event.agent_id_status: auth_metadata_missing

[mkay2999]

Version

2.4.20

Installation Method

Security Onion ISO image

Description

configuration

Installation Type

Distributed

Location

on-prem with Internet access

Hardware Specs

Exceeds minimum requirements

CPU

6

RAM

18

Storage for /

65

Storage for /nsm

125

Network Traffic Collection

span port

Network Traffic Speeds

1Gbps to 10Gbps

Status

Yes, all services on all nodes are running OK

Salt Status

No, there are no failures

Logs

No, there are no additional clues

Detail

in every log that comes in that has the field "event.agent_id_status:" that status is "auth_metadata_missing".

I'm curious if this is by design or a fault somewhere in my deployment.

Guidelines

• I have read the above statement and can confirm my post is relevant to Security Onion 2.4.