You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
For example we have component":{"binary":"metricbeat","dataset":"elastic_agent.http_metrics_monitoring","id":"http/metrics-monitoring","type":"http/metrics"} and "service.name":"metricbeat" to allow looking at the monitoring metricbeat logs only.
We are missing these with logs coming from the agent itself:
We should add at least "service.name":"agent" to allow filtering for agent specific logs easily e.g. being able to do rg '"service.name":"agent"' locally will save a lot of time during SDH analysis. The agent itself isn't a component so it makes sense for those fields to be missing.
The text was updated successfully, but these errors were encountered:
Comment originally made here #1702 (comment)
After #221 the spawned components contain message fields to easily allow separating them out when analyzing logs locally:
For example we have
component":{"binary":"metricbeat","dataset":"elastic_agent.http_metrics_monitoring","id":"http/metrics-monitoring","type":"http/metrics"}
and"service.name":"metricbeat"
to allow looking at the monitoring metricbeat logs only.We are missing these with logs coming from the agent itself:
We should add at least
"service.name":"agent"
to allow filtering for agent specific logs easily e.g. being able to dorg '"service.name":"agent"'
locally will save a lot of time during SDH analysis. The agent itself isn't a component so it makes sense for those fields to be missing.The text was updated successfully, but these errors were encountered: