[IIS]: Agent displayed as unhealthy when no data found

[sconners-progress]

Integration Name

IIS [iis]

Dataset Name

No response

Integration Version

1.20.1

Agent Version

8.17.1

Agent Output Type

elasticsearch

Elasticsearch Version

8.17.0

OS Version and Architecture

Windows Server 2012+

Software/API Version

No response

Error Message

[elastic_agent][warn] Unit state changed iis/metrics-fleet-default-output-iis/metrics-iis-66abaf22-30f9-4447-ab7e-8888b96164c5 (STARTING->DEGRADED): Error fetching data for metricset iis.webserver: failed reading counters: failed collecting counter values: No data to return.

Event Original

No response

What did you do?

Agent policy includes IIS metrics

What did you see?

Metrics collected for systems that have IIS installed, where as clients without IIS installed are put into the "Unhealthy" status

What did you expect to see?

We expected that client without IIS installed would just ignore missing IIS metrics, similar to how logs are handled.

Anything else?

No response

[ishleenk17]

@sconners-progress : So how does the setup look like?
There are multiple Windows machines and all of them have Agent/IIS Integration running on it.
But not all of the windows machine have IIS enabled.

Am I correct in this understanding ?

cc: @muthu-mps

[sconners-progress]

Yes, you are correct, for machines that do not have IIS or other software the logs silently ignore the lack of that software, but for the IIS metrics when the tool is not installed, it causes the device to be shown as Unhealthy in the UI, rather than just silently ignoring that the software is missing. Thanks, Steve

…

________________________________ From: Ishleen Kaur ***@***.***> Sent: Monday, January 27, 2025 11:19 PM To: elastic/integrations ***@***.***> Cc: Steve Conners ***@***.***>; Mention ***@***.***> Subject: Re: [elastic/integrations] [IIS]: Agent displayed as unhealthy when no data found (Issue #12484) @sconners-progress<https://github.com/sconners-progress> : So how does the setup look like? There are multiple Windows machines and all of them have Agent/IIS Integration running on it. But not all of the windows machine have IIS enabled. Am I correct in this understanding ? cc: @muthu-mps<https://github.com/muthu-mps> — Reply to this email directly, view it on GitHub<#12484 (comment)>, or unsubscribe<https://github.com/notifications/unsubscribe-auth/AFRJ7RSB5ZB7HIUQZMWDSQL2M4AMNAVCNFSM6AAAAABV6QAAHKVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDMMJXHAYDONRYHA>. You are receiving this because you were mentioned.Message ID: ***@***.***>

[muthu-mps]

Yes, you are correct, for machines that do not have IIS or other software the logs silently ignore the lack of that software, but for the IIS metrics when the tool is not installed, it causes the device to be shown as Unhealthy in the UI, rather than just silently ignoring that the software is missing.

Thanks,
Steve
…

Thanks for the update. Let me take a look into it.