[Fleet]: Logs are not generated on 'Discover tab' for Mac Standalone upgrade on upgrading from 8.5.3 > 8.6.0

[ghost]

Kibana version: 8.6 SNAPSHOT Kibana Staging environment

Host OS and Browser version: All, All

Build Details:

Version: 8.6.0 SNAPSHOT
Build: 56060
Commit: a8726a0c551c5d3e8d3bdc8f8cc2a0d88b8d0617

Preconditions:

• 8.6 SNAPSHOT Kibana Staging environment should be available.
• Agent Policies should be created
• Lower version 8.5.3 Standalone Mac agent should be installed.

Steps to reproduce:

1. Open Terminal
2. Run the following commands at the following path: Library/Elastic/Agent/data/elastic-agent-56a002/downloads/:

[curl -L -O https://artifacts.elastic.co/downloads/beats/elastic-agent/elastic-agent-8.4.0-darwin-x86_64.tar.gz] (https://artifacts.elastic.co/downloads/beats/elastic-agent/elastic-agent-8.5.3-darwin-x86_64.tar.gz)

3. Run the following command at the following path: Library/Elastic/Agent/

./elastic-agent upgrade 8.6.0-SNAPSHOT

4. The following output is shown after running the ./elastic-agent upgrade 8.5.0-SNAPSHOT command :

The upgrade process of Elastic Agent is currently EXPERIMENTAL and should not be used in production
Upgrade triggered to version 8.6.0-SNAPSHOT, Elastic Agent is currently restarting

5. Run the following command at the following path: Library/Elastic/Agent/
   ./elastic-agent upgrade version

6. The following output is shown and Standalone Mac agent is upgraded to 8.6.0

Binary:  8.6.0-SNAPSHOT (build: 56a002dc5c96d3a79decbf28bb7994cf49f3a4da at 2022-08-19 22:35:27 +0000 UTC)
Daemon:  8.6.0-SNAPSHOT (build: 56a002dc5c96d3a79decbf28bb7994cf49f3a4da at 2022-08-19 22:35:27 +0000 UTC)

7. Navigate to Discover tab and select logs-*.
8. Observe that logs are not shown for the Standalone Mac agent on the Discover tab after upgrade.

Expected Result:

• logs should be shown for the Standalone Mac agent on the Discover tab after upgrade.

What's Working:

• metrics is shown for the Standalone Mac agent on the Discover tab after upgrade.
• Data streams are generated for the Standalone Mac agenton theData streamstab afterupgrade`.
• logs are shown for the Standalone Linux agent and Standalone Windows agent on the Discover tab after upgrade.

Screenshots:

Mac Agent Logs:

• elastic-agent-diagnostics-2022-12-12T07-57-41Z-00.zip

[dikshachauhan-qasource]

Secondary review is done

[cmacknz]

There is nothing interesting happening in the attached agent logs. Possibly this is related to #1924.

[jlind23]

@amolnater-qasource @dikshachauhan-qasource could this be retested with the latest snapshot that should be built today?

[ghost]

Hi @michalpristas,

We have re-validated this issue on the latest 8.6.0 SNAPSHOT Kibana Staging environment and had the below observations.

Observations:

• logs are shown for the Standalone Mac agent on the Discover tab after upgrade from 8.5.3 > 8.6.0 SNAPSHOT.
• host.hostname filter is not working after upgrade from 8.5.3 > 8.6.0 SNAPSHOT and is showing no logs for 8.6.0.

Build details:

Version: 8.6.0 SNAPSHOT
Build: 58830   
Commit: 6a5d6d96a534be75fc58acda8f89f2610309d7ff

Screenshots:

Please let us know if we are missing anything.

Thanks!

[michalpristas]

as logs are present let's close this one. host issue is reported here: elastic/beats#34125