Auditbeat system metric error

Elastic Stack Beats
1

so we have a 6.7.1 es cluster. using auditbeat 6.7.1 i was able to run the kibana dashboard install with ./auditbeat setup. however it refuses to start because of no metricsets configured for system.

Someone else had this issue. I found any version of auditbeat 6.7.x i used didnt work, i had to download 6.6.2 to get system data ingested . (granted this is not supproted and some of the dashboard vizs didnt work but it was better than nothing)

was system metrics removed in 6.7.x for auditbeat?

2

So upgrading to auditbeat 6.8.0 makes system metrics work. With the exception of Linux Mint. which apparently there is already an issue for.

3

Hi @nt-josh, sorry for the troubles. Is Auditbeat now working for you?

If it is the issue in Github you link to (error message Exiting: 1 error: 1 error: this metricset does not support OS family) you can circumvent it by commenting out the package dataset of the system module. We are already working on a fix.

4

This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.