# How to maintain processes in Strigo

**URL:** <https://discuss.elastic.co/t/how-to-maintain-processes-in-strigo/281170>\
**Category:** Elastic Training\
**Created:** [August 12, 2021, 8:19am UTC](https://discuss.elastic.co/t/how-to-maintain-processes-in-strigo/281170 "2021-08-12T08:19:23Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![goredb](https://avatars.discourse-cdn.com/v4/letter/g/96bed5/32.png) [@goredb](https://discuss.elastic.co/u/goredb)\
**Post date:** [August 12, 2021, 8:19am UTC](https://discuss.elastic.co/t/how-to-maintain-processes-in-strigo/281170/1 "2021-08-12T08:19:23Z")

</div>

Hi,

My experience with Strigo is that all processes are killed when Strigo is paused in any way (either automatically or manual pause). As a result all data ingest etc is stopped.  
This happens despite that they are started as background processes (&).  
The lab documentation on the other hand, states that the processes shall be kept running.  
The problem is very time consuming as trying to achieve ch 6 labs relying on earlier processes.

The question is then how to maintain processes in Strigo?

---

<div class="post-metadata">

**Author:** ![dinyes](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dinyes/32/42906_2.png) [@dinyes](https://discuss.elastic.co/u/dinyes)\
**Post date:** [August 13, 2021, 3:12pm UTC](https://discuss.elastic.co/t/how-to-maintain-processes-in-strigo/281170/2 "2021-08-13T15:12:09Z")

</div>

Maintaining the beats has proven to be difficult for this course in particular, and we haven't really found an effective solution so far. So, it's a manual process that each student will have to start up the beats on various servers for various services each time.

---

<div class="post-metadata">

**Author:** ![goredb](https://avatars.discourse-cdn.com/v4/letter/g/96bed5/32.png) [@goredb](https://discuss.elastic.co/u/goredb)\
**Post date:** [August 13, 2021, 4:31pm UTC](https://discuss.elastic.co/t/how-to-maintain-processes-in-strigo/281170/3 "2021-08-13T16:31:46Z")

</div>

1. I would argue that the documentation should be updated in this case to present the pre-processes to be started. Not that each student will have to be Sherlock Holmes to track what has to be executed. Potentially the beats are quite straight forward but then there are various machines etc. The APM is more complex as well.

2. It is then almost impossible to execute the ML labs as sufficient data is required for ML which cannot be maintained due to these limitations. It thus seems that ch 6 is out of context.

---

<div class="post-metadata">

**Author:** ![dinyes](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dinyes/32/42906_2.png) [@dinyes](https://discuss.elastic.co/u/dinyes)\
**Post date:** [August 13, 2021, 7:25pm UTC](https://discuss.elastic.co/t/how-to-maintain-processes-in-strigo/281170/4 "2021-08-13T19:25:31Z")

</div>

I'll submit a bug report about the documentation.

As to the ML labs, ML anomaly detection requires, of course, anonmalies to detect. Even in a live delivery, with data being collected over a couple days, we sometimes get no anomalies, because the items we're collecting data about are relatively stable and generally don't spike, for instance, CPU usage, or ping times, or hosts dropping for an hour. If you do the lab and understand the processs for creating an ML job, then you've gotten about 90% of the value of the lab.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [September 12, 2021, 7:26pm UTC](https://discuss.elastic.co/t/how-to-maintain-processes-in-strigo/281170/5 "2021-09-12T19:26:18Z")

</div>

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.