From 8f36d2ec007877fa8b70c40f422bd621085ed169 Mon Sep 17 00:00:00 2001 From: reyesj2 <94730068+reyesj2@users.noreply.github.com> Date: Tue, 9 Sep 2025 15:38:50 -0500 Subject: [PATCH 1/2] update log file name --- .../integrations/grid-nodes_general/elastic-agent-monitor.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/salt/elasticfleet/files/integrations/grid-nodes_general/elastic-agent-monitor.json b/salt/elasticfleet/files/integrations/grid-nodes_general/elastic-agent-monitor.json index a7d425b39..31b004a91 100644 --- a/salt/elasticfleet/files/integrations/grid-nodes_general/elastic-agent-monitor.json +++ b/salt/elasticfleet/files/integrations/grid-nodes_general/elastic-agent-monitor.json @@ -19,7 +19,7 @@ "enabled": true, "vars": { "paths": [ - "/opt/so/log/agents/agent-monitor-*.log" + "/opt/so/log/agents/agent-monitor.log" ], "data_stream.dataset": "agent-monitor", "pipeline": "elasticagent.monitor", From 29980ea95827a316e360031315594fd9ce3144b7 Mon Sep 17 00:00:00 2001 From: reyesj2 <94730068+reyesj2@users.noreply.github.com> Date: Tue, 9 Sep 2025 15:39:55 -0500 Subject: [PATCH 2/2] offline threshold check --- salt/manager/tools/sbin_jinja/so-elastic-agent-monitor | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/salt/manager/tools/sbin_jinja/so-elastic-agent-monitor b/salt/manager/tools/sbin_jinja/so-elastic-agent-monitor index 0b40925fd..3fa3221c2 100644 --- a/salt/manager/tools/sbin_jinja/so-elastic-agent-monitor +++ b/salt/manager/tools/sbin_jinja/so-elastic-agent-monitor @@ -145,6 +145,11 @@ main() { offline_hours=$(calculate_offline_hours "$last_checkin") + if [ "$offline_hours" -lt "$OFFLINE_THRESHOLD_HOURS" ]; then + log_message "INFO" "${agent_hostname^^} has been offline for ${offline_hours}h (threshold: ${OFFLINE_THRESHOLD_HOURS}h). Not logging ${agent_status^^} agent until it reaches threshold" + continue + fi + log_entry=$(echo 'null' | jq -c \ --arg ts "$current_timestamp" \ --arg id "$agent_id" \