[Elastic Agent] Starting beats with log level of trace causes every event to be logged

[blakerouse]

I noticed that running the Elastic Agent that all the started beats are started in trace mode. While this helps with debugging it also currently causes all events to be logged to the log for that running beat.

I think we should either lower the logging level to ensure that every event is not logged, or adjust the debug selector to ensure that events are not logged.

[elasticmachine]

Pinging @elastic/ingest-management (Team:Ingest Management)

[michalpristas]

we had a discussion with @ruflin and @ph somewhere on slack about this

i changed it to info
#18657

and reverted here
#18726

so we can get more information when raising issues until 8.0

[blakerouse]

I agree that having more information is great, but having every event in the log will fill up the local disk and make it harder to parse a log to help with debugging. We should see if we can keep it the way it is, but turn off just the logging of each event.

…

On Sat, Jun 13, 2020, 2:14 AM Michal Pristas ***@***.***> wrote: we had a discussion with @ruflin <https://github.com/ruflin> and @ph <https://github.com/ph> somewhere on slack about this i changed it to info #18657 <#18657> and reverted here #18726 <#18726> so we can get more information when raising issues until 8.0 — You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub <#19179 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AA5QXZ764FJHRZZPPSZ6RXTRWMKMBANCNFSM4N4VVOBQ> .

[ruflin]

My end goal is to have info by default but allow users to dynamically enable debug if needed. A first step should be to allow it at least on restart to change (@michalpristas do we already have this)? And +1 on the proposal from @blakerouse to be more specific on what trace means and remove some of the data if we can.

[michalpristas]

yes we can change event level on restart. this will change both agent and beats level.
we support trace, debug, info and error
we differentiate between trace and debug but beats does not have a notion of trace level so we use debug when trace is used

[michalpristas]

closing as we moved to info log level recently