We have had several Graylog sidecars deployed on our Windows clients for a few months now. These are all winlogbeat and filebeat collectors, two of each on every client.
As of recent, we have began to notice more and more service errors pop up in the Event Viewer. All of these are related to either the service timing out during transaction responses, or repeatedly stopping to respond to the service control requests. The sidecar log itself does not show anything matching the timestamps of these events.
The configs haven’t changed in the past few months, nor has anything about these clients. Even the sidecars aren’t updated.