log.level: debug

message: PublishEvents: 4 events have been published to elasticsearch in 28.587625ms.

binary: filebeat

type: filestream

source: filestream-monitoring

log.logger: elasticsearch

service.name: filebeat


message: stateless ack

log.logger: acker


message: ackloop: return ack to broker loop:4

log.logger: publisher


message: ackloop:  done send ack


message: stateless ack


message: End of file reached: /usr/share/elastic-agent/state/data/logs/elastic-agent-20231106-5.ndjson; Backoff now.


message: io.pressure does not exist. Skipping.


log.level: info

message: Non-zero metrics in the last 30s

log.logger: monitoring


message: io.pressure does not exist. Skipping.

binary: metricbeat

type: beat/metrics

source: beat/metrics-monitoring

service.name: metricbeat


message: Non-zero metrics in the last 30s


message: io.pressure does not exist. Skipping.

type: http/metrics

source: http/metrics-monitoring


message: Non-zero metrics in the last 30s


message: Start next scan


message: File scan complete


message: File /usr/share/elastic-agent/state/data/logs/elastic-agent-20231106-5.ndjson has been updated

operation: write


message: Starting harvester for file


message: Stopped harvester for file


message: io.pressure does not exist. Skipping.


message: stateless ack


message: PublishEvents: 2 events have been published to elasticsearch in 14.176834ms.


message: ackloop: return ack to broker loop:2


message: ackloop:  done send ack


message: PublishEvents: 2 events have been published to elasticsearch in 4.875ms.


message: ackloop: return ack to broker loop:2


message: ackloop:  done send ack


message: HTTP start

binary: fleet-server

type: fleet-server

source: fleet-server-default

service.type: fleet-server

tls.client.server_name: localhost

service.name: fleet-server

http.request.method: GET


message: unauthenticated status request, return short status response only

error.message: no authorization header

mod: status


message: ok status


message: 200 HTTP Request


message: PublishEvents: 1 events have been published to elasticsearch in 8.016333ms.


message: ackloop: return ack to broker loop:1


message: ackloop:  done send ack


message: stateless ack


message: PublishEvents: 4 events have been published to elasticsearch in 5.763ms.


message: ackloop: return ack to broker loop:4


message: stateless ack


message: HTTP start


message: 200 HTTP Request


message: PublishEvents: 4 events have been published to elasticsearch in 13.605458ms.


message: ensuring leadership of policies

ctx: policy leader manager


message: timeout on global checkpoints advance, poll again

ctx: index monitor


message: Start next scan


message: File scan complete


message: Starting harvester for file


message: Stopped harvester for file


message: HTTP start


message: ok status


message: PublishEvents: 2 events have been published to elasticsearch in 3.638458ms.


message: ackloop: return ack to broker loop:2


message: ackloop:  done send ack


message: PublishEvents: 4 events have been published to elasticsearch in 6.101791ms.


message: stateless ack


message: ackloop: return ack to broker loop:4


message: stateless ack


message: HTTP start


message: ok status


message: 200 HTTP Request


message: PublishEvents: 4 events have been published to elasticsearch in 14.801292ms.


message: ackloop: return ack to broker loop:4


message: ackloop:  done send ack


message: Start next scan


message: File scan complete


message: Starting harvester for file


message: Stopped harvester for file


message: HTTP start


message: ok status


message: 200 HTTP Request


message: updated checkpoint


message: hits found after notify


message: Ignore policy that has not passed through coordinator

fleet.policy.id: elastic-agent-managed-ep

ctx: policy agent monitor


message: PublishEvents: 4 events have been published to elasticsearch in 5.717708ms.


message: stateless ack


message: ackloop: return ack to broker loop:4


message: Policy coordinator added a new policy revision

policy_id: elastic-agent-managed-ep


message: updated checkpoint


message: hits found after notify


message: scheduled pendingQ on policy revision


message: New revision of policy received and added to the queue


message: dispatch


message: preparing elasticsearch output

fleet.ctx: processPolicy

fleet.policy.output.name: default


message: must generate api key as policy output permissions changed


message: Generating a new API key


message: API Keys updated.


message: Updating agent record to pick up most recent roles.


message: stateless ack


message: End of file reached: /usr/share/elastic-agent/state/data/logs/elastic-agent-20231106-5.ndjson; Backoff now.


message: Action delivered to agent on checkin


message: unsubscribe


message: 200 HTTP Request

http.request.method: POST


message: HTTP start

tls.client.server_name: fleet-server


message: ApiKey authenticated


message: ack event

actionSubType: ACKNOWLEDGED


message: ack policy revision

agent.policyId: elastic-agent-managed-ep

rev.policyId: elastic-agent-managed-ep


message: Updating agent record to pick up reduced roles.


message: PublishEvents: 16 events have been published to elasticsearch in 7.691667ms.


message: stateless ack


message: ackloop: return ack to broker loop:16


message: ackloop:  done send ack


message: ack policy


message: 200 HTTP Request


message: applying new components data

message: Healthy: communicating with pid '2910'

status: HEALTHY

type: log

message: Healthy

type: output

message: Healthy

type: input

message: Healthy: communicating with pid '2919'

type: system/metrics

message: Healthy

message: Healthy

message: Healthy: communicating with pid '2927'

message: Healthy

message: Healthy

message: Healthy: communicating with pid '2938'

message: Healthy

message: Healthy

message: Healthy: communicating with pid '2946'

message: Healthy

message: Healthy

message: Healthy: communicating with pid '65045'

type: httpjson

message: Healthy

message: Healthy


message: Found token cached


message: subscribed to policy monitor


message: checkin start long poll

status: online


message: HTTP start


message: unauthenticated status request, return short status response only


message: ok status


message: 200 HTTP Request


message: PublishEvents: 17 events have been published to elasticsearch in 6.334958ms.


message: ackloop: return ack to broker loop:17


message: stateless ack


message: io.pressure does not exist. Skipping.


message: Non-zero metrics in the last 30s


message: io.pressure does not exist. Skipping.


message: Non-zero metrics in the last 30s


message: io.pressure does not exist. Skipping.


message: Non-zero metrics in the last 30s


message: PublishEvents: 4 events have been published to elasticsearch in 13.640375ms.


message: stateless ack


message: ackloop: return ack to broker loop:4


message: ackloop:  done send ack


message: Start next scan


message: File scan complete


message: File /usr/share/elastic-agent/state/data/logs/elastic-agent-20231106-5.ndjson has been updated


message: Starting harvester for file


message: Stopped harvester for file


message: ensuring leadership of policies


message: HTTP start


message: ok status


message: 200 HTTP Request


message: stateless ack


message: PublishEvents: 5 events have been published to elasticsearch in 18.354667ms.


message: ackloop: return ack to broker loop:5


message: HTTP start


message: ok status


message: 200 HTTP Request


message: stateless ack


message: PublishEvents: 4 events have been published to elasticsearch in 14.141792ms.


message: ackloop: return ack to broker loop:4


message: ackloop:  done send ack


message: Start next scan


message: File scan complete


message: Starting harvester for file


message: Stopped harvester for file