Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Release 4.9.0 - Beta 1 - Footprint Metrics - LOGCOLLECTOR,SYSCOLLECTOR (2.5d) #25039

Closed
wazuhci opened this issue Aug 5, 2024 · 1 comment
Closed

Release 4.9.0 - Beta 1 - Footprint Metrics - LOGCOLLECTOR,SYSCOLLECTOR (2.5d) #25039

wazuhci opened this issue Aug 5, 2024 · 1 comment
Assignees
@pro-akim
Labels
level/subtask tracking type/release type/test

Comments

@wazuhci
Copy link

wazuhci commented Aug 5, 2024 •
edited by rauldpm
Loading

Footprint metrics information
Main release stage issue # #25025
Main footprint metrics issue # #25005
Version 4.9.0
Release stage # Beta 1
Tag https://github.com/wazuh/wazuh/tree/v4.9.0-beta1

Stress test documentation

Packages used

Manager
Centos agent
Ubuntu agent
Windows agent
macOS agent
  • Plots
  • Logs and configuration
  • CSV
Solaris agent
  • Plots
  • Logs and configuration
  • CSV

Conclusion 🟡

Graphs 🟢 :

New issue:

Logs 🟡

Known issues:
@pro-akim pro-akim mentioned this issue Aug 5, 2024
Closed
1 task
@wazuhci wazuhci moved this to Triage in Release 4.9.0 Aug 5, 2024
@pro-akim pro-akim self-assigned this Aug 6, 2024
@wazuhci wazuhci moved this from Triage to In progress in Release 4.9.0 Aug 6, 2024
@wazuhci wazuhci moved this from In progress to Pending review in Release 4.9.0 Aug 6, 2024
@pro-akim
Copy link
Member

pro-akim commented Aug 6, 2024

Analysis report

Graphs 🔴

Compared to: #24469

Centos

Disk: decrease of modulesd
Disk_read: increase of modulesd
Disk_written: decrease of modulesd
PSS: increase of logcollector
Read_Ops: decrease of modulesd
RSS, USS: increase of logcollector
Write_Ops: decrease of modulesd

Ubuntu

Disk: decrease of modulesd
Disk_read: decrease of logcollector
Disk_written: decrease of modulesd
Write_Ops: decrease of modulesd
Agentd_number_of_messages: decrease of number of messages

Windows

Agentd_number_of_generated_events: Decrease of number of events

Manager

Disk: decrease of modulesd
Disk_written: increase of wazuhdb
PSS: small increase of modulesd
Read_Ops: decrease of modulesd
RSS: decrease of analysisd
USS: increase of modulesd

Logs 🟡

Centos 
2024/08/02 20:39:21 wazuh-agentd ERROR: (1137): Lost connection with manager. Setting lock.
2024/08/02 20:39:21 wazuh-agentd ERROR: (1216): Unable to connect to '[172.31.6.248]:1514/tcp': 'Connection refused'.
  • Expected in stress test
2024/08/04 00:00:13 wazuh-agentd WARNING: Agent buffer is full: Events may be lost.
2024/08/04 00:11:24 wazuh-logcollector WARNING: (1960): File limit has been reached (1000). Please reduce the number of files or increase "logcollector.max_files".
2024/08/02 20:39:21 wazuh-modulesd WARNING: Process locked due to agent is offline. Waiting for connection...
2024/08/03 02:41:01 wazuh-logcollector WARNING: Target 'agent' message queue is full (1024). Log lines may be lost.
Ubuntu 
2024/08/02 20:39:26 wazuh-agentd ERROR: (1216): Unable to connect to '[172.31.6.248]:1514/tcp': 'Connection refused'.
  • Expected in stress test
2024/08/04 00:00:12 wazuh-agentd WARNING: Agent buffer is full: Events may be lost.
2024/08/04 00:12:03 wazuh-logcollector WARNING: (1960): File limit has been reached (1000). Please reduce the number of files or increase "logcollector.max_files".
2024/08/03 02:41:24 wazuh-logcollector WARNING: Target 'agent' message queue is full (1024). Log lines may be lost.
Windows 
2024/08/02 20:39:25 wazuh-agent ERROR: (1216): Unable to connect to '[172.31.6.248]:1514/tcp': 'No connection could be made because the target machine actively refused it.'.
  • Expected in stress test
2024/08/03 02:41:16 wazuh-agent WARNING: (1960): File limit has been reached (200).
2024/08/03 02:41:16 wazuh-agent WARNING: Agent buffer at 90 %.
2024/08/03 02:41:22 wazuh-agent WARNING: Agent buffer is full: Events may be lost.
2024/08/03 02:53:05 wazuh-agent WARNING: Target 'agent' message queue is full (1024). Log lines may be lost.
Manager
  • Expected in stress test
2024/08/04 00:12:01 wazuh-logcollector WARNING: (1960): File limit has been reached (1000). Please reduce the number of files or increase "logcollector.max_files".
2024/08/02 20:38:48 wazuh-logcollector WARNING: Target 'agent' message queue is full (1024). Log lines may be lost.
2024/08/03 02:41:21 wazuh-analysisd WARNING: Input queue is full.
2024/08/03 16:27:57 wazuh-remoted WARNING: Message queue is full (10). Events may be lost.

2024/08/02 20:36:42 indexer-connector WARNING: No username and password found in the keystore, using default values.
2024/08/02 20:36:42 indexer-connector WARNING: IndexerConnector initialization failed for index 'wazuh-states-vulnerabilities-ip-172-31-6-248.ec2.internal', retrying until the connection is successful.
2024/08/02 20:39:14 indexer-connector WARNING: Failed to sync agent '001' with the indexer.

2024/08/02 20:39:21 wazuh-modulesd:content-updater WARNING: The offsets download has been interrupted.

@wazuhci wazuhci moved this from Pending review to Pending final review in Release 4.9.0 Aug 7, 2024
@rauldpm rauldpm closed this as completed Aug 7, 2024
@wazuhci wazuhci moved this from Pending final review to Done in Release 4.9.0 Aug 7, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@pro-akim pro-akim

Labels
level/subtask tracking type/release type/test
Projects
No open projects
Release 4.9.0
Status: Done
Milestone
No milestone
Development

No branches or pull requests
3 participants
@rauldpm @wazuhci @pro-akim