2020-02-25T04:14:15.907Z	INFO	instance/beat.go:622	Home path: [/usr/share/filebeat] Config path: [/usr/share/filebeat] Data path: [/usr/share/filebeat/data] Logs path: [/usr/share/filebeat/logs]
2020-02-25T04:14:15.907Z	INFO	instance/beat.go:630	Beat ID: 380f108b-197b-4a15-9c8b-c4f0108602bb
2020-02-25T04:14:15.909Z	INFO	[api]	api/server.go:62	Starting stats endpoint
2020-02-25T04:14:15.909Z	INFO	[api]	api/server.go:64	Metrics endpoint listening on: 127.0.0.1:5066 (configured: localhost)
2020-02-25T04:14:15.909Z	INFO	[seccomp]	seccomp/seccomp.go:124	Syscall filter successfully installed
2020-02-25T04:14:15.909Z	INFO	[beat]	instance/beat.go:958	Beat info	{"system_info": {"beat": {"path": {"config": "/usr/share/filebeat", "data": "/usr/share/filebeat/data", "home": "/usr/share/filebeat", "logs": "/usr/share/filebeat/logs"}, "type": "filebeat", "uuid": "380f108b-197b-4a15-9c8b-c4f0108602bb"}}}
2020-02-25T04:14:15.909Z	INFO	[beat]	instance/beat.go:967	Build info	{"system_info": {"build": {"commit": "6a23e8f8f30f5001ba344e4e54d8d9cb82cb107c", "libbeat": "7.6.0", "time": "2020-02-05T23:06:45.000Z", "version": "7.6.0"}}}
2020-02-25T04:14:15.910Z	INFO	[beat]	instance/beat.go:970	Go runtime info	{"system_info": {"go": {"os":"linux","arch":"amd64","max_procs":8,"version":"go1.13.7"}}}
2020-02-25T04:14:15.910Z	INFO	[beat]	instance/beat.go:974	Host info	{"system_info": {"host": {"architecture":"x86_64","boot_time":"2020-02-24T22:21:32Z","containerized":false,"name":"infosec-filebeat-qfr66","ip":["127.0.0.1/8","10.40.2.25/24"],"kernel_version":"4.14.138+","mac":["82:06:ae:9e:d4:b1"],"os":{"family":"redhat","platform":"centos","name":"CentOS Linux","version":"7 (Core)","major":7,"minor":7,"patch":1908,"codename":"Core"},"timezone":"UTC","timezone_offset_sec":0}}}
2020-02-25T04:14:15.911Z	INFO	[beat]	instance/beat.go:1003	Process info	{"system_info": {"process": {"capabilities": {"inheritable":["chown","dac_override","fowner","fsetid","kill","setgid","setuid","setpcap","net_bind_service","net_raw","sys_chroot","mknod","audit_write","setfcap"],"permitted":["chown","dac_override","fowner","fsetid","kill","setgid","setuid","setpcap","net_bind_service","net_raw","sys_chroot","mknod","audit_write","setfcap"],"effective":["chown","dac_override","fowner","fsetid","kill","setgid","setuid","setpcap","net_bind_service","net_raw","sys_chroot","mknod","audit_write","setfcap"],"bounding":["chown","dac_override","fowner","fsetid","kill","setgid","setuid","setpcap","net_bind_service","net_raw","sys_chroot","mknod","audit_write","setfcap"],"ambient":null}, "cwd": "/usr/share/filebeat", "exe": "/usr/share/filebeat/filebeat", "name": "filebeat", "pid": 1, "ppid": 0, "seccomp": {"mode":"filter","no_new_privs":true}, "start_time": "2020-02-25T04:14:15.400Z"}}}
2020-02-25T04:14:15.911Z	INFO	instance/beat.go:298	Setup Beat: filebeat; Version: 7.6.0
2020-02-25T04:14:15.911Z	INFO	[index-management]	idxmgmt/std.go:182	Set output.elasticsearch.index to 'filebeat-7.6.0' as ILM is enabled.
2020-02-25T04:14:15.911Z	INFO	elasticsearch/client.go:174	Elasticsearch url: http://quickstart-es-http.default.svc.cluster.local:9200
2020-02-25T04:14:15.911Z	INFO	[publisher]	pipeline/module.go:110	Beat name: infosec-filebeat-qfr66
2020-02-25T04:14:15.912Z	INFO	instance/beat.go:439	filebeat start running.
2020-02-25T04:14:15.912Z	INFO	[monitoring]	log/log.go:118	Starting metrics logging every 30s
2020-02-25T04:14:15.912Z	INFO	registrar/registrar.go:145	Loading registrar data from /usr/share/filebeat/data/registry/filebeat/data.json
2020-02-25T04:14:15.914Z	INFO	add_cloud_metadata/add_cloud_metadata.go:93	add_cloud_metadata: hosting provider type detected as gcp, metadata={"availability_zone":"us-central1-a","instance":{"id":"6308088924442587791","name":"gke-spencer-eck-test-default-pool-9949f3b4-07t4"},"machine":{"type":"n1-standard-8"},"project":{"id":"elastic-infosec-dev"},"provider":"gcp"}
2020-02-25T04:14:15.915Z	INFO	registrar/registrar.go:152	States Loaded from registrar: 104
2020-02-25T04:14:15.915Z	INFO	crawler/crawler.go:72	Loading Inputs: 0
2020-02-25T04:14:15.915Z	INFO	crawler/crawler.go:106	Loading and starting Inputs completed. Enabled inputs: 0
2020-02-25T04:14:15.915Z	WARN	[cfgwarn]	kubernetes/kubernetes.go:62	BETA: The kubernetes autodiscover is beta
2020-02-25T04:14:15.917Z	INFO	kubernetes/util.go:79	kubernetes: Using node gke-spencer-eck-test-default-pool-9949f3b4-07t4 provided in the config
2020-02-25T04:14:15.917Z	INFO	[autodiscover]	autodiscover/autodiscover.go:104	Starting autodiscover manager
2020-02-25T04:14:16.019Z	INFO	log/input.go:152	Configured paths: [/var/lib/docker/containers/53533e6f9bac72046d6f247e6c424ae9186629e88238062468e24f8e4894cef1/*-json.log]
2020-02-25T04:14:16.019Z	INFO	input/input.go:114	Starting input of type: container; ID: 8037157342765553101 
2020-02-25T04:14:16.022Z	INFO	log/input.go:152	Configured paths: [/var/lib/docker/containers/9234fb587f435ecb625059b7baba8dbb4bc6c818478c969a5948ec874ca9f21e/*-json.log]
2020-02-25T04:14:16.022Z	INFO	input/input.go:114	Starting input of type: container; ID: 10606105027735457485 
2020-02-25T04:14:16.023Z	INFO	log/harvester.go:297	Harvester started for file: /var/lib/docker/containers/9234fb587f435ecb625059b7baba8dbb4bc6c818478c969a5948ec874ca9f21e/9234fb587f435ecb625059b7baba8dbb4bc6c818478c969a5948ec874ca9f21e-json.log
2020-02-25T04:14:16.023Z	INFO	log/input.go:152	Configured paths: [/var/lib/docker/containers/02a2899b67a03f6930812a8b41e05b18aa96147ba887c21a9534f1808b8cfff9/*-json.log]
2020-02-25T04:14:16.023Z	INFO	input/input.go:114	Starting input of type: container; ID: 17244355687557230489 
2020-02-25T04:14:16.025Z	INFO	log/input.go:152	Configured paths: [/var/lib/docker/containers/4b0080926ad0e4bbfc4d87e88d0366748b4f34627f978d2be1662c2c97f553ec/*-json.log]
2020-02-25T04:14:16.025Z	INFO	input/input.go:114	Starting input of type: container; ID: 11412215122546316004 
2020-02-25T04:14:16.025Z	INFO	log/harvester.go:297	Harvester started for file: /var/lib/docker/containers/02a2899b67a03f6930812a8b41e05b18aa96147ba887c21a9534f1808b8cfff9/02a2899b67a03f6930812a8b41e05b18aa96147ba887c21a9534f1808b8cfff9-json.log
2020-02-25T04:14:16.030Z	INFO	log/input.go:152	Configured paths: [/var/lib/docker/containers/60a66de2f115d18cd3088f0b9b933a2a08c8067ca0eb5adc9bf5ace2d7db42ce/*-json.log /var/log/elasticsearch/*_audit.log /var/log/elasticsearch/*_audit.json]
2020-02-25T04:14:16.031Z	INFO	log/input.go:152	Configured paths: [/var/lib/docker/containers/60a66de2f115d18cd3088f0b9b933a2a08c8067ca0eb5adc9bf5ace2d7db42ce/*-json.log /var/log/elasticsearch/*_deprecation.json]
2020-02-25T04:14:16.032Z	INFO	log/input.go:152	Configured paths: [/var/lib/docker/containers/60a66de2f115d18cd3088f0b9b933a2a08c8067ca0eb5adc9bf5ace2d7db42ce/*-json.log /var/log/elasticsearch/gc.log]
2020-02-25T04:14:16.033Z	INFO	log/input.go:152	Configured paths: [/var/lib/docker/containers/60a66de2f115d18cd3088f0b9b933a2a08c8067ca0eb5adc9bf5ace2d7db42ce/*-json.log /var/log/elasticsearch/*_server.json]
2020-02-25T04:14:16.034Z	INFO	log/input.go:152	Configured paths: [/var/lib/docker/containers/60a66de2f115d18cd3088f0b9b933a2a08c8067ca0eb5adc9bf5ace2d7db42ce/*-json.log /var/log/elasticsearch/*_index_indexing_slowlog.log /var/log/elasticsearch/*_index_search_slowlog.json /var/log/elasticsearch/*_index_indexing_slowlog.json]
2020-02-25T04:14:16.034Z	INFO	elasticsearch/client.go:174	Elasticsearch url: http://quickstart-es-http.default.svc.cluster.local:9200
2020-02-25T04:14:16.045Z	INFO	elasticsearch/client.go:757	Attempting to connect to Elasticsearch version 7.6.0
2020-02-25T04:14:16.077Z	INFO	[license]	licenser/es_callback.go:50	Elasticsearch license: Basic
2020-02-25T04:14:16.106Z	INFO	input/input.go:114	Starting input of type: container; ID: 13352434063550583006 
2020-02-25T04:14:16.106Z	INFO	input/input.go:114	Starting input of type: container; ID: 10868722838492184125 
2020-02-25T04:14:16.106Z	INFO	input/input.go:114	Starting input of type: container; ID: 16007279826541631651 
2020-02-25T04:14:16.106Z	INFO	input/input.go:114	Starting input of type: container; ID: 6756777960020889315 
2020-02-25T04:14:16.106Z	INFO	input/input.go:114	Starting input of type: container; ID: 14640234143935372085 
2020-02-25T04:14:16.107Z	INFO	log/harvester.go:297	Harvester started for file: /var/lib/docker/containers/60a66de2f115d18cd3088f0b9b933a2a08c8067ca0eb5adc9bf5ace2d7db42ce/60a66de2f115d18cd3088f0b9b933a2a08c8067ca0eb5adc9bf5ace2d7db42ce-json.log
2020-02-25T04:14:16.107Z	INFO	log/input.go:152	Configured paths: [/var/lib/docker/containers/9110cd0f6969741537e9a57590b45338a6c7af32cfbc5dc55c4d73caae645bc9/*-json.log]
2020-02-25T04:14:16.107Z	INFO	input/input.go:114	Starting input of type: container; ID: 18243945733768252920 
2020-02-25T04:14:16.107Z	INFO	log/harvester.go:297	Harvester started for file: /var/lib/docker/containers/60a66de2f115d18cd3088f0b9b933a2a08c8067ca0eb5adc9bf5ace2d7db42ce/60a66de2f115d18cd3088f0b9b933a2a08c8067ca0eb5adc9bf5ace2d7db42ce-json.log
2020-02-25T04:14:16.107Z	INFO	log/harvester.go:297	Harvester started for file: /var/lib/docker/containers/60a66de2f115d18cd3088f0b9b933a2a08c8067ca0eb5adc9bf5ace2d7db42ce/60a66de2f115d18cd3088f0b9b933a2a08c8067ca0eb5adc9bf5ace2d7db42ce-json.log
2020-02-25T04:14:16.108Z	INFO	log/input.go:152	Configured paths: [/var/lib/docker/containers/530d0862cf662110f76165751e4ae8a6a4ed15affe2b4bf9bcc4be83a8ea75df/*-json.log]
2020-02-25T04:14:16.109Z	INFO	input/input.go:114	Starting input of type: container; ID: 5650723756403274195 
2020-02-25T04:14:16.109Z	INFO	log/harvester.go:297	Harvester started for file: /var/lib/docker/containers/60a66de2f115d18cd3088f0b9b933a2a08c8067ca0eb5adc9bf5ace2d7db42ce/60a66de2f115d18cd3088f0b9b933a2a08c8067ca0eb5adc9bf5ace2d7db42ce-json.log
2020-02-25T04:14:16.111Z	INFO	log/input.go:152	Configured paths: [/var/lib/docker/containers/4f74ff97d018940792e165f56ed0587475b039f3d6b25ae961646e1a49f0269f/*-json.log]
2020-02-25T04:14:16.111Z	INFO	input/input.go:114	Starting input of type: container; ID: 15061575091295603598 
2020-02-25T04:14:16.112Z	INFO	log/harvester.go:297	Harvester started for file: /var/lib/docker/containers/60a66de2f115d18cd3088f0b9b933a2a08c8067ca0eb5adc9bf5ace2d7db42ce/60a66de2f115d18cd3088f0b9b933a2a08c8067ca0eb5adc9bf5ace2d7db42ce-json.log
2020-02-25T04:14:16.113Z	INFO	log/input.go:152	Configured paths: [/var/lib/docker/containers/699046f58dc1e44662fb7833597177a922922433ac6540934aaa431c66b6c1b2/*-json.log]
2020-02-25T04:14:16.113Z	INFO	input/input.go:114	Starting input of type: container; ID: 7960538330276402034 
2020-02-25T04:14:16.114Z	INFO	log/input.go:152	Configured paths: [/var/lib/docker/containers/e94dc2ec75fa1ff89928d1a947a15591bf402ef9193ce63c05f32bf5499acd5d/*-json.log]
2020-02-25T04:14:16.114Z	INFO	input/input.go:114	Starting input of type: container; ID: 18256139157510430595 
2020-02-25T04:14:16.116Z	INFO	log/input.go:152	Configured paths: [/var/lib/docker/containers/87a8a90cdd897d9b4635de9aa8a70de98f039645657cad5a8c7f1dfa995d5ab2/*-json.log]
2020-02-25T04:14:16.116Z	INFO	input/input.go:114	Starting input of type: container; ID: 9481694752041931665 
2020-02-25T04:14:16.117Z	INFO	log/input.go:152	Configured paths: [/var/lib/docker/containers/bec2e8556c0544057af8d3aa29f2b7cc784534f023f37c98aa41be0bd4e8b5c1/*-json.log]
2020-02-25T04:14:16.117Z	INFO	input/input.go:114	Starting input of type: container; ID: 7290071638962649909 
2020-02-25T04:14:16.118Z	INFO	log/input.go:152	Configured paths: [/var/lib/docker/containers/87bba95765674cbc4b1d2a5b7f092db5007b15a44376fcbb23bea19c2c375748/*-json.log]
2020-02-25T04:14:16.118Z	INFO	input/input.go:114	Starting input of type: container; ID: 9426437872616198655 
2020-02-25T04:14:16.129Z	INFO	log/harvester.go:297	Harvester started for file: /var/lib/docker/containers/699046f58dc1e44662fb7833597177a922922433ac6540934aaa431c66b6c1b2/699046f58dc1e44662fb7833597177a922922433ac6540934aaa431c66b6c1b2-json.log
2020-02-25T04:14:16.939Z	INFO	log/input.go:152	Configured paths: [/var/lib/docker/containers/d8e04137cdfe258661457041499720363cc31ea1d793e328e13800868c702be5/*-json.log]
2020-02-25T04:14:16.939Z	INFO	input/input.go:114	Starting input of type: container; ID: 18112334306364196341 
2020-02-25T04:14:16.940Z	INFO	log/harvester.go:297	Harvester started for file: /var/lib/docker/containers/d8e04137cdfe258661457041499720363cc31ea1d793e328e13800868c702be5/d8e04137cdfe258661457041499720363cc31ea1d793e328e13800868c702be5-json.log
2020-02-25T04:14:16.965Z	INFO	log/input.go:152	Configured paths: [/var/lib/docker/containers/1bc2bc2393769becfdbf09e69006da2da48d5a4232f71c90330ecb38f97f9a01/*-json.log]
2020-02-25T04:14:16.965Z	INFO	input/input.go:114	Starting input of type: container; ID: 802040847446661434 
2020-02-25T04:14:16.966Z	INFO	log/harvester.go:297	Harvester started for file: /var/lib/docker/containers/1bc2bc2393769becfdbf09e69006da2da48d5a4232f71c90330ecb38f97f9a01/1bc2bc2393769becfdbf09e69006da2da48d5a4232f71c90330ecb38f97f9a01-json.log
2020-02-25T04:14:17.025Z	INFO	pipeline/output.go:95	Connecting to backoff(elasticsearch(http://quickstart-es-http.default.svc.cluster.local:9200))
2020-02-25T04:14:17.031Z	INFO	elasticsearch/client.go:757	Attempting to connect to Elasticsearch version 7.6.0
2020-02-25T04:14:17.049Z	INFO	[license]	licenser/es_callback.go:50	Elasticsearch license: Basic
2020-02-25T04:14:17.067Z	INFO	[index-management]	idxmgmt/std.go:258	Auto ILM enable success.
2020-02-25T04:14:17.069Z	INFO	[index-management.ilm]	ilm/std.go:139	do not generate ilm policy: exists=true, overwrite=false
2020-02-25T04:14:17.069Z	INFO	[index-management]	idxmgmt/std.go:271	ILM policy successfully loaded.
2020-02-25T04:14:17.070Z	INFO	[index-management]	idxmgmt/std.go:306	Write alias successfully generated.
2020-02-25T04:14:17.086Z	INFO	pipeline/output.go:105	Connection to backoff(elasticsearch(http://quickstart-es-http.default.svc.cluster.local:9200)) established
2020-02-25T04:14:25.395Z	INFO	input/input.go:149	input ticker stopped
2020-02-25T04:14:25.395Z	INFO	input/input.go:167	Stopping Input: 18112334306364196341
2020-02-25T04:14:25.395Z	INFO	log/harvester.go:320	Reader was closed: /var/lib/docker/containers/d8e04137cdfe258661457041499720363cc31ea1d793e328e13800868c702be5/d8e04137cdfe258661457041499720363cc31ea1d793e328e13800868c702be5-json.log. Closing.
2020-02-25T04:14:25.396Z	ERROR	[autodiscover]	cfgfile/list.go:96	Error creating runner from config: Can only start an input when all related states are finished: {Id:1176670-2049 Finished:false Fileinfo:0xc0008dc410 Source:/var/lib/docker/containers/d8e04137cdfe258661457041499720363cc31ea1d793e328e13800868c702be5/d8e04137cdfe258661457041499720363cc31ea1d793e328e13800868c702be5-json.log Offset:8176 Timestamp:2020-02-25 04:14:23.1639887 +0000 UTC m=+7.290002088 TTL:-1ns Type:container Meta:map[] FileStateOS:1176670-2049}
2020-02-25T04:14:31.101Z	INFO	input/input.go:149	input ticker stopped
2020-02-25T04:14:31.101Z	INFO	input/input.go:167	Stopping Input: 802040847446661434
2020-02-25T04:14:31.101Z	INFO	log/harvester.go:320	Reader was closed: /var/lib/docker/containers/1bc2bc2393769becfdbf09e69006da2da48d5a4232f71c90330ecb38f97f9a01/1bc2bc2393769becfdbf09e69006da2da48d5a4232f71c90330ecb38f97f9a01-json.log. Closing.
2020-02-25T04:14:31.101Z	INFO	log/input.go:152	Configured paths: [/var/lib/docker/containers/d8e04137cdfe258661457041499720363cc31ea1d793e328e13800868c702be5/*-json.log]
2020-02-25T04:14:31.101Z	INFO	input/input.go:114	Starting input of type: container; ID: 18112334306364196341 
2020-02-25T04:14:31.102Z	ERROR	[autodiscover]	cfgfile/list.go:96	Error creating runner from config: Can only start an input when all related states are finished: {Id:1176679-2049 Finished:false Fileinfo:0xc0008dd5f0 Source:/var/lib/docker/containers/1bc2bc2393769becfdbf09e69006da2da48d5a4232f71c90330ecb38f97f9a01/1bc2bc2393769becfdbf09e69006da2da48d5a4232f71c90330ecb38f97f9a01-json.log Offset:21405 Timestamp:2020-02-25 04:14:19.3917895 +0000 UTC m=+3.517802896 TTL:-1ns Type:container Meta:map[] FileStateOS:1176679-2049}
2020-02-25T04:14:34.711Z	INFO	input/input.go:149	input ticker stopped
2020-02-25T04:14:34.711Z	INFO	input/input.go:167	Stopping Input: 10606105027735457485
2020-02-25T04:14:34.711Z	INFO	log/harvester.go:320	Reader was closed: /var/lib/docker/containers/9234fb587f435ecb625059b7baba8dbb4bc6c818478c969a5948ec874ca9f21e/9234fb587f435ecb625059b7baba8dbb4bc6c818478c969a5948ec874ca9f21e-json.log. Closing.
2020-02-25T04:14:34.711Z	INFO	log/input.go:152	Configured paths: [/var/lib/docker/containers/1bc2bc2393769becfdbf09e69006da2da48d5a4232f71c90330ecb38f97f9a01/*-json.log]
2020-02-25T04:14:34.711Z	INFO	input/input.go:114	Starting input of type: container; ID: 802040847446661434 
2020-02-25T04:14:34.712Z	INFO	log/input.go:152	Configured paths: [/var/lib/docker/containers/9234fb587f435ecb625059b7baba8dbb4bc6c818478c969a5948ec874ca9f21e/*-json.log]
2020-02-25T04:14:34.712Z	INFO	input/input.go:114	Starting input of type: container; ID: 10606105027735457485 
2020-02-25T04:14:34.712Z	INFO	log/harvester.go:297	Harvester started for file: /var/lib/docker/containers/1bc2bc2393769becfdbf09e69006da2da48d5a4232f71c90330ecb38f97f9a01/1bc2bc2393769becfdbf09e69006da2da48d5a4232f71c90330ecb38f97f9a01-json.log
2020-02-25T04:14:45.914Z	INFO	[monitoring]	log/log.go:145	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":140,"time":{"ms":141}},"total":{"ticks":430,"time":{"ms":437},"value":430},"user":{"ticks":290,"time":{"ms":296}}},"handles":{"limit":{"hard":1048576,"soft":1048576},"open":20},"info":{"ephemeral_id":"c0c7819c-6100-405f-9dcc-5e6b18452576","uptime":{"ms":30034}},"memstats":{"gc_next":15378672,"memory_alloc":13201648,"memory_total":42250120,"rss":62210048},"runtime":{"goroutines":190}},"filebeat":{"events":{"added":428,"done":428},"harvester":{"closed":3,"files":{"27749adc-c9cc-4491-a74e-78ff0d4d6184":{"last_event_published_time":"2020-02-25T04:14:16.129Z","last_event_timestamp":"2020-02-25T04:13:19.038Z","name":"/var/lib/docker/containers/699046f58dc1e44662fb7833597177a922922433ac6540934aaa431c66b6c1b2/699046f58dc1e44662fb7833597177a922922433ac6540934aaa431c66b6c1b2-json.log","read_offset":17678,"size":17678,"start_time":"2020-02-25T04:14:16.114Z"},"3b0de82d-a3c4-4d25-ad96-7e618d24fa7e":{"last_event_published_time":"2020-02-25T04:14:37.122Z","last_event_timestamp":"2020-02-25T04:14:31.668Z","name":"/var/lib/docker/containers/60a66de2f115d18cd3088f0b9b933a2a08c8067ca0eb5adc9bf5ace2d7db42ce/60a66de2f115d18cd3088f0b9b933a2a08c8067ca0eb5adc9bf5ace2d7db42ce-json.log","read_offset":104943,"size":79139,"start_time":"2020-02-25T04:14:16.107Z"},"59e6a4f1-9bfa-4711-85c2-57c6fa87e88b":{"last_event_published_time":"2020-02-25T04:14:32.122Z","last_event_timestamp":"2020-02-25T04:14:31.668Z","name":"/var/lib/docker/containers/60a66de2f115d18cd3088f0b9b933a2a08c8067ca0eb5adc9bf5ace2d7db42ce/60a66de2f115d18cd3088f0b9b933a2a08c8067ca0eb5adc9bf5ace2d7db42ce-json.log","read_offset":104943,"size":79139,"start_time":"2020-02-25T04:14:16.109Z"},"69846fbc-89be-4e03-978b-b839b4a50988":{"last_event_published_time":"2020-02-25T04:14:37.118Z","last_event_timestamp":"2020-02-25T04:13:54.968Z","name":"/var/lib/docker/containers/60a66de2f115d18cd3088f0b9b933a2a08c8067ca0eb5adc9bf5ace2d7db42ce/60a66de2f115d18cd3088f0b9b933a2a08c8067ca0eb5adc9bf5ace2d7db42ce-json.log","read_offset":104943,"size":79139,"start_time":"2020-02-25T04:14:16.107Z"},"76eaa826-7728-4c9a-b54a-7ccc69b333e5":{"last_event_published_time":"2020-02-25T04:14:34.713Z","last_event_timestamp":"2020-02-25T04:14:34.712Z","name":"/var/lib/docker/containers/1bc2bc2393769becfdbf09e69006da2da48d5a4232f71c90330ecb38f97f9a01/1bc2bc2393769becfdbf09e69006da2da48d5a4232f71c90330ecb38f97f9a01-json.log","read_offset":26280,"size":25501,"start_time":"2020-02-25T04:14:34.712Z"},"b7536ea9-2323-4ef6-8e1e-7341d8cd6e69":{"last_event_published_time":"2020-02-25T04:14:37.130Z","last_event_timestamp":"2020-02-25T04:14:31.668Z","name":"/var/lib/docker/containers/60a66de2f115d18cd3088f0b9b933a2a08c8067ca0eb5adc9bf5ace2d7db42ce/60a66de2f115d18cd3088f0b9b933a2a08c8067ca0eb5adc9bf5ace2d7db42ce-json.log","read_offset":104943,"size":79139,"start_time":"2020-02-25T04:14:16.112Z"},"b86dcef1-0ee0-4003-ba34-3b5373a32f93":{"last_event_published_time":"2020-02-25T04:14:16.026Z","last_event_timestamp":"2020-02-25T04:13:39.306Z","name":"/var/lib/docker/containers/02a2899b67a03f6930812a8b41e05b18aa96147ba887c21a9534f1808b8cfff9/02a2899b67a03f6930812a8b41e05b18aa96147ba887c21a9534f1808b8cfff9-json.log","read_offset":131773,"size":131773,"start_time":"2020-02-25T04:14:16.024Z"},"d7ff6bdb-9d98-47ff-bb1e-27fe94de3266":{"last_event_published_time":"2020-02-25T04:14:37.122Z","last_event_timestamp":"2020-02-25T04:14:31.668Z","name":"/var/lib/docker/containers/60a66de2f115d18cd3088f0b9b933a2a08c8067ca0eb5adc9bf5ace2d7db42ce/60a66de2f115d18cd3088f0b9b933a2a08c8067ca0eb5adc9bf5ace2d7db42ce-json.log","read_offset":104943,"size":79139,"start_time":"2020-02-25T04:14:16.107Z"}},"open_files":8,"running":8,"started":11}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":395,"batches":20,"total":395},"read":{"bytes":21744},"type":"elasticsearch","write":{"bytes":942491}},"pipeline":{"clients":19,"events":{"active":0,"filtered":33,"published":395,"retry":50,"total":428},"queue":{"acked":395}}},"registrar":{"states":{"current":107,"update":428},"writes":{"success":52,"total":52}},"system":{"cpu":{"cores":8},"load":{"1":1.52,"15":1.37,"5":1.43,"norm":{"1":0.19,"15":0.1713,"5":0.1788}}}}}}
2020-02-25T04:14:51.103Z	INFO	log/harvester.go:297	Harvester started for file: /var/lib/docker/containers/d8e04137cdfe258661457041499720363cc31ea1d793e328e13800868c702be5/d8e04137cdfe258661457041499720363cc31ea1d793e328e13800868c702be5-json.log
2020-02-25T04:14:54.713Z	INFO	log/harvester.go:297	Harvester started for file: /var/lib/docker/containers/9234fb587f435ecb625059b7baba8dbb4bc6c818478c969a5948ec874ca9f21e/9234fb587f435ecb625059b7baba8dbb4bc6c818478c969a5948ec874ca9f21e-json.log
2020-02-25T04:15:15.914Z	INFO	[monitoring]	log/log.go:145	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":170,"time":{"ms":29}},"total":{"ticks":510,"time":{"ms":75},"value":510},"user":{"ticks":340,"time":{"ms":46}}},"handles":{"limit":{"hard":1048576,"soft":1048576},"open":22},"info":{"ephemeral_id":"c0c7819c-6100-405f-9dcc-5e6b18452576","uptime":{"ms":60035}},"memstats":{"gc_next":15037632,"memory_alloc":9770904,"memory_total":45834720,"rss":266240},"runtime":{"goroutines":200}},"filebeat":{"events":{"added":13,"done":13},"harvester":{"files":{"3b0de82d-a3c4-4d25-ad96-7e618d24fa7e":{"size":25804},"59e6a4f1-9bfa-4711-85c2-57c6fa87e88b":{"size":25804},"69846fbc-89be-4e03-978b-b839b4a50988":{"size":25804},"76eaa826-7728-4c9a-b54a-7ccc69b333e5":{"last_event_published_time":"2020-02-25T04:14:55.716Z","last_event_timestamp":"2020-02-25T04:14:54.713Z","read_offset":5421,"size":6200},"8ee63c52-223e-4884-b327-3a2844c1612e":{"last_event_published_time":"2020-02-25T04:14:54.713Z","last_event_timestamp":"2020-02-25T04:14:45.841Z","name":"/var/lib/docker/containers/9234fb587f435ecb625059b7baba8dbb4bc6c818478c969a5948ec874ca9f21e/9234fb587f435ecb625059b7baba8dbb4bc6c818478c969a5948ec874ca9f21e-json.log","read_offset":10519,"size":10519,"start_time":"2020-02-25T04:14:54.713Z"},"b7536ea9-2323-4ef6-8e1e-7341d8cd6e69":{"size":25804},"b86dcef1-0ee0-4003-ba34-3b5373a32f93":{"last_event_published_time":"2020-02-25T04:15:11.028Z","last_event_timestamp":"2020-02-25T04:15:09.714Z","read_offset":1448},"ce36c78c-acc0-4e61-bb9e-782236e9a338":{"last_event_published_time":"2020-02-25T04:14:51.104Z","last_event_timestamp":"2020-02-25T04:14:45.891Z","name":"/var/lib/docker/containers/d8e04137cdfe258661457041499720363cc31ea1d793e328e13800868c702be5/d8e04137cdfe258661457041499720363cc31ea1d793e328e13800868c702be5-json.log","read_offset":9684,"size":9684,"start_time":"2020-02-25T04:14:51.103Z"},"d7ff6bdb-9d98-47ff-bb1e-27fe94de3266":{"size":25804}},"open_files":10,"running":10,"started":2}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":11,"batches":6,"total":11},"read":{"bytes":2065},"write":{"bytes":27573}},"pipeline":{"clients":19,"events":{"active":0,"filtered":2,"published":11,"total":13},"queue":{"acked":11}}},"registrar":{"states":{"current":107,"update":13},"writes":{"success":8,"total":8}},"system":{"load":{"1":1.39,"15":1.36,"5":1.41,"norm":{"1":0.1737,"15":0.17,"5":0.1763}}}}}}
2020-02-25T04:15:45.914Z	INFO	[monitoring]	log/log.go:145	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":200,"time":{"ms":33}},"total":{"ticks":560,"time":{"ms":59},"value":560},"user":{"ticks":360,"time":{"ms":26}}},"handles":{"limit":{"hard":1048576,"soft":1048576},"open":22},"info":{"ephemeral_id":"c0c7819c-6100-405f-9dcc-5e6b18452576","uptime":{"ms":90035}},"memstats":{"gc_next":15037632,"memory_alloc":12765904,"memory_total":48829720,"rss":106496},"runtime":{"goroutines":200}},"filebeat":{"events":{"added":8,"done":8},"harvester":{"files":{"3b0de82d-a3c4-4d25-ad96-7e618d24fa7e":{"last_event_published_time":"2020-02-25T04:15:42.123Z","last_event_timestamp":"2020-02-25T04:15:33.768Z","read_offset":475},"59e6a4f1-9bfa-4711-85c2-57c6fa87e88b":{"last_event_published_time":"2020-02-25T04:15:37.123Z","last_event_timestamp":"2020-02-25T04:15:33.768Z","read_offset":475},"69846fbc-89be-4e03-978b-b839b4a50988":{"last_event_published_time":"2020-02-25T04:15:42.121Z","last_event_timestamp":"2020-02-25T04:15:33.768Z","read_offset":475},"76eaa826-7728-4c9a-b54a-7ccc69b333e5":{"last_event_published_time":"2020-02-25T04:15:20.717Z","last_event_timestamp":"2020-02-25T04:15:15.914Z","read_offset":2819,"size":2819},"8ee63c52-223e-4884-b327-3a2844c1612e":{"last_event_published_time":"2020-02-25T04:15:19.715Z","last_event_timestamp":"2020-02-25T04:15:15.842Z","read_offset":1604,"size":1604},"b7536ea9-2323-4ef6-8e1e-7341d8cd6e69":{"last_event_published_time":"2020-02-25T04:15:42.132Z","last_event_timestamp":"2020-02-25T04:15:33.768Z","read_offset":475},"b86dcef1-0ee0-4003-ba34-3b5373a32f93":{"size":1448},"ce36c78c-acc0-4e61-bb9e-782236e9a338":{"last_event_published_time":"2020-02-25T04:15:16.105Z","last_event_timestamp":"2020-02-25T04:15:15.891Z","read_offset":1390,"size":1390},"d7ff6bdb-9d98-47ff-bb1e-27fe94de3266":{"last_event_published_time":"2020-02-25T04:15:42.123Z","last_event_timestamp":"2020-02-25T04:15:33.768Z","read_offset":475}},"open_files":10,"running":10}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":8,"batches":5,"total":8},"read":{"bytes":1700},"write":{"bytes":24686}},"pipeline":{"clients":19,"events":{"active":0,"published":8,"total":8},"queue":{"acked":8}}},"registrar":{"states":{"current":107,"update":8},"writes":{"success":5,"total":5}},"system":{"load":{"1":1.23,"15":1.35,"5":1.37,"norm":{"1":0.1538,"15":0.1688,"5":0.1713}}}}}}
2020-02-25T04:16:15.914Z	INFO	[monitoring]	log/log.go:145	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":210,"time":{"ms":14}},"total":{"ticks":620,"time":{"ms":56},"value":620},"user":{"ticks":410,"time":{"ms":42}}},"handles":{"limit":{"hard":1048576,"soft":1048576},"open":22},"info":{"ephemeral_id":"c0c7819c-6100-405f-9dcc-5e6b18452576","uptime":{"ms":120035}},"memstats":{"gc_next":15080208,"memory_alloc":8380280,"memory_total":50942664},"runtime":{"goroutines":200}},"filebeat":{"events":{"added":3,"done":3},"harvester":{"files":{"3b0de82d-a3c4-4d25-ad96-7e618d24fa7e":{"size":475},"59e6a4f1-9bfa-4711-85c2-57c6fa87e88b":{"size":475},"69846fbc-89be-4e03-978b-b839b4a50988":{"size":475},"76eaa826-7728-4c9a-b54a-7ccc69b333e5":{"last_event_published_time":"2020-02-25T04:15:55.718Z","last_event_timestamp":"2020-02-25T04:15:45.915Z","read_offset":2808,"size":2808},"8ee63c52-223e-4884-b327-3a2844c1612e":{"last_event_published_time":"2020-02-25T04:15:54.716Z","last_event_timestamp":"2020-02-25T04:15:45.841Z","read_offset":1705,"size":1705},"b7536ea9-2323-4ef6-8e1e-7341d8cd6e69":{"size":475},"ce36c78c-acc0-4e61-bb9e-782236e9a338":{"last_event_published_time":"2020-02-25T04:15:51.107Z","last_event_timestamp":"2020-02-25T04:15:45.891Z","read_offset":1376,"size":1376},"d7ff6bdb-9d98-47ff-bb1e-27fe94de3266":{"size":475}},"open_files":10,"running":10}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":3,"batches":3,"total":3},"read":{"bytes":1008},"write":{"bytes":11027}},"pipeline":{"clients":19,"events":{"active":0,"published":3,"total":3},"queue":{"acked":3}}},"registrar":{"states":{"current":107,"update":3},"writes":{"success":3,"total":3}},"system":{"load":{"1":1.2,"15":1.35,"5":1.35,"norm":{"1":0.15,"15":0.1688,"5":0.1688}}}}}}
2020-02-25T04:16:45.914Z	INFO	[monitoring]	log/log.go:145	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":230,"time":{"ms":20}},"total":{"ticks":660,"time":{"ms":43},"value":660},"user":{"ticks":430,"time":{"ms":23}}},"handles":{"limit":{"hard":1048576,"soft":1048576},"open":22},"info":{"ephemeral_id":"c0c7819c-6100-405f-9dcc-5e6b18452576","uptime":{"ms":150034}},"memstats":{"gc_next":15080208,"memory_alloc":10641336,"memory_total":53203720},"runtime":{"goroutines":200}},"filebeat":{"events":{"added":3,"done":3},"harvester":{"files":{"76eaa826-7728-4c9a-b54a-7ccc69b333e5":{"last_event_published_time":"2020-02-25T04:16:20.720Z","last_event_timestamp":"2020-02-25T04:16:15.914Z","read_offset":2133,"size":2133},"8ee63c52-223e-4884-b327-3a2844c1612e":{"last_event_published_time":"2020-02-25T04:16:19.718Z","last_event_timestamp":"2020-02-25T04:16:15.841Z","read_offset":1604,"size":1604},"ce36c78c-acc0-4e61-bb9e-782236e9a338":{"last_event_published_time":"2020-02-25T04:16:16.108Z","last_event_timestamp":"2020-02-25T04:16:15.891Z","read_offset":1374,"size":1374}},"open_files":10,"running":10}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":3,"batches":3,"total":3},"read":{"bytes":1010},"write":{"bytes":10249}},"pipeline":{"clients":19,"events":{"active":0,"published":3,"total":3},"queue":{"acked":3}}},"registrar":{"states":{"current":107,"update":3},"writes":{"success":3,"total":3}},"system":{"load":{"1":1.19,"15":1.34,"5":1.33,"norm":{"1":0.1488,"15":0.1675,"5":0.1663}}}}}}
2020-02-25T04:17:15.914Z	INFO	[monitoring]	log/log.go:145	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":260,"time":{"ms":24}},"total":{"ticks":710,"time":{"ms":42},"value":710},"user":{"ticks":450,"time":{"ms":18}}},"handles":{"limit":{"hard":1048576,"soft":1048576},"open":22},"info":{"ephemeral_id":"c0c7819c-6100-405f-9dcc-5e6b18452576","uptime":{"ms":180034}},"memstats":{"gc_next":15080208,"memory_alloc":12920584,"memory_total":55482968},"runtime":{"goroutines":200}},"filebeat":{"events":{"added":3,"done":3},"harvester":{"files":{"76eaa826-7728-4c9a-b54a-7ccc69b333e5":{"last_event_published_time":"2020-02-25T04:16:55.721Z","last_event_timestamp":"2020-02-25T04:16:45.914Z","read_offset":1857,"size":1857},"8ee63c52-223e-4884-b327-3a2844c1612e":{"last_event_published_time":"2020-02-25T04:16:54.720Z","last_event_timestamp":"2020-02-25T04:16:45.841Z","read_offset":1706,"size":1706},"ce36c78c-acc0-4e61-bb9e-782236e9a338":{"last_event_published_time":"2020-02-25T04:16:51.110Z","last_event_timestamp":"2020-02-25T04:16:45.891Z","read_offset":1377,"size":1377}},"open_files":10,"running":10}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":3,"batches":3,"total":3},"read":{"bytes":1010},"write":{"bytes":10078}},"pipeline":{"clients":19,"events":{"active":0,"published":3,"total":3},"queue":{"acked":3}}},"registrar":{"states":{"current":107,"update":3},"writes":{"success":3,"total":3}},"system":{"load":{"1":1.11,"15":1.33,"5":1.3,"norm":{"1":0.1388,"15":0.1663,"5":0.1625}}}}}}
2020-02-25T04:17:45.914Z	INFO	[monitoring]	log/log.go:145	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":270,"time":{"ms":11}},"total":{"ticks":760,"time":{"ms":53},"value":760},"user":{"ticks":490,"time":{"ms":42}}},"handles":{"limit":{"hard":1048576,"soft":1048576},"open":22},"info":{"ephemeral_id":"c0c7819c-6100-405f-9dcc-5e6b18452576","uptime":{"ms":210034}},"memstats":{"gc_next":14980160,"memory_alloc":8395696,"memory_total":57627600},"runtime":{"goroutines":200}},"filebeat":{"events":{"added":3,"done":3},"harvester":{"files":{"76eaa826-7728-4c9a-b54a-7ccc69b333e5":{"last_event_published_time":"2020-02-25T04:17:20.723Z","last_event_timestamp":"2020-02-25T04:17:15.914Z","read_offset":1856,"size":1856},"8ee63c52-223e-4884-b327-3a2844c1612e":{"last_event_published_time":"2020-02-25T04:17:19.721Z","last_event_timestamp":"2020-02-25T04:17:15.842Z","read_offset":1607,"size":1607},"ce36c78c-acc0-4e61-bb9e-782236e9a338":{"last_event_published_time":"2020-02-25T04:17:16.111Z","last_event_timestamp":"2020-02-25T04:17:15.892Z","read_offset":1391,"size":1391}},"open_files":10,"running":10}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":3,"batches":3,"total":3},"read":{"bytes":1011},"write":{"bytes":9992}},"pipeline":{"clients":19,"events":{"active":0,"published":3,"total":3},"queue":{"acked":3}}},"registrar":{"states":{"current":107,"update":3},"writes":{"success":3,"total":3}},"system":{"load":{"1":1.07,"15":1.32,"5":1.27,"norm":{"1":0.1338,"15":0.165,"5":0.1588}}}}}}