I'm having problems getting my Zeek logs into Kibana using an Elastic Agent that is not Fleet Managed. I'm running the latest and greatest versions of everything and I confirmed I can see dashboard information about the agent itself, however the Zeek dashboards remain blank or they have no data. The Zeek log path is correctly specified. Any thoughts on how to troubleshoot?
Welcome to our community! 
It'd be great if you could share your config and the agent logs, so we can see what you have setup and what's happening.
Thanks workolm!
So this is what I have for the elastic-agent.yml:
id: 39030ca0-cbd0-11ec-b97a-fdd472340f3e
revision: 2
outputs:
default:
type: elasticsearch
hosts:
- 'https://<ElasticSearch IP>:9200'
ssl.ca_trusted_fingerprint: <fingerprint>
username: 'elastic'
password: '<password>'
output_permissions:
default:
_elastic_agent_monitoring:
indices:
- names:
- logs-elastic_agent.apm_server-default
privileges: &ref_0
- auto_configure
- create_doc
- names:
- metrics-elastic_agent.apm_server-default
privileges: *ref_0
- names:
- logs-elastic_agent.auditbeat-default
privileges: *ref_0
- names:
- metrics-elastic_agent.auditbeat-default
privileges: *ref_0
- names:
- logs-elastic_agent-default
privileges: *ref_0
- names:
- metrics-elastic_agent.elastic_agent-default
privileges: *ref_0
- names:
- metrics-elastic_agent.endpoint_security-default
privileges: *ref_0
- names:
- logs-elastic_agent.endpoint_security-default
privileges: *ref_0
- names:
- logs-elastic_agent.filebeat-default
privileges: *ref_0
- names:
- metrics-elastic_agent.filebeat-default
privileges: *ref_0
- names:
- logs-elastic_agent.fleet_server-default
privileges: *ref_0
- names:
- metrics-elastic_agent.fleet_server-default
privileges: *ref_0
- names:
- logs-elastic_agent.heartbeat-default
privileges: *ref_0
- names:
- metrics-elastic_agent.heartbeat-default
privileges: *ref_0
- names:
- logs-elastic_agent.metricbeat-default
privileges: *ref_0
- names:
- metrics-elastic_agent.metricbeat-default
privileges: *ref_0
- names:
- logs-elastic_agent.osquerybeat-default
privileges: *ref_0
- names:
- metrics-elastic_agent.osquerybeat-default
privileges: *ref_0
- names:
- logs-elastic_agent.packetbeat-default
privileges: *ref_0
- names:
- metrics-elastic_agent.packetbeat-default
privileges: *ref_0
_elastic_agent_checks:
cluster:
- monitor
system-2:
indices:
- names:
- logs-system.auth-default
privileges: *ref_0
- names:
- logs-system.syslog-default
privileges: *ref_0
- names:
- logs-system.application-default
privileges: *ref_0
- names:
- logs-system.security-default
privileges: *ref_0
- names:
- logs-system.system-default
privileges: *ref_0
- names:
- metrics-system.cpu-default
privileges: *ref_0
- names:
- metrics-system.diskio-default
privileges: *ref_0
- names:
- metrics-system.filesystem-default
privileges: *ref_0
- names:
- metrics-system.fsstat-default
privileges: *ref_0
- names:
- metrics-system.load-default
privileges: *ref_0
- names:
- metrics-system.memory-default
privileges: *ref_0
- names:
- metrics-system.network-default
privileges: *ref_0
- names:
- metrics-system.process-default
privileges: *ref_0
- names:
- metrics-system.process.summary-default
privileges: *ref_0
- names:
- metrics-system.socket_summary-default
privileges: *ref_0
- names:
- metrics-system.uptime-default
privileges: *ref_0
zeek-1:
indices:
- names:
- logs-zeek.capture_loss-default
privileges: *ref_0
- names:
- logs-zeek.connection-default
privileges: *ref_0
- names:
- logs-zeek.dce_rpc-default
privileges: *ref_0
- names:
- logs-zeek.dhcp-default
privileges: *ref_0
- names:
- logs-zeek.dnp3-default
privileges: *ref_0
- names:
- logs-zeek.dns-default
privileges: *ref_0
- names:
- logs-zeek.dpd-default
privileges: *ref_0
- names:
- logs-zeek.files-default
privileges: *ref_0
- names:
- logs-zeek.ftp-default
privileges: *ref_0
- names:
- logs-zeek.http-default
privileges: *ref_0
- names:
- logs-zeek.intel-default
privileges: *ref_0
- names:
- logs-zeek.irc-default
privileges: *ref_0
- names:
- logs-zeek.kerberos-default
privileges: *ref_0
- names:
- logs-zeek.modbus-default
privileges: *ref_0
- names:
- logs-zeek.mysql-default
privileges: *ref_0
- names:
- logs-zeek.notice-default
privileges: *ref_0
- names:
- logs-zeek.ntlm-default
privileges: *ref_0
- names:
- logs-zeek.ntp-default
privileges: *ref_0
- names:
- logs-zeek.ocsp-default
privileges: *ref_0
- names:
- logs-zeek.pe-default
privileges: *ref_0
- names:
- logs-zeek.radius-default
privileges: *ref_0
- names:
- logs-zeek.rdp-default
privileges: *ref_0
- names:
- logs-zeek.rfb-default
privileges: *ref_0
- names:
- logs-zeek.signature-default
privileges: *ref_0
- names:
- logs-zeek.sip-default
privileges: *ref_0
- names:
- logs-zeek.smb_cmd-default
privileges: *ref_0
- names:
- logs-zeek.smb_files-default
privileges: *ref_0
- names:
- logs-zeek.smb_mapping-default
privileges: *ref_0
- names:
- logs-zeek.smtp-default
privileges: *ref_0
- names:
- logs-zeek.snmp-default
privileges: *ref_0
- names:
- logs-zeek.socks-default
privileges: *ref_0
- names:
- logs-zeek.ssh-default
privileges: *ref_0
- names:
- logs-zeek.ssl-default
privileges: *ref_0
- names:
- logs-zeek.stats-default
privileges: *ref_0
- names:
- logs-zeek.syslog-default
privileges: *ref_0
- names:
- logs-zeek.traceroute-default
privileges: *ref_0
- names:
- logs-zeek.tunnel-default
privileges: *ref_0
- names:
- logs-zeek.weird-default
privileges: *ref_0
- names:
- logs-zeek.x509-default
privileges: *ref_0
agent:
monitoring:
enabled: true
use_output: default
namespace: default
logs: true
metrics: true
inputs:
- id: logfile-system-9d1a0301-7eda-4f4f-a473-46da2abad16c
name: system-2
revision: 1
type: logfile
use_output: default
meta:
package:
name: system
version: 1.6.4
data_stream:
namespace: default
streams:
- id: logfile-system.auth-9d1a0301-7eda-4f4f-a473-46da2abad16c
data_stream:
dataset: system.auth
type: logs
paths:
- /var/log/auth.log*
- /var/log/secure*
exclude_files:
- .gz$
multiline:
pattern: ^\s
match: after
processors:
- add_locale: null
- id: logfile-system.syslog-9d1a0301-7eda-4f4f-a473-46da2abad16c
data_stream:
dataset: system.syslog
type: logs
paths:
- /var/log/messages*
- /var/log/syslog*
exclude_files:
- .gz$
multiline:
pattern: ^\s
match: after
processors:
- add_locale: null
- id: winlog-system-9d1a0301-7eda-4f4f-a473-46da2abad16c
name: system-2
revision: 1
type: winlog
use_output: default
meta:
package:
name: system
version: 1.6.4
data_stream:
namespace: default
streams:
- id: winlog-system.application-9d1a0301-7eda-4f4f-a473-46da2abad16c
name: Application
data_stream:
dataset: system.application
type: logs
condition: '${host.platform} == ''windows'''
ignore_older: 72h
tags: null
- id: winlog-system.security-9d1a0301-7eda-4f4f-a473-46da2abad16c
name: Security
data_stream:
dataset: system.security
type: logs
condition: '${host.platform} == ''windows'''
tags: null
- id: winlog-system.system-9d1a0301-7eda-4f4f-a473-46da2abad16c
name: System
data_stream:
dataset: system.system
type: logs
condition: '${host.platform} == ''windows'''
tags: null
- id: system/metrics-system-9d1a0301-7eda-4f4f-a473-46da2abad16c
name: system-2
revision: 1
type: system/metrics
use_output: default
meta:
package:
name: system
version: 1.6.4
data_stream:
namespace: default
streams:
- id: system/metrics-system.cpu-9d1a0301-7eda-4f4f-a473-46da2abad16c
data_stream:
dataset: system.cpu
type: metrics
metricsets:
- cpu
cpu.metrics:
- percentages
- normalized_percentages
period: 10s
- id: system/metrics-system.diskio-9d1a0301-7eda-4f4f-a473-46da2abad16c
data_stream:
dataset: system.diskio
type: metrics
metricsets:
- diskio
diskio.include_devices: null
period: 10s
- id: system/metrics-system.filesystem-9d1a0301-7eda-4f4f-a473-46da2abad16c
data_stream:
dataset: system.filesystem
type: metrics
metricsets:
- filesystem
period: 1m
processors:
- drop_event.when.regexp:
system.filesystem.mount_point: ^/(sys|cgroup|proc|dev|etc|host|lib|snap)($|/)
- id: system/metrics-system.fsstat-9d1a0301-7eda-4f4f-a473-46da2abad16c
data_stream:
dataset: system.fsstat
type: metrics
metricsets:
- fsstat
period: 1m
processors:
- drop_event.when.regexp:
system.fsstat.mount_point: ^/(sys|cgroup|proc|dev|etc|host|lib|snap)($|/)
- id: system/metrics-system.load-9d1a0301-7eda-4f4f-a473-46da2abad16c
data_stream:
dataset: system.load
type: metrics
metricsets:
- load
condition: '${host.platform} != ''windows'''
period: 10s
- id: system/metrics-system.memory-9d1a0301-7eda-4f4f-a473-46da2abad16c
data_stream:
dataset: system.memory
type: metrics
metricsets:
- memory
period: 10s
- id: system/metrics-system.network-9d1a0301-7eda-4f4f-a473-46da2abad16c
data_stream:
dataset: system.network
type: metrics
metricsets:
- network
period: 10s
network.interfaces: null
- id: system/metrics-system.process-9d1a0301-7eda-4f4f-a473-46da2abad16c
data_stream:
dataset: system.process
type: metrics
metricsets:
- process
period: 10s
process.include_top_n.by_cpu: 5
process.include_top_n.by_memory: 5
process.cmdline.cache.enabled: true
process.cgroups.enabled: false
process.include_cpu_ticks: false
processes:
- .*
- id: >-
system/metrics-system.process.summary-9d1a0301-7eda-4f4f-a473-46da2abad16c
data_stream:
dataset: system.process.summary
type: metrics
metricsets:
- process_summary
period: 10s
- id: >-
system/metrics-system.socket_summary-9d1a0301-7eda-4f4f-a473-46da2abad16c
data_stream:
dataset: system.socket_summary
type: metrics
metricsets:
- socket_summary
period: 10s
- id: system/metrics-system.uptime-9d1a0301-7eda-4f4f-a473-46da2abad16c
data_stream:
dataset: system.uptime
type: metrics
metricsets:
- uptime
period: 10s
- id: logfile-zeek-62a2687f-ca35-4a0a-9190-300a79db50ab
name: zeek-1
revision: 1
type: logfile
use_output: default
meta:
package:
name: zeek
version: 1.8.0
data_stream:
namespace: default
streams:
- id: logfile-zeek.capture_loss-62a2687f-ca35-4a0a-9190-300a79db50ab
data_stream:
dataset: zeek.capture_loss
type: logs
paths:
- /ZeekLogs/current/capture_loss.log
exclude_files:
- .gz$
tags:
- zeek-capture-loss
- id: logfile-zeek.connection-62a2687f-ca35-4a0a-9190-300a79db50ab
data_stream:
dataset: zeek.connection
type: logs
paths:
- /ZeekLogs/current/conn.log
exclude_files:
- .gz$
tags:
- zeek-connection
- id: logfile-zeek.dce_rpc-62a2687f-ca35-4a0a-9190-300a79db50ab
data_stream:
dataset: zeek.dce_rpc
type: logs
paths:
- /ZeekLogs/current/dce_rpc.log
exclude_files:
- .gz$
tags:
- zeek-dce-rpc
- id: logfile-zeek.dhcp-62a2687f-ca35-4a0a-9190-300a79db50ab
data_stream:
dataset: zeek.dhcp
type: logs
paths:
- /ZeekLogs/current/dhcp.log
exclude_files:
- .gz$
tags:
- zeek-dhcp
- id: logfile-zeek.dnp3-62a2687f-ca35-4a0a-9190-300a79db50ab
data_stream:
dataset: zeek.dnp3
type: logs
paths:
- /ZeekLogs/current/dnp3.log
exclude_files:
- .gz$
tags:
- zeek-dnp3
- id: logfile-zeek.dns-62a2687f-ca35-4a0a-9190-300a79db50ab
data_stream:
dataset: zeek.dns
type: logs
paths:
- /ZeekLogs/current/dns.log
exclude_files:
- .gz$
tags:
- zeek-dns
- id: logfile-zeek.dpd-62a2687f-ca35-4a0a-9190-300a79db50ab
data_stream:
dataset: zeek.dpd
type: logs
paths:
- /ZeekLogs/current/dpd.log
exclude_files:
- .gz$
tags:
- zeek-dpd
- id: logfile-zeek.files-62a2687f-ca35-4a0a-9190-300a79db50ab
data_stream:
dataset: zeek.files
type: logs
paths:
- /ZeekLogs/current/files.log
exclude_files:
- .gz$
tags:
- zeek-files
- id: logfile-zeek.ftp-62a2687f-ca35-4a0a-9190-300a79db50ab
data_stream:
dataset: zeek.ftp
type: logs
paths:
- /ZeekLogs/current/ftp.log
exclude_files:
- .gz$
tags:
- zeek-ftp
- id: logfile-zeek.http-62a2687f-ca35-4a0a-9190-300a79db50ab
data_stream:
dataset: zeek.http
type: logs
paths:
- /ZeekLogs/current/http.log
exclude_files:
- .gz$
tags:
- zeek-http
- id: logfile-zeek.intel-62a2687f-ca35-4a0a-9190-300a79db50ab
data_stream:
dataset: zeek.intel
type: logs
paths:
- /ZeekLogs/current/intel.log
exclude_files:
- .gz$
tags:
- zeek-intel
- id: logfile-zeek.irc-62a2687f-ca35-4a0a-9190-300a79db50ab
data_stream:
dataset: zeek.irc
type: logs
paths:
- /ZeekLogs/current/irc.log
exclude_files:
- .gz$
tags:
- zeek-irc
- id: logfile-zeek.kerberos-62a2687f-ca35-4a0a-9190-300a79db50ab
data_stream:
dataset: zeek.kerberos
type: logs
paths:
- /ZeekLogs/current/kerberos.log
exclude_files:
- .gz$
tags:
- zeek-kerberos
- id: logfile-zeek.modbus-62a2687f-ca35-4a0a-9190-300a79db50ab
data_stream:
dataset: zeek.modbus
type: logs
paths:
- /ZeekLogs/current/modbus.log
exclude_files:
- .gz$
tags:
- zeek-modbus
- id: logfile-zeek.mysql-62a2687f-ca35-4a0a-9190-300a79db50ab
data_stream:
dataset: zeek.mysql
type: logs
paths:
- /ZeekLogs/current/mysql.log
exclude_files:
- .gz$
tags:
- zeek-mysql
- id: logfile-zeek.notice-62a2687f-ca35-4a0a-9190-300a79db50ab
data_stream:
dataset: zeek.notice
type: logs
paths:
- /ZeekLogs/current/notice.log
exclude_files:
- .gz$
tags:
- zeek-notice
- id: logfile-zeek.ntlm-62a2687f-ca35-4a0a-9190-300a79db50ab
data_stream:
dataset: zeek.ntlm
type: logs
paths:
- /ZeekLogs/current/ntlm.log
exclude_files:
- .gz$
tags:
- zeek-ntlm
- id: logfile-zeek.ntp-62a2687f-ca35-4a0a-9190-300a79db50ab
data_stream:
dataset: zeek.ntp
type: logs
paths:
- /ZeekLogs/current/ntp.log
exclude_files:
- .gz$
tags:
- zeek-ntp
- id: logfile-zeek.ocsp-62a2687f-ca35-4a0a-9190-300a79db50ab
data_stream:
dataset: zeek.ocsp
type: logs
paths:
- /ZeekLogs/current/ocsp.log
exclude_files:
- .gz$
tags:
- zeek-ocsp
- id: logfile-zeek.pe-62a2687f-ca35-4a0a-9190-300a79db50ab
data_stream:
dataset: zeek.pe
type: logs
paths:
- /ZeekLogs/current/pe.log
exclude_files:
- .gz$
tags:
- zeek-pe
- id: logfile-zeek.radius-62a2687f-ca35-4a0a-9190-300a79db50ab
data_stream:
dataset: zeek.radius
type: logs
paths:
- /ZeekLogs/current/radius.log
exclude_files:
- .gz$
tags:
- zeek-radius
- id: logfile-zeek.rdp-62a2687f-ca35-4a0a-9190-300a79db50ab
data_stream:
dataset: zeek.rdp
type: logs
paths:
- /ZeekLogs/current/rdp.log
exclude_files:
- .gz$
tags:
- zeek-rdp
- id: logfile-zeek.rfb-62a2687f-ca35-4a0a-9190-300a79db50ab
data_stream:
dataset: zeek.rfb
type: logs
paths:
- /ZeekLogs/current/rfb.log
exclude_files:
- .gz$
tags:
- zeek-rfb
- id: logfile-zeek.signature-62a2687f-ca35-4a0a-9190-300a79db50ab
data_stream:
dataset: zeek.signature
type: logs
paths:
- /ZeekLogs/current/signature.log
exclude_files:
- .gz$
tags:
- zeek-signature
- id: logfile-zeek.sip-62a2687f-ca35-4a0a-9190-300a79db50ab
data_stream:
dataset: zeek.sip
type: logs
paths:
- /ZeekLogs/current/sip.log
exclude_files:
- .gz$
tags:
- zeek-sip
- id: logfile-zeek.smb_cmd-62a2687f-ca35-4a0a-9190-300a79db50ab
data_stream:
dataset: zeek.smb_cmd
type: logs
paths:
- /ZeekLogs/current/smb_cmd.log
exclude_files:
- .gz$
tags:
- zeek-smb-cmd
- id: logfile-zeek.smb_files-62a2687f-ca35-4a0a-9190-300a79db50ab
data_stream:
dataset: zeek.smb_files
type: logs
paths:
- /ZeekLogs/current/smb_files.log
exclude_files:
- .gz$
tags:
- zeek-smb-files
- id: logfile-zeek.smb_mapping-62a2687f-ca35-4a0a-9190-300a79db50ab
data_stream:
dataset: zeek.smb_mapping
type: logs
paths:
- /ZeekLogs/current/smb_mapping.log
exclude_files:
- .gz$
tags:
- zeek.smb_mapping
- id: logfile-zeek.smtp-62a2687f-ca35-4a0a-9190-300a79db50ab
data_stream:
dataset: zeek.smtp
type: logs
paths:
- /ZeekLogs/current/smtp.log
exclude_files:
- .gz$
tags:
- zeek-smtp
- id: logfile-zeek.snmp-62a2687f-ca35-4a0a-9190-300a79db50ab
data_stream:
dataset: zeek.snmp
type: logs
paths:
- /ZeekLogs/current/snmp.log
exclude_files:
- .gz$
tags:
- zeek-snmp
- id: logfile-zeek.socks-62a2687f-ca35-4a0a-9190-300a79db50ab
data_stream:
dataset: zeek.socks
type: logs
paths:
- /ZeekLogs/current/socks.log
exclude_files:
- .gz$
tags:
- zeek-socks
- id: logfile-zeek.ssh-62a2687f-ca35-4a0a-9190-300a79db50ab
data_stream:
dataset: zeek.ssh
type: logs
paths:
- /ZeekLogs/current/ssh.log
exclude_files:
- .gz$
tags:
- zeek-ssh
- id: logfile-zeek.ssl-62a2687f-ca35-4a0a-9190-300a79db50ab
data_stream:
dataset: zeek.ssl
type: logs
paths:
- /ZeekLogs/current/ssl.log
exclude_files:
- .gz$
tags:
- zeek-ssl
- id: logfile-zeek.stats-62a2687f-ca35-4a0a-9190-300a79db50ab
data_stream:
dataset: zeek.stats
type: logs
paths:
- /ZeekLogs/current/stats.log
exclude_files:
- .gz$
tags:
- zeek-stats
- id: logfile-zeek.syslog-62a2687f-ca35-4a0a-9190-300a79db50ab
data_stream:
dataset: zeek.syslog
type: logs
paths:
- /ZeekLogs/current/syslog.log
exclude_files:
- .gz$
tags:
- zeek-syslog
- id: logfile-zeek.traceroute-62a2687f-ca35-4a0a-9190-300a79db50ab
data_stream:
dataset: zeek.traceroute
type: logs
paths:
- /ZeekLogs/current/traceroute.log
exclude_files:
- .gz$
tags:
- zeek-traceroute
- id: logfile-zeek.tunnel-62a2687f-ca35-4a0a-9190-300a79db50ab
data_stream:
dataset: zeek.tunnel
type: logs
paths:
- /ZeekLogs/current/tunnel.log
exclude_files:
- .gz$
tags:
- zeek-tunnel
- id: logfile-zeek.weird-62a2687f-ca35-4a0a-9190-300a79db50ab
data_stream:
dataset: zeek.weird
type: logs
paths:
- /ZeekLogs/current/weird.log
exclude_files:
- .gz$
tags:
- zeek-weird
- id: logfile-zeek.x509-62a2687f-ca35-4a0a-9190-300a79db50ab
data_stream:
dataset: zeek.x509
type: logs
paths:
- /ZeekLogs/current/x509.log
exclude_files:
- .gz$
tags:
- zeek-x509
Agent logs:
{"log.level":"info","@timestamp":"2022-05-04T13:45:20.798-0400","log.origin":{"file.name":"cmd/run.go","file.line":153},"message":"APM instrumentation disabled","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:45:20.847-0400","log.origin":{"file.name":"application/application.go","file.line":78},"message":"Detecting execution mode","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:45:20.849-0400","log.origin":{"file.name":"application/application.go","file.line":86},"message":"Agent is managed locally","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:45:20.849-0400","log.origin":{"file.name":"capabilities/capabilities.go","file.line":59},"message":"capabilities file not found in /etc/elastic-agent/capabilities.yml","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:45:21.440-0400","log.logger":"composable.providers.docker","log.origin":{"file.name":"docker/docker.go","file.line":43},"message":"Docker provider skipped, unable to connect: Cannot connect to the Docker daemon at unix:///var/run/docker.sock. Is the docker daemon running?","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:45:21.444-0400","log.logger":"api","log.origin":{"file.name":"api/server.go","file.line":63},"message":"Starting stats endpoint","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:45:21.444-0400","log.origin":{"file.name":"application/local_mode.go","file.line":178},"message":"Agent is starting","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:45:21.444-0400","log.logger":"api","log.origin":{"file.name":"api/server.go","file.line":65},"message":"Metrics endpoint listening on: /var/lib/elastic-agent/data/tmp/elastic-agent.sock (configured: unix:///var/lib/elastic-agent/data/tmp/elastic-agent.sock)","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:45:21.448-0400","log.origin":{"file.name":"application/local_mode.go","file.line":188},"message":"Agent is stopped","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:45:21.450-0400","log.origin":{"file.name":"application/periodic.go","file.line":82},"message":"Configuration changes detected","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:45:21.636-0400","log.origin":{"file.name":"stateresolver/stateresolver.go","file.line":48},"message":"New State ID is EVrg4uu1","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:45:21.636-0400","log.origin":{"file.name":"stateresolver/stateresolver.go","file.line":49},"message":"Converging state requires execution of 3 step(s)","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:45:59.899-0400","log.origin":{"file.name":"log/reporter.go","file.line":40},"message":"2022-05-04T13:45:59-04:00 - message: Application: filebeat--8.2.0[ddab9dd4-c016-4faa-afbe-0cdd5ceea7a0]: State changed to STARTING: Starting - type: 'STATE' - sub_type: 'STARTING'","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:46:04.367-0400","log.origin":{"file.name":"log/reporter.go","file.line":40},"message":"2022-05-04T13:46:04-04:00 - message: Application: filebeat--8.2.0[ddab9dd4-c016-4faa-afbe-0cdd5ceea7a0]: State changed to RUNNING: Running - type: 'STATE' - sub_type: 'RUNNING'","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:46:42.566-0400","log.origin":{"file.name":"log/reporter.go","file.line":40},"message":"2022-05-04T13:46:42-04:00 - message: Application: metricbeat--8.2.0[ddab9dd4-c016-4faa-afbe-0cdd5ceea7a0]: State changed to STARTING: Starting - type: 'STATE' - sub_type: 'STARTING'","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:46:44.956-0400","log.origin":{"file.name":"operation/operator.go","file.line":307},"message":"operation 'operation-install' skipped for filebeat.8.2.0","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:46:45.630-0400","log.origin":{"file.name":"log/reporter.go","file.line":40},"message":"2022-05-04T13:46:45-04:00 - message: Application: filebeat--8.2.0--36643631373035623733363936343635[ddab9dd4-c016-4faa-afbe-0cdd5ceea7a0]: State changed to STARTING: Starting - type: 'STATE' - sub_type: 'STARTING'","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:46:47.694-0400","log.origin":{"file.name":"log/reporter.go","file.line":40},"message":"2022-05-04T13:46:47-04:00 - message: Application: metricbeat--8.2.0[ddab9dd4-c016-4faa-afbe-0cdd5ceea7a0]: State changed to RUNNING: Running - type: 'STATE' - sub_type: 'RUNNING'","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:46:47.773-0400","log.origin":{"file.name":"operation/operator.go","file.line":307},"message":"operation 'operation-install' skipped for metricbeat.8.2.0","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:46:48.435-0400","log.origin":{"file.name":"log/reporter.go","file.line":40},"message":"2022-05-04T13:46:48-04:00 - message: Application: metricbeat--8.2.0--36643631373035623733363936343635[ddab9dd4-c016-4faa-afbe-0cdd5ceea7a0]: State changed to STARTING: Starting - type: 'STATE' - sub_type: 'STARTING'","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:46:48.445-0400","log.origin":{"file.name":"stateresolver/stateresolver.go","file.line":66},"message":"Updating internal state","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:46:48.446-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:46:48.556-0400","log.origin":{"file.name":"stateresolver/stateresolver.go","file.line":48},"message":"New State ID is EVrg4uu1","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:46:48.557-0400","log.origin":{"file.name":"stateresolver/stateresolver.go","file.line":49},"message":"Converging state requires execution of 2 step(s)","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:46:50.276-0400","log.origin":{"file.name":"operation/operator.go","file.line":307},"message":"operation 'operation-install' skipped for filebeat.8.2.0","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:46:50.276-0400","log.origin":{"file.name":"operation/operator.go","file.line":307},"message":"operation 'operation-start' skipped for filebeat.8.2.0","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:46:50.884-0400","log.origin":{"file.name":"log/reporter.go","file.line":40},"message":"2022-05-04T13:46:50-04:00 - message: Application: filebeat--8.2.0--36643631373035623733363936343635[ddab9dd4-c016-4faa-afbe-0cdd5ceea7a0]: State changed to RUNNING: Running - type: 'STATE' - sub_type: 'RUNNING'","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:46:52.310-0400","log.origin":{"file.name":"operation/operator.go","file.line":307},"message":"operation 'operation-install' skipped for filebeat.8.2.0","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:46:52.310-0400","log.origin":{"file.name":"operation/operator.go","file.line":307},"message":"operation 'operation-start' skipped for filebeat.8.2.0","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:46:52.904-0400","log.origin":{"file.name":"log/reporter.go","file.line":40},"message":"2022-05-04T13:46:52-04:00 - message: Application: metricbeat--8.2.0--36643631373035623733363936343635[ddab9dd4-c016-4faa-afbe-0cdd5ceea7a0]: State changed to RUNNING: Running - type: 'STATE' - sub_type: 'RUNNING'","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:46:54.462-0400","log.origin":{"file.name":"operation/operator.go","file.line":307},"message":"operation 'operation-install' skipped for metricbeat.8.2.0","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:46:54.462-0400","log.origin":{"file.name":"operation/operator.go","file.line":307},"message":"operation 'operation-start' skipped for metricbeat.8.2.0","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:46:54.469-0400","log.origin":{"file.name":"stateresolver/stateresolver.go","file.line":66},"message":"Updating internal state","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:46:58.447-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:47:08.448-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:47:18.450-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:47:28.451-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:47:38.452-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:47:48.453-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:47:58.454-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:48:08.455-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:48:18.457-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:48:28.458-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:48:38.459-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:48:48.459-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:48:58.460-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:49:08.461-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:49:18.463-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:49:28.463-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:49:38.464-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:49:48.465-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:49:58.467-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:50:08.468-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:50:18.469-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:50:28.471-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:50:38.472-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:50:48.473-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:50:58.474-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:51:08.475-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:51:18.476-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:51:28.477-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:51:38.478-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:51:48.480-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:51:58.481-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:52:08.482-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:52:18.483-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:52:28.485-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:52:38.486-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:52:48.488-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:52:58.489-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:53:08.490-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:53:18.491-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:53:28.493-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:53:38.494-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:53:48.495-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:53:58.496-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:54:08.497-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:54:18.499-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:54:28.499-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:54:38.500-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:54:48.501-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:54:58.502-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:55:08.503-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:55:18.505-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:55:28.506-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:55:38.507-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:55:48.509-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:55:58.510-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:56:08.511-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:56:18.512-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:56:28.513-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:56:38.514-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:56:48.515-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:56:58.516-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:57:08.517-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:57:18.518-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:57:28.519-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:57:38.520-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:57:48.522-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:57:58.523-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:58:08.524-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:58:18.525-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:58:28.526-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:58:38.527-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:58:48.529-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:58:58.530-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:59:08.531-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:59:18.532-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:59:28.533-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:59:38.534-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:59:48.535-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T13:59:58.536-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T14:00:08.537-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T14:00:18.538-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T14:00:28.540-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T14:00:38.541-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T14:00:48.542-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T14:00:58.544-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T14:01:08.546-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T14:01:18.547-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T14:01:28.548-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T14:01:38.550-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T14:01:48.551-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T14:01:58.552-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T14:02:08.554-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T14:02:18.555-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T14:02:28.556-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T14:02:38.557-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T14:02:48.558-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T14:02:58.559-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T14:03:08.560-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T14:03:18.561-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T14:03:28.562-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T14:03:38.564-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T14:03:48.564-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T14:03:58.565-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T14:04:08.566-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T14:04:18.568-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T14:04:28.568-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T14:04:38.570-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T14:04:48.571-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T14:04:58.572-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T14:05:08.574-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T14:05:18.575-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T14:05:28.576-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T14:05:38.577-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T14:05:48.577-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T14:05:58.579-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T14:06:08.580-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T14:06:18.581-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T14:06:28.582-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T14:06:38.583-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T14:06:48.583-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T14:06:58.584-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T14:07:08.586-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T14:07:18.587-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T14:07:28.589-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T14:07:38.590-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T14:07:48.591-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T14:07:58.592-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T14:08:08.593-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T14:08:18.594-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T14:08:28.595-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T14:08:38.596-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T14:08:48.597-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T14:08:58.598-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T14:09:08.599-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T14:09:18.600-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T14:09:28.601-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T14:09:38.602-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T14:09:48.604-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T14:09:58.605-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-05-04T14:10:08.606-0400","log.origin":{"file.name":"application/periodic.go","file.line":104},"message":"No configuration change","ecs.version":"1.6.0"}
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.