Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Beat Check Event_log message could include the path to the event_log #41991

Open
strawgate opened this issue Dec 11, 2024 · 1 comment
Open
Labels
Team:Elastic-Agent-Data-Plane Label for the Agent Data Plane team

Comments

@strawgate
Copy link
Contributor

Describe the enhancement:
The beat event_data logger is new and for many customers, especially those using docker, they find themselves confused as to where to go next to troubleshoot their data.

"message":"Cannot index event (status=400): dropping event! Look at the event log to view the event and cause."

It would be nice if we included some info here as to where the event log is located so the user knows where to head next for troubleshooting their issue. This is also true with Elastic Agent where a user has to download a diagnostic from Fleet to obtain the event_data.

Or alternatively, we could change the error message to include a reference to the event_data logger so that when a user searches "filebeat event_data logger", the user finds the right documentation.

References:

@botelastic botelastic bot added the needs_team Indicates that the issue/PR needs a Team:* label label Dec 11, 2024
@cmacknz cmacknz added the Team:Elastic-Agent-Data-Plane Label for the Agent Data Plane team label Jan 7, 2025
@botelastic botelastic bot removed the needs_team Indicates that the issue/PR needs a Team:* label label Jan 7, 2025
@elasticmachine
Copy link
Collaborator

Pinging @elastic/elastic-agent-data-plane (Team:Elastic-Agent-Data-Plane)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Team:Elastic-Agent-Data-Plane Label for the Agent Data Plane team
Projects
None yet
Development

No branches or pull requests

3 participants