrow_heading_up: Describe alternatives you've considered n/a ## :heavy_plus_sign: Additional context See: [https://docs.docker.com/engine/reference/run/#pid-settings---pid](https://docs.docker.com/engine/reference/run/#pid-settings---pid)