Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Release 4.8.0 - RC 1 - Footprint Metrics - LOGCOLLECTOR,SYSCOLLECTOR (2.5d) #23281

Closed
wazuhci opened this issue May 6, 2024 · 5 comments
Closed

Comments

@wazuhci
Copy link

wazuhci commented May 6, 2024

Footprint metrics information

Main release stage issue # #23246
Main footprint metrics issue # #23254
Version 4.8.0
Release stage # RC 1
Tag https://github.com/wazuh/wazuh/tree/v4.8.0-rc1

Stress test documentation

Packages used


Manager
Centos agent
Ubuntu agent
Windows agent
macOS agent
  • Plots
  • Logs and configuration
  • CSV
Solaris agent
  • Plots
  • Logs and configuration
  • CSV

Conclusion 🔴

Plots compared to 4.7.4-RC2

Logs 🟡

Known issues:

Graphs 🔴

Known issue:

New issues:

@santipadilla
Copy link
Member

santipadilla commented May 6, 2024

Analysis report 🔴

Logs 🟡

Manager
  • Expected in stress test
2024/05/03 21:20:57 wazuh-logcollector WARNING: Target 'agent' message queue is full (1024). Log lines may be lost.
2024/05/03 22:33:15 wazuh-remoted WARNING: Message queue is full (10). Events may be lost.
2024/05/03 21:20:48 wazuh-logcollector WARNING: (1960): File limit has been reached (1000). Please reduce the number of files or increase "logcollector.max_files".
2024/05/03 21:20:57 wazuh-analysisd WARNING: Input queue is full.
2024/05/03 15:16:13 indexer-connector WARNING: No username and password found in the keystore, using default values.
2024/05/03 15:16:13 indexer-connector WARNING: IndexerConnector initialization failed for index 'wazuh-states-vulnerabilities', retrying until the connection is successful.
2024/05/03 15:17:25 indexer-connector WARNING: Failed to sync agent '000' with the indexer.
Ubuntu
  • Expected in stress test
2024/05/06 00:02:34 wazuh-agentd WARNING: Agent buffer is full: Events may be lost.
2024/05/03 21:21:04 wazuh-logcollector WARNING: (1960): File limit has been reached (1000). Please reduce the number of files or increase "logcollector.max_files".
2024/05/03 21:21:09 wazuh-logcollector WARNING: Target 'agent' message queue is full (1024). Log lines may be lost.
2024/05/03 15:19:07 wazuh-agentd ERROR: (1216): Unable to connect to '[172.31.3.116]:1514/tcp': 'Connection refused'.
CentOS
  • Expected in stress test
2024/05/03 21:20:34 wazuh-logcollector WARNING: (1960): File limit has been reached (1000). Please reduce the number of files or increase "logcollector.max_files".
2024/05/03 21:20:35 wazuh-logcollector WARNING: Target 'agent' message queue is full (1024). Log lines may be lost.
2024/05/03 21:20:35 wazuh-agentd WARNING: Agent buffer is full: Events may be lost.
2024/05/03 15:18:59 wazuh-modulesd WARNING: Process locked due to agent is offline. Waiting for connection...
2024/05/03 15:18:59 wazuh-agentd ERROR: (1137): Lost connection with manager. Setting lock.
2024/05/03 15:18:59 wazuh-agentd ERROR: (1216): Unable to connect to '[172.31.3.116]:1514/tcp': 'Connection refused'.
Windows
  • Expected in stress test
2024/05/04 00:00:12 wazuh-agent WARNING: Agent buffer at 90 %.
2024/05/04 00:00:21 wazuh-agent WARNING: Agent buffer is full: Events may be lost.
2024/05/04 00:06:08 wazuh-agent WARNING: (1960): File limit has been reached (200).
2024/05/03 21:20:42 wazuh-agent WARNING: Target 'agent' message queue is full (1024). Log lines may be lost.

Graphs 🔴

Manager

Disk: decrease of modulesd and db
PSS, RSS, USS: increase of modulesd

VMS: small increase of remoted, db and modulesd

CentOS

Disk: small decrease of modulesd
Disk_read: small decrease of modulesd
PSS, RSS, USS: increase of logcollector and modulesd

Ubuntu

Disk: small decrease of modulesd

Windows

No abnormalities were found

@Rebits
Copy link
Member

Rebits commented May 6, 2024

Logs

Graphs

  • Drastic increase of the memory used by modulesd
v4.8.0-RC1 v4.7.4-RC2
IMAGE IMAGE

Similar to the ALL test case (reported here), modulesd has increase greatly the usage of memory.
New issue is necessary to be opened

@santipadilla
Copy link
Member

santipadilla commented May 6, 2024

Done @Rebits, thanks!

@Rebits
Copy link
Member

Rebits commented May 6, 2024

LGTM

1 similar comment
@juliamagan
Copy link
Member

LGTM

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
Status: Done
Development

No branches or pull requests

4 participants