Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[docs] Indicate that SYSTEM user is required on Windows to use Endpoint #20172

Merged
merged 1 commit into from
Jul 23, 2020

Conversation

dedemorton
Copy link
Contributor

@dedemorton dedemorton commented Jul 23, 2020

What does this PR do?

Updates Elastic Agent docs to indicate that the agent must be run under the SYSTEM user to use the Endpoint integration.

Why is it important?

Users will run into a "Agent process is not root/admin or validation failed" error on Win if they don't run under SYSTEM.

Related issues

(I'm also writing a troubleshooting topic with more detail. I'll add the link here when it's ready.)

Note that the current docs do not show platform-specific commands. I will fix that...just waiting for the final design of our tabbed panel widget to avoid having to redo the work.

@dedemorton dedemorton added docs needs_backport PR is waiting to be backported to other branches. Team:Ingest Management Agent labels Jul 23, 2020
@dedemorton dedemorton self-assigned this Jul 23, 2020
@botelastic botelastic bot added needs_team Indicates that the issue/PR needs a Team:* label and removed needs_team Indicates that the issue/PR needs a Team:* label labels Jul 23, 2020
@elasticmachine
Copy link
Collaborator

💔 Build Failed

Pipeline View Test View Changes Artifacts preview

Expand to view the summary

Build stats

  • Build Cause: [Pull request #20172 opened]

  • Start Time: 2020-07-23T02:04:33.110+0000

  • Duration: 6 min 19 sec

Log output

Expand to view the last 100 lines of log output

[2020-07-23T02:10:44.149Z] Stage "Elastic Agent Mac OS X" skipped due to earlier failure(s)
[2020-07-23T02:10:44.161Z] Stage "Filebeat oss" skipped due to earlier failure(s)
[2020-07-23T02:10:44.174Z] Stage "Filebeat x-pack" skipped due to earlier failure(s)
[2020-07-23T02:10:44.185Z] Stage "Filebeat Mac OS X" skipped due to earlier failure(s)
[2020-07-23T02:10:44.196Z] Stage "Filebeat x-pack Mac OS X" skipped due to earlier failure(s)
[2020-07-23T02:10:44.208Z] Stage "Filebeat Windows" skipped due to earlier failure(s)
[2020-07-23T02:10:44.219Z] Stage "Filebeat x-pack Windows" skipped due to earlier failure(s)
[2020-07-23T02:10:44.231Z] Stage "Heartbeat" skipped due to earlier failure(s)
[2020-07-23T02:10:44.237Z] Stage "Auditbeat oss Linux" skipped due to earlier failure(s)
[2020-07-23T02:10:44.249Z] Stage "Auditbeat crosscompile" skipped due to earlier failure(s)
[2020-07-23T02:10:44.260Z] Stage "Auditbeat oss Mac OS X" skipped due to earlier failure(s)
[2020-07-23T02:10:44.272Z] Stage "Auditbeat oss Windows" skipped due to earlier failure(s)
[2020-07-23T02:10:44.283Z] Stage "Auditbeat x-pack" skipped due to earlier failure(s)
[2020-07-23T02:10:44.296Z] Stage "Auditbeat x-pack Mac OS X" skipped due to earlier failure(s)
[2020-07-23T02:10:44.307Z] Stage "Auditbeat x-pack Windows" skipped due to earlier failure(s)
[2020-07-23T02:10:44.319Z] Stage "Libbeat" skipped due to earlier failure(s)
[2020-07-23T02:10:44.325Z] Stage "Libbeat x-pack" skipped due to earlier failure(s)
[2020-07-23T02:10:44.337Z] Stage "Metricbeat OSS Unit tests" skipped due to earlier failure(s)
[2020-07-23T02:10:44.348Z] Stage "Metricbeat OSS Go Integration tests" skipped due to earlier failure(s)
[2020-07-23T02:10:44.359Z] Stage "Metricbeat OSS Python Integration tests" skipped due to earlier failure(s)
[2020-07-23T02:10:44.370Z] Stage "Metricbeat x-pack" skipped due to earlier failure(s)
[2020-07-23T02:10:44.377Z] Stage "Metricbeat crosscompile" skipped due to earlier failure(s)
[2020-07-23T02:10:44.389Z] Stage "Metricbeat Mac OS X" skipped due to earlier failure(s)
[2020-07-23T02:10:44.401Z] Stage "Metricbeat x-pack Mac OS X" skipped due to earlier failure(s)
[2020-07-23T02:10:44.412Z] Stage "Metricbeat Windows" skipped due to earlier failure(s)
[2020-07-23T02:10:44.424Z] Stage "Metricbeat x-pack Windows" skipped due to earlier failure(s)
[2020-07-23T02:10:44.436Z] Stage "Packetbeat OSS" skipped due to earlier failure(s)
[2020-07-23T02:10:44.442Z] Stage "dockerlogbeat" skipped due to earlier failure(s)
[2020-07-23T02:10:44.449Z] Stage "Winlogbeat" skipped due to earlier failure(s)
[2020-07-23T02:10:44.455Z] Stage "Winlogbeat Windows x-pack" skipped due to earlier failure(s)
[2020-07-23T02:10:44.466Z] Stage "Functionbeat" skipped due to earlier failure(s)
[2020-07-23T02:10:44.472Z] Stage "Journalbeat" skipped due to earlier failure(s)
[2020-07-23T02:10:44.478Z] Stage "Generators" skipped due to earlier failure(s)
[2020-07-23T02:10:44.484Z] Stage "Kubernetes" skipped due to earlier failure(s)
[2020-07-23T02:10:44.696Z] Stage "Heartbeat" skipped due to earlier failure(s)
[2020-07-23T02:10:44.705Z] Stage "Libbeat" skipped due to earlier failure(s)
[2020-07-23T02:10:44.715Z] Stage "Metricbeat x-pack" skipped due to earlier failure(s)
[2020-07-23T02:10:44.724Z] Stage "Packetbeat OSS" skipped due to earlier failure(s)
[2020-07-23T02:10:44.733Z] Stage "dockerlogbeat" skipped due to earlier failure(s)
[2020-07-23T02:10:44.741Z] Stage "Winlogbeat" skipped due to earlier failure(s)
[2020-07-23T02:10:44.750Z] Stage "Functionbeat" skipped due to earlier failure(s)
[2020-07-23T02:10:44.759Z] Stage "Journalbeat" skipped due to earlier failure(s)
[2020-07-23T02:10:44.768Z] Stage "Generators" skipped due to earlier failure(s)
[2020-07-23T02:10:46.140Z] Failed in branch Elastic Agent x-pack
[2020-07-23T02:10:46.151Z] Failed in branch Elastic Agent x-pack Windows
[2020-07-23T02:10:46.163Z] Failed in branch Elastic Agent Mac OS X
[2020-07-23T02:10:46.174Z] Failed in branch Filebeat oss
[2020-07-23T02:10:46.185Z] Failed in branch Filebeat x-pack
[2020-07-23T02:10:46.196Z] Failed in branch Filebeat Mac OS X
[2020-07-23T02:10:46.209Z] Failed in branch Filebeat x-pack Mac OS X
[2020-07-23T02:10:46.222Z] Failed in branch Filebeat Windows
[2020-07-23T02:10:46.234Z] Failed in branch Filebeat x-pack Windows
[2020-07-23T02:10:46.249Z] Failed in branch Auditbeat oss Linux
[2020-07-23T02:10:46.262Z] Failed in branch Auditbeat crosscompile
[2020-07-23T02:10:46.274Z] Failed in branch Auditbeat oss Mac OS X
[2020-07-23T02:10:46.287Z] Failed in branch Auditbeat oss Windows
[2020-07-23T02:10:46.300Z] Failed in branch Auditbeat x-pack
[2020-07-23T02:10:46.315Z] Failed in branch Auditbeat x-pack Mac OS X
[2020-07-23T02:10:46.327Z] Failed in branch Auditbeat x-pack Windows
[2020-07-23T02:10:46.339Z] Failed in branch Libbeat x-pack
[2020-07-23T02:10:46.352Z] Failed in branch Metricbeat OSS Unit tests
[2020-07-23T02:10:46.365Z] Failed in branch Metricbeat OSS Go Integration tests
[2020-07-23T02:10:46.377Z] Failed in branch Metricbeat OSS Python Integration tests
[2020-07-23T02:10:46.390Z] Failed in branch Metricbeat crosscompile
[2020-07-23T02:10:46.402Z] Failed in branch Metricbeat Mac OS X
[2020-07-23T02:10:46.414Z] Failed in branch Metricbeat x-pack Mac OS X
[2020-07-23T02:10:46.426Z] Failed in branch Metricbeat Windows
[2020-07-23T02:10:46.437Z] Failed in branch Metricbeat x-pack Windows
[2020-07-23T02:10:46.448Z] Failed in branch Winlogbeat Windows x-pack
[2020-07-23T02:10:46.459Z] Failed in branch Kubernetes
[2020-07-23T02:10:47.140Z] Stage "Heartbeat" skipped due to earlier failure(s)
[2020-07-23T02:10:47.151Z] Stage "Libbeat" skipped due to earlier failure(s)
[2020-07-23T02:10:47.161Z] Stage "Metricbeat x-pack" skipped due to earlier failure(s)
[2020-07-23T02:10:47.171Z] Stage "Packetbeat OSS" skipped due to earlier failure(s)
[2020-07-23T02:10:47.181Z] Stage "Winlogbeat" skipped due to earlier failure(s)
[2020-07-23T02:10:47.191Z] Stage "Functionbeat" skipped due to earlier failure(s)
[2020-07-23T02:10:47.202Z] Stage "Generators" skipped due to earlier failure(s)
[2020-07-23T02:10:47.616Z] Failed in branch dockerlogbeat
[2020-07-23T02:10:47.625Z] Failed in branch Journalbeat
[2020-07-23T02:10:48.128Z] Stage "Heartbeat" skipped due to earlier failure(s)
[2020-07-23T02:10:48.140Z] Stage "Libbeat" skipped due to earlier failure(s)
[2020-07-23T02:10:48.149Z] Stage "Packetbeat OSS" skipped due to earlier failure(s)
[2020-07-23T02:10:48.159Z] Stage "Functionbeat" skipped due to earlier failure(s)
[2020-07-23T02:10:48.170Z] Stage "Generators" skipped due to earlier failure(s)
[2020-07-23T02:10:48.281Z] Failed in branch Metricbeat x-pack
[2020-07-23T02:10:48.290Z] Failed in branch Winlogbeat
[2020-07-23T02:10:48.795Z] Failed in branch Heartbeat
[2020-07-23T02:10:48.803Z] Failed in branch Libbeat
[2020-07-23T02:10:48.813Z] Failed in branch Packetbeat OSS
[2020-07-23T02:10:48.822Z] Failed in branch Functionbeat
[2020-07-23T02:10:48.822Z] Stage "Generators" skipped due to earlier failure(s)
[2020-07-23T02:10:49.032Z] Failed in branch Generators
[2020-07-23T02:10:51.237Z] Running on Jenkins in /var/lib/jenkins/workspace/Beats_beats_PR-20172
[2020-07-23T02:10:51.542Z] [INFO] getVaultSecret: Getting secrets
[2020-07-23T02:10:51.624Z] Masking supported pattern matches of $VAULT_ADDR or $VAULT_ROLE_ID or $VAULT_SECRET_ID
[2020-07-23T02:10:52.669Z] + chmod 755 generate-build-data.sh
[2020-07-23T02:10:52.669Z] + ./generate-build-data.sh https://beats-ci.elastic.co/blue/rest/organizations/jenkins/pipelines/Beats/beats/PR-20172/ https://beats-ci.elastic.co/blue/rest/organizations/jenkins/pipelines/Beats/beats/PR-20172/runs/1 FAILURE 379289
[2020-07-23T02:10:52.669Z] INFO: curl https://beats-ci.elastic.co/blue/rest/organizations/jenkins/pipelines/Beats/beats/PR-20172/runs/1/steps/?limit=10000 -o steps-info.json
[2020-07-23T02:10:52.919Z] INFO: curl https://beats-ci.elastic.co/blue/rest/organizations/jenkins/pipelines/Beats/beats/PR-20172/runs/1/tests/?status=FAILED -o tests-errors.json
[2020-07-23T02:10:52.920Z] INFO: curl https://beats-ci.elastic.co/blue/rest/organizations/jenkins/pipelines/Beats/beats/PR-20172/runs/1/log/ -o pipeline-log.txt

@dedemorton
Copy link
Contributor Author

CI failures are unrelated to docs, so I'm merging.

@dedemorton dedemorton merged commit 3e138b3 into elastic:master Jul 23, 2020
@dedemorton dedemorton deleted the issue#19955 branch July 23, 2020 15:36
dedemorton added a commit to dedemorton/beats that referenced this pull request Jul 23, 2020
dedemorton added a commit to dedemorton/beats that referenced this pull request Jul 23, 2020
@dedemorton dedemorton removed the needs_backport PR is waiting to be backported to other branches. label Jul 23, 2020
v1v added a commit to v1v/beats that referenced this pull request Jul 27, 2020
…ne-2.0

* upstream/master: (41 commits)
  adding possibility to override content-type checks, it was breaking certain webhooks that is not able to set content-headers at all. Still defaults to application/json (elastic#20232)
  fix: use a fixed worker type for tests (elastic#20130)
  [Ingest Manager] Prepare packaging for endpoint and asc files (elastic#20186)
  [Packetbeat] HTTP: Improve support for 100-continue elastic#15830 (elastic#19349)
  Increase index.max_docvalue_fields_search to 200 (elastic#20218)
  [Ingest Manager] Prevent closing closed reader (elastic#20214)
  [Metricbeat] Use MySQL Host Parser in Query metricset (elastic#20191)
  Testing: Ignore timestamp from cylance/protect dataset (elastic#20211)
  [Filebeat] Ignore cylance.protect timestamps while testing (elastic#20207)
  [CI] remove codecov step (elastic#20102)
  [docs] Indicate that SYSTEM user is required on Windows to use Endpoint (elastic#20172)
  Remove f5/firepass rsa2elk fileset (elastic#20160)
  [Elastic Agent] Improve GRPC stop to be more relaxed. (elastic#20118)
  Fix fileset field prefixing (elastic#20170)
  Fix terminating pod autodiscover issue (elastic#20084)
  Call host parser only once when building light metricsets (elastic#20149)
  [CI] fix null string with contains (elastic#20182)
  [Ingest Manager] Fix failing unit tests on windows (elastic#20127)
  [Filebeat] Update crowdstrike module (elastic#20138)
  [docs] Add x-pack role to relevant metricsets (elastic#20167)
  ...
melchiormoulin pushed a commit to melchiormoulin/beats that referenced this pull request Oct 14, 2020
leweafan pushed a commit to leweafan/beats that referenced this pull request Apr 28, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

[Agent] Mention that Elastic Agent must be run as SYSTEM on Windows when using Endpoint
3 participants