Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- 12:36:06.670
- elastic_agent
- [elastic_agent][info] waiting for installer of pipeline 'default' to finish
- 12:36:06.670
- elastic_agent
- [elastic_agent][info] signaling service to stop because of shutdown: endpoint-security--8.3.3
- 12:36:06.670
- elastic_agent
- [elastic_agent][info] Elastic Agent status changed to: 'online'
- 12:36:06.670
- elastic_agent
- [elastic_agent][info] Signaling application to stop because of shutdown: filebeat--8.3.3
- 12:36:06.670
- elastic_agent
- [elastic_agent][info] Signaling application to stop because of shutdown: filebeat--8.3.3--36643631373035623733363936343635
- 12:36:06.670
- elastic_agent
- [elastic_agent][info] Signaling application to stop because of shutdown: metricbeat--8.3.3--36643631373035623733363936343635
- 12:36:06.670
- elastic_agent
- [elastic_agent][info] Signaling application to stop because of shutdown: metricbeat--8.3.3
- 12:36:06.670
- elastic_agent
- [elastic_agent][info] 2022-08-23T12:36:06+02:00 - message: Application: endpoint-security--8.3.3[b54a5f07-631b-4bc5-b57f-c2bab9eb4a07]: State changed to STOPPED: Stopped - type: 'STATE' - sub_type: 'STOPPED'
- 12:36:06.670
- elastic_agent
- [elastic_agent][info] waiting for installer of pipeline 'default' to finish
- 12:36:06.670
- elastic_agent
- [elastic_agent][info] signaling service to stop because of shutdown: endpoint-security--8.3.3
- 12:36:06.670
- elastic_agent
- [elastic_agent][info] Elastic Agent status changed to: 'online'
- 12:36:06.670
- elastic_agent
- [elastic_agent][info] Signaling application to stop because of shutdown: filebeat--8.3.3
- 12:36:06.670
- elastic_agent
- [elastic_agent][info] Signaling application to stop because of shutdown: filebeat--8.3.3--36643631373035623733363936343635
- 12:36:06.670
- elastic_agent
- [elastic_agent][info] Signaling application to stop because of shutdown: metricbeat--8.3.3--36643631373035623733363936343635
- 12:36:06.670
- elastic_agent
- [elastic_agent][info] Signaling application to stop because of shutdown: metricbeat--8.3.3
- 12:36:06.670
- elastic_agent
- [elastic_agent][info] 2022-08-23T12:36:06+02:00 - message: Application: endpoint-security--8.3.3[b54a5f07-631b-4bc5-b57f-c2bab9eb4a07]: State changed to STOPPED: Stopped - type: 'STATE' - sub_type: 'STOPPED'
- 12:36:06.678
- elastic_agent
- [elastic_agent][info] 2022-08-23T12:36:06+02:00 - message: Application: metricbeat--8.3.3[b54a5f07-631b-4bc5-b57f-c2bab9eb4a07]: State changed to STOPPING: Stopping - type: 'STATE' - sub_type: 'STOPPING'
- 12:36:07.221
- elastic_agent
- [elastic_agent][info] 2022-08-23T12:36:07+02:00 - message: Application: filebeat--8.3.3[b54a5f07-631b-4bc5-b57f-c2bab9eb4a07]: State changed to STOPPED: Stopped - type: 'STATE' - sub_type: 'STOPPED'
- 12:36:07.223
- elastic_agent
- [elastic_agent][info] 2022-08-23T12:36:07+02:00 - message: Application: metricbeat--8.3.3--36643631373035623733363936343635[b54a5f07-631b-4bc5-b57f-c2bab9eb4a07]: State changed to STOPPED: Stopped - type: 'STATE' - sub_type: 'STOPPED'
- 12:36:08.204
- elastic_agent
- [elastic_agent][info] 2022-08-23T12:36:08+02:00 - message: Application: filebeat--8.3.3--36643631373035623733363936343635[b54a5f07-631b-4bc5-b57f-c2bab9eb4a07]: State changed to STOPPED: Stopped - type: 'STATE' - sub_type: 'STOPPED'
- 12:36:08.218
- elastic_agent
- [elastic_agent][info] 2022-08-23T12:36:08+02:00 - message: Application: metricbeat--8.3.3[b54a5f07-631b-4bc5-b57f-c2bab9eb4a07]: State changed to STOPPED: Stopped - type: 'STATE' - sub_type: 'STOPPED'
- 12:36:08.218
- elastic_agent
- [elastic_agent][info] Agent is stopped
- 12:36:08.230
- elastic_agent
- [elastic_agent][info] Running as Windows service Elastic Agent; triggering service restart
- 12:36:08.717
- elastic_agent
- [elastic_agent][info] Stats endpoint (\\.\pipe\elastic-agent) finished: use of closed network connection
- 12:36:09.677
- elastic_agent
- [elastic_agent][debug] migrate agent secret, check if secret already exists
- 12:36:09.694
- elastic_agent
- [elastic_agent][debug] secret already exists nothing to migrate
- 12:36:09.694
- elastic_agent
- [elastic_agent][debug] migration of agent secret completed, err: %v<nil>
- 12:36:09.721
- elastic_agent
- [elastic_agent][debug] encrypt config if needed
- 12:36:09.721
- elastic_agent
- [elastic_agent][debug] check if the yml file C:\Program Files\Elastic\Agent\data\elastic-agent-0ffbed\state.yml exists
- 12:36:09.722
- elastic_agent
- [elastic_agent][debug] yml file C:\Program Files\Elastic\Agent\data\elastic-agent-0ffbed\state.yml doesn't exists, continue
- 12:36:09.722
- elastic_agent
- [elastic_agent][debug] check if the yml file C:\Program Files\Elastic\Agent\fleet.yml exists
- 12:36:09.722
- elastic_agent
- [elastic_agent][debug] yml file C:\Program Files\Elastic\Agent\fleet.yml doesn't exists, continue
- 12:36:09.842
- elastic_agent
- [elastic_agent][debug] releasing watcher 12584
- 12:36:09.843
- elastic_agent
- [elastic_agent][info] APM instrumentation disabled
- 12:36:09.891
- elastic_agent
- [elastic_agent][info] Detecting execution mode
- 12:36:09.908
- elastic_agent
- [elastic_agent][info] Agent is managed by Fleet
- 12:36:09.908
- elastic_agent
- [elastic_agent][info] capabilities file not found in C:\Program Files\Elastic\Agent\capabilities.yml
- 12:36:09.909
- elastic_agent
- [elastic_agent][warn] SSL/TLS verifications disabled.
- 12:36:10.190
- elastic_agent
- [elastic_agent][debug] Supported programs: Fleet Server, Metricbeat, Osquerybeat, APM-Server, Auditbeat, Cloudbeat, Endpoint Security, Filebeat, Heartbeat, Packetbeat
- 12:36:10.190
- elastic_agent
- [elastic_agent][debug] Kubernetes_secrets provider skipped, unable to connect: unable to build kube config due to error: invalid configuration: no configuration has been provided, try setting KUBERNETES_MASTER environment variable
- 12:36:10.320
- elastic_agent
- [elastic_agent][debug] Kubernetes leaderelection provider skipped, unable to connect: unable to build kube config due to error: invalid configuration: no configuration has been provided, try setting KUBERNETES_MASTER environment variable
- 12:36:10.321
- elastic_agent
- [elastic_agent][debug] Kubernetes provider for resource pod skipped, unable to connect: unable to build kube config due to error: invalid configuration: no configuration has been provided, try setting KUBERNETES_MASTER environment variable
- 12:36:10.321
- elastic_agent
- [elastic_agent][debug] Kubernetes provider for resource node skipped, unable to connect: unable to build kube config due to error: invalid configuration: no configuration has been provided, try setting KUBERNETES_MASTER environment variable
- 12:36:10.321
- elastic_agent
- [elastic_agent][debug] Docker client will negotiate the API version on the first request.
- 12:36:10.321
- elastic_agent
- [elastic_agent][info] Docker provider skipped, unable to connect: protocol not available
- 12:36:10.321
- elastic_agent
- [elastic_agent][debug] state store C:\Program Files\Elastic\Agent\data\elastic-agent-0ffbed\state.enc already exists
- 12:36:10.331
- elastic_agent
- [elastic_agent][info] restoring current policy from disk
- 12:36:10.331
- elastic_agent
- [elastic_agent][debug] Dispatch 1 actions of types: *fleetapi.ActionPolicyChange
- 12:36:10.331
- elastic_agent
- [elastic_agent][debug] handlerPolicyChange: action 'action_id: policy:af88b910-1fb8-11ed-8d6d-651e49132fec:10:1, type: POLICY_CHANGE' received
- 12:36:10.334
- elastic_agent
- [elastic_agent][debug] handlerPolicyChange: emit configuration for action action_id: policy:af88b910-1fb8-11ed-8d6d-651e49132fec:10:1, type: POLICY_CHANGE
- 12:36:10.343
- elastic_agent
- [elastic_agent][debug] 'capabilities-b26649da' has status 'online'
- 12:36:10.345
- elastic_agent
- [elastic_agent][debug] Converting single configuration into specific programs configuration
- 12:36:10.356
- elastic_agent
- [elastic_agent][debug] Creating stream: default
- 12:36:10.356
- elastic_agent
- [elastic_agent][debug] Streams default need to run config with ID 1xxtwIhh and programs: Metricbeat, Endpoint Security, Filebeat, FLEET_MONITORING
- 12:36:10.356
- elastic_agent
- [elastic_agent][info] New State ID is 1xxtwIhh
- 12:36:10.356
- elastic_agent
- [elastic_agent][info] Converging state requires execution of 4 step(s)
- 12:36:10.356
- elastic_agent
- [elastic_agent][debug] step 0: [ID:sc-run, PROCESS: metricbeat VERSION:8.3.3]
- 12:36:10.357
- elastic_agent
- [elastic_agent][debug] step 1: [ID:sc-run, PROCESS: endpoint-security VERSION:8.3.3]
- 12:36:10.357
- elastic_agent
- [elastic_agent][debug] step 2: [ID:sc-run, PROCESS: filebeat VERSION:8.3.3]
- 12:36:10.357
- elastic_agent
- [elastic_agent][debug] step 3: [ID:sc-run, PROCESS: FLEET_MONITORING VERSION:8.3.3]
- 12:36:10.357
- elastic_agent
- [elastic_agent][debug] 'operator-default-2abaa78d' has status 'online'
- 12:36:10.357
- elastic_agent
- [elastic_agent][debug] 'capabilities-b26649da' has status 'online'
- 12:36:10.357
- elastic_agent
- [elastic_agent][debug] operator is looking for metricbeat--8.3.3 in app collection: map[]
- 12:36:10.357
- elastic_agent
- [elastic_agent][debug] binary 'metricbeat.8.3.3' already exists in C:\Program Files\Elastic\Agent\data\elastic-agent-0ffbed\downloads\metricbeat-8.3.3-windows-x86_64.zip. Skipping operation operation-fetch
- 12:36:10.357
- elastic_agent
- [elastic_agent][debug] running operation 'retryable block: operation-fetch operation-verify' for metricbeat.8.3.3
- 12:36:10.357
- elastic_agent
- [elastic_agent][debug] binary 'metricbeat.8.3.3' already exists in C:\Program Files\Elastic\Agent\data\elastic-agent-0ffbed\downloads\metricbeat-8.3.3-windows-x86_64.zip. Skipping operation operation-fetch
- 12:36:10.357
- elastic_agent
- [elastic_agent][debug] running operation 'operation-verify' of the block 'retryable block: operation-fetch operation-verify'
- 12:36:10.603
- elastic_agent
- [elastic_agent][info] operation 'operation-install' skipped for metricbeat.8.3.3
- 12:36:10.603
- elastic_agent
- [elastic_agent][debug] running operation 'operation-start' for metricbeat.8.3.3
- 12:36:10.913
- elastic_agent
- [elastic_agent][debug] 'operator-default-2abaa78d' has status 'online'
- 12:36:10.913
- elastic_agent
- [elastic_agent][debug] 'capabilities-b26649da' has status 'online'
- 12:36:10.913
- elastic_agent
- [elastic_agent][debug] 'metricbeat--8.3.3-580bdf52' has status 'online'
- 12:36:10.918
- elastic_agent
- [elastic_agent][info] 2022-08-23T12:36:10+02:00 - message: Application: metricbeat--8.3.3[b54a5f07-631b-4bc5-b57f-c2bab9eb4a07]: State changed to STARTING: Starting - type: 'STATE' - sub_type: 'STARTING'
- 12:36:16.093
- elastic_agent
- [elastic_agent][debug] running operation 'operation-config' for metricbeat.8.3.3
- 12:36:16.328
- elastic_agent
- [elastic_agent][debug] operator is looking for endpoint-security--8.3.3 in app collection: map[metricbeat--8.3.3:0xc0007d83c0]
- 12:36:16.329
- elastic_agent
- [elastic_agent][debug] binary 'endpoint-security.8.3.3' already exists in C:\Program Files\Elastic\Agent\data\elastic-agent-0ffbed\downloads\endpoint-security-8.3.3-windows-x86_64.zip. Skipping operation operation-fetch
- 12:36:16.329
- elastic_agent
- [elastic_agent][debug] running operation 'retryable block: operation-fetch operation-verify' for endpoint-security.8.3.3
- 12:36:16.330
- elastic_agent
- [elastic_agent][debug] binary 'endpoint-security.8.3.3' already exists in C:\Program Files\Elastic\Agent\data\elastic-agent-0ffbed\downloads\endpoint-security-8.3.3-windows-x86_64.zip. Skipping operation operation-fetch
- 12:36:16.330
- elastic_agent
- [elastic_agent][debug] running operation 'operation-verify' of the block 'retryable block: operation-fetch operation-verify'
- 12:36:18.277
- elastic_agent
- [elastic_agent][info] operation 'operation-install' skipped for endpoint-security.8.3.3
- 12:36:18.277
- elastic_agent
- [elastic_agent][debug] running operation 'operation-start' for endpoint-security.8.3.3
- 12:36:18.281
- elastic_agent
- [elastic_agent][debug] 'capabilities-b26649da' has status 'online'
- 12:36:18.281
- elastic_agent
- [elastic_agent][debug] 'operator-default-2abaa78d' has status 'online'
- 12:36:18.281
- elastic_agent
- [elastic_agent][debug] 'metricbeat--8.3.3-580bdf52' has status 'online'
- 12:36:18.281
- elastic_agent
- [elastic_agent][debug] 'endpoint-security--8.3.3-93a1f995' has status 'online'
- 12:36:18.392
- elastic_agent
- [elastic_agent][info] 2022-08-23T12:36:18+02:00 - message: Application: endpoint-security--8.3.3[b54a5f07-631b-4bc5-b57f-c2bab9eb4a07]: State changed to STARTING: Starting - type: 'STATE' - sub_type: 'STARTING'
- 12:36:18.393
- elastic_agent
- [elastic_agent][debug] running operation 'operation-config' for endpoint-security.8.3.3
- 12:36:18.394
- elastic_agent
- [elastic_agent][debug] operator is looking for filebeat--8.3.3 in app collection: map[endpoint-security--8.3.3:0xc000324b40 metricbeat--8.3.3:0xc0007d83c0]
- 12:36:18.394
- elastic_agent
- [elastic_agent][debug] binary 'filebeat.8.3.3' already exists in C:\Program Files\Elastic\Agent\data\elastic-agent-0ffbed\downloads\filebeat-8.3.3-windows-x86_64.zip. Skipping operation operation-fetch
- 12:36:18.394
- elastic_agent
- [elastic_agent][debug] running operation 'retryable block: operation-fetch operation-verify' for filebeat.8.3.3
- 12:36:18.395
- elastic_agent
- [elastic_agent][debug] binary 'filebeat.8.3.3' already exists in C:\Program Files\Elastic\Agent\data\elastic-agent-0ffbed\downloads\filebeat-8.3.3-windows-x86_64.zip. Skipping operation operation-fetch
- 12:36:18.395
- elastic_agent
- [elastic_agent][debug] running operation 'operation-verify' of the block 'retryable block: operation-fetch operation-verify'
- 12:36:18.821
- elastic_agent
- [elastic_agent][info] operation 'operation-install' skipped for filebeat.8.3.3
- 12:36:18.821
- elastic_agent
- [elastic_agent][debug] running operation 'operation-start' for filebeat.8.3.3
- 12:36:18.967
- elastic_agent
- [elastic_agent][debug] 'filebeat--8.3.3-dda0221c' has status 'online'
- 12:36:18.967
- elastic_agent
- [elastic_agent][debug] 'metricbeat--8.3.3-580bdf52' has status 'online'
- 12:36:18.967
- elastic_agent
- [elastic_agent][debug] 'operator-default-2abaa78d' has status 'online'
- 12:36:18.967
- elastic_agent
- [elastic_agent][debug] 'capabilities-b26649da' has status 'online'
- 12:36:18.968
- elastic_agent
- [elastic_agent][debug] 'endpoint-security--8.3.3-93a1f995' has status 'online'
- 12:36:18.970
- elastic_agent
- [elastic_agent][info] 2022-08-23T12:36:18+02:00 - message: Application: filebeat--8.3.3[b54a5f07-631b-4bc5-b57f-c2bab9eb4a07]: State changed to STARTING: Starting - type: 'STATE' - sub_type: 'STARTING'
- 12:36:22.553
- elastic_agent
- [elastic_agent][debug] running operation 'operation-config' for filebeat.8.3.3
- 12:36:22.556
- elastic_agent
- [elastic_agent][debug] operator is looking for filebeat--8.3.3--36643631373035623733363936343635 in app collection: map[endpoint-security--8.3.3:0xc000324b40 filebeat--8.3.3:0xc0007d8500 metricbeat--8.3.3:0xc0007d83c0]
- 12:36:22.557
- elastic_agent
- [elastic_agent][debug] binary 'filebeat.8.3.3' already exists in C:\Program Files\Elastic\Agent\data\elastic-agent-0ffbed\downloads\filebeat-8.3.3-windows-x86_64.zip. Skipping operation operation-fetch
- 12:36:22.557
- elastic_agent
- [elastic_agent][debug] running operation 'retryable block: operation-fetch operation-verify' for filebeat.8.3.3
- 12:36:22.557
- elastic_agent
- [elastic_agent][debug] running operation 'operation-verify' of the block 'retryable block: operation-fetch operation-verify'
- 12:36:22.557
- elastic_agent
- [elastic_agent][debug] binary 'filebeat.8.3.3' already exists in C:\Program Files\Elastic\Agent\data\elastic-agent-0ffbed\downloads\filebeat-8.3.3-windows-x86_64.zip. Skipping operation operation-fetch
- 12:36:23.310
- elastic_agent
- [elastic_agent][info] operation 'operation-install' skipped for filebeat.8.3.3
- 12:36:23.310
- elastic_agent
- [elastic_agent][debug] running operation 'operation-start' for filebeat.8.3.3
- 12:36:23.712
- elastic_agent
- [elastic_agent][debug] 'capabilities-b26649da' has status 'online'
- 12:36:23.712
- elastic_agent
- [elastic_agent][debug] 'operator-default-2abaa78d' has status 'online'
- 12:36:23.712
- elastic_agent
- [elastic_agent][debug] 'metricbeat--8.3.3-580bdf52' has status 'online'
- 12:36:23.712
- elastic_agent
- [elastic_agent][debug] 'endpoint-security--8.3.3-93a1f995' has status 'online'
- 12:36:23.712
- elastic_agent
- [elastic_agent][debug] 'filebeat--8.3.3-dda0221c' has status 'online'
- 12:36:23.712
- elastic_agent
- [elastic_agent][debug] 'filebeat--8.3.3--36643631373035623733363936343635-128fafda' has status 'online'
- 12:36:23.721
- elastic_agent
- [elastic_agent][debug] running operation 'operation-config' for filebeat.8.3.3
- 12:36:23.724
- elastic_agent
- [elastic_agent][debug] operator is looking for metricbeat--8.3.3--36643631373035623733363936343635 in app collection: map[endpoint-security--8.3.3:0xc000324b40 filebeat--8.3.3:0xc0007d8500 filebeat--8.3.3--36643631373035623733363936343635:0xc0001c0000 metricbeat--8.3.3:0xc0007d83c0]
- 12:36:23.724
- elastic_agent
- [elastic_agent][debug] binary 'metricbeat.8.3.3' already exists in C:\Program Files\Elastic\Agent\data\elastic-agent-0ffbed\downloads\metricbeat-8.3.3-windows-x86_64.zip. Skipping operation operation-fetch
- 12:36:23.725
- elastic_agent
- [elastic_agent][debug] running operation 'retryable block: operation-fetch operation-verify' for metricbeat.8.3.3
- 12:36:23.725
- elastic_agent
- [elastic_agent][debug] binary 'metricbeat.8.3.3' already exists in C:\Program Files\Elastic\Agent\data\elastic-agent-0ffbed\downloads\metricbeat-8.3.3-windows-x86_64.zip. Skipping operation operation-fetch
- 12:36:23.725
- elastic_agent
- [elastic_agent][debug] running operation 'operation-verify' of the block 'retryable block: operation-fetch operation-verify'
- 12:36:23.734
- elastic_agent
- [elastic_agent][info] 2022-08-23T12:36:23+02:00 - message: Application: filebeat--8.3.3--36643631373035623733363936343635[b54a5f07-631b-4bc5-b57f-c2bab9eb4a07]: State changed to STARTING: Starting - type: 'STATE' - sub_type: 'STARTING'
- 12:36:24.344
- elastic_agent
- [elastic_agent][info] operation 'operation-install' skipped for metricbeat.8.3.3
- 12:36:24.344
- elastic_agent
- [elastic_agent][debug] running operation 'operation-start' for metricbeat.8.3.3
- 12:36:24.674
- elastic_agent
- [elastic_agent][debug] 'operator-default-2abaa78d' has status 'online'
- 12:36:24.674
- elastic_agent
- [elastic_agent][debug] 'capabilities-b26649da' has status 'online'
- 12:36:24.674
- elastic_agent
- [elastic_agent][debug] 'metricbeat--8.3.3--36643631373035623733363936343635-ea9b9855' has status 'online'
- 12:36:24.674
- elastic_agent
- [elastic_agent][debug] 'metricbeat--8.3.3-580bdf52' has status 'online'
- 12:36:24.674
- elastic_agent
- [elastic_agent][debug] 'endpoint-security--8.3.3-93a1f995' has status 'online'
- 12:36:24.674
- elastic_agent
- [elastic_agent][debug] 'filebeat--8.3.3-dda0221c' has status 'online'
- 12:36:24.674
- elastic_agent
- [elastic_agent][debug] 'filebeat--8.3.3--36643631373035623733363936343635-128fafda' has status 'online'
- 12:36:24.675
- elastic_agent
- [elastic_agent][info] 2022-08-23T12:36:24+02:00 - message: Application: metricbeat--8.3.3--36643631373035623733363936343635[b54a5f07-631b-4bc5-b57f-c2bab9eb4a07]: State changed to STARTING: Starting - type: 'STATE' - sub_type: 'STARTING'
- 12:36:24.685
- elastic_agent
- [elastic_agent][debug] running operation 'operation-config' for metricbeat.8.3.3
- 12:36:24.690
- elastic_agent
- [elastic_agent][debug] 'capabilities-b26649da' has status 'online'
- 12:36:24.690
- elastic_agent
- [elastic_agent][debug] 'operator-default-2abaa78d' has status 'online'
- 12:36:24.690
- elastic_agent
- [elastic_agent][debug] 'metricbeat--8.3.3--36643631373035623733363936343635-ea9b9855' has status 'online'
- 12:36:24.690
- elastic_agent
- [elastic_agent][debug] 'metricbeat--8.3.3-580bdf52' has status 'online'
- 12:36:24.690
- elastic_agent
- [elastic_agent][debug] 'endpoint-security--8.3.3-93a1f995' has status 'online'
- 12:36:24.690
- elastic_agent
- [elastic_agent][debug] 'filebeat--8.3.3-dda0221c' has status 'online'
- 12:36:24.690
- elastic_agent
- [elastic_agent][debug] 'filebeat--8.3.3--36643631373035623733363936343635-128fafda' has status 'online'
- 12:36:24.690
- elastic_agent
- [elastic_agent][info] Updating internal state
- 12:36:24.690
- elastic_agent
- [elastic_agent][debug] appending action with id 'policy:af88b910-1fb8-11ed-8d6d-651e49132fec:10:1' to the queue
- 12:36:24.691
- elastic_agent
- [elastic_agent][debug] fleet acker: ackbatch, events: []fleetapi.AckEvent{fleetapi.AckEvent{EventType:"ACTION_RESULT", SubType:"ACKNOWLEDGED", Timestamp:"2022-08-23T12:36:24.69179+02:00", ActionID:"policy:af88b910-1fb8-11ed-8d6d-651e49132fec:10:1", AgentID:"b54a5f07-631b-4bc5-b57f-c2bab9eb4a07", Message:"Action 'policy:af88b910-1fb8-11ed-8d6d-651e49132fec:10:1' of type 'POLICY_CHANGE' acknowledged.", Payload:"", ActionInputType:"", ActionData:json.RawMessage(nil), ActionResponse:map[string]interface {}(nil), StartedAt:"", CompletedAt:"", Error:""}}
- 12:36:24.691
- elastic_agent
- [elastic_agent][debug] Successfully dispatched action: 'action_id: policy:af88b910-1fb8-11ed-8d6d-651e49132fec:10:1, type: POLICY_CHANGE'
- 12:36:24.691
- elastic_agent
- [elastic_agent][debug] lazy acker: ackbatch: []fleetapi.Action{(*fleetapi.ActionPolicyChange)(0xc000a776e0)}
- 12:36:24.691
- elastic_agent
- [elastic_agent][debug] fleet acker: ackbatch, actions: []fleetapi.Action{(*fleetapi.ActionPolicyChange)(0xc000a776e0)}
- 12:36:24.705
- elastic_agent
- [elastic_agent][debug] Request method: POST, path: /api/fleet/agents/b54a5f07-631b-4bc5-b57f-c2bab9eb4a07/acks, reqID: 01GB54CPR1KVBVAYJFH065P9K5
- 12:36:24.705
- elastic_agent
- [elastic_agent][warn] SSL/TLS verifications disabled.
- 12:36:24.705
- elastic_agent
- [elastic_agent][debug] 1 actions with ids 'policy:af88b910-1fb8-11ed-8d6d-651e49132fec:10:1' acknowledging
- 12:36:24.709
- elastic_agent
- [elastic_agent][debug] Converting single configuration into specific programs configuration
- 12:36:24.761
- elastic_agent
- [elastic_agent][debug] Streams default need to run config with ID IiouMPwG and programs: Metricbeat, Endpoint Security, Filebeat, FLEET_MONITORING
- 12:36:24.765
- elastic_agent
- [elastic_agent][info] New State ID is IiouMPwG
- 12:36:24.765
- elastic_agent
- [elastic_agent][info] Converging state requires execution of 3 step(s)
- 12:36:24.765
- elastic_agent
- [elastic_agent][debug] step 0: [ID:sc-run, PROCESS: metricbeat VERSION:8.3.3]
- 12:36:24.765
- elastic_agent
- [elastic_agent][debug] step 1: [ID:sc-run, PROCESS: filebeat VERSION:8.3.3]
- 12:36:24.765
- elastic_agent
- [elastic_agent][debug] step 2: [ID:sc-run, PROCESS: FLEET_MONITORING VERSION:8.3.3]
- 12:36:24.765
- elastic_agent
- [elastic_agent][debug] 'capabilities-b26649da' has status 'online'
- 12:36:24.765
- elastic_agent
- [elastic_agent][debug] 'operator-default-2abaa78d' has status 'online'
- 12:36:24.765
- elastic_agent
- [elastic_agent][debug] 'filebeat--8.3.3-dda0221c' has status 'online'
- 12:36:24.765
- elastic_agent
- [elastic_agent][debug] 'filebeat--8.3.3--36643631373035623733363936343635-128fafda' has status 'online'
- 12:36:24.765
- elastic_agent
- [elastic_agent][debug] 'metricbeat--8.3.3--36643631373035623733363936343635-ea9b9855' has status 'online'
- 12:36:24.765
- elastic_agent
- [elastic_agent][debug] 'metricbeat--8.3.3-580bdf52' has status 'online'
- 12:36:24.765
- elastic_agent
- [elastic_agent][debug] 'endpoint-security--8.3.3-93a1f995' has status 'online'
- 12:36:24.765
- elastic_agent
- [elastic_agent][debug] operator is looking for metricbeat--8.3.3 in app collection: map[endpoint-security--8.3.3:0xc000324b40 filebeat--8.3.3:0xc0007d8500 filebeat--8.3.3--36643631373035623733363936343635:0xc0001c0000 metricbeat--8.3.3:0xc0007d83c0 metricbeat--8.3.3--36643631373035623733363936343635:0xc0007d8780]
- 12:36:24.766
- elastic_agent
- [elastic_agent][debug] binary 'metricbeat.8.3.3' already exists in C:\Program Files\Elastic\Agent\data\elastic-agent-0ffbed\downloads\metricbeat-8.3.3-windows-x86_64.zip. Skipping operation operation-fetch
- 12:36:24.766
- elastic_agent
- [elastic_agent][debug] running operation 'retryable block: operation-fetch operation-verify' for metricbeat.8.3.3
- 12:36:24.767
- elastic_agent
- [elastic_agent][debug] binary 'metricbeat.8.3.3' already exists in C:\Program Files\Elastic\Agent\data\elastic-agent-0ffbed\downloads\metricbeat-8.3.3-windows-x86_64.zip. Skipping operation operation-fetch
- 12:36:24.767
- elastic_agent
- [elastic_agent][debug] running operation 'operation-verify' of the block 'retryable block: operation-fetch operation-verify'
- 12:36:25.044
- elastic_agent
- [elastic_agent][info] Starting stats endpoint
- 12:36:25.044
- elastic_agent
- [elastic_agent][info] Agent is starting
- 12:36:25.044
- elastic_agent
- [elastic_agent][info] Metrics endpoint listening on: \\.\pipe\elastic-agent (configured: npipe:///elastic-agent)
- 12:36:25.229
- elastic_agent
- [elastic_agent][info] operation 'operation-install' skipped for metricbeat.8.3.3
- 12:36:25.229
- elastic_agent
- [elastic_agent][info] operation 'operation-start' skipped for metricbeat.8.3.3
- 12:36:25.229
- elastic_agent
- [elastic_agent][debug] running operation 'operation-config' for metricbeat.8.3.3
- 12:36:25.238
- elastic_agent
- [elastic_agent][debug] operator is looking for filebeat--8.3.3 in app collection: map[endpoint-security--8.3.3:0xc000324b40 filebeat--8.3.3:0xc0007d8500 filebeat--8.3.3--36643631373035623733363936343635:0xc0001c0000 metricbeat--8.3.3:0xc0007d83c0 metricbeat--8.3.3--36643631373035623733363936343635:0xc0007d8780]
- 12:36:25.238
- elastic_agent
- [elastic_agent][debug] binary 'filebeat.8.3.3' already exists in C:\Program Files\Elastic\Agent\data\elastic-agent-0ffbed\downloads\filebeat-8.3.3-windows-x86_64.zip. Skipping operation operation-fetch
- 12:36:25.238
- elastic_agent
- [elastic_agent][debug] running operation 'retryable block: operation-fetch operation-verify' for filebeat.8.3.3
- 12:36:25.239
- elastic_agent
- [elastic_agent][debug] binary 'filebeat.8.3.3' already exists in C:\Program Files\Elastic\Agent\data\elastic-agent-0ffbed\downloads\filebeat-8.3.3-windows-x86_64.zip. Skipping operation operation-fetch
- 12:36:25.239
- elastic_agent
- [elastic_agent][debug] running operation 'operation-verify' of the block 'retryable block: operation-fetch operation-verify'
- 12:36:25.466
- elastic_agent
- [elastic_agent][debug] FleetGateway calling Checkin API
- 12:36:25.466
- elastic_agent
- [elastic_agent][debug] Checking started
- 12:36:25.604
- elastic_agent
- [elastic_agent][debug] using previously saved ack token: c5df0268-efe1-4cb5-9d54-ac58ce7e28c5
- 12:36:25.604
- elastic_agent
- [elastic_agent][debug] Request method: POST, path: /api/fleet/agents/b54a5f07-631b-4bc5-b57f-c2bab9eb4a07/checkin, reqID: 01GB54CQM491SQVYV0HG5N78Q5
- 12:36:25.618
- elastic_agent
- [elastic_agent][info] operation 'operation-install' skipped for filebeat.8.3.3
- 12:36:25.618
- elastic_agent
- [elastic_agent][info] operation 'operation-start' skipped for filebeat.8.3.3
- 12:36:25.618
- elastic_agent
- [elastic_agent][debug] running operation 'operation-config' for filebeat.8.3.3
- 12:36:25.621
- elastic_agent
- [elastic_agent][debug] operator is looking for filebeat--8.3.3--36643631373035623733363936343635 in app collection: map[endpoint-security--8.3.3:0xc000324b40 filebeat--8.3.3:0xc0007d8500 filebeat--8.3.3--36643631373035623733363936343635:0xc0001c0000 metricbeat--8.3.3:0xc0007d83c0 metricbeat--8.3.3--36643631373035623733363936343635:0xc0007d8780]
- 12:36:25.621
- elastic_agent
- [elastic_agent][debug] binary 'filebeat.8.3.3' already exists in C:\Program Files\Elastic\Agent\data\elastic-agent-0ffbed\downloads\filebeat-8.3.3-windows-x86_64.zip. Skipping operation operation-fetch
- 12:36:25.622
- elastic_agent
- [elastic_agent][debug] running operation 'retryable block: operation-fetch operation-verify' for filebeat.8.3.3
- 12:36:25.622
- elastic_agent
- [elastic_agent][debug] binary 'filebeat.8.3.3' already exists in C:\Program Files\Elastic\Agent\data\elastic-agent-0ffbed\downloads\filebeat-8.3.3-windows-x86_64.zip. Skipping operation operation-fetch
- 12:36:25.622
- elastic_agent
- [elastic_agent][debug] running operation 'operation-verify' of the block 'retryable block: operation-fetch operation-verify'
- 12:36:25.984
- elastic_agent
- [elastic_agent][info] operation 'operation-install' skipped for filebeat.8.3.3
- 12:36:25.984
- elastic_agent
- [elastic_agent][info] operation 'operation-start' skipped for filebeat.8.3.3
- 12:36:25.984
- elastic_agent
- [elastic_agent][debug] running operation 'operation-config' for filebeat.8.3.3
- 12:36:25.987
- elastic_agent
- [elastic_agent][debug] operator is looking for metricbeat--8.3.3--36643631373035623733363936343635 in app collection: map[endpoint-security--8.3.3:0xc000324b40 filebeat--8.3.3:0xc0007d8500 filebeat--8.3.3--36643631373035623733363936343635:0xc0001c0000 metricbeat--8.3.3:0xc0007d83c0 metricbeat--8.3.3--36643631373035623733363936343635:0xc0007d8780]
- 12:36:25.987
- elastic_agent
- [elastic_agent][debug] binary 'metricbeat.8.3.3' already exists in C:\Program Files\Elastic\Agent\data\elastic-agent-0ffbed\downloads\metricbeat-8.3.3-windows-x86_64.zip. Skipping operation operation-fetch
- 12:36:25.987
- elastic_agent
- [elastic_agent][debug] running operation 'retryable block: operation-fetch operation-verify' for metricbeat.8.3.3
- 12:36:25.988
- elastic_agent
- [elastic_agent][debug] binary 'metricbeat.8.3.3' already exists in C:\Program Files\Elastic\Agent\data\elastic-agent-0ffbed\downloads\metricbeat-8.3.3-windows-x86_64.zip. Skipping operation operation-fetch
- 12:36:25.988
- elastic_agent
- [elastic_agent][debug] running operation 'operation-verify' of the block 'retryable block: operation-fetch operation-verify'
- 12:36:26.542
- elastic_agent
- [elastic_agent][info] operation 'operation-install' skipped for metricbeat.8.3.3
- 12:36:26.542
- elastic_agent
- [elastic_agent][info] operation 'operation-start' skipped for metricbeat.8.3.3
- 12:36:26.542
- elastic_agent
- [elastic_agent][debug] running operation 'operation-config' for metricbeat.8.3.3
- 12:36:26.547
- elastic_agent
- [elastic_agent][debug] 'capabilities-b26649da' has status 'online'
- 12:36:26.547
- elastic_agent
- [elastic_agent][debug] 'operator-default-2abaa78d' has status 'online'
- 12:36:26.547
- elastic_agent
- [elastic_agent][debug] 'gateway-97ae1550' has status 'online'
- 12:36:26.547
- elastic_agent
- [elastic_agent][debug] 'filebeat--8.3.3-dda0221c' has status 'online'
- 12:36:26.547
- elastic_agent
- [elastic_agent][debug] 'filebeat--8.3.3--36643631373035623733363936343635-128fafda' has status 'online'
- 12:36:26.547
- elastic_agent
- [elastic_agent][debug] 'metricbeat--8.3.3--36643631373035623733363936343635-ea9b9855' has status 'online'
- 12:36:26.547
- elastic_agent
- [elastic_agent][debug] 'metricbeat--8.3.3-580bdf52' has status 'online'
- 12:36:26.547
- elastic_agent
- [elastic_agent][debug] 'endpoint-security--8.3.3-93a1f995' has status 'online'
- 12:36:26.547
- elastic_agent
- [elastic_agent][info] Updating internal state
- 12:36:29.548
- elastic_agent
- [elastic_agent][debug] 'capabilities-b26649da' has status 'online'
- 12:36:29.548
- elastic_agent
- [elastic_agent][debug] 'operator-default-2abaa78d' has status 'online'
- 12:36:29.548
- elastic_agent
- [elastic_agent][debug] 'gateway-97ae1550' has status 'online'
- 12:36:29.548
- elastic_agent
- [elastic_agent][debug] 'filebeat--8.3.3--36643631373035623733363936343635-128fafda' has status 'online'
- 12:36:29.548
- elastic_agent
- [elastic_agent][debug] 'metricbeat--8.3.3--36643631373035623733363936343635-ea9b9855' has status 'online'
- 12:36:29.548
- elastic_agent
- [elastic_agent][debug] 'metricbeat--8.3.3-580bdf52' has status 'online'
- 12:36:29.548
- elastic_agent
- [elastic_agent][debug] 'endpoint-security--8.3.3-93a1f995' has status 'online'
- 12:36:29.548
- elastic_agent
- [elastic_agent][debug] 'filebeat--8.3.3-dda0221c' has status 'online'
- 12:36:29.548
- elastic_agent
- [elastic_agent][info] 2022-08-23T12:36:29+02:00 - message: Application: metricbeat--8.3.3[b54a5f07-631b-4bc5-b57f-c2bab9eb4a07]: State changed to CONFIG: Updating configuration - type: 'STATE' - sub_type: 'CONFIG'
- 12:36:30.032
- elastic_agent
- [elastic_agent][debug] 'capabilities-b26649da' has status 'online'
- 12:36:30.033
- elastic_agent
- [elastic_agent][debug] 'operator-default-2abaa78d' has status 'online'
- 12:36:30.033
- elastic_agent
- [elastic_agent][debug] 'gateway-97ae1550' has status 'online'
- 12:36:30.034
- elastic_agent
- [elastic_agent][debug] 'metricbeat--8.3.3-580bdf52' has status 'online'
- 12:36:30.034
- elastic_agent
- [elastic_agent][debug] 'endpoint-security--8.3.3-93a1f995' has status 'online'
- 12:36:30.034
- elastic_agent
- [elastic_agent][debug] 'filebeat--8.3.3-dda0221c' has status 'online'
- 12:36:30.034
- elastic_agent
- [elastic_agent][debug] 'filebeat--8.3.3--36643631373035623733363936343635-128fafda' has status 'online'
- 12:36:30.034
- elastic_agent
- [elastic_agent][debug] 'metricbeat--8.3.3--36643631373035623733363936343635-ea9b9855' has status 'online'
- 12:36:30.034
- elastic_agent
- [elastic_agent][info] 2022-08-23T12:36:30+02:00 - message: Application: metricbeat--8.3.3[b54a5f07-631b-4bc5-b57f-c2bab9eb4a07]: State changed to RUNNING: Running - type: 'STATE' - sub_type: 'RUNNING'
- 12:36:34.328
- elastic_agent
- [elastic_agent][debug] 'capabilities-b26649da' has status 'online'
- 12:36:34.329
- elastic_agent
- [elastic_agent][debug] 'operator-default-2abaa78d' has status 'online'
- 12:36:34.329
- elastic_agent
- [elastic_agent][debug] 'gateway-97ae1550' has status 'online'
- 12:36:34.329
- elastic_agent
- [elastic_agent][debug] 'metricbeat--8.3.3-580bdf52' has status 'online'
- 12:36:34.329
- elastic_agent
- [elastic_agent][debug] 'endpoint-security--8.3.3-93a1f995' has status 'online'
- 12:36:34.329
- elastic_agent
- [elastic_agent][debug] 'filebeat--8.3.3-dda0221c' has status 'online'
- 12:36:34.329
- elastic_agent
- [elastic_agent][debug] 'filebeat--8.3.3--36643631373035623733363936343635-128fafda' has status 'online'
- 12:36:34.329
- elastic_agent
- [elastic_agent][debug] 'metricbeat--8.3.3--36643631373035623733363936343635-ea9b9855' has status 'online'
- 12:36:34.329
- elastic_agent
- [elastic_agent][info] 2022-08-23T12:36:34+02:00 - message: Application: filebeat--8.3.3--36643631373035623733363936343635[b54a5f07-631b-4bc5-b57f-c2bab9eb4a07]: State changed to RUNNING: Running - type: 'STATE' - sub_type: 'RUNNING'
- 12:36:34.331
- elastic_agent
- [elastic_agent][debug] 'capabilities-b26649da' has status 'online'
- 12:36:34.331
- elastic_agent
- [elastic_agent][debug] 'operator-default-2abaa78d' has status 'online'
- 12:36:34.331
- elastic_agent
- [elastic_agent][debug] 'gateway-97ae1550' has status 'online'
- 12:36:34.331
- elastic_agent
- [elastic_agent][debug] 'metricbeat--8.3.3--36643631373035623733363936343635-ea9b9855' has status 'online'
- 12:36:34.331
- elastic_agent
- [elastic_agent][debug] 'metricbeat--8.3.3-580bdf52' has status 'online'
- 12:36:34.331
- elastic_agent
- [elastic_agent][debug] 'endpoint-security--8.3.3-93a1f995' has status 'online'
- 12:36:34.331
- elastic_agent
- [elastic_agent][debug] 'filebeat--8.3.3-dda0221c' has status 'online'
- 12:36:34.331
- elastic_agent
- [elastic_agent][debug] 'filebeat--8.3.3--36643631373035623733363936343635-128fafda' has status 'online'
- 12:36:34.331
- elastic_agent
- [elastic_agent][info] 2022-08-23T12:36:34+02:00 - message: Application: filebeat--8.3.3[b54a5f07-631b-4bc5-b57f-c2bab9eb4a07]: State changed to RUNNING: Running - type: 'STATE' - sub_type: 'RUNNING'
- 12:36:36.032
- elastic_agent
- [elastic_agent][debug] 'endpoint-security--8.3.3-93a1f995' has status 'online'
- 12:36:36.032
- elastic_agent
- [elastic_agent][debug] 'filebeat--8.3.3-dda0221c' has status 'online'
- 12:36:36.032
- elastic_agent
- [elastic_agent][debug] 'capabilities-b26649da' has status 'online'
- 12:36:36.032
- elastic_agent
- [elastic_agent][debug] 'operator-default-2abaa78d' has status 'online'
- 12:36:36.032
- elastic_agent
- [elastic_agent][debug] 'gateway-97ae1550' has status 'online'
- 12:36:36.033
- elastic_agent
- [elastic_agent][info] 2022-08-23T12:36:36+02:00 - message: Application: metricbeat--8.3.3--36643631373035623733363936343635[b54a5f07-631b-4bc5-b57f-c2bab9eb4a07]: State changed to RUNNING: Running - type: 'STATE' - sub_type: 'RUNNING'
- 12:36:36.033
- elastic_agent
- [elastic_agent][debug] 'metricbeat--8.3.3-580bdf52' has status 'online'
- 12:36:36.033
- elastic_agent
- [elastic_agent][debug] 'filebeat--8.3.3--36643631373035623733363936343635-128fafda' has status 'online'
- 12:36:36.033
- elastic_agent
- [elastic_agent][debug] 'metricbeat--8.3.3--36643631373035623733363936343635-ea9b9855' has status 'online'
- 12:37:20.397
- elastic_agent
- [elastic_agent][debug] 'capabilities-b26649da' has status 'online'
- 12:37:20.397
- elastic_agent
- [elastic_agent][info] 2022-08-23T12:37:20+02:00 - message: Application: endpoint-security--8.3.3[b54a5f07-631b-4bc5-b57f-c2bab9eb4a07]: State changed to DEGRADED: Missed last check-in - type: 'STATE' - sub_type: 'RUNNING'
- 12:37:20.397
- elastic_agent
- [elastic_agent][debug] 'operator-default-2abaa78d' has status 'online'
- 12:37:20.397
- elastic_agent
- [elastic_agent][debug] 'gateway-97ae1550' has status 'online'
- 12:37:20.397
- elastic_agent
- [elastic_agent][debug] 'metricbeat--8.3.3--36643631373035623733363936343635-ea9b9855' has status 'online'
- 12:37:20.397
- elastic_agent
- [elastic_agent][debug] 'metricbeat--8.3.3-580bdf52' has status 'online'
- 12:37:20.397
- elastic_agent
- [elastic_agent][debug] 'endpoint-security--8.3.3-93a1f995' has status 'degraded'
- 12:37:20.397
- elastic_agent
- [elastic_agent][debug] 'filebeat--8.3.3-dda0221c' has status 'online'
- 12:37:20.397
- elastic_agent
- [elastic_agent][debug] 'filebeat--8.3.3--36643631373035623733363936343635-128fafda' has status 'online'
- 12:37:20.397
- elastic_agent
- [elastic_agent][warn] Elastic Agent status changed to: 'degraded'
- 12:38:20.412
- elastic_agent
- [elastic_agent][debug] 'gateway-97ae1550' has status 'online'
- 12:38:20.412
- elastic_agent
- [elastic_agent][debug] 'capabilities-b26649da' has status 'online'
- 12:38:20.412
- elastic_agent
- [elastic_agent][error] Elastic Agent status changed to: 'error'
- 12:38:20.412
- elastic_agent
- [elastic_agent][debug] 'endpoint-security--8.3.3-93a1f995' has status 'error'
- 12:38:20.412
- elastic_agent
- [elastic_agent][error] 2022-08-23T12:38:20+02:00 - message: Application: endpoint-security--8.3.3[b54a5f07-631b-4bc5-b57f-c2bab9eb4a07]: State changed to FAILED: Missed two check-ins - type: 'ERROR' - sub_type: 'FAILED'
- 12:38:20.412
- elastic_agent
- [elastic_agent][debug] 'metricbeat--8.3.3--36643631373035623733363936343635-ea9b9855' has status 'online'
- 12:38:20.412
- elastic_agent
- [elastic_agent][debug] 'filebeat--8.3.3--36643631373035623733363936343635-128fafda' has status 'online'
- 12:38:20.412
- elastic_agent
- [elastic_agent][debug] 'metricbeat--8.3.3-580bdf52' has status 'online'
- 12:38:20.412
- elastic_agent
- [elastic_agent][debug] 'operator-default-2abaa78d' has status 'online
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement