diff --git a/auditbeat/module/file_integrity/eventreader_kprobes.go b/auditbeat/module/file_integrity/eventreader_kprobes.go
index 41c8fe0dd31..7cddd7f60cd 100644
--- a/auditbeat/module/file_integrity/eventreader_kprobes.go
+++ b/auditbeat/module/file_integrity/eventreader_kprobes.go
@@ -158,7 +158,7 @@ func (r kProbesReader) nextEvent(done <-chan struct{}) *Event {
 
 		case err := <-r.watcher.ErrorChannel():
 			if err != nil {
-				r.log.Warnw("kprobes watcher error", "error", err)
+				r.log.Errorw("kprobes watcher error", "error", err)
 			}
 		}
 	}