Log
time 2025-03-18T10:22:10.8643044Z
observed_time 2025-03-18T10:22:11.55866Z
severity_number 17
severity_text ERROR
Body
channel Application
event_data["data"][0][""] 2025-03-18T10:22:10.8643Z
OSConfigAgent Error main.go:88: error getting token from metadata: metadata: GCE metadata "instance/service-accounts/default/identity?audience=osconfig.googleapis.com&format=full" not defined
event_id["id"] 882 event_id["qualifiers"] 0 keywords[0] Classic level
Error
message 2025-03-18T10:22:10.8643Z OSConfigAgent Error main.go:88: error getting token from metadata: metadata: GCE metadata "instance/service-accounts/default/identity?audience=osconfig.googleapis.com&format=full" not defined
opcode Info
provider["event_source"]
provider["guid"]
provider["name"] OSConfigAgent
record_id 37898
system_time 2025-03-18T10:22:10.864304400Z
task 0
Attributes
log_type windows_event.application
Resource os.type windows
For over a minute or so, I keep getting this error and after that there are no errors like this . The data is ingested without any errors.
In order to check whether the events are reaching SecOps are not , I am using this query rawdata=/hostname/ .Is there any other way to check ?