Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add Filebeat registry to the diagnostics bundle for the control V2 protocol #33238

Open
Tracked by #3640
rdner opened this issue Sep 30, 2022 · 1 comment · May be fixed by #41795
Open
Tracked by #3640

Add Filebeat registry to the diagnostics bundle for the control V2 protocol #33238

rdner opened this issue Sep 30, 2022 · 1 comment · May be fixed by #41795
Assignees
Labels
Agent enhancement estimation:Week Task that represents a week of work. Filebeat Filebeat Team:Elastic-Agent-Data-Plane Label for the Agent Data Plane team

Comments

@rdner
Copy link
Member

rdner commented Sep 30, 2022

Describe the enhancement:

It's possible to register a hook in the control protocol V2 so when the agent requests diagnostics from Filebeat it could send some data useful for debugging back to the agent. This should include the Filebeat registry as well.

Describe a specific use case for the enhancement or feature:

We had a few SDHs that were related to the changed inode value of the input file with the same filename. Filebeat gets confused and can ingest lines multiple times. This might happen due to a log rotation strategy or using a network share as a source filesystem. To diagnose this, we need to scan through the registry log file log.json. It can be done, for example, with this tool.

@rdner rdner added enhancement Filebeat Filebeat Team:Elastic-Agent-Data-Plane Label for the Agent Data Plane team estimation:Week Task that represents a week of work. labels Sep 30, 2022
@elasticmachine
Copy link
Collaborator

Pinging @elastic/elastic-agent-data-plane (Team:Elastic-Agent-Data-Plane)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Agent enhancement estimation:Week Task that represents a week of work. Filebeat Filebeat Team:Elastic-Agent-Data-Plane Label for the Agent Data Plane team
Projects
None yet
Development

Successfully merging a pull request may close this issue.

4 participants