I'm configuring this through kibana > fleet > agent policies
As you can see on this screenshot I tried doing the filtering according to the doc but it doesn't change anything, hence why I disabled it
I'm configuring this through kibana > fleet > agent policies
As you can see on this screenshot I tried doing the filtering according to the doc but it doesn't change anything, hence why I disabled it
sorry - i had been hit by Corona
Today i checked my instalation and the problem with "GetDiskFreeSpaceEx failed" is still in the logs.
To have an up to date system, i will now update my environment to agent 8.11.3 and than get all integrations to the latest.
Than i can check again...
I'm going to see if I can recreate the issue. It seems like it should be a straight forward fix, so perplexed why it isn't working. It might take me a few days before I get a chance to take a look at it though.
i need about 1 more hour so that i have the relevant systems updated and checked about persistence of the problem.
I came across this other post 265613.
From what I understand, it used to be an issue on older version of metricbeat, but ignoring certain filesystem types should have fixed that. Maybe my changes on kibana aren't taken into account by my agents ? Any idea on how I can check that ?
Also, I replayed the ps1 script shared by anderssonjohan and I have the same output as he shared
so now - agent is 8.11.3 and all integrations up to date. Problem still exists.
{
"@timestamp": [
"2023-12-13T14:00:28.408Z"
],
"agent.ephemeral_id": [
"0b3e15ad-5326-452a-af83-df642a7a3d67"
],
"agent.id": [
"1cdef3fc-1562-4880-a0e7-d7f50fee0d6b"
],
"agent.name": [
"Z440"
],
"agent.type": [
"filebeat"
],
"agent.version": [
"8.11.3"
],
"component.binary": [
"metricbeat"
],
"component.dataset": [
"elastic_agent.metricbeat"
],
"component.id": [
"system/metrics-default"
],
"component.type": [
"system/metrics"
],
"data_stream.dataset": [
"elastic_agent.metricbeat"
],
"data_stream.namespace": [
"default"
],
"data_stream.type": [
"logs"
],
"ecs.version": [
"8.0.0"
],
"elastic_agent.id": [
"1cdef3fc-1562-4880-a0e7-d7f50fee0d6b"
],
"elastic_agent.snapshot": [
false
],
"elastic_agent.version": [
"8.11.3"
],
"event.agent_id_status": [
"verified"
],
"event.dataset": [
"elastic_agent.metricbeat"
],
"event.ingested": [
"2023-12-13T14:00:30.000Z"
],
"host.architecture": [
"x86_64"
],
"host.hostname": [
"z440"
],
"host.id": [
"826188d2-e4f6-4025-9514-686022babc2d"
],
"host.ip": [
"fd77:ade4:e825:0:bbdf:7d76:2a98:387e",
"fd77:ade4:e825:0:f890:4ace:8aaf:1582",
"fd77:ade4:e825:0:6881:8a0c:9bfe:6687",
"fe80::64bd:5247:7486:1fa",
"192.168.0.89",
"fe80::e703:f3ea:355f:a986",
"169.254.172.144",
"fe80::ba8c:fe9c:cca3:e879",
"172.17.240.1",
"fe80::2883:60e:c83f:321b",
"172.19.0.1",
"fe80::d796:1ae8:9ddc:4b69",
"172.23.32.1"
],
"host.mac": [
"00-15-5D-25-34-CD",
"00-15-5D-6A-C7-72",
"00-15-5D-A5-4B-30",
"3C-52-82-77-12-96",
"F4-4E-FC-A3-13-89"
],
"host.name": [
"z440"
],
"host.os.build": [
"22631.2861"
],
"host.os.family": [
"windows"
],
"host.os.kernel": [
"10.0.22621.2861 (WinBuild.160101.0800)"
],
"host.os.name": [
"Windows 11 Enterprise"
],
"host.os.name.text": [
"Windows 11 Enterprise"
],
"host.os.platform": [
"windows"
],
"host.os.type": [
"windows"
],
"host.os.version": [
"10.0"
],
"input.type": [
"filestream"
],
"log.file.idxhi": [
"2293760"
],
"log.file.idxlo": [
"415939"
],
"log.file.path": [
"C:\\Program Files\\Elastic\\Agent\\data\\elastic-agent-f4f6fb\\logs\\elastic-agent-20231213.ndjson"
],
"log.file.vol": [
"339111792"
],
"log.level": [
"error"
],
"log.logger": [
"system.filesystem"
],
"log.offset": [
220110
],
"log.origin.file.line": [
90
],
"log.origin.file.name": [
"filesystem/filesystem.go"
],
"log.source": [
"system/metrics-default"
],
"message": [
"error getting filesystem usage for I:\\: GetDiskFreeSpaceEx failed: Das Gerät ist nicht bereit."
],
"service.name": [
"metricbeat"
],
"_id": "G1R6Y4wB2vdq5j6moMdR",
"_index": ".ds-logs-elastic_agent.metricbeat-default-2023.12.13-000016",
"_score": null
}
Here's the current config in integration "System":
I have this same problem, I have added unavailable and unknown into my fleet config, but the errors persist. Did anyone ever find a solution to this?
© 2020. All Rights Reserved - Elasticsearch
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.