Microsoft Windows [Version 6.3.9600] (c) 2013 Microsoft Corporation. All rights reserved. C:\Windows\system32>cd .. C:\Windows>cd .. C:\>cd elastic-agent-8.0.0-windows-x86_64 C:\elastic-agent-8.0.0-windows-x86_64>cd elastic-agent-8.0.0-windows-x86_64 C:\elastic-agent-8.0.0-windows-x86_64\elastic-agent-8.0.0-windows-x86_64>dir Volume in drive C has no label. Volume Serial Number is 9AB7-7D6D Directory of C:\elastic-agent-8.0.0-windows-x86_64\elastic-agent-8.0.0-windows- x86_64 05/27/2020 03:06 PM . 05/27/2020 03:06 PM .. 05/27/2020 04:25 PM 41 .build_hash.txt 05/27/2020 03:06 PM data 05/27/2020 04:25 PM 15,622,144 elastic-agent.exe 05/27/2020 04:24 PM 4,510 elastic-agent.reference.yml 05/27/2020 03:06 PM 2,387 elastic-agent.yml 05/27/2020 04:24 PM 4,493 elastic-agent.yml.2020-05-27T15-06-35.917 7.bak 05/27/2020 03:06 PM 462 fleet.yml 05/27/2020 03:03 PM 153 fleet.yml.old 05/27/2020 04:25 PM 920 install-service-elastic-agent.ps1 05/27/2020 01:08 PM 13,675 LICENSE.txt 05/27/2020 04:25 PM 863 README.md 05/27/2020 04:25 PM 260 uninstall-service-elastic-agent.ps1 11 File(s) 15,649,908 bytes 3 Dir(s) 51,005,943,808 bytes free C:\elastic-agent-8.0.0-windows-x86_64\elastic-agent-8.0.0-windows-x86_64>elastic -agent.exe run 2020-05-27T15:15:40-04:00 INFO warn.go:18 The Elastic Agent is currently i n Experimental and should not be used in production 2020-05-27T15:15:40-04:00 INFO application.go:48 Detecting execution mode 2020-05-27T15:15:40-04:00 INFO application.go:68 Agent is managed by Flee t 2020-05-27T15:15:40-04:00 INFO managed_mode.go:202 Agent is starting 2020-05-27T15:15:42-04:00 DEBUG fleet_gateway.go:146 FleetGateway calling Che ckin API 2020-05-27T15:15:42-04:00 DEBUG client.go:170 Request method: POST, path: /api /ingest_manager/fleet/agents/f8419071-5c7d-4c54-8a0e-5cf4c9a9eec5/checkin {"action":"checkin","success":true,"actions":[{"agent_id":"f8419071-5c7d-4c54-8a 0e-5cf4c9a9eec5","type":"CONFIG_CHANGE","data":{"config":{"id":"7a304930-9fa0-11 ea-b72f-6b36536a1ab0","outputs":{"default":{"type":"elasticsearch","hosts":["htt ps://358abdb539614f16ad7ecc966eed3259.eastus2.staging.azure.foundit.no:443"],"ap i_key":"MeqJV3IB9p98dLX3UFp3:r0RhMj4mRpueTiXrGrh_NA"}},"datasources":[{"id":"7ba cb000-9fa0-11ea-b72f-6b36536a1ab0","name":"system-1","enabled":true,"use_output" :"default","inputs":[{"type":"logs","enabled":true,"streams":[{"id":"logs-system .auth","enabled":true,"dataset":"system.auth"},{"id":"logs-system.syslog","enabl ed":true,"dataset":"system.syslog"}]},{"type":"system/metrics","enabled":true,"s treams":[{"id":"system/metrics-system.core","enabled":true,"dataset":"system.cor e"},{"id":"system/metrics-system.cpu","enabled":true,"dataset":"system.cpu"},{"i d":"system/metrics-system.diskio","enabled":true,"dataset":"system.diskio"},{"id ":"system/metrics-system.entropy","enabled":true,"dataset":"system.entropy"},{"i d":"system/metrics-system.filesystem","enabled":true,"dataset":"system.filesyste m"},{"id":"system/metrics-system.fsstat","enabled":true,"dataset":"system.fsstat "},{"id":"system/metrics-system.load","enabled":true,"dataset":"system.load"},{" id":"system/metrics-system.memory","enabled":true,"dataset":"system.memory"},{"i d":"system/metrics-system.network","enabled":true,"dataset":"system.network"},{" id":"system/metrics-system.network_summary","enabled":true,"dataset":"system.net work_summary"},{"id":"system/metrics-system.process","enabled":true,"dataset":"s ystem.process"},{"id":"system/metrics-system.process_summary","enabled":true,"da taset":"system.process_summary"},{"id":"system/metrics-system.raid","enabled":tr ue,"dataset":"system.raid"},{"id":"system/metrics-system.service","enabled":true ,"dataset":"system.service"},{"id":"system/metrics-system.socket","enabled":true ,"dataset":"system.socket"},{"id":"system/metrics-system.socket_summary","enable d":true,"dataset":"system.socket_summary"},{"id":"system/metrics-system.uptime", "enabled":true,"dataset":"system.uptime"},{"id":"system/metrics-system.users","e nabled":true,"dataset":"system.users"}]}],"package":{"name":"system","version":" 0.1.0"}},{"id":"9acee7e0-9fa6-11ea-b72f-6b36536a1ab0","name":"mysql-1","namespac e":"","enabled":true,"use_output":"default","inputs":[{"type":"logs","enabled":t rue,"streams":[{"id":"logs-mysql.error","enabled":true,"dataset":"mysql.error"," paths":["/var/log/mysql/error.log*","/var/log/mysqld.log*"],"exclude_files":[".g z$"],"multiline":{"pattern":"^([0-9]{4}-[0-9]{2}-[0-9]{2}|[0-9]{6})","negate":tr ue,"match":"after"},"processors":[{"add_locale":null}]},{"id":"logs-mysql.slowlo g","enabled":true,"dataset":"mysql.slowlog","paths":["/var/log/mysql/mysql-slow. log*"],"exclude_files":[".gz$"],"multiline":{"pattern":"^(# User@Host: |# Time: )","negate":true,"match":"after"},"exclude_lines":["^[\\/\\w\\.]+, Version: .* s tarted with:.*","^# Time:.*"]}]},{"type":"mysql/metrics","enabled":true,"streams ":[{"id":"mysql/metrics-mysql.status","enabled":true,"dataset":"mysql.status","m etricsets":["status"],"hosts":["tcp(127.0.0.1:3306)/"],"password":"test","period ":"10s","username":"root"}]}],"package":{"name":"mysql","version":"0.1.0"}},{"id ":"d28a54d0-9fa6-11ea-b72f-6b36536a1ab0","name":"redis-1","namespace":"","enable d":true,"use_output":"default","inputs":[{"type":"logs","enabled":true,"streams" :[{"id":"logs-redis.log","enabled":true,"dataset":"redis.log","paths":["/var/log /redis/redis-server.log*"],"exclude_files":[".gz$"],"exclude_lines":["^\\s+[\\-` ('.|_]"]},{"id":"logs-redis.slowlog","enabled":true,"dataset":"redis.slowlog","h osts":["localhost:6379"],"password":""}]},{"type":"redis/metrics","enabled":true ,"streams":[{"id":"redis/metrics-redis.info","enabled":true,"dataset":"redis.inf o","metricsets":["info"],"hosts":["127.0.0.1:6379"],"idle_timeout":"20s","maxcon n":10,"network":"tcp","period":"10s"},{"id":"redis/metrics-redis.key","enabled": true,"dataset":"redis.key","metricsets":["key"],"hosts":["127.0.0.1:6379"],"idle _timeout":"20s","key.patterns":[{"limit":20,"pattern":"*"}],"maxconn":10,"networ k":"tcp","period":"10s"},{"id":"redis/metrics-redis.keyspace","enabled":true,"da taset":"redis.keyspace","metricsets":["keyspace"],"hosts":["127.0.0.1:6379"],"id le_timeout":"20s","maxconn":10,"network":"tcp","period":"10s"}]}],"package":{"na me":"redis","version":"0.1.0"}},{"id":"5edb8b70-a047-11ea-b72f-6b36536a1ab0","na me":"kafka-2","namespace":"","enabled":true,"use_output":"default","inputs":[{"t ype":"logs","enabled":true,"streams":[{"id":"logs-kafka.log","enabled":true,"dat aset":"kafka.log","paths":["/opt/kafka*/logs/controller.log*","/opt/kafka*/logs/ server.log*","/opt/kafka*/logs/state-change.log*","/opt/kafka*/logs/kafka-*.log* "],"exclude_files":[".gz$"],"multiline":{"pattern":"^\\[","negate":true,"match": "after"},"processors":[{"add_locale":null}]}]},{"type":"kafka/metrics","enabled" :true,"streams":[{"id":"kafka/metrics-kafka.broker","enabled":true,"dataset":"ka fka.broker","metricsets":["broker"],"period":"10s","hosts":["localhost:8778"]},{ "id":"kafka/metrics-kafka.consumergroup","enabled":true,"dataset":"kafka.consume rgroup","metricsets":["consumergroup"],"period":"10s","hosts":["localhost:9092"] },{"id":"kafka/metrics-kafka.partition","enabled":true,"dataset":"kafka.partitio n","metricsets":["partition"],"period":"10s","hosts":["localhost:9092"]}]}],"pac kage":{"name":"kafka","version":"0.1.0"}}],"revision":6,"settings":{"monitoring" :{"use_output":"default","enabled":true,"logs":true,"metrics":true}}}},"id":"e77 0d274-7d40-4fe5-b7e2-37fe3b7f8035","created_at":"2020-05-27T19:08:36.920Z"}]} 2020-05-27T15:15:43-04:00 DEBUG action_dispatcher.go:81 Dispatch 1 actions of ty pes: *fleetapi.ActionConfigChange 2020-05-27T15:15:43-04:00 DEBUG handler_action_policy_change.go:23 handlerC onfigChange: action 'action_id: e770d274-7d40-4fe5-b7e2-37fe3b7f8035, type: CONF IG_CHANGE' received 2020-05-27T15:15:43-04:00 DEBUG handler_action_policy_change.go:34 handlerC onfigChange: emit configuration for action action_id: e770d274-7d40-4fe5-b7e2-37 fe3b7f8035, type: CONFIG_CHANGE 2020-05-27T15:15:43-04:00 DEBUG emitter.go:39 Transforming configuration into a tree 2020-05-27T15:15:43-04:00 DEBUG emitter.go:56 Supported programs: Metricbeat, Filebeat 2020-05-27T15:15:43-04:00 DEBUG emitter.go:57 Converting single configuration into specific programs configuration 2020-05-27T15:15:43-04:00 DEBUG router.go:62 Creating stream: default 2020-05-27T15:15:43-04:00 DEBUG router.go:80 Streams default need to run conf ig with ID 8DFFAmPM and programs: Metricbeat, Filebeat, FLEET_MONITORING 2020-05-27T15:15:43-04:00 INFO stateresolver.go:47 New State ID is 8DFFAmPM 2020-05-27T15:15:43-04:00 INFO stateresolver.go:48 Converging state require s execution of 3 step(s) 2020-05-27T15:15:43-04:00 DEBUG operator.go:236 operator is looking for metricbe at--8.0.0 in app collection: map[] 2020-05-27T15:15:43-04:00 INFO operation_fetch.go:65 metricbeat.8.0.0 already exists in C:\elastic-agent-8.0.0-windows-x86_64\elastic-agent-8.0.0-windows-x86 _64\data\downloads\metricbeat-8.0.0-windows-x86_64.zip. Skipping operation opera tion-fetch 2020-05-27T15:15:43-04:00 INFO operator.go:217 operation 'operation-fetch' skip ped for metricbeat.8.0.0 2020-05-27T15:15:43-04:00 INFO operator.go:217 operation 'operation-verify' ski pped for metricbeat.8.0.0 2020-05-27T15:15:43-04:00 DEBUG operator.go:221 running operation 'operation-ins tall' for metricbeat.8.0.0 2020-05-27T15:15:45-04:00 ERROR reporter.go:47 2020-05-27T15:15:45-04:00: type: 'ERROR': sub_type: 'CONFIG' message: Application: metricbeat[f8419071-5c7d-4c54 -8a0e-5cf4c9a9eec5]: operation-install: exit status 1 2020-05-27T15:15:45-04:00 DEBUG action_dispatcher.go:93 Failed to dispatch actio n 'action_id: e770d274-7d40-4fe5-b7e2-37fe3b7f8035, type: CONFIG_CHANGE', error: operator: failed to execute step sc-run, error: operation-install: exit status 1: operation-install: exit status 1 operator: failed to execute step sc-run, error: operation-install: exit status 1: operation-install: exit status 1 operation-install: exit status 1 exit status 1 2020-05-27T15:15:45-04:00 ERROR fleet_gateway.go:163 failed to dispatch actio ns, error: operator: failed to execute step sc-run, error: operation-install: ex it status 1: operation-install: exit status 1 operator: failed to execute step sc-run, error: operation-install: exit status 1: operation-install: exit status 1 operation-install: exit status 1 exit status 1 2020-05-27T15:15:45-04:00 DEBUG fleet_gateway.go:166 FleetGateway is sleeping , next update in 30s 2020-05-27T15:15:48-04:00 INFO managed_mode.go:211 Agent is stopped C:\elastic-agent-8.0.0-windows-x86_64\elastic-agent-8.0.0-windows-x86_64>