[zeus@mainqa-atlcolo-10-0-7-165 ~]$ sudo cat /opt/Elastic/Agent/data/elastic-agent-81dc89/logs/elastic-agent-json.log
{"log.level":"info","@timestamp":"2020-10-16T15:35:43.778-0400","log.origin":{"file.name":"warn/warn.go","file.line":18},"message":"The Elastic Agent is currently in BETA and should not be used in production","ecs.version":"1.5.0"}
{"log.level":"info","@timestamp":"2020-10-16T15:35:43.778-0400","log.origin":{"file.name":"application/application.go","file.line":58},"message":"Detecting execution mode","ecs.version":"1.5.0"}
{"log.level":"info","@timestamp":"2020-10-16T15:35:43.778-0400","log.origin":{"file.name":"application/application.go","file.line":71},"message":"Agent is managed by Fleet","ecs.version":"1.5.0"}
{"log.level":"info","@timestamp":"2020-10-16T15:35:44.124-0400","log.logger":"composable","log.origin":{"file.name":"composable/controller.go","file.line":44},"message":"EXPERIMENTAL - Inputs with variables are currently experimental and should not be used in production","ecs.version":"1.5.0"}
{"log.level":"debug","@timestamp":"2020-10-16T15:35:44.124-0400","log.origin":{"file.name":"application/emitter.go","file.line":146},"message":"Supported programs: Metricbeat, Endpoint Security, Filebeat, Heartbeat","ecs.version":"1.5.0"}
{"log.level":"debug","@timestamp":"2020-10-16T15:35:44.126-0400","log.logger":"docker","log.origin":{"file.name":"docker/client.go","file.line":48},"message":"Docker client will negotiate the API version on the first request.","ecs.version":"1.5.0"}
{"log.level":"info","@timestamp":"2020-10-16T15:35:44.126-0400","log.logger":"composable.providers.docker","log.origin":{"file.name":"docker/docker.go","file.line":40},"message":"Docker provider skipped, unable to connect: Cannot connect to the Docker daemon at unix:///var/run/docker.sock. Is the docker daemon running?","ecs.version":"1.5.0"}
{"log.level":"debug","@timestamp":"2020-10-16T15:35:44.126-0400","log.logger":"composable.providers.kubernetes","log.origin":{"file.name":"kubernetes/kubernetes.go","file.line":51},"message":"Kubernetes provider skipped, unable to connect: unable to build kube config due to error: invalid configuration: no configuration has been provided, try setting KUBERNETES_MASTER environment variable","ecs.version":"1.5.0"}
{"log.level":"info","@timestamp":"2020-10-16T15:35:44.127-0400","log.origin":{"file.name":"application/action_store.go","file.line":182},"message":"restoring current policy from disk","ecs.version":"1.5.0"}
{"log.level":"debug","@timestamp":"2020-10-16T15:35:44.127-0400","log.origin":{"file.name":"application/action_dispatcher.go","file.line":81},"message":"Dispatch 1 actions of types: *fleetapi.ActionPolicyChange","ecs.version":"1.5.0"}
{"log.level":"debug","@timestamp":"2020-10-16T15:35:44.127-0400","log.origin":{"file.name":"application/handler_action_policy_change.go","file.line":41},"message":"handlerPolicyChange: action 'action_id: 48712391-c110-4bbe-bf80-a6bb046847bc, type: POLICY_CHANGE' received","ecs.version":"1.5.0"}
{"log.level":"debug","@timestamp":"2020-10-16T15:35:44.128-0400","log.origin":{"file.name":"application/handler_action_policy_change.go","file.line":52},"message":"handlerPolicyChange: emit configuration for action action_id: 48712391-c110-4bbe-bf80-a6bb046847bc, type: POLICY_CHANGE","ecs.version":"1.5.0"}
{"log.level":"debug","@timestamp":"2020-10-16T15:35:44.129-0400","log.origin":{"file.name":"application/emitter.go","file.line":120},"message":"Converting single configuration into specific programs configuration","ecs.version":"1.5.0"}
{"log.level":"debug","@timestamp":"2020-10-16T15:35:44.138-0400","log.origin":{"file.name":"application/router.go","file.line":65},"message":"Creating stream: default","ecs.version":"1.5.0"}
{"log.level":"debug","@timestamp":"2020-10-16T15:35:44.139-0400","log.origin":{"file.name":"application/router.go","file.line":80},"message":"Streams default need to run config with ID auwrpYOS and programs: Metricbeat, Filebeat, FLEET_MONITORING","ecs.version":"1.5.0"}
{"log.level":"info","@timestamp":"2020-10-16T15:35:44.139-0400","log.origin":{"file.name":"stateresolver/stateresolver.go","file.line":47},"message":"New State ID is auwrpYOS","ecs.version":"1.5.0"}
{"log.level":"info","@timestamp":"2020-10-16T15:35:44.141-0400","log.origin":{"file.name":"stateresolver/stateresolver.go","file.line":48},"message":"Converging state requires execution of 3 step(s)","ecs.version":"1.5.0"}
{"log.level":"debug","@timestamp":"2020-10-16T15:35:44.141-0400","log.origin":{"file.name":"operation/operator.go","file.line":250},"message":"operator is looking for metricbeat--7.10.0 in app collection: map[]","ecs.version":"1.5.0"}
{"log.level":"info","@timestamp":"2020-10-16T15:35:44.141-0400","log.origin":{"file.name":"operation/operation_fetch.go","file.line":61},"message":"metricbeat.7.10.0 already exists in /opt/Elastic/Agent/data/elastic-agent-81dc89/downloads/metricbeat-7.10.0-linux-x86_64.tar.gz. Skipping operation operation-fetch","ecs.version":"1.5.0"}
{"log.level":"debug","@timestamp":"2020-10-16T15:35:44.141-0400","log.origin":{"file.name":"operation/operator.go","file.line":230},"message":"running operation 'retryable block: operation-fetch operation-verify' for metricbeat.7.10.0","ecs.version":"1.5.0"}
{"log.level":"info","@timestamp":"2020-10-16T15:35:44.141-0400","log.origin":{"file.name":"operation/operation_fetch.go","file.line":61},"message":"metricbeat.7.10.0 already exists in /opt/Elastic/Agent/data/elastic-agent-81dc89/downloads/metricbeat-7.10.0-linux-x86_64.tar.gz. Skipping operation operation-fetch","ecs.version":"1.5.0"}
{"log.level":"debug","@timestamp":"2020-10-16T15:35:44.141-0400","log.origin":{"file.name":"operation/operation_retryable.go","file.line":83},"message":"running operation 'operation-verify' of the block 'retryable block: operation-fetch operation-verify'","ecs.version":"1.5.0"}
{"log.level":"info","@timestamp":"2020-10-16T15:35:44.642-0400","log.origin":{"file.name":"operation/operator.go","file.line":226},"message":"operation 'operation-install' skipped for metricbeat.7.10.0","ecs.version":"1.5.0"}
{"log.level":"debug","@timestamp":"2020-10-16T15:35:44.642-0400","log.origin":{"file.name":"operation/operator.go","file.line":230},"message":"running operation 'operation-start' for metricbeat.7.10.0","ecs.version":"1.5.0"}
{"log.level":"debug","@timestamp":"2020-10-16T15:35:45.066-0400","log.origin":{"file.name":"operation/operator.go","file.line":230},"message":"running operation 'operation-config' for metricbeat.7.10.0","ecs.version":"1.5.0"}
{"log.level":"debug","@timestamp":"2020-10-16T15:35:45.068-0400","log.origin":{"file.name":"operation/operator.go","file.line":250},"message":"operator is looking for filebeat--7.10.0 in app collection: map[metricbeat--7.10.0:0xc00003a240]","ecs.version":"1.5.0"}
{"log.level":"info","@timestamp":"2020-10-16T15:35:45.068-0400","log.origin":{"file.name":"operation/operation_fetch.go","file.line":61},"message":"filebeat.7.10.0 already exists in /opt/Elastic/Agent/data/elastic-agent-81dc89/downloads/filebeat-7.10.0-linux-x86_64.tar.gz. Skipping operation operation-fetch","ecs.version":"1.5.0"}
{"log.level":"debug","@timestamp":"2020-10-16T15:35:45.068-0400","log.origin":{"file.name":"operation/operator.go","file.line":230},"message":"running operation 'retryable block: operation-fetch operation-verify' for filebeat.7.10.0","ecs.version":"1.5.0"}
{"log.level":"info","@timestamp":"2020-10-16T15:35:45.068-0400","log.origin":{"file.name":"operation/operation_fetch.go","file.line":61},"message":"filebeat.7.10.0 already exists in /opt/Elastic/Agent/data/elastic-agent-81dc89/downloads/filebeat-7.10.0-linux-x86_64.tar.gz. Skipping operation operation-fetch","ecs.version":"1.5.0"}
{"log.level":"debug","@timestamp":"2020-10-16T15:35:45.068-0400","log.origin":{"file.name":"operation/operation_retryable.go","file.line":83},"message":"running operation 'operation-verify' of the block 'retryable block: operation-fetch operation-verify'","ecs.version":"1.5.0"}
{"log.level":"info","@timestamp":"2020-10-16T15:35:45.111-0400","log.origin":{"file.name":"log/reporter.go","file.line":40},"message":"2020-10-16T15:35:45-04:00: type: 'STATE': sub_type: 'STARTING' message: Application: metricbeat--7.10.0[44208410-39c0-484e-825f-f0e2c6da3f16]: State changed to STARTING: Starting","ecs.version":"1.5.0"}
{"log.level":"info","@timestamp":"2020-10-16T15:35:45.595-0400","log.origin":{"file.name":"operation/operator.go","file.line":226},"message":"operation 'operation-install' skipped for filebeat.7.10.0","ecs.version":"1.5.0"}
{"log.level":"debug","@timestamp":"2020-10-16T15:35:45.595-0400","log.origin":{"file.name":"operation/operator.go","file.line":230},"message":"running operation 'operation-start' for filebeat.7.10.0","ecs.version":"1.5.0"}
{"log.level":"debug","@timestamp":"2020-10-16T15:35:46.096-0400","log.origin":{"file.name":"operation/operator.go","file.line":230},"message":"running operation 'operation-config' for filebeat.7.10.0","ecs.version":"1.5.0"}
{"log.level":"debug","@timestamp":"2020-10-16T15:35:46.097-0400","log.origin":{"file.name":"operation/monitoring.go","file.line":256},"message":"monitoring configuration generated for filebeat: map[filebeat:map[inputs:[map[index:logs-elastic.agent-default json:map[keys_under_root:true message_key:message overwrite_keys:true] paths:[/opt/Elastic/Agent/data/elastic-agent-81dc89/logs/elastic-agent-json.log] processors:[map[add_fields:map[fields:map[dataset:elastic.agent namespace:default type:logs] target:data_stream]] map[add_fields:map[fields:map[dataset:elastic.agent] target:event]]] type:log] map[index:logs-elastic.agent.metricbeat-default json:map[keys_under_root:true message_key:message overwrite_keys:true] paths:[/opt/Elastic/Agent/data/elastic-agent-81dc89/logs/default/metricbeat-json.log] processors:[map[add_fields:map[fields:map[dataset:elastic.agent.metricbeat namespace:default type:logs] target:data_stream]] map[add_fields:map[fields:map[dataset:elastic.agent.metricbeat] target:event]]] type:log] map[index:logs-elastic.agent.filebeat-default json:map[keys_under_root:true message_key:message overwrite_keys:true] paths:[/opt/Elastic/Agent/data/elastic-agent-81dc89/logs/default/filebeat-json.log] processors:[map[add_fields:map[fields:map[dataset:elastic.agent.filebeat namespace:default type:logs] target:data_stream]] map[add_fields:map[fields:map[dataset:elastic.agent.filebeat] target:event]]] type:log]]] output:map[elasticsearch:map[api_key:nYjkMnUBvPb65-IPiSbl:uFIkRTg_Tmy70eeuROfzPQ hosts:[https://25ea75effce44277a2191706937bcba3.us-central1.gcp.foundit.no:443] type:elasticsearch]]]","ecs.version":"1.5.0"}
{"log.level":"debug","@timestamp":"2020-10-16T15:35:46.097-0400","log.origin":{"file.name":"operation/monitoring.go","file.line":305},"message":"monitoring configuration generated for metricbeat: map[metricbeat:map[modules:[map[hosts:[http+unix:///tmp/elastic-agent/default/metricbeat/metricbeat.sock] index:metrics-elastic.agent.metricbeat-default metricsets:[stats state] module:beat period:10s processors:[map[add_fields:map[fields:map[dataset:elastic.agent.metricbeat namespace:default type:metrics] target:data_stream]] map[add_fields:map[fields:map[dataset:elastic.agent.metricbeat] target:event]]]] map[hosts:[http+unix:///tmp/elastic-agent/default/filebeat/filebeat.sock] index:metrics-elastic.agent.filebeat-default metricsets:[stats state] module:beat period:10s processors:[map[add_fields:map[fields:map[dataset:elastic.agent.filebeat namespace:default type:metrics] target:data_stream]] map[add_fields:map[fields:map[dataset:elastic.agent.filebeat] target:event]]]]]] output:map[elasticsearch:map[api_key:nYjkMnUBvPb65-IPiSbl:uFIkRTg_Tmy70eeuROfzPQ hosts:[https://25ea75effce44277a2191706937bcba3.us-central1.gcp.foundit.no:443] type:elasticsearch]]]","ecs.version":"1.5.0"}
{"log.level":"debug","@timestamp":"2020-10-16T15:35:46.097-0400","log.origin":{"file.name":"operation/operator.go","file.line":250},"message":"operator is looking for filebeat--7.10.0--36643631373035623733363936343635 in app collection: map[filebeat--7.10.0:0xc0005edb00 metricbeat--7.10.0:0xc00003a240]","ecs.version":"1.5.0"}
{"log.level":"info","@timestamp":"2020-10-16T15:35:46.097-0400","log.origin":{"file.name":"operation/operation_fetch.go","file.line":61},"message":"filebeat.7.10.0 already exists in /opt/Elastic/Agent/data/elastic-agent-81dc89/downloads/filebeat-7.10.0-linux-x86_64.tar.gz. Skipping operation operation-fetch","ecs.version":"1.5.0"}
{"log.level":"debug","@timestamp":"2020-10-16T15:35:46.097-0400","log.origin":{"file.name":"operation/operator.go","file.line":230},"message":"running operation 'retryable block: operation-fetch operation-verify' for filebeat.7.10.0","ecs.version":"1.5.0"}
{"log.level":"info","@timestamp":"2020-10-16T15:35:46.097-0400","log.origin":{"file.name":"operation/operation_fetch.go","file.line":61},"message":"filebeat.7.10.0 already exists in /opt/Elastic/Agent/data/elastic-agent-81dc89/downloads/filebeat-7.10.0-linux-x86_64.tar.gz. Skipping operation operation-fetch","ecs.version":"1.5.0"}
{"log.level":"debug","@timestamp":"2020-10-16T15:35:46.097-0400","log.origin":{"file.name":"operation/operation_retryable.go","file.line":83},"message":"running operation 'operation-verify' of the block 'retryable block: operation-fetch operation-verify'","ecs.version":"1.5.0"}
{"log.level":"info","@timestamp":"2020-10-16T15:35:46.107-0400","log.origin":{"file.name":"log/reporter.go","file.line":40},"message":"2020-10-16T15:35:46-04:00: type: 'STATE': sub_type: 'STARTING' message: Application: filebeat--7.10.0[44208410-39c0-484e-825f-f0e2c6da3f16]: State changed to STARTING: Starting","ecs.version":"1.5.0"}
{"log.level":"info","@timestamp":"2020-10-16T15:35:46.607-0400","log.origin":{"file.name":"operation/operator.go","file.line":226},"message":"operation 'operation-install' skipped for filebeat.7.10.0","ecs.version":"1.5.0"}
{"log.level":"debug","@timestamp":"2020-10-16T15:35:46.607-0400","log.origin":{"file.name":"operation/operator.go","file.line":230},"message":"running operation 'operation-start' for filebeat.7.10.0","ecs.version":"1.5.0"}
{"log.level":"debug","@timestamp":"2020-10-16T15:35:46.888-0400","log.origin":{"file.name":"operation/operator.go","file.line":230},"message":"running operation 'operation-config' for filebeat.7.10.0","ecs.version":"1.5.0"}
{"log.level":"debug","@timestamp":"2020-10-16T15:35:46.888-0400","log.origin":{"file.name":"operation/operator.go","file.line":250},"message":"operator is looking for metricbeat--7.10.0--36643631373035623733363936343635 in app collection: map[filebeat--7.10.0:0xc0005edb00 filebeat--7.10.0--36643631373035623733363936343635:0xc00051a120 metricbeat--7.10.0:0xc00003a240]","ecs.version":"1.5.0"}
{"log.level":"info","@timestamp":"2020-10-16T15:35:46.888-0400","log.origin":{"file.name":"operation/operation_fetch.go","file.line":61},"message":"metricbeat.7.10.0 already exists in /opt/Elastic/Agent/data/elastic-agent-81dc89/downloads/metricbeat-7.10.0-linux-x86_64.tar.gz. Skipping operation operation-fetch","ecs.version":"1.5.0"}
{"log.level":"debug","@timestamp":"2020-10-16T15:35:46.888-0400","log.origin":{"file.name":"operation/operator.go","file.line":230},"message":"running operation 'retryable block: operation-fetch operation-verify' for metricbeat.7.10.0","ecs.version":"1.5.0"}
{"log.level":"info","@timestamp":"2020-10-16T15:35:46.888-0400","log.origin":{"file.name":"operation/operation_fetch.go","file.line":61},"message":"metricbeat.7.10.0 already exists in /opt/Elastic/Agent/data/elastic-agent-81dc89/downloads/metricbeat-7.10.0-linux-x86_64.tar.gz. Skipping operation operation-fetch","ecs.version":"1.5.0"}
{"log.level":"debug","@timestamp":"2020-10-16T15:35:46.888-0400","log.origin":{"file.name":"operation/operation_retryable.go","file.line":83},"message":"running operation 'operation-verify' of the block 'retryable block: operation-fetch operation-verify'","ecs.version":"1.5.0"}
{"log.level":"info","@timestamp":"2020-10-16T15:35:46.899-0400","log.origin":{"file.name":"log/reporter.go","file.line":40},"message":"2020-10-16T15:35:46-04:00: type: 'STATE': sub_type: 'STARTING' message: Application: filebeat--7.10.0--36643631373035623733363936343635[44208410-39c0-484e-825f-f0e2c6da3f16]: State changed to STARTING: Starting","ecs.version":"1.5.0"}
{"log.level":"info","@timestamp":"2020-10-16T15:35:47.479-0400","log.origin":{"file.name":"operation/operator.go","file.line":226},"message":"operation 'operation-install' skipped for metricbeat.7.10.0","ecs.version":"1.5.0"}
{"log.level":"debug","@timestamp":"2020-10-16T15:35:47.479-0400","log.origin":{"file.name":"operation/operator.go","file.line":230},"message":"running operation 'operation-start' for metricbeat.7.10.0","ecs.version":"1.5.0"}
{"log.level":"debug","@timestamp":"2020-10-16T15:35:47.954-0400","log.origin":{"file.name":"operation/operator.go","file.line":230},"message":"running operation 'operation-config' for metricbeat.7.10.0","ecs.version":"1.5.0"}
{"log.level":"info","@timestamp":"2020-10-16T15:35:47.954-0400","log.origin":{"file.name":"stateresolver/stateresolver.go","file.line":61},"message":"Updating internal state","ecs.version":"1.5.0"}
{"log.level":"debug","@timestamp":"2020-10-16T15:35:47.954-0400","log.origin":{"file.name":"application/action_dispatcher.go","file.line":96},"message":"Successfully dispatched action: 'action_id: 48712391-c110-4bbe-bf80-a6bb046847bc, type: POLICY_CHANGE'","ecs.version":"1.5.0"}
{"log.level":"debug","@timestamp":"2020-10-16T15:35:47.955-0400","log.origin":{"file.name":"kibana/client.go","file.line":170},"message":"Request method: POST, path: /api/fleet/agents/44208410-39c0-484e-825f-f0e2c6da3f16/acks","ecs.version":"1.5.0"}
{"log.level":"info","@timestamp":"2020-10-16T15:35:47.957-0400","log.origin":{"file.name":"log/reporter.go","file.line":40},"message":"2020-10-16T15:35:47-04:00: type: 'STATE': sub_type: 'STARTING' message: Application: metricbeat--7.10.0--36643631373035623733363936343635[44208410-39c0-484e-825f-f0e2c6da3f16]: State changed to STARTING: Starting","ecs.version":"1.5.0"}
{"log.level":"debug","@timestamp":"2020-10-16T15:35:47.974-0400","log.origin":{"file.name":"application/emitter.go","file.line":120},"message":"Converting single configuration into specific programs configuration","ecs.version":"1.5.0"}
{"log.level":"debug","@timestamp":"2020-10-16T15:35:47.978-0400","log.origin":{"file.name":"application/router.go","file.line":80},"message":"Streams default need to run config with ID auwrpYOS and programs: Metricbeat, Filebeat, FLEET_MONITORING","ecs.version":"1.5.0"}
{"log.level":"info","@timestamp":"2020-10-16T15:35:47.979-0400","log.origin":{"file.name":"stateresolver/stateresolver.go","file.line":47},"message":"New State ID is auwrpYOS","ecs.version":"1.5.0"}
{"log.level":"info","@timestamp":"2020-10-16T15:35:47.979-0400","log.origin":{"file.name":"stateresolver/stateresolver.go","file.line":48},"message":"Converging state requires execution of 0 step(s)","ecs.version":"1.5.0"}
{"log.level":"info","@timestamp":"2020-10-16T15:35:47.979-0400","log.origin":{"file.name":"stateresolver/stateresolver.go","file.line":61},"message":"Updating internal state","ecs.version":"1.5.0"}
{"log.level":"info","@timestamp":"2020-10-16T15:35:49.322-0400","log.origin":{"file.name":"log/reporter.go","file.line":40},"message":"2020-10-16T15:35:49-04:00: type: 'STATE': sub_type: 'RUNNING' message: Application: metricbeat--7.10.0[44208410-39c0-484e-825f-f0e2c6da3f16]: State changed to RUNNING: Running","ecs.version":"1.5.0"}
{"log.level":"info","@timestamp":"2020-10-16T15:35:50.103-0400","log.origin":{"file.name":"application/managed_mode.go","file.line":286},"message":"Agent is starting","ecs.version":"1.5.0"}
{"log.level":"debug","@timestamp":"2020-10-16T15:35:50.103-0400","log.origin":{"file.name":"kibana/client.go","file.line":170},"message":"Request method: POST, path: /api/fleet/agents/44208410-39c0-484e-825f-f0e2c6da3f16/acks","ecs.version":"1.5.0"}
{"log.level":"info","@timestamp":"2020-10-16T15:35:50.323-0400","log.origin":{"file.name":"log/reporter.go","file.line":40},"message":"2020-10-16T15:35:50-04:00: type: 'STATE': sub_type: 'RUNNING' message: Application: filebeat--7.10.0[44208410-39c0-484e-825f-f0e2c6da3f16]: State changed to RUNNING: Running","ecs.version":"1.5.0"}
{"log.level":"info","@timestamp":"2020-10-16T15:35:51.137-0400","log.origin":{"file.name":"log/reporter.go","file.line":40},"message":"2020-10-16T15:35:51-04:00: type: 'STATE': sub_type: 'RUNNING' message: Application: filebeat--7.10.0--36643631373035623733363936343635[44208410-39c0-484e-825f-f0e2c6da3f16]: State changed to RUNNING: Running","ecs.version":"1.5.0"}
{"log.level":"info","@timestamp":"2020-10-16T15:35:52.099-0400","log.origin":{"file.name":"log/reporter.go","file.line":40},"message":"2020-10-16T15:35:52-04:00: type: 'STATE': sub_type: 'RUNNING' message: Application: metricbeat--7.10.0--36643631373035623733363936343635[44208410-39c0-484e-825f-f0e2c6da3f16]: State changed to RUNNING: Running","ecs.version":"1.5.0"}
{"log.level":"info","@timestamp":"2020-10-16T15:35:53.071-0400","log.origin":{"file.name":"log/reporter.go","file.line":40},"message":"2020-10-16T15:35:53-04:00: type: 'STATE': sub_type: 'RUNNING' message: Application: [44208410-39c0-484e-825f-f0e2c6da3f16]: State changed to RUNNING: ","ecs.version":"1.5.0"}
{"log.level":"debug","@timestamp":"2020-10-16T15:35:53.329-0400","log.origin":{"file.name":"application/fleet_gateway.go","file.line":142},"message":"FleetGateway calling Checkin API","ecs.version":"1.5.0"}
{"log.level":"debug","@timestamp":"2020-10-16T15:35:53.331-0400","log.origin":{"file.name":"kibana/client.go","file.line":170},"message":"Request method: POST, path: /api/fleet/agents/44208410-39c0-484e-825f-f0e2c6da3f16/checkin","ecs.version":"1.5.0"}
{"log.level":"info","@timestamp":"2020-10-16T15:38:18.784-0400","log.origin":{"file.name":"cmd/run.go","file.line":135},"message":"Shutting down Elastic Agent and sending last events...","ecs.version":"1.5.0"}
{"log.level":"info","@timestamp":"2020-10-16T15:38:18.784-0400","log.origin":{"file.name":"process/app.go","file.line":161},"message":"Signaling application to stop because of shutdown: metricbeat--7.10.0--36643631373035623733363936343635","ecs.version":"1.5.0"}
{"log.level":"error","@timestamp":"2020-10-16T15:38:18.784-0400","log.origin":{"file.name":"application/fleet_gateway.go","file.line":176},"message":"Could not communicate with Checking API will retry, error: fail to checkin to fleet: Post \"https://af4a8387d9934256aa5ff4f90cc0b837.us-central1.gcp.foundit.no:443/api/fleet/agents/44208410-39c0-484e-825f-f0e2c6da3f16/checkin?\": context canceled","ecs.version":"1.5.0"}
{"log.level":"info","@timestamp":"2020-10-16T15:38:19.284-0400","log.origin":{"file.name":"process/app.go","file.line":161},"message":"Signaling application to stop because of shutdown: metricbeat--7.10.0","ecs.version":"1.5.0"}
{"log.level":"info","@timestamp":"2020-10-16T15:38:19.284-0400","log.origin":{"file.name":"log/reporter.go","file.line":40},"message":"2020-10-16T15:38:19-04:00: type: 'STATE': sub_type: 'STOPPED' message: Application: metricbeat--7.10.0[44208410-39c0-484e-825f-f0e2c6da3f16]: State changed to STOPPED: Stopped","ecs.version":"1.5.0"}
{"log.level":"info","@timestamp":"2020-10-16T15:38:19.284-0400","log.origin":{"file.name":"log/reporter.go","file.line":40},"message":"2020-10-16T15:38:19-04:00: type: 'STATE': sub_type: 'STOPPED' message: Application: metricbeat--7.10.0--36643631373035623733363936343635[44208410-39c0-484e-825f-f0e2c6da3f16]: State changed to STOPPED: Stopped","ecs.version":"1.5.0"}
{"log.level":"info","@timestamp":"2020-10-16T15:38:19.285-0400","log.origin":{"file.name":"log/reporter.go","file.line":40},"message":"2020-10-16T15:38:19-04:00: type: 'STATE': sub_type: 'STOPPED' message: Application: filebeat--7.10.0--36643631373035623733363936343635[44208410-39c0-484e-825f-f0e2c6da3f16]: State changed to STOPPED: Stopped","ecs.version":"1.5.0"}
{"log.level":"info","@timestamp":"2020-10-16T15:38:19.285-0400","log.origin":{"file.name":"log/reporter.go","file.line":40},"message":"2020-10-16T15:38:19-04:00: type: 'STATE': sub_type: 'STOPPED' message: Application: filebeat--7.10.0[44208410-39c0-484e-825f-f0e2c6da3f16]: State changed to STOPPED: Stopped","ecs.version":"1.5.0"}
{"log.level":"info","@timestamp":"2020-10-16T15:38:49.292-0400","log.origin":{"file.name":"process/app.go","file.line":161},"message":"Signaling application to stop because of shutdown: filebeat--7.10.0","ecs.version":"1.5.0"}
{"log.level":"info","@timestamp":"2020-10-16T15:38:49.293-0400","log.origin":{"file.name":"process/app.go","file.line":161},"message":"Signaling application to stop because of shutdown: filebeat--7.10.0--36643631373035623733363936343635","ecs.version":"1.5.0"}
{"log.level":"info","@timestamp":"2020-10-16T15:38:49.293-0400","log.origin":{"file.name":"application/managed_mode.go","file.line":306},"message":"Agent is stopped","ecs.version":"1.5.0"}
{"log.level":"info","@timestamp":"2020-10-16T15:38:49.293-0400","log.origin":{"file.name":"cmd/run.go","file.line":143},"message":"Shutting down completed.","ecs.version":"1.5.0"}
{"log.level":"error","@timestamp":"2020-10-16T15:38:49.294-0400","log.logger":"control","log.origin":{"file.name":"server/listener.go","file.line":52},"message":"Failed to cleanup /run/elastic-agent.sock: remove /run/elastic-agent.sock: no such file or directory","ecs.version":"1.5.0"}