I've just installed packetbeats on our Google Compute Engine, and I have been watching a days worth of visualizations.
The visualization for "Errors vs successful transactions [Packetbeat] ECS" has a much higher error rate than I expected, around 40-60% errors. The majority of which are from process.name: systemd-resolved with two error.messages
- Another query with the same DNS ID from this client was received so this query was closed without receiving a response
- Response: received without an associated Query
My google-fu is failing me and I can find nothing with either of these two error messages.
Has anyone else noticed similar problems?
Is this something wrong with my configuration of packetbeats?
Or is this something I need to investigate systemd-resolved for?