Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Release 4.8.0 - Alpha 1 - Footprint Metrics - LOGCOLLECTOR,SCA (2.5d) #20811

Closed
wazuhci opened this issue Dec 13, 2023 · 4 comments
Closed

Release 4.8.0 - Alpha 1 - Footprint Metrics - LOGCOLLECTOR,SCA (2.5d) #20811

wazuhci opened this issue Dec 13, 2023 · 4 comments
Assignees
@Deblintrake09
Labels
level/subtask tracking type/release type/test

Comments

@wazuhci
Copy link

wazuhci commented Dec 13, 2023 •
edited by Deblintrake09
Loading

Footprint metrics information
Main release stage issue # #20667
Main footprint metrics issue # #20669
Version 4.8.0
Release stage # Alpha 1
Tag https://github.com/wazuh/wazuh/tree/v4.8.0-alpha1

Stress test documentation

Packages used

Manager
Centos agent
Ubuntu agent
Windows agent

Notes

Conclusion

Plots 🔴

Logs 🟡
@wazuhci wazuhci moved this to Triage in Release 4.8.0 Dec 14, 2023
@damarisg damarisg moved this from Triage to Backlog in Release 4.8.0 Dec 14, 2023
@Deblintrake09 Deblintrake09 self-assigned this Dec 14, 2023
@wazuhci wazuhci moved this from Backlog to In progress in Release 4.8.0 Dec 14, 2023
@Deblintrake09
Copy link
Contributor

Deblintrake09 commented Dec 14, 2023 •
edited
Loading

Analysis report

Plots 🔴

Logs 🟡

Manager
  • Expected in stress test
sca WARNING: Interval overtaken.
wazuh-logcollector WARNING: (1960): File limit has been reached (1000). Please reduce the number of files or increase "logcollector.max_files".
wazuh-logcollector WARNING: Target 'agent' message queue is full (1024). Log lines may be lost.
wazuh-analysisd WARNING: Input queue is full.
wazuh-remoted WARNING: Message queue is full (10). Events may be lost.
Ubuntu 
wazuh-agentd ERROR: (1216): Unable to connect to '[172.31.10.221]:1514/tcp': 'Connection refused'.
  • Expected in stress test
wazuh-agentd WARNING: Agent buffer is full: Events may be lost.
wazuh-logcollector WARNING: (1960): File limit has been reached (1000). Please reduce the number of files or increase "logcollector.max_files".
sca WARNING: Interval overtaken.
wazuh-agentd WARNING: Agent buffer is flooded: Producing too many events.
wazuh-logcollector WARNING: Target 'agent' message queue is full (1024). Log lines may be lost.
Windows 
wazuh-agent ERROR: (1103): Could not open file 'C:\tmp\logcollector_test\date-2023-12-12-34-190.log' due to [(2)-(The system cannot find the file specified.)].
  • Expected in stress test
wazuh-agent WARNING: (1960): File limit has been reached (200).
wazuh-agent WARNING: Agent buffer is full: Events may be lost.
wazuh-agent WARNING: Agent buffer at 90 %.
sca WARNING: Interval overtaken.
wazuh-agent WARNING: Target 'agent' message queue is full (1024). Log lines may be lost.
Centos 
wazuh-agentd ERROR: (1137): Lost connection with manager. Setting lock.
wazuh-agentd ERROR: (1216): Unable to connect to '[172.31.10.221]:1514/tcp': 'Connection refused'.
  • Expected in stress test
wazuh-agentd WARNING: Agent buffer is full: Events may be lost.
sca WARNING: Interval overtaken.
wazuh-logcollector WARNING: (1960): File limit has been reached (1000). Please reduce the number of files or increase "logcollector.max_files".
wazuh-agentd WARNING: Agent buffer is flooded: Producing too many events.
wazuh-modulesd WARNING: Process locked due to agent is offline. Waiting for connection...
wazuh-logcollector WARNING: Target 'agent' message queue is full (1024). Log lines may be lost.

@Deblintrake09 Deblintrake09 mentioned this issue Dec 15, 2023
Closed
@wazuhci wazuhci moved this from In progress to Pending review in Release 4.8.0 Dec 15, 2023
@pro-akim
Copy link
Member

Review Notes

Plots

Plots were compared to 4.7.1 while it should be 4.7.0-rc1

@wazuhci wazuhci moved this from Pending review to On hold in Release 4.8.0 Dec 18, 2023
@Deblintrake09
Copy link
Contributor

Update

Plots were compared with 4.7.0 updated wrong link.

@wazuhci wazuhci moved this from On hold to In review in Release 4.8.0 Dec 18, 2023
@pro-akim
Copy link
Member

Review Notes

LGTM

Some additional information

Manager

Decoded_events: increased from around 2.5 to 3,8 (max value reached)

Ubuntu

VMS: increase of logcollector

@wazuhci wazuhci moved this from In review to Pending final review in Release 4.8.0 Dec 18, 2023
@damarisg damarisg moved this from Pending final review to In final review in Release 4.8.0 Dec 18, 2023
@damarisg damarisg mentioned this issue Dec 18, 2023
Closed
@damarisg damarisg moved this from In final review to Done in Release 4.8.0 Dec 18, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@Deblintrake09 Deblintrake09

Labels
level/subtask tracking type/release type/test
Projects
No open projects
Release 4.8.0
Archived in project
Milestone
No milestone
Development

No branches or pull requests
4 participants
@damarisg @Deblintrake09 @wazuhci @pro-akim