Craig MacKenzie

There are some debug logs that should use `log.type: event` that aren't covered yet. Can we remove the `if management.TraceLevelEnabled()` guard in the block below and add `log.type` to redirect...

^ Also the debug logs above for standalone Beats just go into the regular log for standalone Beats, when they should be in the event log.

> What do you think? Those logs are still behind the debug log level correct? So the solution to me if you don't want an overwhelming amount of information is...

If I use the following configuration I still see data written to the event log files: ```yaml logging: level: debug event_data: to_files: false ```

Will be fixed by https://github.com/elastic/beats/pull/33789

We have reproduced something similar to this in our internal benchmarks, no fix yet unfortunately.

> Why are we requiring them to shell into each machine to uninstall agent? I don't think there's a good reason for this, considering that we already support the uninstall...

The zombie processes after a restart are now tracked in https://github.com/elastic/elastic-agent/issues/2190#issuecomment-1755884337

Ah yes I just pattern matched to the word zombie. Thanks that clarifies things, different issue and yes still a problem.

Edit: misread the comment, this is a report against 8.5.1 which should have fixed this. @fearful-symmetry any ideas on what is going on here?