Hi!
I'm running the Windows DNS integration and was successfully ingesting DNS logs from three different servers using Elastic Agent 8.14.3. After upgrading to 8.17.3, I no longer receive DNS logs from these servers. However, I still get Sysmon logs from them.
Even downgrading back to 8.14.3 didn't resolve the issue—DNS logs still aren't showing up in Elasticsearch. The only anomaly I found in the logs is that the Elastic Agent stream for DNS logs has the status STARTING instead of HEALTHY (as shown in the agent's JSON status file).
Any clues out there? I'd really appreciate any help!
Cheers,
Ben
