elastic / elastic/docs-content

[REQUEST]: Addition of connection handling details (overview) for Elastic Agent.

Open
#7,769 2 comments 0 reactions 0 assignees View on GitHub
Team:SKI
Dominant language
No language data
Stars
47
Forks
261
Avg merge
3d 12h
Merged PRs (30d)
116

Description

### Description

Customer has opened up a support case requesting for some information on how Elastic Agent works and how do we handle connection loss and subsequent data losses. In his words:

1. What are the interactions/requests Elastic Agent triggers against Fleet Server?

2. How Elastic Agent handle offline/disconnect periods?

3. How the components running Elastic Agent handle offline/disconnect periods? Do we lose data?

4. For the log collection (filebeat) the connection be lost for hours, and then when connected again, the log data is sent from last successful checkpoint, so there is no data loss?

- I understand we have filebeat `registry` in this context, would it work in the same way for Elastic Agent?

5. For metrics, how would this work? I assume there would be some metric caching, hence there would be no data loss if connection lost for a short period of time, but there would be data loss for longer outages.

You can reach out to @lucabelluccini for further clarifications.

### Resources

We have internal working very nicely documented for Filebeat:
https://www.elastic.co/guide/en/beats/filebeat/current/how-filebeat-works.html

We have something for metricbeat as well:
https://www.elastic.co/guide/en/beats/metricbeat/current/how-metricbeat-works.html

### Collaboration

TBD. The docs and product team will work together to determine the best path forward.

### Point of contact.

**Main contact:** @kilfoyle

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.