Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Release 4.9.0 - Beta 1 - Footprint Metrics - LOGCOLLECTOR,SYSCOLLECTOR (2.5d) #25039

Closed
wazuhci opened this issue Aug 5, 2024 · 1 comment
Closed

Comments

@wazuhci
Copy link

wazuhci commented Aug 5, 2024

Footprint metrics information

Main release stage issue # #25025
Main footprint metrics issue # #25005
Version 4.9.0
Release stage # Beta 1
Tag https://github.com/wazuh/wazuh/tree/v4.9.0-beta1

Stress test documentation

Packages used


Manager
Centos agent
Ubuntu agent
Windows agent
macOS agent
  • Plots
  • Logs and configuration
  • CSV
Solaris agent
  • Plots
  • Logs and configuration
  • CSV

Conclusion 🟡

Graphs 🟢 :

New issue:

Logs 🟡

Known issues:

@wazuhci wazuhci moved this to Triage in Release 4.9.0 Aug 5, 2024
@pro-akim pro-akim self-assigned this Aug 6, 2024
@wazuhci wazuhci moved this from Triage to In progress in Release 4.9.0 Aug 6, 2024
@wazuhci wazuhci moved this from In progress to Pending review in Release 4.9.0 Aug 6, 2024
@pro-akim
Copy link
Member

pro-akim commented Aug 6, 2024

Analysis report

Graphs 🔴

Compared to: #24469

Centos

Disk: decrease of modulesd
Disk_read: increase of modulesd
Disk_written: decrease of modulesd
PSS: increase of logcollector
Read_Ops: decrease of modulesd
RSS, USS: increase of logcollector
Write_Ops: decrease of modulesd

Ubuntu

Disk: decrease of modulesd
Disk_read: decrease of logcollector
Disk_written: decrease of modulesd
Write_Ops: decrease of modulesd
Agentd_number_of_messages: decrease of number of messages

Windows

Agentd_number_of_generated_events: Decrease of number of events

Manager

Disk: decrease of modulesd
Disk_written: increase of wazuhdb
PSS: small increase of modulesd
Read_Ops: decrease of modulesd
RSS: decrease of analysisd
USS: increase of modulesd

Logs 🟡

Centos
2024/08/02 20:39:21 wazuh-agentd ERROR: (1137): Lost connection with manager. Setting lock.
2024/08/02 20:39:21 wazuh-agentd ERROR: (1216): Unable to connect to '[172.31.6.248]:1514/tcp': 'Connection refused'.
  • Expected in stress test
2024/08/04 00:00:13 wazuh-agentd WARNING: Agent buffer is full: Events may be lost.
2024/08/04 00:11:24 wazuh-logcollector WARNING: (1960): File limit has been reached (1000). Please reduce the number of files or increase "logcollector.max_files".
2024/08/02 20:39:21 wazuh-modulesd WARNING: Process locked due to agent is offline. Waiting for connection...
2024/08/03 02:41:01 wazuh-logcollector WARNING: Target 'agent' message queue is full (1024). Log lines may be lost.
Ubuntu
2024/08/02 20:39:26 wazuh-agentd ERROR: (1216): Unable to connect to '[172.31.6.248]:1514/tcp': 'Connection refused'.
  • Expected in stress test
2024/08/04 00:00:12 wazuh-agentd WARNING: Agent buffer is full: Events may be lost.
2024/08/04 00:12:03 wazuh-logcollector WARNING: (1960): File limit has been reached (1000). Please reduce the number of files or increase "logcollector.max_files".
2024/08/03 02:41:24 wazuh-logcollector WARNING: Target 'agent' message queue is full (1024). Log lines may be lost.
Windows
2024/08/02 20:39:25 wazuh-agent ERROR: (1216): Unable to connect to '[172.31.6.248]:1514/tcp': 'No connection could be made because the target machine actively refused it.'.
  • Expected in stress test
2024/08/03 02:41:16 wazuh-agent WARNING: (1960): File limit has been reached (200).
2024/08/03 02:41:16 wazuh-agent WARNING: Agent buffer at 90 %.
2024/08/03 02:41:22 wazuh-agent WARNING: Agent buffer is full: Events may be lost.
2024/08/03 02:53:05 wazuh-agent WARNING: Target 'agent' message queue is full (1024). Log lines may be lost.
Manager
  • Expected in stress test
2024/08/04 00:12:01 wazuh-logcollector WARNING: (1960): File limit has been reached (1000). Please reduce the number of files or increase "logcollector.max_files".
2024/08/02 20:38:48 wazuh-logcollector WARNING: Target 'agent' message queue is full (1024). Log lines may be lost.
2024/08/03 02:41:21 wazuh-analysisd WARNING: Input queue is full.
2024/08/03 16:27:57 wazuh-remoted WARNING: Message queue is full (10). Events may be lost.
2024/08/02 20:36:42 indexer-connector WARNING: No username and password found in the keystore, using default values.
2024/08/02 20:36:42 indexer-connector WARNING: IndexerConnector initialization failed for index 'wazuh-states-vulnerabilities-ip-172-31-6-248.ec2.internal', retrying until the connection is successful.
2024/08/02 20:39:14 indexer-connector WARNING: Failed to sync agent '001' with the indexer.
2024/08/02 20:39:21 wazuh-modulesd:content-updater WARNING: The offsets download has been interrupted.

@wazuhci wazuhci moved this from Pending review to Pending final review in Release 4.9.0 Aug 7, 2024
@rauldpm rauldpm closed this as completed Aug 7, 2024
@wazuhci wazuhci moved this from Pending final review to Done in Release 4.9.0 Aug 7, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
No open projects
Status: Done
Development

No branches or pull requests

3 participants