[ec2-user@ip-172-31-40-13 ~]$ sudo docker run --label co.elastic.metrics/module=system \
> --mount type=bind,source=/proc,target=/hostfs/proc,readonly \
> --mount type=bind,source=/sys/fs/cgroup,target=/hostfs/sys/fs/cgroup,readonly \
> --mount type=bind,source=/,target=/hostfs,readonly \
> --mount type=bind,source=/var/run/dbus/system_bus_socket,target=/hostfs/var/run/dbus/system_bus_socket,readonly \
> --env DBUS_SYSTEM_BUS_ADDRESS='unix:path=/hostfs/var/run/dbus/system_bus_socket' \
> --net=host --cgroupns=host docker.elastic.co/beats/metricbeat:8.15.0-ee48b214-SNAPSHOT metricbeat -e -E output.elasticsearch.hosts='ht********com:443' \
e='elastic' \
-E output> -E output.elasticsearch.username='elastic' \
> -E output.elasticsearch.password='***********' \
> -d '*'
{"log.level":"info","@timestamp":"2024-06-20T10:41:27.451Z","log.origin":{"function":"github.com/elastic/beats/v7/libbeat/cmd/instance.(*Beat).configure","file.name":"instance/beat.go","file.line":817},"message":"Home path: [/usr/share/metricbeat] Config path: [/usr/share/metricbeat] Data path: [/usr/share/metricbeat/data] Logs path: [/usr/share/metricbeat/logs]","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2024-06-20T10:41:27.451Z","log.logger":"beat","log.origin":{"function":"github.com/elastic/beats/v7/libbeat/cmd/instance.(*Beat).loadMeta","file.name":"instance/beat.go","file.line":936},"message":"Beat metadata path: /usr/share/metricbeat/data/meta.json","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2024-06-20T10:41:27.455Z","log.origin":{"function":"github.com/elastic/beats/v7/libbeat/cmd/instance.(*Beat).configure","file.name":"instance/beat.go","file.line":825},"message":"Beat ID: 8f2871e9-5743-4f1a-8575-42c0502b21e3","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2024-06-20T10:41:27.460Z","log.logger":"docker","log.origin":{"function":"github.com/elastic/elastic-agent-autodiscover/docker.NewClient","file.name":"docker/client.go","file.line":49},"message":"Docker client will negotiate the API version on the first request.","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2024-06-20T10:41:27.460Z","log.logger":"add_cloud_metadata","log.origin":{"function":"github.com/elastic/beats/v7/libbeat/processors/add_cloud_metadata.(*addCloudMetadata).fetchMetadata","file.name":"add_cloud_metadata/providers.go","file.line":147},"message":"add_cloud_metadata: starting to fetch metadata, timeout=3s","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2024-06-20T10:41:27.460Z","log.logger":"add_docker_metadata","log.origin":{"function":"github.com/elastic/beats/v7/libbeat/processors/add_docker_metadata.buildDockerMetadataProcessor","file.name":"add_docker_metadata/add_docker_metadata.go","file.line":89},"message":"add_docker_metadata: docker environment not detected: Cannot connect to the Docker daemon at unix:///var/run/docker.sock. Is the docker daemon running?","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2024-06-20T10:41:27.463Z","log.logger":"add_cloud_metadata","log.origin":{"function":"github.com/elastic/beats/v7/libbeat/processors/add_cloud_metadata.(*addCloudMetadata).fetchMetadata","file.name":"add_cloud_metadata/providers.go","file.line":184},"message":"add_cloud_metadata: received disposition for hetzner after 3.392984ms. result=[provider:hetzner, error=failed with http status code 401, metadata={}]","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"error","@timestamp":"2024-06-20T10:41:27.463Z","log.logger":"add_cloud_metadata","log.origin":{"function":"github.com/elastic/beats/v7/libbeat/processors/add_cloud_metadata.(*addCloudMetadata).fetchMetadata","file.name":"add_cloud_metadata/providers.go","file.line":190},"message":"add_cloud_metadata: received error failed with http status code 401","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2024-06-20T10:41:27.464Z","log.logger":"add_cloud_metadata","log.origin":{"function":"github.com/elastic/beats/v7/libbeat/processors/add_cloud_metadata.(*addCloudMetadata).fetchMetadata","file.name":"add_cloud_metadata/providers.go","file.line":184},"message":"add_cloud_metadata: received disposition for digitalocean after 3.898013ms. result=[provider:digitalocean, error=failed with http status code 401, metadata={}]","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"error","@timestamp":"2024-06-20T10:41:27.464Z","log.logger":"add_cloud_metadata","log.origin":{"function":"github.com/elastic/beats/v7/libbeat/processors/add_cloud_metadata.(*addCloudMetadata).fetchMetadata","file.name":"add_cloud_metadata/providers.go","file.line":190},"message":"add_cloud_metadata: received error failed with http status code 401","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2024-06-20T10:41:27.464Z","log.logger":"add_cloud_metadata","log.origin":{"function":"github.com/elastic/beats/v7/libbeat/processors/add_cloud_metadata.(*addCloudMetadata).fetchMetadata","file.name":"add_cloud_metadata/providers.go","file.line":184},"message":"add_cloud_metadata: received disposition for openstack after 4.494068ms. result=[provider:openstack, error=failed with http status code 401, metadata={}]","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"error","@timestamp":"2024-06-20T10:41:27.465Z","log.logger":"add_cloud_metadata","log.origin":{"function":"github.com/elastic/beats/v7/libbeat/processors/add_cloud_metadata.(*addCloudMetadata).fetchMetadata","file.name":"add_cloud_metadata/providers.go","file.line":190},"message":"add_cloud_metadata: received error failed with http status code 401","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2024-06-20T10:41:27.465Z","log.logger":"add_cloud_metadata","log.origin":{"function":"github.com/elastic/beats/v7/libbeat/processors/add_cloud_metadata.(*addCloudMetadata).fetchMetadata","file.name":"add_cloud_metadata/providers.go","file.line":184},"message":"add_cloud_metadata: received disposition for azure after 4.863669ms. result=[provider:azure, error=failed with http status code 401, metadata={}]","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"error","@timestamp":"2024-06-20T10:41:27.465Z","log.logger":"add_cloud_metadata","log.origin":{"function":"github.com/elastic/beats/v7/libbeat/processors/add_cloud_metadata.(*addCloudMetadata).fetchMetadata","file.name":"add_cloud_metadata/providers.go","file.line":190},"message":"add_cloud_metadata: received error failed with http status code 401","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2024-06-20T10:41:27.465Z","log.logger":"add_cloud_metadata","log.origin":{"function":"github.com/elastic/beats/v7/libbeat/processors/add_cloud_metadata.(*addCloudMetadata).fetchMetadata","file.name":"add_cloud_metadata/providers.go","file.line":184},"message":"add_cloud_metadata: received disposition for gcp after 5.234627ms. result=[provider:gcp, error=failed with http status code 401, metadata={}]","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"error","@timestamp":"2024-06-20T10:41:27.465Z","log.logger":"add_cloud_metadata","log.origin":{"function":"github.com/elastic/beats/v7/libbeat/processors/add_cloud_metadata.(*addCloudMetadata).fetchMetadata","file.name":"add_cloud_metadata/providers.go","file.line":190},"message":"add_cloud_metadata: received error failed with http status code 401","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"warn","@timestamp":"2024-06-20T10:41:27.470Z","log.logger":"add_cloud_metadata","log.origin":{"function":"github.com/elastic/beats/v7/libbeat/processors/add_cloud_metadata.fetchRawProviderMetadata","file.name":"add_cloud_metadata/provider_aws_ec2.go","file.line":108},"message":"error fetching cluster name metadata: error fetching EC2 Tags: operation error EC2: DescribeTags, get identity: get credentials: failed to refresh cached credentials, no EC2 IMDS role found, operation error ec2imds: GetMetadata, http response error StatusCode: 404, request to EC2 IMDS failed.","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2024-06-20T10:41:27.470Z","log.logger":"add_cloud_metadata","log.origin":{"function":"github.com/elastic/beats/v7/libbeat/processors/add_cloud_metadata.(*addCloudMetadata).fetchMetadata","file.name":"add_cloud_metadata/providers.go","file.line":184},"message":"add_cloud_metadata: received disposition for aws after 10.416038ms. result=[provider:aws, error=<nil>, metadata={\"cloud\":{\"account\":{\"id\":\"760329366924\"},\"availability_zone\":\"us-east-1d\",\"image\":{\"id\":\"ami-0583d8c7a9c35822c\"},\"instance\":{\"id\":\"i-02fc6d087ca8a1898\"},\"machine\":{\"type\":\"t2.medium\"},\"provider\":\"aws\",\"region\":\"us-east-1\",\"service\":{\"name\":\"EC2\"}}}]","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2024-06-20T10:41:27.471Z","log.logger":"add_cloud_metadata","log.origin":{"function":"github.com/elastic/beats/v7/libbeat/processors/add_cloud_metadata.(*addCloudMetadata).fetchMetadata.func1","file.name":"add_cloud_metadata/providers.go","file.line":150},"message":"add_cloud_metadata: fetchMetadata ran for 10.718607ms","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2024-06-20T10:41:27.471Z","log.logger":"add_cloud_metadata","log.origin":{"function":"github.com/elastic/beats/v7/libbeat/processors/add_cloud_metadata.(*addCloudMetadata).init.func1","file.name":"add_cloud_metadata/add_cloud_metadata.go","file.line":104},"message":"add_cloud_metadata: hosting provider type detected as aws, metadata={\"cloud\":{\"account\":{\"id\":\"760329366924\"},\"availability_zone\":\"us-east-1d\",\"image\":{\"id\":\"ami-0583d8c7a9c35822c\"},\"instance\":{\"id\":\"i-02fc6d087ca8a1898\"},\"machine\":{\"type\":\"t2.medium\"},\"provider\":\"aws\",\"region\":\"us-east-1\",\"service\":{\"name\":\"EC2\"}}}","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2024-06-20T10:41:27.471Z","log.logger":"processors","log.origin":{"function":"github.com/elastic/beats/v7/libbeat/processors.New","file.name":"processors/processor.go","file.line":114},"message":"Generated new processors: add_cloud_metadata={\"cloud\":{\"account\":{\"id\":\"760329366924\"},\"availability_zone\":\"us-east-1d\",\"image\":{\"id\":\"ami-0583d8c7a9c35822c\"},\"instance\":{\"id\":\"i-02fc6d087ca8a1898\"},\"machine\":{\"type\":\"t2.medium\"},\"provider\":\"aws\",\"region\":\"us-east-1\",\"service\":{\"name\":\"EC2\"}}}, add_docker_metadata=[match_fields=[] match_pids=[process.pid, process.parent.pid]]","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2024-06-20T10:41:27.472Z","log.logger":"seccomp","log.origin":{"function":"github.com/elastic/beats/v7/libbeat/common/seccomp.loadFilter","file.name":"seccomp/seccomp.go","file.line":118},"message":"Loading syscall filter","service.name":"metricbeat","seccomp_filter":{"no_new_privs":true,"flag":"tsync","policy":{"default_action":"errno","syscalls":[{"names":["accept","accept4","access","arch_prctl","bind","brk","capget","chmod","chown","clock_gettime","clock_nanosleep","clone","clone3","close","connect","dup","dup2","epoll_create","epoll_create1","epoll_ctl","epoll_pwait","epoll_wait","execve","exit","exit_group","fchdir","fchmod","fchmodat","fchown","fchownat","fcntl","fdatasync","flock","fstat","fstatfs","fsync","ftruncate","futex","getcwd","getdents","getdents64","geteuid","getgid","getpeername","getpid","getppid","getrandom","getrlimit","getrusage","getsockname","getsockopt","gettid","gettimeofday","getuid","inotify_add_watch","inotify_init1","inotify_rm_watch","ioctl","kill","listen","lseek","lstat","madvise","mincore","mkdirat","mmap","mprotect","munmap","nanosleep","newfstatat","open","openat","pipe","pipe2","poll","ppoll","pread64","pselect6","pwrite64","read","readlink","readlinkat","recvfrom","recvmmsg","recvmsg","rename","renameat","rseq","rt_sigaction","rt_sigprocmask","rt_sigreturn","sched_getaffinity","sched_yield","sendfile","sendmmsg","sendmsg","sendto","set_robust_list","setitimer","setsockopt","shutdown","sigaltstack","socket","splice","stat","statfs","sysinfo","tgkill","time","tkill","uname","unlink","unlinkat","wait4","waitid","write","writev"],"names_with_args":null,"action":"allow"}]}},"ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2024-06-20T10:41:27.473Z","log.logger":"seccomp","log.origin":{"function":"github.com/elastic/beats/v7/libbeat/common/seccomp.loadFilter","file.name":"seccomp/seccomp.go","file.line":125},"message":"Syscall filter successfully installed","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2024-06-20T10:41:27.473Z","log.logger":"beat","log.origin":{"function":"github.com/elastic/beats/v7/libbeat/cmd/instance.logSystemInfo","file.name":"instance/beat.go","file.line":1371},"message":"Beat info","service.name":"metricbeat","system_info":{"beat":{"path":{"config":"/usr/share/metricbeat","data":"/usr/share/metricbeat/data","home":"/usr/share/metricbeat","logs":"/usr/share/metricbeat/logs"},"type":"metricbeat","uuid":"8f2871e9-5743-4f1a-8575-42c0502b21e3"},"ecs.version":"1.6.0"}}
{"log.level":"info","@timestamp":"2024-06-20T10:41:27.473Z","log.logger":"beat","log.origin":{"function":"github.com/elastic/beats/v7/libbeat/cmd/instance.logSystemInfo","file.name":"instance/beat.go","file.line":1380},"message":"Build info","service.name":"metricbeat","system_info":{"build":{"commit":"2f10d0840326ecfad15704e9a7dccebe9f5a9e97","libbeat":"8.15.0","time":"2024-06-19T13:34:10.000Z","version":"8.15.0"},"ecs.version":"1.6.0"}}
{"log.level":"info","@timestamp":"2024-06-20T10:41:27.474Z","log.logger":"beat","log.origin":{"function":"github.com/elastic/beats/v7/libbeat/cmd/instance.logSystemInfo","file.name":"instance/beat.go","file.line":1383},"message":"Go runtime info","service.name":"metricbeat","system_info":{"go":{"os":"linux","arch":"amd64","max_procs":2,"version":"go1.21.11"},"ecs.version":"1.6.0"}}
{"log.level":"info","@timestamp":"2024-06-20T10:41:27.475Z","log.logger":"beat","log.origin":{"function":"github.com/elastic/beats/v7/libbeat/cmd/instance.logSystemInfo","file.name":"instance/beat.go","file.line":1389},"message":"Host info","service.name":"metricbeat","system_info":{"host":{"architecture":"x86_64","native_architecture":"","boot_time":"2024-06-20T06:17:04Z","containerized":true,"name":"ip-172-31-40-13.ec2.internal","ip":["127.0.0.1","::1","172.31.40.13","fe80::caa:76ff:fe0b:661f","172.17.0.1","fe80::42:c5ff:fe26:da44"],"kernel_version":"5.14.0-427.20.1.el9_4.x86_64","mac":["0e:aa:76:0b:66:1f","02:42:c5:26:da:44"],"os":{"type":"linux","family":"debian","platform":"ubuntu","name":"Ubuntu","version":"20.04.6 LTS (Focal Fossa)","major":20,"minor":4,"patch":6,"codename":"focal"},"timezone":"UTC","timezone_offset_sec":0},"ecs.version":"1.6.0"}}
{"log.level":"info","@timestamp":"2024-06-20T10:41:27.475Z","log.logger":"beat","log.origin":{"function":"github.com/elastic/beats/v7/libbeat/cmd/instance.logSystemInfo","file.name":"instance/beat.go","file.line":1418},"message":"Process info","service.name":"metricbeat","system_info":{"process":{"capabilities":{"inheritable":null,"permitted":null,"effective":null,"bounding":["chown","dac_override","fowner","fsetid","kill","setgid","setuid","setpcap","net_bind_service","net_raw","sys_chroot","mknod","audit_write","setfcap"],"ambient":null},"cwd":"/usr/share/metricbeat","exe":"/usr/share/metricbeat/metricbeat","name":"metricbeat","pid":8,"ppid":1,"seccomp":{"mode":"filter","no_new_privs":true},"start_time":"2024-06-20T10:41:26.480Z"},"ecs.version":"1.6.0"}}
{"log.level":"info","@timestamp":"2024-06-20T10:41:27.475Z","log.origin":{"function":"github.com/elastic/beats/v7/libbeat/cmd/instance.(*Beat).createBeater","file.name":"instance/beat.go","file.line":340},"message":"Setup Beat: metricbeat; Version: 8.15.0","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2024-06-20T10:41:27.476Z","log.logger":"beat","log.origin":{"function":"github.com/elastic/beats/v7/libbeat/cmd/instance.(*Beat).createBeater","file.name":"instance/beat.go","file.line":368},"message":"Initializing output plugins","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2024-06-20T10:41:27.479Z","log.logger":"esclientleg","log.origin":{"function":"github.com/elastic/beats/v7/libbeat/esleg/eslegclient.NewConnection","file.name":"eslegclient/connection.go","file.line":122},"message":"elasticsearch url: https://a19ffa7567464fddbb058c9926092617.us-west2.gcp.elastic-cloud.com:443","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2024-06-20T10:41:27.479Z","log.logger":"publisher","log.origin":{"function":"github.com/elastic/beats/v7/libbeat/publisher/pipeline.(*eventConsumer).run","file.name":"pipeline/consumer.go","file.line":110},"message":"start pipeline event consumer","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2024-06-20T10:41:27.479Z","log.logger":"publisher","log.origin":{"function":"github.com/elastic/beats/v7/libbeat/publisher/pipeline.(*queueReader).run","file.name":"pipeline/queue_reader.go","file.line":49},"message":"pipeline event consumer queue reader: start","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2024-06-20T10:41:27.479Z","log.logger":"publisher","log.origin":{"function":"github.com/elastic/beats/v7/libbeat/publisher/pipeline.LoadWithSettings","file.name":"pipeline/module.go","file.line":105},"message":"Beat name: ip-172-31-40-13.ec2.internal","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2024-06-20T10:41:27.530Z","log.logger":"modules","log.origin":{"function":"github.com/elastic/beats/v7/metricbeat/beater.newMetricbeat","file.name":"beater/metricbeat.go","file.line":162},"message":"Available modules and metricsets: Register [ModuleFactory:[aws, awsfargate, azure, beat, cloudfoundry, containerd, docker, elasticsearch, kibana, kubernetes, linux, logstash, mongodb, mssql, mysql, oracle, postgresql, syncgateway, system, uwsgi], MetricSetFactory:[aerospike/namespace, apache/status, aws/awshealth, aws/billing, aws/cloudwatch, awsfargate/task_stats, azure/app_insights, azure/billing, azure/monitor, azure/storage, azure/storage_account, beat/state, beat/stats, ceph/cluster_disk, ceph/cluster_health, ceph/cluster_status, ceph/mgr_cluster_disk, ceph/mgr_cluster_health, ceph/mgr_osd_perf, ceph/mgr_osd_pool_stats, ceph/mgr_osd_tree, ceph/mgr_pool_disk, ceph/monitor_health, ceph/osd_df, ceph/osd_tree, ceph/pool_disk, cloudfoundry/container, cloudfoundry/counter, cloudfoundry/value, consul/agent, containerd/blkio, containerd/cpu, containerd/memory, coredns/stats, couchbase/bucket, couchbase/cluster, couchbase/node, couchdb/server, docker/container, docker/cpu, docker/diskio, docker/event, docker/healthcheck, docker/image, docker/info, docker/memory, docker/network, docker/network_summary, dropwizard/collector, elasticsearch/ccr, elasticsearch/cluster_stats, elasticsearch/enrich, elasticsearch/index, elasticsearch/index_recovery, elasticsearch/index_summary, elasticsearch/ingest_pipeline, elasticsearch/ml_job, elasticsearch/node, elasticsearch/node_stats, elasticsearch/pending_tasks, elasticsearch/shard, enterprisesearch/health, enterprisesearch/stats, envoyproxy/server, etcd/leader, etcd/metrics, etcd/self, etcd/store, gcp/billing, gcp/carbon, gcp/metrics, golang/expvar, golang/heap, graphite/server, haproxy/info, haproxy/stat, http/json, http/server, istio/citadel, istio/galley, istio/mesh, istio/mixer, istio/pilot, jolokia/jmx, kafka/consumergroup, kafka/partition, kibana/cluster_actions, kibana/cluster_rules, kibana/node_actions, kibana/node_rules, kibana/settings, kibana/stats, kibana/status, kubernetes/apiserver, kubernetes/container, kubernetes/controllermanager, kubernetes/event, kubernetes/node, kubernetes/pod, kubernetes/proxy, kubernetes/scheduler, kubernetes/state_container, kubernetes/state_cronjob, kubernetes/state_daemonset, kubernetes/state_deployment, kubernetes/state_job, kubernetes/state_namespace, kubernetes/state_node, kubernetes/state_persistentvolume, kubernetes/state_persistentvolumeclaim, kubernetes/state_pod, kubernetes/state_replicaset, kubernetes/state_resourcequota, kubernetes/state_service, kubernetes/state_statefulset, kubernetes/state_storageclass, kubernetes/system, kubernetes/volume, kvm/dommemstat, kvm/status, linux/conntrack, linux/iostat, linux/ksm, linux/memory, linux/pageinfo, linux/pressure, linux/rapl, logstash/node, logstash/node_stats, memcached/stats, mongodb/collstats, mongodb/dbstats, mongodb/metrics, mongodb/replstatus, mongodb/status, mssql/performance, mssql/transaction_log, munin/node, mysql/galera_status, mysql/query, mysql/status, nats/connection, nats/connections, nats/route, nats/routes, nats/stats, nats/subscriptions, nginx/stubstatus, openmetrics/collector, oracle/performance, oracle/sysmetric, oracle/tablespace, php_fpm/pool, php_fpm/process, postgresql/activity, postgresql/bgwriter, postgresql/database, postgresql/statement, prometheus/collector, prometheus/query, prometheus/remote_write, rabbitmq/connection, rabbitmq/exchange, rabbitmq/node, rabbitmq/queue, rabbitmq/shovel, redis/info, redis/key, redis/keyspace, sql/query, stan/channels, stan/stats, stan/subscriptions, statsd/server, syncgateway/db, syncgateway/memory, syncgateway/replication, syncgateway/resources, system/core, system/cpu, system/diskio, system/entropy, system/filesystem, system/fsstat, system/load, system/memory, system/network, system/network_summary, system/process, system/process_summary, system/raid, system/service, system/socket, system/socket_summary, system/uptime, system/users, traefik/health, uwsgi/status, vsphere/datastore, vsphere/host, vsphere/virtualmachine, zookeeper/connection, zookeeper/mntr, zookeeper/server], LightModules:[LightModules:[aws/kinesis, aws/elb, aws/s3_request, aws/dynamodb, aws/rds, aws/lambda, aws/natgateway, aws/ebs, aws/sqs, aws/vpn, aws/s3_daily_storage, aws/transitgateway, aws/ec2, aws/usage, aws/sns, istio/istiod, istio/proxy, activemq/broker, activemq/queue, activemq/topic, ibmmq/qmgr, redisenterprise/node, redisenterprise/proxy, mysql/performance, azure/compute_vm, azure/compute_vm_scaleset, azure/container_registry, azure/container_instance, azure/container_service, azure/database_account, azure/app_state, cockroachdb/status, gcp/compute, gcp/pubsub, gcp/loadbalancing, gcp/storage, gcp/gke, gcp/firestore, gcp/dataproc, airflow/statsd, tomcat/threading, tomcat/memory, tomcat/requests, tomcat/cache, iis/webserver, iis/website, kafka/broker, kafka/producer, kafka/consumer]]]","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2024-06-20T10:41:27.530Z","log.logger":"monitoring","log.origin":{"function":"github.com/elastic/beats/v7/libbeat/monitoring/report/log.(*reporter).snapshotLoop","file.name":"log/log.go","file.line":150},"message":"Starting metrics logging every 30s","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2024-06-20T10:41:27.531Z","log.origin":{"function":"github.com/elastic/beats/v7/libbeat/cmd/instance.(*Beat).launch","file.name":"instance/beat.go","file.line":526},"message":"metricbeat start running.","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2024-06-20T10:41:27.532Z","log.logger":"cfgfile","log.origin":{"function":"github.com/elastic/beats/v7/libbeat/cfgfile.(*Reloader).Check","file.name":"cfgfile/reload.go","file.line":131},"message":"Checking module configs from: /usr/share/metricbeat/modules.d/*.yml","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2024-06-20T10:41:27.532Z","log.logger":"cfgfile","log.origin":{"function":"github.com/elastic/beats/v7/libbeat/cfgfile.LoadList","file.name":"cfgfile/cfgfile.go","file.line":204},"message":"Load config from file: /usr/share/metricbeat/modules.d/system.yml","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2024-06-20T10:41:27.533Z","log.logger":"cfgfile","log.origin":{"function":"github.com/elastic/beats/v7/libbeat/cfgfile.(*Reloader).Check","file.name":"cfgfile/reload.go","file.line":145},"message":"Number of module configs found: 3","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2024-06-20T10:41:27.535Z","log.origin":{"function":"github.com/elastic/beats/v7/metricbeat/module/system/filesystem.New","file.name":"filesystem/filesystem.go","file.line":70},"message":"Ignoring filesystem types: sysfs, tmpfs, bdev, proc, cgroup, cgroup2, cpuset, devtmpfs, configfs, debugfs, tracefs, securityfs, sockfs, bpf, pipefs, ramfs, hugetlbfs, devpts, autofs, mqueue, selinuxfs, pstore, fuse, fusectl, overlay","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2024-06-20T10:41:27.535Z","log.logger":"system.fsstat","log.origin":{"function":"github.com/elastic/beats/v7/metricbeat/module/system/fsstat.New","file.name":"fsstat/fsstat.go","file.line":60},"message":"Ignoring filesystem types: %ssysfs, tmpfs, bdev, proc, cgroup, cgroup2, cpuset, devtmpfs, configfs, debugfs, tracefs, securityfs, sockfs, bpf, pipefs, ramfs, hugetlbfs, devpts, autofs, mqueue, selinuxfs, pstore, fuse, fusectl, overlay","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2024-06-20T10:41:27.536Z","log.origin":{"function":"github.com/elastic/beats/v7/libbeat/cfgfile.(*Reloader).Run","file.name":"cfgfile/reload.go","file.line":163},"message":"Config reloader started","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2024-06-20T10:41:27.536Z","log.logger":"cfgfile","log.origin":{"function":"github.com/elastic/beats/v7/libbeat/cfgfile.(*Reloader).Run","file.name":"cfgfile/reload.go","file.line":193},"message":"Scan for new config files","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2024-06-20T10:41:27.536Z","log.logger":"cfgfile","log.origin":{"function":"github.com/elastic/beats/v7/libbeat/cfgfile.LoadList","file.name":"cfgfile/cfgfile.go","file.line":204},"message":"Load config from file: /usr/share/metricbeat/modules.d/system.yml","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2024-06-20T10:41:27.537Z","log.logger":"cfgfile","log.origin":{"function":"github.com/elastic/beats/v7/libbeat/cfgfile.(*Reloader).Run","file.name":"cfgfile/reload.go","file.line":212},"message":"Number of module configs found: 3","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2024-06-20T10:41:27.537Z","log.logger":"reload","log.origin":{"function":"github.com/elastic/beats/v7/libbeat/cfgfile.(*RunnerList).Reload","file.name":"cfgfile/list.go","file.line":93},"message":"Starting reload procedure, current runners: 0","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2024-06-20T10:41:27.537Z","log.logger":"reload","log.origin":{"function":"github.com/elastic/beats/v7/libbeat/cfgfile.(*RunnerList).Reload","file.name":"cfgfile/list.go","file.line":111},"message":"Start list: 3, Stop list: 0","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2024-06-20T10:41:27.540Z","log.logger":"reload","log.origin":{"function":"github.com/elastic/beats/v7/libbeat/cfgfile.(*RunnerList).Reload","file.name":"cfgfile/list.go","file.line":155},"message":"Starting runner: RunnerGroup{system [metricsets=1], system [metricsets=1], system [metricsets=1], system [metricsets=1], system [metricsets=1], system [metricsets=1], system [metricsets=1]}","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2024-06-20T10:41:27.540Z","log.logger":"module","log.origin":{"function":"github.com/elastic/beats/v7/metricbeat/mb/module.(*Wrapper).Start","file.name":"module/wrapper.go","file.line":129},"message":"Starting Wrapper[name=system, len(metricSetWrappers)=1]","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2024-06-20T10:41:27.540Z","log.logger":"module","log.origin":{"function":"github.com/elastic/beats/v7/metricbeat/mb/module.(*Wrapper).Start","file.name":"module/wrapper.go","file.line":129},"message":"Starting Wrapper[name=system, len(metricSetWrappers)=1]","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2024-06-20T10:41:27.540Z","log.logger":"module","log.origin":{"function":"github.com/elastic/beats/v7/metricbeat/mb/module.(*Wrapper).Start","file.name":"module/wrapper.go","file.line":129},"message":"Starting Wrapper[name=system, len(metricSetWrappers)=1]","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2024-06-20T10:41:27.540Z","log.logger":"module","log.origin":{"function":"github.com/elastic/beats/v7/metricbeat/mb/module.(*metricSetWrapper).run","file.name":"module/wrapper.go","file.line":191},"message":"Starting metricSetWrapper[module=system, name=load, host=]","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2024-06-20T10:41:27.541Z","log.logger":"module","log.origin":{"function":"github.com/elastic/beats/v7/metricbeat/mb/module.(*Wrapper).Start","file.name":"module/wrapper.go","file.line":129},"message":"Starting Wrapper[name=system, len(metricSetWrappers)=1]","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2024-06-20T10:41:27.541Z","log.logger":"module","log.origin":{"function":"github.com/elastic/beats/v7/metricbeat/mb/module.(*Wrapper).Start","file.name":"module/wrapper.go","file.line":129},"message":"Starting Wrapper[name=system, len(metricSetWrappers)=1]","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2024-06-20T10:41:27.541Z","log.logger":"module","log.origin":{"function":"github.com/elastic/beats/v7/metricbeat/mb/module.(*Wrapper).Start","file.name":"module/wrapper.go","file.line":129},"message":"Starting Wrapper[name=system, len(metricSetWrappers)=1]","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2024-06-20T10:41:27.541Z","log.logger":"module","log.origin":{"function":"github.com/elastic/beats/v7/metricbeat/mb/module.(*Wrapper).Start","file.name":"module/wrapper.go","file.line":129},"message":"Starting Wrapper[name=system, len(metricSetWrappers)=1]","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2024-06-20T10:41:27.540Z","log.logger":"module","log.origin":{"function":"github.com/elastic/beats/v7/metricbeat/mb/module.(*metricSetWrapper).run","file.name":"module/wrapper.go","file.line":191},"message":"Starting metricSetWrapper[module=system, name=cpu, host=]","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2024-06-20T10:41:27.542Z","log.origin":{"function":"github.com/elastic/beats/v7/metricbeat/module/system/filesystem.New","file.name":"filesystem/filesystem.go","file.line":70},"message":"Ignoring filesystem types: sysfs, tmpfs, bdev, proc, cgroup, cgroup2, cpuset, devtmpfs, configfs, debugfs, tracefs, securityfs, sockfs, bpf, pipefs, ramfs, hugetlbfs, devpts, autofs, mqueue, selinuxfs, pstore, fuse, fusectl, overlay","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2024-06-20T10:41:27.542Z","log.logger":"system.fsstat","log.origin":{"function":"github.com/elastic/beats/v7/metricbeat/module/system/fsstat.New","file.name":"fsstat/fsstat.go","file.line":60},"message":"Ignoring filesystem types: %ssysfs, tmpfs, bdev, proc, cgroup, cgroup2, cpuset, devtmpfs, configfs, debugfs, tracefs, securityfs, sockfs, bpf, pipefs, ramfs, hugetlbfs, devpts, autofs, mqueue, selinuxfs, pstore, fuse, fusectl, overlay","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2024-06-20T10:41:27.543Z","log.logger":"conditions","log.origin":{"function":"github.com/elastic/beats/v7/libbeat/conditions.NewCondition","file.name":"conditions/conditions.go","file.line":98},"message":"New condition regexp: map[]","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2024-06-20T10:41:27.543Z","log.logger":"processors","log.origin":{"function":"github.com/elastic/beats/v7/libbeat/processors.New","file.name":"processors/processor.go","file.line":114},"message":"Generated new processors: drop_event, condition=regexp: map[]","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2024-06-20T10:41:27.543Z","log.logger":"conditions","log.origin":{"function":"github.com/elastic/beats/v7/libbeat/conditions.NewCondition","file.name":"conditions/conditions.go","file.line":98},"message":"New condition regexp: map[]","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2024-06-20T10:41:27.543Z","log.logger":"processors","log.origin":{"function":"github.com/elastic/beats/v7/libbeat/processors.New","file.name":"processors/processor.go","file.line":114},"message":"Generated new processors: drop_event, condition=regexp: map[]","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2024-06-20T10:41:27.544Z","log.logger":"reload","log.origin":{"function":"github.com/elastic/beats/v7/libbeat/cfgfile.(*RunnerList).Reload","file.name":"cfgfile/list.go","file.line":155},"message":"Starting runner: RunnerGroup{system [metricsets=1], system [metricsets=1]}","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2024-06-20T10:41:27.544Z","log.logger":"module","log.origin":{"function":"github.com/elastic/beats/v7/metricbeat/mb/module.(*Wrapper).Start","file.name":"module/wrapper.go","file.line":129},"message":"Starting Wrapper[name=system, len(metricSetWrappers)=1]","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2024-06-20T10:41:27.544Z","log.logger":"module","log.origin":{"function":"github.com/elastic/beats/v7/metricbeat/mb/module.(*Wrapper).Start","file.name":"module/wrapper.go","file.line":129},"message":"Starting Wrapper[name=system, len(metricSetWrappers)=1]","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2024-06-20T10:41:27.544Z","log.logger":"module","log.origin":{"function":"github.com/elastic/beats/v7/metricbeat/mb/module.(*metricSetWrapper).run","file.name":"module/wrapper.go","file.line":191},"message":"Starting metricSetWrapper[module=system, name=process_summary, host=]","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2024-06-20T10:41:27.544Z","log.logger":"reload","log.origin":{"function":"github.com/elastic/beats/v7/libbeat/cfgfile.(*RunnerList).Reload","file.name":"cfgfile/list.go","file.line":155},"message":"Starting runner: RunnerGroup{system [metricsets=1]}","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2024-06-20T10:41:27.544Z","log.logger":"module","log.origin":{"function":"github.com/elastic/beats/v7/metricbeat/mb/module.(*Wrapper).Start","file.name":"module/wrapper.go","file.line":129},"message":"Starting Wrapper[name=system, len(metricSetWrappers)=1]","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2024-06-20T10:41:27.544Z","log.origin":{"function":"github.com/elastic/beats/v7/libbeat/cfgfile.(*Reloader).Run","file.name":"cfgfile/reload.go","file.line":223},"message":"Loading of config files completed.","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2024-06-20T10:41:27.545Z","log.logger":"module","log.origin":{"function":"github.com/elastic/beats/v7/metricbeat/mb/module.(*metricSetWrapper).run","file.name":"module/wrapper.go","file.line":191},"message":"Starting metricSetWrapper[module=system, name=socket_summary, host=]","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2024-06-20T10:41:27.546Z","log.logger":"module","log.origin":{"function":"github.com/elastic/beats/v7/metricbeat/mb/module.(*metricSetWrapper).run","file.name":"module/wrapper.go","file.line":191},"message":"Starting metricSetWrapper[module=system, name=memory, host=]","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2024-06-20T10:41:27.547Z","log.logger":"module","log.origin":{"function":"github.com/elastic/beats/v7/metricbeat/mb/module.(*metricSetWrapper).run","file.name":"module/wrapper.go","file.line":191},"message":"Starting metricSetWrapper[module=system, name=fsstat, host=]","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2024-06-20T10:41:27.547Z","log.logger":"libbeat.filesystem","log.origin":{"function":"github.com/elastic/elastic-agent-system-metrics/metric/system/filesystem.avoidFileSystem","file.name":"filesystem/filesystem.go","file.line":199},"message":"error stating filesystem: stat /dev/xvda4: no such file or directory","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2024-06-20T10:41:27.547Z","log.logger":"libbeat.filesystem","log.origin":{"function":"github.com/elastic/elastic-agent-system-metrics/metric/system/filesystem.avoidFileSystem","file.name":"filesystem/filesystem.go","file.line":199},"message":"error stating filesystem: stat /dev/xvda3: no such file or directory","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2024-06-20T10:41:27.547Z","log.logger":"libbeat.filesystem","log.origin":{"function":"github.com/elastic/elastic-agent-system-metrics/metric/system/filesystem.avoidFileSystem","file.name":"filesystem/filesystem.go","file.line":199},"message":"error stating filesystem: stat /dev/xvda2: no such file or directory","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2024-06-20T10:41:27.548Z","log.logger":"libbeat.filesystem","log.origin":{"function":"github.com/elastic/elastic-agent-system-metrics/metric/system/filesystem.avoidFileSystem","file.name":"filesystem/filesystem.go","file.line":199},"message":"error stating filesystem: stat /dev/xvda4: no such file or directory","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2024-06-20T10:41:27.548Z","log.logger":"libbeat.filesystem","log.origin":{"function":"github.com/elastic/elastic-agent-system-metrics/metric/system/filesystem.avoidFileSystem","file.name":"filesystem/filesystem.go","file.line":199},"message":"error stating filesystem: stat /dev/xvda4: no such file or directory","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2024-06-20T10:41:27.548Z","log.logger":"libbeat.filesystem","log.origin":{"function":"github.com/elastic/elastic-agent-system-metrics/metric/system/filesystem.avoidFileSystem","file.name":"filesystem/filesystem.go","file.line":199},"message":"error stating filesystem: stat /dev/xvda4: no such file or directory","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2024-06-20T10:41:27.548Z","log.logger":"system.fsstat","log.origin":{"function":"github.com/elastic/beats/v7/metricbeat/module/system/fsstat.(*MetricSet).Fetch","file.name":"fsstat/fsstat.go","file.line":84},"message":"error fetching filesystem stats for '/hostfs/run/docker/netns/default': error in Statfs syscall: permission denied","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2024-06-20T10:41:27.548Z","log.logger":"system.fsstat","log.origin":{"function":"github.com/elastic/beats/v7/metricbeat/module/system/fsstat.(*MetricSet).Fetch","file.name":"fsstat/fsstat.go","file.line":87},"message":"filesystem: /hostfs/boot/efi total=209489920, used=7368704, free=202121216","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2024-06-20T10:41:27.548Z","log.logger":"system.fsstat","log.origin":{"function":"github.com/elastic/beats/v7/metricbeat/module/system/fsstat.(*MetricSet).Fetch","file.name":"fsstat/fsstat.go","file.line":87},"message":"filesystem: /hostfs total=20122152960, used=2557485056, free=17564667904","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2024-06-20T10:41:27.549Z","log.logger":"system.fsstat","log.origin":{"function":"github.com/elastic/beats/v7/metricbeat/module/system/fsstat.(*MetricSet).Fetch","file.name":"fsstat/fsstat.go","file.line":87},"message":"filesystem: /hostfs/boot total=1006632960, used=175575040, free=831057920","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2024-06-20T10:41:27.546Z","log.logger":"module","log.origin":{"function":"github.com/elastic/beats/v7/metricbeat/mb/module.(*metricSetWrapper).run","file.name":"module/wrapper.go","file.line":191},"message":"Starting metricSetWrapper[module=system, name=filesystem, host=]","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2024-06-20T10:41:27.549Z","log.logger":"module","log.origin":{"function":"github.com/elastic/beats/v7/metricbeat/mb/module.(*metricSetWrapper).run","file.name":"module/wrapper.go","file.line":191},"message":"Starting metricSetWrapper[module=system, name=network, host=]","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2024-06-20T10:41:27.549Z","log.logger":"libbeat.filesystem","log.origin":{"function":"github.com/elastic/elastic-agent-system-metrics/metric/system/filesystem.avoidFileSystem","file.name":"filesystem/filesystem.go","file.line":199},"message":"error stating filesystem: stat /dev/xvda4: no such file or directory","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2024-06-20T10:41:27.549Z","log.logger":"libbeat.filesystem","log.origin":{"function":"github.com/elastic/elastic-agent-system-metrics/metric/system/filesystem.avoidFileSystem","file.name":"filesystem/filesystem.go","file.line":199},"message":"error stating filesystem: stat /dev/xvda3: no such file or directory","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2024-06-20T10:41:27.550Z","log.logger":"libbeat.filesystem","log.origin":{"function":"github.com/elastic/elastic-agent-system-metrics/metric/system/filesystem.avoidFileSystem","file.name":"filesystem/filesystem.go","file.line":199},"message":"error stating filesystem: stat /dev/xvda2: no such file or directory","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2024-06-20T10:41:27.550Z","log.logger":"libbeat.filesystem","log.origin":{"function":"github.com/elastic/elastic-agent-system-metrics/metric/system/filesystem.avoidFileSystem","file.name":"filesystem/filesystem.go","file.line":199},"message":"error stating filesystem: stat /dev/xvda4: no such file or directory","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2024-06-20T10:41:27.550Z","log.logger":"libbeat.filesystem","log.origin":{"function":"github.com/elastic/elastic-agent-system-metrics/metric/system/filesystem.avoidFileSystem","file.name":"filesystem/filesystem.go","file.line":199},"message":"error stating filesystem: stat /dev/xvda4: no such file or directory","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2024-06-20T10:41:27.550Z","log.logger":"libbeat.filesystem","log.origin":{"function":"github.com/elastic/elastic-agent-system-metrics/metric/system/filesystem.avoidFileSystem","file.name":"filesystem/filesystem.go","file.line":199},"message":"error stating filesystem: stat /dev/xvda4: no such file or directory","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"error","@timestamp":"2024-06-20T10:41:27.550Z","log.logger":"system.filesystem","log.origin":{"function":"github.com/elastic/beats/v7/metricbeat/module/system/filesystem.(*MetricSet).Fetch","file.name":"filesystem/filesystem.go","file.line":90},"message":"error getting filesystem usage for /hostfs/run/docker/netns/default: error in Statfs syscall: permission denied","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2024-06-20T10:41:27.551Z","log.logger":"module","log.origin":{"function":"github.com/elastic/beats/v7/metricbeat/mb/module.(*metricSetWrapper).run","file.name":"module/wrapper.go","file.line":191},"message":"Starting metricSetWrapper[module=system, name=process, host=]","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2024-06-20T10:41:27.552Z","log.logger":"module","log.origin":{"function":"github.com/elastic/beats/v7/metricbeat/mb/module.(*metricSetWrapper).run","file.name":"module/wrapper.go","file.line":191},"message":"Starting metricSetWrapper[module=system, name=uptime, host=]","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2024-06-20T10:41:27.553Z","log.origin":{"function":"github.com/elastic/elastic-agent-system-metrics/metric/system/cgroup/cgv2.(*IOSubsystem).Get","file.name":"cgv2/io.go","file.line":69},"message":"io.pressure does not exist. Skipping.","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2024-06-20T10:41:27.556Z","log.origin":{"function":"github.com/elastic/elastic-agent-system-metrics/metric/system/cgroup/cgv2.(*IOSubsystem).Get","file.name":"cgv2/io.go","file.line":69},"message":"io.pressure does not exist. Skipping.","service.name":"metricbeat","ecs.version":"1.6.0"}


{"log.level":"info","@timestamp":"2024-06-20T10:41:37.542Z","log.logger":"publisher_pipeline_output","log.origin":{"function":"github.com/elastic/beats/v7/libbeat/publisher/pipeline.(*netClientWorker).run","file.name":"pipeline/client_worker.go","file.line":137},"message":"Connecting to backoff(elasticsearch(https://a19ffa7567464fddbb058c9926092617.us-west2.gcp.elastic-cloud.com:443))","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2024-06-20T10:41:37.542Z","log.logger":"esclientleg","log.origin":{"function":"github.com/elastic/beats/v7/libbeat/esleg/eslegclient.(*Connection).Ping","file.name":"eslegclient/connection.go","file.line":284},"message":"ES Ping(url=https://a19ffa7567464fddbb058c9926092617.us-west2.gcp.elastic-cloud.com:443)","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2024-06-20T10:41:37.563Z","log.origin":{"function":"github.com/elastic/elastic-agent-system-metrics/metric/system/cgroup/cgv2.(*IOSubsystem).Get","file.name":"cgv2/io.go","file.line":69},"message":"io.pressure does not exist. Skipping.","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2024-06-20T10:41:37.564Z","log.origin":{"function":"github.com/elastic/elastic-agent-system-metrics/metric/system/cgroup/cgv2.(*IOSubsystem).Get","file.name":"cgv2/io.go","file.line":69},"message":"io.pressure does not exist. Skipping.","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2024-06-20T10:41:37.794Z","log.logger":"esclientleg","log.origin":{"function":"github.com/elastic/elastic-agent-libs/transport.LoggingDialer.func1","file.name":"transport/logging.go","file.line":43},"message":"Completed dialing successfully","service.name":"metricbeat","network":"tcp","address":"a19ffa7567464fddbb058c9926092617.us-west2.gcp.elastic-cloud.com:443","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2024-06-20T10:41:37.860Z","log.logger":"esclientleg","log.origin":{"function":"github.com/elastic/beats/v7/libbeat/esleg/eslegclient.(*Connection).Ping","file.name":"eslegclient/connection.go","file.line":303},"message":"Ping status code: 200","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2024-06-20T10:41:37.860Z","log.logger":"esclientleg","log.origin":{"function":"github.com/elastic/beats/v7/libbeat/esleg/eslegclient.(*Connection).Ping","file.name":"eslegclient/connection.go","file.line":304},"message":"Attempting to connect to Elasticsearch version 8.15.0-SNAPSHOT (default)","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2024-06-20T10:41:37.860Z","log.logger":"esclientleg","log.origin":{"function":"github.com/elastic/beats/v7/libbeat/esleg/eslegclient.(*Connection).Request","file.name":"eslegclient/connection.go","file.line":359},"message":"GET https://a19ffa7567464fddbb058c9926092617.us-west2.gcp.elastic-cloud.com:443/_license?human=false  <nil>","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2024-06-20T10:41:37.927Z","log.logger":"esclientleg","log.origin":{"function":"github.com/elastic/beats/v7/libbeat/esleg/eslegclient.(*Connection).Request","file.name":"eslegclient/connection.go","file.line":359},"message":"GET https://a19ffa7567464fddbb058c9926092617.us-west2.gcp.elastic-cloud.com:443/_license?human=false  <nil>","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2024-06-20T10:41:37.993Z","log.logger":"esclientleg","log.origin":{"function":"github.com/elastic/beats/v7/libbeat/esleg/eslegclient.(*Connection).Ping","file.name":"eslegclient/connection.go","file.line":284},"message":"ES Ping(url=https://a19ffa7567464fddbb058c9926092617.us-west2.gcp.elastic-cloud.com:443)","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2024-06-20T10:41:38.059Z","log.logger":"esclientleg","log.origin":{"function":"github.com/elastic/beats/v7/libbeat/esleg/eslegclient.(*Connection).Ping","file.name":"eslegclient/connection.go","file.line":303},"message":"Ping status code: 200","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2024-06-20T10:41:38.059Z","log.logger":"esclientleg","log.origin":{"function":"github.com/elastic/beats/v7/libbeat/esleg/eslegclient.(*Connection).Ping","file.name":"eslegclient/connection.go","file.line":304},"message":"Attempting to connect to Elasticsearch version 8.15.0-SNAPSHOT (default)","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2024-06-20T10:41:38.059Z","log.logger":"index-management","log.origin":{"function":"github.com/elastic/beats/v7/libbeat/idxmgmt.(*indexManager).Setup","file.name":"idxmgmt/index_support.go","file.line":254},"message":"Auto lifecycle enable success.","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2024-06-20T10:41:38.059Z","log.logger":"esclientleg","log.origin":{"function":"github.com/elastic/beats/v7/libbeat/esleg/eslegclient.(*Connection).Request","file.name":"eslegclient/connection.go","file.line":359},"message":"GET https://a19ffa7567464fddbb058c9926092617.us-west2.gcp.elastic-cloud.com:443/_ilm/policy/metricbeat  <nil>","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2024-06-20T10:41:38.127Z","log.logger":"index-management.ilm","log.origin":{"function":"github.com/elastic/beats/v7/libbeat/idxmgmt/lifecycle.(*stdManager).EnsurePolicy","file.name":"lifecycle/standard_manager.go","file.line":111},"message":"lifecycle policy metricbeat exists already.","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2024-06-20T10:41:38.127Z","log.logger":"index-management","log.origin":{"function":"github.com/elastic/beats/v7/libbeat/idxmgmt.applyLifecycleSettingsToTemplate","file.name":"idxmgmt/index_support.go","file.line":402},"message":"Set settings.index.lifecycle.name in template to metricbeat as ILM is enabled.","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2024-06-20T10:41:38.128Z","log.logger":"esclientleg","log.origin":{"function":"github.com/elastic/beats/v7/libbeat/esleg/eslegclient.(*Connection).Request","file.name":"eslegclient/connection.go","file.line":359},"message":"HEAD https://a19ffa7567464fddbb058c9926092617.us-west2.gcp.elastic-cloud.com:443/_index_template/metricbeat-8.15.0  <nil>","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2024-06-20T10:41:38.203Z","log.logger":"template_loader","log.origin":{"function":"github.com/elastic/beats/v7/libbeat/template.(*ESLoader).Load","file.name":"template/load.go","file.line":122},"message":"Template \"metricbeat-8.15.0\" already exists and will not be overwritten.","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2024-06-20T10:41:38.203Z","log.logger":"index-management","log.origin":{"function":"github.com/elastic/beats/v7/libbeat/idxmgmt.(*indexManager).Setup","file.name":"idxmgmt/index_support.go","file.line":299},"message":"Loaded index template.","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2024-06-20T10:41:38.203Z","log.logger":"esclientleg","log.origin":{"function":"github.com/elastic/beats/v7/libbeat/esleg/eslegclient.(*Connection).Request","file.name":"eslegclient/connection.go","file.line":359},"message":"GET https://a19ffa7567464fddbb058c9926092617.us-west2.gcp.elastic-cloud.com:443/  <nil>","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2024-06-20T10:41:38.269Z","log.logger":"publisher_pipeline_output","log.origin":{"function":"github.com/elastic/beats/v7/libbeat/publisher/pipeline.(*netClientWorker).run","file.name":"pipeline/client_worker.go","file.line":145},"message":"Connection to backoff(elasticsearch(https://a19ffa7567464fddbb058c9926092617.us-west2.gcp.elastic-cloud.com:443)) established","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2024-06-20T10:41:38.344Z","log.logger":"elasticsearch","log.origin":{"function":"github.com/elastic/beats/v7/libbeat/outputs/elasticsearch.(*Client).doBulkRequest","file.name":"elasticsearch/client.go","file.line":273},"message":"doBulkRequest: 15 events have been sent to elasticsearch in 74.573136ms.","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2024-06-20T10:41:38.344Z","log.logger":"publisher","log.origin":{"function":"github.com/elastic/beats/v7/libbeat/publisher/queue/memqueue.(*ackLoop).handleBatchSig","file.name":"memqueue/ackloop.go","file.line":80},"message":"ackloop: return ack to broker loop:15","service.name":"metricbeat","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2024-06-20T10:41:38.344Z","log.logger":"publisher","log.origin":{"function":"github.com/elastic/beats/v7/libbeat/publisher/queue/memqueue.(*ackLoop).handleBatchSig","file.name":"memqueue/ackloop.go","file.line":82},"message":"ackloop:  done send ack","service.name":"metricbeat","ecs.version":"1.6.0"}