2021-01-11T07:50:26.104-0500 INFO operation/operator.go:245 operation 'operation-install' skipped for metricbeat.7.11.0 2021-01-11T07:50:26.104-0500 INFO operation/operator.go:245 operation 'operation-start' skipped for metricbeat.7.11.0 2021-01-11T07:50:26.106-0500 INFO operation/operation_fetch.go:61 endpoint-security.7.11.0 already exists in /Library/Elastic/Agent/data/elastic-agent-3e1fa8/downloads/endpoint-security-7.11.0-darwin-x86_64.tar.gz. Skipping operation operation-fetch 2021-01-11T07:50:26.106-0500 INFO operation/operation_fetch.go:61 endpoint-security.7.11.0 already exists in /Library/Elastic/Agent/data/elastic-agent-3e1fa8/downloads/endpoint-security-7.11.0-darwin-x86_64.tar.gz. Skipping operation operation-fetch 2021-01-11T07:50:26.409-0500 INFO operation/operator.go:245 operation 'operation-install' skipped for endpoint-security.7.11.0 2021-01-11T07:50:26.410-0500 INFO log/reporter.go:40 2021-01-11T07:50:26-05:00: type: 'STATE': sub_type: 'STARTING' message: Application: endpoint-security--7.11.0[2ba77b80-50f8-11eb-b9f1-fdff01fafd64]: State changed to STARTING: Starting 2021-01-11T07:50:26.580-0500 ERROR application/emitter.go:91 Failed to render configuration with latest context from composable controller: operator: failed to execute step sc-run, error: chown /Library/Elastic/Endpoint/state/log: operation not permitted: chown /Library/Elastic/Endpoint/state/log: operation not permitted 2021-01-11T07:50:26.580-0500 ERROR log/reporter.go:36 2021-01-11T07:50:26-05:00: type: 'ERROR': sub_type: 'FAILED' message: Application: endpoint-security--7.11.0[2ba77b80-50f8-11eb-b9f1-fdff01fafd64]: State changed to FAILED: chown /Library/Elastic/Endpoint/state/log: operation not permitted 2021-01-11T12:24:27.729-0500 ERROR application/fleet_gateway.go:187 Could not communicate with Checking API will retry, error: Status code: 503, Kibana returned an error: Service Unavailable, message: socket hang up 2021-01-11T15:00:29.425-0500 INFO stateresolver/stateresolver.go:48 New State ID is BooRn7KA 2021-01-11T15:00:29.426-0500 INFO stateresolver/stateresolver.go:49 Converging state requires execution of 4 step(s) 2021-01-11T15:00:29.426-0500 INFO operation/operation_fetch.go:61 metricbeat.7.11.0 already exists in /Library/Elastic/Agent/data/elastic-agent-3e1fa8/downloads/metricbeat-7.11.0-darwin-x86_64.tar.gz. Skipping operation operation-fetch 2021-01-11T15:00:29.426-0500 INFO operation/operation_fetch.go:61 metricbeat.7.11.0 already exists in /Library/Elastic/Agent/data/elastic-agent-3e1fa8/downloads/metricbeat-7.11.0-darwin-x86_64.tar.gz. Skipping operation operation-fetch 2021-01-11T15:00:29.582-0500 INFO operation/operator.go:245 operation 'operation-install' skipped for metricbeat.7.11.0 2021-01-11T15:00:29.582-0500 INFO operation/operator.go:245 operation 'operation-start' skipped for metricbeat.7.11.0 2021-01-11T15:00:29.583-0500 INFO operation/operation_fetch.go:61 endpoint-security.7.11.0 already exists in /Library/Elastic/Agent/data/elastic-agent-3e1fa8/downloads/endpoint-security-7.11.0-darwin-x86_64.tar.gz. Skipping operation operation-fetch 2021-01-11T15:00:29.583-0500 INFO operation/operation_fetch.go:61 endpoint-security.7.11.0 already exists in /Library/Elastic/Agent/data/elastic-agent-3e1fa8/downloads/endpoint-security-7.11.0-darwin-x86_64.tar.gz. Skipping operation operation-fetch 2021-01-11T15:00:29.856-0500 INFO operation/operator.go:245 operation 'operation-install' skipped for endpoint-security.7.11.0 2021-01-11T15:00:29.857-0500 INFO log/reporter.go:40 2021-01-11T15:00:29-05:00: type: 'STATE': sub_type: 'STARTING' message: Application: endpoint-security--7.11.0[2ba77b80-50f8-11eb-b9f1-fdff01fafd64]: State changed to STARTING: Starting 2021-01-11T15:00:30.013-0500 ERROR application/emitter.go:91 Failed to render configuration with latest context from composable controller: operator: failed to execute step sc-run, error: chown /Library/Elastic/Endpoint/state/log: operation not permitted: chown /Library/Elastic/Endpoint/state/log: operation not permitted 2021-01-11T15:00:30.014-0500 ERROR log/reporter.go:36 2021-01-11T15:00:30-05:00: type: 'ERROR': sub_type: 'FAILED' message: Application: endpoint-security--7.11.0[2ba77b80-50f8-11eb-b9f1-fdff01fafd64]: State changed to FAILED: chown /Library/Elastic/Endpoint/state/log: operation not permitted 2021-01-11T18:46:35.658-0500 ERROR application/fleet_gateway.go:187 Could not communicate with Checking API will retry, error: Status code: 503, Kibana returned an error: Service Unavailable, message: socket hang up 2021-01-11T19:07:18.529-0500 ERROR application/fleet_gateway.go:187 Could not communicate with Checking API will retry, error: Status code: 503, Kibana returned an error: Service Unavailable, message: socket hang up 2021-01-11T21:20:31.655-0500 ERROR application/fleet_gateway.go:187 Could not communicate with Checking API will retry, error: fail to checkin to fleet: Post "https://d04ba65eb0cb4515864ecc05b267ee8b.europe-west1.gcp.cloud.es.io:443/api/fleet/agents/2ba77b80-50f8-11eb-b9f1-fdff01fafd64/checkin?": net/http: request canceled (Client.Timeout exceeded while awaiting headers) 2021-01-11T21:27:05.784-0500 ERROR application/fleet_gateway.go:187 Could not communicate with Checking API will retry, error: fail to checkin to fleet: Post "https://d04ba65eb0cb4515864ecc05b267ee8b.europe-west1.gcp.cloud.es.io:443/api/fleet/agents/2ba77b80-50f8-11eb-b9f1-fdff01fafd64/checkin?": context deadline exceeded (Client.Timeout exceeded while awaiting headers) 2021-01-11T22:47:34.017-0500 ERROR application/fleet_gateway.go:187 Could not communicate with Checking API will retry, error: Status code: 503, Kibana returned an error: Service Unavailable, message: socket hang up 2021-01-11T23:52:26.933-0500 ERROR application/fleet_gateway.go:187 Could not communicate with Checking API will retry, error: Status code: 503, Kibana returned an error: Service Unavailable, message: socket hang up 2021-01-12T00:55:25.708-0500 ERROR application/fleet_gateway.go:187 Could not communicate with Checking API will retry, error: Status code: 503, Kibana returned an error: Service Unavailable, message: socket hang up 2021-01-12T02:31:41.673-0500 ERROR application/fleet_gateway.go:187 Could not communicate with Checking API will retry, error: Status code: 503, Kibana returned an error: Service Unavailable, message: socket hang up 2021-01-12T02:46:02.947-0500 ERROR application/fleet_gateway.go:187 Could not communicate with Checking API will retry, error: Status code: 503, Kibana returned an error: Service Unavailable, message: socket hang up 2021-01-12T02:50:49.678-0500 ERROR application/fleet_gateway.go:187 Could not communicate with Checking API will retry, error: Status code: 503, Kibana returned an error: Service Unavailable, message: socket hang up 2021-01-12T02:56:04.117-0500 ERROR application/fleet_gateway.go:187 Could not communicate with Checking API will retry, error: Status code: 503, Kibana returned an error: Service Unavailable, message: socket hang up 2021-01-12T03:14:37.370-0500 ERROR application/fleet_gateway.go:187 Could not communicate with Checking API will retry, error: Status code: 503, Kibana returned an error: Service Unavailable, message: socket hang up edavis-mbp:~ edavis$ ps ax | grep elstic 34127 s009 S+ 0:00.00 grep elstic edavis-mbp:~ edavis$ ps ax | grep elastic 207 ?? Ss 1:46.99 /Library/Elastic/Agent/elastic-agent 216 ?? ?s 0:00.00 /Library/Elastic/Endpoint/elastic-endpoint run 353 ?? ?s 0:00.00 co.elastic.systemextension 473 ?? Z 0:00.00 (elastic-agent) 484 ?? S 56:09.22 /Library/Elastic/Agent/data/elastic-agent-3e1fa8/install/metricbeat-7.11.0-darwin-x86_64/metricbeat -E setup.ilm.enabled=false -E setup.template.enabled=false -E management.mode=x-pack-fleet -E management.enabled=true -E logging.level=debug -E logging.level=info -E http.enabled=true -E http.host=unix:///tmp/elastic-agent/default/metricbeat/metricbeat.sock -E logging.json=true -E logging.ecs=true -E logging.files.path=/Library/Elastic/Agent/data/elastic-agent-3e1fa8/logs/default -E logging.files.name=metricbeat-json.log -E logging.files.keepfiles=7 -E logging.files.permission=0640 -E logging.files.interval=1h -E path.data=/Library/Elastic/Agent/data/elastic-agent-3e1fa8/run/default/metricbeat--7.11.0 34141 s009 R+ 0:00.01 grep elastic edavis-mbp:~ edavis$