search

elastic / elastic-agent

Elastic Agent - single, unified way to add monitoring for logs, metrics, and other types of data to a host.
Other
22 stars 143 forks source link

[Flaky Test]: TestEventLogFile – did not find the expected log entry ... in the events log file #5337

Closed ycombinator closed 3 months ago

ycombinator commented 3 months ago

Failing test case

TestEventLogFile

Error message

did not find the expected log entry ('Cannot index event publisher.Event') in the events log file

Build

https://buildkite.com/elastic/elastic-agent-extended-testing/builds/2040#01917126-cb09-424b-a9cb-e71be44fc8f7

OS

Linux, Windows

Stacktrace and notes

On Windows

=== RUN   TestEventLogFile
    fetcher.go:93: Using existing artifact elastic-agent-8.16.0-SNAPSHOT-windows-x86_64.zip
    fixture.go:282: Extracting artifact elastic-agent-8.16.0-SNAPSHOT-windows-x86_64.zip to C:\Users\windows\AppData\Local\Temp\TestEventLogFile1155159046\002
    fixture.go:300: Completed extraction of artifact elastic-agent-8.16.0-SNAPSHOT-windows-x86_64.zip to C:\Users\windows\AppData\Local\Temp\TestEventLogFile1155159046\002
    fixture.go:900: Components were not modified from the fetched artifact
    event_logging_test.go:346: did not find the expected log entry ('Cannot index event publisher.Event') in the events log file
    event_logging_test.go:349: Event log file contents:
    event_logging_test.go:350: {"log.level":"warn","@timestamp":"2024-08-20T19:43:39.794Z","message":"Cannot index event '{\"@timestamp\":\"2024-08-20T19:43:29.765Z\",\"log\":{\"file\":{\"path\":\"C:\\\\Users\\\\windows\\\\AppData\\\\Local\\\\Temp\\\\TestEventLogFile1155159046\\\\001\\\\TestEventLogFile\",\"idxhi\":\"983040\",\"idxlo\":\"70477\",\"vol\":\"2754062024\"},\"offset\":0},\"input\":{\"type\":\"filestream\"},\"data_stream\":{\"namespace\":\"default\",\"type\":\"logs\",\"dataset\":\"generic\"},\"event\":{\"dataset\":\"generic\"},\"elastic_agent\":{\"version\":\"8.16.0\",\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"snapshot\":true},\"agent\":{\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"ephemeral_id\":\"d3e03ba5-9d8b-47dc-ae4c-1c87e8c950ef\",\"name\":\"ogc-windows-amd64-2022-default-2401\",\"type\":\"filebeat\",\"version\":\"8.16.0\"},\"ecs\":{\"version\":\"8.0.0\"},\"message\":\"TestEventLogFile Iteration:  1 2024-08-20T19:43:11.6722129Z\",\"host\":{\"id\":\"18f188f4-7d58-410c-9916-4f00c115ef19\",\"name\":\"ogc-windows-amd64-2022-default-2401\",\"ip\":[\"fe80::3a4:458e:f926:5a45\",\"10.128.0.252\"],\"mac\":[\"42-01-0A-80-00-FC\"],\"hostname\":\"ogc-windows-amd64-2022-default-2401\",\"architecture\":\"x86_64\",\"os\":{\"kernel\":\"10.0.20348.2652 (WinBuild.160101.0800)\",\"build\":\"20348.2655\",\"type\":\"windows\",\"platform\":\"windows\",\"version\":\"10.0\",\"family\":\"windows\",\"name\":\"Windows Server 2022 Datacenter\"}},\"cloud\":{\"service\":{\"name\":\"GCE\"},\"instance\":{\"name\":\"ogc-windows-amd64-2022-default-2401\",\"id\":\"3699362919774507953\"},\"machine\":{\"type\":\"e2-standard-4\"},\"availability_zone\":\"us-central1-f\",\"region\":\"us-central1\",\"account\":{\"id\":\"elastic-platform-ingest\"},\"project\":{\"id\":\"elastic-platform-ingest\"},\"provider\":\"gcp\"}}\n' (status=406): , dropping event!","component":{"binary":"filebeat","dataset":"elastic_agent.filebeat","id":"filestream-default","type":"filestream"},"log":{"source":"filestream-default"},"log.logger":"elasticsearch","log.origin":{"file.line":517,"file.name":"elasticsearch/client.go","function":"github.com/elastic/beats/v7/libbeat/outputs/elasticsearch.(*Client).applyItemStatus"},"service.name":"filebeat","log.type":"event","ecs.version":"1.6.0","ecs.version":"1.6.0"}
        {"log.level":"warn","@timestamp":"2024-08-20T19:43:40.488Z","message":"Cannot index event '{\"@timestamp\":\"2024-08-20T19:43:19.292Z\",\"agent\":{\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"version\":\"8.16.0\",\"ephemeral_id\":\"e6ededbb-f7f4-4511-94cd-52759f9af405\",\"name\":\"ogc-windows-amd64-2022-default-2401\",\"type\":\"filebeat\"},\"agent.version\":\"8.16.0\",\"data_stream\":{\"dataset\":\"elastic_agent\",\"namespace\":\"default\",\"type\":\"logs\"},\"log.origin\":{\"function\":\"github.com/elastic/elastic-agent/internal/pkg/agent/cmd.watchCmd\",\"file.name\":\"cmd/watch.go\",\"file.line\":68},\"message\":\"Upgrade Watcher started\",\"input\":{\"type\":\"filestream\"},\"elastic_agent\":{\"snapshot\":true,\"version\":\"8.16.0\",\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\"},\"cloud\":{\"provider\":\"gcp\",\"service\":{\"name\":\"GCE\"},\"instance\":{\"id\":\"3699362919774507953\",\"name\":\"ogc-windows-amd64-2022-default-2401\"},\"machine\":{\"type\":\"e2-standard-4\"},\"availability_zone\":\"us-central1-f\",\"region\":\"us-central1\",\"project\":{\"id\":\"elastic-platform-ingest\"},\"account\":{\"id\":\"elastic-platform-ingest\"}},\"host\":{\"architecture\":\"x86_64\",\"os\":{\"version\":\"10.0\",\"family\":\"windows\",\"name\":\"Windows Server 2022 Datacenter\",\"kernel\":\"10.0.20348.2652 (WinBuild.160101.0800)\",\"build\":\"20348.2655\",\"type\":\"windows\",\"platform\":\"windows\"},\"id\":\"18f188f4-7d58-410c-9916-4f00c115ef19\",\"ip\":[\"fe80::3a4:458e:f926:5a45\",\"10.128.0.252\"],\"mac\":[\"42-01-0A-80-00-FC\"],\"name\":\"ogc-windows-amd64-2022-default-2401\",\"hostname\":\"ogc-windows-amd64-2022-default-2401\"},\"log\":{\"offset\":0,\"file\":{\"path\":\"C:\\\\Users\\\\windows\\\\AppData\\\\Local\\\\Temp\\\\TestEventLogFile1155159046\\\\002\\\\elastic-agent-8.16.0-SNAPSHOT-windows-x86_64\\\\data\\\\elastic-agent-852d47\\\\logs\\\\elastic-agent-watcher-20240820.ndjson\",\"idxhi\":\"655360\",\"idxlo\":\"130045\",\"vol\":\"2754062024\"}},\"process.pid\":804,\"ecs\":{\"version\":\"8.0.0\"},\"log.level\":\"info\",\"event\":{\"dataset\":\"elastic_agent\"}}\n' (status=406): , dropping event!","component":{"binary":"filebeat","dataset":"elastic_agent.filebeat","id":"filestream-monitoring","type":"filestream"},"log":{"source":"filestream-monitoring"},"ecs.version":"1.6.0","log.logger":"elasticsearch","log.origin":{"file.line":517,"file.name":"elasticsearch/client.go","function":"github.com/elastic/beats/v7/libbeat/outputs/elasticsearch.(*Client).applyItemStatus"},"service.name":"filebeat","log.type":"event","ecs.version":"1.6.0"}
        {"log.level":"warn","@timestamp":"2024-08-20T19:43:40.488Z","message":"Cannot index event '{\"@timestamp\":\"2024-08-20T19:43:19.294Z\",\"input\":{\"type\":\"filestream\"},\"event\":{\"dataset\":\"elastic_agent\"},\"elastic_agent\":{\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"snapshot\":true,\"version\":\"8.16.0\"},\"log\":{\"file\":{\"path\":\"C:\\\\Users\\\\windows\\\\AppData\\\\Local\\\\Temp\\\\TestEventLogFile1155159046\\\\002\\\\elastic-agent-8.16.0-SNAPSHOT-windows-x86_64\\\\data\\\\elastic-agent-852d47\\\\logs\\\\elastic-agent-watcher-20240820.ndjson\",\"idxhi\":\"655360\",\"idxlo\":\"130045\",\"vol\":\"2754062024\"},\"offset\":297},\"log.level\":\"info\",\"agent\":{\"ephemeral_id\":\"e6ededbb-f7f4-4511-94cd-52759f9af405\",\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"name\":\"ogc-windows-amd64-2022-default-2401\",\"type\":\"filebeat\",\"version\":\"8.16.0\"},\"ecs\":{\"version\":\"8.0.0\"},\"host\":{\"architecture\":\"x86_64\",\"os\":{\"version\":\"10.0\",\"family\":\"windows\",\"name\":\"Windows Server 2022 Datacenter\",\"kernel\":\"10.0.20348.2652 (WinBuild.160101.0800)\",\"build\":\"20348.2655\",\"type\":\"windows\",\"platform\":\"windows\"},\"id\":\"18f188f4-7d58-410c-9916-4f00c115ef19\",\"ip\":[\"fe80::3a4:458e:f926:5a45\",\"10.128.0.252\"],\"mac\":[\"42-01-0A-80-00-FC\"],\"name\":\"ogc-windows-amd64-2022-default-2401\",\"hostname\":\"ogc-windows-amd64-2022-default-2401\"},\"cloud\":{\"service\":{\"name\":\"GCE\"},\"instance\":{\"id\":\"3699362919774507953\",\"name\":\"ogc-windows-amd64-2022-default-2401\"},\"machine\":{\"type\":\"e2-standard-4\"},\"availability_zone\":\"us-central1-f\",\"region\":\"us-central1\",\"project\":{\"id\":\"elastic-platform-ingest\"},\"account\":{\"id\":\"elastic-platform-ingest\"},\"provider\":\"gcp\"},\"message\":\"update marker not present at 'C:\\\\Users\\\\windows\\\\AppData\\\\Local\\\\Temp\\\\TestEventLogFile1155159046\\\\002\\\\elastic-agent-8.16.0-SNAPSHOT-windows-x86_64\\\\data'\",\"log.origin\":{\"file.name\":\"cmd/watch.go\",\"file.line\":76,\"function\":\"github.com/elastic/elastic-agent/internal/pkg/agent/cmd.watchCmd\"},\"data_stream\":{\"namespace\":\"default\",\"type\":\"logs\",\"dataset\":\"elastic_agent\"}}\n' (status=406): , dropping event!","component":{"binary":"filebeat","dataset":"elastic_agent.filebeat","id":"filestream-monitoring","type":"filestream"},"log":{"source":"filestream-monitoring"},"log.logger":"elasticsearch","log.origin":{"file.line":517,"file.name":"elasticsearch/client.go","function":"github.com/elastic/beats/v7/libbeat/outputs/elasticsearch.(*Client).applyItemStatus"},"service.name":"filebeat","log.type":"event","ecs.version":"1.6.0","ecs.version":"1.6.0"}
        {"log.level":"warn","@timestamp":"2024-08-20T19:43:40.488Z","message":"Cannot index event '{\"@timestamp\":\"2024-08-20T19:43:18.913Z\",\"process.pid\":6024,\"ecs\":{\"version\":\"8.0.0\"},\"log.level\":\"info\",\"log.origin\":{\"file.line\":195,\"function\":\"github.com/elastic/elastic-agent/internal/pkg/agent/cmd.runElasticAgent\",\"file.name\":\"cmd/run.go\"},\"agent.unprivileged\":false,\"event\":{\"dataset\":\"elastic_agent\"},\"cloud\":{\"availability_zone\":\"us-central1-f\",\"region\":\"us-central1\",\"project\":{\"id\":\"elastic-platform-ingest\"},\"account\":{\"id\":\"elastic-platform-ingest\"},\"provider\":\"gcp\",\"service\":{\"name\":\"GCE\"},\"instance\":{\"id\":\"3699362919774507953\",\"name\":\"ogc-windows-amd64-2022-default-2401\"},\"machine\":{\"type\":\"e2-standard-4\"}},\"host\":{\"hostname\":\"ogc-windows-amd64-2022-default-2401\",\"architecture\":\"x86_64\",\"os\":{\"family\":\"windows\",\"name\":\"Windows Server 2022 Datacenter\",\"kernel\":\"10.0.20348.2652 (WinBuild.160101.0800)\",\"build\":\"20348.2655\",\"type\":\"windows\",\"platform\":\"windows\",\"version\":\"10.0\"},\"id\":\"18f188f4-7d58-410c-9916-4f00c115ef19\",\"name\":\"ogc-windows-amd64-2022-default-2401\",\"ip\":[\"fe80::3a4:458e:f926:5a45\",\"10.128.0.252\"],\"mac\":[\"42-01-0A-80-00-FC\"]},\"log\":{\"offset\":0,\"file\":{\"path\":\"C:\\\\Users\\\\windows\\\\AppData\\\\Local\\\\Temp\\\\TestEventLogFile1155159046\\\\002\\\\elastic-agent-8.16.0-SNAPSHOT-windows-x86_64\\\\data\\\\elastic-agent-852d47\\\\logs\\\\elastic-agent-20240820.ndjson\",\"idxhi\":\"589824\",\"idxlo\":\"129881\",\"vol\":\"2754062024\"},\"source\":\"elastic-agent\"},\"data_stream\":{\"namespace\":\"default\",\"type\":\"logs\",\"dataset\":\"elastic_agent\"},\"elastic_agent\":{\"version\":\"8.16.0\",\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"snapshot\":true},\"agent\":{\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"ephemeral_id\":\"e6ededbb-f7f4-4511-94cd-52759f9af405\",\"name\":\"ogc-windows-amd64-2022-default-2401\",\"type\":\"filebeat\",\"version\":\"8.16.0\"},\"message\":\"Elastic Agent started\",\"agent.version\":\"8.16.0\",\"input\":{\"type\":\"filestream\"}}\n' (status=406): , dropping event!","component":{"binary":"filebeat","dataset":"elastic_agent.filebeat","id":"filestream-monitoring","type":"filestream"},"log":{"source":"filestream-monitoring"},"service.name":"filebeat","log.type":"event","ecs.version":"1.6.0","log.logger":"elasticsearch","log.origin":{"file.line":517,"file.name":"elasticsearch/client.go","function":"github.com/elastic/beats/v7/libbeat/outputs/elasticsearch.(*Client).applyItemStatus"},"ecs.version":"1.6.0"}
        {"log.level":"warn","@timestamp":"2024-08-20T19:43:40.489Z","message":"Cannot index event '{\"@timestamp\":\"2024-08-20T19:43:19.183Z\",\"data_stream\":{\"namespace\":\"default\",\"type\":\"logs\",\"dataset\":\"elastic_agent\"},\"agent\":{\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"ephemeral_id\":\"e6ededbb-f7f4-4511-94cd-52759f9af405\",\"name\":\"ogc-windows-amd64-2022-default-2401\",\"type\":\"filebeat\",\"version\":\"8.16.0\"},\"ecs\":{\"version\":\"8.0.0\"},\"log.origin\":{\"file.name\":\"upgrade/rollback.go\",\"file.line\":150,\"function\":\"github.com/elastic/elastic-agent/internal/pkg/agent/application/upgrade.InvokeWatcher\"},\"log.level\":\"info\",\"dir\":\"\",\"input\":{\"type\":\"filestream\"},\"event\":{\"dataset\":\"elastic_agent\"},\"elastic_agent\":{\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"snapshot\":true,\"version\":\"8.16.0\"},\"cloud\":{\"region\":\"us-central1\",\"project\":{\"id\":\"elastic-platform-ingest\"},\"account\":{\"id\":\"elastic-platform-ingest\"},\"provider\":\"gcp\",\"service\":{\"name\":\"GCE\"},\"instance\":{\"id\":\"3699362919774507953\",\"name\":\"ogc-windows-amd64-2022-default-2401\"},\"machine\":{\"type\":\"e2-standard-4\"},\"availability_zone\":\"us-central1-f\"},\"message\":\"Starting upgrade watcher\",\"path\":\"C:\\\\Users\\\\windows\\\\AppData\\\\Local\\\\Temp\\\\TestEventLogFile1155159046\\\\002\\\\elastic-agent-8.16.0-SNAPSHOT-windows-x86_64\\\\elastic-agent.exe\",\"args\":[\"C:\\\\Users\\\\windows\\\\AppData\\\\Local\\\\Temp\\\\TestEventLogFile1155159046\\\\002\\\\elastic-agent-8.16.0-SNAPSHOT-windows-x86_64\\\\elastic-agent.exe\",\"watch\",\"--path.config\",\"C:\\\\Users\\\\windows\\\\AppData\\\\Local\\\\Temp\\\\TestEventLogFile1155159046\\\\002\\\\elastic-agent-8.16.0-SNAPSHOT-windows-x86_64\",\"--path.home\",\"C:\\\\Users\\\\windows\\\\AppData\\\\Local\\\\Temp\\\\TestEventLogFile1155159046\\\\002\\\\elastic-agent-8.16.0-SNAPSHOT-windows-x86_64\"],\"env\":[],\"log\":{\"file\":{\"idxlo\":\"129881\",\"vol\":\"2754062024\",\"path\":\"C:\\\\Users\\\\windows\\\\AppData\\\\Local\\\\Temp\\\\TestEventLogFile1155159046\\\\002\\\\elastic-agent-8.16.0-SNAPSHOT-windows-x86_64\\\\data\\\\elastic-agent-852d47\\\\logs\\\\elastic-agent-20240820.ndjson\",\"idxhi\":\"589824\"},\"source\":\"elastic-agent\",\"offset\":362},\"host\":{\"id\":\"18f188f4-7d58-410c-9916-4f00c115ef19\",\"ip\":[\"fe80::3a4:458e:f926:5a45\",\"10.128.0.252\"],\"mac\":[\"42-01-0A-80-00-FC\"],\"hostname\":\"ogc-windows-amd64-2022-default-2401\",\"architecture\":\"x86_64\",\"name\":\"ogc-windows-amd64-2022-default-2401\",\"os\":{\"name\":\"Windows Server 2022 Datacenter\",\"kernel\":\"10.0.20348.2652 (WinBuild.160101.0800)\",\"build\":\"20348.2655\",\"type\":\"windows\",\"platform\":\"windows\",\"version\":\"10.0\",\"family\":\"windows\"}}}\n' (status=406): , dropping event!","component":{"binary":"filebeat","dataset":"elastic_agent.filebeat","id":"filestream-monitoring","type":"filestream"},"log":{"source":"filestream-monitoring"},"service.name":"filebeat","log.type":"event","ecs.version":"1.6.0","log.logger":"elasticsearch","log.origin":{"file.line":517,"file.name":"elasticsearch/client.go","function":"github.com/elastic/beats/v7/libbeat/outputs/elasticsearch.(*Client).applyItemStatus"},"ecs.version":"1.6.0"}
        {"log.level":"warn","@timestamp":"2024-08-20T19:43:40.489Z","message":"Cannot index event '{\"@timestamp\":\"2024-08-20T19:43:19.190Z\",\"log.level\":\"info\",\"agent.upgrade.watcher.process.pid\":804,\"agent.process.pid\":6024,\"host\":{\"hostname\":\"ogc-windows-amd64-2022-default-2401\",\"architecture\":\"x86_64\",\"os\":{\"name\":\"Windows Server 2022 Datacenter\",\"kernel\":\"10.0.20348.2652 (WinBuild.160101.0800)\",\"build\":\"20348.2655\",\"type\":\"windows\",\"platform\":\"windows\",\"version\":\"10.0\",\"family\":\"windows\"},\"id\":\"18f188f4-7d58-410c-9916-4f00c115ef19\",\"ip\":[\"fe80::3a4:458e:f926:5a45\",\"10.128.0.252\"],\"mac\":[\"42-01-0A-80-00-FC\"],\"name\":\"ogc-windows-amd64-2022-default-2401\"},\"log\":{\"offset\":1277,\"file\":{\"vol\":\"2754062024\",\"path\":\"C:\\\\Users\\\\windows\\\\AppData\\\\Local\\\\Temp\\\\TestEventLogFile1155159046\\\\002\\\\elastic-agent-8.16.0-SNAPSHOT-windows-x86_64\\\\data\\\\elastic-agent-852d47\\\\logs\\\\elastic-agent-20240820.ndjson\",\"idxhi\":\"589824\",\"idxlo\":\"129881\"},\"source\":\"elastic-agent\"},\"data_stream\":{\"namespace\":\"default\",\"type\":\"logs\",\"dataset\":\"elastic_agent\"},\"event\":{\"dataset\":\"elastic_agent\"},\"log.origin\":{\"file.line\":164,\"function\":\"github.com/elastic/elastic-agent/internal/pkg/agent/application/upgrade.InvokeWatcher\",\"file.name\":\"upgrade/rollback.go\"},\"cloud\":{\"machine\":{\"type\":\"e2-standard-4\"},\"availability_zone\":\"us-central1-f\",\"region\":\"us-central1\",\"project\":{\"id\":\"elastic-platform-ingest\"},\"account\":{\"id\":\"elastic-platform-ingest\"},\"provider\":\"gcp\",\"service\":{\"name\":\"GCE\"},\"instance\":{\"id\":\"3699362919774507953\",\"name\":\"ogc-windows-amd64-2022-default-2401\"}},\"input\":{\"type\":\"filestream\"},\"message\":\"Upgrade Watcher invoked\",\"elastic_agent\":{\"version\":\"8.16.0\",\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"snapshot\":true},\"agent\":{\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"ephemeral_id\":\"e6ededbb-f7f4-4511-94cd-52759f9af405\",\"name\":\"ogc-windows-amd64-2022-default-2401\",\"type\":\"filebeat\",\"version\":\"8.16.0\"},\"ecs\":{\"version\":\"8.0.0\"}}\n' (status=406): , dropping event!","component":{"binary":"filebeat","dataset":"elastic_agent.filebeat","id":"filestream-monitoring","type":"filestream"},"log":{"source":"filestream-monitoring"},"log.origin":{"file.line":517,"file.name":"elasticsearch/client.go","function":"github.com/elastic/beats/v7/libbeat/outputs/elasticsearch.(*Client).applyItemStatus"},"service.name":"filebeat","log.type":"event","ecs.version":"1.6.0","log.logger":"elasticsearch","ecs.version":"1.6.0"}
        {"log.level":"warn","@timestamp":"2024-08-20T19:43:40.490Z","message":"Cannot index event '{\"@timestamp\":\"2024-08-20T19:43:19.216Z\",\"event\":{\"dataset\":\"elastic_agent\"},\"elastic_agent\":{\"version\":\"8.16.0\",\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"snapshot\":true},\"host\":{\"os\":{\"version\":\"10.0\",\"family\":\"windows\",\"name\":\"Windows Server 2022 Datacenter\",\"kernel\":\"10.0.20348.2652 (WinBuild.160101.0800)\",\"build\":\"20348.2655\",\"type\":\"windows\",\"platform\":\"windows\"},\"id\":\"18f188f4-7d58-410c-9916-4f00c115ef19\",\"ip\":[\"fe80::3a4:458e:f926:5a45\",\"10.128.0.252\"],\"mac\":[\"42-01-0A-80-00-FC\"],\"name\":\"ogc-windows-amd64-2022-default-2401\",\"hostname\":\"ogc-windows-amd64-2022-default-2401\",\"architecture\":\"x86_64\"},\"log.origin\":{\"function\":\"github.com/elastic/elastic-agent/internal/pkg/agent/cmd.runElasticAgent\",\"file.name\":\"cmd/run.go\",\"file.line\":284},\"message\":\"APM instrumentation disabled\",\"log.level\":\"info\",\"log\":{\"offset\":1658,\"file\":{\"idxlo\":\"129881\",\"vol\":\"2754062024\",\"path\":\"C:\\\\Users\\\\windows\\\\AppData\\\\Local\\\\Temp\\\\TestEventLogFile1155159046\\\\002\\\\elastic-agent-8.16.0-SNAPSHOT-windows-x86_64\\\\data\\\\elastic-agent-852d47\\\\logs\\\\elastic-agent-20240820.ndjson\",\"idxhi\":\"589824\"},\"source\":\"elastic-agent\"},\"data_stream\":{\"namespace\":\"default\",\"type\":\"logs\",\"dataset\":\"elastic_agent\"},\"ecs\":{\"version\":\"8.0.0\"},\"input\":{\"type\":\"filestream\"},\"agent\":{\"ephemeral_id\":\"e6ededbb-f7f4-4511-94cd-52759f9af405\",\"name\":\"ogc-windows-amd64-2022-default-2401\",\"type\":\"filebeat\",\"version\":\"8.16.0\",\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\"},\"cloud\":{\"machine\":{\"type\":\"e2-standard-4\"},\"availability_zone\":\"us-central1-f\",\"region\":\"us-central1\",\"project\":{\"id\":\"elastic-platform-ingest\"},\"account\":{\"id\":\"elastic-platform-ingest\"},\"provider\":\"gcp\",\"service\":{\"name\":\"GCE\"},\"instance\":{\"name\":\"ogc-windows-amd64-2022-default-2401\",\"id\":\"3699362919774507953\"}}}\n' (status=406): , dropping event!","component":{"binary":"filebeat","dataset":"elastic_agent.filebeat","id":"filestream-monitoring","type":"filestream"},"log":{"source":"filestream-monitoring"},"ecs.version":"1.6.0","log.logger":"elasticsearch","log.origin":{"file.line":517,"file.name":"elasticsearch/client.go","function":"github.com/elastic/beats/v7/libbeat/outputs/elasticsearch.(*Client).applyItemStatus"},"service.name":"filebeat","log.type":"event","ecs.version":"1.6.0"}
        {"log.level":"warn","@timestamp":"2024-08-20T19:43:40.490Z","message":"Cannot index event '{\"@timestamp\":\"2024-08-20T19:43:19.222Z\",\"elastic_agent\":{\"version\":\"8.16.0\",\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"snapshot\":true},\"agent\":{\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"type\":\"filebeat\",\"version\":\"8.16.0\",\"ephemeral_id\":\"e6ededbb-f7f4-4511-94cd-52759f9af405\",\"name\":\"ogc-windows-amd64-2022-default-2401\"},\"log\":{\"offset\":1956,\"file\":{\"path\":\"C:\\\\Users\\\\windows\\\\AppData\\\\Local\\\\Temp\\\\TestEventLogFile1155159046\\\\002\\\\elastic-agent-8.16.0-SNAPSHOT-windows-x86_64\\\\data\\\\elastic-agent-852d47\\\\logs\\\\elastic-agent-20240820.ndjson\",\"idxhi\":\"589824\",\"idxlo\":\"129881\",\"vol\":\"2754062024\"},\"source\":\"elastic-agent\"},\"message\":\"Gathered system information\",\"host\":{\"name\":\"ogc-windows-amd64-2022-default-2401\",\"hostname\":\"ogc-windows-amd64-2022-default-2401\",\"architecture\":\"x86_64\",\"os\":{\"platform\":\"windows\",\"version\":\"10.0\",\"family\":\"windows\",\"name\":\"Windows Server 2022 Datacenter\",\"kernel\":\"10.0.20348.2652 (WinBuild.160101.0800)\",\"build\":\"20348.2655\",\"type\":\"windows\"},\"id\":\"18f188f4-7d58-410c-9916-4f00c115ef19\",\"ip\":[\"fe80::3a4:458e:f926:5a45\",\"10.128.0.252\"],\"mac\":[\"42-01-0A-80-00-FC\"]},\"data_stream\":{\"namespace\":\"default\",\"type\":\"logs\",\"dataset\":\"elastic_agent\"},\"event\":{\"dataset\":\"elastic_agent\"},\"log.level\":\"info\",\"log.origin\":{\"function\":\"github.com/elastic/elastic-agent/internal/pkg/agent/application.New\",\"file.name\":\"application/application.go\",\"file.line\":65},\"input\":{\"type\":\"filestream\"},\"ecs\":{\"version\":\"8.0.0\"},\"cloud\":{\"provider\":\"gcp\",\"service\":{\"name\":\"GCE\"},\"instance\":{\"id\":\"3699362919774507953\",\"name\":\"ogc-windows-amd64-2022-default-2401\"},\"machine\":{\"type\":\"e2-standard-4\"},\"availability_zone\":\"us-central1-f\",\"region\":\"us-central1\",\"project\":{\"id\":\"elastic-platform-ingest\"},\"account\":{\"id\":\"elastic-platform-ingest\"}}}\n' (status=406): , dropping event!","component":{"binary":"filebeat","dataset":"elastic_agent.filebeat","id":"filestream-monitoring","type":"filestream"},"log":{"source":"filestream-monitoring"},"service.name":"filebeat","log.type":"event","ecs.version":"1.6.0","log.logger":"elasticsearch","log.origin":{"file.line":517,"file.name":"elasticsearch/client.go","function":"github.com/elastic/beats/v7/libbeat/outputs/elasticsearch.(*Client).applyItemStatus"},"ecs.version":"1.6.0"}
        {"log.level":"warn","@timestamp":"2024-08-20T19:43:40.490Z","message":"Cannot index event '{\"@timestamp\":\"2024-08-20T19:43:19.342Z\",\"log\":{\"offset\":2264,\"file\":{\"path\":\"C:\\\\Users\\\\windows\\\\AppData\\\\Local\\\\Temp\\\\TestEventLogFile1155159046\\\\002\\\\elastic-agent-8.16.0-SNAPSHOT-windows-x86_64\\\\data\\\\elastic-agent-852d47\\\\logs\\\\elastic-agent-20240820.ndjson\",\"idxhi\":\"589824\",\"idxlo\":\"129881\",\"vol\":\"2754062024\"},\"source\":\"elastic-agent\"},\"message\":\"Detected available inputs and outputs\",\"inputs\":[\"windows/metrics\",\"cloudfoundry\",\"etw\",\"tcp\",\"linux/metrics\",\"postgresql/metrics\",\"system/metrics\",\"benchmark\",\"udp\",\"azure-eventhub\",\"gcp-pubsub\",\"synthetics/icmp\",\"netflow\",\"synthetics/tcp\",\"containerd/metrics\",\"nginx/metrics\",\"oracle/metrics\",\"syncgateway/metrics\",\"audit/system\",\"unix\",\"synthetics/http\",\"elasticsearch/metrics\",\"kibana/metrics\",\"kubernetes/metrics\",\"memcached/metrics\",\"audit/auditd\",\"salesforce\",\"cloudfoundry/metrics\",\"etcd/metrics\",\"syslog\",\"winlog\",\"aws/metrics\",\"nats/metrics\",\"prometheus/metrics\",\"awsfargate/metrics\",\"gcp/metrics\",\"stan/metrics\",\"apm\",\"sql/metrics\",\"cel\",\"docker\",\"journald\",\"synthetics/browser\",\"beat/metrics\",\"haproxy/metrics\",\"traefik/metrics\",\"azure-blob-storage\",\"httpjson\",\"lumberjack\",\"logstash/metrics\",\"azure/metrics\",\"http/metrics\",\"mongodb/metrics\",\"activemq/metrics\",\"audit/file_integrity\",\"aws-cloudwatch\",\"cometd\",\"container\",\"kafka\",\"filestream\",\"iis/metrics\",\"statsd/metrics\",\"vsphere/metrics\",\"packet\",\"o365audit\",\"redis\",\"docker/metrics\",\"mssql/metrics\",\"kafka/metrics\",\"zookeeper/metrics\",\"aws-s3\",\"log\",\"mysql/metrics\",\"redis/metrics\",\"apache/metrics\",\"jolokia/metrics\",\"rabbitmq/metrics\",\"entity-analytics\",\"gcs\",\"http_endpoint\",\"mqtt\",\"streaming\",\"uwsgi/metrics\",\"osquery\",\"endpoint\",\"fleet-server\",\"enterprisesearch/metrics\"],\"data_stream\":{\"namespace\":\"default\",\"type\":\"logs\",\"dataset\":\"elastic_agent\"},\"agent\":{\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"type\":\"filebeat\",\"version\":\"8.16.0\",\"ephemeral_id\":\"e6ededbb-f7f4-4511-94cd-52759f9af405\",\"name\":\"ogc-windows-amd64-2022-default-2401\"},\"host\":{\"name\":\"ogc-windows-amd64-2022-default-2401\",\"hostname\":\"ogc-windows-amd64-2022-default-2401\",\"architecture\":\"x86_64\",\"os\":{\"family\":\"windows\",\"name\":\"Windows Server 2022 Datacenter\",\"kernel\":\"10.0.20348.2652 (WinBuild.160101.0800)\",\"build\":\"20348.2655\",\"type\":\"windows\",\"platform\":\"windows\",\"version\":\"10.0\"},\"id\":\"18f188f4-7d58-410c-9916-4f00c115ef19\",\"ip\":[\"fe80::3a4:458e:f926:5a45\",\"10.128.0.252\"],\"mac\":[\"42-01-0A-80-00-FC\"]},\"cloud\":{\"availability_zone\":\"us-central1-f\",\"region\":\"us-central1\",\"project\":{\"id\":\"elastic-platform-ingest\"},\"account\":{\"id\":\"elastic-platform-ingest\"},\"provider\":\"gcp\",\"service\":{\"name\":\"GCE\"},\"instance\":{\"id\":\"3699362919774507953\",\"name\":\"ogc-windows-amd64-2022-default-2401\"},\"machine\":{\"type\":\"e2-standard-4\"}},\"log.level\":\"info\",\"log.origin\":{\"file.name\":\"application/application.go\",\"file.line\":71,\"function\":\"github.com/elastic/elastic-agent/internal/pkg/agent/application.New\"},\"input\":{\"type\":\"filestream\"},\"event\":{\"dataset\":\"elastic_agent\"},\"elastic_agent\":{\"version\":\"8.16.0\",\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"snapshot\":true},\"ecs\":{\"version\":\"8.0.0\"}}\n' (status=406): , dropping event!","component":{"binary":"filebeat","dataset":"elastic_agent.filebeat","id":"filestream-monitoring","type":"filestream"},"log":{"source":"filestream-monitoring"},"log.origin":{"file.line":517,"file.name":"elasticsearch/client.go","function":"github.com/elastic/beats/v7/libbeat/outputs/elasticsearch.(*Client).applyItemStatus"},"service.name":"filebeat","log.type":"event","ecs.version":"1.6.0","log.logger":"elasticsearch","ecs.version":"1.6.0"}
        {"log.level":"warn","@timestamp":"2024-08-20T19:43:40.490Z","message":"Cannot index event '{\"@timestamp\":\"2024-08-20T19:43:19.343Z\",\"elastic_agent\":{\"snapshot\":true,\"version\":\"8.16.0\",\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\"},\"message\":\"Capabilities file not found in C:\\\\Users\\\\windows\\\\AppData\\\\Local\\\\Temp\\\\TestEventLogFile1155159046\\\\002\\\\elastic-agent-8.16.0-SNAPSHOT-windows-x86_64\\\\capabilities.yml\",\"cloud\":{\"project\":{\"id\":\"elastic-platform-ingest\"},\"account\":{\"id\":\"elastic-platform-ingest\"},\"provider\":\"gcp\",\"service\":{\"name\":\"GCE\"},\"instance\":{\"id\":\"3699362919774507953\",\"name\":\"ogc-windows-amd64-2022-default-2401\"},\"machine\":{\"type\":\"e2-standard-4\"},\"availability_zone\":\"us-central1-f\",\"region\":\"us-central1\"},\"log.level\":\"info\",\"input\":{\"type\":\"filestream\"},\"event\":{\"dataset\":\"elastic_agent\"},\"ecs\":{\"version\":\"8.0.0\"},\"log\":{\"offset\":3886,\"file\":{\"idxhi\":\"589824\",\"idxlo\":\"129881\",\"vol\":\"2754062024\",\"path\":\"C:\\\\Users\\\\windows\\\\AppData\\\\Local\\\\Temp\\\\TestEventLogFile1155159046\\\\002\\\\elastic-agent-8.16.0-SNAPSHOT-windows-x86_64\\\\data\\\\elastic-agent-852d47\\\\logs\\\\elastic-agent-20240820.ndjson\"},\"source\":\"elastic-agent\"},\"log.origin\":{\"file.name\":\"capabilities/capabilities.go\",\"file.line\":48,\"function\":\"github.com/elastic/elastic-agent/internal/pkg/capabilities.LoadFile\"},\"data_stream\":{\"namespace\":\"default\",\"type\":\"logs\",\"dataset\":\"elastic_agent\"},\"agent\":{\"version\":\"8.16.0\",\"ephemeral_id\":\"e6ededbb-f7f4-4511-94cd-52759f9af405\",\"name\":\"ogc-windows-amd64-2022-default-2401\",\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"type\":\"filebeat\"},\"host\":{\"hostname\":\"ogc-windows-amd64-2022-default-2401\",\"architecture\":\"x86_64\",\"os\":{\"family\":\"windows\",\"name\":\"Windows Server 2022 Datacenter\",\"kernel\":\"10.0.20348.2652 (WinBuild.160101.0800)\",\"build\":\"20348.2655\",\"type\":\"windows\",\"platform\":\"windows\",\"version\":\"10.0\"},\"name\":\"ogc-windows-amd64-2022-default-2401\",\"id\":\"18f188f4-7d58-410c-9916-4f00c115ef19\",\"ip\":[\"fe80::3a4:458e:f926:5a45\",\"10.128.0.252\"],\"mac\":[\"42-01-0A-80-00-FC\"]}}\n' (status=406): , dropping event!","component":{"binary":"filebeat","dataset":"elastic_agent.filebeat","id":"filestream-monitoring","type":"filestream"},"log":{"source":"filestream-monitoring"},"log.logger":"elasticsearch","log.origin":{"file.line":517,"file.name":"elasticsearch/client.go","function":"github.com/elastic/beats/v7/libbeat/outputs/elasticsearch.(*Client).applyItemStatus"},"service.name":"filebeat","log.type":"event","ecs.version":"1.6.0","ecs.version":"1.6.0"}
        {"log.level":"warn","@timestamp":"2024-08-20T19:43:40.491Z","message":"Cannot index event '{\"@timestamp\":\"2024-08-20T19:43:19.343Z\",\"message\":\"Determined allowed capabilities\",\"ecs\":{\"version\":\"8.0.0\"},\"log.level\":\"info\",\"input\":{\"type\":\"filestream\"},\"event\":{\"dataset\":\"elastic_agent\"},\"elastic_agent\":{\"snapshot\":true,\"version\":\"8.16.0\",\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\"},\"cloud\":{\"service\":{\"name\":\"GCE\"},\"instance\":{\"id\":\"3699362919774507953\",\"name\":\"ogc-windows-amd64-2022-default-2401\"},\"machine\":{\"type\":\"e2-standard-4\"},\"availability_zone\":\"us-central1-f\",\"region\":\"us-central1\",\"project\":{\"id\":\"elastic-platform-ingest\"},\"account\":{\"id\":\"elastic-platform-ingest\"},\"provider\":\"gcp\"},\"log.origin\":{\"file.name\":\"application/application.go\",\"file.line\":77,\"function\":\"github.com/elastic/elastic-agent/internal/pkg/agent/application.New\"},\"log\":{\"offset\":4337,\"file\":{\"idxhi\":\"589824\",\"idxlo\":\"129881\",\"vol\":\"2754062024\",\"path\":\"C:\\\\Users\\\\windows\\\\AppData\\\\Local\\\\Temp\\\\TestEventLogFile1155159046\\\\002\\\\elastic-agent-8.16.0-SNAPSHOT-windows-x86_64\\\\data\\\\elastic-agent-852d47\\\\logs\\\\elastic-agent-20240820.ndjson\"},\"source\":\"elastic-agent\"},\"data_stream\":{\"namespace\":\"default\",\"type\":\"logs\",\"dataset\":\"elastic_agent\"},\"agent\":{\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"name\":\"ogc-windows-amd64-2022-default-2401\",\"type\":\"filebeat\",\"version\":\"8.16.0\",\"ephemeral_id\":\"e6ededbb-f7f4-4511-94cd-52759f9af405\"},\"host\":{\"name\":\"ogc-windows-amd64-2022-default-2401\",\"os\":{\"platform\":\"windows\",\"version\":\"10.0\",\"family\":\"windows\",\"name\":\"Windows Server 2022 Datacenter\",\"kernel\":\"10.0.20348.2652 (WinBuild.160101.0800)\",\"build\":\"20348.2655\",\"type\":\"windows\"},\"id\":\"18f188f4-7d58-410c-9916-4f00c115ef19\",\"ip\":[\"fe80::3a4:458e:f926:5a45\",\"10.128.0.252\"],\"mac\":[\"42-01-0A-80-00-FC\"],\"hostname\":\"ogc-windows-amd64-2022-default-2401\",\"architecture\":\"x86_64\"}}\n' (status=406): , dropping event!","component":{"binary":"filebeat","dataset":"elastic_agent.filebeat","id":"filestream-monitoring","type":"filestream"},"log":{"source":"filestream-monitoring"},"log.logger":"elasticsearch","log.origin":{"file.line":517,"file.name":"elasticsearch/client.go","function":"github.com/elastic/beats/v7/libbeat/outputs/elasticsearch.(*Client).applyItemStatus"},"service.name":"filebeat","log.type":"event","ecs.version":"1.6.0","ecs.version":"1.6.0"}
        {"log.level":"warn","@timestamp":"2024-08-20T19:43:40.491Z","message":"Cannot index event '{\"@timestamp\":\"2024-08-20T19:43:19.343Z\",\"log\":{\"offset\":4649,\"file\":{\"path\":\"C:\\\\Users\\\\windows\\\\AppData\\\\Local\\\\Temp\\\\TestEventLogFile1155159046\\\\002\\\\elastic-agent-8.16.0-SNAPSHOT-windows-x86_64\\\\data\\\\elastic-agent-852d47\\\\logs\\\\elastic-agent-20240820.ndjson\",\"idxhi\":\"589824\",\"idxlo\":\"129881\",\"vol\":\"2754062024\"},\"source\":\"elastic-agent\"},\"log.origin\":{\"file.name\":\"application/application.go\",\"file.line\":92,\"function\":\"github.com/elastic/elastic-agent/internal/pkg/agent/application.New\"},\"message\":\"Loading baseline config from C:\\\\Users\\\\windows\\\\AppData\\\\Local\\\\Temp\\\\TestEventLogFile1155159046\\\\002\\\\elastic-agent-8.16.0-SNAPSHOT-windows-x86_64\\\\elastic-agent.yml\",\"host\":{\"architecture\":\"x86_64\",\"os\":{\"family\":\"windows\",\"name\":\"Windows Server 2022 Datacenter\",\"kernel\":\"10.0.20348.2652 (WinBuild.160101.0800)\",\"build\":\"20348.2655\",\"type\":\"windows\",\"platform\":\"windows\",\"version\":\"10.0\"},\"id\":\"18f188f4-7d58-410c-9916-4f00c115ef19\",\"ip\":[\"fe80::3a4:458e:f926:5a45\",\"10.128.0.252\"],\"name\":\"ogc-windows-amd64-2022-default-2401\",\"mac\":[\"42-01-0A-80-00-FC\"],\"hostname\":\"ogc-windows-amd64-2022-default-2401\"},\"input\":{\"type\":\"filestream\"},\"data_stream\":{\"namespace\":\"default\",\"type\":\"logs\",\"dataset\":\"elastic_agent\"},\"log.level\":\"info\",\"event\":{\"dataset\":\"elastic_agent\"},\"elastic_agent\":{\"snapshot\":true,\"version\":\"8.16.0\",\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\"},\"agent\":{\"name\":\"ogc-windows-amd64-2022-default-2401\",\"type\":\"filebeat\",\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"version\":\"8.16.0\",\"ephemeral_id\":\"e6ededbb-f7f4-4511-94cd-52759f9af405\"},\"ecs\":{\"version\":\"8.0.0\"},\"cloud\":{\"account\":{\"id\":\"elastic-platform-ingest\"},\"provider\":\"gcp\",\"service\":{\"name\":\"GCE\"},\"instance\":{\"id\":\"3699362919774507953\",\"name\":\"ogc-windows-amd64-2022-default-2401\"},\"machine\":{\"type\":\"e2-standard-4\"},\"availability_zone\":\"us-central1-f\",\"region\":\"us-central1\",\"project\":{\"id\":\"elastic-platform-ingest\"}}}\n' (status=406): , dropping event!","component":{"binary":"filebeat","dataset":"elastic_agent.filebeat","id":"filestream-monitoring","type":"filestream"},"log":{"source":"filestream-monitoring"},"log.logger":"elasticsearch","log.origin":{"file.line":517,"file.name":"elasticsearch/client.go","function":"github.com/elastic/beats/v7/libbeat/outputs/elasticsearch.(*Client).applyItemStatus"},"service.name":"filebeat","log.type":"event","ecs.version":"1.6.0","ecs.version":"1.6.0"}
        {"log.level":"warn","@timestamp":"2024-08-20T19:43:40.491Z","message":"Cannot index event '{\"@timestamp\":\"2024-08-20T19:43:19.521Z\",\"address\":\"localhost:7001\",\"cloud\":{\"availability_zone\":\"us-central1-f\",\"region\":\"us-central1\",\"project\":{\"id\":\"elastic-platform-ingest\"},\"account\":{\"id\":\"elastic-platform-ingest\"},\"provider\":\"gcp\",\"service\":{\"name\":\"GCE\"},\"instance\":{\"id\":\"3699362919774507953\",\"name\":\"ogc-windows-amd64-2022-default-2401\"},\"machine\":{\"type\":\"e2-standard-4\"}},\"input\":{\"type\":\"filestream\"},\"data_stream\":{\"namespace\":\"default\",\"type\":\"logs\",\"dataset\":\"elastic_agent\"},\"message\":\"GRPC comms socket listening at localhost:7001\",\"log.level\":\"info\",\"log\":{\"offset\":5097,\"file\":{\"path\":\"C:\\\\Users\\\\windows\\\\AppData\\\\Local\\\\Temp\\\\TestEventLogFile1155159046\\\\002\\\\elastic-agent-8.16.0-SNAPSHOT-windows-x86_64\\\\data\\\\elastic-agent-852d47\\\\logs\\\\elastic-agent-20240820.ndjson\",\"idxhi\":\"589824\",\"idxlo\":\"129881\",\"vol\":\"2754062024\"},\"source\":\"elastic-agent\"},\"log.origin\":{\"file.line\":178,\"function\":\"github.com/elastic/elastic-agent/pkg/component/runtime.NewManager\",\"file.name\":\"runtime/manager.go\"},\"event\":{\"dataset\":\"elastic_agent\"},\"elastic_agent\":{\"version\":\"8.16.0\",\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"snapshot\":true},\"agent\":{\"version\":\"8.16.0\",\"ephemeral_id\":\"e6ededbb-f7f4-4511-94cd-52759f9af405\",\"name\":\"ogc-windows-amd64-2022-default-2401\",\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"type\":\"filebeat\"},\"ecs\":{\"version\":\"8.0.0\"},\"host\":{\"ip\":[\"fe80::3a4:458e:f926:5a45\",\"10.128.0.252\"],\"mac\":[\"42-01-0A-80-00-FC\"],\"hostname\":\"ogc-windows-amd64-2022-default-2401\",\"architecture\":\"x86_64\",\"os\":{\"name\":\"Windows Server 2022 Datacenter\",\"kernel\":\"10.0.20348.2652 (WinBuild.160101.0800)\",\"build\":\"20348.2655\",\"type\":\"windows\",\"platform\":\"windows\",\"version\":\"10.0\",\"family\":\"windows\"},\"name\":\"ogc-windows-amd64-2022-default-2401\",\"id\":\"18f188f4-7d58-410c-9916-4f00c115ef19\"}}\n' (status=406): , dropping event!","component":{"binary":"filebeat","dataset":"elastic_agent.filebeat","id":"filestream-monitoring","type":"filestream"},"log":{"source":"filestream-monitoring"},"service.name":"filebeat","log.type":"event","ecs.version":"1.6.0","log.logger":"elasticsearch","log.origin":{"file.line":517,"file.name":"elasticsearch/client.go","function":"github.com/elastic/beats/v7/libbeat/outputs/elasticsearch.(*Client).applyItemStatus"},"ecs.version":"1.6.0"}
        {"log.level":"warn","@timestamp":"2024-08-20T19:43:40.491Z","message":"Cannot index event '{\"@timestamp\":\"2024-08-20T19:43:19.521Z\",\"elastic_agent\":{\"version\":\"8.16.0\",\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"snapshot\":true},\"agent\":{\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"name\":\"ogc-windows-amd64-2022-default-2401\",\"type\":\"filebeat\",\"version\":\"8.16.0\",\"ephemeral_id\":\"e6ededbb-f7f4-4511-94cd-52759f9af405\"},\"host\":{\"architecture\":\"x86_64\",\"os\":{\"platform\":\"windows\",\"version\":\"10.0\",\"family\":\"windows\",\"name\":\"Windows Server 2022 Datacenter\",\"kernel\":\"10.0.20348.2652 (WinBuild.160101.0800)\",\"build\":\"20348.2655\",\"type\":\"windows\"},\"id\":\"18f188f4-7d58-410c-9916-4f00c115ef19\",\"ip\":[\"fe80::3a4:458e:f926:5a45\",\"10.128.0.252\"],\"mac\":[\"42-01-0A-80-00-FC\"],\"name\":\"ogc-windows-amd64-2022-default-2401\",\"hostname\":\"ogc-windows-amd64-2022-default-2401\"},\"cloud\":{\"project\":{\"id\":\"elastic-platform-ingest\"},\"account\":{\"id\":\"elastic-platform-ingest\"},\"provider\":\"gcp\",\"service\":{\"name\":\"GCE\"},\"instance\":{\"id\":\"3699362919774507953\",\"name\":\"ogc-windows-amd64-2022-default-2401\"},\"machine\":{\"type\":\"e2-standard-4\"},\"availability_zone\":\"us-central1-f\",\"region\":\"us-central1\"},\"log.origin\":{\"function\":\"github.com/elastic/elastic-agent/internal/pkg/agent/application.New\",\"file.name\":\"application/application.go\",\"file.line\":148},\"log\":{\"offset\":5441,\"file\":{\"vol\":\"2754062024\",\"path\":\"C:\\\\Users\\\\windows\\\\AppData\\\\Local\\\\Temp\\\\TestEventLogFile1155159046\\\\002\\\\elastic-agent-8.16.0-SNAPSHOT-windows-x86_64\\\\data\\\\elastic-agent-852d47\\\\logs\\\\elastic-agent-20240820.ndjson\",\"idxhi\":\"589824\",\"idxlo\":\"129881\"},\"source\":\"elastic-agent\"},\"log.level\":\"info\",\"input\":{\"type\":\"filestream\"},\"data_stream\":{\"namespace\":\"default\",\"type\":\"logs\",\"dataset\":\"elastic_agent\"},\"event\":{\"dataset\":\"elastic_agent\"},\"message\":\"Parsed configuration and determined agent is managed locally\",\"ecs\":{\"version\":\"8.0.0\"}}\n' (status=406): , dropping event!","component":{"binary":"filebeat","dataset":"elastic_agent.filebeat","id":"filestream-monitoring","type":"filestream"},"log":{"source":"filestream-monitoring"},"service.name":"filebeat","log.type":"event","ecs.version":"1.6.0","log.logger":"elasticsearch","log.origin":{"file.line":517,"file.name":"elasticsearch/client.go","function":"github.com/elastic/beats/v7/libbeat/outputs/elasticsearch.(*Client).applyItemStatus"},"ecs.version":"1.6.0"}
        {"log.level":"warn","@timestamp":"2024-08-20T19:43:40.492Z","message":"Cannot index event '{\"@timestamp\":\"2024-08-20T19:43:19.532Z\",\"input\":{\"type\":\"filestream\"},\"data_stream\":{\"namespace\":\"default\",\"type\":\"logs\",\"dataset\":\"elastic_agent\"},\"elastic_agent\":{\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"snapshot\":true,\"version\":\"8.16.0\"},\"ecs\":{\"version\":\"8.0.0\"},\"host\":{\"id\":\"18f188f4-7d58-410c-9916-4f00c115ef19\",\"name\":\"ogc-windows-amd64-2022-default-2401\",\"ip\":[\"fe80::3a4:458e:f926:5a45\",\"10.128.0.252\"],\"mac\":[\"42-01-0A-80-00-FC\"],\"hostname\":\"ogc-windows-amd64-2022-default-2401\",\"architecture\":\"x86_64\",\"os\":{\"kernel\":\"10.0.20348.2652 (WinBuild.160101.0800)\",\"build\":\"20348.2655\",\"type\":\"windows\",\"platform\":\"windows\",\"version\":\"10.0\",\"family\":\"windows\",\"name\":\"Windows Server 2022 Datacenter\"}},\"message\":\"GRPC control socket listening at npipe:///EaksLZAdmO88rfDakKotfl3theNZ4SMU.sock\",\"cloud\":{\"instance\":{\"id\":\"3699362919774507953\",\"name\":\"ogc-windows-amd64-2022-default-2401\"},\"machine\":{\"type\":\"e2-standard-4\"},\"availability_zone\":\"us-central1-f\",\"region\":\"us-central1\",\"project\":{\"id\":\"elastic-platform-ingest\"},\"account\":{\"id\":\"elastic-platform-ingest\"},\"provider\":\"gcp\",\"service\":{\"name\":\"GCE\"}},\"log.logger\":\"control\",\"log.origin\":{\"function\":\"github.com/elastic/elastic-agent/pkg/control/v2/server.(*Server).Start\",\"file.name\":\"server/server.go\",\"file.line\":88},\"event\":{\"dataset\":\"elastic_agent\"},\"agent\":{\"type\":\"filebeat\",\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"version\":\"8.16.0\",\"ephemeral_id\":\"e6ededbb-f7f4-4511-94cd-52759f9af405\",\"name\":\"ogc-windows-amd64-2022-default-2401\"},\"address\":\"npipe:///EaksLZAdmO88rfDakKotfl3theNZ4SMU.sock\",\"log.level\":\"info\",\"log\":{\"offset\":5783,\"file\":{\"vol\":\"2754062024\",\"path\":\"C:\\\\Users\\\\windows\\\\AppData\\\\Local\\\\Temp\\\\TestEventLogFile1155159046\\\\002\\\\elastic-agent-8.16.0-SNAPSHOT-windows-x86_64\\\\data\\\\elastic-agent-852d47\\\\logs\\\\elastic-agent-20240820.ndjson\",\"idxhi\":\"589824\",\"idxlo\":\"129881\"},\"source\":\"elastic-agent\"}}\n' (status=406): , dropping event!","component":{"binary":"filebeat","dataset":"elastic_agent.filebeat","id":"filestream-monitoring","type":"filestream"},"log":{"source":"filestream-monitoring"},"log.logger":"elasticsearch","log.origin":{"file.line":517,"file.name":"elasticsearch/client.go","function":"github.com/elastic/beats/v7/libbeat/outputs/elasticsearch.(*Client).applyItemStatus"},"service.name":"filebeat","log.type":"event","ecs.version":"1.6.0","ecs.version":"1.6.0"}
        {"log.level":"warn","@timestamp":"2024-08-20T19:43:40.492Z","message":"Cannot index event '{\"@timestamp\":\"2024-08-20T19:43:19.532Z\",\"log\":{\"file\":{\"path\":\"C:\\\\Users\\\\windows\\\\AppData\\\\Local\\\\Temp\\\\TestEventLogFile1155159046\\\\002\\\\elastic-agent-8.16.0-SNAPSHOT-windows-x86_64\\\\data\\\\elastic-agent-852d47\\\\logs\\\\elastic-agent-20240820.ndjson\",\"idxhi\":\"589824\",\"idxlo\":\"129881\",\"vol\":\"2754062024\"},\"source\":\"elastic-agent\",\"offset\":6218},\"ecs\":{\"version\":\"8.0.0\"},\"message\":\"Configuration changes detected\",\"data_stream\":{\"dataset\":\"elastic_agent\",\"namespace\":\"default\",\"type\":\"logs\"},\"elastic_agent\":{\"snapshot\":true,\"version\":\"8.16.0\",\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\"},\"agent\":{\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"name\":\"ogc-windows-amd64-2022-default-2401\",\"type\":\"filebeat\",\"version\":\"8.16.0\",\"ephemeral_id\":\"e6ededbb-f7f4-4511-94cd-52759f9af405\"},\"host\":{\"architecture\":\"x86_64\",\"os\":{\"platform\":\"windows\",\"version\":\"10.0\",\"family\":\"windows\",\"name\":\"Windows Server 2022 Datacenter\",\"kernel\":\"10.0.20348.2652 (WinBuild.160101.0800)\",\"build\":\"20348.2655\",\"type\":\"windows\"},\"id\":\"18f188f4-7d58-410c-9916-4f00c115ef19\",\"ip\":[\"fe80::3a4:458e:f926:5a45\",\"10.128.0.252\"],\"mac\":[\"42-01-0A-80-00-FC\"],\"name\":\"ogc-windows-amd64-2022-default-2401\",\"hostname\":\"ogc-windows-amd64-2022-default-2401\"},\"log.level\":\"info\",\"log.origin\":{\"file.name\":\"application/periodic.go\",\"file.line\":93,\"function\":\"github.com/elastic/elastic-agent/internal/pkg/agent/application.(*periodic).work\"},\"input\":{\"type\":\"filestream\"},\"event\":{\"dataset\":\"elastic_agent\"},\"cloud\":{\"project\":{\"id\":\"elastic-platform-ingest\"},\"account\":{\"id\":\"elastic-platform-ingest\"},\"provider\":\"gcp\",\"service\":{\"name\":\"GCE\"},\"instance\":{\"name\":\"ogc-windows-amd64-2022-default-2401\",\"id\":\"3699362919774507953\"},\"machine\":{\"type\":\"e2-standard-4\"},\"availability_zone\":\"us-central1-f\",\"region\":\"us-central1\"}}\n' (status=406): , dropping event!","component":{"binary":"filebeat","dataset":"elastic_agent.filebeat","id":"filestream-monitoring","type":"filestream"},"log":{"source":"filestream-monitoring"},"service.name":"filebeat","log.type":"event","ecs.version":"1.6.0","log.logger":"elasticsearch","log.origin":{"file.line":517,"file.name":"elasticsearch/client.go","function":"github.com/elastic/beats/v7/libbeat/outputs/elasticsearch.(*Client).applyItemStatus"},"ecs.version":"1.6.0"}
        {"log.level":"warn","@timestamp":"2024-08-20T19:43:40.492Z","message":"Cannot index event '{\"@timestamp\":\"2024-08-20T19:43:19.542Z\",\"log.level\":\"info\",\"log.logger\":\"composable.providers.docker\",\"log.origin\":{\"function\":\"github.com/elastic/elastic-agent/internal/pkg/composable/providers/docker.(*dynamicProvider).Run\",\"file.name\":\"docker/docker.go\",\"file.line\":44},\"data_stream\":{\"namespace\":\"default\",\"type\":\"logs\",\"dataset\":\"elastic_agent\"},\"event\":{\"dataset\":\"elastic_agent\"},\"cloud\":{\"provider\":\"gcp\",\"service\":{\"name\":\"GCE\"},\"instance\":{\"id\":\"3699362919774507953\",\"name\":\"ogc-windows-amd64-2022-default-2401\"},\"machine\":{\"type\":\"e2-standard-4\"},\"availability_zone\":\"us-central1-f\",\"region\":\"us-central1\",\"project\":{\"id\":\"elastic-platform-ingest\"},\"account\":{\"id\":\"elastic-platform-ingest\"}},\"host\":{\"architecture\":\"x86_64\",\"os\":{\"platform\":\"windows\",\"version\":\"10.0\",\"family\":\"windows\",\"name\":\"Windows Server 2022 Datacenter\",\"kernel\":\"10.0.20348.2652 (WinBuild.160101.0800)\",\"build\":\"20348.2655\",\"type\":\"windows\"},\"id\":\"18f188f4-7d58-410c-9916-4f00c115ef19\",\"ip\":[\"fe80::3a4:458e:f926:5a45\",\"10.128.0.252\"],\"mac\":[\"42-01-0A-80-00-FC\"],\"name\":\"ogc-windows-amd64-2022-default-2401\",\"hostname\":\"ogc-windows-amd64-2022-default-2401\"},\"log\":{\"offset\":6539,\"file\":{\"path\":\"C:\\\\Users\\\\windows\\\\AppData\\\\Local\\\\Temp\\\\TestEventLogFile1155159046\\\\002\\\\elastic-agent-8.16.0-SNAPSHOT-windows-x86_64\\\\data\\\\elastic-agent-852d47\\\\logs\\\\elastic-agent-20240820.ndjson\",\"idxhi\":\"589824\",\"idxlo\":\"129881\",\"vol\":\"2754062024\"},\"source\":\"elastic-agent\"},\"message\":\"Docker provider skipped, unable to connect: protocol not available\",\"ecs\":{\"version\":\"8.0.0\"},\"input\":{\"type\":\"filestream\"},\"elastic_agent\":{\"snapshot\":true,\"version\":\"8.16.0\",\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\"},\"agent\":{\"ephemeral_id\":\"e6ededbb-f7f4-4511-94cd-52759f9af405\",\"name\":\"ogc-windows-amd64-2022-default-2401\",\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"type\":\"filebeat\",\"version\":\"8.16.0\"}}\n' (status=406): , dropping event!","component":{"binary":"filebeat","dataset":"elastic_agent.filebeat","id":"filestream-monitoring","type":"filestream"},"log":{"source":"filestream-monitoring"},"log.origin":{"file.line":517,"file.name":"elasticsearch/client.go","function":"github.com/elastic/beats/v7/libbeat/outputs/elasticsearch.(*Client).applyItemStatus"},"service.name":"filebeat","log.type":"event","ecs.version":"1.6.0","log.logger":"elasticsearch","ecs.version":"1.6.0"}
        {"log.level":"warn","@timestamp":"2024-08-20T19:43:40.492Z","message":"Cannot index event '{\"@timestamp\":\"2024-08-20T19:43:19.532Z\",\"host\":{\"ip\":[\"fe80::3a4:458e:f926:5a45\",\"10.128.0.252\"],\"mac\":[\"42-01-0A-80-00-FC\"],\"hostname\":\"ogc-windows-amd64-2022-default-2401\",\"architecture\":\"x86_64\",\"os\":{\"version\":\"10.0\",\"family\":\"windows\",\"name\":\"Windows Server 2022 Datacenter\",\"kernel\":\"10.0.20348.2652 (WinBuild.160101.0800)\",\"build\":\"20348.2655\",\"type\":\"windows\",\"platform\":\"windows\"},\"name\":\"ogc-windows-amd64-2022-default-2401\",\"id\":\"18f188f4-7d58-410c-9916-4f00c115ef19\"},\"cloud\":{\"machine\":{\"type\":\"e2-standard-4\"},\"availability_zone\":\"us-central1-f\",\"region\":\"us-central1\",\"project\":{\"id\":\"elastic-platform-ingest\"},\"account\":{\"id\":\"elastic-platform-ingest\"},\"provider\":\"gcp\",\"service\":{\"name\":\"GCE\"},\"instance\":{\"id\":\"3699362919774507953\",\"name\":\"ogc-windows-amd64-2022-default-2401\"}},\"ecs\":{\"version\":\"8.0.0\"},\"message\":\"Starting grpc control protocol listener on port 7001 with max_message_size 104857600\",\"input\":{\"type\":\"filestream\"},\"data_stream\":{\"namespace\":\"default\",\"type\":\"logs\",\"dataset\":\"elastic_agent\"},\"event\":{\"dataset\":\"elastic_agent\"},\"elastic_agent\":{\"snapshot\":true,\"version\":\"8.16.0\",\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\"},\"log\":{\"file\":{\"vol\":\"2754062024\",\"path\":\"C:\\\\Users\\\\windows\\\\AppData\\\\Local\\\\Temp\\\\TestEventLogFile1155159046\\\\002\\\\elastic-agent-8.16.0-SNAPSHOT-windows-x86_64\\\\data\\\\elastic-agent-852d47\\\\logs\\\\elastic-agent-20240820.ndjson\",\"idxhi\":\"589824\",\"idxlo\":\"129881\"},\"source\":\"elastic-agent\",\"offset\":6948},\"log.level\":\"info\",\"log.origin\":{\"function\":\"github.com/elastic/elastic-agent/pkg/component/runtime.(*Manager).Run\",\"file.name\":\"runtime/manager.go\",\"file.line\":243},\"agent\":{\"ephemeral_id\":\"e6ededbb-f7f4-4511-94cd-52759f9af405\",\"name\":\"ogc-windows-amd64-2022-default-2401\",\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"type\":\"filebeat\",\"version\":\"8.16.0\"}}\n' (status=406): , dropping event!","component":{"binary":"filebeat","dataset":"elastic_agent.filebeat","id":"filestream-monitoring","type":"filestream"},"log":{"source":"filestream-monitoring"},"log.type":"event","ecs.version":"1.6.0","log.logger":"elasticsearch","log.origin":{"file.line":517,"file.name":"elasticsearch/client.go","function":"github.com/elastic/beats/v7/libbeat/outputs/elasticsearch.(*Client).applyItemStatus"},"service.name":"filebeat","ecs.version":"1.6.0"}
        {"log.level":"warn","@timestamp":"2024-08-20T19:43:40.493Z","message":"Cannot index event '{\"@timestamp\":\"2024-08-20T19:43:19.555Z\",\"log\":{\"offset\":7308,\"file\":{\"path\":\"C:\\\\Users\\\\windows\\\\AppData\\\\Local\\\\Temp\\\\TestEventLogFile1155159046\\\\002\\\\elastic-agent-8.16.0-SNAPSHOT-windows-x86_64\\\\data\\\\elastic-agent-852d47\\\\logs\\\\elastic-agent-20240820.ndjson\",\"idxhi\":\"589824\",\"idxlo\":\"129881\",\"vol\":\"2754062024\"},\"source\":\"elastic-agent\"},\"ecs\":{\"version\":\"8.0.0\"},\"event\":{\"dataset\":\"elastic_agent\"},\"elastic_agent\":{\"snapshot\":true,\"version\":\"8.16.0\",\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\"},\"agent\":{\"ephemeral_id\":\"e6ededbb-f7f4-4511-94cd-52759f9af405\",\"name\":\"ogc-windows-amd64-2022-default-2401\",\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"type\":\"filebeat\",\"version\":\"8.16.0\"},\"host\":{\"name\":\"ogc-windows-amd64-2022-default-2401\",\"architecture\":\"x86_64\",\"os\":{\"platform\":\"windows\",\"version\":\"10.0\",\"family\":\"windows\",\"name\":\"Windows Server 2022 Datacenter\",\"kernel\":\"10.0.20348.2652 (WinBuild.160101.0800)\",\"build\":\"20348.2655\",\"type\":\"windows\"},\"id\":\"18f188f4-7d58-410c-9916-4f00c115ef19\",\"ip\":[\"fe80::3a4:458e:f926:5a45\",\"10.128.0.252\"],\"mac\":[\"42-01-0A-80-00-FC\"],\"hostname\":\"ogc-windows-amd64-2022-default-2401\"},\"cloud\":{\"instance\":{\"id\":\"3699362919774507953\",\"name\":\"ogc-windows-amd64-2022-default-2401\"},\"machine\":{\"type\":\"e2-standard-4\"},\"availability_zone\":\"us-central1-f\",\"region\":\"us-central1\",\"project\":{\"id\":\"elastic-platform-ingest\"},\"account\":{\"id\":\"elastic-platform-ingest\"},\"provider\":\"gcp\",\"service\":{\"name\":\"GCE\"}},\"log.level\":\"info\",\"log.origin\":{\"file.line\":123,\"function\":\"github.com/elastic/elastic-agent/internal/pkg/agent/application/upgrade.(*Upgrader).Reload\",\"file.name\":\"upgrade/upgrade.go\"},\"message\":\"Source URI changed from \\\"https://artifacts.elastic.co/downloads/\\\" to \\\"https://artifacts.elastic.co/downloads/\\\"\",\"input\":{\"type\":\"filestream\"},\"data_stream\":{\"dataset\":\"elastic_agent\",\"namespace\":\"default\",\"type\":\"logs\"}}\n' (status=406): , dropping event!","component":{"binary":"filebeat","dataset":"elastic_agent.filebeat","id":"filestream-monitoring","type":"filestream"},"log":{"source":"filestream-monitoring"},"log.origin":{"file.line":517,"file.name":"elasticsearch/client.go","function":"github.com/elastic/beats/v7/libbeat/outputs/elasticsearch.(*Client).applyItemStatus"},"service.name":"filebeat","log.type":"event","ecs.version":"1.6.0","log.logger":"elasticsearch","ecs.version":"1.6.0"}
        {"log.level":"warn","@timestamp":"2024-08-20T19:43:40.493Z","message":"Cannot index event '{\"@timestamp\":\"2024-08-20T19:43:19.557Z\",\"log.level\":\"info\",\"log.origin\":{\"file.line\":54,\"function\":\"github.com/elastic/elastic-agent/internal/pkg/agent/application/monitoring/reload.(*ServerReloader).Start\",\"file.name\":\"reload/reload.go\"},\"log\":{\"source\":\"elastic-agent\",\"offset\":7719,\"file\":{\"path\":\"C:\\\\Users\\\\windows\\\\AppData\\\\Local\\\\Temp\\\\TestEventLogFile1155159046\\\\002\\\\elastic-agent-8.16.0-SNAPSHOT-windows-x86_64\\\\data\\\\elastic-agent-852d47\\\\logs\\\\elastic-agent-20240820.ndjson\",\"idxhi\":\"589824\",\"idxlo\":\"129881\",\"vol\":\"2754062024\"}},\"input\":{\"type\":\"filestream\"},\"data_stream\":{\"namespace\":\"default\",\"type\":\"logs\",\"dataset\":\"elastic_agent\"},\"event\":{\"dataset\":\"elastic_agent\"},\"host\":{\"id\":\"18f188f4-7d58-410c-9916-4f00c115ef19\",\"ip\":[\"fe80::3a4:458e:f926:5a45\",\"10.128.0.252\"],\"mac\":[\"42-01-0A-80-00-FC\"],\"hostname\":\"ogc-windows-amd64-2022-default-2401\",\"architecture\":\"x86_64\",\"os\":{\"build\":\"20348.2655\",\"type\":\"windows\",\"platform\":\"windows\",\"version\":\"10.0\",\"family\":\"windows\",\"name\":\"Windows Server 2022 Datacenter\",\"kernel\":\"10.0.20348.2652 (WinBuild.160101.0800)\"},\"name\":\"ogc-windows-amd64-2022-default-2401\"},\"cloud\":{\"provider\":\"gcp\",\"service\":{\"name\":\"GCE\"},\"instance\":{\"id\":\"3699362919774507953\",\"name\":\"ogc-windows-amd64-2022-default-2401\"},\"machine\":{\"type\":\"e2-standard-4\"},\"availability_zone\":\"us-central1-f\",\"region\":\"us-central1\",\"project\":{\"id\":\"elastic-platform-ingest\"},\"account\":{\"id\":\"elastic-platform-ingest\"}},\"ecs\":{\"version\":\"8.0.0\"},\"message\":\"Starting monitoring server with cfg &config.MonitoringConfig{Enabled:true, MonitorLogs:true, MonitorMetrics:true, MetricsPeriod:\\\"\\\", LogMetrics:true, HTTP:(*config.MonitoringHTTPConfig)(0xc0008f2ea0), Namespace:\\\"default\\\", Pprof:(*config.PprofConfig)(nil), MonitorTraces:false, APM:config.APMConfig{Environment:\\\"\\\", APIKey:\\\"\\\", SecretToken:\\\"\\\", Hosts:[]string(nil), GlobalLabels:map[string]string(nil), TLS:config.APMTLS{SkipVerify:false, ServerCertificate:\\\"\\\", ServerCA:\\\"\\\"}}, Diagnostics:config.Diagnostics{Uploader:config.Uploader{MaxRetries:10, InitDur:1000000000, MaxDur:600000000000}, Limit:config.Limit{Interval:60000000000, Burst:1}}}\",\"elastic_agent\":{\"version\":\"8.16.0\",\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"snapshot\":true},\"agent\":{\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"name\":\"ogc-windows-amd64-2022-default-2401\",\"type\":\"filebeat\",\"version\":\"8.16.0\",\"ephemeral_id\":\"e6ededbb-f7f4-4511-94cd-52759f9af405\"}}\n' (status=406): , dropping event!","component":{"binary":"filebeat","dataset":"elastic_agent.filebeat","id":"filestream-monitoring","type":"filestream"},"log":{"source":"filestream-monitoring"},"log.origin":{"file.line":517,"file.name":"elasticsearch/client.go","function":"github.com/elastic/beats/v7/libbeat/outputs/elasticsearch.(*Client).applyItemStatus"},"service.name":"filebeat","log.type":"event","ecs.version":"1.6.0","log.logger":"elasticsearch","ecs.version":"1.6.0"}
        {"log.level":"warn","@timestamp":"2024-08-20T19:43:40.493Z","message":"Cannot index event '{\"@timestamp\":\"2024-08-20T19:43:19.557Z\",\"log.origin\":{\"file.line\":90,\"function\":\"github.com/elastic/elastic-agent/internal/pkg/agent/application/monitoring.exposeMetricsEndpoint.func1\",\"file.name\":\"monitoring/server.go\"},\"message\":\"creating monitoring API with cfg api.Config{Enabled:true, Host:\\\"http://localhost:7002\\\", Port:7002, User:\\\"\\\", SecurityDescriptor:\\\"\\\", Timeout:5000000000}\",\"agent\":{\"name\":\"ogc-windows-amd64-2022-default-2401\",\"type\":\"filebeat\",\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"version\":\"8.16.0\",\"ephemeral_id\":\"e6ededbb-f7f4-4511-94cd-52759f9af405\"},\"ecs\":{\"version\":\"8.0.0\"},\"host\":{\"architecture\":\"x86_64\",\"os\":{\"build\":\"20348.2655\",\"type\":\"windows\",\"platform\":\"windows\",\"version\":\"10.0\",\"family\":\"windows\",\"name\":\"Windows Server 2022 Datacenter\",\"kernel\":\"10.0.20348.2652 (WinBuild.160101.0800)\"},\"id\":\"18f188f4-7d58-410c-9916-4f00c115ef19\",\"ip\":[\"fe80::3a4:458e:f926:5a45\",\"10.128.0.252\"],\"mac\":[\"42-01-0A-80-00-FC\"],\"name\":\"ogc-windows-amd64-2022-default-2401\",\"hostname\":\"ogc-windows-amd64-2022-default-2401\"},\"event\":{\"dataset\":\"elastic_agent\"},\"elastic_agent\":{\"snapshot\":true,\"version\":\"8.16.0\",\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\"},\"log.level\":\"info\",\"log\":{\"offset\":8677,\"file\":{\"vol\":\"2754062024\",\"path\":\"C:\\\\Users\\\\windows\\\\AppData\\\\Local\\\\Temp\\\\TestEventLogFile1155159046\\\\002\\\\elastic-agent-8.16.0-SNAPSHOT-windows-x86_64\\\\data\\\\elastic-agent-852d47\\\\logs\\\\elastic-agent-20240820.ndjson\",\"idxhi\":\"589824\",\"idxlo\":\"129881\"},\"source\":\"elastic-agent\"},\"cloud\":{\"provider\":\"gcp\",\"service\":{\"name\":\"GCE\"},\"instance\":{\"id\":\"3699362919774507953\",\"name\":\"ogc-windows-amd64-2022-default-2401\"},\"machine\":{\"type\":\"e2-standard-4\"},\"availability_zone\":\"us-central1-f\",\"region\":\"us-central1\",\"project\":{\"id\":\"elastic-platform-ingest\"},\"account\":{\"id\":\"elastic-platform-ingest\"}},\"input\":{\"type\":\"filestream\"},\"data_stream\":{\"namespace\":\"default\",\"type\":\"logs\",\"dataset\":\"elastic_agent\"}}\n' (status=406): , dropping event!","component":{"binary":"filebeat","dataset":"elastic_agent.filebeat","id":"filestream-monitoring","type":"filestream"},"log":{"source":"filestream-monitoring"},"log.logger":"elasticsearch","log.origin":{"file.line":517,"file.name":"elasticsearch/client.go","function":"github.com/elastic/beats/v7/libbeat/outputs/elasticsearch.(*Client).applyItemStatus"},"service.name":"filebeat","log.type":"event","ecs.version":"1.6.0","ecs.version":"1.6.0"}
        {"log.level":"warn","@timestamp":"2024-08-20T19:43:40.493Z","message":"Cannot index event '{\"@timestamp\":\"2024-08-20T19:43:19.558Z\",\"log.logger\":\"api\",\"data_stream\":{\"type\":\"logs\",\"dataset\":\"elastic_agent\",\"namespace\":\"default\"},\"log\":{\"offset\":9143,\"file\":{\"idxlo\":\"129881\",\"vol\":\"2754062024\",\"path\":\"C:\\\\Users\\\\windows\\\\AppData\\\\Local\\\\Temp\\\\TestEventLogFile1155159046\\\\002\\\\elastic-agent-8.16.0-SNAPSHOT-windows-x86_64\\\\data\\\\elastic-agent-852d47\\\\logs\\\\elastic-agent-20240820.ndjson\",\"idxhi\":\"589824\"},\"source\":\"elastic-agent\"},\"log.level\":\"info\",\"log.origin\":{\"function\":\"github.com/elastic/elastic-agent-libs/api.(*Server).Start\",\"file.name\":\"api/server.go\",\"file.line\":85},\"message\":\"Starting stats endpoint\",\"input\":{\"type\":\"filestream\"},\"event\":{\"dataset\":\"elastic_agent\"},\"elastic_agent\":{\"version\":\"8.16.0\",\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"snapshot\":true},\"agent\":{\"ephemeral_id\":\"e6ededbb-f7f4-4511-94cd-52759f9af405\",\"name\":\"ogc-windows-amd64-2022-default-2401\",\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"type\":\"filebeat\",\"version\":\"8.16.0\"},\"ecs\":{\"version\":\"8.0.0\"},\"cloud\":{\"instance\":{\"id\":\"3699362919774507953\",\"name\":\"ogc-windows-amd64-2022-default-2401\"},\"machine\":{\"type\":\"e2-standard-4\"},\"availability_zone\":\"us-central1-f\",\"region\":\"us-central1\",\"project\":{\"id\":\"elastic-platform-ingest\"},\"account\":{\"id\":\"elastic-platform-ingest\"},\"provider\":\"gcp\",\"service\":{\"name\":\"GCE\"}},\"host\":{\"os\":{\"version\":\"10.0\",\"family\":\"windows\",\"name\":\"Windows Server 2022 Datacenter\",\"kernel\":\"10.0.20348.2652 (WinBuild.160101.0800)\",\"build\":\"20348.2655\",\"type\":\"windows\",\"platform\":\"windows\"},\"id\":\"18f188f4-7d58-410c-9916-4f00c115ef19\",\"ip\":[\"fe80::3a4:458e:f926:5a45\",\"10.128.0.252\"],\"mac\":[\"42-01-0A-80-00-FC\"],\"name\":\"ogc-windows-amd64-2022-default-2401\",\"hostname\":\"ogc-windows-amd64-2022-default-2401\",\"architecture\":\"x86_64\"}}\n' (status=406): , dropping event!","component":{"binary":"filebeat","dataset":"elastic_agent.filebeat","id":"filestream-monitoring","type":"filestream"},"log":{"source":"filestream-monitoring"},"log.logger":"elasticsearch","log.origin":{"file.line":517,"file.name":"elasticsearch/client.go","function":"github.com/elastic/beats/v7/libbeat/outputs/elasticsearch.(*Client).applyItemStatus"},"service.name":"filebeat","log.type":"event","ecs.version":"1.6.0","ecs.version":"1.6.0"}
        {"log.level":"warn","@timestamp":"2024-08-20T19:43:40.493Z","message":"Cannot index event '{\"@timestamp\":\"2024-08-20T19:43:19.558Z\",\"input\":{\"type\":\"filestream\"},\"log\":{\"source\":\"elastic-agent\",\"offset\":9443,\"file\":{\"path\":\"C:\\\\Users\\\\windows\\\\AppData\\\\Local\\\\Temp\\\\TestEventLogFile1155159046\\\\002\\\\elastic-agent-8.16.0-SNAPSHOT-windows-x86_64\\\\data\\\\elastic-agent-852d47\\\\logs\\\\elastic-agent-20240820.ndjson\",\"idxhi\":\"589824\",\"idxlo\":\"129881\",\"vol\":\"2754062024\"}},\"message\":\"Metrics endpoint listening on: 127.0.0.1:7002 (configured: http://localhost:7002)\",\"log.origin\":{\"function\":\"github.com/elastic/elastic-agent-libs/api.(*Server).Start.func1\",\"file.name\":\"api/server.go\",\"file.line\":87},\"data_stream\":{\"dataset\":\"elastic_agent\",\"namespace\":\"default\",\"type\":\"logs\"},\"event\":{\"dataset\":\"elastic_agent\"},\"elastic_agent\":{\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"snapshot\":true,\"version\":\"8.16.0\"},\"agent\":{\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"ephemeral_id\":\"e6ededbb-f7f4-4511-94cd-52759f9af405\",\"name\":\"ogc-windows-amd64-2022-default-2401\",\"type\":\"filebeat\",\"version\":\"8.16.0\"},\"ecs\":{\"version\":\"8.0.0\"},\"log.level\":\"info\",\"log.logger\":\"api\",\"host\":{\"id\":\"18f188f4-7d58-410c-9916-4f00c115ef19\",\"ip\":[\"fe80::3a4:458e:f926:5a45\",\"10.128.0.252\"],\"mac\":[\"42-01-0A-80-00-FC\"],\"hostname\":\"ogc-windows-amd64-2022-default-2401\",\"architecture\":\"x86_64\",\"name\":\"ogc-windows-amd64-2022-default-2401\",\"os\":{\"build\":\"20348.2655\",\"type\":\"windows\",\"platform\":\"windows\",\"version\":\"10.0\",\"family\":\"windows\",\"name\":\"Windows Server 2022 Datacenter\",\"kernel\":\"10.0.20348.2652 (WinBuild.160101.0800)\"}},\"cloud\":{\"account\":{\"id\":\"elastic-platform-ingest\"},\"provider\":\"gcp\",\"service\":{\"name\":\"GCE\"},\"instance\":{\"name\":\"ogc-windows-amd64-2022-default-2401\",\"id\":\"3699362919774507953\"},\"machine\":{\"type\":\"e2-standard-4\"},\"availability_zone\":\"us-central1-f\",\"region\":\"us-central1\",\"project\":{\"id\":\"elastic-platform-ingest\"}}}\n' (status=406): , dropping event!","component":{"binary":"filebeat","dataset":"elastic_agent.filebeat","id":"filestream-monitoring","type":"filestream"},"log":{"source":"filestream-monitoring"},"log.logger":"elasticsearch","log.origin":{"file.line":517,"file.name":"elasticsearch/client.go","function":"github.com/elastic/beats/v7/libbeat/outputs/elasticsearch.(*Client).applyItemStatus"},"service.name":"filebeat","log.type":"event","ecs.version":"1.6.0","ecs.version":"1.6.0"}
        {"log.level":"warn","@timestamp":"2024-08-20T19:43:40.493Z","message":"Cannot index event '{\"@timestamp\":\"2024-08-20T19:43:19.682Z\",\"elastic_agent\":{\"version\":\"8.16.0\",\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"snapshot\":true},\"host\":{\"mac\":[\"42-01-0A-80-00-FC\"],\"hostname\":\"ogc-windows-amd64-2022-default-2401\",\"architecture\":\"x86_64\",\"os\":{\"name\":\"Windows Server 2022 Datacenter\",\"kernel\":\"10.0.20348.2652 (WinBuild.160101.0800)\",\"build\":\"20348.2655\",\"type\":\"windows\",\"platform\":\"windows\",\"version\":\"10.0\",\"family\":\"windows\"},\"id\":\"18f188f4-7d58-410c-9916-4f00c115ef19\",\"name\":\"ogc-windows-amd64-2022-default-2401\",\"ip\":[\"fe80::3a4:458e:f926:5a45\",\"10.128.0.252\"]},\"log.origin\":{\"file.line\":1270,\"function\":\"github.com/elastic/elastic-agent/internal/pkg/agent/application/coordinator.(*Coordinator).refreshComponentModel\",\"file.name\":\"coordinator/coordinator.go\"},\"message\":\"Updating running component model\",\"ecs\":{\"version\":\"8.0.0\"},\"input\":{\"type\":\"filestream\"},\"data_stream\":{\"namespace\":\"default\",\"type\":\"logs\",\"dataset\":\"elastic_agent\"},\"log\":{\"source\":\"elastic-agent\",\"offset\":9807,\"file\":{\"idxlo\":\"129881\",\"vol\":\"2754062024\",\"path\":\"C:\\\\Users\\\\windows\\\\AppData\\\\Local\\\\Temp\\\\TestEventLogFile1155159046\\\\002\\\\elastic-agent-8.16.0-SNAPSHOT-windows-x86_64\\\\data\\\\elastic-agent-852d47\\\\logs\\\\elastic-agent-20240820.ndjson\",\"idxhi\":\"589824\"}},\"log.level\":\"info\",\"event\":{\"dataset\":\"elastic_agent\"},\"agent\":{\"ephemeral_id\":\"e6ededbb-f7f4-4511-94cd-52759f9af405\",\"name\":\"ogc-windows-amd64-2022-default-2401\",\"type\":\"filebeat\",\"version\":\"8.16.0\",\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\"},\"cloud\":{\"provider\":\"gcp\",\"service\":{\"name\":\"GCE\"},\"instance\":{\"id\":\"3699362919774507953\",\"name\":\"ogc-windows-amd64-2022-default-2401\"},\"machine\":{\"type\":\"e2-standard-4\"},\"availability_zone\":\"us-central1-f\",\"region\":\"us-central1\",\"project\":{\"id\":\"elastic-platform-ingest\"},\"account\":{\"id\":\"elastic-platform-ingest\"}}}\n' (status=406): , dropping event!","component":{"binary":"filebeat","dataset":"elastic_agent.filebeat","id":"filestream-monitoring","type":"filestream"},"log":{"source":"filestream-monitoring"},"log.type":"event","ecs.version":"1.6.0","log.logger":"elasticsearch","log.origin":{"file.line":517,"file.name":"elasticsearch/client.go","function":"github.com/elastic/beats/v7/libbeat/outputs/elasticsearch.(*Client).applyItemStatus"},"service.name":"filebeat","ecs.version":"1.6.0"}
        {"log.level":"warn","@timestamp":"2024-08-20T19:43:40.494Z","message":"Cannot index event '{\"@timestamp\":\"2024-08-20T19:43:19.928Z\",\"message\":\"component model updated\",\"elastic_agent\":{\"version\":\"8.16.0\",\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"snapshot\":true},\"agent\":{\"ephemeral_id\":\"e6ededbb-f7f4-4511-94cd-52759f9af405\",\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"name\":\"ogc-windows-amd64-2022-default-2401\",\"type\":\"filebeat\",\"version\":\"8.16.0\"},\"ecs\":{\"version\":\"8.0.0\"},\"cloud\":{\"instance\":{\"id\":\"3699362919774507953\",\"name\":\"ogc-windows-amd64-2022-default-2401\"},\"machine\":{\"type\":\"e2-standard-4\"},\"availability_zone\":\"us-central1-f\",\"region\":\"us-central1\",\"project\":{\"id\":\"elastic-platform-ingest\"},\"account\":{\"id\":\"elastic-platform-ingest\"},\"provider\":\"gcp\",\"service\":{\"name\":\"GCE\"}},\"host\":{\"mac\":[\"42-01-0A-80-00-FC\"],\"hostname\":\"ogc-windows-amd64-2022-default-2401\",\"name\":\"ogc-windows-amd64-2022-default-2401\",\"architecture\":\"x86_64\",\"os\":{\"family\":\"windows\",\"name\":\"Windows Server 2022 Datacenter\",\"kernel\":\"10.0.20348.2652 (WinBuild.160101.0800)\",\"build\":\"20348.2655\",\"type\":\"windows\",\"platform\":\"windows\",\"version\":\"10.0\"},\"id\":\"18f188f4-7d58-410c-9916-4f00c115ef19\",\"ip\":[\"fe80::3a4:458e:f926:5a45\",\"10.128.0.252\"]},\"log.origin\":{\"file.line\":1476,\"function\":\"github.com/elastic/elastic-agent/internal/pkg/agent/application/coordinator.(*Coordinator).checkAndLogUpdate\",\"file.name\":\"coordinator/coordinator.go\"},\"changes\":{\"components\":{\"count\":4,\"updated\":[\"beat/metrics-monitoring: [(beat/metrics-monitoring-metrics-monitoring-beats: updated)]\",\"http/metrics-monitoring: [(http/metrics-monitoring-metrics-monitoring-agent: updated)]\"]},\"outputs\":{}},\"input\":{\"type\":\"filestream\"},\"data_stream\":{\"namespace\":\"default\",\"type\":\"logs\",\"dataset\":\"elastic_agent\"},\"event\":{\"dataset\":\"elastic_agent\"},\"log.level\":\"info\",\"log\":{\"offset\":10167,\"file\":{\"idxlo\":\"129881\",\"vol\":\"2754062024\",\"path\":\"C:\\\\Users\\\\windows\\\\AppData\\\\Local\\\\Temp\\\\TestEventLogFile1155159046\\\\002\\\\elastic-agent-8.16.0-SNAPSHOT-windows-x86_64\\\\data\\\\elastic-agent-852d47\\\\logs\\\\elastic-agent-20240820.ndjson\",\"idxhi\":\"589824\"},\"source\":\"elastic-agent\"}}\n' (status=406): , dropping event!","component":{"binary":"filebeat","dataset":"elastic_agent.filebeat","id":"filestream-monitoring","type":"filestream"},"log":{"source":"filestream-monitoring"},"log.origin":{"file.line":517,"file.name":"elasticsearch/client.go","function":"github.com/elastic/beats/v7/libbeat/outputs/elasticsearch.(*Client).applyItemStatus"},"service.name":"filebeat","log.type":"event","ecs.version":"1.6.0","log.logger":"elasticsearch","ecs.version":"1.6.0"}
        {"log.level":"warn","@timestamp":"2024-08-20T19:43:40.494Z","message":"Cannot index event '{\"@timestamp\":\"2024-08-20T19:43:19.928Z\",\"agent\":{\"type\":\"filebeat\",\"version\":\"8.16.0\",\"ephemeral_id\":\"e6ededbb-f7f4-4511-94cd-52759f9af405\",\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"name\":\"ogc-windows-amd64-2022-default-2401\"},\"ecs\":{\"version\":\"8.0.0\"},\"log.level\":\"info\",\"log\":{\"offset\":10754,\"file\":{\"path\":\"C:\\\\Users\\\\windows\\\\AppData\\\\Local\\\\Temp\\\\TestEventLogFile1155159046\\\\002\\\\elastic-agent-8.16.0-SNAPSHOT-windows-x86_64\\\\data\\\\elastic-agent-852d47\\\\logs\\\\elastic-agent-20240820.ndjson\",\"idxhi\":\"589824\",\"idxlo\":\"129881\",\"vol\":\"2754062024\"},\"source\":\"elastic-agent\"},\"input\":{\"type\":\"filestream\"},\"data_stream\":{\"namespace\":\"default\",\"type\":\"logs\",\"dataset\":\"elastic_agent\"},\"event\":{\"dataset\":\"elastic_agent\"},\"elastic_agent\":{\"snapshot\":true,\"version\":\"8.16.0\",\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\"},\"host\":{\"id\":\"18f188f4-7d58-410c-9916-4f00c115ef19\",\"ip\":[\"fe80::3a4:458e:f926:5a45\",\"10.128.0.252\"],\"mac\":[\"42-01-0A-80-00-FC\"],\"hostname\":\"ogc-windows-amd64-2022-default-2401\",\"architecture\":\"x86_64\",\"name\":\"ogc-windows-amd64-2022-default-2401\",\"os\":{\"name\":\"Windows Server 2022 Datacenter\",\"kernel\":\"10.0.20348.2652 (WinBuild.160101.0800)\",\"build\":\"20348.2655\",\"type\":\"windows\",\"platform\":\"windows\",\"version\":\"10.0\",\"family\":\"windows\"}},\"message\":\"Updating running component model\",\"cloud\":{\"machine\":{\"type\":\"e2-standard-4\"},\"availability_zone\":\"us-central1-f\",\"region\":\"us-central1\",\"project\":{\"id\":\"elastic-platform-ingest\"},\"account\":{\"id\":\"elastic-platform-ingest\"},\"provider\":\"gcp\",\"service\":{\"name\":\"GCE\"},\"instance\":{\"id\":\"3699362919774507953\",\"name\":\"ogc-windows-amd64-2022-default-2401\"}},\"log.origin\":{\"function\":\"github.com/elastic/elastic-agent/internal/pkg/agent/application/coordinator.(*Coordinator).refreshComponentModel\",\"file.name\":\"coordinator/coordinator.go\",\"file.line\":1270}}\n' (status=406): , dropping event!","component":{"binary":"filebeat","dataset":"elastic_agent.filebeat","id":"filestream-monitoring","type":"filestream"},"log":{"source":"filestream-monitoring"},"log.logger":"elasticsearch","log.origin":{"file.line":517,"file.name":"elasticsearch/client.go","function":"github.com/elastic/beats/v7/libbeat/outputs/elasticsearch.(*Client).applyItemStatus"},"service.name":"filebeat","log.type":"event","ecs.version":"1.6.0","ecs.version":"1.6.0"}
        {"log.level":"warn","@timestamp":"2024-08-20T19:43:40.494Z","message":"Cannot index event '{\"@timestamp\":\"2024-08-20T19:43:20.683Z\",\"ecs\":{\"version\":\"8.0.0\"},\"cloud\":{\"service\":{\"name\":\"GCE\"},\"instance\":{\"id\":\"3699362919774507953\",\"name\":\"ogc-windows-amd64-2022-default-2401\"},\"machine\":{\"type\":\"e2-standard-4\"},\"availability_zone\":\"us-central1-f\",\"region\":\"us-central1\",\"project\":{\"id\":\"elastic-platform-ingest\"},\"account\":{\"id\":\"elastic-platform-ingest\"},\"provider\":\"gcp\"},\"log.level\":\"info\",\"agent\":{\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"version\":\"8.16.0\",\"ephemeral_id\":\"e6ededbb-f7f4-4511-94cd-52759f9af405\",\"name\":\"ogc-windows-amd64-2022-default-2401\",\"type\":\"filebeat\"},\"log.origin\":{\"file.line\":625,\"function\":\"github.com/elastic/elastic-agent/internal/pkg/agent/application/coordinator.(*Coordinator).watchRuntimeComponents\",\"file.name\":\"coordinator/coordinator.go\"},\"message\":\"Spawned new component filestream-default: Starting: spawned pid '4552'\",\"component\":{\"state\":\"STARTING\",\"id\":\"filestream-default\"},\"input\":{\"type\":\"filestream\"},\"data_stream\":{\"namespace\":\"default\",\"type\":\"logs\",\"dataset\":\"elastic_agent\"},\"event\":{\"dataset\":\"elastic_agent\"},\"log\":{\"source\":\"elastic-agent\",\"offset\":12704,\"file\":{\"path\":\"C:\\\\Users\\\\windows\\\\AppData\\\\Local\\\\Temp\\\\TestEventLogFile1155159046\\\\002\\\\elastic-agent-8.16.0-SNAPSHOT-windows-x86_64\\\\data\\\\elastic-agent-852d47\\\\logs\\\\elastic-agent-20240820.ndjson\",\"idxhi\":\"589824\",\"idxlo\":\"129881\",\"vol\":\"2754062024\"}},\"host\":{\"name\":\"ogc-windows-amd64-2022-default-2401\",\"os\":{\"build\":\"20348.2655\",\"type\":\"windows\",\"platform\":\"windows\",\"version\":\"10.0\",\"family\":\"windows\",\"name\":\"Windows Server 2022 Datacenter\",\"kernel\":\"10.0.20348.2652 (WinBuild.160101.0800)\"},\"id\":\"18f188f4-7d58-410c-9916-4f00c115ef19\",\"ip\":[\"fe80::3a4:458e:f926:5a45\",\"10.128.0.252\"],\"mac\":[\"42-01-0A-80-00-FC\"],\"hostname\":\"ogc-windows-amd64-2022-default-2401\",\"architecture\":\"x86_64\"},\"elastic_agent\":{\"snapshot\":true,\"version\":\"8.16.0\",\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\"}}\n' (status=406): , dropping event!","component":{"binary":"filebeat","dataset":"elastic_agent.filebeat","id":"filestream-monitoring","type":"filestream"},"log":{"source":"filestream-monitoring"},"log.logger":"elasticsearch","log.origin":{"file.line":517,"file.name":"elasticsearch/client.go","function":"github.com/elastic/beats/v7/libbeat/outputs/elasticsearch.(*Client).applyItemStatus"},"service.name":"filebeat","log.type":"event","ecs.version":"1.6.0","ecs.version":"1.6.0"}
        {"log.level":"warn","@timestamp":"2024-08-20T19:43:40.494Z","message":"Cannot index event '{\"@timestamp\":\"2024-08-20T19:43:20.683Z\",\"message\":\"Spawned new unit filestream-default-your-input-id: Starting: spawned pid '4552'\",\"unit\":{\"id\":\"filestream-default-your-input-id\",\"type\":\"input\",\"state\":\"STARTING\"},\"elastic_agent\":{\"snapshot\":true,\"version\":\"8.16.0\",\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\"},\"input\":{\"type\":\"filestream\"},\"data_stream\":{\"namespace\":\"default\",\"type\":\"logs\",\"dataset\":\"elastic_agent\"},\"agent\":{\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"name\":\"ogc-windows-amd64-2022-default-2401\",\"type\":\"filebeat\",\"version\":\"8.16.0\",\"ephemeral_id\":\"e6ededbb-f7f4-4511-94cd-52759f9af405\"},\"log.level\":\"info\",\"component\":{\"id\":\"filestream-default\",\"state\":\"STARTING\"},\"host\":{\"name\":\"ogc-windows-amd64-2022-default-2401\",\"id\":\"18f188f4-7d58-410c-9916-4f00c115ef19\",\"ip\":[\"fe80::3a4:458e:f926:5a45\",\"10.128.0.252\"],\"mac\":[\"42-01-0A-80-00-FC\"],\"hostname\":\"ogc-windows-amd64-2022-default-2401\",\"architecture\":\"x86_64\",\"os\":{\"name\":\"Windows Server 2022 Datacenter\",\"kernel\":\"10.0.20348.2652 (WinBuild.160101.0800)\",\"build\":\"20348.2655\",\"type\":\"windows\",\"platform\":\"windows\",\"version\":\"10.0\",\"family\":\"windows\"}},\"event\":{\"dataset\":\"elastic_agent\"},\"cloud\":{\"provider\":\"gcp\",\"service\":{\"name\":\"GCE\"},\"instance\":{\"name\":\"ogc-windows-amd64-2022-default-2401\",\"id\":\"3699362919774507953\"},\"machine\":{\"type\":\"e2-standard-4\"},\"availability_zone\":\"us-central1-f\",\"region\":\"us-central1\",\"project\":{\"id\":\"elastic-platform-ingest\"},\"account\":{\"id\":\"elastic-platform-ingest\"}},\"log\":{\"offset\":13161,\"file\":{\"path\":\"C:\\\\Users\\\\windows\\\\AppData\\\\Local\\\\Temp\\\\TestEventLogFile1155159046\\\\002\\\\elastic-agent-8.16.0-SNAPSHOT-windows-x86_64\\\\data\\\\elastic-agent-852d47\\\\logs\\\\elastic-agent-20240820.ndjson\",\"idxhi\":\"589824\",\"idxlo\":\"129881\",\"vol\":\"2754062024\"},\"source\":\"elastic-agent\"},\"log.origin\":{\"function\":\"github.com/elastic/elastic-agent/internal/pkg/agent/application/coordinator.(*Coordinator).watchRuntimeComponents\",\"file.name\":\"coordinator/coordinator.go\",\"file.line\":632},\"ecs\":{\"version\":\"8.0.0\"}}\n' (status=406): , dropping event!","component":{"binary":"filebeat","dataset":"elastic_agent.filebeat","id":"filestream-monitoring","type":"filestream"},"log":{"source":"filestream-monitoring"},"ecs.version":"1.6.0","log.logger":"elasticsearch","log.origin":{"file.line":517,"file.name":"elasticsearch/client.go","function":"github.com/elastic/beats/v7/libbeat/outputs/elasticsearch.(*Client).applyItemStatus"},"service.name":"filebeat","log.type":"event","ecs.version":"1.6.0"}
        {"log.level":"warn","@timestamp":"2024-08-20T19:43:40.495Z","message":"Cannot index event '{\"@timestamp\":\"2024-08-20T19:43:20.683Z\",\"data_stream\":{\"namespace\":\"default\",\"type\":\"logs\",\"dataset\":\"elastic_agent\"},\"cloud\":{\"project\":{\"id\":\"elastic-platform-ingest\"},\"account\":{\"id\":\"elastic-platform-ingest\"},\"provider\":\"gcp\",\"service\":{\"name\":\"GCE\"},\"instance\":{\"name\":\"ogc-windows-amd64-2022-default-2401\",\"id\":\"3699362919774507953\"},\"machine\":{\"type\":\"e2-standard-4\"},\"availability_zone\":\"us-central1-f\",\"region\":\"us-central1\"},\"log.level\":\"info\",\"elastic_agent\":{\"version\":\"8.16.0\",\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"snapshot\":true},\"agent\":{\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"name\":\"ogc-windows-amd64-2022-default-2401\",\"type\":\"filebeat\",\"version\":\"8.16.0\",\"ephemeral_id\":\"e6ededbb-f7f4-4511-94cd-52759f9af405\"},\"ecs\":{\"version\":\"8.0.0\"},\"message\":\"Spawned new unit filestream-default: Starting: spawned pid '4552'\",\"host\":{\"os\":{\"type\":\"windows\",\"platform\":\"windows\",\"version\":\"10.0\",\"family\":\"windows\",\"name\":\"Windows Server 2022 Datacenter\",\"kernel\":\"10.0.20348.2652 (WinBuild.160101.0800)\",\"build\":\"20348.2655\"},\"id\":\"18f188f4-7d58-410c-9916-4f00c115ef19\",\"ip\":[\"fe80::3a4:458e:f926:5a45\",\"10.128.0.252\"],\"name\":\"ogc-windows-amd64-2022-default-2401\",\"mac\":[\"42-01-0A-80-00-FC\"],\"hostname\":\"ogc-windows-amd64-2022-default-2401\",\"architecture\":\"x86_64\"},\"log.origin\":{\"function\":\"github.com/elastic/elastic-agent/internal/pkg/agent/application/coordinator.(*Coordinator).watchRuntimeComponents\",\"file.name\":\"coordinator/coordinator.go\",\"file.line\":632},\"input\":{\"type\":\"filestream\"},\"event\":{\"dataset\":\"elastic_agent\"},\"component\":{\"id\":\"filestream-default\",\"state\":\"STARTING\"},\"unit\":{\"state\":\"STARTING\",\"id\":\"filestream-default\",\"type\":\"output\"},\"log\":{\"file\":{\"idxlo\":\"129881\",\"vol\":\"2754062024\",\"path\":\"C:\\\\Users\\\\windows\\\\AppData\\\\Local\\\\Temp\\\\TestEventLogFile1155159046\\\\002\\\\elastic-agent-8.16.0-SNAPSHOT-windows-x86_64\\\\data\\\\elastic-agent-852d47\\\\logs\\\\elastic-agent-20240820.ndjson\",\"idxhi\":\"589824\"},\"source\":\"elastic-agent\",\"offset\":13710}}\n' (status=406): , dropping event!","component":{"binary":"filebeat","dataset":"elastic_agent.filebeat","id":"filestream-monitoring","type":"filestream"},"log":{"source":"filestream-monitoring"},"log.logger":"elasticsearch","log.origin":{"file.line":517,"file.name":"elasticsearch/client.go","function":"github.com/elastic/beats/v7/libbeat/outputs/elasticsearch.(*Client).applyItemStatus"},"service.name":"filebeat","log.type":"event","ecs.version":"1.6.0","ecs.version":"1.6.0"}
        {"log.level":"warn","@timestamp":"2024-08-20T19:43:40.495Z","message":"Cannot index event '{\"@timestamp\":\"2024-08-20T19:43:28.499Z\",\"service.name\":\"filebeat\",\"cloud\":{\"provider\":\"gcp\",\"service\":{\"name\":\"GCE\"},\"instance\":{\"id\":\"3699362919774507953\",\"name\":\"ogc-windows-amd64-2022-default-2401\"},\"machine\":{\"type\":\"e2-standard-4\"},\"availability_zone\":\"us-central1-f\",\"region\":\"us-central1\",\"project\":{\"id\":\"elastic-platform-ingest\"},\"account\":{\"id\":\"elastic-platform-ingest\"}},\"log.origin\":{\"function\":\"github.com/elastic/beats/v7/libbeat/cmd/instance.(*Beat).configure\",\"file.line\":823,\"file.name\":\"instance/beat.go\"},\"elastic_agent\":{\"snapshot\":true,\"version\":\"8.16.0\",\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\"},\"log.level\":\"info\",\"component\":{\"binary\":\"filebeat\",\"dataset\":\"elastic_agent.filebeat\",\"id\":\"filestream-default\",\"type\":\"filestream\"},\"agent\":{\"version\":\"8.16.0\",\"ephemeral_id\":\"e6ededbb-f7f4-4511-94cd-52759f9af405\",\"name\":\"ogc-windows-amd64-2022-default-2401\",\"type\":\"filebeat\",\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\"},\"input\":{\"type\":\"filestream\"},\"event\":{\"dataset\":\"elastic_agent.filebeat\"},\"data_stream\":{\"type\":\"logs\",\"dataset\":\"elastic_agent.filebeat\",\"namespace\":\"default\"},\"host\":{\"name\":\"ogc-windows-amd64-2022-default-2401\",\"hostname\":\"ogc-windows-amd64-2022-default-2401\",\"architecture\":\"x86_64\",\"os\":{\"family\":\"windows\",\"name\":\"Windows Server 2022 Datacenter\",\"kernel\":\"10.0.20348.2652 (WinBuild.160101.0800)\",\"build\":\"20348.2655\",\"type\":\"windows\",\"platform\":\"windows\",\"version\":\"10.0\"},\"id\":\"18f188f4-7d58-410c-9916-4f00c115ef19\",\"ip\":[\"fe80::3a4:458e:f926:5a45\",\"10.128.0.252\"],\"mac\":[\"42-01-0A-80-00-FC\"]},\"ecs\":{\"version\":\"8.0.0\"},\"message\":\"Home path: [C:\\\\Users\\\\windows\\\\AppData\\\\Local\\\\Temp\\\\TestEventLogFile1155159046\\\\002\\\\elastic-agent-8.16.0-SNAPSHOT-windows-x86_64\\\\data\\\\elastic-agent-852d47\\\\components] Config path: [C:\\\\Users\\\\windows\\\\AppData\\\\Local\\\\Temp\\\\TestEventLogFile1155159046\\\\002\\\\elastic-agent-8.16.0-SNAPSHOT-windows-x86_64\\\\data\\\\elastic-agent-852d47\\\\components] Data path: [C:\\\\Users\\\\windows\\\\AppData\\\\Local\\\\Temp\\\\TestEventLogFile1155159046\\\\002\\\\elastic-agent-8.16.0-SNAPSHOT-windows-x86_64\\\\data\\\\elastic-agent-852d47\\\\run\\\\filestream-default] Logs path: [C:\\\\Users\\\\windows\\\\AppData\\\\Local\\\\Temp\\\\TestEventLogFile1155159046\\\\002\\\\elastic-agent-8.16.0-SNAPSHOT-windows-x86_64\\\\data\\\\elastic-agent-852d47\\\\components\\\\logs]\",\"log\":{\"source\":\"filestream-default\",\"offset\":17402,\"file\":{\"idxhi\":\"589824\",\"idxlo\":\"129881\",\"vol\":\"2754062024\",\"path\":\"C:\\\\Users\\\\windows\\\\AppData\\\\Local\\\\Temp\\\\TestEventLogFile1155159046\\\\002\\\\elastic-agent-8.16.0-SNAPSHOT-windows-x86_64\\\\data\\\\elastic-agent-852d47\\\\logs\\\\elastic-agent-20240820.ndjson\"}}}\n' (status=406): , dropping event!","component":{"binary":"filebeat","dataset":"elastic_agent.filebeat","id":"filestream-monitoring","type":"filestream"},"log":{"source":"filestream-monitoring"},"log.logger":"elasticsearch","log.origin":{"file.line":517,"file.name":"elasticsearch/client.go","function":"github.com/elastic/beats/v7/libbeat/outputs/elasticsearch.(*Client).applyItemStatus"},"service.name":"filebeat","log.type":"event","ecs.version":"1.6.0","ecs.version":"1.6.0"}
        {"log.level":"warn","@timestamp":"2024-08-20T19:43:40.495Z","message":"Cannot index event '{\"@timestamp\":\"2024-08-20T19:43:28.506Z\",\"message\":\"Beat ID: 02415bbc-8294-42c0-bcf6-fbb062090f3c\",\"service.name\":\"filebeat\",\"agent\":{\"version\":\"8.16.0\",\"ephemeral_id\":\"e6ededbb-f7f4-4511-94cd-52759f9af405\",\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"name\":\"ogc-windows-amd64-2022-default-2401\",\"type\":\"filebeat\"},\"cloud\":{\"provider\":\"gcp\",\"service\":{\"name\":\"GCE\"},\"instance\":{\"name\":\"ogc-windows-amd64-2022-default-2401\",\"id\":\"3699362919774507953\"},\"machine\":{\"type\":\"e2-standard-4\"},\"availability_zone\":\"us-central1-f\",\"region\":\"us-central1\",\"project\":{\"id\":\"elastic-platform-ingest\"},\"account\":{\"id\":\"elastic-platform-ingest\"}},\"host\":{\"hostname\":\"ogc-windows-amd64-2022-default-2401\",\"architecture\":\"x86_64\",\"os\":{\"family\":\"windows\",\"name\":\"Windows Server 2022 Datacenter\",\"kernel\":\"10.0.20348.2652 (WinBuild.160101.0800)\",\"build\":\"20348.2655\",\"type\":\"windows\",\"platform\":\"windows\",\"version\":\"10.0\"},\"id\":\"18f188f4-7d58-410c-9916-4f00c115ef19\",\"ip\":[\"fe80::3a4:458e:f926:5a45\",\"10.128.0.252\"],\"mac\":[\"42-01-0A-80-00-FC\"],\"name\":\"ogc-windows-amd64-2022-default-2401\"},\"data_stream\":{\"namespace\":\"default\",\"type\":\"logs\",\"dataset\":\"elastic_agent.filebeat\"},\"component\":{\"binary\":\"filebeat\",\"dataset\":\"elastic_agent.filebeat\",\"id\":\"filestream-default\",\"type\":\"filestream\"},\"input\":{\"type\":\"filestream\"},\"event\":{\"dataset\":\"elastic_agent.filebeat\"},\"log.origin\":{\"file.line\":831,\"file.name\":\"instance/beat.go\",\"function\":\"github.com/elastic/beats/v7/libbeat/cmd/instance.(*Beat).configure\"},\"log.level\":\"info\",\"elastic_agent\":{\"snapshot\":true,\"version\":\"8.16.0\",\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\"},\"ecs\":{\"version\":\"8.0.0\"},\"log\":{\"offset\":18553,\"file\":{\"idxhi\":\"589824\",\"idxlo\":\"129881\",\"vol\":\"2754062024\",\"path\":\"C:\\\\Users\\\\windows\\\\AppData\\\\Local\\\\Temp\\\\TestEventLogFile1155159046\\\\002\\\\elastic-agent-8.16.0-SNAPSHOT-windows-x86_64\\\\data\\\\elastic-agent-852d47\\\\logs\\\\elastic-agent-20240820.ndjson\"},\"source\":\"filestream-default\"}}\n' (status=406): , dropping event!","component":{"binary":"filebeat","dataset":"elastic_agent.filebeat","id":"filestream-monitoring","type":"filestream"},"log":{"source":"filestream-monitoring"},"log.logger":"elasticsearch","log.origin":{"file.line":517,"file.name":"elasticsearch/client.go","function":"github.com/elastic/beats/v7/libbeat/outputs/elasticsearch.(*Client).applyItemStatus"},"service.name":"filebeat","log.type":"event","ecs.version":"1.6.0","ecs.version":"1.6.0"}
        {"log.level":"warn","@timestamp":"2024-08-20T19:43:40.496Z","message":"Cannot index event '{\"@timestamp\":\"2024-08-20T19:43:28.567Z\",\"ecs\":{\"version\":\"8.0.0\"},\"log\":{\"offset\":19037,\"file\":{\"path\":\"C:\\\\Users\\\\windows\\\\AppData\\\\Local\\\\Temp\\\\TestEventLogFile1155159046\\\\002\\\\elastic-agent-8.16.0-SNAPSHOT-windows-x86_64\\\\data\\\\elastic-agent-852d47\\\\logs\\\\elastic-agent-20240820.ndjson\",\"idxhi\":\"589824\",\"idxlo\":\"129881\",\"vol\":\"2754062024\"},\"source\":\"filestream-default\"},\"log.level\":\"info\",\"log.logger\":\"centralmgmt\",\"input\":{\"type\":\"filestream\"},\"data_stream\":{\"type\":\"logs\",\"dataset\":\"elastic_agent.filebeat\",\"namespace\":\"default\"},\"host\":{\"os\":{\"family\":\"windows\",\"name\":\"Windows Server 2022 Datacenter\",\"kernel\":\"10.0.20348.2652 (WinBuild.160101.0800)\",\"build\":\"20348.2655\",\"type\":\"windows\",\"platform\":\"windows\",\"version\":\"10.0\"},\"id\":\"18f188f4-7d58-410c-9916-4f00c115ef19\",\"ip\":[\"fe80::3a4:458e:f926:5a45\",\"10.128.0.252\"],\"mac\":[\"42-01-0A-80-00-FC\"],\"hostname\":\"ogc-windows-amd64-2022-default-2401\",\"architecture\":\"x86_64\",\"name\":\"ogc-windows-amd64-2022-default-2401\"},\"agent\":{\"version\":\"8.16.0\",\"ephemeral_id\":\"e6ededbb-f7f4-4511-94cd-52759f9af405\",\"name\":\"ogc-windows-amd64-2022-default-2401\",\"type\":\"filebeat\",\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\"},\"cloud\":{\"instance\":{\"id\":\"3699362919774507953\",\"name\":\"ogc-windows-amd64-2022-default-2401\"},\"machine\":{\"type\":\"e2-standard-4\"},\"availability_zone\":\"us-central1-f\",\"region\":\"us-central1\",\"project\":{\"id\":\"elastic-platform-ingest\"},\"account\":{\"id\":\"elastic-platform-ingest\"},\"provider\":\"gcp\",\"service\":{\"name\":\"GCE\"}},\"log.origin\":{\"file.name\":\"management/managerV2.go\",\"function\":\"github.com/elastic/beats/v7/x-pack/libbeat/management.NewV2AgentManagerWithClient\",\"file.line\":204},\"message\":\"Output reload is enabled, the beat will restart as needed on change of output config\",\"service.name\":\"filebeat\",\"elastic_agent\":{\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"snapshot\":true,\"version\":\"8.16.0\"},\"component\":{\"type\":\"filestream\",\"binary\":\"filebeat\",\"dataset\":\"elastic_agent.filebeat\",\"id\":\"filestream-default\"},\"event\":{\"dataset\":\"elastic_agent.filebeat\"}}\n' (status=406): , dropping event!","component":{"binary":"filebeat","dataset":"elastic_agent.filebeat","id":"filestream-monitoring","type":"filestream"},"log":{"source":"filestream-monitoring"},"service.name":"filebeat","log.type":"event","ecs.version":"1.6.0","log.logger":"elasticsearch","log.origin":{"file.line":517,"file.name":"elasticsearch/client.go","function":"github.com/elastic/beats/v7/libbeat/outputs/elasticsearch.(*Client).applyItemStatus"},"ecs.version":"1.6.0"}
        {"log.level":"warn","@timestamp":"2024-08-20T19:43:40.496Z","message":"Cannot index event '{\"@timestamp\":\"2024-08-20T19:43:28.567Z\",\"log\":{\"source\":\"filestream-default\",\"offset\":19609,\"file\":{\"path\":\"C:\\\\Users\\\\windows\\\\AppData\\\\Local\\\\Temp\\\\TestEventLogFile1155159046\\\\002\\\\elastic-agent-8.16.0-SNAPSHOT-windows-x86_64\\\\data\\\\elastic-agent-852d47\\\\logs\\\\elastic-agent-20240820.ndjson\",\"idxhi\":\"589824\",\"idxlo\":\"129881\",\"vol\":\"2754062024\"}},\"log.origin\":{\"file.line\":885,\"file.name\":\"instance/beat.go\",\"function\":\"github.com/elastic/beats/v7/libbeat/cmd/instance.(*Beat).configure\"},\"host\":{\"id\":\"18f188f4-7d58-410c-9916-4f00c115ef19\",\"ip\":[\"fe80::3a4:458e:f926:5a45\",\"10.128.0.252\"],\"mac\":[\"42-01-0A-80-00-FC\"],\"name\":\"ogc-windows-amd64-2022-default-2401\",\"hostname\":\"ogc-windows-amd64-2022-default-2401\",\"architecture\":\"x86_64\",\"os\":{\"name\":\"Windows Server 2022 Datacenter\",\"kernel\":\"10.0.20348.2652 (WinBuild.160101.0800)\",\"build\":\"20348.2655\",\"type\":\"windows\",\"platform\":\"windows\",\"version\":\"10.0\",\"family\":\"windows\"}},\"data_stream\":{\"dataset\":\"elastic_agent.filebeat\",\"namespace\":\"default\",\"type\":\"logs\"},\"agent\":{\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"ephemeral_id\":\"e6ededbb-f7f4-4511-94cd-52759f9af405\",\"name\":\"ogc-windows-amd64-2022-default-2401\",\"type\":\"filebeat\",\"version\":\"8.16.0\"},\"ecs\":{\"version\":\"8.0.0\"},\"cloud\":{\"project\":{\"id\":\"elastic-platform-ingest\"},\"account\":{\"id\":\"elastic-platform-ingest\"},\"provider\":\"gcp\",\"service\":{\"name\":\"GCE\"},\"instance\":{\"name\":\"ogc-windows-amd64-2022-default-2401\",\"id\":\"3699362919774507953\"},\"machine\":{\"type\":\"e2-standard-4\"},\"availability_zone\":\"us-central1-f\",\"region\":\"us-central1\"},\"message\":\"Set gc percentage to: 100\",\"component\":{\"binary\":\"filebeat\",\"dataset\":\"elastic_agent.filebeat\",\"id\":\"filestream-default\",\"type\":\"filestream\"},\"service.name\":\"filebeat\",\"elastic_agent\":{\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"snapshot\":true,\"version\":\"8.16.0\"},\"log.level\":\"info\",\"input\":{\"type\":\"filestream\"},\"event\":{\"dataset\":\"elastic_agent.filebeat\"}}\n' (status=406): , dropping event!","component":{"binary":"filebeat","dataset":"elastic_agent.filebeat","id":"filestream-monitoring","type":"filestream"},"log":{"source":"filestream-monitoring"},"log.logger":"elasticsearch","log.origin":{"file.line":517,"file.name":"elasticsearch/client.go","function":"github.com/elastic/beats/v7/libbeat/outputs/elasticsearch.(*Client).applyItemStatus"},"service.name":"filebeat","log.type":"event","ecs.version":"1.6.0","ecs.version":"1.6.0"}
        {"log.level":"warn","@timestamp":"2024-08-20T19:43:40.496Z","message":"Cannot index event '{\"@timestamp\":\"2024-08-20T19:43:28.584Z\",\"service.name\":\"filebeat\",\"host\":{\"id\":\"18f188f4-7d58-410c-9916-4f00c115ef19\",\"ip\":[\"fe80::3a4:458e:f926:5a45\",\"10.128.0.252\"],\"mac\":[\"42-01-0A-80-00-FC\"],\"hostname\":\"ogc-windows-amd64-2022-default-2401\",\"architecture\":\"x86_64\",\"name\":\"ogc-windows-amd64-2022-default-2401\",\"os\":{\"type\":\"windows\",\"platform\":\"windows\",\"version\":\"10.0\",\"family\":\"windows\",\"name\":\"Windows Server 2022 Datacenter\",\"kernel\":\"10.0.20348.2652 (WinBuild.160101.0800)\",\"build\":\"20348.2655\"}},\"data_stream\":{\"namespace\":\"default\",\"type\":\"logs\",\"dataset\":\"elastic_agent.filebeat\"},\"elastic_agent\":{\"version\":\"8.16.0\",\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"snapshot\":true},\"agent\":{\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"version\":\"8.16.0\",\"ephemeral_id\":\"e6ededbb-f7f4-4511-94cd-52759f9af405\",\"name\":\"ogc-windows-amd64-2022-default-2401\",\"type\":\"filebeat\"},\"cloud\":{\"instance\":{\"id\":\"3699362919774507953\",\"name\":\"ogc-windows-amd64-2022-default-2401\"},\"machine\":{\"type\":\"e2-standard-4\"},\"availability_zone\":\"us-central1-f\",\"region\":\"us-central1\",\"project\":{\"id\":\"elastic-platform-ingest\"},\"account\":{\"id\":\"elastic-platform-ingest\"},\"provider\":\"gcp\",\"service\":{\"name\":\"GCE\"}},\"log.level\":\"info\",\"message\":\"running under elastic-agent, per-beat lockfiles disabled\",\"component\":{\"binary\":\"filebeat\",\"dataset\":\"elastic_agent.filebeat\",\"id\":\"filestream-default\",\"type\":\"filestream\"},\"event\":{\"dataset\":\"elastic_agent.filebeat\"},\"input\":{\"type\":\"filestream\"},\"log.origin\":{\"file.line\":448,\"file.name\":\"instance/beat.go\",\"function\":\"github.com/elastic/beats/v7/libbeat/cmd/instance.(*Beat).launch\"},\"log\":{\"offset\":20073,\"file\":{\"idxhi\":\"589824\",\"idxlo\":\"129881\",\"vol\":\"2754062024\",\"path\":\"C:\\\\Users\\\\windows\\\\AppData\\\\Local\\\\Temp\\\\TestEventLogFile1155159046\\\\002\\\\elastic-agent-8.16.0-SNAPSHOT-windows-x86_64\\\\data\\\\elastic-agent-852d47\\\\logs\\\\elastic-agent-20240820.ndjson\"},\"source\":\"filestream-default\"},\"ecs\":{\"version\":\"8.0.0\"}}\n' (status=406): , dropping event!","component":{"binary":"filebeat","dataset":"elastic_agent.filebeat","id":"filestream-monitoring","type":"filestream"},"log":{"source":"filestream-monitoring"},"log.logger":"elasticsearch","log.origin":{"file.line":517,"file.name":"elasticsearch/client.go","function":"github.com/elastic/beats/v7/libbeat/outputs/elasticsearch.(*Client).applyItemStatus"},"service.name":"filebeat","log.type":"event","ecs.version":"1.6.0","ecs.version":"1.6.0"}
        {"log.level":"warn","@timestamp":"2024-08-20T19:43:40.496Z","message":"Cannot index event '{\"@timestamp\":\"2024-08-20T19:43:28.589Z\",\"elastic_agent\":{\"version\":\"8.16.0\",\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"snapshot\":true},\"log.logger\":\"api\",\"log.level\":\"info\",\"data_stream\":{\"dataset\":\"elastic_agent.filebeat\",\"namespace\":\"default\",\"type\":\"logs\"},\"agent\":{\"name\":\"ogc-windows-amd64-2022-default-2401\",\"type\":\"filebeat\",\"version\":\"8.16.0\",\"ephemeral_id\":\"e6ededbb-f7f4-4511-94cd-52759f9af405\",\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\"},\"ecs\":{\"version\":\"8.0.0\"},\"service.name\":\"filebeat\",\"log\":{\"offset\":20565,\"file\":{\"idxhi\":\"589824\",\"idxlo\":\"129881\",\"vol\":\"2754062024\",\"path\":\"C:\\\\Users\\\\windows\\\\AppData\\\\Local\\\\Temp\\\\TestEventLogFile1155159046\\\\002\\\\elastic-agent-8.16.0-SNAPSHOT-windows-x86_64\\\\data\\\\elastic-agent-852d47\\\\logs\\\\elastic-agent-20240820.ndjson\"},\"source\":\"filestream-default\"},\"message\":\"Starting stats endpoint\",\"input\":{\"type\":\"filestream\"},\"event\":{\"dataset\":\"elastic_agent.filebeat\"},\"host\":{\"id\":\"18f188f4-7d58-410c-9916-4f00c115ef19\",\"ip\":[\"fe80::3a4:458e:f926:5a45\",\"10.128.0.252\"],\"mac\":[\"42-01-0A-80-00-FC\"],\"hostname\":\"ogc-windows-amd64-2022-default-2401\",\"architecture\":\"x86_64\",\"os\":{\"build\":\"20348.2655\",\"type\":\"windows\",\"platform\":\"windows\",\"version\":\"10.0\",\"family\":\"windows\",\"name\":\"Windows Server 2022 Datacenter\",\"kernel\":\"10.0.20348.2652 (WinBuild.160101.0800)\"},\"name\":\"ogc-windows-amd64-2022-default-2401\"},\"cloud\":{\"service\":{\"name\":\"GCE\"},\"instance\":{\"name\":\"ogc-windows-amd64-2022-default-2401\",\"id\":\"3699362919774507953\"},\"machine\":{\"type\":\"e2-standard-4\"},\"availability_zone\":\"us-central1-f\",\"region\":\"us-central1\",\"project\":{\"id\":\"elastic-platform-ingest\"},\"account\":{\"id\":\"elastic-platform-ingest\"},\"provider\":\"gcp\"},\"component\":{\"binary\":\"filebeat\",\"dataset\":\"elastic_agent.filebeat\",\"id\":\"filestream-default\",\"type\":\"filestream\"},\"log.origin\":{\"file.line\":69,\"file.name\":\"api/server.go\",\"function\":\"github.com/elastic/beats/v7/libbeat/api.(*Server).Start\"}}\n' (status=406): , dropping event!","component":{"binary":"filebeat","dataset":"elastic_agent.filebeat","id":"filestream-monitoring","type":"filestream"},"log":{"source":"filestream-monitoring"},"log.logger":"elasticsearch","log.origin":{"file.line":517,"file.name":"elasticsearch/client.go","function":"github.com/elastic/beats/v7/libbeat/outputs/elasticsearch.(*Client).applyItemStatus"},"service.name":"filebeat","log.type":"event","ecs.version":"1.6.0","ecs.version":"1.6.0"}
        {"log.level":"warn","@timestamp":"2024-08-20T19:43:40.497Z","message":"Cannot index event '{\"@timestamp\":\"2024-08-20T19:43:28.589Z\",\"message\":\"Setup Beat: filebeat; Version: 8.16.0\",\"ecs\":{\"version\":\"8.0.0\"},\"log.level\":\"info\",\"data_stream\":{\"namespace\":\"default\",\"type\":\"logs\",\"dataset\":\"elastic_agent.filebeat\"},\"elastic_agent\":{\"snapshot\":true,\"version\":\"8.16.0\",\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\"},\"component\":{\"type\":\"filestream\",\"binary\":\"filebeat\",\"dataset\":\"elastic_agent.filebeat\",\"id\":\"filestream-default\"},\"log.origin\":{\"file.line\":345,\"file.name\":\"instance/beat.go\",\"function\":\"github.com/elastic/beats/v7/libbeat/cmd/instance.(*Beat).createBeater\"},\"input\":{\"type\":\"filestream\"},\"event\":{\"dataset\":\"elastic_agent.filebeat\"},\"agent\":{\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"version\":\"8.16.0\",\"ephemeral_id\":\"e6ededbb-f7f4-4511-94cd-52759f9af405\",\"name\":\"ogc-windows-amd64-2022-default-2401\",\"type\":\"filebeat\"},\"cloud\":{\"machine\":{\"type\":\"e2-standard-4\"},\"availability_zone\":\"us-central1-f\",\"region\":\"us-central1\",\"project\":{\"id\":\"elastic-platform-ingest\"},\"account\":{\"id\":\"elastic-platform-ingest\"},\"provider\":\"gcp\",\"service\":{\"name\":\"GCE\"},\"instance\":{\"id\":\"3699362919774507953\",\"name\":\"ogc-windows-amd64-2022-default-2401\"}},\"service.name\":\"filebeat\",\"log.logger\":\"beat\",\"host\":{\"name\":\"ogc-windows-amd64-2022-default-2401\",\"architecture\":\"x86_64\",\"os\":{\"version\":\"10.0\",\"family\":\"windows\",\"name\":\"Windows Server 2022 Datacenter\",\"kernel\":\"10.0.20348.2652 (WinBuild.160101.0800)\",\"build\":\"20348.2655\",\"type\":\"windows\",\"platform\":\"windows\"},\"id\":\"18f188f4-7d58-410c-9916-4f00c115ef19\",\"ip\":[\"fe80::3a4:458e:f926:5a45\",\"10.128.0.252\"],\"mac\":[\"42-01-0A-80-00-FC\"],\"hostname\":\"ogc-windows-amd64-2022-default-2401\"},\"log\":{\"offset\":21031,\"file\":{\"path\":\"C:\\\\Users\\\\windows\\\\AppData\\\\Local\\\\Temp\\\\TestEventLogFile1155159046\\\\002\\\\elastic-agent-8.16.0-SNAPSHOT-windows-x86_64\\\\data\\\\elastic-agent-852d47\\\\logs\\\\elastic-agent-20240820.ndjson\",\"idxhi\":\"589824\",\"idxlo\":\"129881\",\"vol\":\"2754062024\"},\"source\":\"filestream-default\"}}\n' (status=406): , dropping event!","component":{"binary":"filebeat","dataset":"elastic_agent.filebeat","id":"filestream-monitoring","type":"filestream"},"log":{"source":"filestream-monitoring"},"log.type":"event","ecs.version":"1.6.0","log.logger":"elasticsearch","log.origin":{"file.line":517,"file.name":"elasticsearch/client.go","function":"github.com/elastic/beats/v7/libbeat/outputs/elasticsearch.(*Client).applyItemStatus"},"service.name":"filebeat","ecs.version":"1.6.0"}
        {"log.level":"warn","@timestamp":"2024-08-20T19:43:40.497Z","message":"Cannot index event '{\"@timestamp\":\"2024-08-20T19:43:28.589Z\",\"log\":{\"file\":{\"idxhi\":\"589824\",\"idxlo\":\"129881\",\"vol\":\"2754062024\",\"path\":\"C:\\\\Users\\\\windows\\\\AppData\\\\Local\\\\Temp\\\\TestEventLogFile1155159046\\\\002\\\\elastic-agent-8.16.0-SNAPSHOT-windows-x86_64\\\\data\\\\elastic-agent-852d47\\\\logs\\\\elastic-agent-20240820.ndjson\"},\"source\":\"filestream-default\",\"offset\":21530},\"service.name\":\"filebeat\",\"input\":{\"type\":\"filestream\"},\"cloud\":{\"region\":\"us-central1\",\"project\":{\"id\":\"elastic-platform-ingest\"},\"account\":{\"id\":\"elastic-platform-ingest\"},\"provider\":\"gcp\",\"service\":{\"name\":\"GCE\"},\"instance\":{\"id\":\"3699362919774507953\",\"name\":\"ogc-windows-amd64-2022-default-2401\"},\"machine\":{\"type\":\"e2-standard-4\"},\"availability_zone\":\"us-central1-f\"},\"host\":{\"name\":\"ogc-windows-amd64-2022-default-2401\",\"architecture\":\"x86_64\",\"os\":{\"family\":\"windows\",\"name\":\"Windows Server 2022 Datacenter\",\"kernel\":\"10.0.20348.2652 (WinBuild.160101.0800)\",\"build\":\"20348.2655\",\"type\":\"windows\",\"platform\":\"windows\",\"version\":\"10.0\"},\"id\":\"18f188f4-7d58-410c-9916-4f00c115ef19\",\"ip\":[\"fe80::3a4:458e:f926:5a45\",\"10.128.0.252\"],\"mac\":[\"42-01-0A-80-00-FC\"],\"hostname\":\"ogc-windows-amd64-2022-default-2401\"},\"event\":{\"dataset\":\"elastic_agent.filebeat\"},\"elastic_agent\":{\"version\":\"8.16.0\",\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"snapshot\":true},\"agent\":{\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"name\":\"ogc-windows-amd64-2022-default-2401\",\"type\":\"filebeat\",\"version\":\"8.16.0\",\"ephemeral_id\":\"e6ededbb-f7f4-4511-94cd-52759f9af405\"},\"log.level\":\"info\",\"component\":{\"id\":\"filestream-default\",\"type\":\"filestream\",\"binary\":\"filebeat\",\"dataset\":\"elastic_agent.filebeat\"},\"log.logger\":\"api\",\"data_stream\":{\"dataset\":\"elastic_agent.filebeat\",\"namespace\":\"default\",\"type\":\"logs\"},\"message\":\"Metrics endpoint listening on: \\\\\\\\.\\\\pipe\\\\7uyxrneW50ZMk_CZbrE0Hjg3idmd7AzZ.sock (configured: npipe:///7uyxrneW50ZMk_CZbrE0Hjg3idmd7AzZ.sock)\",\"log.origin\":{\"file.line\":71,\"file.name\":\"api/server.go\",\"function\":\"github.com/elastic/beats/v7/libbeat/api.(*Server).Start.func1\"},\"ecs\":{\"version\":\"8.0.0\"}}\n' (status=406): , dropping event!","component":{"binary":"filebeat","dataset":"elastic_agent.filebeat","id":"filestream-monitoring","type":"filestream"},"log":{"source":"filestream-monitoring"},"service.name":"filebeat","log.type":"event","ecs.version":"1.6.0","log.logger":"elasticsearch","log.origin":{"file.line":517,"file.name":"elasticsearch/client.go","function":"github.com/elastic/beats/v7/libbeat/outputs/elasticsearch.(*Client).applyItemStatus"},"ecs.version":"1.6.0"}
        {"log.level":"warn","@timestamp":"2024-08-20T19:43:40.497Z","message":"Cannot index event '{\"@timestamp\":\"2024-08-20T19:43:28.599Z\",\"data_stream\":{\"namespace\":\"default\",\"type\":\"logs\",\"dataset\":\"elastic_agent.filebeat\"},\"agent\":{\"version\":\"8.16.0\",\"ephemeral_id\":\"e6ededbb-f7f4-4511-94cd-52759f9af405\",\"name\":\"ogc-windows-amd64-2022-default-2401\",\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"type\":\"filebeat\"},\"log\":{\"offset\":22121,\"file\":{\"path\":\"C:\\\\Users\\\\windows\\\\AppData\\\\Local\\\\Temp\\\\TestEventLogFile1155159046\\\\002\\\\elastic-agent-8.16.0-SNAPSHOT-windows-x86_64\\\\data\\\\elastic-agent-852d47\\\\logs\\\\elastic-agent-20240820.ndjson\",\"idxhi\":\"589824\",\"idxlo\":\"129881\",\"vol\":\"2754062024\"},\"source\":\"filestream-default\"},\"log.origin\":{\"file.name\":\"add_cloud_metadata/providers.go\",\"function\":\"github.com/elastic/beats/v7/libbeat/processors/add_cloud_metadata.(*addCloudMetadata).fetchMetadata\",\"file.line\":190},\"ecs\":{\"version\":\"8.0.0\"},\"event\":{\"dataset\":\"elastic_agent.filebeat\"},\"host\":{\"name\":\"ogc-windows-amd64-2022-default-2401\",\"hostname\":\"ogc-windows-amd64-2022-default-2401\",\"architecture\":\"x86_64\",\"os\":{\"name\":\"Windows Server 2022 Datacenter\",\"kernel\":\"10.0.20348.2652 (WinBuild.160101.0800)\",\"build\":\"20348.2655\",\"type\":\"windows\",\"platform\":\"windows\",\"version\":\"10.0\",\"family\":\"windows\"},\"id\":\"18f188f4-7d58-410c-9916-4f00c115ef19\",\"ip\":[\"fe80::3a4:458e:f926:5a45\",\"10.128.0.252\"],\"mac\":[\"42-01-0A-80-00-FC\"]},\"log.level\":\"error\",\"message\":\"add_cloud_metadata: received error failed with http status code 404\",\"input\":{\"type\":\"filestream\"},\"component\":{\"binary\":\"filebeat\",\"dataset\":\"elastic_agent.filebeat\",\"id\":\"filestream-default\",\"type\":\"filestream\"},\"elastic_agent\":{\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"snapshot\":true,\"version\":\"8.16.0\"},\"cloud\":{\"service\":{\"name\":\"GCE\"},\"instance\":{\"id\":\"3699362919774507953\",\"name\":\"ogc-windows-amd64-2022-default-2401\"},\"machine\":{\"type\":\"e2-standard-4\"},\"availability_zone\":\"us-central1-f\",\"region\":\"us-central1\",\"project\":{\"id\":\"elastic-platform-ingest\"},\"account\":{\"id\":\"elastic-platform-ingest\"},\"provider\":\"gcp\"},\"service.name\":\"filebeat\",\"log.logger\":\"add_cloud_metadata\"}\n' (status=406): , dropping event!","component":{"binary":"filebeat","dataset":"elastic_agent.filebeat","id":"filestream-monitoring","type":"filestream"},"log":{"source":"filestream-monitoring"},"log.logger":"elasticsearch","log.origin":{"file.line":517,"file.name":"elasticsearch/client.go","function":"github.com/elastic/beats/v7/libbeat/outputs/elasticsearch.(*Client).applyItemStatus"},"service.name":"filebeat","log.type":"event","ecs.version":"1.6.0","ecs.version":"1.6.0"}
        {"log.level":"warn","@timestamp":"2024-08-20T19:43:40.497Z","message":"Cannot index event '{\"@timestamp\":\"2024-08-20T19:43:28.599Z\",\"log.logger\":\"add_cloud_metadata\",\"data_stream\":{\"type\":\"logs\",\"dataset\":\"elastic_agent.filebeat\",\"namespace\":\"default\"},\"event\":{\"dataset\":\"elastic_agent.filebeat\"},\"ecs\":{\"version\":\"8.0.0\"},\"log.level\":\"error\",\"input\":{\"type\":\"filestream\"},\"agent\":{\"ephemeral_id\":\"e6ededbb-f7f4-4511-94cd-52759f9af405\",\"name\":\"ogc-windows-amd64-2022-default-2401\",\"type\":\"filebeat\",\"version\":\"8.16.0\",\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\"},\"component\":{\"binary\":\"filebeat\",\"dataset\":\"elastic_agent.filebeat\",\"id\":\"filestream-default\",\"type\":\"filestream\"},\"service.name\":\"filebeat\",\"log\":{\"offset\":22710,\"file\":{\"idxlo\":\"129881\",\"vol\":\"2754062024\",\"path\":\"C:\\\\Users\\\\windows\\\\AppData\\\\Local\\\\Temp\\\\TestEventLogFile1155159046\\\\002\\\\elastic-agent-8.16.0-SNAPSHOT-windows-x86_64\\\\data\\\\elastic-agent-852d47\\\\logs\\\\elastic-agent-20240820.ndjson\",\"idxhi\":\"589824\"},\"source\":\"filestream-default\"},\"message\":\"add_cloud_metadata: received error failed with http status code 404\",\"elastic_agent\":{\"version\":\"8.16.0\",\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"snapshot\":true},\"cloud\":{\"account\":{\"id\":\"elastic-platform-ingest\"},\"provider\":\"gcp\",\"service\":{\"name\":\"GCE\"},\"instance\":{\"id\":\"3699362919774507953\",\"name\":\"ogc-windows-amd64-2022-default-2401\"},\"machine\":{\"type\":\"e2-standard-4\"},\"availability_zone\":\"us-central1-f\",\"region\":\"us-central1\",\"project\":{\"id\":\"elastic-platform-ingest\"}},\"log.origin\":{\"file.line\":190,\"file.name\":\"add_cloud_metadata/providers.go\",\"function\":\"github.com/elastic/beats/v7/libbeat/processors/add_cloud_metadata.(*addCloudMetadata).fetchMetadata\"},\"host\":{\"hostname\":\"ogc-windows-amd64-2022-default-2401\",\"architecture\":\"x86_64\",\"os\":{\"kernel\":\"10.0.20348.2652 (WinBuild.160101.0800)\",\"build\":\"20348.2655\",\"type\":\"windows\",\"platform\":\"windows\",\"version\":\"10.0\",\"family\":\"windows\",\"name\":\"Windows Server 2022 Datacenter\"},\"id\":\"18f188f4-7d58-410c-9916-4f00c115ef19\",\"name\":\"ogc-windows-amd64-2022-default-2401\",\"ip\":[\"fe80::3a4:458e:f926:5a45\",\"10.128.0.252\"],\"mac\":[\"42-01-0A-80-00-FC\"]}}\n' (status=406): , dropping event!","component":{"binary":"filebeat","dataset":"elastic_agent.filebeat","id":"filestream-monitoring","type":"filestream"},"log":{"source":"filestream-monitoring"},"log.logger":"elasticsearch","log.origin":{"file.line":517,"file.name":"elasticsearch/client.go","function":"github.com/elastic/beats/v7/libbeat/outputs/elasticsearch.(*Client).applyItemStatus"},"service.name":"filebeat","log.type":"event","ecs.version":"1.6.0","ecs.version":"1.6.0"}
        {"log.level":"warn","@timestamp":"2024-08-20T19:43:40.498Z","message":"Cannot index event '{\"@timestamp\":\"2024-08-20T19:43:28.599Z\",\"agent\":{\"type\":\"filebeat\",\"version\":\"8.16.0\",\"ephemeral_id\":\"e6ededbb-f7f4-4511-94cd-52759f9af405\",\"name\":\"ogc-windows-amd64-2022-default-2401\",\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\"},\"host\":{\"hostname\":\"ogc-windows-amd64-2022-default-2401\",\"name\":\"ogc-windows-amd64-2022-default-2401\",\"architecture\":\"x86_64\",\"os\":{\"platform\":\"windows\",\"version\":\"10.0\",\"family\":\"windows\",\"name\":\"Windows Server 2022 Datacenter\",\"kernel\":\"10.0.20348.2652 (WinBuild.160101.0800)\",\"build\":\"20348.2655\",\"type\":\"windows\"},\"id\":\"18f188f4-7d58-410c-9916-4f00c115ef19\",\"ip\":[\"fe80::3a4:458e:f926:5a45\",\"10.128.0.252\"],\"mac\":[\"42-01-0A-80-00-FC\"]},\"cloud\":{\"instance\":{\"id\":\"3699362919774507953\",\"name\":\"ogc-windows-amd64-2022-default-2401\"},\"machine\":{\"type\":\"e2-standard-4\"},\"availability_zone\":\"us-central1-f\",\"region\":\"us-central1\",\"project\":{\"id\":\"elastic-platform-ingest\"},\"account\":{\"id\":\"elastic-platform-ingest\"},\"provider\":\"gcp\",\"service\":{\"name\":\"GCE\"}},\"service.name\":\"filebeat\",\"data_stream\":{\"dataset\":\"elastic_agent.filebeat\",\"namespace\":\"default\",\"type\":\"logs\"},\"ecs\":{\"version\":\"8.0.0\"},\"elastic_agent\":{\"version\":\"8.16.0\",\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"snapshot\":true},\"message\":\"add_cloud_metadata: received error failed with http status code 404\",\"component\":{\"dataset\":\"elastic_agent.filebeat\",\"id\":\"filestream-default\",\"type\":\"filestream\",\"binary\":\"filebeat\"},\"log.origin\":{\"function\":\"github.com/elastic/beats/v7/libbeat/processors/add_cloud_metadata.(*addCloudMetadata).fetchMetadata\",\"file.line\":190,\"file.name\":\"add_cloud_metadata/providers.go\"},\"log.level\":\"error\",\"input\":{\"type\":\"filestream\"},\"event\":{\"dataset\":\"elastic_agent.filebeat\"},\"log\":{\"offset\":23299,\"file\":{\"idxlo\":\"129881\",\"vol\":\"2754062024\",\"path\":\"C:\\\\Users\\\\windows\\\\AppData\\\\Local\\\\Temp\\\\TestEventLogFile1155159046\\\\002\\\\elastic-agent-8.16.0-SNAPSHOT-windows-x86_64\\\\data\\\\elastic-agent-852d47\\\\logs\\\\elastic-agent-20240820.ndjson\",\"idxhi\":\"589824\"},\"source\":\"filestream-default\"},\"log.logger\":\"add_cloud_metadata\"}\n' (status=406): , dropping event!","component":{"binary":"filebeat","dataset":"elastic_agent.filebeat","id":"filestream-monitoring","type":"filestream"},"log":{"source":"filestream-monitoring"},"log.logger":"elasticsearch","log.origin":{"file.line":517,"file.name":"elasticsearch/client.go","function":"github.com/elastic/beats/v7/libbeat/outputs/elasticsearch.(*Client).applyItemStatus"},"service.name":"filebeat","log.type":"event","ecs.version":"1.6.0","ecs.version":"1.6.0"}
        {"log.level":"warn","@timestamp":"2024-08-20T19:43:40.498Z","message":"Cannot index event '{\"@timestamp\":\"2024-08-20T19:43:28.603Z\",\"component\":{\"binary\":\"filebeat\",\"dataset\":\"elastic_agent.filebeat\",\"id\":\"filestream-default\",\"type\":\"filestream\"},\"service.name\":\"filebeat\",\"message\":\"add_cloud_metadata: received error failed with http status code 404\",\"event\":{\"dataset\":\"elastic_agent.filebeat\"},\"agent\":{\"version\":\"8.16.0\",\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"ephemeral_id\":\"e6ededbb-f7f4-4511-94cd-52759f9af405\",\"name\":\"ogc-windows-amd64-2022-default-2401\",\"type\":\"filebeat\"},\"ecs\":{\"version\":\"8.0.0\"},\"log.logger\":\"add_cloud_metadata\",\"log\":{\"file\":{\"idxhi\":\"589824\",\"idxlo\":\"129881\",\"vol\":\"2754062024\",\"path\":\"C:\\\\Users\\\\windows\\\\AppData\\\\Local\\\\Temp\\\\TestEventLogFile1155159046\\\\002\\\\elastic-agent-8.16.0-SNAPSHOT-windows-x86_64\\\\data\\\\elastic-agent-852d47\\\\logs\\\\elastic-agent-20240820.ndjson\"},\"source\":\"filestream-default\",\"offset\":23888},\"cloud\":{\"instance\":{\"id\":\"3699362919774507953\",\"name\":\"ogc-windows-amd64-2022-default-2401\"},\"machine\":{\"type\":\"e2-standard-4\"},\"availability_zone\":\"us-central1-f\",\"region\":\"us-central1\",\"project\":{\"id\":\"elastic-platform-ingest\"},\"account\":{\"id\":\"elastic-platform-ingest\"},\"provider\":\"gcp\",\"service\":{\"name\":\"GCE\"}},\"log.level\":\"error\",\"log.origin\":{\"file.line\":190,\"file.name\":\"add_cloud_metadata/providers.go\",\"function\":\"github.com/elastic/beats/v7/libbeat/processors/add_cloud_metadata.(*addCloudMetadata).fetchMetadata\"},\"input\":{\"type\":\"filestream\"},\"data_stream\":{\"namespace\":\"default\",\"type\":\"logs\",\"dataset\":\"elastic_agent.filebeat\"},\"elastic_agent\":{\"snapshot\":true,\"version\":\"8.16.0\",\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\"},\"host\":{\"id\":\"18f188f4-7d58-410c-9916-4f00c115ef19\",\"name\":\"ogc-windows-amd64-2022-default-2401\",\"ip\":[\"fe80::3a4:458e:f926:5a45\",\"10.128.0.252\"],\"mac\":[\"42-01-0A-80-00-FC\"],\"hostname\":\"ogc-windows-amd64-2022-default-2401\",\"architecture\":\"x86_64\",\"os\":{\"build\":\"20348.2655\",\"type\":\"windows\",\"platform\":\"windows\",\"version\":\"10.0\",\"family\":\"windows\",\"name\":\"Windows Server 2022 Datacenter\",\"kernel\":\"10.0.20348.2652 (WinBuild.160101.0800)\"}}}\n' (status=406): , dropping event!","component":{"binary":"filebeat","dataset":"elastic_agent.filebeat","id":"filestream-monitoring","type":"filestream"},"log":{"source":"filestream-monitoring"},"log.logger":"elasticsearch","log.origin":{"file.line":517,"file.name":"elasticsearch/client.go","function":"github.com/elastic/beats/v7/libbeat/outputs/elasticsearch.(*Client).applyItemStatus"},"service.name":"filebeat","log.type":"event","ecs.version":"1.6.0","ecs.version":"1.6.0"}
        {"log.level":"warn","@timestamp":"2024-08-20T19:43:40.498Z","message":"Cannot index event '{\"@timestamp\":\"2024-08-20T19:43:28.603Z\",\"event\":{\"dataset\":\"elastic_agent.filebeat\"},\"agent\":{\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"ephemeral_id\":\"e6ededbb-f7f4-4511-94cd-52759f9af405\",\"name\":\"ogc-windows-amd64-2022-default-2401\",\"type\":\"filebeat\",\"version\":\"8.16.0\"},\"log\":{\"file\":{\"idxhi\":\"589824\",\"idxlo\":\"129881\",\"vol\":\"2754062024\",\"path\":\"C:\\\\Users\\\\windows\\\\AppData\\\\Local\\\\Temp\\\\TestEventLogFile1155159046\\\\002\\\\elastic-agent-8.16.0-SNAPSHOT-windows-x86_64\\\\data\\\\elastic-agent-852d47\\\\logs\\\\elastic-agent-20240820.ndjson\"},\"source\":\"filestream-default\",\"offset\":24477},\"log.logger\":\"add_cloud_metadata\",\"message\":\"add_cloud_metadata: hosting provider type detected as gcp, metadata={\\\"cloud\\\":{\\\"account\\\":{\\\"id\\\":\\\"elastic-platform-ingest\\\"},\\\"availability_zone\\\":\\\"us-central1-f\\\",\\\"instance\\\":{\\\"id\\\":\\\"3699362919774507953\\\",\\\"name\\\":\\\"ogc-windows-amd64-2022-default-2401\\\"},\\\"machine\\\":{\\\"type\\\":\\\"e2-standard-4\\\"},\\\"project\\\":{\\\"id\\\":\\\"elastic-platform-ingest\\\"},\\\"provider\\\":\\\"gcp\\\",\\\"region\\\":\\\"us-central1\\\",\\\"service\\\":{\\\"name\\\":\\\"GCE\\\"}}}\",\"component\":{\"binary\":\"filebeat\",\"dataset\":\"elastic_agent.filebeat\",\"id\":\"filestream-default\",\"type\":\"filestream\"},\"log.origin\":{\"function\":\"github.com/elastic/beats/v7/libbeat/processors/add_cloud_metadata.(*addCloudMetadata).init.func1\",\"file.line\":104,\"file.name\":\"add_cloud_metadata/add_cloud_metadata.go\"},\"elastic_agent\":{\"snapshot\":true,\"version\":\"8.16.0\",\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\"},\"host\":{\"os\":{\"build\":\"20348.2655\",\"type\":\"windows\",\"platform\":\"windows\",\"version\":\"10.0\",\"family\":\"windows\",\"name\":\"Windows Server 2022 Datacenter\",\"kernel\":\"10.0.20348.2652 (WinBuild.160101.0800)\"},\"name\":\"ogc-windows-amd64-2022-default-2401\",\"id\":\"18f188f4-7d58-410c-9916-4f00c115ef19\",\"ip\":[\"fe80::3a4:458e:f926:5a45\",\"10.128.0.252\"],\"mac\":[\"42-01-0A-80-00-FC\"],\"hostname\":\"ogc-windows-amd64-2022-default-2401\",\"architecture\":\"x86_64\"},\"cloud\":{\"service\":{\"name\":\"GCE\"},\"instance\":{\"id\":\"3699362919774507953\",\"name\":\"ogc-windows-amd64-2022-default-2401\"},\"machine\":{\"type\":\"e2-standard-4\"},\"availability_zone\":\"us-central1-f\",\"region\":\"us-central1\",\"project\":{\"id\":\"elastic-platform-ingest\"},\"account\":{\"id\":\"elastic-platform-ingest\"},\"provider\":\"gcp\"},\"service.name\":\"filebeat\",\"input\":{\"type\":\"filestream\"},\"ecs\":{\"version\":\"8.0.0\"},\"log.level\":\"info\",\"data_stream\":{\"namespace\":\"default\",\"type\":\"logs\",\"dataset\":\"elastic_agent.filebeat\"}}\n' (status=406): , dropping event!","component":{"binary":"filebeat","dataset":"elastic_agent.filebeat","id":"filestream-monitoring","type":"filestream"},"log":{"source":"filestream-monitoring"},"log.logger":"elasticsearch","log.origin":{"file.line":517,"file.name":"elasticsearch/client.go","function":"github.com/elastic/beats/v7/libbeat/outputs/elasticsearch.(*Client).applyItemStatus"},"service.name":"filebeat","log.type":"event","ecs.version":"1.6.0","ecs.version":"1.6.0"}
        {"log.level":"warn","@timestamp":"2024-08-20T19:43:40.498Z","message":"Cannot index event '{\"@timestamp\":\"2024-08-20T19:43:28.613Z\",\"agent\":{\"type\":\"filebeat\",\"version\":\"8.16.0\",\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"ephemeral_id\":\"e6ededbb-f7f4-4511-94cd-52759f9af405\",\"name\":\"ogc-windows-amd64-2022-default-2401\"},\"cloud\":{\"provider\":\"gcp\",\"service\":{\"name\":\"GCE\"},\"instance\":{\"id\":\"3699362919774507953\",\"name\":\"ogc-windows-amd64-2022-default-2401\"},\"machine\":{\"type\":\"e2-standard-4\"},\"availability_zone\":\"us-central1-f\",\"region\":\"us-central1\",\"project\":{\"id\":\"elastic-platform-ingest\"},\"account\":{\"id\":\"elastic-platform-ingest\"}},\"log.level\":\"error\",\"message\":\"SDK 2024/08/20 19:43:28 WARN falling back to IMDSv1: operation error ec2imds: getToken, http response error StatusCode: 405, request to EC2 IMDS failed\",\"data_stream\":{\"type\":\"logs\",\"dataset\":\"elastic_agent.filebeat\",\"namespace\":\"default\"},\"event\":{\"dataset\":\"elastic_agent.filebeat\"},\"elastic_agent\":{\"snapshot\":true,\"version\":\"8.16.0\",\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\"},\"ecs\":{\"version\":\"8.0.0\"},\"host\":{\"mac\":[\"42-01-0A-80-00-FC\"],\"hostname\":\"ogc-windows-amd64-2022-default-2401\",\"architecture\":\"x86_64\",\"name\":\"ogc-windows-amd64-2022-default-2401\",\"os\":{\"build\":\"20348.2655\",\"type\":\"windows\",\"platform\":\"windows\",\"version\":\"10.0\",\"family\":\"windows\",\"name\":\"Windows Server 2022 Datacenter\",\"kernel\":\"10.0.20348.2652 (WinBuild.160101.0800)\"},\"id\":\"18f188f4-7d58-410c-9916-4f00c115ef19\",\"ip\":[\"fe80::3a4:458e:f926:5a45\",\"10.128.0.252\"]},\"log\":{\"file\":{\"idxhi\":\"589824\",\"idxlo\":\"129881\",\"vol\":\"2754062024\",\"path\":\"C:\\\\Users\\\\windows\\\\AppData\\\\Local\\\\Temp\\\\TestEventLogFile1155159046\\\\002\\\\elastic-agent-8.16.0-SNAPSHOT-windows-x86_64\\\\data\\\\elastic-agent-852d47\\\\logs\\\\elastic-agent-20240820.ndjson\"},\"source\":\"filestream-default\",\"offset\":25438},\"component\":{\"binary\":\"filebeat\",\"dataset\":\"elastic_agent.filebeat\",\"id\":\"filestream-default\",\"type\":\"filestream\"},\"input\":{\"type\":\"filestream\"}}\n' (status=406): , dropping event!","component":{"binary":"filebeat","dataset":"elastic_agent.filebeat","id":"filestream-monitoring","type":"filestream"},"log":{"source":"filestream-monitoring"},"log.logger":"elasticsearch","log.origin":{"file.line":517,"file.name":"elasticsearch/client.go","function":"github.com/elastic/beats/v7/libbeat/outputs/elasticsearch.(*Client).applyItemStatus"},"service.name":"filebeat","log.type":"event","ecs.version":"1.6.0","ecs.version":"1.6.0"}
        {"log.level":"warn","@timestamp":"2024-08-20T19:43:40.499Z","message":"Cannot index event '{\"@timestamp\":\"2024-08-20T19:43:28.620Z\",\"ecs\":{\"version\":\"8.0.0\"},\"cloud\":{\"service\":{\"name\":\"GCE\"},\"instance\":{\"id\":\"3699362919774507953\",\"name\":\"ogc-windows-amd64-2022-default-2401\"},\"machine\":{\"type\":\"e2-standard-4\"},\"availability_zone\":\"us-central1-f\",\"region\":\"us-central1\",\"project\":{\"id\":\"elastic-platform-ingest\"},\"account\":{\"id\":\"elastic-platform-ingest\"},\"provider\":\"gcp\"},\"log.level\":\"info\",\"host\":{\"hostname\":\"ogc-windows-amd64-2022-default-2401\",\"architecture\":\"x86_64\",\"os\":{\"family\":\"windows\",\"name\":\"Windows Server 2022 Datacenter\",\"kernel\":\"10.0.20348.2652 (WinBuild.160101.0800)\",\"build\":\"20348.2655\",\"type\":\"windows\",\"platform\":\"windows\",\"version\":\"10.0\"},\"name\":\"ogc-windows-amd64-2022-default-2401\",\"id\":\"18f188f4-7d58-410c-9916-4f00c115ef19\",\"ip\":[\"fe80::3a4:458e:f926:5a45\",\"10.128.0.252\"],\"mac\":[\"42-01-0A-80-00-FC\"]},\"message\":\"Output is configured through Central Management\",\"elastic_agent\":{\"snapshot\":true,\"version\":\"8.16.0\",\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\"},\"agent\":{\"type\":\"filebeat\",\"version\":\"8.16.0\",\"ephemeral_id\":\"e6ededbb-f7f4-4511-94cd-52759f9af405\",\"name\":\"ogc-windows-amd64-2022-default-2401\",\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\"},\"log\":{\"offset\":25839,\"file\":{\"idxhi\":\"589824\",\"idxlo\":\"129881\",\"vol\":\"2754062024\",\"path\":\"C:\\\\Users\\\\windows\\\\AppData\\\\Local\\\\Temp\\\\TestEventLogFile1155159046\\\\002\\\\elastic-agent-8.16.0-SNAPSHOT-windows-x86_64\\\\data\\\\elastic-agent-852d47\\\\logs\\\\elastic-agent-20240820.ndjson\"},\"source\":\"filestream-default\"},\"input\":{\"type\":\"filestream\"},\"service.name\":\"filebeat\",\"data_stream\":{\"namespace\":\"default\",\"type\":\"logs\",\"dataset\":\"elastic_agent.filebeat\"},\"event\":{\"dataset\":\"elastic_agent.filebeat\"},\"component\":{\"binary\":\"filebeat\",\"dataset\":\"elastic_agent.filebeat\",\"id\":\"filestream-default\",\"type\":\"filestream\"},\"log.origin\":{\"file.line\":378,\"file.name\":\"instance/beat.go\",\"function\":\"github.com/elastic/beats/v7/libbeat/cmd/instance.(*Beat).createBeater\"}}\n' (status=406): , dropping event!","component":{"binary":"filebeat","dataset":"elastic_agent.filebeat","id":"filestream-monitoring","type":"filestream"},"log":{"source":"filestream-monitoring"},"ecs.version":"1.6.0","log.logger":"elasticsearch","log.origin":{"file.line":517,"file.name":"elasticsearch/client.go","function":"github.com/elastic/beats/v7/libbeat/outputs/elasticsearch.(*Client).applyItemStatus"},"service.name":"filebeat","log.type":"event","ecs.version":"1.6.0"}
        {"log.level":"warn","@timestamp":"2024-08-20T19:43:40.499Z","message":"Cannot index event '{\"@timestamp\":\"2024-08-20T19:43:28.661Z\",\"log\":{\"offset\":29682,\"file\":{\"vol\":\"2754062024\",\"path\":\"C:\\\\Users\\\\windows\\\\AppData\\\\Local\\\\Temp\\\\TestEventLogFile1155159046\\\\002\\\\elastic-agent-8.16.0-SNAPSHOT-windows-x86_64\\\\data\\\\elastic-agent-852d47\\\\logs\\\\elastic-agent-20240820.ndjson\",\"idxhi\":\"589824\",\"idxlo\":\"129881\"},\"source\":\"filestream-default\"},\"log.logger\":\"publisher\",\"data_stream\":{\"dataset\":\"elastic_agent.filebeat\",\"namespace\":\"default\",\"type\":\"logs\"},\"event\":{\"dataset\":\"elastic_agent.filebeat\"},\"agent\":{\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"ephemeral_id\":\"e6ededbb-f7f4-4511-94cd-52759f9af405\",\"name\":\"ogc-windows-amd64-2022-default-2401\",\"type\":\"filebeat\",\"version\":\"8.16.0\"},\"service.name\":\"filebeat\",\"input\":{\"type\":\"filestream\"},\"log.origin\":{\"file.line\":105,\"file.name\":\"pipeline/module.go\",\"function\":\"github.com/elastic/beats/v7/libbeat/publisher/pipeline.LoadWithSettings\"},\"host\":{\"name\":\"ogc-windows-amd64-2022-default-2401\",\"hostname\":\"ogc-windows-amd64-2022-default-2401\",\"architecture\":\"x86_64\",\"os\":{\"family\":\"windows\",\"name\":\"Windows Server 2022 Datacenter\",\"kernel\":\"10.0.20348.2652 (WinBuild.160101.0800)\",\"build\":\"20348.2655\",\"type\":\"windows\",\"platform\":\"windows\",\"version\":\"10.0\"},\"id\":\"18f188f4-7d58-410c-9916-4f00c115ef19\",\"ip\":[\"fe80::3a4:458e:f926:5a45\",\"10.128.0.252\"],\"mac\":[\"42-01-0A-80-00-FC\"]},\"elastic_agent\":{\"snapshot\":true,\"version\":\"8.16.0\",\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\"},\"cloud\":{\"account\":{\"id\":\"elastic-platform-ingest\"},\"provider\":\"gcp\",\"service\":{\"name\":\"GCE\"},\"instance\":{\"id\":\"3699362919774507953\",\"name\":\"ogc-windows-amd64-2022-default-2401\"},\"machine\":{\"type\":\"e2-standard-4\"},\"availability_zone\":\"us-central1-f\",\"region\":\"us-central1\",\"project\":{\"id\":\"elastic-platform-ingest\"}},\"component\":{\"binary\":\"filebeat\",\"dataset\":\"elastic_agent.filebeat\",\"id\":\"filestream-default\",\"type\":\"filestream\"},\"message\":\"Beat name: ogc-windows-amd64-2022-default-2401\",\"ecs\":{\"version\":\"8.0.0\"},\"log.level\":\"info\"}\n' (status=406): , dropping event!","component":{"binary":"filebeat","dataset":"elastic_agent.filebeat","id":"filestream-monitoring","type":"filestream"},"log":{"source":"filestream-monitoring"},"log.logger":"elasticsearch","log.origin":{"file.line":517,"file.name":"elasticsearch/client.go","function":"github.com/elastic/beats/v7/libbeat/outputs/elasticsearch.(*Client).applyItemStatus"},"service.name":"filebeat","log.type":"event","ecs.version":"1.6.0","ecs.version":"1.6.0"}
        {"log.level":"warn","@timestamp":"2024-08-20T19:43:40.499Z","message":"Cannot index event '{\"@timestamp\":\"2024-08-20T19:43:28.662Z\",\"service.name\":\"filebeat\",\"input\":{\"type\":\"filestream\"},\"agent\":{\"ephemeral_id\":\"e6ededbb-f7f4-4511-94cd-52759f9af405\",\"name\":\"ogc-windows-amd64-2022-default-2401\",\"type\":\"filebeat\",\"version\":\"8.16.0\",\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\"},\"ecs\":{\"version\":\"8.0.0\"},\"cloud\":{\"project\":{\"id\":\"elastic-platform-ingest\"},\"account\":{\"id\":\"elastic-platform-ingest\"},\"provider\":\"gcp\",\"service\":{\"name\":\"GCE\"},\"instance\":{\"id\":\"3699362919774507953\",\"name\":\"ogc-windows-amd64-2022-default-2401\"},\"machine\":{\"type\":\"e2-standard-4\"},\"availability_zone\":\"us-central1-f\",\"region\":\"us-central1\"},\"log\":{\"offset\":30199,\"file\":{\"path\":\"C:\\\\Users\\\\windows\\\\AppData\\\\Local\\\\Temp\\\\TestEventLogFile1155159046\\\\002\\\\elastic-agent-8.16.0-SNAPSHOT-windows-x86_64\\\\data\\\\elastic-agent-852d47\\\\logs\\\\elastic-agent-20240820.ndjson\",\"idxhi\":\"589824\",\"idxlo\":\"129881\",\"vol\":\"2754062024\"},\"source\":\"filestream-default\"},\"event\":{\"dataset\":\"elastic_agent.filebeat\"},\"host\":{\"name\":\"ogc-windows-amd64-2022-default-2401\",\"hostname\":\"ogc-windows-amd64-2022-default-2401\",\"architecture\":\"x86_64\",\"os\":{\"family\":\"windows\",\"name\":\"Windows Server 2022 Datacenter\",\"kernel\":\"10.0.20348.2652 (WinBuild.160101.0800)\",\"build\":\"20348.2655\",\"type\":\"windows\",\"platform\":\"windows\",\"version\":\"10.0\"},\"id\":\"18f188f4-7d58-410c-9916-4f00c115ef19\",\"ip\":[\"fe80::3a4:458e:f926:5a45\",\"10.128.0.252\"],\"mac\":[\"42-01-0A-80-00-FC\"]},\"log.level\":\"info\",\"component\":{\"binary\":\"filebeat\",\"dataset\":\"elastic_agent.filebeat\",\"id\":\"filestream-default\",\"type\":\"filestream\"},\"message\":\"Enabled modules/filesets: \",\"log.origin\":{\"file.line\":136,\"file.name\":\"fileset/modules.go\",\"function\":\"github.com/elastic/beats/v7/filebeat/fileset.newModuleRegistry\"},\"log.logger\":\"modules\",\"data_stream\":{\"namespace\":\"default\",\"type\":\"logs\",\"dataset\":\"elastic_agent.filebeat\"},\"elastic_agent\":{\"version\":\"8.16.0\",\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"snapshot\":true}}\n' (status=406): , dropping event!","component":{"binary":"filebeat","dataset":"elastic_agent.filebeat","id":"filestream-monitoring","type":"filestream"},"log":{"source":"filestream-monitoring"},"log.type":"event","ecs.version":"1.6.0","log.logger":"elasticsearch","log.origin":{"file.line":517,"file.name":"elasticsearch/client.go","function":"github.com/elastic/beats/v7/libbeat/outputs/elasticsearch.(*Client).applyItemStatus"},"service.name":"filebeat","ecs.version":"1.6.0"}
        {"log.level":"warn","@timestamp":"2024-08-20T19:43:40.499Z","message":"Cannot index event '{\"@timestamp\":\"2024-08-20T19:43:28.662Z\",\"log\":{\"offset\":30685,\"file\":{\"vol\":\"2754062024\",\"path\":\"C:\\\\Users\\\\windows\\\\AppData\\\\Local\\\\Temp\\\\TestEventLogFile1155159046\\\\002\\\\elastic-agent-8.16.0-SNAPSHOT-windows-x86_64\\\\data\\\\elastic-agent-852d47\\\\logs\\\\elastic-agent-20240820.ndjson\",\"idxhi\":\"589824\",\"idxlo\":\"129881\"},\"source\":\"filestream-default\"},\"elastic_agent\":{\"snapshot\":true,\"version\":\"8.16.0\",\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\"},\"host\":{\"hostname\":\"ogc-windows-amd64-2022-default-2401\",\"architecture\":\"x86_64\",\"os\":{\"build\":\"20348.2655\",\"type\":\"windows\",\"platform\":\"windows\",\"version\":\"10.0\",\"family\":\"windows\",\"name\":\"Windows Server 2022 Datacenter\",\"kernel\":\"10.0.20348.2652 (WinBuild.160101.0800)\"},\"id\":\"18f188f4-7d58-410c-9916-4f00c115ef19\",\"ip\":[\"fe80::3a4:458e:f926:5a45\",\"10.128.0.252\"],\"mac\":[\"42-01-0A-80-00-FC\"],\"name\":\"ogc-windows-amd64-2022-default-2401\"},\"log.origin\":{\"file.line\":532,\"file.name\":\"instance/beat.go\",\"function\":\"github.com/elastic/beats/v7/libbeat/cmd/instance.(*Beat).launch\"},\"component\":{\"binary\":\"filebeat\",\"dataset\":\"elastic_agent.filebeat\",\"id\":\"filestream-default\",\"type\":\"filestream\"},\"input\":{\"type\":\"filestream\"},\"event\":{\"dataset\":\"elastic_agent.filebeat\"},\"agent\":{\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"version\":\"8.16.0\",\"ephemeral_id\":\"e6ededbb-f7f4-4511-94cd-52759f9af405\",\"name\":\"ogc-windows-amd64-2022-default-2401\",\"type\":\"filebeat\"},\"log.level\":\"info\",\"message\":\"filebeat start running.\",\"service.name\":\"filebeat\",\"data_stream\":{\"dataset\":\"elastic_agent.filebeat\",\"namespace\":\"default\",\"type\":\"logs\"},\"cloud\":{\"account\":{\"id\":\"elastic-platform-ingest\"},\"provider\":\"gcp\",\"service\":{\"name\":\"GCE\"},\"instance\":{\"id\":\"3699362919774507953\",\"name\":\"ogc-windows-amd64-2022-default-2401\"},\"machine\":{\"type\":\"e2-standard-4\"},\"availability_zone\":\"us-central1-f\",\"region\":\"us-central1\",\"project\":{\"id\":\"elastic-platform-ingest\"}},\"ecs\":{\"version\":\"8.0.0\"}}\n' (status=406): , dropping event!","component":{"binary":"filebeat","dataset":"elastic_agent.filebeat","id":"filestream-monitoring","type":"filestream"},"log":{"source":"filestream-monitoring"},"log.origin":{"file.line":517,"file.name":"elasticsearch/client.go","function":"github.com/elastic/beats/v7/libbeat/outputs/elasticsearch.(*Client).applyItemStatus"},"service.name":"filebeat","log.type":"event","ecs.version":"1.6.0","log.logger":"elasticsearch","ecs.version":"1.6.0"}
        {"log.level":"warn","@timestamp":"2024-08-20T19:43:40.499Z","message":"Cannot index event '{\"@timestamp\":\"2024-08-20T19:43:28.663Z\",\"event\":{\"dataset\":\"elastic_agent.filebeat\"},\"elastic_agent\":{\"snapshot\":true,\"version\":\"8.16.0\",\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\"},\"cloud\":{\"machine\":{\"type\":\"e2-standard-4\"},\"availability_zone\":\"us-central1-f\",\"region\":\"us-central1\",\"project\":{\"id\":\"elastic-platform-ingest\"},\"account\":{\"id\":\"elastic-platform-ingest\"},\"provider\":\"gcp\",\"service\":{\"name\":\"GCE\"},\"instance\":{\"id\":\"3699362919774507953\",\"name\":\"ogc-windows-amd64-2022-default-2401\"}},\"log.level\":\"info\",\"message\":\"Starting metrics logging every 30s\",\"log.origin\":{\"function\":\"github.com/elastic/beats/v7/libbeat/monitoring/report/log.(*reporter).snapshotLoop\",\"file.line\":150,\"file.name\":\"log/log.go\"},\"ecs\":{\"version\":\"8.0.0\"},\"service.name\":\"filebeat\",\"input\":{\"type\":\"filestream\"},\"agent\":{\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"name\":\"ogc-windows-amd64-2022-default-2401\",\"type\":\"filebeat\",\"version\":\"8.16.0\",\"ephemeral_id\":\"e6ededbb-f7f4-4511-94cd-52759f9af405\"},\"component\":{\"binary\":\"filebeat\",\"dataset\":\"elastic_agent.filebeat\",\"id\":\"filestream-default\",\"type\":\"filestream\"},\"log\":{\"file\":{\"vol\":\"2754062024\",\"path\":\"C:\\\\Users\\\\windows\\\\AppData\\\\Local\\\\Temp\\\\TestEventLogFile1155159046\\\\002\\\\elastic-agent-8.16.0-SNAPSHOT-windows-x86_64\\\\data\\\\elastic-agent-852d47\\\\logs\\\\elastic-agent-20240820.ndjson\",\"idxhi\":\"589824\",\"idxlo\":\"129881\"},\"source\":\"filestream-default\",\"offset\":31144},\"data_stream\":{\"namespace\":\"default\",\"type\":\"logs\",\"dataset\":\"elastic_agent.filebeat\"},\"log.logger\":\"monitoring\",\"host\":{\"os\":{\"platform\":\"windows\",\"version\":\"10.0\",\"family\":\"windows\",\"name\":\"Windows Server 2022 Datacenter\",\"kernel\":\"10.0.20348.2652 (WinBuild.160101.0800)\",\"build\":\"20348.2655\",\"type\":\"windows\"},\"id\":\"18f188f4-7d58-410c-9916-4f00c115ef19\",\"name\":\"ogc-windows-amd64-2022-default-2401\",\"ip\":[\"fe80::3a4:458e:f926:5a45\",\"10.128.0.252\"],\"mac\":[\"42-01-0A-80-00-FC\"],\"hostname\":\"ogc-windows-amd64-2022-default-2401\",\"architecture\":\"x86_64\"}}\n' (status=406): , dropping event!","component":{"binary":"filebeat","dataset":"elastic_agent.filebeat","id":"filestream-monitoring","type":"filestream"},"log":{"source":"filestream-monitoring"},"log.logger":"elasticsearch","log.origin":{"file.line":517,"file.name":"elasticsearch/client.go","function":"github.com/elastic/beats/v7/libbeat/outputs/elasticsearch.(*Client).applyItemStatus"},"service.name":"filebeat","log.type":"event","ecs.version":"1.6.0","ecs.version":"1.6.0"}
        {"log.level":"warn","@timestamp":"2024-08-20T19:43:40.499Z","message":"Cannot index event '{\"@timestamp\":\"2024-08-20T19:43:28.667Z\",\"message\":\"Attempted to register Windows service handlers, but this is not a service. No action necessary\",\"ecs\":{\"version\":\"8.0.0\"},\"cloud\":{\"availability_zone\":\"us-central1-f\",\"region\":\"us-central1\",\"project\":{\"id\":\"elastic-platform-ingest\"},\"account\":{\"id\":\"elastic-platform-ingest\"},\"provider\":\"gcp\",\"service\":{\"name\":\"GCE\"},\"instance\":{\"id\":\"3699362919774507953\",\"name\":\"ogc-windows-amd64-2022-default-2401\"},\"machine\":{\"type\":\"e2-standard-4\"}},\"log\":{\"file\":{\"path\":\"C:\\\\Users\\\\windows\\\\AppData\\\\Local\\\\Temp\\\\TestEventLogFile1155159046\\\\002\\\\elastic-agent-8.16.0-SNAPSHOT-windows-x86_64\\\\data\\\\elastic-agent-852d47\\\\logs\\\\elastic-agent-20240820.ndjson\",\"idxhi\":\"589824\",\"idxlo\":\"129881\",\"vol\":\"2754062024\"},\"source\":\"filestream-default\",\"offset\":31653},\"log.level\":\"info\",\"data_stream\":{\"namespace\":\"default\",\"type\":\"logs\",\"dataset\":\"elastic_agent.filebeat\"},\"event\":{\"dataset\":\"elastic_agent.filebeat\"},\"agent\":{\"type\":\"filebeat\",\"version\":\"8.16.0\",\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"ephemeral_id\":\"e6ededbb-f7f4-4511-94cd-52759f9af405\",\"name\":\"ogc-windows-amd64-2022-default-2401\"},\"component\":{\"binary\":\"filebeat\",\"dataset\":\"elastic_agent.filebeat\",\"id\":\"filestream-default\",\"type\":\"filestream\"},\"elastic_agent\":{\"version\":\"8.16.0\",\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"snapshot\":true},\"log.origin\":{\"file.line\":163,\"file.name\":\"service/service_windows.go\",\"function\":\"github.com/elastic/elastic-agent-libs/service.ProcessWindowsControlEvents\"},\"service.name\":\"filebeat\",\"input\":{\"type\":\"filestream\"},\"host\":{\"architecture\":\"x86_64\",\"os\":{\"build\":\"20348.2655\",\"type\":\"windows\",\"platform\":\"windows\",\"version\":\"10.0\",\"family\":\"windows\",\"name\":\"Windows Server 2022 Datacenter\",\"kernel\":\"10.0.20348.2652 (WinBuild.160101.0800)\"},\"id\":\"18f188f4-7d58-410c-9916-4f00c115ef19\",\"ip\":[\"fe80::3a4:458e:f926:5a45\",\"10.128.0.252\"],\"mac\":[\"42-01-0A-80-00-FC\"],\"name\":\"ogc-windows-amd64-2022-default-2401\",\"hostname\":\"ogc-windows-amd64-2022-default-2401\"}}\n' (status=406): , dropping event!","component":{"binary":"filebeat","dataset":"elastic_agent.filebeat","id":"filestream-monitoring","type":"filestream"},"log":{"source":"filestream-monitoring"},"log.logger":"elasticsearch","log.origin":{"file.line":517,"file.name":"elasticsearch/client.go","function":"github.com/elastic/beats/v7/libbeat/outputs/elasticsearch.(*Client).applyItemStatus"},"service.name":"filebeat","log.type":"event","ecs.version":"1.6.0","ecs.version":"1.6.0"}
        {"log.level":"warn","@timestamp":"2024-08-20T19:43:40.500Z","message":"Cannot index event '{\"@timestamp\":\"2024-08-20T19:43:28.688Z\",\"ecs\":{\"version\":\"8.0.0\"},\"message\":\"Finished loading transaction log file for 'C:\\\\Users\\\\windows\\\\AppData\\\\Local\\\\Temp\\\\TestEventLogFile1155159046\\\\002\\\\elastic-agent-8.16.0-SNAPSHOT-windows-x86_64\\\\data\\\\elastic-agent-852d47\\\\run\\\\filestream-default\\\\registry\\\\filebeat'. Active transaction id=0\",\"data_stream\":{\"type\":\"logs\",\"dataset\":\"elastic_agent.filebeat\",\"namespace\":\"default\"},\"host\":{\"architecture\":\"x86_64\",\"name\":\"ogc-windows-amd64-2022-default-2401\",\"os\":{\"build\":\"20348.2655\",\"type\":\"windows\",\"platform\":\"windows\",\"version\":\"10.0\",\"family\":\"windows\",\"name\":\"Windows Server 2022 Datacenter\",\"kernel\":\"10.0.20348.2652 (WinBuild.160101.0800)\"},\"id\":\"18f188f4-7d58-410c-9916-4f00c115ef19\",\"ip\":[\"fe80::3a4:458e:f926:5a45\",\"10.128.0.252\"],\"mac\":[\"42-01-0A-80-00-FC\"],\"hostname\":\"ogc-windows-amd64-2022-default-2401\"},\"service.name\":\"filebeat\",\"log.origin\":{\"function\":\"github.com/elastic/beats/v7/libbeat/statestore/backend/memlog.openStore\",\"file.line\":134,\"file.name\":\"memlog/store.go\"},\"input\":{\"type\":\"filestream\"},\"event\":{\"dataset\":\"elastic_agent.filebeat\"},\"agent\":{\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"version\":\"8.16.0\",\"ephemeral_id\":\"e6ededbb-f7f4-4511-94cd-52759f9af405\",\"name\":\"ogc-windows-amd64-2022-default-2401\",\"type\":\"filebeat\"},\"component\":{\"binary\":\"filebeat\",\"dataset\":\"elastic_agent.filebeat\",\"id\":\"filestream-default\",\"type\":\"filestream\"},\"log.level\":\"info\",\"elastic_agent\":{\"snapshot\":true,\"version\":\"8.16.0\",\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\"},\"cloud\":{\"service\":{\"name\":\"GCE\"},\"instance\":{\"name\":\"ogc-windows-amd64-2022-default-2401\",\"id\":\"3699362919774507953\"},\"machine\":{\"type\":\"e2-standard-4\"},\"availability_zone\":\"us-central1-f\",\"region\":\"us-central1\",\"project\":{\"id\":\"elastic-platform-ingest\"},\"account\":{\"id\":\"elastic-platform-ingest\"},\"provider\":\"gcp\"},\"log\":{\"file\":{\"path\":\"C:\\\\Users\\\\windows\\\\AppData\\\\Local\\\\Temp\\\\TestEventLogFile1155159046\\\\002\\\\elastic-agent-8.16.0-SNAPSHOT-windows-x86_64\\\\data\\\\elastic-agent-852d47\\\\logs\\\\elastic-agent-20240820.ndjson\",\"idxhi\":\"589824\",\"idxlo\":\"129881\",\"vol\":\"2754062024\"},\"source\":\"filestream-default\",\"offset\":32203}}\n' (status=406): , dropping event!","component":{"binary":"filebeat","dataset":"elastic_agent.filebeat","id":"filestream-monitoring","type":"filestream"},"log":{"source":"filestream-monitoring"},"ecs.version":"1.6.0","log.logger":"elasticsearch","log.origin":{"file.line":517,"file.name":"elasticsearch/client.go","function":"github.com/elastic/beats/v7/libbeat/outputs/elasticsearch.(*Client).applyItemStatus"},"service.name":"filebeat","log.type":"event","ecs.version":"1.6.0"}
        {"log.level":"warn","@timestamp":"2024-08-20T19:43:40.500Z","message":"Cannot index event '{\"@timestamp\":\"2024-08-20T19:43:28.689Z\",\"data_stream\":{\"namespace\":\"default\",\"type\":\"logs\",\"dataset\":\"elastic_agent.filebeat\"},\"log.origin\":{\"file.name\":\"beater/filebeat.go\",\"function\":\"github.com/elastic/beats/v7/filebeat/beater.(*Filebeat).Run\",\"file.line\":331},\"log.level\":\"warn\",\"message\":\"Filebeat is unable to load the ingest pipelines for the configured modules because the Elasticsearch output is not configured/enabled. If you have already loaded the ingest pipelines or are using Logstash pipelines, you can ignore this warning.\",\"log\":{\"offset\":32907,\"file\":{\"path\":\"C:\\\\Users\\\\windows\\\\AppData\\\\Local\\\\Temp\\\\TestEventLogFile1155159046\\\\002\\\\elastic-agent-8.16.0-SNAPSHOT-windows-x86_64\\\\data\\\\elastic-agent-852d47\\\\logs\\\\elastic-agent-20240820.ndjson\",\"idxhi\":\"589824\",\"idxlo\":\"129881\",\"vol\":\"2754062024\"},\"source\":\"filestream-default\"},\"component\":{\"binary\":\"filebeat\",\"dataset\":\"elastic_agent.filebeat\",\"id\":\"filestream-default\",\"type\":\"filestream\"},\"service.name\":\"filebeat\",\"ecs\":{\"version\":\"8.0.0\"},\"host\":{\"ip\":[\"fe80::3a4:458e:f926:5a45\",\"10.128.0.252\"],\"mac\":[\"42-01-0A-80-00-FC\"],\"hostname\":\"ogc-windows-amd64-2022-default-2401\",\"name\":\"ogc-windows-amd64-2022-default-2401\",\"architecture\":\"x86_64\",\"os\":{\"kernel\":\"10.0.20348.2652 (WinBuild.160101.0800)\",\"build\":\"20348.2655\",\"type\":\"windows\",\"platform\":\"windows\",\"version\":\"10.0\",\"family\":\"windows\",\"name\":\"Windows Server 2022 Datacenter\"},\"id\":\"18f188f4-7d58-410c-9916-4f00c115ef19\"},\"elastic_agent\":{\"version\":\"8.16.0\",\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"snapshot\":true},\"input\":{\"type\":\"filestream\"},\"event\":{\"dataset\":\"elastic_agent.filebeat\"},\"agent\":{\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"version\":\"8.16.0\",\"ephemeral_id\":\"e6ededbb-f7f4-4511-94cd-52759f9af405\",\"name\":\"ogc-windows-amd64-2022-default-2401\",\"type\":\"filebeat\"},\"cloud\":{\"project\":{\"id\":\"elastic-platform-ingest\"},\"account\":{\"id\":\"elastic-platform-ingest\"},\"provider\":\"gcp\",\"service\":{\"name\":\"GCE\"},\"instance\":{\"id\":\"3699362919774507953\",\"name\":\"ogc-windows-amd64-2022-default-2401\"},\"machine\":{\"type\":\"e2-standard-4\"},\"availability_zone\":\"us-central1-f\",\"region\":\"us-central1\"}}\n' (status=406): , dropping event!","component":{"binary":"filebeat","dataset":"elastic_agent.filebeat","id":"filestream-monitoring","type":"filestream"},"log":{"source":"filestream-monitoring"},"log.origin":{"file.line":517,"file.name":"elasticsearch/client.go","function":"github.com/elastic/beats/v7/libbeat/outputs/elasticsearch.(*Client).applyItemStatus"},"service.name":"filebeat","log.type":"event","ecs.version":"1.6.0","log.logger":"elasticsearch","ecs.version":"1.6.0"}
        {"log.level":"warn","@timestamp":"2024-08-20T19:43:40.500Z","message":"Cannot index event '{\"@timestamp\":\"2024-08-20T19:43:28.691Z\",\"log.level\":\"info\",\"log.origin\":{\"file.line\":107,\"file.name\":\"registrar/registrar.go\",\"function\":\"github.com/elastic/beats/v7/filebeat/registrar.(*Registrar).loadStates\"},\"input\":{\"type\":\"filestream\"},\"event\":{\"dataset\":\"elastic_agent.filebeat\"},\"elastic_agent\":{\"snapshot\":true,\"version\":\"8.16.0\",\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\"},\"service.name\":\"filebeat\",\"cloud\":{\"service\":{\"name\":\"GCE\"},\"instance\":{\"id\":\"3699362919774507953\",\"name\":\"ogc-windows-amd64-2022-default-2401\"},\"machine\":{\"type\":\"e2-standard-4\"},\"availability_zone\":\"us-central1-f\",\"region\":\"us-central1\",\"project\":{\"id\":\"elastic-platform-ingest\"},\"account\":{\"id\":\"elastic-platform-ingest\"},\"provider\":\"gcp\"},\"ecs\":{\"version\":\"8.0.0\"},\"message\":\"States Loaded from registrar: 0\",\"data_stream\":{\"namespace\":\"default\",\"type\":\"logs\",\"dataset\":\"elastic_agent.filebeat\"},\"component\":{\"binary\":\"filebeat\",\"dataset\":\"elastic_agent.filebeat\",\"id\":\"filestream-default\",\"type\":\"filestream\"},\"log.logger\":\"registrar\",\"agent\":{\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"name\":\"ogc-windows-amd64-2022-default-2401\",\"type\":\"filebeat\",\"version\":\"8.16.0\",\"ephemeral_id\":\"e6ededbb-f7f4-4511-94cd-52759f9af405\"},\"host\":{\"hostname\":\"ogc-windows-amd64-2022-default-2401\",\"architecture\":\"x86_64\",\"os\":{\"type\":\"windows\",\"platform\":\"windows\",\"version\":\"10.0\",\"family\":\"windows\",\"name\":\"Windows Server 2022 Datacenter\",\"kernel\":\"10.0.20348.2652 (WinBuild.160101.0800)\",\"build\":\"20348.2655\"},\"id\":\"18f188f4-7d58-410c-9916-4f00c115ef19\",\"ip\":[\"fe80::3a4:458e:f926:5a45\",\"10.128.0.252\"],\"mac\":[\"42-01-0A-80-00-FC\"],\"name\":\"ogc-windows-amd64-2022-default-2401\"},\"log\":{\"source\":\"filestream-default\",\"offset\":33585,\"file\":{\"idxhi\":\"589824\",\"idxlo\":\"129881\",\"vol\":\"2754062024\",\"path\":\"C:\\\\Users\\\\windows\\\\AppData\\\\Local\\\\Temp\\\\TestEventLogFile1155159046\\\\002\\\\elastic-agent-8.16.0-SNAPSHOT-windows-x86_64\\\\data\\\\elastic-agent-852d47\\\\logs\\\\elastic-agent-20240820.ndjson\"}}}\n' (status=406): , dropping event!","component":{"binary":"filebeat","dataset":"elastic_agent.filebeat","id":"filestream-monitoring","type":"filestream"},"log":{"source":"filestream-monitoring"},"log.type":"event","ecs.version":"1.6.0","log.logger":"elasticsearch","log.origin":{"file.line":517,"file.name":"elasticsearch/client.go","function":"github.com/elastic/beats/v7/libbeat/outputs/elasticsearch.(*Client).applyItemStatus"},"service.name":"filebeat","ecs.version":"1.6.0"}
        {"log.level":"warn","@timestamp":"2024-08-20T19:43:40.500Z","message":"Cannot index event '{\"@timestamp\":\"2024-08-20T19:43:28.691Z\",\"ecs\":{\"version\":\"8.0.0\"},\"service.name\":\"filebeat\",\"message\":\"Loading Inputs: 0\",\"agent\":{\"name\":\"ogc-windows-amd64-2022-default-2401\",\"type\":\"filebeat\",\"version\":\"8.16.0\",\"ephemeral_id\":\"e6ededbb-f7f4-4511-94cd-52759f9af405\",\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\"},\"cloud\":{\"instance\":{\"id\":\"3699362919774507953\",\"name\":\"ogc-windows-amd64-2022-default-2401\"},\"machine\":{\"type\":\"e2-standard-4\"},\"availability_zone\":\"us-central1-f\",\"region\":\"us-central1\",\"project\":{\"id\":\"elastic-platform-ingest\"},\"account\":{\"id\":\"elastic-platform-ingest\"},\"provider\":\"gcp\",\"service\":{\"name\":\"GCE\"}},\"log.logger\":\"crawler\",\"data_stream\":{\"namespace\":\"default\",\"type\":\"logs\",\"dataset\":\"elastic_agent.filebeat\"},\"event\":{\"dataset\":\"elastic_agent.filebeat\"},\"elastic_agent\":{\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"snapshot\":true,\"version\":\"8.16.0\"},\"log.origin\":{\"function\":\"github.com/elastic/beats/v7/filebeat/beater.(*crawler).Start\",\"file.line\":71,\"file.name\":\"beater/crawler.go\"},\"log.level\":\"info\",\"log\":{\"source\":\"filestream-default\",\"offset\":34090,\"file\":{\"idxlo\":\"129881\",\"vol\":\"2754062024\",\"path\":\"C:\\\\Users\\\\windows\\\\AppData\\\\Local\\\\Temp\\\\TestEventLogFile1155159046\\\\002\\\\elastic-agent-8.16.0-SNAPSHOT-windows-x86_64\\\\data\\\\elastic-agent-852d47\\\\logs\\\\elastic-agent-20240820.ndjson\",\"idxhi\":\"589824\"}},\"component\":{\"id\":\"filestream-default\",\"type\":\"filestream\",\"binary\":\"filebeat\",\"dataset\":\"elastic_agent.filebeat\"},\"input\":{\"type\":\"filestream\"},\"host\":{\"name\":\"ogc-windows-amd64-2022-default-2401\",\"hostname\":\"ogc-windows-amd64-2022-default-2401\",\"architecture\":\"x86_64\",\"os\":{\"family\":\"windows\",\"name\":\"Windows Server 2022 Datacenter\",\"kernel\":\"10.0.20348.2652 (WinBuild.160101.0800)\",\"build\":\"20348.2655\",\"type\":\"windows\",\"platform\":\"windows\",\"version\":\"10.0\"},\"id\":\"18f188f4-7d58-410c-9916-4f00c115ef19\",\"ip\":[\"fe80::3a4:458e:f926:5a45\",\"10.128.0.252\"],\"mac\":[\"42-01-0A-80-00-FC\"]}}\n' (status=406): , dropping event!","component":{"binary":"filebeat","dataset":"elastic_agent.filebeat","id":"filestream-monitoring","type":"filestream"},"log":{"source":"filestream-monitoring"},"log.origin":{"file.line":517,"file.name":"elasticsearch/client.go","function":"github.com/elastic/beats/v7/libbeat/outputs/elasticsearch.(*Client).applyItemStatus"},"service.name":"filebeat","log.type":"event","ecs.version":"1.6.0","log.logger":"elasticsearch","ecs.version":"1.6.0"}
        {"log.level":"warn","@timestamp":"2024-08-20T19:43:40.501Z","message":"Cannot index event '{\"@timestamp\":\"2024-08-20T19:43:28.691Z\",\"service.name\":\"filebeat\",\"component\":{\"binary\":\"filebeat\",\"dataset\":\"elastic_agent.filebeat\",\"id\":\"filestream-default\",\"type\":\"filestream\"},\"log.logger\":\"crawler\",\"elastic_agent\":{\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"snapshot\":true,\"version\":\"8.16.0\"},\"agent\":{\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"name\":\"ogc-windows-amd64-2022-default-2401\",\"type\":\"filebeat\",\"version\":\"8.16.0\",\"ephemeral_id\":\"e6ededbb-f7f4-4511-94cd-52759f9af405\"},\"message\":\"Loading and starting Inputs completed. Enabled inputs: 0\",\"log.origin\":{\"file.line\":106,\"file.name\":\"beater/crawler.go\",\"function\":\"github.com/elastic/beats/v7/filebeat/beater.(*crawler).Start\"},\"data_stream\":{\"type\":\"logs\",\"dataset\":\"elastic_agent.filebeat\",\"namespace\":\"default\"},\"ecs\":{\"version\":\"8.0.0\"},\"cloud\":{\"project\":{\"id\":\"elastic-platform-ingest\"},\"account\":{\"id\":\"elastic-platform-ingest\"},\"provider\":\"gcp\",\"service\":{\"name\":\"GCE\"},\"instance\":{\"id\":\"3699362919774507953\",\"name\":\"ogc-windows-amd64-2022-default-2401\"},\"machine\":{\"type\":\"e2-standard-4\"},\"availability_zone\":\"us-central1-f\",\"region\":\"us-central1\"},\"log.level\":\"info\",\"input\":{\"type\":\"filestream\"},\"event\":{\"dataset\":\"elastic_agent.filebeat\"},\"host\":{\"id\":\"18f188f4-7d58-410c-9916-4f00c115ef19\",\"ip\":[\"fe80::3a4:458e:f926:5a45\",\"10.128.0.252\"],\"mac\":[\"42-01-0A-80-00-FC\"],\"hostname\":\"ogc-windows-amd64-2022-default-2401\",\"name\":\"ogc-windows-amd64-2022-default-2401\",\"architecture\":\"x86_64\",\"os\":{\"platform\":\"windows\",\"version\":\"10.0\",\"family\":\"windows\",\"name\":\"Windows Server 2022 Datacenter\",\"kernel\":\"10.0.20348.2652 (WinBuild.160101.0800)\",\"build\":\"20348.2655\",\"type\":\"windows\"}},\"log\":{\"offset\":34563,\"file\":{\"path\":\"C:\\\\Users\\\\windows\\\\AppData\\\\Local\\\\Temp\\\\TestEventLogFile1155159046\\\\002\\\\elastic-agent-8.16.0-SNAPSHOT-windows-x86_64\\\\data\\\\elastic-agent-852d47\\\\logs\\\\elastic-agent-20240820.ndjson\",\"idxhi\":\"589824\",\"idxlo\":\"129881\",\"vol\":\"2754062024\"},\"source\":\"filestream-default\"}}\n' (status=406): , dropping event!","component":{"binary":"filebeat","dataset":"elastic_agent.filebeat","id":"filestream-monitoring","type":"filestream"},"log":{"source":"filestream-monitoring"},"log.logger":"elasticsearch","log.origin":{"file.line":517,"file.name":"elasticsearch/client.go","function":"github.com/elastic/beats/v7/libbeat/outputs/elasticsearch.(*Client).applyItemStatus"},"service.name":"filebeat","log.type":"event","ecs.version":"1.6.0","ecs.version":"1.6.0"}
        {"log.level":"warn","@timestamp":"2024-08-20T19:43:40.501Z","message":"Cannot index event '{\"@timestamp\":\"2024-08-20T19:43:28.734Z\",\"input\":{\"type\":\"filestream\"},\"agent\":{\"ephemeral_id\":\"e6ededbb-f7f4-4511-94cd-52759f9af405\",\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"name\":\"ogc-windows-amd64-2022-default-2401\",\"type\":\"filebeat\",\"version\":\"8.16.0\"},\"host\":{\"hostname\":\"ogc-windows-amd64-2022-default-2401\",\"architecture\":\"x86_64\",\"os\":{\"platform\":\"windows\",\"version\":\"10.0\",\"family\":\"windows\",\"name\":\"Windows Server 2022 Datacenter\",\"kernel\":\"10.0.20348.2652 (WinBuild.160101.0800)\",\"build\":\"20348.2655\",\"type\":\"windows\"},\"name\":\"ogc-windows-amd64-2022-default-2401\",\"id\":\"18f188f4-7d58-410c-9916-4f00c115ef19\",\"ip\":[\"fe80::3a4:458e:f926:5a45\",\"10.128.0.252\"],\"mac\":[\"42-01-0A-80-00-FC\"]},\"cloud\":{\"provider\":\"gcp\",\"service\":{\"name\":\"GCE\"},\"instance\":{\"name\":\"ogc-windows-amd64-2022-default-2401\",\"id\":\"3699362919774507953\"},\"machine\":{\"type\":\"e2-standard-4\"},\"availability_zone\":\"us-central1-f\",\"region\":\"us-central1\",\"project\":{\"id\":\"elastic-platform-ingest\"},\"account\":{\"id\":\"elastic-platform-ingest\"}},\"ecs\":{\"version\":\"8.0.0\"},\"log\":{\"offset\":41770,\"file\":{\"idxlo\":\"129881\",\"vol\":\"2754062024\",\"path\":\"C:\\\\Users\\\\windows\\\\AppData\\\\Local\\\\Temp\\\\TestEventLogFile1155159046\\\\002\\\\elastic-agent-8.16.0-SNAPSHOT-windows-x86_64\\\\data\\\\elastic-agent-852d47\\\\logs\\\\elastic-agent-20240820.ndjson\",\"idxhi\":\"589824\"}},\"log.level\":\"info\",\"log.logger\":\"component.runtime.filestream-default\",\"log.origin\":{\"function\":\"github.com/elastic/elastic-agent/pkg/component/runtime.(*Manager).CheckinV2\",\"file.name\":\"runtime/manager.go\",\"file.line\":712},\"message\":\"control checkin v2 protocol has chunking enabled\",\"data_stream\":{\"type\":\"logs\",\"dataset\":\"elastic_agent\",\"namespace\":\"default\"},\"event\":{\"dataset\":\"elastic_agent\"},\"elastic_agent\":{\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"snapshot\":true,\"version\":\"8.16.0\"}}\n' (status=406): , dropping event!","component":{"binary":"filebeat","dataset":"elastic_agent.filebeat","id":"filestream-monitoring","type":"filestream"},"log":{"source":"filestream-monitoring"},"log.logger":"elasticsearch","log.origin":{"file.line":517,"file.name":"elasticsearch/client.go","function":"github.com/elastic/beats/v7/libbeat/outputs/elasticsearch.(*Client).applyItemStatus"},"service.name":"filebeat","log.type":"event","ecs.version":"1.6.0","ecs.version":"1.6.0"}
        {"log.level":"warn","@timestamp":"2024-08-20T19:43:40.501Z","message":"Cannot index event '{\"@timestamp\":\"2024-08-20T19:43:28.734Z\",\"log\":{\"source\":\"elastic-agent\",\"offset\":42119,\"file\":{\"path\":\"C:\\\\Users\\\\windows\\\\AppData\\\\Local\\\\Temp\\\\TestEventLogFile1155159046\\\\002\\\\elastic-agent-8.16.0-SNAPSHOT-windows-x86_64\\\\data\\\\elastic-agent-852d47\\\\logs\\\\elastic-agent-20240820.ndjson\",\"idxhi\":\"589824\",\"idxlo\":\"129881\",\"vol\":\"2754062024\"}},\"event\":{\"dataset\":\"elastic_agent\"},\"elastic_agent\":{\"snapshot\":true,\"version\":\"8.16.0\",\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\"},\"ecs\":{\"version\":\"8.0.0\"},\"host\":{\"os\":{\"family\":\"windows\",\"name\":\"Windows Server 2022 Datacenter\",\"kernel\":\"10.0.20348.2652 (WinBuild.160101.0800)\",\"build\":\"20348.2655\",\"type\":\"windows\",\"platform\":\"windows\",\"version\":\"10.0\"},\"id\":\"18f188f4-7d58-410c-9916-4f00c115ef19\",\"ip\":[\"fe80::3a4:458e:f926:5a45\",\"10.128.0.252\"],\"mac\":[\"42-01-0A-80-00-FC\"],\"name\":\"ogc-windows-amd64-2022-default-2401\",\"hostname\":\"ogc-windows-amd64-2022-default-2401\",\"architecture\":\"x86_64\"},\"log.level\":\"info\",\"log.origin\":{\"file.name\":\"coordinator/coordinator.go\",\"file.line\":645,\"function\":\"github.com/elastic/elastic-agent/internal/pkg/agent/application/coordinator.(*Coordinator).watchRuntimeComponents\"},\"message\":\"Component state changed filestream-default (STARTING->HEALTHY): Healthy: communicating with pid '4552'\",\"component\":{\"id\":\"filestream-default\",\"state\":\"HEALTHY\",\"old_state\":\"STARTING\"},\"cloud\":{\"region\":\"us-central1\",\"project\":{\"id\":\"elastic-platform-ingest\"},\"account\":{\"id\":\"elastic-platform-ingest\"},\"provider\":\"gcp\",\"service\":{\"name\":\"GCE\"},\"instance\":{\"name\":\"ogc-windows-amd64-2022-default-2401\",\"id\":\"3699362919774507953\"},\"machine\":{\"type\":\"e2-standard-4\"},\"availability_zone\":\"us-central1-f\"},\"input\":{\"type\":\"filestream\"},\"data_stream\":{\"namespace\":\"default\",\"type\":\"logs\",\"dataset\":\"elastic_agent\"},\"agent\":{\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"name\":\"ogc-windows-amd64-2022-default-2401\",\"type\":\"filebeat\",\"version\":\"8.16.0\",\"ephemeral_id\":\"e6ededbb-f7f4-4511-94cd-52759f9af405\"}}\n' (status=406): , dropping event!","component":{"binary":"filebeat","dataset":"elastic_agent.filebeat","id":"filestream-monitoring","type":"filestream"},"log":{"source":"filestream-monitoring"},"log.type":"event","ecs.version":"1.6.0","log.logger":"elasticsearch","log.origin":{"file.line":517,"file.name":"elasticsearch/client.go","function":"github.com/elastic/beats/v7/libbeat/outputs/elasticsearch.(*Client).applyItemStatus"},"service.name":"filebeat","ecs.version":"1.6.0"}
        {"log.level":"warn","@timestamp":"2024-08-20T19:43:40.501Z","message":"Cannot index event '{\"@timestamp\":\"2024-08-20T19:43:28.741Z\",\"component\":{\"binary\":\"filebeat\",\"dataset\":\"elastic_agent.filebeat\",\"id\":\"filestream-default\",\"type\":\"filestream\"},\"service.name\":\"filebeat\",\"input\":{\"type\":\"filestream\"},\"data_stream\":{\"dataset\":\"elastic_agent.filebeat\",\"namespace\":\"default\",\"type\":\"logs\"},\"elastic_agent\":{\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"snapshot\":true,\"version\":\"8.16.0\"},\"host\":{\"mac\":[\"42-01-0A-80-00-FC\"],\"hostname\":\"ogc-windows-amd64-2022-default-2401\",\"name\":\"ogc-windows-amd64-2022-default-2401\",\"architecture\":\"x86_64\",\"os\":{\"family\":\"windows\",\"name\":\"Windows Server 2022 Datacenter\",\"kernel\":\"10.0.20348.2652 (WinBuild.160101.0800)\",\"build\":\"20348.2655\",\"type\":\"windows\",\"platform\":\"windows\",\"version\":\"10.0\"},\"id\":\"18f188f4-7d58-410c-9916-4f00c115ef19\",\"ip\":[\"fe80::3a4:458e:f926:5a45\",\"10.128.0.252\"]},\"log.logger\":\"centralmgmt.V2-manager\",\"message\":\"BeatV2Manager.unitListen UnitChanged.ID(filestream-default-your-input-id), UnitChanged.Type(added), UnitChanged.Trigger(4): added/feature_change_triggered\",\"event\":{\"dataset\":\"elastic_agent.filebeat\"},\"agent\":{\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"version\":\"8.16.0\",\"ephemeral_id\":\"e6ededbb-f7f4-4511-94cd-52759f9af405\",\"name\":\"ogc-windows-amd64-2022-default-2401\",\"type\":\"filebeat\"},\"log.origin\":{\"file.line\":506,\"file.name\":\"management/managerV2.go\",\"function\":\"github.com/elastic/beats/v7/x-pack/libbeat/management.(*BeatV2Manager).unitListen\"},\"ecs\":{\"version\":\"8.0.0\"},\"cloud\":{\"project\":{\"id\":\"elastic-platform-ingest\"},\"account\":{\"id\":\"elastic-platform-ingest\"},\"provider\":\"gcp\",\"service\":{\"name\":\"GCE\"},\"instance\":{\"id\":\"3699362919774507953\",\"name\":\"ogc-windows-amd64-2022-default-2401\"},\"machine\":{\"type\":\"e2-standard-4\"},\"availability_zone\":\"us-central1-f\",\"region\":\"us-central1\"},\"log\":{\"offset\":44026,\"file\":{\"path\":\"C:\\\\Users\\\\windows\\\\AppData\\\\Local\\\\Temp\\\\TestEventLogFile1155159046\\\\002\\\\elastic-agent-8.16.0-SNAPSHOT-windows-x86_64\\\\data\\\\elastic-agent-852d47\\\\logs\\\\elastic-agent-20240820.ndjson\",\"idxhi\":\"589824\",\"idxlo\":\"129881\",\"vol\":\"2754062024\"},\"source\":\"filestream-default\"},\"log.level\":\"info\"}\n' (status=406): , dropping event!","component":{"binary":"filebeat","dataset":"elastic_agent.filebeat","id":"filestream-monitoring","type":"filestream"},"log":{"source":"filestream-monitoring"},"log.logger":"elasticsearch","log.origin":{"file.line":517,"file.name":"elasticsearch/client.go","function":"github.com/elastic/beats/v7/libbeat/outputs/elasticsearch.(*Client).applyItemStatus"},"service.name":"filebeat","log.type":"event","ecs.version":"1.6.0","ecs.version":"1.6.0"}
        {"log.level":"warn","@timestamp":"2024-08-20T19:43:40.502Z","message":"Cannot index event '{\"@timestamp\":\"2024-08-20T19:43:28.741Z\",\"log.origin\":{\"file.name\":\"management/managerV2.go\",\"function\":\"github.com/elastic/beats/v7/x-pack/libbeat/management.(*BeatV2Manager).unitListen\",\"file.line\":506},\"data_stream\":{\"namespace\":\"default\",\"type\":\"logs\",\"dataset\":\"elastic_agent.filebeat\"},\"elastic_agent\":{\"version\":\"8.16.0\",\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"snapshot\":true},\"host\":{\"os\":{\"kernel\":\"10.0.20348.2652 (WinBuild.160101.0800)\",\"build\":\"20348.2655\",\"type\":\"windows\",\"platform\":\"windows\",\"version\":\"10.0\",\"family\":\"windows\",\"name\":\"Windows Server 2022 Datacenter\"},\"id\":\"18f188f4-7d58-410c-9916-4f00c115ef19\",\"ip\":[\"fe80::3a4:458e:f926:5a45\",\"10.128.0.252\"],\"mac\":[\"42-01-0A-80-00-FC\"],\"hostname\":\"ogc-windows-amd64-2022-default-2401\",\"name\":\"ogc-windows-amd64-2022-default-2401\",\"architecture\":\"x86_64\"},\"message\":\"BeatV2Manager.unitListen UnitChanged.ID(filestream-default), UnitChanged.Type(added), UnitChanged.Trigger(4): added/feature_change_triggered\",\"log.logger\":\"centralmgmt.V2-manager\",\"log\":{\"file\":{\"idxlo\":\"129881\",\"vol\":\"2754062024\",\"path\":\"C:\\\\Users\\\\windows\\\\AppData\\\\Local\\\\Temp\\\\TestEventLogFile1155159046\\\\002\\\\elastic-agent-8.16.0-SNAPSHOT-windows-x86_64\\\\data\\\\elastic-agent-852d47\\\\logs\\\\elastic-agent-20240820.ndjson\",\"idxhi\":\"589824\"},\"source\":\"filestream-default\",\"offset\":44679},\"agent\":{\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"version\":\"8.16.0\",\"ephemeral_id\":\"e6ededbb-f7f4-4511-94cd-52759f9af405\",\"name\":\"ogc-windows-amd64-2022-default-2401\",\"type\":\"filebeat\"},\"component\":{\"type\":\"filestream\",\"binary\":\"filebeat\",\"dataset\":\"elastic_agent.filebeat\",\"id\":\"filestream-default\"},\"ecs\":{\"version\":\"8.0.0\"},\"cloud\":{\"machine\":{\"type\":\"e2-standard-4\"},\"availability_zone\":\"us-central1-f\",\"region\":\"us-central1\",\"project\":{\"id\":\"elastic-platform-ingest\"},\"account\":{\"id\":\"elastic-platform-ingest\"},\"provider\":\"gcp\",\"service\":{\"name\":\"GCE\"},\"instance\":{\"name\":\"ogc-windows-amd64-2022-default-2401\",\"id\":\"3699362919774507953\"}},\"input\":{\"type\":\"filestream\"},\"event\":{\"dataset\":\"elastic_agent.filebeat\"},\"service.name\":\"filebeat\",\"log.level\":\"info\"}\n' (status=406): , dropping event!","component":{"binary":"filebeat","dataset":"elastic_agent.filebeat","id":"filestream-monitoring","type":"filestream"},"log":{"source":"filestream-monitoring"},"service.name":"filebeat","log.type":"event","ecs.version":"1.6.0","log.logger":"elasticsearch","log.origin":{"file.line":517,"file.name":"elasticsearch/client.go","function":"github.com/elastic/beats/v7/libbeat/outputs/elasticsearch.(*Client).applyItemStatus"},"ecs.version":"1.6.0"}
        {"log.level":"warn","@timestamp":"2024-08-20T19:43:40.502Z","message":"Cannot index event '{\"@timestamp\":\"2024-08-20T19:43:29.426Z\",\"event\":{\"dataset\":\"elastic_agent\"},\"host\":{\"ip\":[\"fe80::3a4:458e:f926:5a45\",\"10.128.0.252\"],\"mac\":[\"42-01-0A-80-00-FC\"],\"hostname\":\"ogc-windows-amd64-2022-default-2401\",\"name\":\"ogc-windows-amd64-2022-default-2401\",\"architecture\":\"x86_64\",\"os\":{\"name\":\"Windows Server 2022 Datacenter\",\"kernel\":\"10.0.20348.2652 (WinBuild.160101.0800)\",\"build\":\"20348.2655\",\"type\":\"windows\",\"platform\":\"windows\",\"version\":\"10.0\",\"family\":\"windows\"},\"id\":\"18f188f4-7d58-410c-9916-4f00c115ef19\"},\"cloud\":{\"provider\":\"gcp\",\"service\":{\"name\":\"GCE\"},\"instance\":{\"name\":\"ogc-windows-amd64-2022-default-2401\",\"id\":\"3699362919774507953\"},\"machine\":{\"type\":\"e2-standard-4\"},\"availability_zone\":\"us-central1-f\",\"region\":\"us-central1\",\"project\":{\"id\":\"elastic-platform-ingest\"},\"account\":{\"id\":\"elastic-platform-ingest\"}},\"log.level\":\"info\",\"log\":{\"offset\":66622,\"file\":{\"vol\":\"2754062024\",\"path\":\"C:\\\\Users\\\\windows\\\\AppData\\\\Local\\\\Temp\\\\TestEventLogFile1155159046\\\\002\\\\elastic-agent-8.16.0-SNAPSHOT-windows-x86_64\\\\data\\\\elastic-agent-852d47\\\\logs\\\\elastic-agent-20240820.ndjson\",\"idxhi\":\"589824\",\"idxlo\":\"129881\"}},\"log.origin\":{\"function\":\"github.com/elastic/elastic-agent/pkg/component/runtime.(*Manager).CheckinV2\",\"file.name\":\"runtime/manager.go\",\"file.line\":712},\"message\":\"control checkin v2 protocol has chunking enabled\",\"ecs\":{\"version\":\"8.0.0\"},\"input\":{\"type\":\"filestream\"},\"data_stream\":{\"namespace\":\"default\",\"type\":\"logs\",\"dataset\":\"elastic_agent\"},\"elastic_agent\":{\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"snapshot\":true,\"version\":\"8.16.0\"},\"log.logger\":\"component.runtime.filestream-monitoring\",\"agent\":{\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"name\":\"ogc-windows-amd64-2022-default-2401\",\"type\":\"filebeat\",\"version\":\"8.16.0\",\"ephemeral_id\":\"e6ededbb-f7f4-4511-94cd-52759f9af405\"}}\n' (status=406): , dropping event!","component":{"binary":"filebeat","dataset":"elastic_agent.filebeat","id":"filestream-monitoring","type":"filestream"},"log":{"source":"filestream-monitoring"},"log.logger":"elasticsearch","log.origin":{"file.line":517,"file.name":"elasticsearch/client.go","function":"github.com/elastic/beats/v7/libbeat/outputs/elasticsearch.(*Client).applyItemStatus"},"service.name":"filebeat","log.type":"event","ecs.version":"1.6.0","ecs.version":"1.6.0"}
        {"log.level":"warn","@timestamp":"2024-08-20T19:43:40.502Z","message":"Cannot index event '{\"@timestamp\":\"2024-08-20T19:43:29.608Z\",\"elastic_agent\":{\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"snapshot\":true,\"version\":\"8.16.0\"},\"host\":{\"ip\":[\"fe80::3a4:458e:f926:5a45\",\"10.128.0.252\"],\"mac\":[\"42-01-0A-80-00-FC\"],\"hostname\":\"ogc-windows-amd64-2022-default-2401\",\"name\":\"ogc-windows-amd64-2022-default-2401\",\"architecture\":\"x86_64\",\"os\":{\"type\":\"windows\",\"platform\":\"windows\",\"version\":\"10.0\",\"family\":\"windows\",\"name\":\"Windows Server 2022 Datacenter\",\"kernel\":\"10.0.20348.2652 (WinBuild.160101.0800)\",\"build\":\"20348.2655\"},\"id\":\"18f188f4-7d58-410c-9916-4f00c115ef19\"},\"log.logger\":\"component.runtime.http/metrics-monitoring\",\"log.origin\":{\"function\":\"github.com/elastic/elastic-agent/pkg/component/runtime.(*Manager).CheckinV2\",\"file.name\":\"runtime/manager.go\",\"file.line\":712},\"input\":{\"type\":\"filestream\"},\"log.level\":\"info\",\"data_stream\":{\"dataset\":\"elastic_agent\",\"namespace\":\"default\",\"type\":\"logs\"},\"event\":{\"dataset\":\"elastic_agent\"},\"agent\":{\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"ephemeral_id\":\"e6ededbb-f7f4-4511-94cd-52759f9af405\",\"name\":\"ogc-windows-amd64-2022-default-2401\",\"type\":\"filebeat\",\"version\":\"8.16.0\"},\"cloud\":{\"project\":{\"id\":\"elastic-platform-ingest\"},\"account\":{\"id\":\"elastic-platform-ingest\"},\"provider\":\"gcp\",\"service\":{\"name\":\"GCE\"},\"instance\":{\"id\":\"3699362919774507953\",\"name\":\"ogc-windows-amd64-2022-default-2401\"},\"machine\":{\"type\":\"e2-standard-4\"},\"availability_zone\":\"us-central1-f\",\"region\":\"us-central1\"},\"message\":\"control checkin v2 protocol has chunking enabled\",\"ecs\":{\"version\":\"8.0.0\"},\"log\":{\"offset\":71963,\"file\":{\"path\":\"C:\\\\Users\\\\windows\\\\AppData\\\\Local\\\\Temp\\\\TestEventLogFile1155159046\\\\002\\\\elastic-agent-8.16.0-SNAPSHOT-windows-x86_64\\\\data\\\\elastic-agent-852d47\\\\logs\\\\elastic-agent-20240820.ndjson\",\"idxhi\":\"589824\",\"idxlo\":\"129881\",\"vol\":\"2754062024\"}}}\n' (status=406): , dropping event!","component":{"binary":"filebeat","dataset":"elastic_agent.filebeat","id":"filestream-monitoring","type":"filestream"},"log":{"source":"filestream-monitoring"},"service.name":"filebeat","log.type":"event","ecs.version":"1.6.0","log.logger":"elasticsearch","log.origin":{"file.line":517,"file.name":"elasticsearch/client.go","function":"github.com/elastic/beats/v7/libbeat/outputs/elasticsearch.(*Client).applyItemStatus"},"ecs.version":"1.6.0"}
        {"log.level":"warn","@timestamp":"2024-08-20T19:43:40.502Z","message":"Cannot index event '{\"@timestamp\":\"2024-08-20T19:43:29.628Z\",\"log.origin\":{\"function\":\"github.com/elastic/elastic-agent/pkg/component/runtime.(*Manager).CheckinV2\",\"file.name\":\"runtime/manager.go\",\"file.line\":712},\"agent\":{\"type\":\"filebeat\",\"version\":\"8.16.0\",\"ephemeral_id\":\"e6ededbb-f7f4-4511-94cd-52759f9af405\",\"name\":\"ogc-windows-amd64-2022-default-2401\",\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\"},\"cloud\":{\"account\":{\"id\":\"elastic-platform-ingest\"},\"provider\":\"gcp\",\"service\":{\"name\":\"GCE\"},\"instance\":{\"name\":\"ogc-windows-amd64-2022-default-2401\",\"id\":\"3699362919774507953\"},\"machine\":{\"type\":\"e2-standard-4\"},\"availability_zone\":\"us-central1-f\",\"region\":\"us-central1\",\"project\":{\"id\":\"elastic-platform-ingest\"}},\"log\":{\"offset\":74187,\"file\":{\"path\":\"C:\\\\Users\\\\windows\\\\AppData\\\\Local\\\\Temp\\\\TestEventLogFile1155159046\\\\002\\\\elastic-agent-8.16.0-SNAPSHOT-windows-x86_64\\\\data\\\\elastic-agent-852d47\\\\logs\\\\elastic-agent-20240820.ndjson\",\"idxhi\":\"589824\",\"idxlo\":\"129881\",\"vol\":\"2754062024\"}},\"log.logger\":\"component.runtime.beat/metrics-monitoring\",\"message\":\"control checkin v2 protocol has chunking enabled\",\"ecs\":{\"version\":\"8.0.0\"},\"log.level\":\"info\",\"input\":{\"type\":\"filestream\"},\"data_stream\":{\"type\":\"logs\",\"dataset\":\"elastic_agent\",\"namespace\":\"default\"},\"event\":{\"dataset\":\"elastic_agent\"},\"elastic_agent\":{\"snapshot\":true,\"version\":\"8.16.0\",\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\"},\"host\":{\"mac\":[\"42-01-0A-80-00-FC\"],\"name\":\"ogc-windows-amd64-2022-default-2401\",\"hostname\":\"ogc-windows-amd64-2022-default-2401\",\"architecture\":\"x86_64\",\"os\":{\"name\":\"Windows Server 2022 Datacenter\",\"kernel\":\"10.0.20348.2652 (WinBuild.160101.0800)\",\"build\":\"20348.2655\",\"type\":\"windows\",\"platform\":\"windows\",\"version\":\"10.0\",\"family\":\"windows\"},\"id\":\"18f188f4-7d58-410c-9916-4f00c115ef19\",\"ip\":[\"fe80::3a4:458e:f926:5a45\",\"10.128.0.252\"]}}\n' (status=406): , dropping event!","component":{"binary":"filebeat","dataset":"elastic_agent.filebeat","id":"filestream-monitoring","type":"filestream"},"log":{"source":"filestream-monitoring"},"log.logger":"elasticsearch","log.origin":{"file.line":517,"file.name":"elasticsearch/client.go","function":"github.com/elastic/beats/v7/libbeat/outputs/elasticsearch.(*Client).applyItemStatus"},"service.name":"filebeat","log.type":"event","ecs.version":"1.6.0","ecs.version":"1.6.0"}
        {"log.level":"warn","@timestamp":"2024-08-20T19:43:40.503Z","message":"Cannot index event '{\"@timestamp\":\"2024-08-20T19:43:29.746Z\",\"log.logger\":\"elasticsearch\",\"log.origin\":{\"file.line\":63,\"file.name\":\"elasticsearch/elasticsearch.go\",\"function\":\"github.com/elastic/beats/v7/libbeat/outputs/elasticsearch.makeES\"},\"log\":{\"source\":\"filestream-default\",\"offset\":76411,\"file\":{\"path\":\"C:\\\\Users\\\\windows\\\\AppData\\\\Local\\\\Temp\\\\TestEventLogFile1155159046\\\\002\\\\elastic-agent-8.16.0-SNAPSHOT-windows-x86_64\\\\data\\\\elastic-agent-852d47\\\\logs\\\\elastic-agent-20240820.ndjson\",\"idxhi\":\"589824\",\"idxlo\":\"129881\",\"vol\":\"2754062024\"}},\"ecs\":{\"version\":\"8.0.0\"},\"event\":{\"dataset\":\"elastic_agent.filebeat\"},\"service.name\":\"filebeat\",\"message\":\"Applying performance preset 'balanced': {\\n  \\\"bulk_max_size\\\": 1600,\\n  \\\"compression_level\\\": 1,\\n  \\\"idle_connection_timeout\\\": \\\"3s\\\",\\n  \\\"queue\\\": {\\n    \\\"mem\\\": {\\n      \\\"events\\\": 3200,\\n      \\\"flush\\\": {\\n        \\\"min_events\\\": 1600,\\n        \\\"timeout\\\": \\\"10s\\\"\\n      }\\n    }\\n  },\\n  \\\"worker\\\": 1\\n}\",\"agent\":{\"type\":\"filebeat\",\"version\":\"8.16.0\",\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"ephemeral_id\":\"e6ededbb-f7f4-4511-94cd-52759f9af405\",\"name\":\"ogc-windows-amd64-2022-default-2401\"},\"cloud\":{\"region\":\"us-central1\",\"project\":{\"id\":\"elastic-platform-ingest\"},\"account\":{\"id\":\"elastic-platform-ingest\"},\"provider\":\"gcp\",\"service\":{\"name\":\"GCE\"},\"instance\":{\"id\":\"3699362919774507953\",\"name\":\"ogc-windows-amd64-2022-default-2401\"},\"machine\":{\"type\":\"e2-standard-4\"},\"availability_zone\":\"us-central1-f\"},\"log.level\":\"info\",\"component\":{\"binary\":\"filebeat\",\"dataset\":\"elastic_agent.filebeat\",\"id\":\"filestream-default\",\"type\":\"filestream\"},\"input\":{\"type\":\"filestream\"},\"data_stream\":{\"namespace\":\"default\",\"type\":\"logs\",\"dataset\":\"elastic_agent.filebeat\"},\"elastic_agent\":{\"version\":\"8.16.0\",\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"snapshot\":true},\"host\":{\"mac\":[\"42-01-0A-80-00-FC\"],\"hostname\":\"ogc-windows-amd64-2022-default-2401\",\"architecture\":\"x86_64\",\"name\":\"ogc-windows-amd64-2022-default-2401\",\"os\":{\"name\":\"Windows Server 2022 Datacenter\",\"kernel\":\"10.0.20348.2652 (WinBuild.160101.0800)\",\"build\":\"20348.2655\",\"type\":\"windows\",\"platform\":\"windows\",\"version\":\"10.0\",\"family\":\"windows\"},\"id\":\"18f188f4-7d58-410c-9916-4f00c115ef19\",\"ip\":[\"fe80::3a4:458e:f926:5a45\",\"10.128.0.252\"]}}\n' (status=406): , dropping event!","component":{"binary":"filebeat","dataset":"elastic_agent.filebeat","id":"filestream-monitoring","type":"filestream"},"log":{"source":"filestream-monitoring"},"log.logger":"elasticsearch","log.origin":{"file.line":517,"file.name":"elasticsearch/client.go","function":"github.com/elastic/beats/v7/libbeat/outputs/elasticsearch.(*Client).applyItemStatus"},"service.name":"filebeat","log.type":"event","ecs.version":"1.6.0","ecs.version":"1.6.0"}
        {"log.level":"warn","@timestamp":"2024-08-20T19:43:40.503Z","message":"Cannot index event '{\"@timestamp\":\"2024-08-20T19:43:29.747Z\",\"event\":{\"dataset\":\"elastic_agent.filebeat\"},\"host\":{\"mac\":[\"42-01-0A-80-00-FC\"],\"name\":\"ogc-windows-amd64-2022-default-2401\",\"hostname\":\"ogc-windows-amd64-2022-default-2401\",\"architecture\":\"x86_64\",\"os\":{\"kernel\":\"10.0.20348.2652 (WinBuild.160101.0800)\",\"build\":\"20348.2655\",\"type\":\"windows\",\"platform\":\"windows\",\"version\":\"10.0\",\"family\":\"windows\",\"name\":\"Windows Server 2022 Datacenter\"},\"id\":\"18f188f4-7d58-410c-9916-4f00c115ef19\",\"ip\":[\"fe80::3a4:458e:f926:5a45\",\"10.128.0.252\"]},\"log.origin\":{\"file.line\":66,\"file.name\":\"elasticsearch/elasticsearch.go\",\"function\":\"github.com/elastic/beats/v7/libbeat/outputs/elasticsearch.makeES\"},\"component\":{\"binary\":\"filebeat\",\"dataset\":\"elastic_agent.filebeat\",\"id\":\"filestream-default\",\"type\":\"filestream\"},\"service.name\":\"filebeat\",\"log\":{\"offset\":77208,\"file\":{\"path\":\"C:\\\\Users\\\\windows\\\\AppData\\\\Local\\\\Temp\\\\TestEventLogFile1155159046\\\\002\\\\elastic-agent-8.16.0-SNAPSHOT-windows-x86_64\\\\data\\\\elastic-agent-852d47\\\\logs\\\\elastic-agent-20240820.ndjson\",\"idxhi\":\"589824\",\"idxlo\":\"129881\",\"vol\":\"2754062024\"},\"source\":\"filestream-default\"},\"message\":\"Performance preset 'balanced' overrides user setting for field 'bulk_max_size'\",\"cloud\":{\"account\":{\"id\":\"elastic-platform-ingest\"},\"provider\":\"gcp\",\"service\":{\"name\":\"GCE\"},\"instance\":{\"id\":\"3699362919774507953\",\"name\":\"ogc-windows-amd64-2022-default-2401\"},\"machine\":{\"type\":\"e2-standard-4\"},\"availability_zone\":\"us-central1-f\",\"region\":\"us-central1\",\"project\":{\"id\":\"elastic-platform-ingest\"}},\"ecs\":{\"version\":\"8.0.0\"},\"input\":{\"type\":\"filestream\"},\"elastic_agent\":{\"snapshot\":true,\"version\":\"8.16.0\",\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\"},\"agent\":{\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"ephemeral_id\":\"e6ededbb-f7f4-4511-94cd-52759f9af405\",\"name\":\"ogc-windows-amd64-2022-default-2401\",\"type\":\"filebeat\",\"version\":\"8.16.0\"},\"log.level\":\"warn\",\"data_stream\":{\"namespace\":\"default\",\"type\":\"logs\",\"dataset\":\"elastic_agent.filebeat\"},\"log.logger\":\"elasticsearch\"}\n' (status=406): , dropping event!","component":{"binary":"filebeat","dataset":"elastic_agent.filebeat","id":"filestream-monitoring","type":"filestream"},"log":{"source":"filestream-monitoring"},"log.logger":"elasticsearch","log.origin":{"file.line":517,"file.name":"elasticsearch/client.go","function":"github.com/elastic/beats/v7/libbeat/outputs/elasticsearch.(*Client).applyItemStatus"},"service.name":"filebeat","log.type":"event","ecs.version":"1.6.0","ecs.version":"1.6.0"}
        {"log.level":"warn","@timestamp":"2024-08-20T19:43:40.503Z","message":"Cannot index event '{\"@timestamp\":\"2024-08-20T19:43:29.747Z\",\"message\":\"elasticsearch url: http://127.0.0.1:49922\",\"component\":{\"dataset\":\"elastic_agent.filebeat\",\"id\":\"filestream-default\",\"type\":\"filestream\",\"binary\":\"filebeat\"},\"event\":{\"dataset\":\"elastic_agent.filebeat\"},\"log.level\":\"info\",\"service.name\":\"filebeat\",\"ecs\":{\"version\":\"8.0.0\"},\"cloud\":{\"provider\":\"gcp\",\"service\":{\"name\":\"GCE\"},\"instance\":{\"id\":\"3699362919774507953\",\"name\":\"ogc-windows-amd64-2022-default-2401\"},\"machine\":{\"type\":\"e2-standard-4\"},\"availability_zone\":\"us-central1-f\",\"region\":\"us-central1\",\"project\":{\"id\":\"elastic-platform-ingest\"},\"account\":{\"id\":\"elastic-platform-ingest\"}},\"log\":{\"offset\":77765,\"file\":{\"vol\":\"2754062024\",\"path\":\"C:\\\\Users\\\\windows\\\\AppData\\\\Local\\\\Temp\\\\TestEventLogFile1155159046\\\\002\\\\elastic-agent-8.16.0-SNAPSHOT-windows-x86_64\\\\data\\\\elastic-agent-852d47\\\\logs\\\\elastic-agent-20240820.ndjson\",\"idxhi\":\"589824\",\"idxlo\":\"129881\"},\"source\":\"filestream-default\"},\"elastic_agent\":{\"version\":\"8.16.0\",\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"snapshot\":true},\"host\":{\"name\":\"ogc-windows-amd64-2022-default-2401\",\"hostname\":\"ogc-windows-amd64-2022-default-2401\",\"architecture\":\"x86_64\",\"os\":{\"family\":\"windows\",\"name\":\"Windows Server 2022 Datacenter\",\"kernel\":\"10.0.20348.2652 (WinBuild.160101.0800)\",\"build\":\"20348.2655\",\"type\":\"windows\",\"platform\":\"windows\",\"version\":\"10.0\"},\"id\":\"18f188f4-7d58-410c-9916-4f00c115ef19\",\"ip\":[\"fe80::3a4:458e:f926:5a45\",\"10.128.0.252\"],\"mac\":[\"42-01-0A-80-00-FC\"]},\"agent\":{\"ephemeral_id\":\"e6ededbb-f7f4-4511-94cd-52759f9af405\",\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"name\":\"ogc-windows-amd64-2022-default-2401\",\"type\":\"filebeat\",\"version\":\"8.16.0\"},\"log.logger\":\"esclientleg\",\"log.origin\":{\"file.line\":127,\"file.name\":\"eslegclient/connection.go\",\"function\":\"github.com/elastic/beats/v7/libbeat/esleg/eslegclient.NewConnection\"},\"input\":{\"type\":\"filestream\"},\"data_stream\":{\"namespace\":\"default\",\"type\":\"logs\",\"dataset\":\"elastic_agent.filebeat\"}}\n' (status=406): , dropping event!","component":{"binary":"filebeat","dataset":"elastic_agent.filebeat","id":"filestream-monitoring","type":"filestream"},"log":{"source":"filestream-monitoring"},"log.origin":{"file.line":517,"file.name":"elasticsearch/client.go","function":"github.com/elastic/beats/v7/libbeat/outputs/elasticsearch.(*Client).applyItemStatus"},"service.name":"filebeat","log.type":"event","ecs.version":"1.6.0","log.logger":"elasticsearch","ecs.version":"1.6.0"}
        {"log.level":"warn","@timestamp":"2024-08-20T19:43:40.503Z","message":"Cannot index event '{\"@timestamp\":\"2024-08-20T19:43:29.749Z\",\"unit\":{\"type\":\"output\",\"state\":\"HEALTHY\",\"old_state\":\"STARTING\",\"id\":\"filestream-default\"},\"input\":{\"type\":\"filestream\"},\"component\":{\"id\":\"filestream-default\",\"state\":\"HEALTHY\"},\"data_stream\":{\"dataset\":\"elastic_agent\",\"namespace\":\"default\",\"type\":\"logs\"},\"host\":{\"architecture\":\"x86_64\",\"os\":{\"version\":\"10.0\",\"family\":\"windows\",\"name\":\"Windows Server 2022 Datacenter\",\"kernel\":\"10.0.20348.2652 (WinBuild.160101.0800)\",\"build\":\"20348.2655\",\"type\":\"windows\",\"platform\":\"windows\"},\"id\":\"18f188f4-7d58-410c-9916-4f00c115ef19\",\"ip\":[\"fe80::3a4:458e:f926:5a45\",\"10.128.0.252\"],\"mac\":[\"42-01-0A-80-00-FC\"],\"name\":\"ogc-windows-amd64-2022-default-2401\",\"hostname\":\"ogc-windows-amd64-2022-default-2401\"},\"cloud\":{\"region\":\"us-central1\",\"project\":{\"id\":\"elastic-platform-ingest\"},\"account\":{\"id\":\"elastic-platform-ingest\"},\"provider\":\"gcp\",\"service\":{\"name\":\"GCE\"},\"instance\":{\"id\":\"3699362919774507953\",\"name\":\"ogc-windows-amd64-2022-default-2401\"},\"machine\":{\"type\":\"e2-standard-4\"},\"availability_zone\":\"us-central1-f\"},\"message\":\"Unit state changed filestream-default (STARTING->HEALTHY): Healthy\",\"log\":{\"file\":{\"path\":\"C:\\\\Users\\\\windows\\\\AppData\\\\Local\\\\Temp\\\\TestEventLogFile1155159046\\\\002\\\\elastic-agent-8.16.0-SNAPSHOT-windows-x86_64\\\\data\\\\elastic-agent-852d47\\\\logs\\\\elastic-agent-20240820.ndjson\",\"idxhi\":\"589824\",\"idxlo\":\"129881\",\"vol\":\"2754062024\"},\"source\":\"elastic-agent\",\"offset\":78282},\"log.origin\":{\"function\":\"github.com/elastic/elastic-agent/internal/pkg/agent/application/coordinator.(*Coordinator).watchRuntimeComponents\",\"file.name\":\"coordinator/coordinator.go\",\"file.line\":663},\"event\":{\"dataset\":\"elastic_agent\"},\"elastic_agent\":{\"snapshot\":true,\"version\":\"8.16.0\",\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\"},\"log.level\":\"info\",\"agent\":{\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"name\":\"ogc-windows-amd64-2022-default-2401\",\"type\":\"filebeat\",\"version\":\"8.16.0\",\"ephemeral_id\":\"e6ededbb-f7f4-4511-94cd-52759f9af405\"},\"ecs\":{\"version\":\"8.0.0\"}}\n' (status=406): , dropping event!","component":{"binary":"filebeat","dataset":"elastic_agent.filebeat","id":"filestream-monitoring","type":"filestream"},"log":{"source":"filestream-monitoring"},"service.name":"filebeat","log.type":"event","ecs.version":"1.6.0","log.logger":"elasticsearch","log.origin":{"file.line":517,"file.name":"elasticsearch/client.go","function":"github.com/elastic/beats/v7/libbeat/outputs/elasticsearch.(*Client).applyItemStatus"},"ecs.version":"1.6.0"}
        {"log.level":"warn","@timestamp":"2024-08-20T19:43:40.503Z","message":"Cannot index event '{\"@timestamp\":\"2024-08-20T19:43:29.750Z\",\"component\":{\"binary\":\"filebeat\",\"dataset\":\"elastic_agent.filebeat\",\"id\":\"filestream-default\",\"type\":\"filestream\"},\"id\":\"your-filestream-stream-id\",\"agent\":{\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"name\":\"ogc-windows-amd64-2022-default-2401\",\"type\":\"filebeat\",\"version\":\"8.16.0\",\"ephemeral_id\":\"e6ededbb-f7f4-4511-94cd-52759f9af405\"},\"host\":{\"os\":{\"name\":\"Windows Server 2022 Datacenter\",\"kernel\":\"10.0.20348.2652 (WinBuild.160101.0800)\",\"build\":\"20348.2655\",\"type\":\"windows\",\"platform\":\"windows\",\"version\":\"10.0\",\"family\":\"windows\"},\"id\":\"18f188f4-7d58-410c-9916-4f00c115ef19\",\"ip\":[\"fe80::3a4:458e:f926:5a45\",\"10.128.0.252\"],\"name\":\"ogc-windows-amd64-2022-default-2401\",\"mac\":[\"42-01-0A-80-00-FC\"],\"hostname\":\"ogc-windows-amd64-2022-default-2401\",\"architecture\":\"x86_64\"},\"cloud\":{\"account\":{\"id\":\"elastic-platform-ingest\"},\"provider\":\"gcp\",\"service\":{\"name\":\"GCE\"},\"instance\":{\"name\":\"ogc-windows-amd64-2022-default-2401\",\"id\":\"3699362919774507953\"},\"machine\":{\"type\":\"e2-standard-4\"},\"availability_zone\":\"us-central1-f\",\"region\":\"us-central1\",\"project\":{\"id\":\"elastic-platform-ingest\"}},\"log.level\":\"info\",\"event\":{\"dataset\":\"elastic_agent.filebeat\"},\"message\":\"Input 'filestream' starting\",\"log.origin\":{\"file.name\":\"compat/compat.go\",\"function\":\"github.com/elastic/beats/v7/filebeat/input/v2/compat.(*runner).Start.func1\",\"file.line\":127},\"data_stream\":{\"type\":\"logs\",\"dataset\":\"elastic_agent.filebeat\",\"namespace\":\"default\"},\"elastic_agent\":{\"snapshot\":true,\"version\":\"8.16.0\",\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\"},\"ecs\":{\"version\":\"8.0.0\"},\"service.name\":\"filebeat\",\"log\":{\"offset\":78826,\"file\":{\"path\":\"C:\\\\Users\\\\windows\\\\AppData\\\\Local\\\\Temp\\\\TestEventLogFile1155159046\\\\002\\\\elastic-agent-8.16.0-SNAPSHOT-windows-x86_64\\\\data\\\\elastic-agent-852d47\\\\logs\\\\elastic-agent-20240820.ndjson\",\"idxhi\":\"589824\",\"idxlo\":\"129881\",\"vol\":\"2754062024\"},\"source\":\"filestream-default\"},\"input\":{\"type\":\"filestream\"},\"log.logger\":\"input.filestream\"}\n' (status=406): , dropping event!","component":{"binary":"filebeat","dataset":"elastic_agent.filebeat","id":"filestream-monitoring","type":"filestream"},"log":{"source":"filestream-monitoring"},"log.logger":"elasticsearch","log.origin":{"file.line":517,"file.name":"elasticsearch/client.go","function":"github.com/elastic/beats/v7/libbeat/outputs/elasticsearch.(*Client).applyItemStatus"},"service.name":"filebeat","log.type":"event","ecs.version":"1.6.0","ecs.version":"1.6.0"}
        {"log.level":"warn","@timestamp":"2024-08-20T19:43:40.504Z","message":"Cannot index event '{\"@timestamp\":\"2024-08-20T19:43:29.751Z\",\"data_stream\":{\"dataset\":\"elastic_agent\",\"namespace\":\"default\",\"type\":\"logs\"},\"unit\":{\"id\":\"filestream-default-your-input-id\",\"type\":\"input\",\"state\":\"HEALTHY\",\"old_state\":\"STARTING\"},\"elastic_agent\":{\"snapshot\":true,\"version\":\"8.16.0\",\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\"},\"agent\":{\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"name\":\"ogc-windows-amd64-2022-default-2401\",\"type\":\"filebeat\",\"version\":\"8.16.0\",\"ephemeral_id\":\"e6ededbb-f7f4-4511-94cd-52759f9af405\"},\"cloud\":{\"region\":\"us-central1\",\"project\":{\"id\":\"elastic-platform-ingest\"},\"account\":{\"id\":\"elastic-platform-ingest\"},\"provider\":\"gcp\",\"service\":{\"name\":\"GCE\"},\"instance\":{\"id\":\"3699362919774507953\",\"name\":\"ogc-windows-amd64-2022-default-2401\"},\"machine\":{\"type\":\"e2-standard-4\"},\"availability_zone\":\"us-central1-f\"},\"ecs\":{\"version\":\"8.0.0\"},\"log.level\":\"info\",\"message\":\"Unit state changed filestream-default-your-input-id (STARTING->HEALTHY): Healthy\",\"input\":{\"type\":\"filestream\"},\"event\":{\"dataset\":\"elastic_agent\"},\"host\":{\"architecture\":\"x86_64\",\"os\":{\"build\":\"20348.2655\",\"type\":\"windows\",\"platform\":\"windows\",\"version\":\"10.0\",\"family\":\"windows\",\"name\":\"Windows Server 2022 Datacenter\",\"kernel\":\"10.0.20348.2652 (WinBuild.160101.0800)\"},\"id\":\"18f188f4-7d58-410c-9916-4f00c115ef19\",\"ip\":[\"fe80::3a4:458e:f926:5a45\",\"10.128.0.252\"],\"mac\":[\"42-01-0A-80-00-FC\"],\"hostname\":\"ogc-windows-amd64-2022-default-2401\",\"name\":\"ogc-windows-amd64-2022-default-2401\"},\"log.origin\":{\"function\":\"github.com/elastic/elastic-agent/internal/pkg/agent/application/coordinator.(*Coordinator).watchRuntimeComponents\",\"file.name\":\"coordinator/coordinator.go\",\"file.line\":663},\"log\":{\"source\":\"elastic-agent\",\"offset\":79365,\"file\":{\"idxhi\":\"589824\",\"idxlo\":\"129881\",\"vol\":\"2754062024\",\"path\":\"C:\\\\Users\\\\windows\\\\AppData\\\\Local\\\\Temp\\\\TestEventLogFile1155159046\\\\002\\\\elastic-agent-8.16.0-SNAPSHOT-windows-x86_64\\\\data\\\\elastic-agent-852d47\\\\logs\\\\elastic-agent-20240820.ndjson\"}},\"component\":{\"id\":\"filestream-default\",\"state\":\"HEALTHY\"}}\n' (status=406): , dropping event!","component":{"binary":"filebeat","dataset":"elastic_agent.filebeat","id":"filestream-monitoring","type":"filestream"},"log":{"source":"filestream-monitoring"},"log.logger":"elasticsearch","log.origin":{"file.line":517,"file.name":"elasticsearch/client.go","function":"github.com/elastic/beats/v7/libbeat/outputs/elasticsearch.(*Client).applyItemStatus"},"service.name":"filebeat","log.type":"event","ecs.version":"1.6.0","ecs.version":"1.6.0"}
        {"log.level":"warn","@timestamp":"2024-08-20T19:43:40.504Z","message":"Cannot index event '{\"@timestamp\":\"2024-08-20T19:43:29.750Z\",\"service.name\":\"filebeat\",\"input_type\":\"filestream\",\"message\":\"registering\",\"id\":\"your-filestream-stream-id\",\"log.logger\":\"metric_registry\",\"elastic_agent\":{\"snapshot\":true,\"version\":\"8.16.0\",\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\"},\"cloud\":{\"account\":{\"id\":\"elastic-platform-ingest\"},\"provider\":\"gcp\",\"service\":{\"name\":\"GCE\"},\"instance\":{\"id\":\"3699362919774507953\",\"name\":\"ogc-windows-amd64-2022-default-2401\"},\"machine\":{\"type\":\"e2-standard-4\"},\"availability_zone\":\"us-central1-f\",\"region\":\"us-central1\",\"project\":{\"id\":\"elastic-platform-ingest\"}},\"log\":{\"offset\":79936,\"file\":{\"path\":\"C:\\\\Users\\\\windows\\\\AppData\\\\Local\\\\Temp\\\\TestEventLogFile1155159046\\\\002\\\\elastic-agent-8.16.0-SNAPSHOT-windows-x86_64\\\\data\\\\elastic-agent-852d47\\\\logs\\\\elastic-agent-20240820.ndjson\",\"idxhi\":\"589824\",\"idxlo\":\"129881\",\"vol\":\"2754062024\"},\"source\":\"filestream-default\"},\"agent\":{\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"type\":\"filebeat\",\"version\":\"8.16.0\",\"ephemeral_id\":\"e6ededbb-f7f4-4511-94cd-52759f9af405\",\"name\":\"ogc-windows-amd64-2022-default-2401\"},\"data_stream\":{\"type\":\"logs\",\"dataset\":\"elastic_agent.filebeat\",\"namespace\":\"default\"},\"uuid\":\"17b6a676-a578-43fc-b907-03b8a6723afb\",\"key\":\"your-filestream-stream-id\",\"log.origin\":{\"file.name\":\"inputmon/input.go\",\"function\":\"github.com/elastic/beats/v7/libbeat/monitoring/inputmon.NewInputRegistry\",\"file.line\":63},\"log.level\":\"info\",\"component\":{\"binary\":\"filebeat\",\"dataset\":\"elastic_agent.filebeat\",\"id\":\"filestream-default\",\"type\":\"filestream\"},\"input\":{\"type\":\"filestream\"},\"event\":{\"dataset\":\"elastic_agent.filebeat\"},\"host\":{\"hostname\":\"ogc-windows-amd64-2022-default-2401\",\"architecture\":\"x86_64\",\"os\":{\"build\":\"20348.2655\",\"type\":\"windows\",\"platform\":\"windows\",\"version\":\"10.0\",\"family\":\"windows\",\"name\":\"Windows Server 2022 Datacenter\",\"kernel\":\"10.0.20348.2652 (WinBuild.160101.0800)\"},\"id\":\"18f188f4-7d58-410c-9916-4f00c115ef19\",\"ip\":[\"fe80::3a4:458e:f926:5a45\",\"10.128.0.252\"],\"mac\":[\"42-01-0A-80-00-FC\"],\"name\":\"ogc-windows-amd64-2022-default-2401\"},\"ecs\":{\"version\":\"8.0.0\"}}\n' (status=406): , dropping event!","component":{"binary":"filebeat","dataset":"elastic_agent.filebeat","id":"filestream-monitoring","type":"filestream"},"log":{"source":"filestream-monitoring"},"log.type":"event","ecs.version":"1.6.0","log.logger":"elasticsearch","log.origin":{"file.line":517,"file.name":"elasticsearch/client.go","function":"github.com/elastic/beats/v7/libbeat/outputs/elasticsearch.(*Client).applyItemStatus"},"service.name":"filebeat","ecs.version":"1.6.0"}
        {"log.level":"warn","@timestamp":"2024-08-20T19:43:40.688Z","message":"Cannot index event '{\"@timestamp\":\"2024-08-20T19:43:30.651Z\",\"metricset\":{\"period\":60000,\"name\":\"json\"},\"event\":{\"duration\":11717400,\"dataset\":\"elastic_agent.filebeat_input\",\"module\":\"http\"},\"filebeat_input\":{\"processing_errors_total\":0,\"files_opened_total\":2,\"files_active\":2,\"bytes_processed_total\":85479,\"processing_time\":{\"histogram\":{\"max\":1.15552092e+10,\"p95\":1.11409871e+10,\"p99\":1.1409409200000002e+10,\"min\":4.65756e+07,\"stddev\":3.968851596067223e+09,\"median\":1.7548348e+09,\"p75\":1.9730153e+09,\"count\":153,\"p999\":1.15552092e+10,\"mean\":3.5782060633986926e+09}},\"input\":\"filestream\",\"messages_read_total\":153,\"files_closed_total\":0,\"id\":\"filestream-monitoring-agent\",\"events_processed_total\":153},\"cloud\":{\"machine\":{\"type\":\"e2-standard-4\"},\"availability_zone\":\"us-central1-f\",\"region\":\"us-central1\",\"project\":{\"id\":\"elastic-platform-ingest\"},\"account\":{\"id\":\"elastic-platform-ingest\"},\"provider\":\"gcp\",\"service\":{\"name\":\"GCE\"},\"instance\":{\"id\":\"3699362919774507953\",\"name\":\"ogc-windows-amd64-2022-default-2401\"}},\"ecs\":{\"version\":\"8.0.0\"},\"host\":{\"name\":\"ogc-windows-amd64-2022-default-2401\",\"hostname\":\"ogc-windows-amd64-2022-default-2401\",\"architecture\":\"x86_64\",\"os\":{\"build\":\"20348.2655\",\"type\":\"windows\",\"platform\":\"windows\",\"version\":\"10.0\",\"family\":\"windows\",\"name\":\"Windows Server 2022 Datacenter\",\"kernel\":\"10.0.20348.2652 (WinBuild.160101.0800)\"},\"id\":\"18f188f4-7d58-410c-9916-4f00c115ef19\",\"ip\":[\"fe80::3a4:458e:f926:5a45\",\"10.128.0.252\"],\"mac\":[\"42-01-0A-80-00-FC\"]},\"service\":{\"address\":\"http://npipe/inputs\",\"type\":\"http\"},\"component\":{\"binary\":\"filebeat\",\"id\":\"filestream-monitoring\"},\"data_stream\":{\"type\":\"metrics\",\"dataset\":\"elastic_agent.filebeat_input\",\"namespace\":\"default\"},\"elastic_agent\":{\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"snapshot\":true,\"process\":\"filebeat\",\"version\":\"8.16.0\"},\"agent\":{\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"type\":\"metricbeat\",\"version\":\"8.16.0\",\"ephemeral_id\":\"b0cc8b51-8c4d-45ba-a607-218616f68f32\",\"name\":\"ogc-windows-amd64-2022-default-2401\"}}\n' (status=406): , dropping event!","component":{"binary":"metricbeat","dataset":"elastic_agent.metricbeat","id":"http/metrics-monitoring","type":"http/metrics"},"log":{"source":"http/metrics-monitoring"},"ecs.version":"1.6.0","log.logger":"elasticsearch","log.origin":{"file.line":517,"file.name":"elasticsearch/client.go","function":"github.com/elastic/beats/v7/libbeat/outputs/elasticsearch.(*Client).applyItemStatus"},"service.name":"metricbeat","log.type":"event","ecs.version":"1.6.0"}
        {"log.level":"warn","@timestamp":"2024-08-20T19:43:40.688Z","message":"Cannot index event '{\"@timestamp\":\"2024-08-20T19:43:30.646Z\",\"service\":{\"address\":\"http://localhost:7002/stats\",\"type\":\"http\"},\"metricset\":{\"name\":\"json\",\"period\":60000},\"data_stream\":{\"namespace\":\"default\",\"type\":\"metrics\",\"dataset\":\"elastic_agent.elastic_agent\"},\"agent\":{\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"name\":\"ogc-windows-amd64-2022-default-2401\",\"type\":\"metricbeat\",\"version\":\"8.16.0\",\"ephemeral_id\":\"b0cc8b51-8c4d-45ba-a607-218616f68f32\"},\"system\":{\"process\":{\"cpu\":{\"system\":{\"ticks\":406,\"time\":{\"ms\":406}},\"total\":{\"time\":{\"ms\":2859},\"value\":2859,\"ticks\":2859},\"user\":{\"ticks\":2453,\"time\":{\"ms\":2453}}},\"memory\":{\"size\":2.2825208e+07}}},\"ecs\":{\"version\":\"8.0.0\"},\"component\":{\"id\":\"elastic-agent\",\"binary\":\"elastic-agent\"},\"event\":{\"dataset\":\"elastic_agent.elastic_agent\",\"module\":\"http\",\"duration\":19037200},\"elastic_agent\":{\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"snapshot\":true,\"version\":\"8.16.0\",\"process\":\"elastic-agent\"},\"host\":{\"hostname\":\"ogc-windows-amd64-2022-default-2401\",\"architecture\":\"x86_64\",\"os\":{\"platform\":\"windows\",\"version\":\"10.0\",\"family\":\"windows\",\"name\":\"Windows Server 2022 Datacenter\",\"kernel\":\"10.0.20348.2652 (WinBuild.160101.0800)\",\"build\":\"20348.2655\",\"type\":\"windows\"},\"id\":\"18f188f4-7d58-410c-9916-4f00c115ef19\",\"name\":\"ogc-windows-amd64-2022-default-2401\",\"ip\":[\"fe80::3a4:458e:f926:5a45\",\"10.128.0.252\"],\"mac\":[\"42-01-0A-80-00-FC\"]},\"cloud\":{\"region\":\"us-central1\",\"project\":{\"id\":\"elastic-platform-ingest\"},\"account\":{\"id\":\"elastic-platform-ingest\"},\"provider\":\"gcp\",\"service\":{\"name\":\"GCE\"},\"instance\":{\"id\":\"3699362919774507953\",\"name\":\"ogc-windows-amd64-2022-default-2401\"},\"machine\":{\"type\":\"e2-standard-4\"},\"availability_zone\":\"us-central1-f\"}}\n' (status=406): , dropping event!","component":{"binary":"metricbeat","dataset":"elastic_agent.metricbeat","id":"http/metrics-monitoring","type":"http/metrics"},"log":{"source":"http/metrics-monitoring"},"ecs.version":"1.6.0","log.logger":"elasticsearch","log.origin":{"file.line":517,"file.name":"elasticsearch/client.go","function":"github.com/elastic/beats/v7/libbeat/outputs/elasticsearch.(*Client).applyItemStatus"},"service.name":"metricbeat","log.type":"event","ecs.version":"1.6.0"}
        {"log.level":"warn","@timestamp":"2024-08-20T19:43:40.688Z","message":"Cannot index event '{\"@timestamp\":\"2024-08-20T19:43:30.653Z\",\"cloud\":{\"project\":{\"id\":\"elastic-platform-ingest\"},\"account\":{\"id\":\"elastic-platform-ingest\"},\"provider\":\"gcp\",\"service\":{\"name\":\"GCE\"},\"instance\":{\"id\":\"3699362919774507953\",\"name\":\"ogc-windows-amd64-2022-default-2401\"},\"machine\":{\"type\":\"e2-standard-4\"},\"availability_zone\":\"us-central1-f\",\"region\":\"us-central1\"},\"event\":{\"dataset\":\"elastic_agent.elastic_agent\",\"module\":\"http\",\"duration\":14348600},\"system\":{\"process\":{\"cpu\":{\"total\":{\"ticks\":749,\"time\":{\"ms\":749},\"value\":749},\"user\":{\"ticks\":468,\"time\":{\"ms\":468}},\"system\":{\"ticks\":281,\"time\":{\"ms\":281}}},\"memory\":{\"size\":6.5389486e+07}}},\"ecs\":{\"version\":\"8.0.0\"},\"host\":{\"mac\":[\"42-01-0A-80-00-FC\"],\"hostname\":\"ogc-windows-amd64-2022-default-2401\",\"architecture\":\"x86_64\",\"name\":\"ogc-windows-amd64-2022-default-2401\",\"os\":{\"family\":\"windows\",\"name\":\"Windows Server 2022 Datacenter\",\"kernel\":\"10.0.20348.2652 (WinBuild.160101.0800)\",\"build\":\"20348.2655\",\"type\":\"windows\",\"platform\":\"windows\",\"version\":\"10.0\"},\"id\":\"18f188f4-7d58-410c-9916-4f00c115ef19\",\"ip\":[\"fe80::3a4:458e:f926:5a45\",\"10.128.0.252\"]},\"elastic_agent\":{\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"snapshot\":true,\"version\":\"8.16.0\",\"process\":\"metricbeat\"},\"agent\":{\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"type\":\"metricbeat\",\"version\":\"8.16.0\",\"ephemeral_id\":\"b0cc8b51-8c4d-45ba-a607-218616f68f32\",\"name\":\"ogc-windows-amd64-2022-default-2401\"},\"metricset\":{\"name\":\"json\",\"period\":60000},\"service\":{\"address\":\"http://npipe/stats\",\"type\":\"http\"},\"component\":{\"id\":\"http/metrics-monitoring\",\"binary\":\"metricbeat\"},\"data_stream\":{\"namespace\":\"default\",\"type\":\"metrics\",\"dataset\":\"elastic_agent.elastic_agent\"}}\n' (status=406): , dropping event!","component":{"binary":"metricbeat","dataset":"elastic_agent.metricbeat","id":"http/metrics-monitoring","type":"http/metrics"},"log":{"source":"http/metrics-monitoring"},"log.logger":"elasticsearch","log.origin":{"file.line":517,"file.name":"elasticsearch/client.go","function":"github.com/elastic/beats/v7/libbeat/outputs/elasticsearch.(*Client).applyItemStatus"},"service.name":"metricbeat","log.type":"event","ecs.version":"1.6.0","ecs.version":"1.6.0"}
        {"log.level":"warn","@timestamp":"2024-08-20T19:43:40.688Z","message":"Cannot index event '{\"@timestamp\":\"2024-08-20T19:43:30.657Z\",\"event\":{\"dataset\":\"elastic_agent.elastic_agent\",\"module\":\"http\",\"duration\":11632400},\"metricset\":{\"name\":\"json\",\"period\":60000},\"component\":{\"id\":\"filestream-default\",\"binary\":\"filebeat\"},\"data_stream\":{\"type\":\"metrics\",\"dataset\":\"elastic_agent.elastic_agent\",\"namespace\":\"default\"},\"elastic_agent\":{\"snapshot\":true,\"version\":\"8.16.0\",\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"process\":\"filebeat\"},\"agent\":{\"name\":\"ogc-windows-amd64-2022-default-2401\",\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"type\":\"metricbeat\",\"version\":\"8.16.0\",\"ephemeral_id\":\"b0cc8b51-8c4d-45ba-a607-218616f68f32\"},\"system\":{\"process\":{\"memory\":{\"size\":5.647659e+07},\"cpu\":{\"user\":{\"time\":{\"ms\":312},\"ticks\":312},\"system\":{\"time\":{\"ms\":203},\"ticks\":203},\"total\":{\"ticks\":515,\"time\":{\"ms\":515},\"value\":515}}}},\"cloud\":{\"account\":{\"id\":\"elastic-platform-ingest\"},\"provider\":\"gcp\",\"service\":{\"name\":\"GCE\"},\"instance\":{\"id\":\"3699362919774507953\",\"name\":\"ogc-windows-amd64-2022-default-2401\"},\"machine\":{\"type\":\"e2-standard-4\"},\"availability_zone\":\"us-central1-f\",\"region\":\"us-central1\",\"project\":{\"id\":\"elastic-platform-ingest\"}},\"service\":{\"address\":\"http://npipe/stats\",\"type\":\"http\"},\"ecs\":{\"version\":\"8.0.0\"},\"host\":{\"ip\":[\"fe80::3a4:458e:f926:5a45\",\"10.128.0.252\"],\"mac\":[\"42-01-0A-80-00-FC\"],\"hostname\":\"ogc-windows-amd64-2022-default-2401\",\"architecture\":\"x86_64\",\"os\":{\"type\":\"windows\",\"platform\":\"windows\",\"version\":\"10.0\",\"family\":\"windows\",\"name\":\"Windows Server 2022 Datacenter\",\"kernel\":\"10.0.20348.2652 (WinBuild.160101.0800)\",\"build\":\"20348.2655\"},\"id\":\"18f188f4-7d58-410c-9916-4f00c115ef19\",\"name\":\"ogc-windows-amd64-2022-default-2401\"}}\n' (status=406): , dropping event!","component":{"binary":"metricbeat","dataset":"elastic_agent.metricbeat","id":"http/metrics-monitoring","type":"http/metrics"},"log":{"source":"http/metrics-monitoring"},"ecs.version":"1.6.0","log.logger":"elasticsearch","log.origin":{"file.line":517,"file.name":"elasticsearch/client.go","function":"github.com/elastic/beats/v7/libbeat/outputs/elasticsearch.(*Client).applyItemStatus"},"service.name":"metricbeat","log.type":"event","ecs.version":"1.6.0"}
        {"log.level":"warn","@timestamp":"2024-08-20T19:43:40.688Z","message":"Cannot index event '{\"@timestamp\":\"2024-08-20T19:43:30.653Z\",\"event\":{\"module\":\"http\",\"duration\":16132600,\"dataset\":\"elastic_agent.elastic_agent\"},\"service\":{\"type\":\"http\",\"address\":\"http://npipe/stats\"},\"elastic_agent\":{\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"snapshot\":true,\"version\":\"8.16.0\",\"process\":\"metricbeat\"},\"ecs\":{\"version\":\"8.0.0\"},\"cloud\":{\"project\":{\"id\":\"elastic-platform-ingest\"},\"account\":{\"id\":\"elastic-platform-ingest\"},\"provider\":\"gcp\",\"service\":{\"name\":\"GCE\"},\"instance\":{\"id\":\"3699362919774507953\",\"name\":\"ogc-windows-amd64-2022-default-2401\"},\"machine\":{\"type\":\"e2-standard-4\"},\"availability_zone\":\"us-central1-f\",\"region\":\"us-central1\"},\"metricset\":{\"name\":\"json\",\"period\":60000},\"component\":{\"id\":\"beat/metrics-monitoring\",\"binary\":\"metricbeat\"},\"data_stream\":{\"dataset\":\"elastic_agent.elastic_agent\",\"namespace\":\"default\",\"type\":\"metrics\"},\"agent\":{\"type\":\"metricbeat\",\"version\":\"8.16.0\",\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"ephemeral_id\":\"b0cc8b51-8c4d-45ba-a607-218616f68f32\",\"name\":\"ogc-windows-amd64-2022-default-2401\"},\"system\":{\"process\":{\"cpu\":{\"total\":{\"time\":{\"ms\":765},\"value\":765,\"ticks\":765},\"user\":{\"ticks\":500,\"time\":{\"ms\":500}},\"system\":{\"ticks\":265,\"time\":{\"ms\":265}}},\"memory\":{\"size\":6.5127342e+07}}},\"host\":{\"os\":{\"build\":\"20348.2655\",\"type\":\"windows\",\"platform\":\"windows\",\"version\":\"10.0\",\"family\":\"windows\",\"name\":\"Windows Server 2022 Datacenter\",\"kernel\":\"10.0.20348.2652 (WinBuild.160101.0800)\"},\"id\":\"18f188f4-7d58-410c-9916-4f00c115ef19\",\"ip\":[\"fe80::3a4:458e:f926:5a45\",\"10.128.0.252\"],\"mac\":[\"42-01-0A-80-00-FC\"],\"hostname\":\"ogc-windows-amd64-2022-default-2401\",\"architecture\":\"x86_64\",\"name\":\"ogc-windows-amd64-2022-default-2401\"}}\n' (status=406): , dropping event!","component":{"binary":"metricbeat","dataset":"elastic_agent.metricbeat","id":"http/metrics-monitoring","type":"http/metrics"},"log":{"source":"http/metrics-monitoring"},"service.name":"metricbeat","log.type":"event","ecs.version":"1.6.0","log.logger":"elasticsearch","log.origin":{"file.line":517,"file.name":"elasticsearch/client.go","function":"github.com/elastic/beats/v7/libbeat/outputs/elasticsearch.(*Client).applyItemStatus"},"ecs.version":"1.6.0"}
        {"log.level":"warn","@timestamp":"2024-08-20T19:43:40.688Z","message":"Cannot index event '{\"@timestamp\":\"2024-08-20T19:43:30.657Z\",\"event\":{\"duration\":13084900,\"dataset\":\"elastic_agent.filebeat_input\",\"module\":\"http\"},\"elastic_agent\":{\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"snapshot\":true,\"version\":\"8.16.0\",\"process\":\"filebeat\"},\"agent\":{\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"type\":\"metricbeat\",\"version\":\"8.16.0\",\"ephemeral_id\":\"b0cc8b51-8c4d-45ba-a607-218616f68f32\",\"name\":\"ogc-windows-amd64-2022-default-2401\"},\"filebeat_input\":{\"processing_errors_total\":0,\"bytes_processed_total\":60,\"processing_time\":{\"histogram\":{\"median\":1.0148e+06,\"max\":1.0148e+06,\"p75\":1.0148e+06,\"mean\":1.0148e+06,\"min\":1.0148e+06,\"p99\":1.0148e+06,\"p999\":1.0148e+06,\"stddev\":0,\"count\":1,\"p95\":1.0148e+06}},\"id\":\"your-filestream-stream-id\",\"input\":\"filestream\",\"messages_read_total\":1,\"events_processed_total\":1,\"files_active\":1,\"files_closed_total\":0,\"files_opened_total\":1},\"host\":{\"name\":\"ogc-windows-amd64-2022-default-2401\",\"hostname\":\"ogc-windows-amd64-2022-default-2401\",\"architecture\":\"x86_64\",\"os\":{\"family\":\"windows\",\"name\":\"Windows Server 2022 Datacenter\",\"kernel\":\"10.0.20348.2652 (WinBuild.160101.0800)\",\"build\":\"20348.2655\",\"type\":\"windows\",\"platform\":\"windows\",\"version\":\"10.0\"},\"id\":\"18f188f4-7d58-410c-9916-4f00c115ef19\",\"ip\":[\"fe80::3a4:458e:f926:5a45\",\"10.128.0.252\"],\"mac\":[\"42-01-0A-80-00-FC\"]},\"ecs\":{\"version\":\"8.0.0\"},\"cloud\":{\"machine\":{\"type\":\"e2-standard-4\"},\"availability_zone\":\"us-central1-f\",\"region\":\"us-central1\",\"project\":{\"id\":\"elastic-platform-ingest\"},\"account\":{\"id\":\"elastic-platform-ingest\"},\"provider\":\"gcp\",\"service\":{\"name\":\"GCE\"},\"instance\":{\"id\":\"3699362919774507953\",\"name\":\"ogc-windows-amd64-2022-default-2401\"}},\"service\":{\"address\":\"http://npipe/inputs\",\"type\":\"http\"},\"component\":{\"binary\":\"filebeat\",\"id\":\"filestream-default\"},\"metricset\":{\"period\":60000,\"name\":\"json\"},\"data_stream\":{\"namespace\":\"default\",\"type\":\"metrics\",\"dataset\":\"elastic_agent.filebeat_input\"}}\n' (status=406): , dropping event!","component":{"binary":"metricbeat","dataset":"elastic_agent.metricbeat","id":"http/metrics-monitoring","type":"http/metrics"},"log":{"source":"http/metrics-monitoring"},"log.logger":"elasticsearch","log.origin":{"file.line":517,"file.name":"elasticsearch/client.go","function":"github.com/elastic/beats/v7/libbeat/outputs/elasticsearch.(*Client).applyItemStatus"},"service.name":"metricbeat","log.type":"event","ecs.version":"1.6.0","ecs.version":"1.6.0"}
        {"log.level":"warn","@timestamp":"2024-08-20T19:43:40.688Z","message":"Cannot index event '{\"@timestamp\":\"2024-08-20T19:43:30.653Z\",\"service\":{\"address\":\"http://npipe/stats\",\"type\":\"http\"},\"elastic_agent\":{\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"snapshot\":true,\"version\":\"8.16.0\",\"process\":\"filebeat\"},\"host\":{\"id\":\"18f188f4-7d58-410c-9916-4f00c115ef19\",\"name\":\"ogc-windows-amd64-2022-default-2401\",\"ip\":[\"fe80::3a4:458e:f926:5a45\",\"10.128.0.252\"],\"mac\":[\"42-01-0A-80-00-FC\"],\"hostname\":\"ogc-windows-amd64-2022-default-2401\",\"architecture\":\"x86_64\",\"os\":{\"type\":\"windows\",\"platform\":\"windows\",\"version\":\"10.0\",\"family\":\"windows\",\"name\":\"Windows Server 2022 Datacenter\",\"kernel\":\"10.0.20348.2652 (WinBuild.160101.0800)\",\"build\":\"20348.2655\"}},\"ecs\":{\"version\":\"8.0.0\"},\"cloud\":{\"service\":{\"name\":\"GCE\"},\"instance\":{\"name\":\"ogc-windows-amd64-2022-default-2401\",\"id\":\"3699362919774507953\"},\"machine\":{\"type\":\"e2-standard-4\"},\"availability_zone\":\"us-central1-f\",\"region\":\"us-central1\",\"project\":{\"id\":\"elastic-platform-ingest\"},\"account\":{\"id\":\"elastic-platform-ingest\"},\"provider\":\"gcp\"},\"metricset\":{\"period\":60000,\"name\":\"json\"},\"component\":{\"binary\":\"filebeat\",\"id\":\"filestream-monitoring\"},\"event\":{\"module\":\"http\",\"duration\":17550300,\"dataset\":\"elastic_agent.elastic_agent\"},\"data_stream\":{\"namespace\":\"default\",\"type\":\"metrics\",\"dataset\":\"elastic_agent.elastic_agent\"},\"agent\":{\"ephemeral_id\":\"b0cc8b51-8c4d-45ba-a607-218616f68f32\",\"id\":\"f40d59b0-bd9a-4b50-a12c-bc9a0e49fd37\",\"name\":\"ogc-windows-amd64-2022-default-2401\",\"type\":\"metricbeat\",\"version\":\"8.16.0\"},\"system\":{\"process\":{\"cpu\":{\"total\":{\"ticks\":483,\"time\":{\"ms\":483},\"value\":483},\"user\":{\"time\":{\"ms\":296},\"ticks\":296},\"system\":{\"ticks\":187,\"time\":{\"ms\":187}}},\"memory\":{\"size\":6.1195182e+07}}}}\n' (status=406): , dropping event!","component":{"binary":"metricbeat","dataset":"elastic_agent.metricbeat","id":"http/metrics-monitoring","type":"http/metrics"},"log":{"source":"http/metrics-monitoring"},"service.name":"metricbeat","log.type":"event","ecs.version":"1.6.0","log.logger":"elasticsearch","log.origin":{"file.line":517,"file.name":"elasticsearch/client.go","function":"github.com/elastic/beats/v7/libbeat/outputs/elasticsearch.(*Client).applyItemStatus"},"ecs.version":"1.6.0"}

    fixture.go:657: >> running binary with: [C:\Users\windows\AppData\Local\Temp\TestEventLogFile1155159046\002\elastic-agent-8.16.0-SNAPSHOT-windows-x86_64\elastic-agent.exe diagnostics collect]
    event_logging_test.go:361: diagnostic command completed with output 
        "Created diagnostics archive \"elastic-agent-diagnostics-2024-08-20T19-43-40Z-00.zip\"\n***** WARNING *****\nCreated archive may contain plain text credentials.\nEnsure that files in archive are redacted before sharing.\n*******************\n"
    event_logging_test.go:361: checking directory "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\003" for the generated diagnostics archive
    event_logging_test.go:361: Found "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\003\\elastic-agent-diagnostics-2024-08-20T19-43-40Z-00.zip" diagnostic archive.
    event_logging_test.go:367: extracting diagnostic archive in dir "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\004"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\004\\version.txt"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\004\\package.version"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\004\\goroutine.pprof.gz"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\004\\heap.pprof.gz"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\004\\allocs.pprof.gz"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\004\\threadcreate.pprof.gz"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\004\\block.pprof.gz"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\004\\mutex.pprof.gz"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\004\\agent-info.yaml"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\004\\local-config.yaml"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\004\\pre-config.yaml"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\004\\variables.yaml"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\004\\computed-config.yaml"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\004\\components-expected.yaml"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\004\\components-actual.yaml"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\004\\state.yaml"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\004\\components"
    event_logging_test.go:367: creating directory "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\004\\components"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\004\\components\\filestream-default"
    event_logging_test.go:367: creating directory "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\004\\components\\filestream-default"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\004\\components\\filestream-default\\goroutine.pprof.gz"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\004\\components\\filestream-default\\input_metrics.json"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\004\\components\\filestream-default\\beat-rendered-config.yml"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\004\\components\\filestream-default\\allocs.pprof.gz"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\004\\components\\filestream-default\\threadcreate.pprof.gz"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\004\\components\\filestream-default\\global_processors.txt"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\004\\components\\filestream-default\\beat_metrics.json"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\004\\components\\filestream-default\\heap.pprof.gz"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\004\\components\\filestream-default\\block.pprof.gz"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\004\\components\\filestream-default\\mutex.pprof.gz"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\004\\components\\filestream-default\\your-input-id"
    event_logging_test.go:367: creating directory "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\004\\components\\filestream-default\\your-input-id"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\004\\components\\filestream-default\\filestream-default"
    event_logging_test.go:367: creating directory "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\004\\components\\filestream-default\\filestream-default"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\004\\components\\beat-metrics-monitoring"
    event_logging_test.go:367: creating directory "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\004\\components\\beat-metrics-monitoring"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\004\\components\\beat-metrics-monitoring\\threadcreate.pprof.gz"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\004\\components\\beat-metrics-monitoring\\goroutine.pprof.gz"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\004\\components\\beat-metrics-monitoring\\heap.pprof.gz"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\004\\components\\beat-metrics-monitoring\\allocs.pprof.gz"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\004\\components\\beat-metrics-monitoring\\input_metrics.json"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\004\\components\\beat-metrics-monitoring\\beat-rendered-config.yml"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\004\\components\\beat-metrics-monitoring\\mutex.pprof.gz"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\004\\components\\beat-metrics-monitoring\\global_processors.txt"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\004\\components\\beat-metrics-monitoring\\beat_metrics.json"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\004\\components\\beat-metrics-monitoring\\block.pprof.gz"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\004\\components\\beat-metrics-monitoring\\metrics-monitoring-beats"
    event_logging_test.go:367: creating directory "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\004\\components\\beat-metrics-monitoring\\metrics-monitoring-beats"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\004\\components\\beat-metrics-monitoring\\beat-metrics-monitoring"
    event_logging_test.go:367: creating directory "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\004\\components\\beat-metrics-monitoring\\beat-metrics-monitoring"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\004\\components\\http-metrics-monitoring"
    event_logging_test.go:367: creating directory "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\004\\components\\http-metrics-monitoring"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\004\\components\\http-metrics-monitoring\\allocs.pprof.gz"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\004\\components\\http-metrics-monitoring\\input_metrics.json"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\004\\components\\http-metrics-monitoring\\threadcreate.pprof.gz"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\004\\components\\http-metrics-monitoring\\mutex.pprof.gz"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\004\\components\\http-metrics-monitoring\\global_processors.txt"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\004\\components\\http-metrics-monitoring\\goroutine.pprof.gz"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\004\\components\\http-metrics-monitoring\\heap.pprof.gz"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\004\\components\\http-metrics-monitoring\\beat_metrics.json"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\004\\components\\http-metrics-monitoring\\beat-rendered-config.yml"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\004\\components\\http-metrics-monitoring\\block.pprof.gz"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\004\\components\\http-metrics-monitoring\\metrics-monitoring-agent"
    event_logging_test.go:367: creating directory "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\004\\components\\http-metrics-monitoring\\metrics-monitoring-agent"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\004\\components\\http-metrics-monitoring\\http-metrics-monitoring"
    event_logging_test.go:367: creating directory "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\004\\components\\http-metrics-monitoring\\http-metrics-monitoring"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\004\\components\\filestream-monitoring"
    event_logging_test.go:367: creating directory "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\004\\components\\filestream-monitoring"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\004\\components\\filestream-monitoring\\input_metrics.json"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\004\\components\\filestream-monitoring\\mutex.pprof.gz"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\004\\components\\filestream-monitoring\\beat-rendered-config.yml"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\004\\components\\filestream-monitoring\\allocs.pprof.gz"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\004\\components\\filestream-monitoring\\block.pprof.gz"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\004\\components\\filestream-monitoring\\global_processors.txt"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\004\\components\\filestream-monitoring\\beat_metrics.json"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\004\\components\\filestream-monitoring\\goroutine.pprof.gz"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\004\\components\\filestream-monitoring\\threadcreate.pprof.gz"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\004\\components\\filestream-monitoring\\heap.pprof.gz"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\004\\components\\filestream-monitoring\\filestream-monitoring-agent"
    event_logging_test.go:367: creating directory "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\004\\components\\filestream-monitoring\\filestream-monitoring-agent"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\004\\components\\filestream-monitoring\\filestream-monitoring"
    event_logging_test.go:367: creating directory "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\004\\components\\filestream-monitoring\\filestream-monitoring"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\004\\logs"
    event_logging_test.go:367: creating directory "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\004\\logs"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\004\\logs\\elastic-agent-852d47"
    event_logging_test.go:367: creating directory "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\004\\logs\\elastic-agent-852d47"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\004\\logs\\elastic-agent-852d47\\beat"
    event_logging_test.go:367: creating directory "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\004\\logs\\elastic-agent-852d47\\beat"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\004\\logs\\elastic-agent-852d47\\elastic-agent-20240820.ndjson"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\004\\logs\\elastic-agent-852d47\\elastic-agent-watcher-20240820.ndjson"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\004\\logs\\elastic-agent-852d47\\events"
    event_logging_test.go:367: creating directory "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\004\\logs\\elastic-agent-852d47\\events"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\004\\logs\\elastic-agent-852d47\\events\\elastic-agent-event-log-20240820.ndjson"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\004\\logs\\elastic-agent-852d47\\http"
    event_logging_test.go:367: creating directory "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\004\\logs\\elastic-agent-852d47\\http"
    fixture.go:657: >> running binary with: [C:\Users\windows\AppData\Local\Temp\TestEventLogFile1155159046\002\elastic-agent-8.16.0-SNAPSHOT-windows-x86_64\elastic-agent.exe diagnostics collect --exclude-events]
    event_logging_test.go:361: diagnostic command completed with output 
        "Created diagnostics archive \"elastic-agent-diagnostics-2024-08-20T19-43-41Z-00.zip\"\n***** WARNING *****\nCreated archive may contain plain text credentials.\nEnsure that files in archive are redacted before sharing.\n*******************\n"
    event_logging_test.go:361: checking directory "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\005" for the generated diagnostics archive
    event_logging_test.go:361: Found "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\005\\elastic-agent-diagnostics-2024-08-20T19-43-41Z-00.zip" diagnostic archive.
    event_logging_test.go:367: extracting diagnostic archive in dir "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\006"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\006\\version.txt"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\006\\package.version"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\006\\goroutine.pprof.gz"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\006\\heap.pprof.gz"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\006\\allocs.pprof.gz"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\006\\threadcreate.pprof.gz"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\006\\block.pprof.gz"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\006\\mutex.pprof.gz"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\006\\agent-info.yaml"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\006\\local-config.yaml"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\006\\pre-config.yaml"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\006\\variables.yaml"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\006\\computed-config.yaml"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\006\\components-expected.yaml"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\006\\components-actual.yaml"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\006\\state.yaml"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\006\\components"
    event_logging_test.go:367: creating directory "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\006\\components"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\006\\components\\filestream-monitoring"
    event_logging_test.go:367: creating directory "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\006\\components\\filestream-monitoring"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\006\\components\\filestream-monitoring\\allocs.pprof.gz"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\006\\components\\filestream-monitoring\\block.pprof.gz"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\006\\components\\filestream-monitoring\\global_processors.txt"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\006\\components\\filestream-monitoring\\mutex.pprof.gz"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\006\\components\\filestream-monitoring\\beat_metrics.json"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\006\\components\\filestream-monitoring\\heap.pprof.gz"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\006\\components\\filestream-monitoring\\goroutine.pprof.gz"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\006\\components\\filestream-monitoring\\threadcreate.pprof.gz"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\006\\components\\filestream-monitoring\\beat-rendered-config.yml"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\006\\components\\filestream-monitoring\\input_metrics.json"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\006\\components\\filestream-monitoring\\filestream-monitoring-agent"
    event_logging_test.go:367: creating directory "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\006\\components\\filestream-monitoring\\filestream-monitoring-agent"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\006\\components\\filestream-monitoring\\filestream-monitoring"
    event_logging_test.go:367: creating directory "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\006\\components\\filestream-monitoring\\filestream-monitoring"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\006\\components\\filestream-default"
    event_logging_test.go:367: creating directory "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\006\\components\\filestream-default"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\006\\components\\filestream-default\\input_metrics.json"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\006\\components\\filestream-default\\beat-rendered-config.yml"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\006\\components\\filestream-default\\threadcreate.pprof.gz"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\006\\components\\filestream-default\\global_processors.txt"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\006\\components\\filestream-default\\beat_metrics.json"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\006\\components\\filestream-default\\heap.pprof.gz"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\006\\components\\filestream-default\\block.pprof.gz"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\006\\components\\filestream-default\\mutex.pprof.gz"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\006\\components\\filestream-default\\allocs.pprof.gz"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\006\\components\\filestream-default\\goroutine.pprof.gz"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\006\\components\\filestream-default\\your-input-id"
    event_logging_test.go:367: creating directory "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\006\\components\\filestream-default\\your-input-id"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\006\\components\\filestream-default\\filestream-default"
    event_logging_test.go:367: creating directory "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\006\\components\\filestream-default\\filestream-default"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\006\\components\\beat-metrics-monitoring"
    event_logging_test.go:367: creating directory "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\006\\components\\beat-metrics-monitoring"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\006\\components\\beat-metrics-monitoring\\global_processors.txt"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\006\\components\\beat-metrics-monitoring\\heap.pprof.gz"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\006\\components\\beat-metrics-monitoring\\threadcreate.pprof.gz"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\006\\components\\beat-metrics-monitoring\\mutex.pprof.gz"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\006\\components\\beat-metrics-monitoring\\beat_metrics.json"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\006\\components\\beat-metrics-monitoring\\input_metrics.json"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\006\\components\\beat-metrics-monitoring\\beat-rendered-config.yml"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\006\\components\\beat-metrics-monitoring\\goroutine.pprof.gz"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\006\\components\\beat-metrics-monitoring\\allocs.pprof.gz"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\006\\components\\beat-metrics-monitoring\\block.pprof.gz"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\006\\components\\beat-metrics-monitoring\\metrics-monitoring-beats"
    event_logging_test.go:367: creating directory "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\006\\components\\beat-metrics-monitoring\\metrics-monitoring-beats"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\006\\components\\beat-metrics-monitoring\\beat-metrics-monitoring"
    event_logging_test.go:367: creating directory "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\006\\components\\beat-metrics-monitoring\\beat-metrics-monitoring"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\006\\components\\http-metrics-monitoring"
    event_logging_test.go:367: creating directory "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\006\\components\\http-metrics-monitoring"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\006\\components\\http-metrics-monitoring\\global_processors.txt"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\006\\components\\http-metrics-monitoring\\goroutine.pprof.gz"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\006\\components\\http-metrics-monitoring\\beat_metrics.json"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\006\\components\\http-metrics-monitoring\\input_metrics.json"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\006\\components\\http-metrics-monitoring\\threadcreate.pprof.gz"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\006\\components\\http-metrics-monitoring\\beat-rendered-config.yml"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\006\\components\\http-metrics-monitoring\\block.pprof.gz"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\006\\components\\http-metrics-monitoring\\mutex.pprof.gz"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\006\\components\\http-metrics-monitoring\\heap.pprof.gz"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\006\\components\\http-metrics-monitoring\\allocs.pprof.gz"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\006\\components\\http-metrics-monitoring\\metrics-monitoring-agent"
    event_logging_test.go:367: creating directory "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\006\\components\\http-metrics-monitoring\\metrics-monitoring-agent"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\006\\components\\http-metrics-monitoring\\http-metrics-monitoring"
    event_logging_test.go:367: creating directory "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\006\\components\\http-metrics-monitoring\\http-metrics-monitoring"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\006\\logs"
    event_logging_test.go:367: creating directory "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\006\\logs"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\006\\logs\\elastic-agent-852d47"
    event_logging_test.go:367: creating directory "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\006\\logs\\elastic-agent-852d47"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\006\\logs\\elastic-agent-852d47\\beat"
    event_logging_test.go:367: creating directory "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\006\\logs\\elastic-agent-852d47\\beat"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\006\\logs\\elastic-agent-852d47\\elastic-agent-20240820.ndjson"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\006\\logs\\elastic-agent-852d47\\elastic-agent-watcher-20240820.ndjson"
    event_logging_test.go:367: unzipping file "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\006\\logs\\elastic-agent-852d47\\http"
    event_logging_test.go:367: creating directory "C:\\Users\\windows\\AppData\\Local\\Temp\\TestEventLogFile1155159046\\006\\logs\\elastic-agent-852d47\\http"
    event_logging_test.go:123: Elastic-Agent output:
    event_logging_test.go:124: 
--- FAIL: TestEventLogFile (31.35s)
elasticmachine commented 3 months ago

Pinging @elastic/elastic-agent (Team:Elastic-Agent)

ycombinator commented 3 months ago

Once this issue is resolved, please revert https://github.com/elastic/elastic-agent/pull/5339.