Hi all, I have something weird since upgrade to 7.8 of auditbeat, below the log that produce by auditbeat I use Centos 7.6 with kernel Linux sync-02 3.10.0-1062.18.1.el7.x86_64 #1 SMP Tue Mar 17 23:49:17 UTC 2020 x86_64 x86_64 x86_64 GNU/Linux My config of auditbeat like below for auditbeat.yml …

Just report what I've done... Downgrade the auditbeat into version 7.6.2 and the socket event come back again and stable. Regards, Fadjar Tandabawana

Discuss the Elastic Stack

Auditbeat 7.8.0 socket only send data in 2 minutes

Elastic Stack Beats

system (system) Closed July 30, 2020, 7:18am 4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
Auditbeat - 120% CPU? Beats auditbeat	30	3753	August 1, 2020
[Auditbeat] Memory leak in 7.5.2 Beats	20	1576	November 4, 2022
Can't seem to use socket dataset on rocky linux Beats auditbeat	8	1086	March 30, 2022
AuditBeat Will Not Start Beats	2	1664	February 20, 2020
System/socket module stops auditbeat 7.4 from starting (ipv6 detection) Beats auditbeat	10	1887	October 30, 2019

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Auditbeat 7.8.0 socket only send data in 2 minutes

Related topics