cloudbeat icon indicating copy to clipboard operation
cloudbeat copied to clipboard

[EKS KSPM] Error running fetcher for key process

Open moukoublen opened this issue 1 year ago • 1 comments

Describe the bug During a scan cycle in kspm/eks an error occurred:

[elastic_agent.cloudbeat][error] Error running fetcher for key process: open /hostfs/proc/27920/stat: no such file or directory

This led Cloudbeat to publish fewer events than expected (4 instead of 15). Screenshot 2024-04-08 at 4 36 52 PM

More detailed logs of that cycle: Screenshot 2024-04-08 at 4 30 15 PM

The problem was resolved in the subsequent cycle, restoring the previously missed events.

Preconditions It happened to ess live environment with version v8.12.0. Security Posture Management: v1.7.4 Elastic agent: 8.12.0

moukoublen avatar Apr 08 '24 13:04 moukoublen

After updating to 8.13.2, the issue reappeared. Screenshot 2024-04-11 at 13 04 36

gurevichdmitry avatar Apr 11 '24 10:04 gurevichdmitry