Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Cherry-pick #22827 to 7.10: [Auditbeat] system/socket: Monitor all online CPUs #22873

Merged
merged 2 commits into from
Dec 3, 2020
Merged

Cherry-pick #22827 to 7.10: [Auditbeat] system/socket: Monitor all online CPUs #22873

merged 2 commits into from
Dec 3, 2020

Commits on Dec 2, 2020

  1. [Auditbeat] system/socket: Monitor all online CPUs (elastic#22827) 

    Auditbeat's system/socket dataset needs to install kprobes on all
online CPUs.

Previously, it was using runtime.NumCPU() to determine the CPUs in the
system, and monitoring CPUs 0 to NumCPU. This was a mistake that lead
to startup failures or loss of events in any of the following scenarios:
- When Auditbeat is started with a CPU affinity mask that excludes some CPUs
- When there are offline or isolated CPUs in the system.

This patch updates the tracing library in Auditbeat to fetch the list of
online CPUs from /sys/devices/system/cpu/online so that it can install
kprobes in all of them regardless of its own affinity mask, and correctly
skipping offline CPUs.

Related elastic#18755

(cherry picked from commit 6356887)
    @adriansr
    adriansr committed Dec 2, 2020
    Configuration menu
    Copy the full SHA
    87c73f4 View commit details
    Browse the repository at this point in the history

Commits on Dec 3, 2020

  1. Merge branch '7.10' into backport_22827_7.10

    @adriansr
    adriansr authored Dec 3, 2020
    Configuration menu
    Copy the full SHA
    7fdb43e View commit details
    Browse the repository at this point in the history