Ubuntu: agent.jobs.linux.ui_realtime, Job terminated unexpectedly

mmur_gt4e · January 11, 2024, 3:49pm

Hi there,

We are getting many Ubuntu assets with the following error:

What is actually wrong?

Thanks in advance

david_smith · January 11, 2024, 5:19pm

Typically this is because auditd is running, and compatibility mode is not configured.

It outlines our configuration for compatibility mode.

Alternatively you can choose to disable auditd, and the Insight Agent will control the netlink socket and audit/consume the necessary events.

David

cyberpunk · April 3, 2024, 4:58pm

What are some of the event the agent will report if auditd is disabled

mmur_gt4e · October 31, 2024, 9:01am

No, the auditd is running and compatibility mode is configured.
Support do not help me, just ignores me.

david_smith1 · October 31, 2024, 5:00pm

What is the support case I will take a look

mmur_gt4e · November 4, 2024, 4:14pm

08249045

and a couple more that just died.

Thanks!