Datadog agent continue restart

[nikgreg99]

I have installaded data Dog on a WIndows Server 2022 to monitoring events collected by WEC. But i don't understand why the agent start and after a few time go down and restart. The log arrives to Data dog so I think isnt' a conf problem. What can be ?

[nikgreg99]

Also when I try monitoring its health or status via command line I obtain this (in the moment while it is down):
Could not reach agent: Get "https://localhost:5001/agent/status": dial tcp
[::1]:5001: connectex: No connection could be made because the target
machine actively refused it.
Make sure the agent is running before requesting the status and contact
support if you continue having issues.
Error: Get "https://localhost:5001/agent/status": dial tcp [::1]:5001:
connectex: No connection could be made because the target machine actively
refused it.

[clarkb7]

I think this might be related to a crash we recently fixed, which will be released in v7.50. This issue/crash seems to only affect Windows Server 2022.

Do you have errors like the following in your System event log?

Until the fix is released in v7.50, you may be able to avoid the crash by changing the Windows Event Collector subscription setting to exclude the RenderingInfo section from the forwarded event.

wecutil set-subscription <NAME> /cf:Events

The default behavior (include RenderingInfo) can be restored with

wecutil set-subscription <NAME> /cf:RenderedText

Please let me know if that helps, and you can always contact support for more assistance.

[nikgreg99]

But in my subscription for the WEC I wasn't included the 'Rendering Info' section. I don't think it is providedby default while your are creating a subscription,

[ghost]

You might want to check this out https://github.com/DataDog/datadog-agent/pull/22353

You can verify this is the issue by looking for the causing events.
Get-EventLog Application | Where message -like "*cannot be found*" | where {$_.ReplacementStrings.Length -eq 0}