Skip to content

[Agent] macOS or Linux Agent will show as unhealthy / error state if 'Windows' Integration is in policy used #23996

@EricDavisX

Description

@EricDavisX

7.11.0 shipped Beta build

From Security team:
noticed that the Endpoint/Fleet behavior changed with regards to integrations.

In 7.10 I made a single policy for all of the hosts and just put the Linux, Windows, and Mac endpoints under that Policy. In 7.11 my Mac hosts are always in an error state because the Windows integration won’t load.

Work-around is to use separate policy for each OS variant.

error in Agent logs:
[elastic_agent][error] 2021-02-11T07:45:45-05:00: type: 'ERROR': sub_type: 'FAILED' message: Application: filebeat--7.11.0[47c935b0-6bba-11eb-b89f-d98cec7202ae]: State changed to FAILED: 1 error: 5 errors: Error creating runner from config: failed in processor.javascript: GoError: Could not load module 'windows': cannot load windows, only built-in modules are supported; Error creating runner from config: failed in processor.javascript: GoError: Could not load module 'windows': cannot load windows, only built-in modules are supported; Error creating runner from config: failed in processor.javascript: GoError: Could not load module 'windows': cannot load windows, only built-in modules are supported; Error creating runner from config: failed in processor.javascript: GoError: Could not load module 'windows': cannot load windows, only built-in modules are supported; Error creating runner from config: failed in processor.javascript: GoError: Could not load module 'windows': cannot load windows, only built-in modules are supported

Screen Shot 2021-02-11 at 7 47 09 AM

Metadata

Metadata

Assignees

No one assigned

    Labels

    Team:IntegrationsLabel for the Integrations teamimpact:highShort-term priority; add to current release, or definitely next.

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions