Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Cherry-pick #17480 to 7.x: Add AWS tests to Jenkinsfile #18163

Merged
merged 1 commit into from
May 4, 2020

Conversation

jsoriano
Copy link
Member

@jsoriano jsoriano commented May 4, 2020

Cherry-pick of PR #17480 to 7.x branch. Original message:

What does this PR do?

Add execution of AWS integration tests for Metricbeat to Jenkinsfile. For that, a simple terraform scenario is created that seems to be enough to pass the AWS module tests, this scenario is started by Jenkins, and destroyed as a cleanup step. With this approach terraform scenarios are defined per module, this is consequent with other efforts we are doing with other integrations, where integration test scenarios are defined at the module level. Similar approach will be followed for input integration tests.

Most of the logic is added in the Jenkinsfile and as scripts. Some things could be moved to mage when we modify our targets to start scenarios depending on the type of provisioner. Some parts are going to continue being needed in Jenkinsfile in my opinion, as the archive of Terraform states for manual cleanups.

Summary of changes:

  • In Jenkinsfile:
    • Add a parameter to select provisioning and run all cloud tests, and another one specific for AWS tests.
    • Add a stage to x-pack metricbeat to provision scenarios, and a post cleanup stage to clean them up.
    • Terraform state is stashed so it can be used in other stages (this is required for cleanup). It is also archived to ease manual cleanups.
  • In mage, environment variables for cloud clients setup are passed through to integration tests scenarios for testing.
  • A simple terraform scenario is provided for AWS metricbeat module, seems enough to make current tests pass (except for s3_request, see note below).

Why is it important?

To be able to run AWS-related Metricbeat integration tests in Jenkins.

Pending for the future

  • The test for s3_request metricset doesn't pass only by creating S3 buckets, we may need to make some requests to this bucket? I am skipping it by now.
  • Allow to access to the Terraform state outputs in the tests. This is not possible at the moment because mageTarget cleans up the environment and only has a clean working copy of the code. This can be needed if we want to check for the metrics of an specific resource, or we want to collect logs from an specific endpoint. There are two approaches for that:
    • Refactor mageTarget so it is possible to unstash more things apart of the source.
    • Move environments provisioning to a mage target, so it can be run as part of mageTarget. We may still need to stash/archive the terraform state for cleanups or sharing the environment between stages.
  • Add framework for testing filebeat inputs, previous point will be probably needed.
  • Consider passing the credentials using files, instead of environment variables. This seems to be needed for Google Cloud, but can be tricky with current management of workspaces.
  • When terraform scenario grows, start using modules.

Checklist

  • My code follows the style guidelines of this project
  • I have commented my code, particularly in hard-to-understand areas
  • I have made corresponding changes to the documentation
  • I have made corresponding change to the default configuration files
  • I have added tests that prove my fix is effective or that my feature works
  • I have added an entry in CHANGELOG.next.asciidoc or CHANGELOG-developer.next.asciidoc.

Author's Checklist

  • Load credentials.
  • Actually do the provisioning of the scenario.
  • Double check that everything works with or without cloud tests.
  • Add somewhere some guidelines about terraform, and a checklist to add a new environment:
    - Execution of tests with mage can be selected using the `TEST_TAGS` environment variable, e.g: TEST_TAGS=aws.
    - There is some terraform configuration that defines a cloud scenario where tests pass.
    - In the Jenkinsfile:
      - Add a boolean parameter to run the tests on this environment, e.g. `awsCloudTests`.
      - Add a conditional block in `withCloudTestEnv` that:
         - Will be executed if the previoysly added boolean parameter, or `allCloudTests` are set to true.
         - Adds the tag to `TEST_TAGS` (as comma separated values).
         - Defines how to obtain the credentials and provide them to the tests.
      - In the stage of the specific beat:
        - Add a stage that calls to `startCloudTestEnv`, if there isn't anyone.
        - Add a post cleanup step that calls to `terraformCleanup`, if there isn't anyone.
        - Add a environment to the list of environments started by `startCloudEnv`, with the condition to start the scenario, and the path to the directory with its definition, e.g. `[cond: params.awsCloudTests, dir: 'x-pack/metricbeat/module/aws']`
    

Related issues

Add execution of AWS integration tests for Metricbeat to Jenkinsfile.
For that, a simple terraform scenario is created that seems to be
enough to pass the AWS module tests, this scenario is started by
Jenkins, and destroyed as a cleanup step. With this approach terraform
scenarios are defined per module, this is consequent with other efforts
we are doing with other integrations, where integration test scenarios
are defined at the module level. Similar approach will be possibly
followed for input integration tests.

Most of the logic is added in the Jenkinsfile and as scripts. Some things
could be moved to mage when we modify our targets to start scenarios
depending on the type of provisioner. Some parts are going to continue
being needed in Jenkinsfile in my opinion, as the archive of Terraform
states for manual cleanups.

(cherry picked from commit c94d4bf)
@botelastic botelastic bot added the needs_team Indicates that the issue/PR needs a Team:* label label May 4, 2020
@jsoriano jsoriano self-assigned this May 4, 2020
@elasticmachine
Copy link
Collaborator

💔 Build Failed

Pipeline View Test View Changes Artifacts preview stats

Expand to view the summary

Build stats

Test stats 🧪

Test Results
Failed 1
Passed 5665
Skipped 854
Total 6520

Test errors

Expand to view the tests failures

  • Name: Build and Test / Auditbeat x-pack / test_dns_long_request – test_system_socket.Test

    • Status: FAILED
    • Age: 1
    • Duration: 31.181
    • Error Details: The events in: [
      {
      "@timestamp": "2020-05-04T08:44:36.161Z",
      "agent.ephemeral_id": "ef918548-8137-4ca4-b94b-c890a2e46160",
      "agent.hostname": "b694d587a174",
      "agent.id": "0bc9172d-279d-4448-9ed5-fe9af7a26b92",
      "agent.type": "auditbeat",
      "agent.version": "7.8.0",
      "client.bytes": 64,
      "client.ip": "127.231.189.115",
      "client.packets": 1,
      "client.port": 46672,
      "destination.bytes": 72,
      "destination.ip": "127.216.54.133",
      "destination.packets": 1,
      "destination.port": 53,
      "ecs.version": "1.5.0",
      "event.action": "network_flow",
      "event.category": "network_traffic",
      "event.dataset": "socket",
      "event.duration": 20354,
      "event.end": "2020-05-04T08:44:33.311Z",
      "event.kind": "event",
      "event.module": "system",
      "event.start": "2020-05-04T08:44:33.311Z",
      "flow.complete": false,
      "flow.final": true,
      "group.id": "0",
      "group.name": "root",
      "host.name": "b694d587a174",
      "network.bytes": 136,
      "network.community_id": "1:E+9qYs5nrV5nJiYO72pxMZTHpc0=",
      "network.direction": "inbound",
      "network.packets": 2,
      "network.transport": "udp",
      "network.type": "ipv4",
      "process.args": [
      "/tmp/python-env/build/ve/docker/bin/python3",
      "/tmp/python-env/build/ve/docker/bin/nosetests",
      "--process-timeout=90",
      "--with-timer",
      "--with-xunit",
      "--xunit-file=build/TEST-python-integration.xml",
      "tests/system/test_metricsets.py",
      "tests/system/test_system_socket.py"
      ],
      "process.created": "2020-05-04T08:43:58.970Z",
      "process.executable": "/usr/bin/python3.7",
      "process.name": "nosetests",
      "process.pid": 48356,
      "server.bytes": 72,
      "server.ip": "127.216.54.133",
      "server.packets": 1,
      "server.port": 53,
      "service.type": "system",
      "source.bytes": 64,
      "source.ip": "127.231.189.115",
      "source.packets": 1,
      "source.port": 46672,
      "system.audit.socket.egid": 0,
      "system.audit.socket.euid": 0,
      "system.audit.socket.gid": 0,
      "system.audit.socket.kernel_sock_address": "0xffff91362aaf8000",
      "system.audit.socket.uid": 0,
      "user.id": "0",
      "user.name": "root"
      },
      {
      "@timestamp": "2020-05-04T08:44:36.161Z",
      "agent.ephemeral_id": "ef918548-8137-4ca4-b94b-c890a2e46160",
      "agent.hostname": "b694d587a174",
      "agent.id": "0bc9172d-279d-4448-9ed5-fe9af7a26b92",
      "agent.type": "auditbeat",
      "agent.version": "7.8.0",
      "client.bytes": 56,
      "client.ip": "127.231.189.115",
      "client.packets": 1,
      "client.port": 46672,
      "destination.bytes": 80,
      "destination.ip": "127.216.54.133",
      "destination.packets": 1,
      "destination.port": 53,
      "ecs.version": "1.5.0",
      "event.action": "network_flow",
      "event.category": "network_traffic",
      "event.dataset": "socket",
      "event.duration": 112932,
      "event.end": "2020-05-04T08:44:33.312Z",
      "event.kind": "event",
      "event.module": "system",
      "event.start": "2020-05-04T08:44:33.311Z",
      "flow.complete": false,
      "flow.final": true,
      "group.id": "0",
      "group.name": "root",
      "host.name": "b694d587a174",
      "network.bytes": 136,
      "network.community_id": "1:E+9qYs5nrV5nJiYO72pxMZTHpc0=",
      "network.direction": "outbound",
      "network.packets": 2,
      "network.transport": "udp",
      "network.type": "ipv4",
      "process.args": [
      "/tmp/python-env/build/ve/docker/bin/python3",
      "/tmp/python-env/build/ve/docker/bin/nosetests",
      "--process-timeout=90",
      "--with-timer",
      "--with-xunit",
      "--xunit-file=build/TEST-python-integration.xml",
      "tests/system/test_metricsets.py",
      "tests/system/test_system_socket.py"
      ],
      "process.created": "2020-05-04T08:43:58.970Z",
      "process.executable": "/usr/bin/python3.7",
      "process.name": "nosetests",
      "process.pid": 48356,
      "server.bytes": 80,
      "server.ip": "127.216.54.133",
      "server.packets": 1,
      "server.port": 53,
      "service.type": "system",
      "source.bytes": 56,
      "source.ip": "127.231.189.115",
      "source.packets": 1,
      "source.port": 46672,
      "system.audit.socket.egid": 0,
      "system.audit.socket.euid": 0,
      "system.audit.socket.gid": 0,
      "system.audit.socket.kernel_sock_address": "0xffff91362aafac00",
      "system.audit.socket.uid": 0,
      "user.id": "0",
      "user.name": "root"
      },
      {
      "@timestamp": "2020-05-04T08:44:37.161Z",
      "agent.ephemeral_id": "ef918548-8137-4ca4-b94b-c890a2e46160",
      "agent.hostname": "b694d587a174",
      "agent.id": "0bc9172d-279d-4448-9ed5-fe9af7a26b92",
      "agent.type": "auditbeat",
      "agent.version": "7.8.0",
      "client.bytes": 52,
      "client.ip": "10.224.1.158",
      "client.packets": 1,
      "client.port": 50512,
      "destination.bytes": 32,
      "destination.ip": "54.177.125.139",
      "destination.packets": 1,
      "destination.port": 9243,
      "ecs.version": "1.5.0",
      "event.action": "network_flow",
      "event.category": "network_traffic",
      "event.dataset": "socket",
      "event.duration": 40310134,
      "event.end": "2020-05-04T08:44:34.305Z",
      "event.kind": "event",
      "event.module": "system",
      "event.start": "2020-05-04T08:44:34.265Z",
      "flow.complete": false,
      "flow.final": true,
      "host.name": "b694d587a174",
      "network.bytes": 84,
      "network.community_id": "1:hwVoGKwqDt9vyAnr8N8PlikG/gs=",
      "network.direction": "unknown",
      "network.packets": 2,
      "network.transport": "tcp",
      "network.type": "ipv4",
      "server.bytes": 32,
      "server.ip": "54.177.125.139",
      "server.packets": 1,
      "server.port": 9243,
      "service.type": "system",
      "source.bytes": 52,
      "source.ip": "10.224.1.158",
      "source.packets": 1,
      "source.port": 50512,
      "system.audit.socket.kernel_sock_address": "0xffff913653c80000"
      },
      {
      "@timestamp": "2020-05-04T08:44:37.161Z",
      "agent.ephemeral_id": "ef918548-8137-4ca4-b94b-c890a2e46160",
      "agent.hostname": "b694d587a174",
      "agent.id": "0bc9172d-279d-4448-9ed5-fe9af7a26b92",
      "agent.type": "auditbeat",
      "agent.version": "7.8.0",
      "client.bytes": 3433,
      "client.ip": "10.224.1.158",
      "client.packets": 2,
      "client.port": 52016,
      "destination.bytes": 99,
      "destination.ip": "35.184.73.24",
      "destination.packets": 2,
      "destination.port": 5001,
      "ecs.version": "1.5.0",
      "event.action": "network_flow",
      "event.category": "network_traffic",
      "event.dataset": "socket",
      "event.duration": 2303328,
      "event.end": "2020-05-04T08:44:34.317Z",
      "event.kind": "event",
      "event.module": "system",
      "event.start": "2020-05-04T08:44:34.314Z",
      "flow.complete": false,
      "flow.final": true,
      "group.id": "0",
      "group.name": "root",
      "host.name": "b694d587a174",
      "network.bytes": 3532,
      "network.community_id": "1:RbCKhekHI/3gR7oowAoFLKnKEXY=",
      "network.direction": "unknown",
      "network.packets": 4,
      "network.transport": "tcp",
      "network.type": "ipv4",
      "process.args": [
      "/usr/local/bin/auditbeat",
      "-e",
      "-c",
      "/etc/auditbeat/auditbeat.yml"
      ],
      "process.created": "2020-05-04T08:22:38.920Z",
      "process.executable": "/opt/auditbeat-7.3.0-linux-x86_64/auditbeat",
      "process.name": "auditbeat",
      "process.pid": 2356,
      "server.bytes": 99,
      "server.ip": "35.184.73.24",
      "server.packets": 2,
      "server.port": 5001,
      "service.type": "system",
      "source.bytes": 3433,
      "source.ip": "10.224.1.158",
      "source.packets": 2,
      "source.port": 52016,
      "system.audit.socket.egid": 0,
      "system.audit.socket.euid": 0,
      "system.audit.socket.gid": 0,
      "system.audit.socket.kernel_sock_address": "0xffff9136550de800",
      "system.audit.socket.uid": 0,
      "user.id": "0",
      "user.name": "root"
      },
      {
      "@timestamp": "2020-05-04T08:44:39.161Z",
      "agent.ephemeral_id": "ef918548-8137-4ca4-b94b-c890a2e46160",
      "agent.hostname": "b694d587a174",
      "agent.id": "0bc9172d-279d-4448-9ed5-fe9af7a26b92",
      "agent.type": "auditbeat",
      "agent.version": "7.8.0",
      "client.bytes": 39400,
      "client.ip": "10.224.1.158",
      "client.packets": 60,
      "client.port": 57626,
      "destination.bytes": 66472,
      "destination.ip": "10.224.0.26",
      "destination.packets": 41,
      "destination.port": 49187,
      "ecs.version": "1.5.0",
      "event.action": "network_flow",
      "event.category": "network_traffic",
      "event.dataset": "socket",
      "event.duration": 4845585616,
      "event.end": "2020-05-04T08:44:38.020Z",
      "event.kind": "event",
      "event.module": "system",
      "event.start": "2020-05-04T08:44:33.175Z",
      "flow.complete": false,
      "flow.final": true,
      "group.id": "1158",
      "host.name": "b694d587a174",
      "network.bytes": 105872,
      "network.community_id": "1:fLcSsvECg2ksfs5k6ptaYRm+IYA=",
      "network.direction": "unknown",
      "network.packets": 101,
      "network.transport": "tcp",
      "network.type": "ipv4",
      "process.args": [
      "java",
      "-Djava.util.logging.config.file=/var/lib/jenkins/logging.properties",
      "-javaagent:/opt/jolokia/jolokia-agent.jar=config=/opt/jolokia/jolokia.properties",
      "-Dorg.jenkinsci.plugins.gitclient.Git.timeOut=10",
      "-jar",
      "/usr/local/share/jenkins/swarm-client-3.17.jar",
      "-description",
      "Ubuntu 16.04 - 2 CPU Cores / 3539 MB Memory",
      "-disableClientsUniqueId",
      "-executors",
      "1",
      "-fsroot",
      "/var/lib/jenkins",
      "-master",
      "https://beats-ci.elastic.co/",
      "-maxRetryInterval",
      "160",
      "-retryBackOffStrategy",
      "linear",
      "-mode",
      "exclusive",
      "-name",
      "beats-ci-immutable-ubuntu-1604-1588580521584033348",
      "-username",
      "local-admin",
      "-password",
      "1101471da3a313cbf3999ee6888d412a7e",
      "-name",
      "beats-ci-immutable-ubuntu-1604-1588580521584033348",
      "-master",
      "https://beats-ci.elastic.co",
      "-username",
      "local-admin",
      "-password",
      "11af84f32a633296a49297085d82b8279d",
      "-labels",
      "docker",
      "-labels",
      "immutable",
      "-labels",
      "linux",
      "-labels",
      "linux-immutable",
      "-labels",
      "swarm",
      "-labels",
      "ubuntu",
      "-labels",
      "ubuntu-16.04",
      "-labels",
      "ubuntu-16",
      "-labels",
      "virtual",
      "-labels",
      "x86_64",
      "-description",
      "MachineType:n1-highmem-4,DiskSize:150"
      ],
      "process.created": "2020-05-04T08:22:38.920Z",
      "process.executable": "/usr/lib/jvm/java-8-openjdk-amd64/jre/bin/java",
      "process.name": "java",
      "process.pid": 2349,
      "server.bytes": 66472,
      "server.ip": "10.224.0.26",
      "server.packets": 41,
      "server.port": 49187,
      "service.type": "system",
      "source.bytes": 39400,
      "source.ip": "10.224.1.158",
      "source.packets": 60,
      "source.port": 57626,
      "system.audit.socket.egid": 1158,
      "system.audit.socket.euid": 1157,
      "system.audit.socket.gid": 1158,
      "system.audit.socket.kernel_sock_address": "0xffff913655313b80",
      "system.audit.socket.uid": 1157,
      "user.id": "1157"
      },
      {
      "@timestamp": "2020-05-04T08:44:40.161Z",
      "agent.ephemeral_id": "ef918548-8137-4ca4-b94b-c890a2e46160",
      "agent.hostname": "b694d587a174",
      "agent.id": "0bc9172d-279d-4448-9ed5-fe9af7a26b92",
      "agent.type": "auditbeat",
      "agent.version": "7.8.0",
      "client.bytes": 2195,
      "client.ip": "10.224.1.158",
      "client.packets": 2,
      "client.port": 52016,
      "destination.bytes": 99,
      "destination.ip": "35.184.73.24",
      "destination.packets": 2,
      "destination.port": 5001,
      "ecs.version": "1.5.0",
      "event.action": "network_flow",
      "event.category": "network_traffic",
      "event.dataset": "socket",
      "event.duration": 2060110,
      "event.end": "2020-05-04T08:44:37.965Z",
      "event.kind": "event",
      "event.module": "system",
      "event.start": "2020-05-04T08:44:37.963Z",
      "flow.complete": false,
      "flow.final": true,
      "group.id": "0",
      "group.name": "root",
      "host.name": "b694d587a174",
      "network.bytes": 2294,
      "network.community_id": "1:RbCKhekHI/3gR7oowAoFLKnKEXY=",
      "network.direction": "unknown",
      "network.packets": 4,
      "network.transport": "tcp",
      "network.type": "ipv4",
      "process.args": [
      "/usr/local/bin/auditbeat",
      "-e",
      "-c",
      "/etc/auditbeat/auditbeat.yml"
      ],
      "process.created": "2020-05-04T08:22:38.920Z",
      "process.executable": "/opt/auditbeat-7.3.0-linux-x86_64/auditbeat",
      "process.name": "auditbeat",
      "process.pid": 2356,
      "server.bytes": 99,
      "server.ip": "35.184.73.24",
      "server.packets": 2,
      "server.port": 5001,
      "service.type": "system",
      "source.bytes": 2195,
      "source.ip": "10.224.1.158",
      "source.packets": 2,
      "source.port": 52016,
      "system.audit.socket.egid": 0,
      "system.audit.socket.euid": 0,
      "system.audit.socket.gid": 0,
      "system.audit.socket.kernel_sock_address": "0xffff9136550de800",
      "system.audit.socket.uid": 0,
      "user.id": "0",
      "user.name": "root"
      },
      {
      "@timestamp": "2020-05-04T08:44:41.161Z",
      "agent.ephemeral_id": "ef918548-8137-4ca4-b94b-c890a2e46160",
      "agent.hostname": "b694d587a174",
      "agent.id": "0bc9172d-279d-4448-9ed5-fe9af7a26b92",
      "agent.type": "auditbeat",
      "agent.version": "7.8.0",
      "client.bytes": 40,
      "client.ip": "10.224.1.158",
      "client.packets": 1,
      "client.port": 45914,
      "destination.bytes": 20,
      "destination.ip": "169.254.169.254",
      "destination.packets": 1,
      "destination.port": 80,
      "ecs.version": "1.5.0",
      "event.action": "network_flow",
      "event.category": "network_traffic",
      "event.dataset": "socket",
      "event.duration": 99005,
      "event.end": "2020-05-04T08:44:38.512Z",
      "event.kind": "event",
      "event.module": "system",
      "event.start": "2020-05-04T08:44:38.512Z",
      "flow.complete": false,
      "flow.final": true,
      "group.id": "0",
      "group.name": "root",
      "host.name": "b694d587a174",
      "network.bytes": 60,
      "network.community_id": "1:ESQTKx9ZnnDJls4oXrFk1GjxsjM=",
      "network.direction": "unknown",
      "network.packets": 2,
      "network.transport": "tcp",
      "network.type": "ipv4",
      "process.args": [
      "/usr/bin/python3",
      "/usr/bin/google_clock_skew_daemon"
      ],
      "process.created": "2020-05-04T08:22:37.120Z",
      "process.executable": "/usr/bin/python3.5",
      "process.name": "google_clock_sk",
      "process.pid": 1919,
      "server.bytes": 20,
      "server.ip": "169.254.169.254",
      "server.packets": 1,
      "server.port": 80,
      "service.type": "system",
      "source.bytes": 40,
      "source.ip": "10.224.1.158",
      "source.packets": 1,
      "source.port": 45914,
      "system.audit.socket.egid": 0,
      "system.audit.socket.euid": 0,
      "system.audit.socket.gid": 0,
      "system.audit.socket.kernel_sock_address": "0xffff913653d05000",
      "system.audit.socket.uid": 0,
      "user.id": "0",
      "user.name": "root"
      },
      {
      "@timestamp": "2020-05-04T08:44:41.161Z",
      "agent.ephemeral_id": "ef918548-8137-4ca4-b94b-c890a2e46160",
      "agent.hostname": "b694d587a174",
      "agent.id": "0bc9172d-279d-4448-9ed5-fe9af7a26b92",
      "agent.type": "auditbeat",
      "agent.version": "7.8.0",
      "client.bytes": 433,
      "client.ip": "10.224.1.158",
      "client.packets": 3,
      "client.port": 45926,
      "destination.bytes": 68,
      "destination.ip": "169.254.169.254",
      "destination.packets": 3,
      "destination.port": 80,
      "ecs.version": "1.5.0",
      "event.action": "network_flow",
      "event.category": "network_traffic",
      "event.dataset": "socket",
      "event.duration": 703884,
      "event.end": "2020-05-04T08:44:38.514Z",
      "event.kind": "event",
      "event.module": "system",
      "event.start": "2020-05-04T08:44:38.513Z",
      "flow.complete": true,
      "flow.final": true,
      "group.id": "0",
      "group.name": "root",
      "host.name": "b694d587a174",
      "network.bytes": 501,
      "network.community_id": "1:HbhUZ5gNf5OOHg/A+E3DnNq74g4=",
      "network.direction": "outbound",
      "network.packets": 6,
      "network.transport": "tcp",
      "network.type": "ipv4",
      "process.args": [
      "/usr/bin/python3",
      "/usr/bin/google_clock_skew_daemon"
      ],
      "process.created": "2020-05-04T08:22:37.120Z",
      "process.executable": "/usr/bin/python3.5",
      "process.name": "google_clock_sk",
      "process.pid": 1919,
      "server.bytes": 68,
      "server.ip": "169.254.169.254",
      "server.packets": 3,
      "server.port": 80,
      "service.type": "system",
      "source.bytes": 433,
      "source.ip": "10.224.1.158",
      "source.packets": 3,
      "source.port": 45926,
      "system.audit.socket.egid": 0,
      "system.audit.socket.euid": 0,
      "system.audit.socket.gid": 0,
      "system.audit.socket.kernel_sock_address": "0xffff913653d02800",
      "system.audit.socket.uid": 0,
      "user.id": "0",
      "user.name": "root"
      },
      {
      "@timestamp": "2020-05-04T08:44:41.161Z",
      "agent.ephemeral_id": "ef918548-8137-4ca4-b94b-c890a2e46160",
      "agent.hostname": "b694d587a174",
      "agent.id": "0bc9172d-279d-4448-9ed5-fe9af7a26b92",
      "agent.type": "auditbeat",
      "agent.version": "7.8.0",
      "client.bytes": 80,
      "client.ip": "10.224.1.158",
      "client.packets": 2,
      "client.port": 45918,
      "destination.bytes": 300,
      "destination.ip": "169.254.169.254",
      "destination.packets": 2,
      "destination.port": 80,
      "ecs.version": "1.5.0",
      "event.action": "network_flow",
      "event.category": "network_traffic",
      "event.dataset": "socket",
      "event.duration": 41706065,
      "event.end": "2020-05-04T08:44:38.553Z",
      "event.kind": "event",
      "event.module": "system",
      "event.start": "2020-05-04T08:44:38.511Z",
      "flow.complete": false,
      "flow.final": true,
      "host.name": "b694d587a174",
      "network.bytes": 380,
      "network.community_id": "1:V+OagYenarGZ2gwM/gZEoGjuhyI=",
      "network.direction": "unknown",
      "network.packets": 4,
      "network.transport": "tcp",
      "network.type": "ipv4",
      "server.bytes": 300,
      "server.ip": "169.254.169.254",
      "server.packets": 2,
      "server.port": 80,
      "service.type": "system",
      "source.bytes": 80,
      "source.ip": "10.224.1.158",
      "source.packets": 2,
      "source.port": 45918,
      "system.audit.socket.kernel_sock_address": "0xffff913653d07800"
      },
      {
      "@timestamp": "2020-05-04T08:44:42.161Z",
      "agent.ephemeral_id": "ef918548-8137-4ca4-b94b-c890a2e46160",
      "agent.hostname": "b694d587a174",
      "agent.id": "0bc9172d-279d-4448-9ed5-fe9af7a26b92",
      "agent.type": "auditbeat",
      "agent.version": "7.8.0",
      "client.bytes": 80,
      "client.ip": "10.224.1.158",
      "client.packets": 2,
      "client.port": 45916,
      "destination.bytes": 8146,
      "destination.ip": "169.254.169.254",
      "destination.packets": 3,
      "destination.port": 80,
      "ecs.version": "1.5.0",
      "event.action": "network_flow",
      "event.category": "network_traffic",
      "event.dataset": "socket",
      "event.duration": 951660,
      "event.end": "2020-05-04T08:44:39.443Z",
      "event.kind": "event",
      "event.module": "system",
      "event.start": "2020-05-04T08:44:39.442Z",
      "flow.complete": false,
      "flow.final": true,
      "group.id": "0",
      "group.name": "root",
      "host.name": "b694d587a174",
      "network.bytes": 8226,
      "network.community_id": "1:h2kMSo8t070aXfNUL5DZrlY1AWc=",
      "network.direction": "unknown",
      "network.packets": 5,
      "network.transport": "tcp",
      "network.type": "ipv4",
      "process.args": [
      "/usr/bin/python3",
      "/usr/bin/google_accounts_daemon"
      ],
      "process.created": "2020-05-04T08:22:37.130Z",
      "process.executable": "/usr/bin/python3.5",
      "process.name": "google_accounts",
      "process.pid": 1920,
      "server.bytes": 8146,
      "server.ip": "169.254.169.254",
      "server.packets": 3,
      "server.port": 80,
      "service.type": "system",
      "source.bytes": 80,
      "source.ip": "10.224.1.158",
      "source.packets": 2,
      "source.port": 45916,
      "system.audit.socket.egid": 0,
      "system.audit.socket.euid": 0,
      "system.audit.socket.gid": 0,
      "system.audit.socket.kernel_sock_address": "0xffff913653c86000",
      "system.audit.socket.uid": 0,
      "user.id": "0",
      "user.name": "root"
      },
      {
      "@timestamp": "2020-05-04T08:44:42.161Z",
      "agent.ephemeral_id": "ef918548-8137-4ca4-b94b-c890a2e46160",
      "agent.hostname": "b694d587a174",
      "agent.id": "0bc9172d-279d-4448-9ed5-fe9af7a26b92",
      "agent.type": "auditbeat",
      "agent.version": "7.8.0",
      "client.bytes": 398,
      "client.ip": "10.224.1.158",
      "client.packets": 3,
      "client.port": 45928,
      "destination.bytes": 68,
      "destination.ip": "169.254.169.254",
      "destination.packets": 3,
      "destination.port": 80,
      "ecs.version": "1.5.0",
      "event.action": "network_flow",
      "event.category": "network_traffic",
      "event.dataset": "socket",
      "event.duration": 585774,
      "event.end": "2020-05-04T08:44:39.464Z",
      "event.kind": "event",
      "event.module": "system",
      "event.start": "2020-05-04T08:44:39.463Z",
      "flow.complete": true,
      "flow.final": true,
      "group.id": "0",
      "group.name": "root",
      "host.name": "b694d587a174",
      "network.bytes": 466,
      "network.community_id": "1:wGLdOgjZZXl+hDQwm1Zshxk/LMI=",
      "network.direction": "outbound",
      "network.packets": 6,
      "network.transport": "tcp",
      "network.type": "ipv4",
      "process.args": [
      "/usr/bin/python3",
      "/usr/bin/google_accounts_daemon"
      ],
      "process.created": "2020-05-04T08:22:37.130Z",
      "process.executable": "/usr/bin/python3.5",
      "process.name": "google_accounts",
      "process.pid": 1920,
      "server.bytes": 68,
      "server.ip": "169.254.169.254",
      "server.packets": 3,
      "server.port": 80,
      "service.type": "system",
      "source.bytes": 398,
      "source.ip": "10.224.1.158",
      "source.packets": 3,
      "source.port": 45928,
      "system.audit.socket.egid": 0,
      "system.audit.socket.euid": 0,
      "system.audit.socket.gid": 0,
      "system.audit.socket.kernel_sock_address": "0xffff9136601d0800",
      "system.audit.socket.uid": 0,
      "user.id": "0",
      "user.name": "root"
      },
      {
      "@timestamp": "2020-05-04T08:44:43.161Z",
      "agent.ephemeral_id": "ef918548-8137-4ca4-b94b-c890a2e46160",
      "agent.hostname": "b694d587a174",
      "agent.id": "0bc9172d-279d-4448-9ed5-fe9af7a26b92",
      "agent.type": "auditbeat",
      "agent.version": "7.8.0",
      "client.bytes": 1198,
      "client.ip": "127.0.0.1",
      "client.packets": 4,
      "client.port": 40568,
      "destination.bytes": 1567,
      "destination.ip": "127.0.0.1",
      "destination.packets": 3,
      "destination.port": 8778,
      "ecs.version": "1.5.0",
      "event.action": "network_flow",
      "event.category": "network_traffic",
      "event.dataset": "socket",
      "event.duration": 2132319,
      "event.end": "2020-05-04T08:44:40.170Z",
      "event.kind": "event",
      "event.module": "system",
      "event.start": "2020-05-04T08:44:40.168Z",
      "flow.complete": false,
      "flow.final": true,
      "group.id": "0",
      "group.name": "root",
      "host.name": "b694d587a174",
      "network.bytes": 2765,
      "network.community_id": "1:fk16r/MX4mNxse9zgzHCkYMcb1s=",
      "network.direction": "unknown",
      "network.packets": 7,
      "network.transport": "tcp",
      "network.type": "ipv4",
      "process.args": [
      "/usr/local/bin/metricbeat",
      "-e",
      "-c",
      "/etc/metricbeat/metricbeat.yml",
      "--path.home",
      "/etc/metricbeat"
      ],
      "process.created": "2020-05-04T08:22:38.920Z",
      "process.executable": "/opt/metricbeat-7.3.2-linux-x86_64/metricbeat",
      "process.name": "metricbeat",
      "process.pid": 2352,
      "server.bytes": 1567,
      "server.ip": "127.0.0.1",
      "server.packets": 3,
      "server.port": 8778,
      "service.type": "system",
      "source.bytes": 1198,
      "source.ip": "127.0.0.1",
      "source.packets": 4,
      "source.port": 40568,
      "system.audit.socket.egid": 0,
      "system.audit.socket.euid": 0,
      "system.audit.socket.gid": 0,
      "system.audit.socket.kernel_sock_address": "0xffff9136601d3800",
      "system.audit.socket.uid": 0,
      "user.id": "0",
      "user.name": "root"
      },
      {
      "@timestamp": "2020-05-04T08:44:43.162Z",
      "agent.ephemeral_id": "ef918548-8137-4ca4-b94b-c890a2e46160",
      "agent.hostname": "b694d587a174",
      "agent.id": "0bc9172d-279d-4448-9ed5-fe9af7a26b92",
      "agent.type": "auditbeat",
      "agent.version": "7.8.0",
      "client.bytes": 1627,
      "client.ip": "127.0.0.1",
      "client.packets": 3,
      "client.port": 8778,
      "destination.bytes": 1118,
      "destination.ip": "127.0.0.1",
      "destination.packets": 4,
      "destination.port": 40568,
      "ecs.version": "1.5.0",
      "event.action": "network_flow",
      "event.category": "network_traffic",
      "event.dataset": "socket",
      "event.duration": 2062860,
      "event.end": "2020-05-04T08:44:40.170Z",
      "event.kind": "event",
      "event.module": "system",
      "event.start": "2020-05-04T08:44:40.168Z",
      "flow.complete": false,
      "flow.final": true,
      "group.id": "0",
      "group.name": "root",
      "host.name": "b694d587a174",
      "network.bytes": 2745,
      "network.community_id": "1:fk16r/MX4mNxse9zgzHCkYMcb1s=",
      "network.direction": "unknown",
      "network.packets": 7,
      "network.transport": "tcp",
      "network.type": "ipv4",
      "process.args": [
      "/usr/local/bin/metricbeat",
      "-e",
      "-c",
      "/etc/metricbeat/metricbeat.yml",
      "--path.home",
      "/etc/metricbeat"
      ],
      "process.created": "2020-05-04T08:22:38.920Z",
      "process.executable": "/opt/metricbeat-7.3.2-linux-x86_64/metricbeat",
      "process.name": "metricbeat",
      "process.pid": 2352,
      "server.bytes": 1118,
      "server.ip": "127.0.0.1",
      "server.packets": 4,
      "server.port": 40568,
      "service.type": "system",
      "source.bytes": 1627,
      "source.ip": "127.0.0.1",
      "source.packets": 3,
      "source.port": 8778,
      "system.audit.socket.egid": 0,
      "system.audit.socket.euid": 0,
      "system.audit.socket.gid": 0,
      "system.audit.socket.kernel_sock_address": "0xffff9136498df700",
      "system.audit.socket.uid": 0,
      "user.id": "0",
      "user.name": "root"
      },
      {
      "@timestamp": "2020-05-04T08:44:43.162Z",
      "agent.ephemeral_id": "ef918548-8137-4ca4-b94b-c890a2e46160",
      "agent.hostname": "b694d587a174",
      "agent.id": "0bc9172d-279d-4448-9ed5-fe9af7a26b92",
      "agent.type": "auditbeat",
      "agent.version": "7.8.0",
      "client.bytes": 76,
      "client.ip": "10.224.1.158",
      "client.packets": 1,
      "client.port": 123,
      "destination.bytes": 84,
      "destination.ip": "169.254.169.254",
      "destination.packets": 1,
      "destination.port": 123,
      "ecs.version": "1.5.0",
      "event.action": "network_flow",
      "event.category": "network_traffic",
      "event.dataset": "socket",
      "event.duration": 562347,
      "event.end": "2020-05-04T08:44:40.283Z",
      "event.kind": "event",
      "event.module": "system",
      "event.start": "2020-05-04T08:44:40.282Z",
      "flow.complete": false,
      "flow.final": true,
      "group.id": "116",
      "host.name": "b694d587a174",
      "network.bytes": 160,
      "network.community_id": "1:tylaZhS4Q2zEf0wYjdEa/yP4TDU=",
      "network.direction": "outbound",
      "network.packets": 2,
      "network.transport": "udp",
      "network.type": "ipv4",
      "process.args": [
      "/usr/sbin/ntpd",
      "-p",
      "/var/run/ntpd.pid",
      "-g",
      "-c",
      "/var/lib/ntp/ntp.conf.dhcp",
      "-u",
      "112:116"
      ],
      "process.created": "2020-05-04T08:22:37.070Z",
      "process.executable": "/usr/sbin/ntpd",
      "process.name": "ntpd",
      "process.pid": 1902,
      "server.bytes": 84,
      "server.ip": "169.254.169.254",
      "server.packets": 1,
      "server.port": 123,
      "service.type": "system",
      "source.bytes": 76,
      "source.ip": "10.224.1.158",
      "source.packets": 1,
      "source.port": 123,
      "system.audit.socket.egid": 116,
      "system.audit.socket.euid": 112,
      "system.audit.socket.gid": 116,
      "system.audit.socket.kernel_sock_address": "0xffff913649bf3800",
      "system.audit.socket.uid": 112,
      "user.id": "112"
      },
      {
      "@timestamp": "2020-05-04T08:44:43.163Z",
      "agent.ephemeral_id": "ef918548-8137-4ca4-b94b-c890a2e46160",
      "agent.hostname": "b694d587a174",
      "agent.id": "0bc9172d-279d-4448-9ed5-fe9af7a26b92",
      "agent.type": "auditbeat",
      "agent.version": "7.8.0",
      "client.bytes": 7868,
      "client.ip": "10.224.1.158",
      "client.packets": 3,
      "client.port": 52016,
      "destination.bytes": 99,
      "destination.ip": "35.184.73.24",
      "destination.packets": 2,
      "destination.port": 5001,
      "ecs.version": "1.5.0",
      "event.action": "network_flow",
      "event.category": "network_traffic",
      "event.dataset": "socket",
      "event.duration": 3306862,
      "event.end": "2020-05-04T08:44:40.452Z",
      "event.kind": "event",
      "event.module": "system",
      "event.start": "2020-05-04T08:44:40.449Z",
      "flow.complete": false,
      "flow.final": true,
      "group.id": "0",
      "group.name": "root",
      "host.name": "b694d587a174",
      "network.bytes": 7967,
      "network.community_id": "1:RbCKhekHI/3gR7oowAoFLKnKEXY=",
      "network.direction": "unknown",
      "network.packets": 5,
      "network.transport": "tcp",
      "network.type": "ipv4",
      "process.args": [
      "/usr/local/bin/auditbeat",
      "-e",
      "-c",
      "/etc/auditbeat/auditbeat.yml"
      ],
      "process.created": "2020-05-04T08:22:38.920Z",
      "process.executable": "/opt/auditbeat-7.3.0-linux-x86_64/auditbeat",
      "process.name": "auditbeat",
      "process.pid": 2356,
      "server.bytes": 99,
      "server.ip": "35.184.73.24",
      "server.packets": 2,
      "server.port": 5001,
      "service.type": "system",
      "source.bytes": 7868,
      "source.ip": "10.224.1.158",
      "source.packets": 3,
      "source.port": 52016,
      "system.audit.socket.egid": 0,
      "system.audit.socket.euid": 0,
      "system.audit.socket.gid": 0,
      "system.audit.socket.kernel_sock_address": "0xffff9136550de800",
      "system.audit.socket.uid": 0,
      "user.id": "0",
      "user.name": "root"
      },
      {
      "@timestamp": "2020-05-04T08:44:44.161Z",
      "agent.ephemeral_id": "ef918548-8137-4ca4-b94b-c890a2e46160",
      "agent.hostname": "b694d587a174",
      "agent.id": "0bc9172d-279d-4448-9ed5-fe9af7a26b92",
      "agent.type": "auditbeat",
      "agent.version": "7.8.0",
      "client.bytes": 2261,
      "client.ip": "10.224.1.158",
      "client.packets": 2,
      "client.port": 51900,
      "destination.bytes": 690,
      "destination.ip": "52.52.242.223",
      "destination.packets": 2,
      "destination.port": 9243,
      "ecs.version": "1.5.0",
      "event.action": "network_flow",
      "event.category": "network_traffic",
      "event.dataset": "socket",
      "event.duration": 64388755,
      "event.end": "2020-05-04T08:44:41.235Z",
      "event.kind": "event",
      "event.module": "system",
      "event.start": "2020-05-04T08:44:41.171Z",
      "flow.complete": false,
      "flow.final": true,
      "group.id": "0",
      "group.name": "root",
      "host.name": "b694d587a174",
      "network.bytes": 2951,
      "network.community_id": "1:yPLp/VAMjUmYpeHEcMpvNnzreYE=",
      "network.direction": "unknown",
      "network.packets": 4,
      "network.transport": "tcp",
      "network.type": "ipv4",
      "process.args": [
      "/usr/local/bin/metricbeat",
      "-e",
      "-c",
      "/etc/metricbeat/metricbeat.yml",
      "--path.home",
      "/etc/metricbeat"
      ],
      "process.created": "2020-05-04T08:22:38.920Z",
      "process.executable": "/opt/metricbeat-7.3.2-linux-x86_64/metricbeat",
      "process.name": "metricbeat",
      "process.pid": 2352,
      "server.bytes": 690,
      "server.ip": "52.52.242.223",
      "server.packets": 2,
      "server.port": 9243,
      "service.type": "system",
      "source.bytes": 2261,
      "source.ip": "10.224.1.158",
      "source.packets": 2,
      "source.port": 51900,
      "system.audit.socket.egid": 0,
      "system.audit.socket.euid": 0,
      "system.audit.socket.gid": 0,
      "system.audit.socket.kernel_sock_address": "0xffff9136550d8000",
      "system.audit.socket.uid": 0,
      "user.id": "0",
      "user.name": "root"
      },
      {
      "@timestamp": "2020-05-04T08:44:45.161Z",
      "agent.ephemeral_id": "ef918548-8137-4ca4-b94b-c890a2e46160",
      "agent.hostname": "b694d587a174",
      "agent.id": "0bc9172d-279d-4448-9ed5-fe9af7a26b92",
      "agent.type": "auditbeat",
      "agent.version": "7.8.0",
      "client.bytes": 132,
      "client.ip": "127.107.104.76",
      "client.packets": 3,
      "client.port": 34995,
      "destination.bytes": 234,
      "destination.ip": "127.237.205.115",
      "destination.packets": 4,
      "destination.port": 51937,
      "ecs.version": "1.5.0",
      "event.action": "network_flow",
      "event.category": "network_traffic",
      "event.dataset": "socket",
      "event.duration": 403104,
      "event.end": "2020-05-04T08:44:43.322Z",
      "event.kind": "event",
      "event.module": "system",
      "event.start": "2020-05-04T08:44:43.321Z",
      "flow.complete": true,
      "flow.final": true,
      "group.id": "0",
      "group.name": "root",
      "host.name": "b694d587a174",
      "network.bytes": 366,
      "network.community_id": "1:4zVk7CFlFQbL+MSI/vS/bc1nRgo=",
      "network.direction": "inbound",
      "network.packets": 7,
      "network.transport": "tcp",
      "network.type": "ipv4",
      "process.args": [
      "/usr/bin/python3",
      "/usr/bin/google_accounts_daemon"
      ],
      "process.created": "2020-05-04T08:22:37.130Z",
      "process.executable": "/usr/bin/python3.5",
      "process.name": "google_accounts",
      "process.pid": 48356,
      "server.bytes": 234,
      "server.ip": "127.237.205.115",
      "server.packets": 4,
      "server.port": 51937,
      "service.type": "system",
      "source.bytes": 132,
      "source.ip": "127.107.104.76",
      "source.packets": 3,
      "source.port": 34995,
      "system.audit.socket.egid": 0,
      "system.audit.socket.euid": 0,
      "system.audit.socket.gid": 0,
      "system.audit.socket.kernel_sock_address": "0xffff913653c86000",
      "system.audit.socket.uid": 0,
      "user.id": "0",
      "user.name": "root"
      },
      {
      "@timestamp": "2020-05-04T08:44:46.161Z",
      "agent.ephemeral_id": "ef918548-8137-4ca4-b94b-c890a2e46160",
      "agent.hostname": "b694d587a174",
      "agent.id": "0bc9172d-279d-4448-9ed5-fe9af7a26b92",
      "agent.type": "auditbeat",
      "agent.version": "7.8.0",
      "client.bytes": 304,
      "client.ip": "127.107.104.76",
      "client.packets": 5,
      "client.port": 34995,
      "destination.bytes": 194,
      "destination.domain": "elastic.co",
      "destination.ip": "127.237.205.115",
      "destination.packets": 5,
      "destination.port": 51937,
      "ecs.version": "1.5.0",
      "event.action": "network_flow",
      "event.category": "network_traffic",
      "event.dataset": "socket",
      "event.duration": 601370,
      "event.end": "2020-05-04T08:44:43.322Z",
      "event.kind": "event",
      "event.module": "system",
      "event.start": "2020-05-04T08:44:43.321Z",
      "flow.complete": true,
      "flow.final": true,
      "group.id": "0",
      "group.name": "root",
      "host.name": "b694d587a174",
      "network.bytes": 498,
      "network.community_id": "1:4zVk7CFlFQbL+MSI/vS/bc1nRgo=",
      "network.direction": "outbound",
      "network.packets": 10,
      "network.transport": "tcp",
      "network.type": "ipv4",
      "process.args": [
      "/tmp/python-env/build/ve/docker/bin/python3",
      "/tmp/python-env/build/ve/docker/bin/nosetests",
      "--process-timeout=90",
      "--with-timer",
      "--with-xunit",
      "--xunit-file=build/TEST-python-integration.xml",
      "tests/system/test_metricsets.py",
      "tests/system/test_system_socket.py"
      ],
      "process.created": "2020-05-04T08:43:58.970Z",
      "process.executable": "/usr/bin/python3.7",
      "process.name": "nosetests",
      "process.pid": 48356,
      "server.bytes": 194,
      "server.domain": "elastic.co",
      "server.ip": "127.237.205.115",
      "server.packets": 5,
      "server.port": 51937,
      "service.type": "system",
      "source.bytes": 304,
      "source.ip": "127.107.104.76",
      "source.packets": 5,
      "source.port": 34995,
      "system.audit.socket.egid": 0,
      "system.audit.socket.euid": 0,
      "system.audit.socket.gid": 0,
      "system.audit.socket.kernel_sock_address": "0xffff913653c83800",
      "system.audit.socket.uid": 0,
      "user.id": "0",
      "user.name": "root"
      },
      {
      "@timestamp": "2020-05-04T08:44:46.161Z",
      "agent.ephemeral_id": "ef918548-8137-4ca4-b94b-c890a2e46160",
      "agent.hostname": "b694d587a174",
      "agent.id": "0bc9172d-279d-4448-9ed5-fe9af7a26b92",
      "agent.type": "auditbeat",
      "agent.version": "7.8.0",
      "client.bytes": 3058,
      "client.ip": "10.224.1.158",
      "client.packets": 2,
      "client.port": 52016,
      "destination.bytes": 99,
      "destination.ip": "35.184.73.24",
      "destination.packets": 2,
      "destination.port": 5001,
      "ecs.version": "1.5.0",
      "event.action": "network_flow",
      "event.category": "network_traffic",
      "event.dataset": "socket",
      "event.duration": 2343771,
      "event.end": "2020-05-04T08:44:43.972Z",
      "event.kind": "event",
      "event.module": "system",
      "event.start": "2020-05-04T08:44:43.970Z",
      "flow.complete": false,
      "flow.final": true,
      "group.id": "0",
      "group.name": "root",
      "host.name": "b694d587a174",
      "network.bytes": 3157,
      "network.community_id": "1:RbCKhekHI/3gR7oowAoFLKnKEXY=",
      "network.direction": "unknown",
      "network.packets": 4,
      "network.transport": "tcp",
      "network.type": "ipv4",
      "process.args": [
      "/usr/local/bin/auditbeat",
      "-e",
      "-c",
      "/etc/auditbeat/auditbeat.yml"
      ],
      "process.created": "2020-05-04T08:22:38.920Z",
      "process.executable": "/opt/auditbeat-7.3.0-linux-x86_64/auditbeat",
      "process.name": "auditbeat",
      "process.pid": 2356,
      "server.bytes": 99,
      "server.ip": "35.184.73.24",
      "server.packets": 2,
      "server.port": 5001,
      "service.type": "system",
      "source.bytes": 3058,
      "source.ip": "10.224.1.158",
      "source.packets": 2,
      "source.port": 52016,
      "system.audit.socket.egid": 0,
      "system.audit.socket.euid": 0,
      "system.audit.socket.gid": 0,
      "system.audit.socket.kernel_sock_address": "0xffff9136550de800",
      "system.audit.socket.uid": 0,
      "user.id": "0",
      "user.name": "root"
      },
      {
      "@timestamp": "2020-05-04T08:44:46.161Z",
      "agent.ephemeral_id": "ef918548-8137-4ca4-b94b-c890a2e46160",
      "agent.hostname": "b694d587a174",
      "agent.id": "0bc9172d-279d-4448-9ed5-fe9af7a26b92",
      "agent.type": "auditbeat",
      "agent.version": "7.8.0",
      "client.bytes": 27748,
      "client.ip": "10.224.1.158",
      "client.packets": 42,
      "client.port": 57626,
      "destination.bytes": 47472,
      "destination.ip": "10.224.0.26",
      "destination.packets": 30,
      "destination.port": 49187,
      "ecs.version": "1.5.0",
      "event.action": "network_flow",
      "event.category": "network_traffic",
      "event.dataset": "socket",
      "event.duration": 5532513446,
      "event.end": "2020-05-04T08:44:45.405Z",
      "event.kind": "event",
      "event.module": "system",
      "event.start": "2020-05-04T08:44:39.873Z",
      "flow.complete": false,
      "flow.final": true,
      "group.id": "1158",
      "host.name": "b694d587a174",
      "network.bytes": 75220,
      "network.community_id": "1:fLcSsvECg2ksfs5k6ptaYRm+IYA=",
      "network.direction": "unknown",
      "network.packets": 72,
      "network.transport": "tcp",
      "network.type": "ipv4",
      "process.args": [
      "java",
      "-Djava.util.logging.config.file=/var/lib/jenkins/logging.properties",
      "-javaagent:/opt/jolokia/jolokia-agent.jar=config=/opt/jolokia/jolokia.properties",
      "-Dorg.jenkinsci.plugins.gitclient.Git.timeOut=10",
      "-jar",
      "/usr/local/share/jenkins/swarm-client-3.17.jar",
      "-description",
      "Ubuntu 16.04 - 2 CPU Cores / 3539 MB Memory",
      "-disableClientsUniqueId",
      "-executors",
      "1",
      "-fsroot",
      "/var/lib/jenkins",
      "-master",
      "https://beats-ci.elastic.co/",
      "-maxRetryInterval",
      "160",
      "-retryBackOffStrategy",
      "linear",
      "-mode",
      "exclusive",
      "-name",
      "beats-ci-immutable-ubuntu-1604-1588580521584033348",
      "-username",
      "local-admin",
      "-password",
      "1101471da3a313cbf3999ee6888d412a7e",
      "-name",
      "beats-ci-immutable-ubuntu-1604-1588580521584033348",
      "-master",
      "https://beats-ci.elastic.co",
      "-username",
      "local-admin",
      "-password",
      "11af84f32a633296a49297085d82b8279d",
      "-labels",
      "docker",
      "-labels",
      "immutable",
      "-labels",
      "linux",
      "-labels",
      "linux-immutable",
      "-labels",
      "swarm",
      "-labels",
      "ubuntu",
      "-labels",
      "ubuntu-16.04",
      "-labels",
      "ubuntu-16",
      "-labels",
      "virtual",
      "-labels",
      "x86_64",
      "-description",
      "MachineType:n1-highmem-4,DiskSize:150"
      ],
      "process.created": "2020-05-04T08:22:38.920Z",
      "process.executable": "/usr/lib/jvm/java-8-openjdk-amd64/jre/bin/java",
      "process.name": "java",
      "process.pid": 2349,
      "server.bytes": 47472,
      "server.ip": "10.224.0.26",
      "server.packets": 30,
      "server.port": 49187,
      "service.type": "system",
      "source.bytes": 27748,
      "source.ip": "10.224.1.158",
      "source.packets": 42,
      "source.port": 57626,
      "system.audit.socket.egid": 1158,
      "system.audit.socket.euid": 1157,
      "system.audit.socket.gid": 1158,
      "system.audit.socket.kernel_sock_address": "0xffff913655313b80",
      "system.audit.socket.uid": 1157,
      "user.id": "1157"
      },
      {
      "@timestamp": "2020-05-04T08:44:49.161Z",
      "agent.ephemeral_id": "ef918548-8137-4ca4-b94b-c890a2e46160",
      "agent.hostname": "b694d587a174",
      "agent.id": "0bc9172d-279d-4448-9ed5-fe9af7a26b92",
      "agent.type": "auditbeat",
      "agent.version": "7.8.0",
      "client.bytes": 70,
      "client.ip": "10.224.1.158",
      "client.packets": 1,
      "client.port": 44597,
      "destination.bytes": 94,
      "destination.ip": "169.254.169.254",
      "destination.packets": 1,
      "destination.port": 53,
      "ecs.version": "1.5.0",
      "event.action": "network_flow",
      "event.category": "network_traffic",
      "event.dataset": "socket",
      "event.duration": 3779068,
      "event.end": "2020-05-04T08:44:46.728Z",
      "event.kind": "event",
      "event.module": "system",
      "event.start": "2020-05-04T08:44:46.724Z",
      "flow.complete": false,
      "flow.final": true,
      "group.id": "0",
      "group.name": "root",
      "host.name": "b694d587a174",
      "network.bytes": 164,
      "network.community_id": "1:PUxu0V+sHAcKaI8pf0mIHJT7piQ=",
      "network.direction": "outbound",
      "network.packets": 2,
      "network.transport": "udp",
      "network.type": "ipv4",
      "process.args": [
      "/usr/local/bin/auditbeat-secops",
      "-e",
      "-c",
      "/etc/auditbeat-secops/auditbeat.yml"
      ],
      "process.created": "2020-05-04T08:22:38.920Z",
      "process.executable": "/opt/auditbeat-7.2.0-linux-x86_64/auditbeat",
      "process.name": "auditbeat-secop",
      "process.pid": 2354,
      "server.bytes": 94,
      "server.ip": "169.254.169.254",
      "server.packets": 1,
      "server.port": 53,
      "service.type": "system",
      "source.bytes": 70,
      "source.ip": "10.224.1.158",
      "source.packets": 1,
      "source.port": 44597,
      "system.audit.socket.egid": 0,
      "system.audit.socket.euid": 0,
      "system.audit.socket.gid": 0,
      "system.audit.socket.kernel_sock_address": "0xffff91362aa58800",
      "system.audit.socket.uid": 0,
      "user.id": "0",
      "user.name": "root"
      },
      {
      "@timestamp": "2020-05-04T08:44:49.161Z",
      "agent.ephemeral_id": "ef918548-8137-4ca4-b94b-c890a2e46160",
      "agent.hostname": "b694d587a174",
      "agent.id": "0bc9172d-279d-4448-9ed5-fe9af7a26b92",
      "agent.type": "auditbeat",
      "agent.version": "7.8.0",
      "client.bytes": 70,
      "client.ip": "10.224.1.158",
      "client.packets": 1,
      "client.port": 37538,
      "destination.bytes": 163,
      "destination.ip": "169.254.169.254",
      "destination.packets": 1,
      "destination.port": 53,
      "ecs.version": "1.5.0",
      "event.action": "network_flow",
      "event.category": "network_traffic",
      "event.dataset": "socket",
      "event.duration": 6801712,
      "event.end": "2020-05-04T08:44:46.731Z",
      "event.kind": "event",
      "event.module": "system",
      "event.start": "2020-05-04T08:44:46.724Z",
      "flow.complete": false,
      "flow.final": true,
      "group.id": "0",
      "group.name": "root",
      "host.name": "b694d587a174",
      "network.bytes": 233,
      "network.community_id": "1:a7weW2ky3F1TNo0uTPPqP3NCDHU=",
      "network.direction": "outbound",
      "network.packets": 2,
      "network.transport": "udp",
      "network.type": "ipv4",
      "process.args": [
      "/usr/local/bin/auditbeat-secops",
      "-e",
      "-c",
      "/etc/auditbeat-secops/auditbeat.yml"
      ],
      "process.created": "2020-05-04T08:22:38.920Z",
      "process.executable": "/opt/auditbeat-7.2.0-linux-x86_64/auditbeat",
      "process.name": "auditbeat-secop",
      "process.pid": 2354,
      "server.bytes": 163,
      "server.ip": "169.254.169.254",
      "server.packets": 1,
      "server.port": 53,
      "service.type": "system",
      "source.bytes": 70,
      "source.ip": "10.224.1.158",
      "source.packets": 1,
      "source.port": 37538,
      "system.audit.socket.egid": 0,
      "system.audit.socket.euid": 0,
      "system.audit.socket.gid": 0,
      "system.audit.socket.kernel_sock_address": "0xffff913627a68000",
      "system.audit.socket.uid": 0,
      "user.id": "0",
      "user.name": "root"
      },
      {
      "@timestamp": "2020-05-04T08:44:49.161Z",
      "agent.ephemeral_id": "ef918548-8137-4ca4-b94b-c890a2e46160",
      "agent.hostname": "b694d587a174",
      "agent.id": "0bc9172d-279d-4448-9ed5-fe9af7a26b92",
      "agent.type": "auditbeat",
      "agent.version": "7.8.0",
      "client.bytes": 2176,
      "client.ip": "10.224.1.158",
      "client.packets": 2,
      "client.port": 52016,
      "destination.bytes": 99,
      "destination.ip": "35.184.73.24",
      "destination.packets": 2,
      "destination.port": 5001,
      "ecs.version": "1.5.0",
      "event.action": "network_flow",
      "event.category": "network_traffic",
      "event.dataset": "socket",
      "event.duration": 2345682,
      "event.end": "2020-05-04T08:44:46.971Z",
      "event.kind": "event",
      "event.module": "system",
      "event.start": "2020-05-04T08:44:46.969Z",
      "flow.complete": false,
      "flow.final": true,
      "group.id": "0",
      "group.name": "root",
      "host.name": "b694d587a174",
      "network.bytes": 2275,
      "network.community_id": "1:RbCKhekHI/3gR7oowAoFLKnKEXY=",
      "network.direction": "unknown",
      "network.packets": 4,
      "network.transport": "tcp",
      "network.type": "ipv4",
      "process.args": [
      "/usr/local/bin/auditbeat",
      "-e",
      "-c",
      "/etc/auditbeat/auditbeat.yml"
      ],
      "process.created": "2020-05-04T08:22:38.920Z",
      "process.executable": "/opt/auditbeat-7.3.0-linux-x86_64/auditbeat",
      "process.name": "auditbeat",
      "process.pid": 2356,
      "server.bytes": 99,
      "server.ip": "35.184.73.24",
      "server.packets": 2,
      "server.port": 5001,
      "service.type": "system",
      "source.bytes": 2176,
      "source.ip": "10.224.1.158",
      "source.packets": 2,
      "source.port": 52016,
      "system.audit.socket.egid": 0,
      "system.audit.socket.euid": 0,
      "system.audit.socket.gid": 0,
      "system.audit.socket.kernel_sock_address": "0xffff9136550de800",
      "system.audit.socket.uid": 0,
      "user.id": "0",
      "user.name": "root"
      },
      {
      "@timestamp": "2020-05-04T08:44:50.161Z",
      "agent.ephemeral_id": "ef918548-8137-4ca4-b94b-c890a2e46160",
      "agent.hostname": "b694d587a174",
      "agent.id": "0bc9172d-279d-4448-9ed5-fe9af7a26b92",
      "agent.type": "auditbeat",
      "agent.version": "7.8.0",
      "client.bytes": 7880,
      "client.ip": "10.224.1.158",
      "client.packets": 12,
      "client.port": 57626,
      "destination.bytes": 13320,
      "destination.ip": "10.224.0.26",
      "destination.packets": 9,
      "destination.port": 49187,
      "ecs.version": "1.5.0",
      "event.action": "network_flow",
      "event.category": "network_traffic",
      "event.dataset": "socket",
      "event.duration": 9508468,
      "event.end": "2020-05-04T08:44:47.996Z",
      "event.kind": "event",
      "event.module": "system",
      "event.start": "2020-05-04T08:44:47.987Z",
      "flow.complete": false,
      "flow.final": true,
      "group.id": "1158",
      "host.name": "b694d587a174",
      "network.bytes": 21200,
      "network.community_id": "1:fLcSsvECg2ksfs5k6ptaYRm+IYA=",
      "network.direction": "unknown",
      "network.packets": 21,
      "network.transport": "tcp",
      "network.type": "ipv4",
      "process.args": [
      "java",
      "-Djava.util.logging.config.file=/var/lib/jenkins/logging.properties",
      "-javaagent:/opt/jolokia/jolokia-agent.jar=config=/opt/jolokia/jolokia.properties",
      "-Dorg.jenkinsci.plugins.gitclient.Git.timeOut=10",
      "-jar",
      "/usr/local/share/jenkins/swarm-client-3.17.jar",
      "-description",
      "Ubuntu 16.04 - 2 CPU Cores / 3539 MB Memory",
      "-disableClientsUniqueId",
      "-executors",
      "1",
      "-fsroot",
      "/var/lib/jenkins",
      "-master",
      "https://beats-ci.elastic.co/",
      "-maxRetryInterval",
      "160",
      "-retryBackOffStrategy",
      "linear",
      "-mode",
      "exclusive",
      "-name",
      "beats-ci-immutable-ubuntu-1604-1588580521584033348",
      "-username",
      "local-admin",
      "-password",
      "1101471da3a313cbf3999ee6888d412a7e",
      "-name",
      "beats-ci-immutable-ubuntu-1604-1588580521584033348",
      "-master",
      "https://beats-ci.elastic.co",
      "-username",
      "local-admin",
      "-password",
      "11af84f32a633296a49297085d82b8279d",
      "-labels",
      "docker",
      "-labels",
      "immutable",
      "-labels",
      "linux",
      "-labels",
      "linux-immutable",
      "-labels",
      "swarm",
      "-labels",
      "ubuntu",
      "-labels",
      "ubuntu-16.04",
      "-labels",
      "ubuntu-16",
      "-labels",
      "virtual",
      "-labels",
      "x86_64",
      "-description",
      "MachineType:n1-highmem-4,DiskSize:150"
      ],
      "process.created": "2020-05-04T08:22:38.920Z",
      "process.executable": "/usr/lib/jvm/java-8-openjdk-amd64/jre/bin/java",
      "process.name": "java",
      "process.pid": 2349,
      "server.bytes": 13320,
      "server.ip": "10.224.0.26",
      "server.packets": 9,
      "server.port": 49187,
      "service.type": "system",
      "source.bytes": 7880,
      "source.ip": "10.224.1.158",
      "source.packets": 12,
      "source.port": 57626,
      "system.audit.socket.egid": 1158,
      "system.audit.socket.euid": 1157,
      "system.audit.socket.gid": 1158,
      "system.audit.socket.kernel_sock_address": "0xffff913655313b80",
      "system.audit.socket.uid": 1157,
      "user.id": "1157"
      },
      {
      "@timestamp": "2020-05-04T08:44:52.161Z",
      "agent.ephemeral_id": "ef918548-8137-4ca4-b94b-c890a2e46160",
      "agent.hostname": "b694d587a174",
      "agent.id": "0bc9172d-279d-4448-9ed5-fe9af7a26b92",
      "agent.type": "auditbeat",
      "agent.version": "7.8.0",
      "client.bytes": 52,
      "client.ip": "10.224.1.158",
      "client.packets": 1,
      "client.port": 50512,
      "destination.bytes": 32,
      "destination.ip": "54.177.125.139",
      "destination.packets": 1,
      "destination.port": 9243,
      "ecs.version": "1.5.0",
      "event.action": "network_flow",
      "event.category": "network_traffic",
      "event.dataset": "socket",
      "event.duration": 40532645,
      "event.end": "2020-05-04T08:44:49.408Z",
      "event.kind": "event",
      "event.module": "system",
      "event.start": "2020-05-04T08:44:49.368Z",
      "flow.complete": false,
      "flow.final": true,
      "host.name": "b694d587a174",
      "network.bytes": 84,
      "network.community_id": "1:hwVoGKwqDt9vyAnr8N8PlikG/gs=",
      "network.direction": "unknown",
      "network.packets": 2,
      "network.transport": "tcp",
      "network.type": "ipv4",
      "server.bytes": 32,
      "server.ip": "54.177.125.139",
      "server.packets": 1,
      "server.port": 9243,
      "service.type": "system",
      "source.bytes": 52,
      "source.ip": "10.224.1.158",
      "source.packets": 1,
      "source.port": 50512,
      "system.audit.socket.kernel_sock_address": "0xffff913653c80000"
      },
      {
      "@timestamp": "2020-05-04T08:44:52.161Z",
      "agent.ephemeral_id": "ef918548-8137-4ca4-b94b-c890a2e46160",
      "agent.hostname": "b694d587a174",
      "agent.id": "0bc9172d-279d-4448-9ed5-fe9af7a26b92",
      "agent.type": "auditbeat",
      "agent.version": "7.8.0",
      "client.bytes": 180,
      "client.ip": "10.224.1.158",
      "client.packets": 3,
      "client.port": 45640,
      "destination.bytes": 0,
      "destination.ip": "35.227.125.33",
      "destination.packets": 0,
      "destination.port": 9200,
      "ecs.version": "1.5.0",
      "event.action": "network_flow",
      "event.category": "network_traffic",
      "event.dataset": "socket",
      "event.duration": 3020743809,
      "event.end": "2020-05-04T08:44:49.752Z",
      "event.kind": "event",
      "event.module": "system",
      "event.start": "2020-05-04T08:44:46.731Z",
      "flow.complete": true,
      "flow.final": true,
      "group.id": "0",
      "group.name": "root",
      "host.name": "b694d587a174",
      "network.bytes": 180,
      "network.community_id": "1:Pi18EbSRSIzupzedv2W2/kezrsk=",
      "network.direction": "outbound",
      "network.packets": 3,
      "network.transport": "tcp",
      "network.type": "ipv4",
      "process.args": [
      "/usr/local/bin/auditbeat-secops",
      "-e",
      "-c",
      "/etc/auditbeat-secops/auditbeat.yml"
      ],
      "process.created": "2020-05-04T08:22:38.920Z",
      "process.executable": "/opt/auditbeat-7.2.0-linux-x86_64/auditbeat",
      "process.name": "auditbeat-secop",
      "process.pid": 2354,
      "server.bytes": 0,
      "server.ip": "35.227.125.33",
      "server.packets": 0,
      "server.port": 9200,
      "service.type": "system",
      "source.bytes": 180,
      "source.ip": "10.224.1.158",
      "source.packets": 3,
      "source.port": 45640,
      "system.audit.socket.egid": 0,
      "system.audit.socket.euid": 0,
      "system.audit.socket.gid": 0,
      "system.audit.socket.kernel_sock_address": "0xffff913653c84800",
      "system.audit.socket.uid": 0,
      "user.id": "0",
      "user.name": "root"
      },
      {
      "@timestamp": "2020-05-04T08:44:52.161Z",
      "agent.ephemeral_id": "ef918548-8137-4ca4-b94b-c890a2e46160",
      "agent.hostname": "b694d587a174",
      "agent.id": "0bc9172d-279d-4448-9ed5-fe9af7a26b92",
      "agent.type": "auditbeat",
      "agent.version": "7.8.0",
      "client.bytes": 2277,
      "client.ip": "10.224.1.158",
      "client.packets": 2,
      "client.port": 52016,
      "destination.bytes": 99,
      "destination.ip": "35.184.73.24",
      "destination.packets": 2,
      "destination.port": 5001,
      "ecs.version": "1.5.0",
      "event.action": "network_flow",
      "event.category": "network_traffic",
      "event.dataset": "socket",
      "event.duration": 2058370,
      "event.end": "2020-05-04T08:44:49.974Z",
      "event.kind": "event",
      "event.module": "system",
      "event.start": "2020-05-04T08:44:49.972Z",
      "flow.complete": false,
      "flow.final": true,
      "group.id": "0",
      "group.name": "root",
      "host.name": "b694d587a174",
      "network.bytes": 2376,
      "network.community_id": "1:RbCKhekHI/3gR7oowAoFLKnKEXY=",
      "network.direction": "unknown",
      "network.packets": 4,
      "network.transport": "tcp",
      "network.type": "ipv4",
      "process.args": [
      "/usr/local/bin/auditbeat",
      "-e",
      "-c",
      "/etc/auditbeat/auditbeat.yml"
      ],
      "process.created": "2020-05-04T08:22:38.920Z",
      "process.executable": "/opt/auditbeat-7.3.0-linux-x86_64/auditbeat",
      "process.name": "auditbeat",
      "process.pid": 2356,
      "server.bytes": 99,
      "server.ip": "35.184.73.24",
      "server.packets": 2,
      "server.port": 5001,
      "service.type": "system",
      "source.bytes": 2277,
      "source.ip": "10.224.1.158",
      "source.packets": 2,
      "source.port": 52016,
      "system.audit.socket.egid": 0,
      "system.audit.socket.euid": 0,
      "system.audit.socket.gid": 0,
      "system.audit.socket.kernel_sock_address": "0xffff9136550de800",
      "system.audit.socket.uid": 0,
      "user.id": "0",
      "user.name": "root"
      },
      {
      "@timestamp": "2020-05-04T08:44:53.161Z",
      "agent.ephemeral_id": "ef918548-8137-4ca4-b94b-c890a2e46160",
      "agent.hostname": "b694d587a174",
      "agent.id": "0bc9172d-279d-4448-9ed5-fe9af7a26b92",
      "agent.type": "auditbeat",
      "agent.version": "7.8.0",
      "client.bytes": 1198,
      "client.ip": "127.0.0.1",
      "client.packets": 4,
      "client.port": 40568,
      "destination.bytes": 1565,
      "destination.ip": "127.0.0.1",
      "destination.packets": 3,
      "destination.port": 8778,
      "ecs.version": "1.5.0",
      "event.action": "network_flow",
      "event.category": "network_traffic",
      "event.dataset": "socket",
      "event.duration": 2036118,
      "event.end": "2020-05-04T08:44:50.169Z",
      "event.kind": "event",
      "event.module": "system",
      "event.start": "2020-05-04T08:44:50.167Z",
      "flow.complete": false,
      "flow.final": true,
      "group.id": "0",
      "group.name": "root",
      "host.name": "b694d587a174",
      "network.bytes": 2763,
      "network.community_id": "1:fk16r/MX4mNxse9zgzHCkYMcb1s=",
      "network.direction": "unknown",
      "network.packets": 7,
      "network.transport": "tcp",
      "network.type": "ipv4",
      "process.args": [
      "/usr/local/bin/metricbeat",
      "-e",
      "-c",
      "/etc/metricbeat/metricbeat.yml",
      "--path.home",
      "/etc/metricbeat"
      ],
      "process.created": "2020-05-04T08:22:38.920Z",
      "process.executable": "/opt/metricbeat-7.3.2-linux-x86_64/metricbeat",
      "process.name": "metricbeat",
      "process.pid": 2352,
      "server.bytes": 1565,
      "server.ip": "127.0.0.1",
      "server.packets": 3,
      "server.port": 8778,
      "service.type": "system",
      "source.bytes": 1198,
      "source.ip": "127.0.0.1",
      "source.packets": 4,
      "source.port": 40568,
      "system.audit.socket.egid": 0,
      "system.audit.socket.euid": 0,
      "system.audit.socket.gid": 0,
      "system.audit.socket.kernel_sock_address": "0xffff9136601d3800",
      "system.audit.socket.uid": 0,
      "user.id": "0",
      "user.name": "root"
      },
      {
      "@timestamp": "2020-05-04T08:44:53.161Z",
      "agent.ephemeral_id": "ef918548-8137-4ca4-b94b-c890a2e46160",
      "agent.hostname": "b694d587a174",
      "agent.id": "0bc9172d-279d-4448-9ed5-fe9af7a26b92",
      "agent.type": "auditbeat",
      "agent.version": "7.8.0",
      "client.bytes": 1625,
      "client.ip": "127.0.0.1",
      "client.packets": 3,
      "client.port": 8778,
      "destination.bytes": 1118,
      "destination.ip": "127.0.0.1",
      "destination.packets": 4,
      "destination.port": 40568,
      "ecs.version": "1.5.0",
      "event.action": "network_flow",
      "event.category": "network_traffic",
      "event.dataset": "socket",
      "event.duration": 1956980,
      "event.end": "2020-05-04T08:44:50.169Z",
      "event.kind": "event",
      "event.module": "system",
      "event.start": "2020-05-04T08:44:50.167Z",
      "flow.complete": false,
      "flow.final": true,
      "group.id": "0",
      "group.name": "root",
      "host.name": "b694d587a174",
      "network.bytes": 2743,
      "network.community_id": "1:fk16r/MX4mNxse9zgzHCkYMcb1s=",
      "network.direction": "unknown",
      "network.packets": 7,
      "network.transport": "tcp",
      "network.type": "ipv4",
      "process.args": [
      "/usr/local/bin/metricbeat",
      "-e",
      "-c",
      "/etc/metricbeat/metricbeat.yml",
      "--path.home",
      "/etc/metricbeat"
      ],
      "process.created": "2020-05-04T08:22:38.920Z",
      "process.executable": "/opt/metricbeat-7.3.2-linux-x86_64/metricbeat",
      "process.name": "metricbeat",
      "process.pid": 2352,
      "server.bytes": 1118,
      "server.ip": "127.0.0.1",
      "server.packets": 4,
      "server.port": 40568,
      "service.type": "system",
      "source.bytes": 1625,
      "source.ip": "127.0.0.1",
      "source.packets": 3,
      "source.port": 8778,
      "system.audit.socket.egid": 0,
      "system.audit.socket.euid": 0,
      "system.audit.socket.gid": 0,
      "system.audit.socket.kernel_sock_address": "0xffff9136498df700",
      "system.audit.socket.uid": 0,
      "user.id": "0",
      "user.name": "root"
      },
      {
      "@timestamp": "2020-05-04T08:44:53.161Z",
      "agent.ephemeral_id": "ef918548-8137-4ca4-b94b-c890a2e46160",
      "agent.hostname": "b694d587a174",
      "agent.id": "0bc9172d-279d-4448-9ed5-fe9af7a26b92",
      "agent.type": "auditbeat",
      "agent.version": "7.8.0",
      "client.bytes": 81951,
      "client.ip": "10.224.1.158",
      "client.packets": 31,
      "client.port": 51900,
      "destination.bytes": 1505,
      "destination.ip": "52.52.242.223",
      "destination.packets": 19,
      "destination.port": 9243,
      "ecs.version": "1.5.0",
      "event.action": "network_flow",
      "event.category": "network_traffic",
      "event.dataset": "socket",
      "event.duration": 156739832,
      "event.end": "2020-05-04T08:44:50.932Z",
      "event.kind": "event",
      "event.module": "system",
      "event.start": "2020-05-04T08:44:50.775Z",
      "flow.complete": false,
      "flow.final": true,
      "group.id": "0",
      "group.name": "root",
      "host.name": "b694d587a174",
      "network.bytes": 83456,
      "network.community_id": "1:yPLp/VAMjUmYpeHEcMpvNnzreYE=",
      "network.direction": "unknown",
      "network.packets": 50,
      "network.transport": "tcp",
      "network.type": "ipv4",
      "process.args": [
      "/usr/local/bin/metricbeat",
      "-e",
      "-c",
      "/etc/metricbeat/metricbeat.yml",
      "--path.home",
      "/etc/metricbeat"
      ],
      "process.created": "2020-05-04T08:22:38.920Z",
      "process.executable": "/opt/metricbeat-7.3.2-linux-x86_64/metricbeat",
      "process.name": "metricbeat",
      "process.pid": 2352,
      "server.bytes": 1505,
      "server.ip": "52.52.242.223",
      "server.packets": 19,
      "server.port": 9243,
      "service.type": "system",
      "source.bytes": 81951,
      "source.ip": "10.224.1.158",
      "source.packets": 31,
      "source.port": 51900,
      "system.audit.socket.egid": 0,
      "system.audit.socket.euid": 0,
      "system.audit.socket.gid": 0,
      "system.audit.socket.kernel_sock_address": "0xffff9136550d8000",
      "system.audit.socket.uid": 0,
      "user.id": "0",
      "user.name": "root"
      },
      {
      "@timestamp": "2020-05-04T08:44:53.161Z",
      "agent.ephemeral_id": "ef918548-8137-4ca4-b94b-c890a2e46160",
      "agent.hostname": "b694d587a174",
      "agent.id": "0bc9172d-279d-4448-9ed5-fe9af7a26b92",
      "agent.type": "auditbeat",
      "agent.version": "7.8.0",
      "client.bytes": 7880,
      "client.ip": "10.224.1.158",
      "client.packets": 12,
      "client.port": 57626,
      "destination.bytes": 13288,
      "destination.ip": "10.224.0.26",
      "destination.packets": 8,
      "destination.port": 49187,
      "ecs.version": "1.5.0",
      "event.action": "network_flow",
      "event.category": "network_traffic",
      "event.dataset": "socket",
      "event.duration": 11179251,
      "event.end": "2020-05-04T08:44:51.845Z",
      "event.kind": "event",
      "event.module": "system",
      "event.start": "2020-05-04T08:44:51.834Z",
      "flow.complete": false,
      "flow.final": true,
      "group.id": "1158",
      "host.name": "b694d587a174",
      "network.bytes": 21168,
      "network.community_id": "1:fLcSsvECg2ksfs5k6ptaYRm+IYA=",
      "network.direction": "unknown",
      "network.packets": 20,
      "network.transport": "tcp",
      "network.type": "ipv4",
      "process.args": [
      "java",
      "-Djava.util.logging.config.file=/var/lib/jenkins/logging.properties",
      "-javaagent:/opt/jolokia/jolokia-agent.jar=config=/opt/jolokia/jolokia.properties",
      "-Dorg.jenkinsci.plugins.gitclient.Git.timeOut=10",
      "-jar",
      "/usr/local/share/jenkins/swarm-client-3.17.jar",
      "-description",
      "Ubuntu 16.04 - 2 CPU Cores / 3539 MB Memory",
      "-disableClientsUniqueId",
      "-executors",
      "1",
      "-fsroot",
      "/var/lib/jenkins",
      "-master",
      "https://beats-ci.elastic.co/",
      "-maxRetryInterval",
      "160",
      "-retryBackOffStrategy",
      "linear",
      "-mode",
      "exclusive",
      "-name",
      "beats-ci-immutable-ubuntu-1604-1588580521584033348",
      "-username",
      "local-admin",
      "-password",
      "1101471da3a313cbf3999ee6888d412a7e",
      "-name",
      "beats-ci-immutable-ubuntu-1604-1588580521584033348",
      "-master",
      "https://beats-ci.elastic.co",
      "-username",
      "local-admin",
      "-password",
      "11af84f32a633296a49297085d82b8279d",
      "-labels",
      "docker",
      "-labels",
      "immutable",
      "-labels",
      "linux",
      "-labels",
      "linux-immutable",
      "-labels",
      "swarm",
      "-labels",
      "ubuntu",
      "-labels",
      "ubuntu-16.04",
      "-labels",
      "ubuntu-16",
      "-labels",
      "virtual",
      "-labels",
      "x86_64",
      "-description",
      "MachineType:n1-highmem-4,DiskSize:150"
      ],
      "process.created": "2020-05-04T08:22:38.920Z",
      "process.executable": "/usr/lib/jvm/java-8-openjdk-amd64/jre/bin/java",
      "process.name": "java",
      "process.pid": 2349,
      "server.bytes": 13288,
      "server.ip": "10.224.0.26",
      "server.packets": 8,
      "server.port": 49187,
      "service.type": "system",
      "source.bytes": 7880,
      "source.ip": "10.224.1.158",
      "source.packets": 12,
      "source.port": 57626,
      "system.audit.socket.egid": 1158,
      "system.audit.socket.euid": 1157,
      "system.audit.socket.gid": 1158,
      "system.audit.socket.kernel_sock_address": "0xffff913655313b80",
      "system.audit.socket.uid": 1157,
      "user.id": "1157"
      },
      {
      "@timestamp": "2020-05-04T08:44:55.161Z",
      "agent.ephemeral_id": "ef918548-8137-4ca4-b94b-c890a2e46160",
      "agent.hostname": "b694d587a174",
      "agent.id": "0bc9172d-279d-4448-9ed5-fe9af7a26b92",
      "agent.type": "auditbeat",
      "agent.version": "7.8.0",
      "client.bytes": 2230,
      "client.ip": "10.224.1.158",
      "client.packets": 2,
      "client.port": 52016,
      "destination.bytes": 99,
      "destination.ip": "35.184.73.24",
      "destination.packets": 2,
      "destination.port": 5001,
      "ecs.version": "1.5.0",
      "event.action": "network_flow",
      "event.category": "network_traffic",
      "event.dataset": "socket",
      "event.duration": 1901268,
      "event.end": "2020-05-04T08:44:52.975Z",
      "event.kind": "event",
      "event.module": "system",
      "event.start": "2020-05-04T08:44:52.973Z",
      "flow.complete": false,
      "flow.final": true,
      "group.id": "0",
      "group.name": "root",
      "host.name": "b694d587a174",
      "network.bytes": 2329,
      "network.community_id": "1:RbCKhekHI/3gR7oowAoFLKnKEXY=",
      "network.direction": "unknown",
      "network.packets": 4,
      "network.transport": "tcp",
      "network.type": "ipv4",
      "process.args": [
      "/usr/local/bin/auditbeat",
      "-e",
      "-c",
      "/etc/auditbeat/auditbeat.yml"
      ],
      "process.created": "2020-05-04T08:22:38.920Z",
      "process.executable": "/opt/auditbeat-7.3.0-linux-x86_64/auditbeat",
      "process.name": "auditbeat",
      "process.pid": 2356,
      "server.bytes": 99,
      "server.ip": "35.184.73.24",
      "server.packets": 2,
      "server.port": 5001,
      "service.type": "system",
      "source.bytes": 2230,
      "source.ip": "10.224.1.158",
      "source.packets": 2,
      "source.port": 52016,
      "system.audit.socket.egid": 0,
      "system.audit.socket.euid": 0,
      "system.audit.socket.gid": 0,
      "system.audit.socket.kernel_sock_address": "0xffff9136550de800",
      "system.audit.socket.uid": 0,
      "user.id": "0",
      "user.name": "root"
      },
      {
      "@timestamp": "2020-05-04T08:44:58.161Z",
      "agent.ephemeral_id": "ef918548-8137-4ca4-b94b-c890a2e46160",
      "agent.hostname": "b694d587a174",
      "agent.id": "0bc9172d-279d-4448-9ed5-fe9af7a26b92",
      "agent.type": "auditbeat",
      "agent.version": "7.8.0",
      "client.bytes": 2151,
      "client.ip": "10.224.1.158",
      "client.packets": 2,
      "client.port": 52016,
      "destination.bytes": 99,
      "destination.ip": "35.184.73.24",
      "destination.packets": 2,
      "destination.port": 5001,
      "ecs.version": "1.5.0",
      "event.action": "network_flow",
      "event.category": "network_traffic",
      "event.dataset": "socket",
      "event.duration": 18325828,
      "event.end": "2020-05-04T08:44:55.994Z",
      "event.kind": "event",
      "event.module": "system",
      "event.start": "2020-05-04T08:44:55.975Z",
      "flow.complete": false,
      "flow.final": true,
      "group.id": "0",
      "group.name": "root",
      "host.name": "b694d587a174",
      "network.bytes": 2250,
      "network.community_id": "1:RbCKhekHI/3gR7oowAoFLKnKEXY=",
      "network.direction": "unknown",
      "network.packets": 4,
      "network.transport": "tcp",
      "network.type": "ipv4",
      "process.args": [
      "/usr/local/bin/auditbeat",
      "-e",
      "-c",
      "/etc/auditbeat/auditbeat.yml"
      ],
      "process.created": "2020-05-04T08:22:38.920Z",
      "process.executable": "/opt/auditbeat-7.3.0-linux-x86_64/auditbeat",
      "process.name": "auditbeat",
      "process.pid": 2356,
      "server.bytes": 99,
      "server.ip": "35.184.73.24",
      "server.packets": 2,
      "server.port": 5001,
      "service.type": "system",
      "source.bytes": 2151,
      "source.ip": "10.224.1.158",
      "source.packets": 2,
      "source.port": 52016,
      "system.audit.socket.egid": 0,
      "system.audit.socket.euid": 0,
      "system.audit.socket.gid": 0,
      "system.audit.socket.kernel_sock_address": "0xffff9136550de800",
      "system.audit.socket.uid": 0,
      "user.id": "0",
      "user.name": "root"
      }
      ] don't match the condition: the documents contain {
      "agent.type": "auditbeat",
      "client.bytes": {
      "operator": "",
      "type": "comparison",
      "value": 30
      },
      "client.ip": "127.231.189.115",
      "client.packets": 1,
      "client.port": 46672,
      "destination.bytes": {
      "operator": "",
      "type": "comparison",
      "value": 30
      },
      "destination.ip": "127.216.54.133",
      "destination.packets": 1,
      "destination.port": 53,
      "event.action": "network_flow",
      "event.category": "network_traffic",
      "event.dataset": "socket",
      "event.kind": "event",
      "event.module": "system",
      "network.bytes": {
      "operator": "",
      "type": "comparison",
      "value": 60
      },
      "network.direction": "inbound",
      "network.packets": 2,
      "network.transport": "udp",
      "network.type": "ipv4",
      "process.pid": 48356,
      "server.bytes": {
      "operator": "",
      "type": "comparison",
      "value": 30
      },
      "server.ip": "127.216.54.133",
      "server.packets": 1,
      "server.port": 53,
      "source.bytes": {
      "operator": "",
      "type": "comparison",
      "value": 30
      },
      "source.ip": "127.231.189.115",
      "source.packets": 1,
      "source.port": 46672,
      "user.id": "0"
      },
      {
      "agent.type": "auditbeat",
      "client.bytes": {
      "operator": "",
      "type": "comparison",
      "value": 80
      },
      "client.ip": "127.107.104.76",
      "client.packets": {
      "operator": "",
      "type": "comparison",
      "value": 2
      },
      "client.port": 34995,
      "destination.bytes": {
      "operator": "",
      "type": "comparison",
      "value": 2
      },
      "destination.domain": "elastic.co",
      "destination.ip": "127.237.205.115",
      "destination.packets": {
      "operator": "",
      "type": "comparison",
      "value": 2
      },
      "destination.port": 51937,
      "event.action": "network_flow",
      "event.category": "network_traffic",
      "event.dataset": "socket",
      "event.kind": "event",
      "event.module": "system",
      "network.direction": "inbound",
      "network.packets": {
      "operator": "",
      "type": "comparison",
      "value": 5
      },
      "network.transport": "tcp",
      "network.type": "ipv4",
      "process.pid": 48356,
      "server.bytes": {
      "operator": "",
      "type": "comparison",
      "value": 2
      },
      "server.domain": "elastic.co",
      "server.ip": "127.237.205.115",
      "server.packets": {
      "operator": "",
      "type": "comparison",
      "value": 2
      },
      "server.port": 51937,
      "service.type": "system",
      "source.bytes": {
      "operator": "",
      "type": "comparison",
      "value": 80
      },
      "source.ip": "127.107.104.76",
      "source.packets": {
      "operator": "",
      "type": "comparison",
      "value": 2
      },
      "source.port": 34995
      }

Steps errors

Expand to view the steps failures

  • Name: Mage update build test

    • Description: mage update build test

    • Result: FAILURE

    • Duration: 11 min 8 sec<

    • Start Time: 2020-05-04T08:35:13.543+0000

  • Name: Make -C generator/_templates/metricbeat test

    • Description: make -C generator/_templates/metricbeat test

    • Result: FAILURE

    • Duration: 1 min 51 sec<

    • Start Time: 2020-05-04T08:36:12.151+0000

Log output

Expand to view the last 100 lines of log output

[2020-05-04T09:24:15.174Z] + git config user.name beatsmachine
[2020-05-04T09:24:15.567Z] + .ci/scripts/terraform-cleanup.sh x-pack/metricbeat
[2020-05-04T09:24:15.567Z] + DIRECTORY=x-pack/metricbeat
[2020-05-04T09:24:15.567Z] + FAILED=0
[2020-05-04T09:24:15.567Z] ++ find x-pack/metricbeat -name terraform.tfstate
[2020-05-04T09:24:15.567Z] + exit 0
[2020-05-04T09:24:16.029Z] + curl -sSLo codecov https://codecov.io/bash
[2020-05-04T09:24:16.292Z] + FILE=auditbeat/build/coverage/full.cov
[2020-05-04T09:24:16.292Z] + [ -f auditbeat/build/coverage/full.cov ]
[2020-05-04T09:24:16.292Z] + FILE=filebeat/build/coverage/full.cov
[2020-05-04T09:24:16.292Z] + [ -f filebeat/build/coverage/full.cov ]
[2020-05-04T09:24:16.292Z] + FILE=heartbeat/build/coverage/full.cov
[2020-05-04T09:24:16.292Z] + [ -f heartbeat/build/coverage/full.cov ]
[2020-05-04T09:24:16.292Z] + FILE=libbeat/build/coverage/full.cov
[2020-05-04T09:24:16.292Z] + [ -f libbeat/build/coverage/full.cov ]
[2020-05-04T09:24:16.292Z] + FILE=metricbeat/build/coverage/full.cov
[2020-05-04T09:24:16.292Z] + [ -f metricbeat/build/coverage/full.cov ]
[2020-05-04T09:24:16.292Z] + FILE=packetbeat/build/coverage/full.cov
[2020-05-04T09:24:16.292Z] + [ -f packetbeat/build/coverage/full.cov ]
[2020-05-04T09:24:16.292Z] + FILE=winlogbeat/build/coverage/full.cov
[2020-05-04T09:24:16.292Z] + [ -f winlogbeat/build/coverage/full.cov ]
[2020-05-04T09:24:16.292Z] + FILE=journalbeat/build/coverage/full.cov
[2020-05-04T09:24:16.292Z] + [ -f journalbeat/build/coverage/full.cov ]
[2020-05-04T09:24:18.089Z] Running in /var/lib/jenkins/workspace/Beats_beats-beats-mbp_PR-18163/src/github.com/elastic/beats
[2020-05-04T09:24:18.420Z] + find . -type f -name TEST*.xml -path */build/* -delete
[2020-05-04T09:24:18.444Z] Running in /var/lib/jenkins/workspace/Beats_beats-beats-mbp_PR-18163/src/github.com/elastic/beats/Lint
[2020-05-04T09:24:18.581Z] Running in /var/lib/jenkins/workspace/Beats_beats-beats-mbp_PR-18163/src/github.com/elastic/beats/Generators-Metricbeat-Linux
[2020-05-04T09:24:18.738Z] Running in /var/lib/jenkins/workspace/Beats_beats-beats-mbp_PR-18163/src/github.com/elastic/beats/Winlogbeat-oss
[2020-05-04T09:24:18.884Z] Running in /var/lib/jenkins/workspace/Beats_beats-beats-mbp_PR-18163/src/github.com/elastic/beats/Journalbeat-oss
[2020-05-04T09:24:19.007Z] Running in /var/lib/jenkins/workspace/Beats_beats-beats-mbp_PR-18163/src/github.com/elastic/beats/Dockerlogbeat
[2020-05-04T09:24:19.147Z] Running in /var/lib/jenkins/workspace/Beats_beats-beats-mbp_PR-18163/src/github.com/elastic/beats/Elastic-Agent-x-pack
[2020-05-04T09:24:19.301Z] Running in /var/lib/jenkins/workspace/Beats_beats-beats-mbp_PR-18163/src/github.com/elastic/beats/Functionbeat-x-pack
[2020-05-04T09:24:19.451Z] Running in /var/lib/jenkins/workspace/Beats_beats-beats-mbp_PR-18163/src/github.com/elastic/beats/Metricbeat-OSS-Unit-tests
[2020-05-04T09:24:19.594Z] Running in /var/lib/jenkins/workspace/Beats_beats-beats-mbp_PR-18163/src/github.com/elastic/beats/Metricbeat-crosscompile
[2020-05-04T09:24:19.722Z] Running in /var/lib/jenkins/workspace/Beats_beats-beats-mbp_PR-18163/src/github.com/elastic/beats/Elastic-Agent-x-pack-Windows
[2020-05-04T09:24:19.849Z] Running in /var/lib/jenkins/workspace/Beats_beats-beats-mbp_PR-18163/src/github.com/elastic/beats/Heartbeat-oss
[2020-05-04T09:24:19.982Z] Running in /var/lib/jenkins/workspace/Beats_beats-beats-mbp_PR-18163/src/github.com/elastic/beats/Auditbeat-x-pack
[2020-05-04T09:24:20.109Z] Running in /var/lib/jenkins/workspace/Beats_beats-beats-mbp_PR-18163/src/github.com/elastic/beats/Winlogbeat-Windows-x-pack
[2020-05-04T09:24:20.243Z] Running in /var/lib/jenkins/workspace/Beats_beats-beats-mbp_PR-18163/src/github.com/elastic/beats/Auditbeat-Linux
[2020-05-04T09:24:20.380Z] Running in /var/lib/jenkins/workspace/Beats_beats-beats-mbp_PR-18163/src/github.com/elastic/beats/Libbeat-x-pack
[2020-05-04T09:24:20.518Z] Running in /var/lib/jenkins/workspace/Beats_beats-beats-mbp_PR-18163/src/github.com/elastic/beats/Filebeat-Windows
[2020-05-04T09:24:20.650Z] Running in /var/lib/jenkins/workspace/Beats_beats-beats-mbp_PR-18163/src/github.com/elastic/beats/Packetbeat-oss
[2020-05-04T09:24:20.779Z] Running in /var/lib/jenkins/workspace/Beats_beats-beats-mbp_PR-18163/src/github.com/elastic/beats/Auditbeat-crosscompile
[2020-05-04T09:24:20.906Z] Running in /var/lib/jenkins/workspace/Beats_beats-beats-mbp_PR-18163/src/github.com/elastic/beats/Metricbeat-Windows
[2020-05-04T09:24:21.040Z] Running in /var/lib/jenkins/workspace/Beats_beats-beats-mbp_PR-18163/src/github.com/elastic/beats/Winlogbeat-Windows
[2020-05-04T09:24:21.186Z] Running in /var/lib/jenkins/workspace/Beats_beats-beats-mbp_PR-18163/src/github.com/elastic/beats/Filebeat-x-pack
[2020-05-04T09:24:21.329Z] Running in /var/lib/jenkins/workspace/Beats_beats-beats-mbp_PR-18163/src/github.com/elastic/beats/Heartbeat-Windows
[2020-05-04T09:24:21.460Z] Running in /var/lib/jenkins/workspace/Beats_beats-beats-mbp_PR-18163/src/github.com/elastic/beats/Functionbeat-Windows
[2020-05-04T09:24:21.588Z] Running in /var/lib/jenkins/workspace/Beats_beats-beats-mbp_PR-18163/src/github.com/elastic/beats/Auditbeat-Windows
[2020-05-04T09:24:21.715Z] Running in /var/lib/jenkins/workspace/Beats_beats-beats-mbp_PR-18163/src/github.com/elastic/beats/Filebeat-oss
[2020-05-04T09:24:21.842Z] Running in /var/lib/jenkins/workspace/Beats_beats-beats-mbp_PR-18163/src/github.com/elastic/beats/Libbeat-oss
[2020-05-04T09:24:21.971Z] Running in /var/lib/jenkins/workspace/Beats_beats-beats-mbp_PR-18163/src/github.com/elastic/beats/Metricbeat-Python-integration-tests
[2020-05-04T09:24:22.099Z] Running in /var/lib/jenkins/workspace/Beats_beats-beats-mbp_PR-18163/src/github.com/elastic/beats/Libbeat-crosscompile
[2020-05-04T09:24:22.226Z] Running in /var/lib/jenkins/workspace/Beats_beats-beats-mbp_PR-18163/src/github.com/elastic/beats/Libbeat-stress-tests
[2020-05-04T09:24:22.363Z] Running in /var/lib/jenkins/workspace/Beats_beats-beats-mbp_PR-18163/src/github.com/elastic/beats/Metricbeat-OSS-Integration-tests
[2020-05-04T09:24:22.489Z] Running in /var/lib/jenkins/workspace/Beats_beats-beats-mbp_PR-18163/src/github.com/elastic/beats/Metricbeat-x-pack
[2020-05-04T09:24:22.907Z] + cat
[2020-05-04T09:24:22.907Z] + /usr/local/bin/runbld ./runbld-script
[2020-05-04T09:24:22.907Z] Picked up JAVA_TOOL_OPTIONS: -Dfile.encoding=UTF8
[2020-05-04T09:24:29.503Z] runbld>>> runbld started
[2020-05-04T09:24:29.503Z] runbld>>> 1.6.11/a66728ff8f4356963772e6e6d2069392fa06acbe
[2020-05-04T09:24:30.887Z] runbld>>> The following profiles matched the job 'Beats/beats-beats-mbp/PR-18163' in order of occurrence in the config (last value wins).
[2020-05-04T09:24:31.829Z] runbld>>> Debug logging enabled.
[2020-05-04T09:24:31.829Z] runbld>>> Storing result
[2020-05-04T09:24:32.092Z] runbld>>> Store result: created {:total 2, :successful 2, :failed 0} 1
[2020-05-04T09:24:32.092Z] runbld>>> BUILD: https://c150076387b5421f9154dfbf536e5c60.us-west1.gcp.cloud.es.io:9243/build-1587637540455/t/20200504092431-1BBF6D48
[2020-05-04T09:24:32.092Z] runbld>>> Adding system facts.
[2020-05-04T09:24:33.035Z] runbld>>> Adding vcs info for the latest commit:  84649ae4ad69b1c1fcb7065941247c33f842d819
[2020-05-04T09:24:33.296Z] runbld>>> >>>>>>>>>>>> SCRIPT EXECUTION BEGIN >>>>>>>>>>>>
[2020-05-04T09:24:33.296Z] runbld>>> Adding /usr/lib/jvm/java-8-openjdk-amd64/bin to the path.
[2020-05-04T09:24:33.557Z] + echo 'Processing JUnit reports with runbld...'
[2020-05-04T09:24:33.557Z] Processing JUnit reports with runbld...
[2020-05-04T09:24:33.818Z] runbld>>> <<<<<<<<<<<< SCRIPT EXECUTION END <<<<<<<<<<<<
[2020-05-04T09:24:33.818Z] runbld>>> DURATION: 36ms
[2020-05-04T09:24:33.818Z] runbld>>> STDOUT: 40 bytes
[2020-05-04T09:24:33.818Z] runbld>>> STDERR: 49 bytes
[2020-05-04T09:24:33.819Z] runbld>>> WRAPPED PROCESS: SUCCESS (0)
[2020-05-04T09:24:33.819Z] runbld>>> Searching for build metadata in /var/lib/jenkins/workspace/Beats_beats-beats-mbp_PR-18163/src/github.com/elastic/beats
[2020-05-04T09:24:35.214Z] runbld>>> Storing build metadata: 
[2020-05-04T09:24:35.214Z] runbld>>> Adding test report.
[2020-05-04T09:24:35.214Z] runbld>>> Searching for junit test output files with the pattern: TEST-.*\.xml$ in: /var/lib/jenkins/workspace/Beats_beats-beats-mbp_PR-18163/src/github.com/elastic/beats
[2020-05-04T09:24:36.156Z] runbld>>> Found 78 test output files
[2020-05-04T09:24:36.728Z] runbld>>> No testsuite node found in /var/lib/jenkins/workspace/Beats_beats-beats-mbp_PR-18163/src/github.com/elastic/beats/Metricbeat-x-pack/x-pack/metricbeat/build/TEST-go-integration-openmetrics.xml
[2020-05-04T09:24:36.728Z] runbld>>> No testsuite node found in /var/lib/jenkins/workspace/Beats_beats-beats-mbp_PR-18163/src/github.com/elastic/beats/Metricbeat-x-pack/x-pack/metricbeat/build/TEST-go-integration-istio.xml
[2020-05-04T09:24:36.728Z] runbld>>> No testsuite node found in /var/lib/jenkins/workspace/Beats_beats-beats-mbp_PR-18163/src/github.com/elastic/beats/Metricbeat-x-pack/x-pack/metricbeat/build/TEST-go-integration-activemq.xml
[2020-05-04T09:24:37.679Z] runbld>>> Test output logs contained: Errors: 0 Failures: 1 Tests: 6370 Skipped: 701
[2020-05-04T09:24:37.939Z] runbld>>> Storing result
[2020-05-04T09:24:37.939Z] runbld>>> FAILURES: 1
[2020-05-04T09:24:38.509Z] runbld>>> Store result: updated {:total 2, :successful 2, :failed 0} 2
[2020-05-04T09:24:38.509Z] runbld>>> BUILD: https://c150076387b5421f9154dfbf536e5c60.us-west1.gcp.cloud.es.io:9243/build-1587637540455/t/20200504092431-1BBF6D48
[2020-05-04T09:24:38.509Z] runbld>>> Email notification disabled by environment variable.
[2020-05-04T09:24:38.509Z] runbld>>> Slack notification disabled by environment variable.
[2020-05-04T09:24:44.418Z] Running on Jenkins in /var/lib/jenkins/workspace/Beats_beats-beats-mbp_PR-18163
[2020-05-04T09:24:44.573Z] [INFO] getVaultSecret: Getting secrets
[2020-05-04T09:24:44.639Z] Masking supported pattern matches of $VAULT_ADDR or $VAULT_ROLE_ID or $VAULT_SECRET_ID
[2020-05-04T09:24:45.701Z] + chmod 755 generate-build-data.sh
[2020-05-04T09:24:45.701Z] + ./generate-build-data.sh https://beats-ci.elastic.co/blue/rest/organizations/jenkins/pipelines/Beats/beats-beats-mbp/PR-18163/ https://beats-ci.elastic.co/blue/rest/organizations/jenkins/pipelines/Beats/beats-beats-mbp/PR-18163/runs/1 FAILURE 5240577
[2020-05-04T09:24:46.252Z] INFO: curl https://beats-ci.elastic.co/blue/rest/organizations/jenkins/pipelines/Beats/beats-beats-mbp/PR-18163/runs/1/steps/?limit=10000 -o steps-info.json
[2020-05-04T09:24:46.503Z] INFO: curl https://beats-ci.elastic.co/blue/rest/organizations/jenkins/pipelines/Beats/beats-beats-mbp/PR-18163/runs/1/tests/?status=FAILED -o tests-errors.json
[2020-05-04T09:24:47.054Z] INFO: curl https://beats-ci.elastic.co/blue/rest/organizations/jenkins/pipelines/Beats/beats-beats-mbp/PR-18163/runs/1/log/ -o pipeline-log.txt

Copy link
Contributor

@ycombinator ycombinator left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Backport LGTM

@jsoriano jsoriano merged commit 76cb884 into elastic:7.x May 4, 2020
@jsoriano jsoriano deleted the backport_17480_7.x branch May 4, 2020 21:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
backport needs_team Indicates that the issue/PR needs a Team:* label review
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants