Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Cherry-pick #19117 to 7.x: Init package libbeat/statestore #19655

Merged
merged 1 commit into from
Jul 6, 2020

Conversation

urso
Copy link

@urso urso commented Jul 3, 2020

Cherry-pick of PR #19117 to 7.x branch. Original message:

  • Enhancement

What does this PR do?

Initialize support for the statestore package. The addition of the
statestore package is split up into multiple changeset to ease review.
The final version of the package can be found here.

Once finalized, the libbeat/statestore package contains:

  • The statestore frontend and interface for use within Beats
  • Interfaces for the store backend
  • A common set of tests store backends need to support
  • a storetest package for testing new features that require a store. The
    testing helpers use map[string]interface{} that can be initialized or
    queried after the test run for validation purposes.
  • The default memlog backend + tests

This change includes the frontend and backend interfaces only. Once merged we will add the tests and finally the memlog store.

Why is it important?

The statestore introduces a simple key-value store to Beats. The statestore will be used to replace the registry in filebeat in the future.

Checklist

  • My code follows the style guidelines of this project
  • I have commented my code, particularly in hard-to-understand areas
    - [ ] I have made corresponding changes to the documentation
    - [ ] I have made corresponding change to the default configuration files
    - [ ] I have added tests that prove my fix is effective or that my feature works
    - [ ] I have added an entry in CHANGELOG.next.asciidoc or CHANGELOG-developer.next.asciidoc.

Related issues

Initialize support for the statestore package. The addition of the
statestore package is split up into multiple changeset to ease review.
The final version of the package can be found [here](https://github.com/urso/beats/tree/fb-input-v2-combined/libbeat/statestore).

Once finalized, the libbeat/statestore package contains:
- The statestore frontend and interface for use within Beats
- Interfaces for the store backend
- A common set of tests store backends need to support
- a storetest package for testing new features that require a store. The
  testing helpers use map[string]interface{} that can be initialized or
  queried after the test run for validation purposes.
- The default memlog backend + tests

This change includes the frontend and backend interfaces only. Once merged we will add the tests and finally the memlog store.

(cherry picked from commit 1fc18c2)
@urso urso added [zube]: In Review backport Team:Services (Deprecated) Label for the former Integrations-Services team labels Jul 3, 2020
@elasticmachine
Copy link
Collaborator

Pinging @elastic/integrations-services (Team:Services)

@botelastic botelastic bot added needs_team Indicates that the issue/PR needs a Team:* label and removed needs_team Indicates that the issue/PR needs a Team:* label labels Jul 3, 2020
@urso
Copy link
Author

urso commented Jul 3, 2020

@kvch the tools insist to update go.sum and remove vendor/modules.txt. Didn't we delete them already in 7.x? Are we missing any backports?

@elasticmachine
Copy link
Collaborator

❕ Build Aborted

Either there was a build timeout or someone aborted the build.'}

Pipeline View Test View Changes Artifacts

Expand to view the summary

Build stats

  • Build Cause: [Pull request #19655 opened]

  • Start Time: 2020-07-03T21:39:47.610+0000

  • Duration: 123 min 4 sec

Test stats 🧪

Test Results
Failed 153
Passed 8880
Skipped 1500
Total 10533

Test errors

Expand to view the tests failures

  • Name: Build and Test / Filebeat x-pack / TestTopicDoesNotExist – googlepubsub

    • Age: 1
    • Duration: 2.32
    • Error Details: Failed
  • Name: Build and Test / Filebeat x-pack / TestSubscriptionDoesNotExistError – googlepubsub

    • Age: 1
    • Duration: 1.72
    • Error Details: Failed
  • Name: Build and Test / Filebeat x-pack / TestSubscriptionExists – googlepubsub

    • Age: 1
    • Duration: 1.76
    • Error Details: Failed
  • Name: Build and Test / Filebeat x-pack / TestSubscriptionCreate – googlepubsub

    • Age: 1
    • Duration: 1.92
    • Error Details: Failed
  • Name: Build and Test / Filebeat x-pack / TestRunStop – googlepubsub

    • Age: 1
    • Duration: 2
    • Error Details: Failed
  • Name: Build and Test / Filebeat x-pack / TestEndToEndACK – googlepubsub

    • Age: 1
    • Duration: 1.73
    • Error Details: Failed
  • Name: Build and Test / Auditbeat x-pack / test_dns_long_request – test_system_socket.Test

    • Age: 1
    • Duration: 31.292
    • Error Details: The events in: [
      {
      "@timestamp": "2020-07-03T22:14:43.106Z",
      "agent.ephemeral_id": "a86657e0-4dda-42fd-abcb-39d26f9de155",
      "agent.hostname": "6f725fa897a3",
      "agent.id": "6408e125-972b-4fcd-9f45-fa98bcffadf3",
      "agent.name": "6f725fa897a3",
      "agent.type": "auditbeat",
      "agent.version": "7.9.0",
      "client.bytes": 64,
      "client.ip": "127.71.136.229",
      "client.packets": 1,
      "client.port": 40694,
      "destination.bytes": 72,
      "destination.ip": "127.229.169.161",
      "destination.packets": 1,
      "destination.port": 53,
      "ecs.version": "1.5.0",
      "event.action": "network_flow",
      "event.category": [
      "network",
      "network_traffic"
      ],
      "event.dataset": "socket",
      "event.duration": 63515,
      "event.end": "2020-07-03T22:14:40.146Z",
      "event.kind": "event",
      "event.module": "system",
      "event.start": "2020-07-03T22:14:40.146Z",
      "event.type": [
      "info",
      "connection"
      ],
      "flow.complete": false,
      "flow.final": true,
      "group.id": "0",
      "group.name": "root",
      "host.name": "6f725fa897a3",
      "network.bytes": 136,
      "network.community_id": "1:H9mphMUMF10IQ+vwzci0mxbciWo=",
      "network.direction": "inbound",
      "network.packets": 2,
      "network.transport": "udp",
      "network.type": "ipv4",
      "process.args": [
      "/tmp/python-env/build/ve/docker/bin/python3",
      "/tmp/python-env/build/ve/docker/bin/nosetests",
      "--process-timeout=90",
      "--with-timer",
      "--with-xunit",
      "--xunit-file=build/TEST-python-integration.xml",
      "tests/system/test_metricsets.py",
      "tests/system/test_system_socket.py"
      ],
      "process.created": "2020-07-03T22:14:05.400Z",
      "process.executable": "/usr/bin/python3.7",
      "process.name": "nosetests",
      "process.pid": 48024,
      "related.ip": [
      "127.229.169.161",
      "127.71.136.229"
      ],
      "related.user": [
      "root"
      ],
      "server.bytes": 72,
      "server.ip": "127.229.169.161",
      "server.packets": 1,
      "server.port": 53,
      "service.type": "system",
      "source.bytes": 64,
      "source.ip": "127.71.136.229",
      "source.packets": 1,
      "source.port": 40694,
      "system.audit.socket.egid": 0,
      "system.audit.socket.euid": 0,
      "system.audit.socket.gid": 0,
      "system.audit.socket.kernel_sock_address": "0xffff92585bc8cc00",
      "system.audit.socket.uid": 0,
      "user.id": "0",
      "user.name": "root"
      },
      {
      "@timestamp": "2020-07-03T22:14:43.106Z",
      "agent.ephemeral_id": "a86657e0-4dda-42fd-abcb-39d26f9de155",
      "agent.hostname": "6f725fa897a3",
      "agent.id": "6408e125-972b-4fcd-9f45-fa98bcffadf3",
      "agent.name": "6f725fa897a3",
      "agent.type": "auditbeat",
      "agent.version": "7.9.0",
      "client.bytes": 56,
      "client.ip": "127.71.136.229",
      "client.packets": 1,
      "client.port": 40694,
      "destination.bytes": 80,
      "destination.ip": "127.229.169.161",
      "destination.packets": 1,
      "destination.port": 53,
      "ecs.version": "1.5.0",
      "event.action": "network_flow",
      "event.category": [
      "network",
      "network_traffic"
      ],
      "event.dataset": "socket",
      "event.duration": 198948,
      "event.end": "2020-07-03T22:14:40.146Z",
      "event.kind": "event",
      "event.module": "system",
      "event.start": "2020-07-03T22:14:40.146Z",
      "event.type": [
      "info",
      "connection"
      ],
      "flow.complete": false,
      "flow.final": true,
      "group.id": "0",
      "group.name": "root",
      "host.name": "6f725fa897a3",
      "network.bytes": 136,
      "network.community_id": "1:H9mphMUMF10IQ+vwzci0mxbciWo=",
      "network.direction": "outbound",
      "network.packets": 2,
      "network.transport": "udp",
      "network.type": "ipv4",
      "process.args": [
      "/tmp/python-env/build/ve/docker/bin/python3",
      "/tmp/python-env/build/ve/docker/bin/nosetests",
      "--process-timeout=90",
      "--with-timer",
      "--with-xunit",
      "--xunit-file=build/TEST-python-integration.xml",
      "tests/system/test_metricsets.py",
      "tests/system/test_system_socket.py"
      ],
      "process.created": "2020-07-03T22:14:05.400Z",
      "process.executable": "/usr/bin/python3.7",
      "process.name": "nosetests",
      "process.pid": 48024,
      "related.ip": [
      "127.71.136.229",
      "127.229.169.161"
      ],
      "related.user": [
      "root"
      ],
      "server.bytes": 80,
      "server.ip": "127.229.169.161",
      "server.packets": 1,
      "server.port": 53,
      "service.type": "system",
      "source.bytes": 56,
      "source.ip": "127.71.136.229",
      "source.packets": 1,
      "source.port": 40694,
      "system.audit.socket.egid": 0,
      "system.audit.socket.euid": 0,
      "system.audit.socket.gid": 0,
      "system.audit.socket.kernel_sock_address": "0xffff92585bc8fc00",
      "system.audit.socket.uid": 0,
      "user.id": "0",
      "user.name": "root"
      },
      {
      "@timestamp": "2020-07-03T22:14:43.106Z",
      "agent.ephemeral_id": "a86657e0-4dda-42fd-abcb-39d26f9de155",
      "agent.hostname": "6f725fa897a3",
      "agent.id": "6408e125-972b-4fcd-9f45-fa98bcffadf3",
      "agent.name": "6f725fa897a3",
      "agent.type": "auditbeat",
      "agent.version": "7.9.0",
      "client.bytes": 8107,
      "client.ip": "10.224.1.74",
      "client.packets": 4,
      "client.port": 56798,
      "destination.bytes": 99,
      "destination.ip": "35.184.73.24",
      "destination.packets": 2,
      "destination.port": 5001,
      "ecs.version": "1.5.0",
      "event.action": "network_flow",
      "event.category": [
      "network",
      "network_traffic"
      ],
      "event.dataset": "socket",
      "event.duration": 9977259,
      "event.end": "2020-07-03T22:14:40.338Z",
      "event.kind": "event",
      "event.module": "system",
      "event.start": "2020-07-03T22:14:40.328Z",
      "event.type": [
      "info",
      "connection"
      ],
      "flow.complete": false,
      "flow.final": true,
      "group.id": "0",
      "group.name": "root",
      "host.name": "6f725fa897a3",
      "network.bytes": 8206,
      "network.community_id": "1:xDsVUdJSGGstQCWW3CLu771AM2M=",
      "network.direction": "unknown",
      "network.packets": 6,
      "network.transport": "tcp",
      "network.type": "ipv4",
      "process.args": [
      "/usr/local/bin/auditbeat",
      "-e",
      "-c",
      "/etc/auditbeat/auditbeat.yml"
      ],
      "process.created": "2020-07-03T22:04:12.680Z",
      "process.executable": "/opt/auditbeat-7.3.0-linux-x86_64/auditbeat",
      "process.name": "auditbeat",
      "process.pid": 2128,
      "related.ip": [
      "10.224.1.74",
      "35.184.73.24"
      ],
      "related.user": [
      "root"
      ],
      "server.bytes": 99,
      "server.ip": "35.184.73.24",
      "server.packets": 2,
      "server.port": 5001,
      "service.type": "system",
      "source.bytes": 8107,
      "source.ip": "10.224.1.74",
      "source.packets": 4,
      "source.port": 56798,
      "system.audit.socket.egid": 0,
      "system.audit.socket.euid": 0,
      "system.audit.socket.gid": 0,
      "system.audit.socket.kernel_sock_address": "0xffff925855b4c800",
      "system.audit.socket.uid": 0,
      "user.id": "0",
      "user.name": "root"
      },
      {
      "@timestamp": "2020-07-03T22:14:45.106Z",
      "agent.ephemeral_id": "a86657e0-4dda-42fd-abcb-39d26f9de155",
      "agent.hostname": "6f725fa897a3",
      "agent.id": "6408e125-972b-4fcd-9f45-fa98bcffadf3",
      "agent.name": "6f725fa897a3",
      "agent.type": "auditbeat",
      "agent.version": "7.9.0",
      "client.bytes": 120,
      "client.ip": "10.224.1.74",
      "client.packets": 3,
      "client.port": 54944,
      "destination.bytes": 2999,
      "destination.ip": "169.254.169.254",
      "destination.packets": 4,
      "destination.port": 80,
      "ecs.version": "1.5.0",
      "event.action": "network_flow",
      "event.category": [
      "network",
      "network_traffic"
      ],
      "event.dataset": "socket",
      "event.duration": 1134771,
      "event.end": "2020-07-03T22:14:42.798Z",
      "event.kind": "event",
      "event.module": "system",
      "event.start": "2020-07-03T22:14:42.797Z",
      "event.type": [
      "info",
      "connection"
      ],
      "flow.complete": false,
      "flow.final": true,
      "group.id": "0",
      "group.name": "root",
      "host.name": "6f725fa897a3",
      "network.bytes": 3119,
      "network.community_id": "1:AAj5ZUMZMEqhVYiFdPePSK4mucc=",
      "network.direction": "unknown",
      "network.packets": 7,
      "network.transport": "tcp",
      "network.type": "ipv4",
      "process.args": [
      "/usr/bin/python3",
      "/usr/bin/google_accounts_daemon"
      ],
      "process.created": "2020-07-03T22:04:11.240Z",
      "process.executable": "/usr/bin/python3.5",
      "process.name": "google_accounts",
      "process.pid": 1799,
      "related.ip": [
      "10.224.1.74",
      "169.254.169.254"
      ],
      "related.user": [
      "root"
      ],
      "server.bytes": 2999,
      "server.ip": "169.254.169.254",
      "server.packets": 4,
      "server.port": 80,
      "service.type": "system",
      "source.bytes": 120,
      "source.ip": "10.224.1.74",
      "source.packets": 3,
      "source.port": 54944,
      "system.audit.socket.egid": 0,
      "system.audit.socket.euid": 0,
      "system.audit.socket.gid": 0,
      "system.audit.socket.kernel_sock_address": "0xffff92584db96800",
      "system.audit.socket.uid": 0,
      "user.id": "0",
      "user.name": "root"
      },
      {
      "@timestamp": "2020-07-03T22:14:45.106Z",
      "agent.ephemeral_id": "a86657e0-4dda-42fd-abcb-39d26f9de155",
      "agent.hostname": "6f725fa897a3",
      "agent.id": "6408e125-972b-4fcd-9f45-fa98bcffadf3",
      "agent.name": "6f725fa897a3",
      "agent.type": "auditbeat",
      "agent.version": "7.9.0",
      "client.bytes": 398,
      "client.ip": "10.224.1.74",
      "client.packets": 3,
      "client.port": 54952,
      "destination.bytes": 68,
      "destination.ip": "169.254.169.254",
      "destination.packets": 3,
      "destination.port": 80,
      "ecs.version": "1.5.0",
      "event.action": "network_flow",
      "event.category": [
      "network",
      "network_traffic"
      ],
      "event.dataset": "socket",
      "event.duration": 563247,
      "event.end": "2020-07-03T22:14:42.820Z",
      "event.kind": "event",
      "event.module": "system",
      "event.start": "2020-07-03T22:14:42.819Z",
      "event.type": [
      "info",
      "connection"
      ],
      "flow.complete": true,
      "flow.final": true,
      "group.id": "0",
      "group.name": "root",
      "host.name": "6f725fa897a3",
      "network.bytes": 466,
      "network.community_id": "1:oOCJZqjJIp0EE9AfVeXFVHteki8=",
      "network.direction": "outbound",
      "network.packets": 6,
      "network.transport": "tcp",
      "network.type": "ipv4",
      "process.args": [
      "/usr/bin/python3",
      "/usr/bin/google_accounts_daemon"
      ],
      "process.created": "2020-07-03T22:04:11.240Z",
      "process.executable": "/usr/bin/python3.5",
      "process.name": "google_accounts",
      "process.pid": 1799,
      "related.ip": [
      "10.224.1.74",
      "169.254.169.254"
      ],
      "related.user": [
      "root"
      ],
      "server.bytes": 68,
      "server.ip": "169.254.169.254",
      "server.packets": 3,
      "server.port": 80,
      "service.type": "system",
      "source.bytes": 398,
      "source.ip": "10.224.1.74",
      "source.packets": 3,
      "source.port": 54952,
      "system.audit.socket.egid": 0,
      "system.audit.socket.euid": 0,
      "system.audit.socket.gid": 0,
      "system.audit.socket.kernel_sock_address": "0xffff925855a47800",
      "system.audit.socket.uid": 0,
      "user.id": "0",
      "user.name": "root"
      },
      {
      "@timestamp": "2020-07-03T22:14:46.106Z",
      "agent.ephemeral_id": "a86657e0-4dda-42fd-abcb-39d26f9de155",
      "agent.hostname": "6f725fa897a3",
      "agent.id": "6408e125-972b-4fcd-9f45-fa98bcffadf3",
      "agent.name": "6f725fa897a3",
      "agent.type": "auditbeat",
      "agent.version": "7.9.0",
      "client.bytes": 7902,
      "client.ip": "10.224.1.74",
      "client.packets": 3,
      "client.port": 56798,
      "destination.bytes": 99,
      "destination.ip": "35.184.73.24",
      "destination.packets": 2,
      "destination.port": 5001,
      "ecs.version": "1.5.0",
      "event.action": "network_flow",
      "event.category": [
      "network",
      "network_traffic"
      ],
      "event.dataset": "socket",
      "event.duration": 3384061,
      "event.end": "2020-07-03T22:14:43.332Z",
      "event.kind": "event",
      "event.module": "system",
      "event.start": "2020-07-03T22:14:43.328Z",
      "event.type": [
      "info",
      "connection"
      ],
      "flow.complete": false,
      "flow.final": true,
      "group.id": "0",
      "group.name": "root",
      "host.name": "6f725fa897a3",
      "network.bytes": 8001,
      "network.community_id": "1:xDsVUdJSGGstQCWW3CLu771AM2M=",
      "network.direction": "unknown",
      "network.packets": 5,
      "network.transport": "tcp",
      "network.type": "ipv4",
      "process.args": [
      "/usr/local/bin/auditbeat",
      "-e",
      "-c",
      "/etc/auditbeat/auditbeat.yml"
      ],
      "process.created": "2020-07-03T22:04:12.680Z",
      "process.executable": "/opt/auditbeat-7.3.0-linux-x86_64/auditbeat",
      "process.name": "auditbeat",
      "process.pid": 2128,
      "related.ip": [
      "10.224.1.74",
      "35.184.73.24"
      ],
      "related.user": [
      "root"
      ],
      "server.bytes": 99,
      "server.ip": "35.184.73.24",
      "server.packets": 2,
      "server.port": 5001,
      "service.type": "system",
      "source.bytes": 7902,
      "source.ip": "10.224.1.74",
      "source.packets": 3,
      "source.port": 56798,
      "system.audit.socket.egid": 0,
      "system.audit.socket.euid": 0,
      "system.audit.socket.gid": 0,
      "system.audit.socket.kernel_sock_address": "0xffff925855b4c800",
      "system.audit.socket.uid": 0,
      "user.id": "0",
      "user.name": "root"
      },
      {
      "@timestamp": "2020-07-03T22:14:47.105Z",
      "agent.ephemeral_id": "a86657e0-4dda-42fd-abcb-39d26f9de155",
      "agent.hostname": "6f725fa897a3",
      "agent.id": "6408e125-972b-4fcd-9f45-fa98bcffadf3",
      "agent.name": "6f725fa897a3",
      "agent.type": "auditbeat",
      "agent.version": "7.9.0",
      "client.bytes": 1198,
      "client.ip": "127.0.0.1",
      "client.packets": 4,
      "client.port": 54848,
      "destination.bytes": 1565,
      "destination.ip": "127.0.0.1",
      "destination.packets": 3,
      "destination.port": 8778,
      "ecs.version": "1.5.0",
      "event.action": "network_flow",
      "event.category": [
      "network",
      "network_traffic"
      ],
      "event.dataset": "socket",
      "event.duration": 2460627,
      "event.end": "2020-07-03T22:14:44.182Z",
      "event.kind": "event",
      "event.module": "system",
      "event.start": "2020-07-03T22:14:44.179Z",
      "event.type": [
      "info",
      "connection"
      ],
      "flow.complete": false,
      "flow.final": true,
      "group.id": "0",
      "group.name": "root",
      "host.name": "6f725fa897a3",
      "network.bytes": 2763,
      "network.community_id": "1:c1srIl2SP6JG+3U1hQjBCQ2tPM4=",
      "network.direction": "unknown",
      "network.packets": 7,
      "network.transport": "tcp",
      "network.type": "ipv4",
      "process.args": [
      "/usr/local/bin/metricbeat",
      "-e",
      "-c",
      "/etc/metricbeat/metricbeat.yml",
      "--path.home",
      "/etc/metricbeat"
      ],
      "process.created": "2020-07-03T22:04:12.690Z",
      "process.executable": "/opt/metricbeat-7.3.2-linux-x86_64/metricbeat",
      "process.name": "metricbeat",
      "process.pid": 2131,
      "related.ip": [
      "127.0.0.1",
      "127.0.0.1"
      ],
      "related.user": [
      "root"
      ],
      "server.bytes": 1565,
      "server.ip": "127.0.0.1",
      "server.packets": 3,
      "server.port": 8778,
      "service.type": "system",
      "source.bytes": 1198,
      "source.ip": "127.0.0.1",
      "source.packets": 4,
      "source.port": 54848,
      "system.audit.socket.egid": 0,
      "system.audit.socket.euid": 0,
      "system.audit.socket.gid": 0,
      "system.audit.socket.kernel_sock_address": "0xffff9258606d3000",
      "system.audit.socket.uid": 0,
      "user.id": "0",
      "user.name": "root"
      },
      {
      "@timestamp": "2020-07-03T22:14:47.105Z",
      "agent.ephemeral_id": "a86657e0-4dda-42fd-abcb-39d26f9de155",
      "agent.hostname": "6f725fa897a3",
      "agent.id": "6408e125-972b-4fcd-9f45-fa98bcffadf3",
      "agent.name": "6f725fa897a3",
      "agent.type": "auditbeat",
      "agent.version": "7.9.0",
      "client.bytes": 1625,
      "client.ip": "127.0.0.1",
      "client.packets": 3,
      "client.port": 8778,
      "destination.bytes": 1118,
      "destination.ip": "127.0.0.1",
      "destination.packets": 4,
      "destination.port": 54848,
      "ecs.version": "1.5.0",
      "event.action": "network_flow",
      "event.category": [
      "network",
      "network_traffic"
      ],
      "event.dataset": "socket",
      "event.duration": 2391959,
      "event.end": "2020-07-03T22:14:44.182Z",
      "event.kind": "event",
      "event.module": "system",
      "event.start": "2020-07-03T22:14:44.179Z",
      "event.type": [
      "info",
      "connection"
      ],
      "flow.complete": false,
      "flow.final": true,
      "group.id": "0",
      "group.name": "root",
      "host.name": "6f725fa897a3",
      "network.bytes": 2743,
      "network.community_id": "1:c1srIl2SP6JG+3U1hQjBCQ2tPM4=",
      "network.direction": "unknown",
      "network.packets": 7,
      "network.transport": "tcp",
      "network.type": "ipv4",
      "process.args": [
      "/usr/local/bin/metricbeat",
      "-e",
      "-c",
      "/etc/metricbeat/metricbeat.yml",
      "--path.home",
      "/etc/metricbeat"
      ],
      "process.created": "2020-07-03T22:04:12.690Z",
      "process.executable": "/opt/metricbeat-7.3.2-linux-x86_64/metricbeat",
      "process.name": "metricbeat",
      "process.pid": 2131,
      "related.ip": [
      "127.0.0.1",
      "127.0.0.1"
      ],
      "related.user": [
      "root"
      ],
      "server.bytes": 1118,
      "server.ip": "127.0.0.1",
      "server.packets": 4,
      "server.port": 54848,
      "service.type": "system",
      "source.bytes": 1625,
      "source.ip": "127.0.0.1",
      "source.packets": 3,
      "source.port": 8778,
      "system.audit.socket.egid": 0,
      "system.audit.socket.euid": 0,
      "system.audit.socket.gid": 0,
      "system.audit.socket.kernel_sock_address": "0xffff92585462f700",
      "system.audit.socket.uid": 0,
      "user.id": "0",
      "user.name": "root"
      },
      {
      "@timestamp": "2020-07-03T22:14:48.105Z",
      "agent.ephemeral_id": "a86657e0-4dda-42fd-abcb-39d26f9de155",
      "agent.hostname": "6f725fa897a3",
      "agent.id": "6408e125-972b-4fcd-9f45-fa98bcffadf3",
      "agent.name": "6f725fa897a3",
      "agent.type": "auditbeat",
      "agent.version": "7.9.0",
      "client.bytes": 2256,
      "client.ip": "10.224.1.74",
      "client.packets": 2,
      "client.port": 40980,
      "destination.bytes": 627,
      "destination.ip": "54.177.169.222",
      "destination.packets": 2,
      "destination.port": 9243,
      "ecs.version": "1.5.0",
      "event.action": "network_flow",
      "event.category": [
      "network",
      "network_traffic"
      ],
      "event.dataset": "socket",
      "event.duration": 70929293,
      "event.end": "2020-07-03T22:14:45.253Z",
      "event.kind": "event",
      "event.module": "system",
      "event.start": "2020-07-03T22:14:45.183Z",
      "event.type": [
      "info",
      "connection"
      ],
      "flow.complete": false,
      "flow.final": true,
      "group.id": "0",
      "group.name": "root",
      "host.name": "6f725fa897a3",
      "network.bytes": 2883,
      "network.community_id": "1:76fBiYqMEh2jIMDrpmV+r7muTeo=",
      "network.direction": "unknown",
      "network.packets": 4,
      "network.transport": "tcp",
      "network.type": "ipv4",
      "process.args": [
      "/usr/local/bin/metricbeat",
      "-e",
      "-c",
      "/etc/metricbeat/metricbeat.yml",
      "--path.home",
      "/etc/metricbeat"
      ],
      "process.created": "2020-07-03T22:04:12.690Z",
      "process.executable": "/opt/metricbeat-7.3.2-linux-x86_64/metricbeat",
      "process.name": "metricbeat",
      "process.pid": 2131,
      "related.ip": [
      "10.224.1.74",
      "54.177.169.222"
      ],
      "related.user": [
      "root"
      ],
      "server.bytes": 627,
      "server.ip": "54.177.169.222",
      "server.packets": 2,
      "server.port": 9243,
      "service.type": "system",
      "source.bytes": 2256,
      "source.ip": "10.224.1.74",
      "source.packets": 2,
      "source.port": 40980,
      "system.audit.socket.egid": 0,
      "system.audit.socket.euid": 0,
      "system.audit.socket.gid": 0,
      "system.audit.socket.kernel_sock_address": "0xffff925855a42000",
      "system.audit.socket.uid": 0,
      "user.id": "0",
      "user.name": "root"
      },
      {
      "@timestamp": "2020-07-03T22:14:49.105Z",
      "agent.ephemeral_id": "a86657e0-4dda-42fd-abcb-39d26f9de155",
      "agent.hostname": "6f725fa897a3",
      "agent.id": "6408e125-972b-4fcd-9f45-fa98bcffadf3",
      "agent.name": "6f725fa897a3",
      "agent.type": "auditbeat",
      "agent.version": "7.9.0",
      "client.bytes": 2199,
      "client.ip": "10.224.1.74",
      "client.packets": 2,
      "client.port": 56798,
      "destination.bytes": 99,
      "destination.ip": "35.184.73.24",
      "destination.packets": 2,
      "destination.port": 5001,
      "ecs.version": "1.5.0",
      "event.action": "network_flow",
      "event.category": [
      "network",
      "network_traffic"
      ],
      "event.dataset": "socket",
      "event.duration": 1912893,
      "event.end": "2020-07-03T22:14:46.331Z",
      "event.kind": "event",
      "event.module": "system",
      "event.start": "2020-07-03T22:14:46.330Z",
      "event.type": [
      "info",
      "connection"
      ],
      "flow.complete": false,
      "flow.final": true,
      "group.id": "0",
      "group.name": "root",
      "host.name": "6f725fa897a3",
      "network.bytes": 2298,
      "network.community_id": "1:xDsVUdJSGGstQCWW3CLu771AM2M=",
      "network.direction": "unknown",
      "network.packets": 4,
      "network.transport": "tcp",
      "network.type": "ipv4",
      "process.args": [
      "/usr/local/bin/auditbeat",
      "-e",
      "-c",
      "/etc/auditbeat/auditbeat.yml"
      ],
      "process.created": "2020-07-03T22:04:12.680Z",
      "process.executable": "/opt/auditbeat-7.3.0-linux-x86_64/auditbeat",
      "process.name": "auditbeat",
      "process.pid": 2128,
      "related.ip": [
      "10.224.1.74",
      "35.184.73.24"
      ],
      "related.user": [
      "root"
      ],
      "server.bytes": 99,
      "server.ip": "35.184.73.24",
      "server.packets": 2,
      "server.port": 5001,
      "service.type": "system",
      "source.bytes": 2199,
      "source.ip": "10.224.1.74",
      "source.packets": 2,
      "source.port": 56798,
      "system.audit.socket.egid": 0,
      "system.audit.socket.euid": 0,
      "system.audit.socket.gid": 0,
      "system.audit.socket.kernel_sock_address": "0xffff925855b4c800",
      "system.audit.socket.uid": 0,
      "user.id": "0",
      "user.name": "root"
      },
      {
      "@timestamp": "2020-07-03T22:14:51.106Z",
      "agent.ephemeral_id": "a86657e0-4dda-42fd-abcb-39d26f9de155",
      "agent.hostname": "6f725fa897a3",
      "agent.id": "6408e125-972b-4fcd-9f45-fa98bcffadf3",
      "agent.name": "6f725fa897a3",
      "agent.type": "auditbeat",
      "agent.version": "7.9.0",
      "client.bytes": 55108,
      "client.ip": "10.224.1.74",
      "client.packets": 83,
      "client.port": 47532,
      "destination.bytes": 93048,
      "destination.ip": "10.224.0.26",
      "destination.packets": 57,
      "destination.port": 49187,
      "ecs.version": "1.5.0",
      "event.action": "network_flow",
      "event.category": [
      "network",
      "network_traffic"
      ],
      "event.dataset": "socket",
      "event.duration": 8780518287,
      "event.end": "2020-07-03T22:14:48.901Z",
      "event.kind": "event",
      "event.module": "system",
      "event.start": "2020-07-03T22:14:40.120Z",
      "event.type": [
      "info",
      "connection"
      ],
      "flow.complete": false,
      "flow.final": true,
      "group.id": "1156",
      "host.name": "6f725fa897a3",
      "network.bytes": 148156,
      "network.community_id": "1:mP45JQYeef+rzRmDrH21rKQUFas=",
      "network.direction": "unknown",
      "network.packets": 140,
      "network.transport": "tcp",
      "network.type": "ipv4",
      "process.args": [
      "java",
      "-Djava.util.logging.config.file=/var/lib/jenkins/logging.properties",
      "-javaagent:/opt/jolokia/jolokia-agent.jar=config=/opt/jolokia/jolokia.properties",
      "-Dorg.jenkinsci.plugins.gitclient.Git.timeOut=10",
      "-jar",
      "/usr/local/share/jenkins/swarm-client-3.17.jar",
      "-description",
      "Ubuntu 16.04 - 2 CPU Cores / 3539 MB Memory",
      "-disableClientsUniqueId",
      "-executors",
      "1",
      "-fsroot",
      "/var/lib/jenkins",
      "-master",
      "https://beats-ci.elastic.co/",
      "-maxRetryInterval",
      "160",
      "-retryBackOffStrategy",
      "linear",
      "-mode",
      "exclusive",
      "-name",
      "beats-ci-immutable-ubuntu-1604-1593813819177048166",
      "-username",
      "local-admin",
      "-passwordFile",
      "/var/lib/jenkins/.jenkins_password",
      "-name",
      "beats-ci-immutable-ubuntu-1604-1593813819177048166",
      "-master",
      "https://beats-ci.elastic.co",
      "-username",
      "local-admin",
      "-labels",
      "docker",
      "-labels",
      "immutable",
      "-labels",
      "linux",
      "-labels",
      "linux-immutable",
      "-labels",
      "swarm",
      "-labels",
      "ubuntu",
      "-labels",
      "ubuntu-16.04",
      "-labels",
      "ubuntu-16",
      "-labels",
      "virtual",
      "-labels",
      "x86_64",
      "-description",
      "MachineType:n1-highmem-4,DiskSize:150"
      ],
      "process.created": "2020-07-03T22:04:12.690Z",
      "process.executable": "/usr/lib/jvm/java-8-openjdk-amd64/jre/bin/java",
      "process.name": "java",
      "process.pid": 2133,
      "related.ip": [
      "10.224.1.74",
      "10.224.0.26"
      ],
      "server.bytes": 93048,
      "server.ip": "10.224.0.26",
      "server.packets": 57,
      "server.port": 49187,
      "service.type": "system",
      "source.bytes": 55108,
      "source.ip": "10.224.1.74",
      "source.packets": 83,
      "source.port": 47532,
      "system.audit.socket.egid": 1156,
      "system.audit.socket.euid": 1155,
      "system.audit.socket.gid": 1156,
      "system.audit.socket.kernel_sock_address": "0xffff92583fb2cc80",
      "system.audit.socket.uid": 1155,
      "user.id": "1155"
      },
      {
      "@timestamp": "2020-07-03T22:14:52.105Z",
      "agent.ephemeral_id": "a86657e0-4dda-42fd-abcb-39d26f9de155",
      "agent.hostname": "6f725fa897a3",
      "agent.id": "6408e125-972b-4fcd-9f45-fa98bcffadf3",
      "agent.name": "6f725fa897a3",
      "agent.type": "auditbeat",
      "agent.version": "7.9.0",
      "client.bytes": 80,
      "client.ip": "10.224.1.74",
      "client.packets": 2,
      "client.port": 54942,
      "destination.bytes": 644,
      "destination.ip": "169.254.169.254",
      "destination.packets": 3,
      "destination.port": 80,
      "ecs.version": "1.5.0",
      "event.action": "network_flow",
      "event.category": [
      "network",
      "network_traffic"
      ],
      "event.dataset": "socket",
      "event.duration": 1015061,
      "event.end": "2020-07-03T22:14:49.281Z",
      "event.kind": "event",
      "event.module": "system",
      "event.start": "2020-07-03T22:14:49.280Z",
      "event.type": [
      "info",
      "connection"
      ],
      "flow.complete": false,
      "flow.final": true,
      "group.id": "0",
      "group.name": "root",
      "host.name": "6f725fa897a3",
      "network.bytes": 724,
      "network.community_id": "1:wCdmq4G8yZ5ta5EqJpTNJ/BVIgI=",
      "network.direction": "unknown",
      "network.packets": 5,
      "network.transport": "tcp",
      "network.type": "ipv4",
      "process.args": [
      "/usr/bin/python3",
      "/usr/bin/google_network_daemon"
      ],
      "process.created": "2020-07-03T22:04:11.240Z",
      "process.executable": "/usr/bin/python3.5",
      "process.name": "google_network_",
      "process.pid": 1797,
      "related.ip": [
      "10.224.1.74",
      "169.254.169.254"
      ],
      "related.user": [
      "root"
      ],
      "server.bytes": 644,
      "server.ip": "169.254.169.254",
      "server.packets": 3,
      "server.port": 80,
      "service.type": "system",
      "source.bytes": 80,
      "source.ip": "10.224.1.74",
      "source.packets": 2,
      "source.port": 54942,
      "system.audit.socket.egid": 0,
      "system.audit.socket.euid": 0,
      "system.audit.socket.gid": 0,
      "system.audit.socket.kernel_sock_address": "0xffff925855b4c000",
      "system.audit.socket.uid": 0,
      "user.id": "0",
      "user.name": "root"
      },
      {
      "@timestamp": "2020-07-03T22:14:52.105Z",
      "agent.ephemeral_id": "a86657e0-4dda-42fd-abcb-39d26f9de155",
      "agent.hostname": "6f725fa897a3",
      "agent.id": "6408e125-972b-4fcd-9f45-fa98bcffadf3",
      "agent.name": "6f725fa897a3",
      "agent.type": "auditbeat",
      "agent.version": "7.9.0",
      "client.bytes": 426,
      "client.ip": "10.224.1.74",
      "client.packets": 3,
      "client.port": 54954,
      "destination.bytes": 68,
      "destination.ip": "169.254.169.254",
      "destination.packets": 3,
      "destination.port": 80,
      "ecs.version": "1.5.0",
      "event.action": "network_flow",
      "event.category": [
      "network",
      "network_traffic"
      ],
      "event.dataset": "socket",
      "event.duration": 632968,
      "event.end": "2020-07-03T22:14:49.287Z",
      "event.kind": "event",
      "event.module": "system",
      "event.start": "2020-07-03T22:14:49.287Z",
      "event.type": [
      "info",
      "connection"
      ],
      "flow.complete": true,
      "flow.final": true,
      "group.id": "0",
      "group.name": "root",
      "host.name": "6f725fa897a3",
      "network.bytes": 494,
      "network.community_id": "1:H5Mqe9hHSnO04cPuMs+V9bfdQB4=",
      "network.direction": "outbound",
      "network.packets": 6,
      "network.transport": "tcp",
      "network.type": "ipv4",
      "process.args": [
      "/usr/bin/python3",
      "/usr/bin/google_network_daemon"
      ],
      "process.created": "2020-07-03T22:04:11.240Z",
      "process.executable": "/usr/bin/python3.5",
      "process.name": "google_network_",
      "process.pid": 1797,
      "related.ip": [
      "10.224.1.74",
      "169.254.169.254"
      ],
      "related.user": [
      "root"
      ],
      "server.bytes": 68,
      "server.ip": "169.254.169.254",
      "server.packets": 3,
      "server.port": 80,
      "service.type": "system",
      "source.bytes": 426,
      "source.ip": "10.224.1.74",
      "source.packets": 3,
      "source.port": 54954,
      "system.audit.socket.egid": 0,
      "system.audit.socket.euid": 0,
      "system.audit.socket.gid": 0,
      "system.audit.socket.kernel_sock_address": "0xffff925855a41800",
      "system.audit.socket.uid": 0,
      "user.id": "0",
      "user.name": "root"
      },
      {
      "@timestamp": "2020-07-03T22:14:53.105Z",
      "agent.ephemeral_id": "a86657e0-4dda-42fd-abcb-39d26f9de155",
      "agent.hostname": "6f725fa897a3",
      "agent.id": "6408e125-972b-4fcd-9f45-fa98bcffadf3",
      "agent.name": "6f725fa897a3",
      "agent.type": "auditbeat",
      "agent.version": "7.9.0",
      "client.bytes": 132,
      "client.ip": "127.90.174.85",
      "client.packets": 3,
      "client.port": 33031,
      "destination.bytes": 234,
      "destination.ip": "127.3.167.36",
      "destination.packets": 4,
      "destination.port": 60657,
      "ecs.version": "1.5.0",
      "event.action": "network_flow",
      "event.category": [
      "network",
      "network_traffic"
      ],
      "event.dataset": "socket",
      "event.duration": 446776,
      "event.end": "2020-07-03T22:14:50.157Z",
      "event.kind": "event",
      "event.module": "system",
      "event.start": "2020-07-03T22:14:50.156Z",
      "event.type": [
      "info",
      "connection"
      ],
      "flow.complete": true,
      "flow.final": true,
      "group.id": "0",
      "group.name": "root",
      "host.name": "6f725fa897a3",
      "network.bytes": 366,
      "network.community_id": "1:vm1MGQK38fBLRBw0HTWUFcPZT/U=",
      "network.direction": "inbound",
      "network.packets": 7,
      "network.transport": "tcp",
      "network.type": "ipv4",
      "process.args": [
      "/usr/bin/python3",
      "/usr/bin/google_network_daemon"
      ],
      "process.created": "2020-07-03T22:04:11.240Z",
      "process.executable": "/usr/bin/python3.5",
      "process.name": "google_network_",
      "process.pid": 48024,
      "related.ip": [
      "127.3.167.36",
      "127.90.174.85"
      ],
      "related.user": [
      "root"
      ],
      "server.bytes": 234,
      "server.ip": "127.3.167.36",
      "server.packets": 4,
      "server.port": 60657,
      "service.type": "system",
      "source.bytes": 132,
      "source.ip": "127.90.174.85",
      "source.packets": 3,
      "source.port": 33031,
      "system.audit.socket.egid": 0,
      "system.audit.socket.euid": 0,
      "system.audit.socket.gid": 0,
      "system.audit.socket.kernel_sock_address": "0xffff925855b4c000",
      "system.audit.socket.uid": 0,
      "user.id": "0",
      "user.name": "root"
      },
      {
      "@timestamp": "2020-07-03T22:14:53.105Z",
      "agent.ephemeral_id": "a86657e0-4dda-42fd-abcb-39d26f9de155",
      "agent.hostname": "6f725fa897a3",
      "agent.id": "6408e125-972b-4fcd-9f45-fa98bcffadf3",
      "agent.name": "6f725fa897a3",
      "agent.type": "auditbeat",
      "agent.version": "7.9.0",
      "client.bytes": 304,
      "client.ip": "127.90.174.85",
      "client.packets": 5,
      "client.port": 33031,
      "destination.bytes": 194,
      "destination.domain": "elastic.co",
      "destination.ip": "127.3.167.36",
      "destination.packets": 5,
      "destination.port": 60657,
      "ecs.version": "1.5.0",
      "event.action": "network_flow",
      "event.category": [
      "network",
      "network_traffic"
      ],
      "event.dataset": "socket",
      "event.duration": 623411,
      "event.end": "2020-07-03T22:14:50.157Z",
      "event.kind": "event",
      "event.module": "system",
      "event.start": "2020-07-03T22:14:50.156Z",
      "event.type": [
      "info",
      "connection"
      ],
      "flow.complete": true,
      "flow.final": true,
      "group.id": "0",
      "group.name": "root",
      "host.name": "6f725fa897a3",
      "network.bytes": 498,
      "network.community_id": "1:vm1MGQK38fBLRBw0HTWUFcPZT/U=",
      "network.direction": "outbound",
      "network.packets": 10,
      "network.transport": "tcp",
      "network.type": "ipv4",
      "process.args": [
      "/tmp/python-env/build/ve/docker/bin/python3",
      "/tmp/python-env/build/ve/docker/bin/nosetests",
      "--process-timeout=90",
      "--with-timer",
      "--with-xunit",
      "--xunit-file=build/TEST-python-integration.xml",
      "tests/system/test_metricsets.py",
      "tests/system/test_system_socket.py"
      ],
      "process.created": "2020-07-03T22:14:05.400Z",
      "process.executable": "/usr/bin/python3.7",
      "process.name": "nosetests",
      "process.pid": 48024,
      "related.ip": [
      "127.90.174.85",
      "127.3.167.36"
      ],
      "related.user": [
      "root"
      ],
      "server.bytes": 194,
      "server.domain": "elastic.co",
      "server.ip": "127.3.167.36",
      "server.packets": 5,
      "server.port": 60657,
      "service.type": "system",
      "source.bytes": 304,
      "source.ip": "127.90.174.85",
      "source.packets": 5,
      "source.port": 33031,
      "system.audit.socket.egid": 0,
      "system.audit.socket.euid": 0,
      "system.audit.socket.gid": 0,
      "system.audit.socket.kernel_sock_address": "0xffff925855b48800",
      "system.audit.socket.uid": 0,
      "user.id": "0",
      "user.name": "root"
      },
      {
      "@timestamp": "2020-07-03T22:14:53.105Z",
      "agent.ephemeral_id": "a86657e0-4dda-42fd-abcb-39d26f9de155",
      "agent.hostname": "6f725fa897a3",
      "agent.id": "6408e125-972b-4fcd-9f45-fa98bcffadf3",
      "agent.name": "6f725fa897a3",
      "agent.type": "auditbeat",
      "agent.version": "7.9.0",
      "client.bytes": 104,
      "client.ip": "10.224.1.74",
      "client.packets": 2,
      "client.port": 58184,
      "destination.bytes": 64,
      "destination.ip": "13.56.41.133",
      "destination.packets": 2,
      "destination.port": 9243,
      "ecs.version": "1.5.0",
      "event.action": "network_flow",
      "event.category": [
      "network",
      "network_traffic"
      ],
      "event.dataset": "socket",
      "event.duration": 158905654,
      "event.end": "2020-07-03T22:14:50.809Z",
      "event.kind": "event",
      "event.module": "system",
      "event.start": "2020-07-03T22:14:50.650Z",
      "event.type": [
      "info",
      "connection"
      ],
      "flow.complete": false,
      "flow.final": true,
      "host.name": "6f725fa897a3",
      "network.bytes": 168,
      "network.community_id": "1:3w8IOccQoI+bfnEspoL8MHxNJ3k=",
      "network.direction": "unknown",
      "network.packets": 4,
      "network.transport": "tcp",
      "network.type": "ipv4",
      "related.ip": [
      "10.224.1.74",
      "13.56.41.133"
      ],
      "server.bytes": 64,
      "server.ip": "13.56.41.133",
      "server.packets": 2,
      "server.port": 9243,
      "service.type": "system",
      "source.bytes": 104,
      "source.ip": "10.224.1.74",
      "source.packets": 2,
      "source.port": 58184,
      "system.audit.socket.kernel_sock_address": "0xffff925855a46000"
      },
      {
      "@timestamp": "2020-07-03T22:14:54.105Z",
      "agent.ephemeral_id": "a86657e0-4dda-42fd-abcb-39d26f9de155",
      "agent.hostname": "6f725fa897a3",
      "agent.id": "6408e125-972b-4fcd-9f45-fa98bcffadf3",
      "agent.name": "6f725fa897a3",
      "agent.type": "auditbeat",
      "agent.version": "7.9.0",
      "client.bytes": 7880,
      "client.ip": "10.224.1.74",
      "client.packets": 12,
      "client.port": 47532,
      "destination.bytes": 13288,
      "destination.ip": "10.224.0.26",
      "destination.packets": 8,
      "destination.port": 49187,
      "ecs.version": "1.5.0",
      "event.action": "network_flow",
      "event.category": [
      "network",
      "network_traffic"
      ],
      "event.dataset": "socket",
      "event.duration": 15170413,
      "event.end": "2020-07-03T22:14:51.582Z",
      "event.kind": "event",
      "event.module": "system",
      "event.start": "2020-07-03T22:14:51.567Z",
      "event.type": [
      "info",
      "connection"
      ],
      "flow.complete": false,
      "flow.final": true,
      "group.id": "1156",
      "host.name": "6f725fa897a3",
      "network.bytes": 21168,
      "network.community_id": "1:mP45JQYeef+rzRmDrH21rKQUFas=",
      "network.direction": "unknown",
      "network.packets": 20,
      "network.transport": "tcp",
      "network.type": "ipv4",
      "process.args": [
      "java",
      "-Djava.util.logging.config.file=/var/lib/jenkins/logging.properties",
      "-javaagent:/opt/jolokia/jolokia-agent.jar=config=/opt/jolokia/jolokia.properties",
      "-Dorg.jenkinsci.plugins.gitclient.Git.timeOut=10",
      "-jar",
      "/usr/local/share/jenkins/swarm-client-3.17.jar",
      "-description",
      "Ubuntu 16.04 - 2 CPU Cores / 3539 MB Memory",
      "-disableClientsUniqueId",
      "-executors",
      "1",
      "-fsroot",
      "/var/lib/jenkins",
      "-master",
      "https://beats-ci.elastic.co/",
      "-maxRetryInterval",
      "160",
      "-retryBackOffStrategy",
      "linear",
      "-mode",
      "exclusive",
      "-name",
      "beats-ci-immutable-ubuntu-1604-1593813819177048166",
      "-username",
      "local-admin",
      "-passwordFile",
      "/var/lib/jenkins/.jenkins_password",
      "-name",
      "beats-ci-immutable-ubuntu-1604-1593813819177048166",
      "-master",
      "https://beats-ci.elastic.co",
      "-username",
      "local-admin",
      "-labels",
      "docker",
      "-labels",
      "immutable",
      "-labels",
      "linux",
      "-labels",
      "linux-immutable",
      "-labels",
      "swarm",
      "-labels",
      "ubuntu",
      "-labels",
      "ubuntu-16.04",
      "-labels",
      "ubuntu-16",
      "-labels",
      "virtual",
      "-labels",
      "x86_64",
      "-description",
      "MachineType:n1-highmem-4,DiskSize:150"
      ],
      "process.created": "2020-07-03T22:04:12.690Z",
      "process.executable": "/usr/lib/jvm/java-8-openjdk-amd64/jre/bin/java",
      "process.name": "java",
      "process.pid": 2133,
      "related.ip": [
      "10.224.1.74",
      "10.224.0.26"
      ],
      "server.bytes": 13288,
      "server.ip": "10.224.0.26",
      "server.packets": 8,
      "server.port": 49187,
      "service.type": "system",
      "source.bytes": 7880,
      "source.ip": "10.224.1.74",
      "source.packets": 12,
      "source.port": 47532,
      "system.audit.socket.egid": 1156,
      "system.audit.socket.euid": 1155,
      "system.audit.socket.gid": 1156,
      "system.audit.socket.kernel_sock_address": "0xffff92583fb2cc80",
      "system.audit.socket.uid": 1155,
      "user.id": "1155"
      },
      {
      "@timestamp": "2020-07-03T22:14:55.105Z",
      "agent.ephemeral_id": "a86657e0-4dda-42fd-abcb-39d26f9de155",
      "agent.hostname": "6f725fa897a3",
      "agent.id": "6408e125-972b-4fcd-9f45-fa98bcffadf3",
      "agent.name": "6f725fa897a3",
      "agent.type": "auditbeat",
      "agent.version": "7.9.0",
      "client.bytes": 7645,
      "client.ip": "10.224.1.74",
      "client.packets": 6,
      "client.port": 56798,
      "destination.bytes": 297,
      "destination.ip": "35.184.73.24",
      "destination.packets": 6,
      "destination.port": 5001,
      "ecs.version": "1.5.0",
      "event.action": "network_flow",
      "event.category": [
      "network",
      "network_traffic"
      ],
      "event.dataset": "socket",
      "event.duration": 3006116405,
      "event.end": "2020-07-03T22:14:52.338Z",
      "event.kind": "event",
      "event.module": "system",
      "event.start": "2020-07-03T22:14:49.332Z",
      "event.type": [
      "info",
      "connection"
      ],
      "flow.complete": false,
      "flow.final": true,
      "group.id": "0",
      "group.name": "root",
      "host.name": "6f725fa897a3",
      "network.bytes": 7942,
      "network.community_id": "1:xDsVUdJSGGstQCWW3CLu771AM2M=",
      "network.direction": "unknown",
      "network.packets": 12,
      "network.transport": "tcp",
      "network.type": "ipv4",
      "process.args": [
      "/usr/local/bin/auditbeat",
      "-e",
      "-c",
      "/etc/auditbeat/auditbeat.yml"
      ],
      "process.created": "2020-07-03T22:04:12.680Z",
      "process.executable": "/opt/auditbeat-7.3.0-linux-x86_64/auditbeat",
      "process.name": "auditbeat",
      "process.pid": 2128,
      "related.ip": [
      "10.224.1.74",
      "35.184.73.24"
      ],
      "related.user": [
      "root"
      ],
      "server.bytes": 297,
      "server.ip": "35.184.73.24",
      "server.packets": 6,
      "server.port": 5001,
      "service.type": "system",
      "source.bytes": 7645,
      "source.ip": "10.224.1.74",
      "source.packets": 6,
      "source.port": 56798,
      "system.audit.socket.egid": 0,
      "system.audit.socket.euid": 0,
      "system.audit.socket.gid": 0,
      "system.audit.socket.kernel_sock_address": "0xffff925855b4c800",
      "system.audit.socket.uid": 0,
      "user.id": "0",
      "user.name": "root"
      },
      {
      "@timestamp": "2020-07-03T22:14:57.105Z",
      "agent.ephemeral_id": "a86657e0-4dda-42fd-abcb-39d26f9de155",
      "agent.hostname": "6f725fa897a3",
      "agent.id": "6408e125-972b-4fcd-9f45-fa98bcffadf3",
      "agent.name": "6f725fa897a3",
      "agent.type": "auditbeat",
      "agent.version": "7.9.0",
      "client.bytes": 1198,
      "client.ip": "127.0.0.1",
      "client.packets": 4,
      "client.port": 54848,
      "destination.bytes": 1567,
      "destination.ip": "127.0.0.1",
      "destination.packets": 3,
      "destination.port": 8778,
      "ecs.version": "1.5.0",
      "event.action": "network_flow",
      "event.category": [
      "network",
      "network_traffic"
      ],
      "event.dataset": "socket",
      "event.duration": 3132386,
      "event.end": "2020-07-03T22:14:54.181Z",
      "event.kind": "event",
      "event.module": "system",
      "event.start": "2020-07-03T22:14:54.178Z",
      "event.type": [
      "info",
      "connection"
      ],
      "flow.complete": false,
      "flow.final": true,
      "group.id": "0",
      "group.name": "root",
      "host.name": "6f725fa897a3",
      "network.bytes": 2765,
      "network.community_id": "1:c1srIl2SP6JG+3U1hQjBCQ2tPM4=",
      "network.direction": "unknown",
      "network.packets": 7,
      "network.transport": "tcp",
      "network.type": "ipv4",
      "process.args": [
      "/usr/local/bin/metricbeat",
      "-e",
      "-c",
      "/etc/metricbeat/metricbeat.yml",
      "--path.home",
      "/etc/metricbeat"
      ],
      "process.created": "2020-07-03T22:04:12.690Z",
      "process.executable": "/opt/metricbeat-7.3.2-linux-x86_64/metricbeat",
      "process.name": "metricbeat",
      "process.pid": 2131,
      "related.ip": [
      "127.0.0.1",
      "127.0.0.1"
      ],
      "related.user": [
      "root"
      ],
      "server.bytes": 1567,
      "server.ip": "127.0.0.1",
      "server.packets": 3,
      "server.port": 8778,
      "service.type": "system",
      "source.bytes": 1198,
      "source.ip": "127.0.0.1",
      "source.packets": 4,
      "source.port": 54848,
      "system.audit.socket.egid": 0,
      "system.audit.socket.euid": 0,
      "system.audit.socket.gid": 0,
      "system.audit.socket.kernel_sock_address": "0xffff9258606d3000",
      "system.audit.socket.uid": 0,
      "user.id": "0",
      "user.name": "root"
      },
      {
      "@timestamp": "2020-07-03T22:14:57.105Z",
      "agent.ephemeral_id": "a86657e0-4dda-42fd-abcb-39d26f9de155",
      "agent.hostname": "6f725fa897a3",
      "agent.id": "6408e125-972b-4fcd-9f45-fa98bcffadf3",
      "agent.name": "6f725fa897a3",
      "agent.type": "auditbeat",
      "agent.version": "7.9.0",
      "client.bytes": 1627,
      "client.ip": "127.0.0.1",
      "client.packets": 3,
      "client.port": 8778,
      "destination.bytes": 1118,
      "destination.ip": "127.0.0.1",
      "destination.packets": 4,
      "destination.port": 54848,
      "ecs.version": "1.5.0",
      "event.action": "network_flow",
      "event.category": [
      "network",
      "network_traffic"
      ],
      "event.dataset": "socket",
      "event.duration": 3066182,
      "event.end": "2020-07-03T22:14:54.182Z",
      "event.kind": "event",
      "event.module": "system",
      "event.start": "2020-07-03T22:14:54.178Z",
      "event.type": [
      "info",
      "connection"
      ],
      "flow.complete": false,
      "flow.final": true,
      "group.id": "0",
      "group.name": "root",
      "host.name": "6f725fa897a3",
      "network.bytes": 2745,
      "network.community_id": "1:c1srIl2SP6JG+3U1hQjBCQ2tPM4=",
      "network.direction": "unknown",
      "network.packets": 7,
      "network.transport": "tcp",
      "network.type": "ipv4",
      "process.args": [
      "/usr/local/bin/metricbeat",
      "-e",
      "-c",
      "/etc/metricbeat/metricbeat.yml",
      "--path.home",
      "/etc/metricbeat"
      ],
      "process.created": "2020-07-03T22:04:12.690Z",
      "process.executable": "/opt/metricbeat-7.3.2-linux-x86_64/metricbeat",
      "process.name": "metricbeat",
      "process.pid": 2131,
      "related.ip": [
      "127.0.0.1",
      "127.0.0.1"
      ],
      "related.user": [
      "root"
      ],
      "server.bytes": 1118,
      "server.ip": "127.0.0.1",
      "server.packets": 4,
      "server.port": 54848,
      "service.type": "system",
      "source.bytes": 1627,
      "source.ip": "127.0.0.1",
      "source.packets": 3,
      "source.port": 8778,
      "system.audit.socket.egid": 0,
      "system.audit.socket.euid": 0,
      "system.audit.socket.gid": 0,
      "system.audit.socket.kernel_sock_address": "0xffff92585462f700",
      "system.audit.socket.uid": 0,
      "user.id": "0",
      "user.name": "root"
      },
      {
      "@timestamp": "2020-07-03T22:14:57.105Z",
      "agent.ephemeral_id": "a86657e0-4dda-42fd-abcb-39d26f9de155",
      "agent.hostname": "6f725fa897a3",
      "agent.id": "6408e125-972b-4fcd-9f45-fa98bcffadf3",
      "agent.name": "6f725fa897a3",
      "agent.type": "auditbeat",
      "agent.version": "7.9.0",
      "client.bytes": 70,
      "client.ip": "10.224.1.74",
      "client.packets": 1,
      "client.port": 59478,
      "destination.bytes": 163,
      "destination.ip": "169.254.169.254",
      "destination.packets": 1,
      "destination.port": 53,
      "ecs.version": "1.5.0",
      "event.action": "network_flow",
      "event.category": [
      "network",
      "network_traffic"
      ],
      "event.dataset": "socket",
      "event.duration": 8999520,
      "event.end": "2020-07-03T22:14:54.380Z",
      "event.kind": "event",
      "event.module": "system",
      "event.start": "2020-07-03T22:14:54.371Z",
      "event.type": [
      "info",
      "connection"
      ],
      "flow.complete": false,
      "flow.final": true,
      "group.id": "0",
      "group.name": "root",
      "host.name": "6f725fa897a3",
      "network.bytes": 233,
      "network.community_id": "1:4YkwgiQcmuochY3f6EV1JCS/OQM=",
      "network.direction": "outbound",
      "network.packets": 2,
      "network.transport": "udp",
      "network.type": "ipv4",
      "process.args": [
      "/usr/local/bin/auditbeat-secops",
      "-e",
      "-c",
      "/etc/auditbeat-secops/auditbeat.yml"
      ],
      "process.created": "2020-07-03T22:04:12.680Z",
      "process.executable": "/opt/auditbeat-7.2.0-linux-x86_64/auditbeat",
      "process.name": "auditbeat-secop",
      "process.pid": 2127,
      "related.ip": [
      "10.224.1.74",
      "169.254.169.254"
      ],
      "related.user": [
      "root"
      ],
      "server.bytes": 163,
      "server.ip": "169.254.169.254",
      "server.packets": 1,
      "server.port": 53,
      "service.type": "system",
      "source.bytes": 70,
      "source.ip": "10.224.1.74",
      "source.packets": 1,
      "source.port": 59478,
      "system.audit.socket.egid": 0,
      "system.audit.socket.euid": 0,
      "system.audit.socket.gid": 0,
      "system.audit.socket.kernel_sock_address": "0xffff9257ebca6800",
      "system.audit.socket.uid": 0,
      "user.id": "0",
      "user.name": "root"
      },
      {
      "@timestamp": "2020-07-03T22:14:57.106Z",
      "agent.ephemeral_id": "a86657e0-4dda-42fd-abcb-39d26f9de155",
      "agent.hostname": "6f725fa897a3",
      "agent.id": "6408e125-972b-4fcd-9f45-fa98bcffadf3",
      "agent.name": "6f725fa897a3",
      "agent.type": "auditbeat",
      "agent.version": "7.9.0",
      "client.bytes": 70,
      "client.ip": "10.224.1.74",
      "client.packets": 1,
      "client.port": 36169,
      "destination.bytes": 94,
      "destination.ip": "169.254.169.254",
      "destination.packets": 1,
      "destination.port": 53,
      "ecs.version": "1.5.0",
      "event.action": "network_flow",
      "event.category": [
      "network",
      "network_traffic"
      ],
      "event.dataset": "socket",
      "event.duration": 20606805,
      "event.end": "2020-07-03T22:14:54.392Z",
      "event.kind": "event",
      "event.module": "system",
      "event.start": "2020-07-03T22:14:54.371Z",
      "event.type": [
      "info",
      "connection"
      ],
      "flow.complete": false,
      "flow.final": true,
      "group.id": "0",
      "group.name": "root",
      "host.name": "6f725fa897a3",
      "network.bytes": 164,
      "network.community_id": "1:KJijniEfvJmV/PXz/GB86bqLg6U=",
      "network.direction": "outbound",
      "network.packets": 2,
      "network.transport": "udp",
      "network.type": "ipv4",
      "process.args": [
      "/usr/local/bin/auditbeat-secops",
      "-e",
      "-c",
      "/etc/auditbeat-secops/auditbeat.yml"
      ],
      "process.created": "2020-07-03T22:04:12.680Z",
      "process.executable": "/opt/auditbeat-7.2.0-linux-x86_64/auditbeat",
      "process.name": "auditbeat-secop",
      "process.pid": 2127,
      "related.ip": [
      "10.224.1.74",
      "169.254.169.254"
      ],
      "related.user": [
      "root"
      ],
      "server.bytes": 94,
      "server.ip": "169.254.169.254",
      "server.packets": 1,
      "server.port": 53,
      "service.type": "system",
      "source.bytes": 70,
      "source.ip": "10.224.1.74",
      "source.packets": 1,
      "source.port": 36169,
      "system.audit.socket.egid": 0,
      "system.audit.socket.euid": 0,
      "system.audit.socket.gid": 0,
      "system.audit.socket.kernel_sock_address": "0xffff9256b6cd8800",
      "system.audit.socket.uid": 0,
      "user.id": "0",
      "user.name": "root"
      },
      {
      "@timestamp": "2020-07-03T22:14:57.106Z",
      "agent.ephemeral_id": "a86657e0-4dda-42fd-abcb-39d26f9de155",
      "agent.hostname": "6f725fa897a3",
      "agent.id": "6408e125-972b-4fcd-9f45-fa98bcffadf3",
      "agent.name": "6f725fa897a3",
      "agent.type": "auditbeat",
      "agent.version": "7.9.0",
      "client.bytes": 7828,
      "client.ip": "10.224.1.74",
      "client.packets": 11,
      "client.port": 47532,
      "destination.bytes": 13288,
      "destination.ip": "10.224.0.26",
      "destination.packets": 8,
      "destination.port": 49187,
      "ecs.version": "1.5.0",
      "event.action": "network_flow",
      "event.category": [
      "network",
      "network_traffic"
      ],
      "event.dataset": "socket",
      "event.duration": 9495267,
      "event.end": "2020-07-03T22:14:54.790Z",
      "event.kind": "event",
      "event.module": "system",
      "event.start": "2020-07-03T22:14:54.781Z",
      "event.type": [
      "info",
      "connection"
      ],
      "flow.complete": false,
      "flow.final": true,
      "group.id": "1156",
      "host.name": "6f725fa897a3",
      "network.bytes": 21116,
      "network.community_id": "1:mP45JQYeef+rzRmDrH21rKQUFas=",
      "network.direction": "unknown",
      "network.packets": 19,
      "network.transport": "tcp",
      "network.type": "ipv4",
      "process.args": [
      "java",
      "-Djava.util.logging.config.file=/var/lib/jenkins/logging.properties",
      "-javaagent:/opt/jolokia/jolokia-agent.jar=config=/opt/jolokia/jolokia.properties",
      "-Dorg.jenkinsci.plugins.gitclient.Git.timeOut=10",
      "-jar",
      "/usr/local/share/jenkins/swarm-client-3.17.jar",
      "-description",
      "Ubuntu 16.04 - 2 CPU Cores / 3539 MB Memory",
      "-disableClientsUniqueId",
      "-executors",
      "1",
      "-fsroot",
      "/var/lib/jenkins",
      "-master",
      "https://beats-ci.elastic.co/",
      "-maxRetryInterval",
      "160",
      "-retryBackOffStrategy",
      "linear",
      "-mode",
      "exclusive",
      "-name",
      "beats-ci-immutable-ubuntu-1604-1593813819177048166",
      "-username",
      "local-admin",
      "-passwordFile",
      "/var/lib/jenkins/.jenkins_password",
      "-name",
      "beats-ci-immutable-ubuntu-1604-1593813819177048166",
      "-master",
      "https://beats-ci.elastic.co",
      "-username",
      "local-admin",
      "-labels",
      "docker",
      "-labels",
      "immutable",
      "-labels",
      "linux",
      "-labels",
      "linux-immutable",
      "-labels",
      "swarm",
      "-labels",
      "ubuntu",
      "-labels",
      "ubuntu-16.04",
      "-labels",
      "ubuntu-16",
      "-labels",
      "virtual",
      "-labels",
      "x86_64",
      "-description",
      "MachineType:n1-highmem-4,DiskSize:150"
      ],
      "process.created": "2020-07-03T22:04:12.690Z",
      "process.executable": "/usr/lib/jvm/java-8-openjdk-amd64/jre/bin/java",
      "process.name": "java",
      "process.pid": 2133,
      "related.ip": [
      "10.224.1.74",
      "10.224.0.26"
      ],
      "server.bytes": 13288,
      "server.ip": "10.224.0.26",
      "server.packets": 8,
      "server.port": 49187,
      "service.type": "system",
      "source.bytes": 7828,
      "source.ip": "10.224.1.74",
      "source.packets": 11,
      "source.port": 47532,
      "system.audit.socket.egid": 1156,
      "system.audit.socket.euid": 1155,
      "system.audit.socket.gid": 1156,
      "system.audit.socket.kernel_sock_address": "0xffff92583fb2cc80",
      "system.audit.socket.uid": 1155,
      "user.id": "1155"
      },
      {
      "@timestamp": "2020-07-03T22:14:58.105Z",
      "agent.ephemeral_id": "a86657e0-4dda-42fd-abcb-39d26f9de155",
      "agent.hostname": "6f725fa897a3",
      "agent.id": "6408e125-972b-4fcd-9f45-fa98bcffadf3",
      "agent.name": "6f725fa897a3",
      "agent.type": "auditbeat",
      "agent.version": "7.9.0",
      "client.bytes": 2257,
      "client.ip": "10.224.1.74",
      "client.packets": 2,
      "client.port": 40980,
      "destination.bytes": 624,
      "destination.ip": "54.177.169.222",
      "destination.packets": 2,
      "destination.port": 9243,
      "ecs.version": "1.5.0",
      "event.action": "network_flow",
      "event.category": [
      "network",
      "network_traffic"
      ],
      "event.dataset": "socket",
      "event.duration": 66396880,
      "event.end": "2020-07-03T22:14:55.249Z",
      "event.kind": "event",
      "event.module": "system",
      "event.start": "2020-07-03T22:14:55.182Z",
      "event.type": [
      "info",
      "connection"
      ],
      "flow.complete": false,
      "flow.final": true,
      "group.id": "0",
      "group.name": "root",
      "host.name": "6f725fa897a3",
      "network.bytes": 2881,
      "network.community_id": "1:76fBiYqMEh2jIMDrpmV+r7muTeo=",
      "network.direction": "unknown",
      "network.packets": 4,
      "network.transport": "tcp",
      "network.type": "ipv4",
      "process.args": [
      "/usr/local/bin/metricbeat",
      "-e",
      "-c",
      "/etc/metricbeat/metricbeat.yml",
      "--path.home",
      "/etc/metricbeat"
      ],
      "process.created": "2020-07-03T22:04:12.690Z",
      "process.executable": "/opt/metricbeat-7.3.2-linux-x86_64/metricbeat",
      "process.name": "metricbeat",
      "process.pid": 2131,
      "related.ip": [
      "10.224.1.74",
      "54.177.169.222"
      ],
      "related.user": [
      "root"
      ],
      "server.bytes": 624,
      "server.ip": "54.177.169.222",
      "server.packets": 2,
      "server.port": 9243,
      "service.type": "system",
      "source.bytes": 2257,
      "source.ip": "10.224.1.74",
      "source.packets": 2,
      "source.port": 40980,
      "system.audit.socket.egid": 0,
      "system.audit.socket.euid": 0,
      "system.audit.socket.gid": 0,
      "system.audit.socket.kernel_sock_address": "0xffff925855a42000",
      "system.audit.socket.uid": 0,
      "user.id": "0",
      "user.name": "root"
      },
      {
      "@timestamp": "2020-07-03T22:14:58.105Z",
      "agent.ephemeral_id": "a86657e0-4dda-42fd-abcb-39d26f9de155",
      "agent.hostname": "6f725fa897a3",
      "agent.id": "6408e125-972b-4fcd-9f45-fa98bcffadf3",
      "agent.name": "6f725fa897a3",
      "agent.type": "auditbeat",
      "agent.version": "7.9.0",
      "client.bytes": 2313,
      "client.ip": "10.224.1.74",
      "client.packets": 2,
      "client.port": 56798,
      "destination.bytes": 99,
      "destination.ip": "35.184.73.24",
      "destination.packets": 2,
      "destination.port": 5001,
      "ecs.version": "1.5.0",
      "event.action": "network_flow",
      "event.category": [
      "network",
      "network_traffic"
      ],
      "event.dataset": "socket",
      "event.duration": 1815079,
      "event.end": "2020-07-03T22:14:55.339Z",
      "event.kind": "event",
      "event.module": "system",
      "event.start": "2020-07-03T22:14:55.337Z",
      "event.type": [
      "info",
      "connection"
      ],
      "flow.complete": false,
      "flow.final": true,
      "group.id": "0",
      "group.name": "root",
      "host.name": "6f725fa897a3",
      "network.bytes": 2412,
      "network.community_id": "1:xDsVUdJSGGstQCWW3CLu771AM2M=",
      "network.direction": "unknown",
      "network.packets": 4,
      "network.transport": "tcp",
      "network.type": "ipv4",
      "process.args": [
      "/usr/local/bin/auditbeat",
      "-e",
      "-c",
      "/etc/auditbeat/auditbeat.yml"
      ],
      "process.created": "2020-07-03T22:04:12.680Z",
      "process.executable": "/opt/auditbeat-7.3.0-linux-x86_64/auditbeat",
      "process.name": "auditbeat",
      "process.pid": 2128,
      "related.ip": [
      "10.224.1.74",
      "35.184.73.24"
      ],
      "related.user": [
      "root"
      ],
      "server.bytes": 99,
      "server.ip": "35.184.73.24",
      "server.packets": 2,
      "server.port": 5001,
      "service.type": "system",
      "source.bytes": 2313,
      "source.ip": "10.224.1.74",
      "source.packets": 2,
      "source.port": 56798,
      "system.audit.socket.egid": 0,
      "system.audit.socket.euid": 0,
      "system.audit.socket.gid": 0,
      "system.audit.socket.kernel_sock_address": "0xffff925855b4c800",
      "system.audit.socket.uid": 0,
      "user.id": "0",
      "user.name": "root"
      },
      {
      "@timestamp": "2020-07-03T22:15:00.106Z",
      "agent.ephemeral_id": "a86657e0-4dda-42fd-abcb-39d26f9de155",
      "agent.hostname": "6f725fa897a3",
      "agent.id": "6408e125-972b-4fcd-9f45-fa98bcffadf3",
      "agent.name": "6f725fa897a3",
      "agent.type": "auditbeat",
      "agent.version": "7.9.0",
      "client.bytes": 180,
      "client.ip": "10.224.1.74",
      "client.packets": 3,
      "client.port": 44488,
      "destination.bytes": 0,
      "destination.ip": "35.227.125.33",
      "destination.packets": 0,
      "destination.port": 9200,
      "ecs.version": "1.5.0",
      "event.action": "network_flow",
      "event.category": [
      "network",
      "network_traffic"
      ],
      "event.dataset": "socket",
      "event.duration": 3041839364,
      "event.end": "2020-07-03T22:14:57.434Z",
      "event.kind": "event",
      "event.module": "system",
      "event.start": "2020-07-03T22:14:54.392Z",
      "event.type": [
      "info",
      "connection"
      ],
      "flow.complete": true,
      "flow.final": true,
      "group.id": "0",
      "group.name": "root",
      "host.name": "6f725fa897a3",
      "network.bytes": 180,
      "network.community_id": "1:UOJc4cGlKRib5pDWg7CPNk/PCks=",
      "network.direction": "outbound",
      "network.packets": 3,
      "network.transport": "tcp",
      "network.type": "ipv4",
      "process.args": [
      "/usr/local/bin/auditbeat-secops",
      "-e",
      "-c",
      "/etc/auditbeat-secops/auditbeat.yml"
      ],
      "process.created": "2020-07-03T22:04:12.680Z",
      "process.executable": "/opt/auditbeat-7.2.0-linux-x86_64/auditbeat",
      "process.name": "auditbeat-secop",
      "process.pid": 2127,
      "related.ip": [
      "10.224.1.74",
      "35.227.125.33"
      ],
      "related.user": [
      "root"
      ],
      "server.bytes": 0,
      "server.ip": "35.227.125.33",
      "server.packets": 0,
      "server.port": 9200,
      "service.type": "system",
      "source.bytes": 180,
      "source.ip": "10.224.1.74",
      "source.packets": 3,
      "source.port": 44488,
      "system.audit.socket.egid": 0,
      "system.audit.socket.euid": 0,
      "system.audit.socket.gid": 0,
      "system.audit.socket.kernel_sock_address": "0xffff925855a45800",
      "system.audit.socket.uid": 0,
      "user.id": "0",
      "user.name": "root"
      },
      {
      "@timestamp": "2020-07-03T22:15:01.105Z",
      "agent.ephemeral_id": "a86657e0-4dda-42fd-abcb-39d26f9de155",
      "agent.hostname": "6f725fa897a3",
      "agent.id": "6408e125-972b-4fcd-9f45-fa98bcffadf3",
      "agent.name": "6f725fa897a3",
      "agent.type": "auditbeat",
      "agent.version": "7.9.0",
      "client.bytes": 2183,
      "client.ip": "10.224.1.74",
      "client.packets": 2,
      "client.port": 56798,
      "destination.bytes": 99,
      "destination.ip": "35.184.73.24",
      "destination.packets": 2,
      "destination.port": 5001,
      "ecs.version": "1.5.0",
      "event.action": "network_flow",
      "event.category": [
      "network",
      "network_traffic"
      ],
      "event.dataset": "socket",
      "event.duration": 1944507,
      "event.end": "2020-07-03T22:14:58.341Z",
      "event.kind": "event",
      "event.module": "system",
      "event.start": "2020-07-03T22:14:58.339Z",
      "event.type": [
      "info",
      "connection"
      ],
      "flow.complete": false,
      "flow.final": true,
      "group.id": "0",
      "group.name": "root",
      "host.name": "6f725fa897a3",
      "network.bytes": 2282,
      "network.community_id": "1:xDsVUdJSGGstQCWW3CLu771AM2M=",
      "network.direction": "unknown",
      "network.packets": 4,
      "network.transport": "tcp",
      "network.type": "ipv4",
      "process.args": [
      "/usr/local/bin/auditbeat",
      "-e",
      "-c",
      "/etc/auditbeat/auditbeat.yml"
      ],
      "process.created": "2020-07-03T22:04:12.680Z",
      "process.executable": "/opt/auditbeat-7.3.0-linux-x86_64/auditbeat",
      "process.name": "auditbeat",
      "process.pid": 2128,
      "related.ip": [
      "10.224.1.74",
      "35.184.73.24"
      ],
      "related.user": [
      "root"
      ],
      "server.bytes": 99,
      "server.ip": "35.184.73.24",
      "server.packets": 2,
      "server.port": 5001,
      "service.type": "system",
      "source.bytes": 2183,
      "source.ip": "10.224.1.74",
      "source.packets": 2,
      "source.port": 56798,
      "system.audit.socket.egid": 0,
      "system.audit.socket.euid": 0,
      "system.audit.socket.gid": 0,
      "system.audit.socket.kernel_sock_address": "0xffff925855b4c800",
      "system.audit.socket.uid": 0,
      "user.id": "0",
      "user.name": "root"
      },
      {
      "@timestamp": "2020-07-03T22:15:01.105Z",
      "agent.ephemeral_id": "a86657e0-4dda-42fd-abcb-39d26f9de155",
      "agent.hostname": "6f725fa897a3",
      "agent.id": "6408e125-972b-4fcd-9f45-fa98bcffadf3",
      "agent.name": "6f725fa897a3",
      "agent.type": "auditbeat",
      "agent.version": "7.9.0",
      "client.bytes": 7880,
      "client.ip": "10.224.1.74",
      "client.packets": 12,
      "client.port": 47532,
      "destination.bytes": 13320,
      "destination.ip": "10.224.0.26",
      "destination.packets": 9,
      "destination.port": 49187,
      "ecs.version": "1.5.0",
      "event.action": "network_flow",
      "event.category": [
      "network",
      "network_traffic"
      ],
      "event.dataset": "socket",
      "event.duration": 9664915,
      "event.end": "2020-07-03T22:14:58.637Z",
      "event.kind": "event",
      "event.module": "system",
      "event.start": "2020-07-03T22:14:58.628Z",
      "event.type": [
      "info",
      "connection"
      ],
      "flow.complete": false,
      "flow.final": true,
      "group.id": "1156",
      "host.name": "6f725fa897a3",
      "network.bytes": 21200,
      "network.community_id": "1:mP45JQYeef+rzRmDrH21rKQUFas=",
      "network.direction": "unknown",
      "network.packets": 21,
      "network.transport": "tcp",
      "network.type": "ipv4",
      "process.args": [
      "java",
      "-Djava.util.logging.config.file=/var/lib/jenkins/logging.properties",
      "-javaagent:/opt/jolokia/jolokia-agent.jar=config=/opt/jolokia/jolokia.properties",
      "-Dorg.jenkinsci.plugins.gitclient.Git.timeOut=10",
      "-jar",
      "/usr/local/share/jenkins/swarm-client-3.17.jar",
      "-description",
      "Ubuntu 16.04 - 2 CPU Cores / 3539 MB Memory",
      "-disableClientsUniqueId",
      "-executors",
      "1",
      "-fsroot",
      "/var/lib/jenkins",
      "-master",
      "https://beats-ci.elastic.co/",
      "-maxRetryInterval",
      "160",
      "-retryBackOffStrategy",
      "linear",
      "-mode",
      "exclusive",
      "-name",
      "beats-ci-immutable-ubuntu-1604-1593813819177048166",
      "-username",
      "local-admin",
      "-passwordFile",
      "/var/lib/jenkins/.jenkins_password",
      "-name",
      "beats-ci-immutable-ubuntu-1604-1593813819177048166",
      "-master",
      "https://beats-ci.elastic.co",
      "-username",
      "local-admin",
      "-labels",
      "docker",
      "-labels",
      "immutable",
      "-labels",
      "linux",
      "-labels",
      "linux-immutable",
      "-labels",
      "swarm",
      "-labels",
      "ubuntu",
      "-labels",
      "ubuntu-16.04",
      "-labels",
      "ubuntu-16",
      "-labels",
      "virtual",
      "-labels",
      "x86_64",
      "-description",
      "MachineType:n1-highmem-4,DiskSize:150"
      ],
      "process.created": "2020-07-03T22:04:12.690Z",
      "process.executable": "/usr/lib/jvm/java-8-openjdk-amd64/jre/bin/java",
      "process.name": "java",
      "process.pid": 2133,
      "related.ip": [
      "10.224.1.74",
      "10.224.0.26"
      ],
      "server.bytes": 13320,
      "server.ip": "10.224.0.26",
      "server.packets": 9,
      "server.port": 49187,
      "service.type": "system",
      "source.bytes": 7880,
      "source.ip": "10.224.1.74",
      "source.packets": 12,
      "source.port": 47532,
      "system.audit.socket.egid": 1156,
      "system.audit.socket.euid": 1155,
      "system.audit.socket.gid": 1156,
      "system.audit.socket.kernel_sock_address": "0xffff92583fb2cc80",
      "system.audit.socket.uid": 1155,
      "user.id": "1155"
      },
      {
      "@timestamp": "2020-07-03T22:15:04.105Z",
      "agent.ephemeral_id": "a86657e0-4dda-42fd-abcb-39d26f9de155",
      "agent.hostname": "6f725fa897a3",
      "agent.id": "6408e125-972b-4fcd-9f45-fa98bcffadf3",
      "agent.name": "6f725fa897a3",
      "agent.type": "auditbeat",
      "agent.version": "7.9.0",
      "client.bytes": 2220,
      "client.ip": "10.224.1.74",
      "client.packets": 2,
      "client.port": 56798,
      "destination.bytes": 99,
      "destination.ip": "35.184.73.24",
      "destination.packets": 2,
      "destination.port": 5001,
      "ecs.version": "1.5.0",
      "event.action": "network_flow",
      "event.category": [
      "network",
      "network_traffic"
      ],
      "event.dataset": "socket",
      "event.duration": 1833388,
      "event.end": "2020-07-03T22:15:01.345Z",
      "event.kind": "event",
      "event.module": "system",
      "event.start": "2020-07-03T22:15:01.343Z",
      "event.type": [
      "info",
      "connection"
      ],
      "flow.complete": false,
      "flow.final": true,
      "group.id": "0",
      "group.name": "root",
      "host.name": "6f725fa897a3",
      "network.bytes": 2319,
      "network.community_id": "1:xDsVUdJSGGstQCWW3CLu771AM2M=",
      "network.direction": "unknown",
      "network.packets": 4,
      "network.transport": "tcp",
      "network.type": "ipv4",
      "process.args": [
      "/usr/local/bin/auditbeat",
      "-e",
      "-c",
      "/etc/auditbeat/auditbeat.yml"
      ],
      "process.created": "2020-07-03T22:04:12.680Z",
      "process.executable": "/opt/auditbeat-7.3.0-linux-x86_64/auditbeat",
      "process.name": "auditbeat",
      "process.pid": 2128,
      "related.ip": [
      "10.224.1.74",
      "35.184.73.24"
      ],
      "related.user": [
      "root"
      ],
      "server.bytes": 99,
      "server.ip": "35.184.73.24",
      "server.packets": 2,
      "server.port": 5001,
      "service.type": "system",
      "source.bytes": 2220,
      "source.ip": "10.224.1.74",
      "source.packets": 2,
      "source.port": 56798,
      "system.audit.socket.egid": 0,
      "system.audit.socket.euid": 0,
      "system.audit.socket.gid": 0,
      "system.audit.socket.kernel_sock_address": "0xffff925855b4c800",
      "system.audit.socket.uid": 0,
      "user.id": "0",
      "user.name": "root"
      }
      ] don't match the condition: the documents contain {
      "agent.type": "auditbeat",
      "client.bytes": {
      "operator": "",
      "type": "comparison",
      "value": 30
      },
      "client.ip": "127.71.136.229",
      "client.packets": 1,
      "client.port": 40694,
      "destination.bytes": {
      "operator": "",
      "type": "comparison",
      "value": 30
      },
      "destination.ip": "127.229.169.161",
      "destination.packets": 1,
      "destination.port": 53,
      "event.action": "network_flow",
      "event.category": [
      "network",
      "network_traffic"
      ],
      "event.dataset": "socket",
      "event.kind": "event",
      "event.module": "system",
      "network.bytes": {
      "operator": "",
      "type": "comparison",
      "value": 60
      },
      "network.direction": "inbound",
      "network.packets": 2,
      "network.transport": "udp",
      "network.type": "ipv4",
      "process.pid": 48024,
      "server.bytes": {
      "operator": "",
      "type": "comparison",
      "value": 30
      },
      "server.ip": "127.229.169.161",
      "server.packets": 1,
      "server.port": 53,
      "source.bytes": {
      "operator": "",
      "type": "comparison",
      "value": 30
      },
      "source.ip": "127.71.136.229",
      "source.packets": 1,
      "source.port": 40694,
      "user.id": "0"
      },
      {
      "agent.type": "auditbeat",
      "client.bytes": {
      "operator": "",
      "type": "comparison",
      "value": 80
      },
      "client.ip": "127.90.174.85",
      "client.packets": {
      "operator": "",
      "type": "comparison",
      "value": 2
      },
      "client.port": 33031,
      "destination.bytes": {
      "operator": "",
      "type": "comparison",
      "value": 2
      },
      "destination.domain": "elastic.co",
      "destination.ip": "127.3.167.36",
      "destination.packets": {
      "operator": "",
      "type": "comparison",
      "value": 2
      },
      "destination.port": 60657,
      "event.action": "network_flow",
      "event.category": [
      "network",
      "network_traffic"
      ],
      "event.dataset": "socket",
      "event.kind": "event",
      "event.module": "system",
      "network.direction": "inbound",
      "network.packets": {
      "operator": "",
      "type": "comparison",
      "value": 5
      },
      "network.transport": "tcp",
      "network.type": "ipv4",
      "process.pid": 48024,
      "server.bytes": {
      "operator": "",
      "type": "comparison",
      "value": 2
      },
      "server.domain": "elastic.co",
      "server.ip": "127.3.167.36",
      "server.packets": {
      "operator": "",
      "type": "comparison",
      "value": 2
      },
      "server.port": 60657,
      "service.type": "system",
      "source.bytes": {
      "operator": "",
      "type": "comparison",
      "value": 80
      },
      "source.ip": "127.90.174.85",
      "source.packets": {
      "operator": "",
      "type": "comparison",
      "value": 2
      },
      "source.port": 33031
      }
  • Name: Build and Test / Metricbeat x-pack / Metricbeat x-pack / TestFetch – stats

    • Age: 1
    • Duration: 1.34
    • Error Details: Failed
  • Name: Build and Test / Metricbeat x-pack / Metricbeat x-pack / TestData – stats

    • Age: 1
    • Duration: 1.31
    • Error Details: Failed
  • Name: Build and Test / Metricbeat x-pack / Metricbeat x-pack / TestFetch – status

    • Age: 1
    • Duration: 1.28
    • Error Details: Failed
  • Name: Build and Test / Metricbeat x-pack / Metricbeat x-pack / TestFetch – stats

    • Age: 1
    • Duration: 1.31
    • Error Details: Failed
  • Name: Build and Test / Metricbeat x-pack / Metricbeat x-pack / TestFetch – qmgr

    • Age: 1
    • Duration: 1.35
    • Error Details: Failed
  • Name: Build and Test / Metricbeat x-pack / Metricbeat x-pack / TestFetch – performance

    • Age: 1
    • Duration: 1.29
    • Error Details: Failed
  • Name: Build and Test / Metricbeat x-pack / Metricbeat x-pack / TestFetch – transaction_log

    • Age: 1
    • Duration: 3.29
    • Error Details: Failed
  • Name: Build and Test / Metricbeat x-pack / Metricbeat x-pack / TestData – collector

    • Age: 1
    • Duration: 1.3
    • Error Details: Failed
  • Name: Build and Test / Metricbeat x-pack / Metricbeat x-pack / TestFetch – node

    • Age: 1
    • Duration: 1.47
    • Error Details: Failed
  • Name: Build and Test / Metricbeat x-pack / Metricbeat x-pack / TestFetch – proxy

    • Age: 1
    • Duration: 1.28
    • Error Details: Failed
  • Name: Build and Test / Metricbeat x-pack / Metricbeat x-pack / TestMySQL – query

    • Age: 1
    • Duration: 1.31
    • Error Details: Failed
  • Name: Build and Test / Metricbeat x-pack / Metricbeat x-pack / TestPostgreSQL – query

    • Age: 1
    • Duration: 1.29
    • Error Details: Failed
  • Name: Build and Test / Metricbeat x-pack / Metricbeat x-pack / TestData – channels

    • Age: 1
    • Duration: 1.82
    • Error Details: Failed
  • Name: Build and Test / Metricbeat x-pack / Metricbeat x-pack / TestFetch – channels

    • Age: 1
    • Duration: 1.46
    • Error Details: Failed
  • Name: Build and Test / Metricbeat x-pack / Metricbeat x-pack / TestData – stats

    • Age: 1
    • Duration: 2.31
    • Error Details: Failed
  • Name: Build and Test / Metricbeat x-pack / Metricbeat x-pack / TestFetch – stats

    • Age: 1
    • Duration: 1.32
    • Error Details: Failed
  • Name: Build and Test / Metricbeat x-pack / Metricbeat x-pack / TestData – subscriptions

    • Age: 1
    • Duration: 5.33
    • Error Details: Failed
  • Name: Build and Test / Metricbeat x-pack / Metricbeat x-pack / TestFetch – subscriptions

    • Age: 1
    • Duration: 1.35
    • Error Details: Failed
  • Name: Build and Test / Metricbeat OSS Integration tests / TestData – namespace

    • Age: 1
    • Duration: 1.3
    • Error Details: Failed
  • Name: Build and Test / Metricbeat OSS Integration tests / TestFetch – namespace

    • Age: 1
    • Duration: 1.29
    • Error Details: Failed
  • Name: Build and Test / Metricbeat OSS Integration tests / TestFetch – status

    • Age: 1
    • Duration: 1.29
    • Error Details: Failed
  • Name: Build and Test / Metricbeat OSS Integration tests / TestFetch – beat

    • Age: 1
    • Duration: 1.29
    • Error Details: Failed
  • Name: Build and Test / Metricbeat OSS Integration tests / TestData – beat

    • Age: 1
    • Duration: 1.27
    • Error Details: Failed
  • Name: Build and Test / Metricbeat OSS Integration tests / TestXPackEnabled – beat

    • Age: 1
    • Duration: 1.3
    • Error Details: Failed
  • Name: Build and Test / Metricbeat OSS Integration tests / TestData – cluster_disk

    • Age: 1
    • Duration: 2.38
    • Error Details: Failed
  • Name: Build and Test / Metricbeat OSS Integration tests / TestData – cluster_health

    • Age: 1
    • Duration: 1.68
    • Error Details: Failed
  • Name: Build and Test / Metricbeat OSS Integration tests / TestData – cluster_status

    • Age: 1
    • Duration: 7.76
    • Error Details: Failed
  • Name: Build and Test / Metricbeat OSS Integration tests / TestData – mgr_cluster_disk

    • Age: 1
    • Duration: 2.6
    • Error Details: Failed
  • Name: Build and Test / Metricbeat OSS Integration tests / TestData – mgr_cluster_health

    • Age: 1
    • Duration: 2.72
    • Error Details: Failed
  • Name: Build and Test / Metricbeat OSS Integration tests / TestData – mgr_osd_perf

    • Age: 1
    • Duration: 5.54
    • Error Details: Failed
  • Name: Build and Test / Metricbeat OSS Integration tests / TestData – mgr_osd_pool_stats

    • Age: 1
    • Duration: 6.69
    • Error Details: Failed
  • Name: Build and Test / Metricbeat OSS Integration tests / TestData – mgr_osd_tree

    • Age: 1
    • Duration: 3.57
    • Error Details: Failed
  • Name: Build and Test / Metricbeat OSS Integration tests / TestData – mgr_pool_disk

    • Age: 1
    • Duration: 6.05
    • Error Details: Failed
  • Name: Build and Test / Metricbeat OSS Integration tests / TestData – osd_df

    • Age: 1
    • Duration: 2.65
    • Error Details: Failed
  • Name: Build and Test / Metricbeat OSS Integration tests / TestData – osd_tree

    • Age: 1
    • Duration: 2.29
    • Error Details: Failed
  • Name: Build and Test / Metricbeat OSS Integration tests / TestData – pool_disk

    • Age: 1
    • Duration: 3.32
    • Error Details: Failed
  • Name: Build and Test / Metricbeat OSS Integration tests / TestData – agent

    • Age: 1
    • Duration: 1.31
    • Error Details: Failed
  • Name: Build and Test / Metricbeat OSS Integration tests / TestFetch – bucket

    • Age: 1
    • Duration: 1.62
    • Error Details: Failed
  • Name: Build and Test / Metricbeat OSS Integration tests / TestData – bucket

    • Age: 1
    • Duration: 1.55
    • Error Details: Failed
  • Name: Build and Test / Metricbeat OSS Integration tests / TestFetch – cluster

    • Age: 1
    • Duration: 4.32
    • Error Details: Failed
  • Name: Build and Test / Metricbeat OSS Integration tests / TestFetch – node

    • Age: 1
    • Duration: 2.3
    • Error Details: Failed
  • Name: Build and Test / Metricbeat OSS Integration tests / TestFetch – server

    • Age: 1
    • Duration: 1.3
    • Error Details: Failed
  • Name: Build and Test / Metricbeat OSS Integration tests / TestData – server

    • Age: 1
    • Duration: 1.29
    • Error Details: Failed
  • Name: Build and Test / Metricbeat OSS Integration tests / TestFetch – collector

    • Age: 1
    • Duration: 1.3
    • Error Details: Failed
  • Name: Build and Test / Metricbeat OSS Integration tests / TestFetch – elasticsearch

    • Age: 1
    • Duration: 2.23
    • Error Details: Failed
  • Name: Build and Test / Metricbeat OSS Integration tests / TestData – elasticsearch

    • Age: 1
    • Duration: 1.59
    • Error Details: Failed
  • Name: Build and Test / Metricbeat OSS Integration tests / TestXPackEnabled – elasticsearch

    • Age: 1
    • Duration: 1.32
    • Error Details: Failed
  • Name: Build and Test / Metricbeat OSS Integration tests / TestFetch – server

    • Age: 1
    • Duration: 1.33
    • Error Details: Failed
  • Name: Build and Test / Metricbeat OSS Integration tests / TestData – server

    • Age: 1
    • Duration: 1.29
    • Error Details: Failed
  • Name: Build and Test / Metricbeat OSS Integration tests / TestFetch – leader

    • Age: 1
    • Duration: 2.2
    • Error Details: Failed
  • Name: Build and Test / Metricbeat OSS Integration tests / TestData – leader

    • Age: 1
    • Duration: 1.81
    • Error Details: Failed
  • Name: Build and Test / Metricbeat OSS Integration tests / TestFetch – metrics

    • Age: 1
    • Duration: 4.32
    • Error Details: Failed
  • Name: Build and Test / Metricbeat OSS Integration tests / TestData – metrics

    • Age: 1
    • Duration: 1.3
    • Error Details: Failed
  • Name: Build and Test / Metricbeat OSS Integration tests / TestFetch – self

    • Age: 1
    • Duration: 2.31
    • Error Details: Failed
  • Name: Build and Test / Metricbeat OSS Integration tests / TestData – self

    • Age: 1
    • Duration: 1.28
    • Error Details: Failed
  • Name: Build and Test / Metricbeat OSS Integration tests / TestFetch – store

    • Age: 1
    • Duration: 7.32
    • Error Details: Failed
  • Name: Build and Test / Metricbeat OSS Integration tests / TestData – store

    • Age: 1
    • Duration: 1.3
    • Error Details: Failed
  • Name: Build and Test / Metricbeat OSS Integration tests / TestData – expvar

    • Age: 1
    • Duration: 1.49
    • Error Details: Failed
  • Name: Build and Test / Metricbeat OSS Integration tests / TestFetch – expvar

    • Age: 1
    • Duration: 1.3
    • Error Details: Failed
  • Name: Build and Test / Metricbeat OSS Integration tests / TestData – heap

    • Age: 1
    • Duration: 3.32
    • Error Details: Failed
  • Name: Build and Test / Metricbeat OSS Integration tests / TestFetch – heap

    • Age: 1
    • Duration: 1.32
    • Error Details: Failed
  • Name: Build and Test / Metricbeat OSS Integration tests / TestFetch – info

    • Age: 1
    • Duration: 4.33
    • Error Details: Failed
  • Name: Build and Test / Metricbeat OSS Integration tests / TestData – info

    • Age: 1
    • Duration: 1.31
    • Error Details: Failed
  • Name: Build and Test / Metricbeat OSS Integration tests / TestFetch – stat

    • Age: 1
    • Duration: 1.33
    • Error Details: Failed
  • Name: Build and Test / Metricbeat OSS Integration tests / TestData – stat

    • Age: 1
    • Duration: 1.3
    • Error Details: Failed
  • Name: Build and Test / Metricbeat OSS Integration tests / TestFetchObject – json

    • Age: 1
    • Duration: 1.46
    • Error Details: Failed
  • Name: Build and Test / Metricbeat OSS Integration tests / TestFetchArray – json

    • Age: 1
    • Duration: 1.32
    • Error Details: Failed
  • Name: Build and Test / Metricbeat OSS Integration tests / TestData – json

    • Age: 1
    • Duration: 1.31
    • Error Details: Failed
  • Name: Build and Test / Metricbeat OSS Integration tests / TestFetch – jmx

    • Age: 1
    • Duration: 1.3
    • Error Details: Failed
  • Name: Build and Test / Metricbeat OSS Integration tests / TestData – jmx

    • Age: 1
    • Duration: 1.29
    • Error Details: Failed
  • Name: Build and Test / Metricbeat OSS Integration tests / TestData – broker

    • Age: 1
    • Duration: 1.49
    • Error Details: Failed
  • Name: Build and Test / Metricbeat OSS Integration tests / TestFetch – broker

    • Age: 1
    • Duration: 1.3
    • Error Details: Failed
  • Name: Build and Test / Metricbeat OSS Integration tests / TestData – consumer

    • Age: 1
    • Duration: 4.6
    • Error Details: Failed
  • Name: Build and Test / Metricbeat OSS Integration tests / TestFetch – consumer

    • Age: 1
    • Duration: 1.34
    • Error Details: Failed
  • Name: Build and Test / Metricbeat OSS Integration tests / TestData – consumergroup

    • Age: 1
    • Duration: 10.33
    • Error Details: Failed
  • Name: Build and Test / Metricbeat OSS Integration tests / TestFetch – consumergroup

    • Age: 1
    • Duration: 1.33
    • Error Details: Failed
  • Name: Build and Test / Metricbeat OSS Integration tests / TestData – partition

    • Age: 1
    • Duration: 13.33
    • Error Details: Failed
  • Name: Build and Test / Metricbeat OSS Integration tests / TestTopic – partition

    • Age: 1
    • Duration: 1.37
    • Error Details: Failed
  • Name: Build and Test / Metricbeat OSS Integration tests / TestData – producer

    • Age: 1
    • Duration: 2.33
    • Error Details: Failed
  • Name: Build and Test / Metricbeat OSS Integration tests / TestFetch – producer

    • Age: 1
    • Duration: 1.3
    • Error Details: Failed
  • Name: Build and Test / Metricbeat OSS Integration tests / TestXPackEnabled – kibana

    • Age: 1
    • Duration: 1.78
    • Error Details: Failed
  • Name: Build and Test / Metricbeat OSS Integration tests / TestFetch – stats

    • Age: 1
    • Duration: 1.37
    • Error Details: Failed
  • Name: Build and Test / Metricbeat OSS Integration tests / TestData – stats

    • Age: 1
    • Duration: 1.33
    • Error Details: Failed
  • Name: Build and Test / Metricbeat OSS Integration tests / TestFetch – status

    • Age: 1
    • Duration: 4.32
    • Error Details: Failed
  • Name: Build and Test / Metricbeat OSS Integration tests / TestFetch – logstash

    • Age: 1
    • Duration: 1.49
    • Error Details: Failed
  • Name: Build and Test / Metricbeat OSS Integration tests / TestData – logstash

    • Age: 1
    • Duration: 1.33
    • Error Details: Failed
  • Name: Build and Test / Metricbeat OSS Integration tests / TestXPackEnabled – logstash

    • Age: 1
    • Duration: 1.31
    • Error Details: Failed
  • Name: Build and Test / Metricbeat OSS Integration tests / TestData – stats

    • Age: 1
    • Duration: 1.32
    • Error Details: Failed
  • Name: Build and Test / Metricbeat OSS Integration tests / TestFetch – stats

    • Age: 1
    • Duration: 1.33
    • Error Details: Failed
  • Name: Build and Test / Metricbeat OSS Integration tests / TestFetch – collstats

    • Age: 1
    • Duration: 4.5
    • Error Details: Failed
  • Name: Build and Test / Metricbeat OSS Integration tests / TestData – collstats

    • Age: 1
    • Duration: 1.37
    • Error Details: Failed
  • Name: Build and Test / Metricbeat OSS Integration tests / TestFetch – dbstats

    • Age: 1
    • Duration: 7.33
    • Error Details: Failed
  • Name: Build and Test / Metricbeat OSS Integration tests / TestData – dbstats

    • Age: 1
    • Duration: 1.38
    • Error Details: Failed

Steps errors

Expand to view the steps failures

  • Name: Report to Codecov

    • Description: curl -sSLo codecov https://codecov.io/bash for i in auditbeat filebeat heartbeat libbeat metricbeat packetbeat winlogbeat journalbeat do FILE="${i}/build/coverage/full.cov" if [ -f "${FILE}" ]; then bash codecov -f "${FILE}" fi done

    • Duration: 2 min 22 sec

    • Start Time: 2020-07-03T22:07:03.893+0000

    • log

  • Name: Mage update build test

    • Description: mage update build test

    • Duration: 10 min 47 sec

    • Start Time: 2020-07-03T22:05:07.030+0000

    • log

  • Name: Report to Codecov

    • Description: curl -sSLo codecov https://codecov.io/bash for i in auditbeat filebeat heartbeat libbeat metricbeat packetbeat winlogbeat journalbeat do FILE="${i}/build/coverage/full.cov" if [ -f "${FILE}" ]; then bash codecov -f "${FILE}" fi done

    • Duration: 1 min 27 sec

    • Start Time: 2020-07-03T22:10:45.821+0000

    • log

  • Name: Mage update build test

    • Description: mage update build test

    • Duration: 11 min 16 sec

    • Start Time: 2020-07-03T22:05:13.312+0000

    • log

  • Name: Mage goIntegTest

    • Description: mage goIntegTest

    • Duration: 24 min 31 sec

    • Start Time: 2020-07-03T22:05:19.563+0000

    • log

  • Name: Install docker-compose 1.21.0

    • Description: .ci/scripts/install-docker-compose.sh

    • Duration: 1 min 32 sec

    • Start Time: 2020-07-03T22:05:51.755+0000

    • log

  • Name: Mage build test

    • Description: mage build test

    • Duration: 18 min 1 sec

    • Start Time: 2020-07-03T22:08:08.127+0000

    • log

  • Name: Report to Codecov

    • Description: curl -sSLo codecov https://codecov.io/bash for i in auditbeat filebeat heartbeat libbeat metricbeat packetbeat winlogbeat journalbeat do FILE="${i}/build/coverage/full.cov" if [ -f "${FILE}" ]; then bash codecov -f "${FILE}" fi done

    • Duration: 3 min 19 sec

    • Start Time: 2020-07-03T22:18:49.509+0000

    • log

Log output

Expand to view the last 100 lines of log output

[2020-07-03T23:42:02.049Z] + [ -f packetbeat/build/coverage/full.cov ]
[2020-07-03T23:42:02.049Z] + FILE=winlogbeat/build/coverage/full.cov
[2020-07-03T23:42:02.049Z] + [ -f winlogbeat/build/coverage/full.cov ]
[2020-07-03T23:42:02.049Z] + FILE=journalbeat/build/coverage/full.cov
[2020-07-03T23:42:02.049Z] + [ -f journalbeat/build/coverage/full.cov ]
[2020-07-03T23:42:03.586Z] Failed in branch Filebeat oss
[2020-07-03T23:42:05.217Z] Running in /var/lib/jenkins/workspace/Beats_beats-beats-mbp_PR-19655/src/github.com/elastic/beats
[2020-07-03T23:42:05.554Z] + find . -type f -name TEST*.xml -path */build/* -delete
[2020-07-03T23:42:05.577Z] Running in /var/lib/jenkins/workspace/Beats_beats-beats-mbp_PR-19655/src/github.com/elastic/beats/Lint
[2020-07-03T23:42:05.725Z] Running in /var/lib/jenkins/workspace/Beats_beats-beats-mbp_PR-19655/src/github.com/elastic/beats/Winlogbeat-oss
[2020-07-03T23:42:05.876Z] Running in /var/lib/jenkins/workspace/Beats_beats-beats-mbp_PR-19655/src/github.com/elastic/beats/Elastic-Agent-x-pack
[2020-07-03T23:42:06.025Z] Running in /var/lib/jenkins/workspace/Beats_beats-beats-mbp_PR-19655/src/github.com/elastic/beats/Auditbeat-crosscompile
[2020-07-03T23:42:06.173Z] Running in /var/lib/jenkins/workspace/Beats_beats-beats-mbp_PR-19655/src/github.com/elastic/beats/Dockerlogbeat
[2020-07-03T23:42:06.322Z] Running in /var/lib/jenkins/workspace/Beats_beats-beats-mbp_PR-19655/src/github.com/elastic/beats/Journalbeat-oss
[2020-07-03T23:42:06.478Z] Running in /var/lib/jenkins/workspace/Beats_beats-beats-mbp_PR-19655/src/github.com/elastic/beats/Generators-Metricbeat-Linux
[2020-07-03T23:42:06.632Z] Running in /var/lib/jenkins/workspace/Beats_beats-beats-mbp_PR-19655/src/github.com/elastic/beats/Functionbeat-x-pack
[2020-07-03T23:42:06.781Z] Running in /var/lib/jenkins/workspace/Beats_beats-beats-mbp_PR-19655/src/github.com/elastic/beats/Filebeat-x-pack-Mac-OS-X
[2020-07-03T23:42:06.936Z] Running in /var/lib/jenkins/workspace/Beats_beats-beats-mbp_PR-19655/src/github.com/elastic/beats/Elastic-Agent-Mac-OS-X
[2020-07-03T23:42:07.090Z] Running in /var/lib/jenkins/workspace/Beats_beats-beats-mbp_PR-19655/src/github.com/elastic/beats/Elastic-Agent-x-pack-Windows
[2020-07-03T23:42:07.241Z] Running in /var/lib/jenkins/workspace/Beats_beats-beats-mbp_PR-19655/src/github.com/elastic/beats/Auditbeat-oss-Mac-OS-X
[2020-07-03T23:42:07.393Z] Running in /var/lib/jenkins/workspace/Beats_beats-beats-mbp_PR-19655/src/github.com/elastic/beats/Filebeat-Mac-OS-X
[2020-07-03T23:42:07.547Z] Running in /var/lib/jenkins/workspace/Beats_beats-beats-mbp_PR-19655/src/github.com/elastic/beats/Metricbeat-OSS-Unit-tests
[2020-07-03T23:42:07.698Z] Running in /var/lib/jenkins/workspace/Beats_beats-beats-mbp_PR-19655/src/github.com/elastic/beats/Filebeat-x-pack
[2020-07-03T23:42:07.850Z] Running in /var/lib/jenkins/workspace/Beats_beats-beats-mbp_PR-19655/src/github.com/elastic/beats/Metricbeat-crosscompile
[2020-07-03T23:42:08.000Z] Running in /var/lib/jenkins/workspace/Beats_beats-beats-mbp_PR-19655/src/github.com/elastic/beats/Auditbeat-x-pack-Windows
[2020-07-03T23:42:08.228Z] Running in /var/lib/jenkins/workspace/Beats_beats-beats-mbp_PR-19655/src/github.com/elastic/beats/Auditbeat-oss-Windows
[2020-07-03T23:42:08.512Z] Running in /var/lib/jenkins/workspace/Beats_beats-beats-mbp_PR-19655/src/github.com/elastic/beats/Auditbeat-x-pack
[2020-07-03T23:42:08.825Z] Running in /var/lib/jenkins/workspace/Beats_beats-beats-mbp_PR-19655/src/github.com/elastic/beats/Heartbeat-oss
[2020-07-03T23:42:09.166Z] Running in /var/lib/jenkins/workspace/Beats_beats-beats-mbp_PR-19655/src/github.com/elastic/beats/Filebeat-Windows
[2020-07-03T23:42:09.486Z] Running in /var/lib/jenkins/workspace/Beats_beats-beats-mbp_PR-19655/src/github.com/elastic/beats/Winlogbeat-Windows-x-pack
[2020-07-03T23:42:09.809Z] Running in /var/lib/jenkins/workspace/Beats_beats-beats-mbp_PR-19655/src/github.com/elastic/beats/Libbeat-x-pack
[2020-07-03T23:42:10.103Z] Running in /var/lib/jenkins/workspace/Beats_beats-beats-mbp_PR-19655/src/github.com/elastic/beats/Metricbeat-Mac-OS-X
[2020-07-03T23:42:10.389Z] Running in /var/lib/jenkins/workspace/Beats_beats-beats-mbp_PR-19655/src/github.com/elastic/beats/Metricbeat-x-pack-Mac-OS-X
[2020-07-03T23:42:10.721Z] Running in /var/lib/jenkins/workspace/Beats_beats-beats-mbp_PR-19655/src/github.com/elastic/beats/Filebeat-x-pack-Windows
[2020-07-03T23:42:11.017Z] Running in /var/lib/jenkins/workspace/Beats_beats-beats-mbp_PR-19655/src/github.com/elastic/beats/Auditbeat-oss-Linux
[2020-07-03T23:42:11.284Z] Running in /var/lib/jenkins/workspace/Beats_beats-beats-mbp_PR-19655/src/github.com/elastic/beats/Packetbeat-oss
[2020-07-03T23:42:11.437Z] Running in /var/lib/jenkins/workspace/Beats_beats-beats-mbp_PR-19655/src/github.com/elastic/beats/Winlogbeat-Windows
[2020-07-03T23:42:11.587Z] Running in /var/lib/jenkins/workspace/Beats_beats-beats-mbp_PR-19655/src/github.com/elastic/beats/Functionbeat-Mac-OS-X-x-pack
[2020-07-03T23:42:11.747Z] Running in /var/lib/jenkins/workspace/Beats_beats-beats-mbp_PR-19655/src/github.com/elastic/beats/Metricbeat-x-pack-Windows
[2020-07-03T23:42:11.896Z] Running in /var/lib/jenkins/workspace/Beats_beats-beats-mbp_PR-19655/src/github.com/elastic/beats/Heartbeat-Mac-OS-X
[2020-07-03T23:42:12.043Z] Running in /var/lib/jenkins/workspace/Beats_beats-beats-mbp_PR-19655/src/github.com/elastic/beats/Metricbeat-Windows
[2020-07-03T23:42:12.196Z] Running in /var/lib/jenkins/workspace/Beats_beats-beats-mbp_PR-19655/src/github.com/elastic/beats/Auditbeat-x-pack-Mac-OS-X
[2020-07-03T23:42:12.344Z] Running in /var/lib/jenkins/workspace/Beats_beats-beats-mbp_PR-19655/src/github.com/elastic/beats/Metricbeat-x-pack
[2020-07-03T23:42:12.495Z] Running in /var/lib/jenkins/workspace/Beats_beats-beats-mbp_PR-19655/src/github.com/elastic/beats/Generators-Beat-Linux
[2020-07-03T23:42:12.641Z] Running in /var/lib/jenkins/workspace/Beats_beats-beats-mbp_PR-19655/src/github.com/elastic/beats/Metricbeat-OSS-Integration-tests
[2020-07-03T23:42:12.788Z] Running in /var/lib/jenkins/workspace/Beats_beats-beats-mbp_PR-19655/src/github.com/elastic/beats/Heartbeat-Windows
[2020-07-03T23:42:12.937Z] Running in /var/lib/jenkins/workspace/Beats_beats-beats-mbp_PR-19655/src/github.com/elastic/beats/Functionbeat-Windows
[2020-07-03T23:42:13.084Z] Running in /var/lib/jenkins/workspace/Beats_beats-beats-mbp_PR-19655/src/github.com/elastic/beats/Metricbeat-Python-integration-tests
[2020-07-03T23:42:13.231Z] Running in /var/lib/jenkins/workspace/Beats_beats-beats-mbp_PR-19655/src/github.com/elastic/beats/Libbeat-oss
[2020-07-03T23:42:13.378Z] Running in /var/lib/jenkins/workspace/Beats_beats-beats-mbp_PR-19655/src/github.com/elastic/beats/Generators-Metricbeat-Mac-OS-X
[2020-07-03T23:42:13.523Z] Running in /var/lib/jenkins/workspace/Beats_beats-beats-mbp_PR-19655/src/github.com/elastic/beats/Libbeat-crosscompile
[2020-07-03T23:42:13.674Z] Running in /var/lib/jenkins/workspace/Beats_beats-beats-mbp_PR-19655/src/github.com/elastic/beats/Libbeat-stress-tests
[2020-07-03T23:42:13.819Z] Running in /var/lib/jenkins/workspace/Beats_beats-beats-mbp_PR-19655/src/github.com/elastic/beats/Generators-Beat-Mac-OS-X
[2020-07-03T23:42:13.963Z] Running in /var/lib/jenkins/workspace/Beats_beats-beats-mbp_PR-19655/src/github.com/elastic/beats/Filebeat-oss
[2020-07-03T23:42:14.398Z] + cat
[2020-07-03T23:42:14.398Z] + /usr/local/bin/runbld ./runbld-script
[2020-07-03T23:42:14.398Z] Picked up JAVA_TOOL_OPTIONS: -Dfile.encoding=UTF8
[2020-07-03T23:42:20.995Z] runbld>>> runbld started
[2020-07-03T23:42:20.995Z] runbld>>> 1.6.12/f45d832f2ba0aa2722ab4ec1fda8ad140f027f8b
[2020-07-03T23:42:23.549Z] runbld>>> The following profiles matched the job 'Beats/beats-beats-mbp/PR-19655' in order of occurrence in the config (last value wins).
[2020-07-03T23:42:24.495Z] runbld>>> Debug logging enabled.
[2020-07-03T23:42:24.495Z] runbld>>> Storing result
[2020-07-03T23:42:24.495Z] runbld>>> Store result: created {:total 2, :successful 2, :failed 0} 1
[2020-07-03T23:42:24.495Z] runbld>>> BUILD: https://c150076387b5421f9154dfbf536e5c60.us-west1.gcp.cloud.es.io:9243/build-1587637540455/t/20200703234224-10359D72
[2020-07-03T23:42:24.495Z] runbld>>> Adding system facts.
[2020-07-03T23:42:25.890Z] runbld>>> Adding vcs info for the latest commit:  4564b8bbbbb63f1aecdf0f23161ce5695ed4a2b9
[2020-07-03T23:42:25.890Z] runbld>>> >>>>>>>>>>>> SCRIPT EXECUTION BEGIN >>>>>>>>>>>>
[2020-07-03T23:42:25.890Z] runbld>>> Adding /usr/lib/jvm/java-8-openjdk-amd64/bin to the path.
[2020-07-03T23:42:25.890Z] Processing JUnit reports with runbld...
[2020-07-03T23:42:25.890Z] + echo 'Processing JUnit reports with runbld...'
[2020-07-03T23:42:26.154Z] runbld>>> <<<<<<<<<<<< SCRIPT EXECUTION END <<<<<<<<<<<<
[2020-07-03T23:42:26.154Z] runbld>>> DURATION: 17ms
[2020-07-03T23:42:26.154Z] runbld>>> STDOUT: 40 bytes
[2020-07-03T23:42:26.154Z] runbld>>> STDERR: 49 bytes
[2020-07-03T23:42:26.154Z] runbld>>> WRAPPED PROCESS: SUCCESS (0)
[2020-07-03T23:42:26.154Z] runbld>>> Searching for build metadata in /var/lib/jenkins/workspace/Beats_beats-beats-mbp_PR-19655/src/github.com/elastic/beats
[2020-07-03T23:42:27.543Z] runbld>>> Storing build metadata: 
[2020-07-03T23:42:27.543Z] runbld>>> Adding test report.
[2020-07-03T23:42:27.543Z] runbld>>> Searching for junit test output files with the pattern: TEST-.*\.xml$ in: /var/lib/jenkins/workspace/Beats_beats-beats-mbp_PR-19655/src/github.com/elastic/beats
[2020-07-03T23:42:28.118Z] runbld>>> Found 112 test output files
[2020-07-03T23:42:28.380Z] runbld>>> No testsuite node found in /var/lib/jenkins/workspace/Beats_beats-beats-mbp_PR-19655/src/github.com/elastic/beats/Metricbeat-x-pack/x-pack/metricbeat/build/TEST-go-integration-istio.xml
[2020-07-03T23:42:28.649Z] runbld>>> No testsuite node found in /var/lib/jenkins/workspace/Beats_beats-beats-mbp_PR-19655/src/github.com/elastic/beats/Metricbeat-x-pack/x-pack/metricbeat/build/TEST-go-integration-tomcat.xml
[2020-07-03T23:42:28.649Z] runbld>>> No testsuite node found in /var/lib/jenkins/workspace/Beats_beats-beats-mbp_PR-19655/src/github.com/elastic/beats/Metricbeat-x-pack/x-pack/metricbeat/build/TEST-go-integration-iis.xml
[2020-07-03T23:42:28.649Z] runbld>>> No testsuite node found in /var/lib/jenkins/workspace/Beats_beats-beats-mbp_PR-19655/src/github.com/elastic/beats/Metricbeat-x-pack/x-pack/metricbeat/build/TEST-go-integration-openmetrics.xml
[2020-07-03T23:42:28.649Z] runbld>>> No testsuite node found in /var/lib/jenkins/workspace/Beats_beats-beats-mbp_PR-19655/src/github.com/elastic/beats/Metricbeat-x-pack/x-pack/metricbeat/build/TEST-go-integration-activemq.xml
[2020-07-03T23:42:30.041Z] runbld>>> No testsuite node found in /var/lib/jenkins/workspace/Beats_beats-beats-mbp_PR-19655/src/github.com/elastic/beats/Metricbeat-OSS-Integration-tests/metricbeat/build/TEST-go-integration-graphite.xml
[2020-07-03T23:42:31.961Z] runbld>>> No testsuite node found in /var/lib/jenkins/workspace/Beats_beats-beats-mbp_PR-19655/src/github.com/elastic/beats/Metricbeat-OSS-Integration-tests/metricbeat/build/TEST-go-integration-windows.xml
[2020-07-03T23:42:32.536Z] runbld>>> Test output logs contained: Errors: 0 Failures: 153 Tests: 10383 Skipped: 1343
[2020-07-03T23:42:32.536Z] runbld>>> Storing result
[2020-07-03T23:42:32.536Z] runbld>>> FAILURES: 153
[2020-07-03T23:42:50.468Z] Body did not finish within grace period; terminating with extreme prejudice
[2020-07-03T23:42:50.557Z] ERROR: runbld post build action failed.
[2020-07-03T23:42:50.557Z] Timeout has been exceeded
[2020-07-03T23:42:50.833Z] Running on Jenkins in /var/lib/jenkins/workspace/Beats_beats-beats-mbp_PR-19655
[2020-07-03T23:42:50.999Z] [INFO] getVaultSecret: Getting secrets
[2020-07-03T23:42:51.067Z] Masking supported pattern matches of $VAULT_ADDR or $VAULT_ROLE_ID or $VAULT_SECRET_ID
[2020-07-03T23:42:52.074Z] + chmod 755 generate-build-data.sh
[2020-07-03T23:42:52.074Z] + ./generate-build-data.sh https://beats-ci.elastic.co/blue/rest/organizations/jenkins/pipelines/Beats/beats-beats-mbp/PR-19655/ https://beats-ci.elastic.co/blue/rest/organizations/jenkins/pipelines/Beats/beats-beats-mbp/PR-19655/runs/1 ABORTED 7384192
[2020-07-03T23:42:52.074Z] INFO: curl https://beats-ci.elastic.co/blue/rest/organizations/jenkins/pipelines/Beats/beats-beats-mbp/PR-19655/runs/1/steps/?limit=10000 -o steps-info.json
[2020-07-03T23:42:53.936Z] INFO: curl https://beats-ci.elastic.co/blue/rest/organizations/jenkins/pipelines/Beats/beats-beats-mbp/PR-19655/runs/1/tests/?status=FAILED -o tests-errors.json

@urso
Copy link
Author

urso commented Jul 6, 2020

CI failures seem unrelated.

@urso urso merged commit adefe09 into elastic:7.x Jul 6, 2020
@urso urso deleted the backport_19117_7.x branch July 6, 2020 20:26
@zube zube bot removed the [zube]: Done label Oct 13, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
backport Team:Services (Deprecated) Label for the former Integrations-Services team
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants