Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Elastic agent version 8.7.0 breaking UDP/TCP filebeat inputs #2502

Closed
markv9401 opened this issue Apr 14, 2023 · 1 comment
Closed

Elastic agent version 8.7.0 breaking UDP/TCP filebeat inputs #2502

markv9401 opened this issue Apr 14, 2023 · 1 comment
Labels
bug Something isn't working

Comments

@markv9401
Copy link

After upgrading to version 8.7.0, UDP/TCP listeners stopped working. They crash and cause the agent to restart. It happens with for example pfSense and Fortinet integrations. For more details please see: https://discuss.elastic.co/t/elastic-agent-v8-7-0-filebeat-udp-listener-error/329579

Examples:

{"log.level":"error","@timestamp":"2023-04-07T12:57:29.090+0200","message":"panic: runtime error: index out of range [1] with length 0","component":{"binary":"filebeat","dataset":"elastic_agent.filebeat","id":"udp-default","type":"udp"},"log":{"source":"udp-default"},"ecs.version":"1.6.0"}
panic: runtime error: index out of range [1] with length 0
goroutine 434 [running]:
[github.com/elastic/beats/v7/filebeat/input/tcp.procNetTCP](http://github.com/elastic/beats/v7/filebeat/input/tcp.procNetTCP)({0xc0009b4450?, 0x1, 0x1})
[github.com/elastic/beats/v7/filebeat/input/tcp/input.go:277 1](http://github.com/elastic/beats/v7/filebeat/input/tcp/input.go:277) +0x47b
[github.com/elastic/beats/v7/filebeat/input/tcp.(*inputMetrics).poll](http://github.com/elastic/beats/v7/filebeat/input/tcp.(*inputMetrics).poll)(0xc000e67490, {0xc0009b4450, 0x1, 0x1}, 0x55dfb5a0bcc6?, 0xc0009b4240)
[github.com/elastic/beats/v7/filebeat/input/tcp/input.go:249](http://github.com/elastic/beats/v7/filebeat/input/tcp/input.go:249) +0xd1
created by [github.com/elastic/beats/v7/filebeat/input/tcp.newInputMetrics](http://github.com/elastic/beats/v7/filebeat/input/tcp.newInputMetrics)
[github.com/elastic/beats/v7/filebeat/input/tcp/input.go:223](http://github.com/elastic/beats/v7/filebeat/input/tcp/input.go:223) +0x9d0

Version 8.6.2 worked just fine. After downgrading back to 8.6.2 everything works again. All other components (Elasticsearch and Kibana) are both 8.7.0.

@markv9401 markv9401 added the bug Something isn't working label Apr 14, 2023
@cmacknz
Copy link
Member

cmacknz commented Apr 19, 2023

Duplicate of elastic/beats#35064 which will be fixed in 8.7.1.

@cmacknz cmacknz closed this as completed Apr 19, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

2 participants