search

elastic / cloudbeat

Analyzing Cloud Security Posture
Other
13 stars 42 forks source link

[EKS KSPM] Error running fetcher for key process #2104

Open moukoublen opened 7 months ago

moukoublen commented 7 months ago

Describe the bug During a scan cycle in kspm/eks an error occurred:

[elastic_agent.cloudbeat][error] Error running fetcher for key process: open /hostfs/proc/27920/stat: no such file or directory

This led Cloudbeat to publish fewer events than expected (4 instead of 15).

Screenshot 2024-04-08 at 4 36 52 PM

More detailed logs of that cycle:

Screenshot 2024-04-08 at 4 30 15 PM

The problem was resolved in the subsequent cycle, restoring the previously missed events.

Preconditions It happened to ess live environment with version v8.12.0. Security Posture Management: v1.7.4 Elastic agent: 8.12.0

gurevichdmitry commented 6 months ago

After updating to 8.13.2, the issue reappeared.

Screenshot 2024-04-11 at 13 04 36