search

utmstack / UTMStack

Customizable SIEM and XDR powered by Real-Time correlation and Threat Intelligence
https://utmstack.com
GNU Affero General Public License v3.0
207 stars 21 forks source link

[BUG] Windows Agent Log File Huge #577

Closed amanzella closed 5 months ago

amanzella commented 5 months ago

We've noticed that the log file beats_windows_agent under C:\Program Files\UTMStack\UTMStack Agent\logs_process is huge. It's currently 25GB in size. Does the agent not clean up its logs?

c3s4rfred commented 5 months ago

Hi @amanzella, can you send us your agent version, send us the content of this file -> C:\Program Files\UTMStack\UTMStack Agent\versions.json

amanzella commented 5 months ago

@c3s4rfred

{"testing": {"beat_version": "8.5.3", "windows_dependencies": "agent_updates/testing/windows/dependencies.zip", "linux_dependencies": "agent_updates/testing/linux/dependencies.zip", "agent_version": "202311020758", "windows_agent": "agent_updates/testing/windows/utmstack-windows.exe", "linux_agent": "agent_updates/testing/linux/utmstack-linux"}, "alpha": {"beat_version": "8.5.3", "windows_dependencies": "agent_updates/alpha/windows/dependencies.zip", "linux_dependencies": "agent_updates/alpha/linux/dependencies.zip", "agent_version": "202311020758", "windows_agent": "agent_updates/alpha/windows/utmstack-windows.exe", "linux_agent": "agent_updates/alpha/linux/utmstack-linux"}, "release": {"beat_version": "8.5.3", "windows_dependencies": "agent_updates/release/windows/dependencies.zip", "linux_dependencies": "agent_updates/release/linux/dependencies.zip", "agent_version": "10.1.1", "windows_agent": "agent_updates/release/windows/utmstack-windows.exe", "linux_agent": "agent_updates/release/linux/utmstack-linux"}}

c3s4rfred commented 5 months ago

@amanzella you're using an old UTMStack version, that issue was fixed in later versions, please install the latest version and let us know if solved.