Jun 17 08:21:08 app-srv06 filebeat[2304]: 2021-06-17T08:21:08.891Z#011INFO#011instance/beat.go:665#011Home path: [/usr/share/filebeat] Config path: [/etc/filebeat] Data path: [/var/lib/filebeat] Logs path: [/var/log/filebeat]
Jun 17 08:21:08 app-srv06 filebeat[2304]: 2021-06-17T08:21:08.891Z#011INFO#011instance/beat.go:673#011Beat ID: e8debc5e-59c7-4b54-be71-6bbb8ec7e9d3
Jun 17 08:21:08 app-srv06 filebeat[2304]: 2021-06-17T08:21:08.893Z#011INFO#011[seccomp]#011seccomp/seccomp.go:124#011Syscall filter successfully installed
Jun 17 08:21:08 app-srv06 filebeat[2304]: 2021-06-17T08:21:08.893Z#011INFO#011[beat]#011instance/beat.go:1014#011Beat info#011{"system_info": {"beat": {"path": {"config": "/etc/filebeat", "data": "/var/lib/filebeat", "home": "/usr/share/filebeat", "logs": "/var/log/filebeat"}, "type": "filebeat", "uuid": "e8debc5e-59c7-4b54-be71-6bbb8ec7e9d3"}}}
Jun 17 08:21:08 app-srv06 filebeat[2304]: 2021-06-17T08:21:08.894Z#011INFO#011[beat]#011instance/beat.go:1023#011Build info#011{"system_info": {"build": {"commit": "686ba416a74193f2e69dcfa2eb142f4364a79307", "libbeat": "7.13.2", "time": "2021-06-10T21:04:13.000Z", "version": "7.13.2"}}}
Jun 17 08:21:08 app-srv06 filebeat[2304]: 2021-06-17T08:21:08.894Z#011INFO#011[beat]#011instance/beat.go:1026#011Go runtime info#011{"system_info": {"go": {"os":"linux","arch":"amd64","max_procs":8,"version":"go1.15.13"}}}
Jun 17 08:21:08 app-srv06 filebeat[2304]: 2021-06-17T08:21:08.894Z#011INFO#011[beat]#011instance/beat.go:1030#011Host info#011{"system_info": {"host": {"architecture":"x86_64","boot_time":"2021-06-17T08:11:51Z","containerized":false,"name":"app-srv06","ip":["127.0.0.1/8","::1/128","10.102.62.3/29","fe80::20c:29ff:fec4:186e/64"],"kernel_version":"5.4.0-74-generic","mac":["00:0c:29:c4:18:6e"],"os":{"type":"linux","family":"debian","platform":"ubuntu","name":"Ubuntu","version":"20.04.2 LTS (Focal Fossa)","major":20,"minor":4,"patch":2,"codename":"focal"},"timezone":"UTC","timezone_offset_sec":0,"id":"2bc0d50dff8547f581ba8b4fe87a6628"}}}
Jun 17 08:21:08 app-srv06 filebeat[2304]: 2021-06-17T08:21:08.895Z#011INFO#011[beat]#011instance/beat.go:1059#011Process info#011{"system_info": {"process": {"capabilities": {"inheritable":null,"permitted":["chown","dac_override","dac_read_search","fowner","fsetid","kill","setgid","setuid","setpcap","linux_immutable","net_bind_service","net_broadcast","net_admin","net_raw","ipc_lock","ipc_owner","sys_module","sys_rawio","sys_chroot","sys_ptrace","sys_pacct","sys_admin","sys_boot","sys_nice","sys_resource","sys_time","sys_tty_config","mknod","lease","audit_write","audit_control","setfcap","mac_override","mac_admin","syslog","wake_alarm","block_suspend","audit_read"],"effective":["chown","dac_override","dac_read_search","fowner","fsetid","kill","setgid","setuid","setpcap","linux_immutable","net_bind_service","net_broadcast","net_admin","net_raw","ipc_lock","ipc_owner","sys_module","sys_rawio","sys_chroot","sys_ptrace","sys_pacct","sys_admin","sys_boot","sys_nice","sys_resource","sys_time","sys_tty_config","mknod","lease","audit_write","audit_control","setfcap","mac_override","mac_admin","syslog","wake_alarm","block_suspend","audit_read"],"bounding":["chown","dac_override","dac_read_search","fowner","fsetid","kill","setgid","setuid","setpcap","linux_immutable","net_bind_service","net_broadcast","net_admin","net_raw","ipc_lock","ipc_owner","sys_module","sys_rawio","sys_chroot","sys_ptrace","sys_pacct","sys_admin","sys_boot","sys_nice","sys_resource","sys_time","sys_tty_config","mknod","lease","audit_write","audit_control","setfcap","mac_override","mac_admin","syslog","wake_alarm","block_suspend","audit_read"],"ambient":null}, "cwd": "/", "exe": "/usr/share/filebeat/bin/filebeat", "name": "filebeat", "pid": 2304, "ppid": 1, "seccomp": {"mode":"filter","no_new_privs":true}, "start_time": "2021-06-17T08:21:08.510Z"}}}
Jun 17 08:21:08 app-srv06 filebeat[2304]: 2021-06-17T08:21:08.895Z#011INFO#011instance/beat.go:309#011Setup Beat: filebeat; Version: 7.13.2
Jun 17 08:21:08 app-srv06 filebeat[2304]: 2021-06-17T08:21:08.896Z#011INFO#011[publisher]#011pipeline/module.go:113#011Beat name: app-srv06
Jun 17 08:21:08 app-srv06 filebeat[2304]: 2021-06-17T08:21:08.896Z#011WARN#011beater/filebeat.go:178#011Filebeat is unable to load the Ingest Node pipelines for the configured modules because the Elasticsearch output is not configured/enabled. If you have already loaded the Ingest Node pipelines or are using Logstash pipelines, you can ignore this warning.
Jun 17 08:21:08 app-srv06 filebeat[2304]: 2021-06-17T08:21:08.897Z#011INFO#011instance/beat.go:473#011filebeat start running.
Jun 17 08:21:08 app-srv06 filebeat[2304]: 2021-06-17T08:21:08.897Z#011INFO#011memlog/store.go:119#011Loading data file of '/var/lib/filebeat/registry/filebeat' succeeded. Active transaction id=0
Jun 17 08:21:08 app-srv06 filebeat[2304]: 2021-06-17T08:21:08.897Z#011INFO#011[monitoring]#011log/log.go:117#011Starting metrics logging every 30s
Jun 17 08:21:09 app-srv06 filebeat[2304]: 2021-06-17T08:21:09.207Z#011INFO#011memlog/store.go:124#011Finished loading transaction log file for '/var/lib/filebeat/registry/filebeat'. Active transaction id=17976
Jun 17 08:21:09 app-srv06 filebeat[2304]: 2021-06-17T08:21:09.207Z#011WARN#011beater/filebeat.go:381#011Filebeat is unable to load the Ingest Node pipelines for the configured modules because the Elasticsearch output is not configured/enabled. If you have already loaded the Ingest Node pipelines or are using Logstash pipelines, you can ignore this warning.
Jun 17 08:21:09 app-srv06 filebeat[2304]: 2021-06-17T08:21:09.207Z#011INFO#011[registrar]#011registrar/registrar.go:109#011States Loaded from registrar: 20
Jun 17 08:21:09 app-srv06 filebeat[2304]: 2021-06-17T08:21:09.207Z#011INFO#011[crawler]#011beater/crawler.go:71#011Loading Inputs: 2
Jun 17 08:21:09 app-srv06 filebeat[2304]: 2021-06-17T08:21:09.215Z#011INFO#011log/input.go:157#011Configured paths: [/var/log/*.log]
Jun 17 08:21:09 app-srv06 filebeat[2304]: 2021-06-17T08:21:09.215Z#011INFO#011[crawler]#011beater/crawler.go:141#011Starting input (ID: 11204088409762598069)
Jun 17 08:21:09 app-srv06 filebeat[2304]: 2021-06-17T08:21:09.218Z#011INFO#011log/input.go:157#011Configured paths: [/var/log/messages* /var/log/syslog*]
Jun 17 08:21:09 app-srv06 filebeat[2304]: 2021-06-17T08:21:09.218Z#011INFO#011log/input.go:157#011Configured paths: [/var/log/auth.log* /var/log/secure*]
Jun 17 08:21:09 app-srv06 filebeat[2304]: 2021-06-17T08:21:09.218Z#011INFO#011[crawler]#011beater/crawler.go:108#011Loading and starting Inputs completed. Enabled inputs: 1
Jun 17 08:21:09 app-srv06 filebeat[2304]: 2021-06-17T08:21:09.218Z#011INFO#011cfgfile/reload.go:164#011Config reloader started
Jun 17 08:21:09 app-srv06 filebeat[2304]: 2021-06-17T08:21:09.221Z#011INFO#011log/input.go:157#011Configured paths: [/var/log/auth.log* /var/log/secure*]
Jun 17 08:21:09 app-srv06 filebeat[2304]: 2021-06-17T08:21:09.221Z#011INFO#011log/input.go:157#011Configured paths: [/var/log/messages* /var/log/syslog*]
Jun 17 08:21:09 app-srv06 filebeat[2304]: 2021-06-17T08:21:09.221Z#011INFO#011cfgfile/reload.go:224#011Loading of config files completed.
Jun 17 08:21:09 app-srv06 filebeat[2304]: 2021-06-17T08:21:09.222Z#011INFO#011log/harvester.go:302#011Harvester started for file: /var/log/syslog
Jun 17 08:21:11 app-srv06 filebeat[2304]: 2021-06-17T08:21:11.893Z#011INFO#011[add_cloud_metadata]#011add_cloud_metadata/add_cloud_metadata.go:101#011add_cloud_metadata: hosting provider type not detected.
Jun 17 08:21:12 app-srv06 filebeat[2304]: 2021-06-17T08:21:12.894Z#011INFO#011[publisher_pipeline_output]#011pipeline/output.go:143#011Connecting to backoff(async(tcp://localhost:5044))
Jun 17 08:21:12 app-srv06 filebeat[2304]: 2021-06-17T08:21:12.894Z#011INFO#011[publisher]#011pipeline/retry.go:219#011retryer: send unwait signal to consumer
Jun 17 08:21:12 app-srv06 filebeat[2304]: 2021-06-17T08:21:12.894Z#011INFO#011[publisher]#011pipeline/retry.go:223#011  done
Jun 17 08:21:12 app-srv06 filebeat[2304]: 2021-06-17T08:21:12.895Z#011INFO#011[publisher_pipeline_output]#011pipeline/output.go:151#011Connection to backoff(async(tcp://localhost:5044)) established
Jun 17 08:21:38 app-srv06 filebeat[2304]: 2021-06-17T08:21:38.904Z#011INFO#011[monitoring]#011log/log.go:144#011Non-zero metrics in the last 30s#011{"monitoring": {"metrics": {"beat":{"cgroup":{"cpu":{"cfs":{"period":{"us":100000}},"id":"filebeat.service"},"cpuacct":{"id":"filebeat.service","total":{"ns":829934818}},"memory":{"id":"filebeat.service","mem":{"limit":{"bytes":9223372036854771712},"usage":{"bytes":61652992}}}},"cpu":{"system":{"ticks":100,"time":{"ms":104}},"total":{"ticks":830,"time":{"ms":838},"value":830},"user":{"ticks":730,"time":{"ms":734}}},"handles":{"limit":{"hard":524288,"soft":1024},"open":12},"info":{"ephemeral_id":"b3b322c5-9c73-4771-b5a7-a581f546419b","uptime":{"ms":30111}},"memstats":{"gc_next":21656720,"memory_alloc":11138296,"memory_sys":76563456,"memory_total":102014312,"rss":128966656},"runtime":{"goroutines":42}},"filebeat":{"events":{"active":1,"added":117,"done":116},"harvester":{"open_files":1,"running":1,"started":1}},"libbeat":{"config":{"module":{"running":1,"starts":1},"reloads":1,"scans":1},"output":{"events":{"acked":94,"active":0,"batches":8,"total":94},"read":{"bytes":48},"type":"logstash","write":{"bytes":14078}},"pipeline":{"clients":3,"events":{"active":1,"filtered":22,"published":95,"retry":73,"total":117},"queue":{"acked":94,"max_events":4096}}},"registrar":{"states":{"current":20,"update":116},"writes":{"success":30,"total":30}},"system":{"cpu":{"cores":8},"load":{"1":1.17,"15":0.68,"5":1.04,"norm":{"1":0.1463,"15":0.085,"5":0.13}}}}}}
Jun 17 08:22:08 app-srv06 filebeat[2304]: 2021-06-17T08:22:08.904Z#011INFO#011[monitoring]#011log/log.go:144#011Non-zero metrics in the last 30s#011{"monitoring": {"metrics": {"beat":{"cgroup":{"cpuacct":{"total":{"ns":143681983}},"memory":{"mem":{"usage":{"bytes":3448832}}}},"cpu":{"system":{"ticks":140,"time":{"ms":44}},"total":{"ticks":960,"time":{"ms":136},"value":960},"user":{"ticks":820,"time":{"ms":92}}},"handles":{"limit":{"hard":524288,"soft":1024},"open":12},"info":{"ephemeral_id":"b3b322c5-9c73-4771-b5a7-a581f546419b","uptime":{"ms":60106}},"memstats":{"gc_next":21736096,"memory_alloc":18861496,"memory_total":120087816,"rss":131637248},"runtime":{"goroutines":42}},"filebeat":{"events":{"active":-1,"added":29,"done":30},"harvester":{"open_files":1,"running":1}},"libbeat":{"config":{"module":{"running":1}},"output":{"events":{"acked":30,"active":0,"batches":11,"total":30},"read":{"bytes":66},"write":{"bytes":12778}},"pipeline":{"clients":3,"events":{"active":0,"published":29,"total":29},"queue":{"acked":30}}},"registrar":{"states":{"current":20,"update":30},"writes":{"success":11,"total":11}},"system":{"load":{"1":0.79,"15":0.66,"5":0.96,"norm":{"1":0.0988,"15":0.0825,"5":0.12}}}}}}
Jun 17 08:22:38 app-srv06 filebeat[2304]: 2021-06-17T08:22:38.899Z#011INFO#011[monitoring]#011log/log.go:144#011Non-zero metrics in the last 30s#011{"monitoring": {"metrics": {"beat":{"cgroup":{"cpuacct":{"total":{"ns":221224294}},"memory":{"mem":{"usage":{"bytes":1671168}}}},"cpu":{"system":{"ticks":240,"time":{"ms":94}},"total":{"ticks":1190,"time":{"ms":221},"value":1190},"user":{"ticks":950,"time":{"ms":127}}},"handles":{"limit":{"hard":524288,"soft":1024},"open":12},"info":{"ephemeral_id":"b3b322c5-9c73-4771-b5a7-a581f546419b","uptime":{"ms":90106}},"memstats":{"gc_next":21655632,"memory_alloc":12446792,"memory_total":134993192,"rss":133152768},"runtime":{"goroutines":42}},"filebeat":{"events":{"added":25,"done":25},"harvester":{"open_files":1,"running":1}},"libbeat":{"config":{"module":{"running":1}},"output":{"events":{"acked":25,"active":0,"batches":9,"total":25},"read":{"bytes":54},"write":{"bytes":7775}},"pipeline":{"clients":3,"events":{"active":0,"published":25,"total":25},"queue":{"acked":25}}},"registrar":{"states":{"current":20,"update":25},"writes":{"success":9,"total":9}},"system":{"load":{"1":0.56,"15":0.65,"5":0.88,"norm":{"1":0.07,"15":0.0813,"5":0.11}}}}}}
Jun 17 08:23:08 app-srv06 filebeat[2304]: 2021-06-17T08:23:08.905Z#011INFO#011[monitoring]#011log/log.go:144#011Non-zero metrics in the last 30s#011{"monitoring": {"metrics": {"beat":{"cgroup":{"cpuacct":{"total":{"ns":114210140}},"memory":{"mem":{"usage":{"bytes":131072}}}},"cpu":{"system":{"ticks":280,"time":{"ms":38}},"total":{"ticks":1300,"time":{"ms":113},"value":1300},"user":{"ticks":1020,"time":{"ms":75}}},"handles":{"limit":{"hard":524288,"soft":1024},"open":12},"info":{"ephemeral_id":"b3b322c5-9c73-4771-b5a7-a581f546419b","uptime":{"ms":120106}},"memstats":{"gc_next":21641808,"memory_alloc":17336288,"memory_total":150180080,"rss":133414912},"runtime":{"goroutines":42}},"filebeat":{"events":{"active":4,"added":32,"done":28},"harvester":{"open_files":1,"running":1}},"libbeat":{"config":{"module":{"running":1}},"output":{"events":{"acked":28,"active":0,"batches":9,"total":28},"read":{"bytes":54},"write":{"bytes":11376}},"pipeline":{"clients":3,"events":{"active":4,"published":32,"total":32},"queue":{"acked":28}}},"registrar":{"states":{"current":20,"update":28},"writes":{"success":9,"total":9}},"system":{"load":{"1":0.65,"15":0.65,"5":0.88,"norm":{"1":0.0813,"15":0.0813,"5":0.11}}}}}}
Jun 17 08:23:19 app-srv06 filebeat[2304]: 2021-06-17T08:23:19.228Z#011INFO#011log/harvester.go:302#011Harvester started for file: /var/log/ubuntu-advantage.log
Jun 17 08:23:38 app-srv06 filebeat[2304]: 2021-06-17T08:23:38.904Z#011INFO#011[monitoring]#011log/log.go:144#011Non-zero metrics in the last 30s#011{"monitoring": {"metrics": {"beat":{"cgroup":{"cpuacct":{"total":{"ns":200064507}},"memory":{"mem":{"usage":{"bytes":184320}}}},"cpu":{"system":{"ticks":370,"time":{"ms":99}},"total":{"ticks":1500,"time":{"ms":202},"value":1500},"user":{"ticks":1130,"time":{"ms":103}}},"handles":{"limit":{"hard":524288,"soft":1024},"open":13},"info":{"ephemeral_id":"b3b322c5-9c73-4771-b5a7-a581f546419b","uptime":{"ms":150106}},"memstats":{"gc_next":21640048,"memory_alloc":14272376,"memory_total":166970992,"rss":133365760},"runtime":{"goroutines":47}},"filebeat":{"events":{"active":-3,"added":35,"done":38},"harvester":{"open_files":2,"running":2,"started":1}},"libbeat":{"config":{"module":{"running":1}},"output":{"events":{"acked":37,"active":0,"batches":10,"total":37},"read":{"bytes":66},"write":{"bytes":9313}},"pipeline":{"clients":3,"events":{"active":1,"filtered":1,"published":34,"total":35},"queue":{"acked":37}}},"registrar":{"states":{"current":20,"update":38},"writes":{"success":11,"total":11}},"system":{"load":{"1":0.47,"15":0.63,"5":0.81,"norm":{"1":0.0588,"15":0.0788,"5":0.1013}}}}}}