[Bug?] Check-mk-agent.socket flooding /var/log/auth.log

This is normal linux behavior and related to the logging settings of your system and systemd. If you like to suppress such messages you need to adjust your system. take a look at the documentation of syslogd.

This log lines appears every time a user logs into the system. The agent is called by the central monitoring server every minute (default), that’s why you see this message every minute.

1 Like