2025-10-16 17:07:55,085, INFO - Start executing installer wrapper
2025-10-16 17:07:55,085, INFO - proxy settings: {}
2025-10-16 17:07:55,085, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2025-10-16 17:07:55,168, INFO - Start to run the install command: src/mde_installer.latest.sh --debug --install --channel prod --passive-mode --tag SecurityWorkspaceId 0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338 --tag AzureResourceId /subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2025-10-16 17:09:38,686, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.3 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[v] no conflicting applications found
[v] required pkgs are installed
[>] configuring the repository
[>] configuring the repository
[>] installing MDE
[v] Installation complete!
[i] MDE/EPP already in passive mode
[>] setting tag: (AzureResourceId, /subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow)
[>] setting tag: (SecurityWorkspaceId, 0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338)
[v] tags set.
[S] MDE installed.
[S] Version: 101.25082.0003
[S] Onboarded: false
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2025-10-16 17:09:38,686, INFO - Wait for MDE service to be available
2025-10-16 17:09:38,800, INFO - start parsing onboarding script
2025-10-16 17:09:38,800, INFO - decode onboarding script successfully
2025-10-16 17:09:38,801, INFO - parse onboarding script successfully
2025-10-16 17:09:38,801, INFO - Starting onboarding script...
2025-10-16 17:09:38,802, INFO - Checking if Mde is installed
2025-10-16 17:09:38,802, INFO - Mde is installed: True
2025-10-16 17:09:38,802, INFO - Removing offboarding file if exists
2025-10-16 17:09:40,802, INFO - Onboarding...
2025-10-16 17:09:40,803, INFO - Generating /etc/opt/microsoft/mdatp/mdatp_onboard.json...
2025-10-16 17:09:40,816, INFO - Onboarding done
2025-10-16 17:09:40,817, INFO - Checking if Mde is healthy after onboarding
2025-10-16 17:09:56,039, INFO - Onboarding succeeded
2025-10-16 17:09:56,337, INFO - MDC tags in MDE are valid
2025-10-16 17:09:56,338, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2025-10-16 17:09:56,677, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.8/status/0.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2025-10-16 17:09:56,680, INFO - End executing installer wrapper
2025-10-17 08:06:00,178, INFO - Start executing installer wrapper
2025-10-17 08:06:00,179, INFO - proxy settings: {}
2025-10-17 08:06:00,179, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2025-10-17 08:06:00,254, INFO - MDE is installed
2025-10-17 08:06:00,255, INFO - Wait for MDE service to be available
2025-10-17 08:06:00,811, INFO - MDE is onboarded
2025-10-17 08:06:01,187, INFO - MDC tags in MDE are valid
2025-10-17 08:06:01,188, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2025-10-17 08:06:09,476, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.3 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25082.0003
[i] MDE is already up to date.
[S] MDE installed.
[S] Version: 101.25082.0003
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2025-10-17 08:06:09,477, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2025-10-17 08:06:09,744, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.8/status/0.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2025-10-17 08:06:09,746, INFO - End executing installer wrapper
2025-10-18 08:04:24,539, INFO - Start executing installer wrapper
2025-10-18 08:04:24,541, INFO - proxy settings: {}
2025-10-18 08:04:24,541, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2025-10-18 08:04:24,617, INFO - MDE is installed
2025-10-18 08:04:24,618, INFO - Wait for MDE service to be available
2025-10-18 08:04:25,481, INFO - MDE is onboarded
2025-10-18 08:04:25,775, INFO - MDC tags in MDE are valid
2025-10-18 08:04:25,776, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2025-10-18 08:04:31,962, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.3 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25082.0003
[i] MDE is already up to date.
[S] MDE installed.
[S] Version: 101.25082.0003
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2025-10-18 08:04:31,963, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2025-10-18 08:04:33,039, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.8/status/0.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/briscoewebsite-rg/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2025-10-18 08:04:33,041, INFO - End executing installer wrapper
2025-10-19 08:09:12,287, INFO - Start executing installer wrapper
2025-10-19 08:09:12,288, INFO - proxy settings: {}
2025-10-19 08:09:12,288, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2025-10-19 08:09:12,364, INFO - MDE is installed
2025-10-19 08:09:12,364, INFO - Wait for MDE service to be available
2025-10-19 08:09:13,181, INFO - MDE is onboarded
2025-10-19 08:09:13,485, INFO - MDC tags in MDE are valid
2025-10-19 08:09:13,485, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2025-10-19 08:09:20,455, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.3 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25082.0003
[i] MDE is already up to date.
[S] MDE installed.
[S] Version: 101.25082.0003
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2025-10-19 08:09:20,456, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2025-10-19 08:09:20,714, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.8/status/0.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/briscoewebsite-rg/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2025-10-19 08:09:20,715, INFO - End executing installer wrapper
2025-10-20 08:11:28,723, INFO - Start executing installer wrapper
2025-10-20 08:11:28,724, INFO - proxy settings: {}
2025-10-20 08:11:28,724, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2025-10-20 08:11:28,798, INFO - MDE is installed
2025-10-20 08:11:28,798, INFO - Wait for MDE service to be available
2025-10-20 08:11:29,636, INFO - MDE is onboarded
2025-10-20 08:11:29,947, INFO - MDC tags in MDE are valid
2025-10-20 08:11:29,948, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2025-10-20 08:11:38,108, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.3 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25082.0003
[i] MDE is already up to date.
[S] MDE installed.
[S] Version: 101.25082.0003
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2025-10-20 08:11:38,109, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2025-10-20 08:11:38,486, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.8/status/0.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/briscoewebsite-rg/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2025-10-20 08:11:38,487, INFO - End executing installer wrapper
2025-10-21 08:11:06,395, INFO - Start executing installer wrapper
2025-10-21 08:11:06,396, INFO - proxy settings: {}
2025-10-21 08:11:06,396, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2025-10-21 08:11:06,467, INFO - MDE is installed
2025-10-21 08:11:06,467, INFO - Wait for MDE service to be available
2025-10-21 08:11:07,316, INFO - MDE is onboarded
2025-10-21 08:11:07,800, INFO - MDC tags in MDE are valid
2025-10-21 08:11:07,801, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2025-10-21 08:11:15,782, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.3 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25082.0003
[i] MDE is already up to date.
[S] MDE installed.
[S] Version: 101.25082.0003
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2025-10-21 08:11:15,783, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2025-10-21 08:11:16,330, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.8/status/0.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/briscoewebsite-rg/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2025-10-21 08:11:16,332, INFO - End executing installer wrapper
2025-10-22 08:02:25,957, INFO - Start executing installer wrapper
2025-10-22 08:02:25,958, INFO - proxy settings: {}
2025-10-22 08:02:25,958, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2025-10-22 08:02:26,037, INFO - MDE is installed
2025-10-22 08:02:26,038, INFO - Wait for MDE service to be available
2025-10-22 08:02:26,463, INFO - MDE is onboarded
2025-10-22 08:02:26,668, INFO - MDC tags in MDE are valid
2025-10-22 08:02:26,669, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2025-10-22 08:02:34,279, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.3 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25082.0003
[i] MDE is already up to date.
[S] MDE installed.
[S] Version: 101.25082.0003
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2025-10-22 08:02:34,280, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2025-10-22 08:02:34,618, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.8/status/0.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/briscoewebsite-rg/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2025-10-22 08:02:34,622, INFO - End executing installer wrapper
2025-10-23 08:09:15,952, INFO - Start executing installer wrapper
2025-10-23 08:09:15,953, INFO - proxy settings: {}
2025-10-23 08:09:15,953, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2025-10-23 08:09:16,026, INFO - MDE is installed
2025-10-23 08:09:16,027, INFO - Wait for MDE service to be available
2025-10-23 08:09:17,153, INFO - MDE is onboarded
2025-10-23 08:09:17,549, INFO - MDC tags in MDE are valid
2025-10-23 08:09:17,549, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2025-10-23 08:09:27,021, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.3 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25082.0003
[i] MDE is already up to date.
[S] MDE installed.
[S] Version: 101.25082.0003
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2025-10-23 08:09:27,022, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2025-10-23 08:09:27,396, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.8/status/0.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/briscoewebsite-rg/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2025-10-23 08:09:27,397, INFO - End executing installer wrapper
2025-10-23 17:43:05,865, INFO - Start executing installer wrapper
2025-10-23 17:43:05,866, INFO - proxy settings: {}
2025-10-23 17:43:05,866, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2025-10-23 17:43:05,940, INFO - MDE is installed
2025-10-23 17:43:05,940, INFO - Wait for MDE service to be available
2025-10-23 17:43:06,452, INFO - MDE is onboarded
2025-10-23 17:43:06,747, INFO - MDC tags in MDE are valid
2025-10-23 17:43:06,748, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2025-10-23 17:43:12,239, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.3 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25082.0003
[i] MDE is already up to date.
[S] MDE installed.
[S] Version: 101.25082.0003
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2025-10-23 17:43:12,239, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2025-10-23 17:43:12,502, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.9/status/1.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2025-10-23 17:43:12,503, INFO - End executing installer wrapper
2025-10-24 08:03:53,477, INFO - Start executing installer wrapper
2025-10-24 08:03:53,479, INFO - proxy settings: {}
2025-10-24 08:03:53,480, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2025-10-24 08:03:53,568, INFO - MDE is installed
2025-10-24 08:03:53,568, INFO - Wait for MDE service to be available
2025-10-24 08:03:54,311, INFO - MDE is onboarded
2025-10-24 08:03:54,692, INFO - MDC tags in MDE are valid
2025-10-24 08:03:54,692, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2025-10-24 08:04:01,221, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.3 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25082.0003
[i] MDE is already up to date.
[S] MDE installed.
[S] Version: 101.25082.0003
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2025-10-24 08:04:01,222, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2025-10-24 08:04:02,500, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.9/status/1.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/briscoewebsite-rg/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2025-10-24 08:04:02,501, INFO - End executing installer wrapper
2025-10-25 08:11:06,041, INFO - Start executing installer wrapper
2025-10-25 08:11:06,044, INFO - proxy settings: {}
2025-10-25 08:11:06,044, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2025-10-25 08:11:06,118, INFO - MDE is installed
2025-10-25 08:11:06,118, INFO - Wait for MDE service to be available
2025-10-25 08:11:06,881, INFO - MDE is onboarded
2025-10-25 08:11:07,176, INFO - MDC tags in MDE are valid
2025-10-25 08:11:07,177, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2025-10-25 08:11:12,961, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.3 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25082.0003
[i] MDE is already up to date.
[S] MDE installed.
[S] Version: 101.25082.0003
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2025-10-25 08:11:12,962, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2025-10-25 08:11:13,451, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.9/status/1.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/briscoewebsite-rg/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2025-10-25 08:11:13,452, INFO - End executing installer wrapper
2025-10-26 08:04:43,952, INFO - Start executing installer wrapper
2025-10-26 08:04:43,953, INFO - proxy settings: {}
2025-10-26 08:04:43,953, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2025-10-26 08:04:44,030, INFO - MDE is installed
2025-10-26 08:04:44,030, INFO - Wait for MDE service to be available
2025-10-26 08:04:44,753, INFO - MDE is onboarded
2025-10-26 08:04:45,058, INFO - MDC tags in MDE are valid
2025-10-26 08:04:45,058, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2025-10-26 08:04:55,896, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.3 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25082.0003
[i] MDE is already up to date.
[S] MDE installed.
[S] Version: 101.25082.0003
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2025-10-26 08:04:55,908, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2025-10-26 08:04:57,795, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.9/status/1.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/briscoewebsite-rg/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2025-10-26 08:04:57,802, INFO - End executing installer wrapper
2025-10-27 08:11:37,277, INFO - Start executing installer wrapper
2025-10-27 08:11:37,278, INFO - proxy settings: {}
2025-10-27 08:11:37,278, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2025-10-27 08:11:37,353, INFO - MDE is installed
2025-10-27 08:11:37,353, INFO - Wait for MDE service to be available
2025-10-27 08:11:38,326, INFO - MDE is onboarded
2025-10-27 08:11:38,630, INFO - MDC tags in MDE are valid
2025-10-27 08:11:38,630, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2025-10-27 08:11:47,014, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.3 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25082.0003
[i] MDE is already up to date.
[S] MDE installed.
[S] Version: 101.25082.0003
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2025-10-27 08:11:47,015, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2025-10-27 08:11:47,376, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.9/status/1.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/briscoewebsite-rg/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2025-10-27 08:11:47,377, INFO - End executing installer wrapper
2025-10-28 08:08:57,163, INFO - Start executing installer wrapper
2025-10-28 08:08:57,165, INFO - proxy settings: {}
2025-10-28 08:08:57,166, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2025-10-28 08:08:57,246, INFO - MDE is installed
2025-10-28 08:08:57,246, INFO - Wait for MDE service to be available
2025-10-28 08:08:57,925, INFO - MDE is onboarded
2025-10-28 08:08:58,229, INFO - MDC tags in MDE are valid
2025-10-28 08:08:58,229, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2025-10-28 08:09:05,595, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.3 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25082.0003
[i] MDE is already up to date.
[S] MDE installed.
[S] Version: 101.25082.0003
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2025-10-28 08:09:05,595, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2025-10-28 08:09:06,187, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.9/status/1.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/briscoewebsite-rg/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2025-10-28 08:09:06,188, INFO - End executing installer wrapper
2025-10-29 08:02:52,556, INFO - Start executing installer wrapper
2025-10-29 08:02:52,557, INFO - proxy settings: {}
2025-10-29 08:02:52,558, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2025-10-29 08:02:52,637, INFO - MDE is installed
2025-10-29 08:02:52,638, INFO - Wait for MDE service to be available
2025-10-29 08:02:53,568, INFO - MDE is onboarded
2025-10-29 08:02:53,875, INFO - MDC tags in MDE are valid
2025-10-29 08:02:53,875, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2025-10-29 08:03:01,553, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.3 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25082.0003
[i] MDE is already up to date.
[S] MDE installed.
[S] Version: 101.25082.0003
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2025-10-29 08:03:01,554, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2025-10-29 08:03:02,096, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.9/status/1.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/briscoewebsite-rg/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2025-10-29 08:03:02,097, INFO - End executing installer wrapper
2025-10-30 08:03:10,030, INFO - Start executing installer wrapper
2025-10-30 08:03:10,031, INFO - proxy settings: {}
2025-10-30 08:03:10,031, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2025-10-30 08:03:10,105, INFO - MDE is installed
2025-10-30 08:03:10,105, INFO - Wait for MDE service to be available
2025-10-30 08:03:11,175, INFO - MDE is onboarded
2025-10-30 08:03:11,480, INFO - MDC tags in MDE are valid
2025-10-30 08:03:11,480, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2025-10-30 08:03:19,063, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.3 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25082.0003
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25082.0003
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2025-10-30 08:03:19,064, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2025-10-30 08:03:19,617, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.9/status/1.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/briscoewebsite-rg/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2025-10-30 08:03:19,618, INFO - End executing installer wrapper
2025-10-30 23:43:07,726, INFO - Start executing installer wrapper
2025-10-30 23:43:07,728, INFO - proxy settings: {}
2025-10-30 23:43:07,728, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2025-10-30 23:43:07,804, INFO - MDE is installed
2025-10-30 23:43:07,807, INFO - Wait for MDE service to be available
2025-10-30 23:43:08,567, INFO - MDE is onboarded
2025-10-30 23:43:08,869, INFO - MDC tags in MDE are valid
2025-10-30 23:43:08,869, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2025-10-30 23:43:17,849, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.3 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25082.0003
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25082.0003
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2025-10-30 23:43:17,850, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2025-10-30 23:43:18,189, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.9/status/2.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/briscoewebsite-rg/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2025-10-30 23:43:18,190, INFO - End executing installer wrapper
2025-10-31 08:09:31,507, INFO - Start executing installer wrapper
2025-10-31 08:09:31,508, INFO - proxy settings: {}
2025-10-31 08:09:31,508, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2025-10-31 08:09:31,586, INFO - MDE is installed
2025-10-31 08:09:31,587, INFO - Wait for MDE service to be available
2025-10-31 08:09:32,064, INFO - MDE is onboarded
2025-10-31 08:09:32,340, INFO - MDC tags in MDE are valid
2025-10-31 08:09:32,341, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2025-10-31 08:09:38,510, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.3 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25082.0003
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25082.0003
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2025-10-31 08:09:38,511, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2025-10-31 08:09:38,698, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.9/status/2.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/briscoewebsite-rg/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2025-10-31 08:09:38,699, INFO - End executing installer wrapper
2025-11-01 08:06:33,363, INFO - Start executing installer wrapper
2025-11-01 08:06:33,364, INFO - proxy settings: {}
2025-11-01 08:06:33,364, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2025-11-01 08:06:33,444, INFO - MDE is installed
2025-11-01 08:06:33,444, INFO - Wait for MDE service to be available
2025-11-01 08:06:34,409, INFO - MDE is onboarded
2025-11-01 08:06:34,705, INFO - MDC tags in MDE are valid
2025-11-01 08:06:34,705, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2025-11-01 08:06:42,968, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.3 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25082.0003
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25082.0003
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2025-11-01 08:06:42,969, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2025-11-01 08:06:43,248, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.9/status/2.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/briscoewebsite-rg/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2025-11-01 08:06:43,249, INFO - End executing installer wrapper
2025-11-02 08:08:27,997, INFO - Start executing installer wrapper
2025-11-02 08:08:27,998, INFO - proxy settings: {}
2025-11-02 08:08:27,998, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2025-11-02 08:08:28,077, INFO - MDE is installed
2025-11-02 08:08:28,077, INFO - Wait for MDE service to be available
2025-11-02 08:08:28,738, INFO - MDE is onboarded
2025-11-02 08:08:29,039, INFO - MDC tags in MDE are valid
2025-11-02 08:08:29,039, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2025-11-02 08:08:35,003, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.3 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25082.0003
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25082.0003
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2025-11-02 08:08:35,003, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2025-11-02 08:08:35,411, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.9/status/2.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/briscoewebsite-rg/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2025-11-02 08:08:35,411, INFO - End executing installer wrapper
2025-11-03 08:07:52,168, INFO - Start executing installer wrapper
2025-11-03 08:07:52,186, INFO - proxy settings: {}
2025-11-03 08:07:52,187, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2025-11-03 08:07:52,264, INFO - MDE is installed
2025-11-03 08:07:52,264, INFO - Wait for MDE service to be available
2025-11-03 08:07:53,328, INFO - MDE is onboarded
2025-11-03 08:07:53,729, INFO - MDC tags in MDE are valid
2025-11-03 08:07:53,729, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2025-11-03 08:08:01,595, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.3 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25082.0003
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25082.0003
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2025-11-03 08:08:01,596, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2025-11-03 08:08:01,991, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.9/status/2.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/briscoewebsite-rg/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2025-11-03 08:08:01,992, INFO - End executing installer wrapper
2025-11-04 08:08:43,858, INFO - Start executing installer wrapper
2025-11-04 08:08:43,859, INFO - proxy settings: {}
2025-11-04 08:08:43,859, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2025-11-04 08:08:43,934, INFO - MDE is installed
2025-11-04 08:08:43,934, INFO - Wait for MDE service to be available
2025-11-04 08:08:44,689, INFO - MDE is onboarded
2025-11-04 08:08:44,988, INFO - MDC tags in MDE are valid
2025-11-04 08:08:44,989, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2025-11-04 08:08:52,963, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.3 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25082.0003
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25082.0003
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2025-11-04 08:08:52,966, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2025-11-04 08:08:53,312, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.9/status/2.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/briscoewebsite-rg/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2025-11-04 08:08:53,313, INFO - End executing installer wrapper
2025-11-05 08:02:16,668, INFO - Start executing installer wrapper
2025-11-05 08:02:16,669, INFO - proxy settings: {}
2025-11-05 08:02:16,669, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2025-11-05 08:02:16,745, INFO - MDE is installed
2025-11-05 08:02:16,745, INFO - Wait for MDE service to be available
2025-11-05 08:02:17,640, INFO - MDE is onboarded
2025-11-05 08:02:18,022, INFO - MDC tags in MDE are valid
2025-11-05 08:02:18,023, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2025-11-05 08:02:26,396, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.3 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25082.0003
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25082.0003
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2025-11-05 08:02:26,397, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2025-11-05 08:02:26,766, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.9/status/2.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/briscoewebsite-rg/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2025-11-05 08:02:26,773, INFO - End executing installer wrapper
2025-11-06 08:08:47,089, INFO - Start executing installer wrapper
2025-11-06 08:08:47,090, INFO - proxy settings: {}
2025-11-06 08:08:47,090, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2025-11-06 08:08:47,163, INFO - MDE is installed
2025-11-06 08:08:47,164, INFO - Wait for MDE service to be available
2025-11-06 08:08:47,566, INFO - MDE is onboarded
2025-11-06 08:08:47,851, INFO - MDC tags in MDE are valid
2025-11-06 08:08:47,852, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2025-11-06 08:08:55,321, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.3 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25082.0003
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25082.0003
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2025-11-06 08:08:55,322, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2025-11-06 08:08:55,602, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.9/status/2.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/briscoewebsite-rg/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2025-11-06 08:08:55,602, INFO - End executing installer wrapper
2025-11-07 05:43:14,989, INFO - Start executing installer wrapper
2025-11-07 05:43:14,999, INFO - proxy settings: {}
2025-11-07 05:43:14,999, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2025-11-07 05:43:15,072, INFO - MDE is installed
2025-11-07 05:43:15,072, INFO - Wait for MDE service to be available
2025-11-07 05:43:16,006, INFO - MDE is onboarded
2025-11-07 05:43:16,413, INFO - MDC tags in MDE are valid
2025-11-07 05:43:16,413, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2025-11-07 05:43:22,459, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.3 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25082.0003
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25082.0003
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2025-11-07 05:43:22,460, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2025-11-07 05:43:22,742, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.9/status/3.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/briscoewebsite-rg/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2025-11-07 05:43:22,743, INFO - End executing installer wrapper
2025-11-07 08:11:12,587, INFO - Start executing installer wrapper
2025-11-07 08:11:12,587, INFO - proxy settings: {}
2025-11-07 08:11:12,587, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2025-11-07 08:11:12,667, INFO - MDE is installed
2025-11-07 08:11:12,667, INFO - Wait for MDE service to be available
2025-11-07 08:11:13,212, INFO - MDE is onboarded
2025-11-07 08:11:13,591, INFO - MDC tags in MDE are valid
2025-11-07 08:11:13,591, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2025-11-07 08:11:21,082, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.3 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25082.0003
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25082.0003
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2025-11-07 08:11:21,083, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2025-11-07 08:11:21,544, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.9/status/3.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2025-11-07 08:11:21,545, INFO - End executing installer wrapper
2025-11-08 08:10:42,138, INFO - Start executing installer wrapper
2025-11-08 08:10:42,143, INFO - proxy settings: {}
2025-11-08 08:10:42,143, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2025-11-08 08:10:42,211, INFO - MDE is installed
2025-11-08 08:10:42,212, INFO - Wait for MDE service to be available
2025-11-08 08:10:43,227, INFO - MDE is onboarded
2025-11-08 08:10:43,726, INFO - MDC tags in MDE are valid
2025-11-08 08:10:43,727, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2025-11-08 08:10:51,698, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.3 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25082.0003
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25082.0003
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2025-11-08 08:10:51,699, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2025-11-08 08:10:52,095, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.9/status/3.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/briscoewebsite-rg/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2025-11-08 08:10:52,096, INFO - End executing installer wrapper
2025-11-09 08:09:21,084, INFO - Start executing installer wrapper
2025-11-09 08:09:21,115, INFO - proxy settings: {}
2025-11-09 08:09:21,115, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2025-11-09 08:09:21,194, INFO - MDE is installed
2025-11-09 08:09:21,194, INFO - Wait for MDE service to be available
2025-11-09 08:09:21,602, INFO - MDE is onboarded
2025-11-09 08:09:21,811, INFO - MDC tags in MDE are valid
2025-11-09 08:09:21,811, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2025-11-09 08:09:28,356, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.3 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25082.0003
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25082.0003
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2025-11-09 08:09:28,357, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2025-11-09 08:09:28,612, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.9/status/3.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/briscoewebsite-rg/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2025-11-09 08:09:28,613, INFO - End executing installer wrapper
2025-11-10 08:02:36,512, INFO - Start executing installer wrapper
2025-11-10 08:02:36,513, INFO - proxy settings: {}
2025-11-10 08:02:36,513, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2025-11-10 08:02:36,585, INFO - MDE is installed
2025-11-10 08:02:36,586, INFO - Wait for MDE service to be available
2025-11-10 08:02:37,424, INFO - MDE is onboarded
2025-11-10 08:02:37,743, INFO - MDC tags in MDE are valid
2025-11-10 08:02:37,744, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2025-11-10 08:04:12,590, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.3 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25082.0003
[>] Running command: yum -y -y update mdatp
[v] Upgrade successful!
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25092.0001
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2025-11-10 08:04:12,591, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2025-11-10 08:04:13,364, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.9/status/3.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/briscoewebsite-rg/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2025-11-10 08:04:13,364, INFO - End executing installer wrapper
2025-11-11 08:07:13,593, INFO - Start executing installer wrapper
2025-11-11 08:07:13,595, INFO - proxy settings: {}
2025-11-11 08:07:13,595, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2025-11-11 08:07:13,676, INFO - MDE is installed
2025-11-11 08:07:13,676, INFO - Wait for MDE service to be available
2025-11-11 08:07:14,413, INFO - MDE is onboarded
2025-11-11 08:07:14,716, INFO - MDC tags in MDE are valid
2025-11-11 08:07:14,716, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2025-11-11 08:07:22,107, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.3 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25092.0001
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25092.0001
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2025-11-11 08:07:22,108, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2025-11-11 08:07:22,462, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.9/status/3.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/briscoewebsite-rg/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2025-11-11 08:07:22,463, INFO - End executing installer wrapper
2025-11-12 08:03:00,793, INFO - Start executing installer wrapper
2025-11-12 08:03:00,794, INFO - proxy settings: {}
2025-11-12 08:03:00,794, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2025-11-12 08:03:00,869, INFO - MDE is installed
2025-11-12 08:03:00,869, INFO - Wait for MDE service to be available
2025-11-12 08:03:01,792, INFO - MDE is onboarded
2025-11-12 08:03:02,176, INFO - MDC tags in MDE are valid
2025-11-12 08:03:02,176, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2025-11-12 08:03:10,153, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.3 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25092.0001
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25092.0001
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2025-11-12 08:03:10,154, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2025-11-12 08:03:10,714, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.9/status/3.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/briscoewebsite-rg/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2025-11-12 08:03:10,715, INFO - End executing installer wrapper
2025-11-13 08:03:20,975, INFO - Start executing installer wrapper
2025-11-13 08:03:20,977, INFO - proxy settings: {}
2025-11-13 08:03:20,977, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2025-11-13 08:03:21,047, INFO - MDE is installed
2025-11-13 08:03:21,047, INFO - Wait for MDE service to be available
2025-11-13 08:03:21,763, INFO - MDE is onboarded
2025-11-13 08:03:22,145, INFO - MDC tags in MDE are valid
2025-11-13 08:03:22,146, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2025-11-13 08:03:30,915, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.3 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25092.0001
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25092.0001
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2025-11-13 08:03:30,916, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2025-11-13 08:03:31,281, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.9/status/3.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/briscoewebsite-rg/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2025-11-13 08:03:31,282, INFO - End executing installer wrapper
2025-11-14 08:07:14,739, INFO - Start executing installer wrapper
2025-11-14 08:07:14,740, INFO - proxy settings: {}
2025-11-14 08:07:14,740, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2025-11-14 08:07:14,826, INFO - MDE is installed
2025-11-14 08:07:14,826, INFO - Wait for MDE service to be available
2025-11-14 08:07:15,421, INFO - MDE is onboarded
2025-11-14 08:07:15,799, INFO - MDC tags in MDE are valid
2025-11-14 08:07:15,799, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2025-11-14 08:07:21,967, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.3 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25092.0001
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25092.0001
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2025-11-14 08:07:21,968, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2025-11-14 08:07:23,733, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.9/status/3.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/briscoewebsite-rg/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2025-11-14 08:07:23,734, INFO - End executing installer wrapper
2025-11-14 11:43:11,645, INFO - Start executing installer wrapper
2025-11-14 11:43:11,645, INFO - proxy settings: {}
2025-11-14 11:43:11,645, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2025-11-14 11:43:11,719, INFO - MDE is installed
2025-11-14 11:43:11,719, INFO - Wait for MDE service to be available
2025-11-14 11:43:12,300, INFO - MDE is onboarded
2025-11-14 11:43:12,606, INFO - MDC tags in MDE are valid
2025-11-14 11:43:12,607, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2025-11-14 11:43:18,586, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.3 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25092.0001
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25092.0001
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2025-11-14 11:43:18,587, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2025-11-14 11:43:19,025, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.9/status/4.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2025-11-14 11:43:19,026, INFO - End executing installer wrapper
2025-11-15 08:11:25,094, INFO - Start executing installer wrapper
2025-11-15 08:11:25,096, INFO - proxy settings: {}
2025-11-15 08:11:25,096, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2025-11-15 08:11:25,173, INFO - MDE is installed
2025-11-15 08:11:25,173, INFO - Wait for MDE service to be available
2025-11-15 08:11:25,842, INFO - MDE is onboarded
2025-11-15 08:11:26,130, INFO - MDC tags in MDE are valid
2025-11-15 08:11:26,131, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2025-11-15 08:11:33,206, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.3 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25092.0001
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25092.0001
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2025-11-15 08:11:33,207, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2025-11-15 08:11:33,510, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.9/status/4.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2025-11-15 08:11:33,511, INFO - End executing installer wrapper
2025-11-16 08:09:54,664, INFO - Start executing installer wrapper
2025-11-16 08:09:54,683, INFO - proxy settings: {}
2025-11-16 08:09:54,683, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2025-11-16 08:09:54,759, INFO - MDE is installed
2025-11-16 08:09:54,760, INFO - Wait for MDE service to be available
2025-11-16 08:09:55,505, INFO - MDE is onboarded
2025-11-16 08:09:55,796, INFO - MDC tags in MDE are valid
2025-11-16 08:09:55,796, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2025-11-16 08:10:01,764, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.3 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25092.0001
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25092.0001
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2025-11-16 08:10:01,765, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2025-11-16 08:10:02,209, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.9/status/4.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/briscoewebsite-rg/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2025-11-16 08:10:02,210, INFO - End executing installer wrapper
2025-11-17 08:04:13,976, INFO - Start executing installer wrapper
2025-11-17 08:04:13,978, INFO - proxy settings: {}
2025-11-17 08:04:13,978, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2025-11-17 08:04:14,050, INFO - MDE is installed
2025-11-17 08:04:14,051, INFO - Wait for MDE service to be available
2025-11-17 08:04:15,056, INFO - MDE is onboarded
2025-11-17 08:04:15,364, INFO - MDC tags in MDE are valid
2025-11-17 08:04:15,364, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2025-11-17 08:04:21,142, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.3 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25092.0001
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25092.0001
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2025-11-17 08:04:21,143, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2025-11-17 08:04:22,019, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.9/status/4.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/briscoewebsite-rg/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2025-11-17 08:04:22,020, INFO - End executing installer wrapper
2025-11-18 08:08:03,562, INFO - Start executing installer wrapper
2025-11-18 08:08:03,563, INFO - proxy settings: {}
2025-11-18 08:08:03,563, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2025-11-18 08:08:03,728, INFO - MDE is installed
2025-11-18 08:08:03,729, INFO - Wait for MDE service to be available
2025-11-18 08:08:04,521, INFO - MDE is onboarded
2025-11-18 08:08:04,818, INFO - MDC tags in MDE are valid
2025-11-18 08:08:04,819, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2025-11-18 08:08:11,559, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.3 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25092.0001
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25092.0001
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2025-11-18 08:08:11,560, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2025-11-18 08:08:12,035, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.9/status/4.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/briscoewebsite-rg/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2025-11-18 08:08:12,036, INFO - End executing installer wrapper
2025-11-19 08:09:19,523, INFO - Start executing installer wrapper
2025-11-19 08:09:19,525, INFO - proxy settings: {}
2025-11-19 08:09:19,525, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2025-11-19 08:09:19,597, INFO - MDE is installed
2025-11-19 08:09:19,597, INFO - Wait for MDE service to be available
2025-11-19 08:09:20,420, INFO - MDE is onboarded
2025-11-19 08:09:20,717, INFO - MDC tags in MDE are valid
2025-11-19 08:09:20,717, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2025-11-19 08:09:28,186, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.3 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25092.0001
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25092.0001
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2025-11-19 08:09:28,187, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2025-11-19 08:09:28,475, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.9/status/4.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/briscoewebsite-rg/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2025-11-19 08:09:28,476, INFO - End executing installer wrapper
2025-11-20 08:02:21,359, INFO - Start executing installer wrapper
2025-11-20 08:02:21,363, INFO - proxy settings: {}
2025-11-20 08:02:21,363, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2025-11-20 08:02:21,439, INFO - MDE is installed
2025-11-20 08:02:21,439, INFO - Wait for MDE service to be available
2025-11-20 08:02:22,574, INFO - MDE is onboarded
2025-11-20 08:02:22,804, INFO - MDC tags in MDE are valid
2025-11-20 08:02:22,804, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2025-11-20 08:02:29,460, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.3 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25092.0001
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25092.0001
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2025-11-20 08:02:29,461, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2025-11-20 08:02:29,735, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.9/status/4.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/briscoewebsite-rg/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2025-11-20 08:02:29,736, INFO - End executing installer wrapper
2025-11-21 08:03:21,468, INFO - Start executing installer wrapper
2025-11-21 08:03:21,470, INFO - proxy settings: {}
2025-11-21 08:03:21,471, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2025-11-21 08:03:21,563, INFO - MDE is installed
2025-11-21 08:03:21,564, INFO - Wait for MDE service to be available
2025-11-21 08:03:22,497, INFO - MDE is onboarded
2025-11-21 08:03:22,789, INFO - MDC tags in MDE are valid
2025-11-21 08:03:22,790, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2025-11-21 08:03:31,465, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.3 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25092.0001
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25092.0001
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2025-11-21 08:03:31,466, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2025-11-21 08:03:31,728, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.9/status/4.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/briscoewebsite-rg/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2025-11-21 08:03:31,729, INFO - End executing installer wrapper
2025-11-21 17:43:19,529, INFO - Start executing installer wrapper
2025-11-21 17:43:19,530, INFO - proxy settings: {}
2025-11-21 17:43:19,530, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2025-11-21 17:43:19,606, INFO - MDE is installed
2025-11-21 17:43:19,606, INFO - Wait for MDE service to be available
2025-11-21 17:43:20,093, INFO - MDE is onboarded
2025-11-21 17:43:20,389, INFO - MDC tags in MDE are valid
2025-11-21 17:43:20,389, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2025-11-21 17:43:26,164, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.3 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25092.0001
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25092.0001
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2025-11-21 17:43:26,164, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2025-11-21 17:43:26,426, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.9/status/5.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/briscoewebsite-rg/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2025-11-21 17:43:26,427, INFO - End executing installer wrapper
2025-11-22 08:08:31,797, INFO - Start executing installer wrapper
2025-11-22 08:08:31,808, INFO - proxy settings: {}
2025-11-22 08:08:31,809, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2025-11-22 08:08:31,880, INFO - MDE is installed
2025-11-22 08:08:31,881, INFO - Wait for MDE service to be available
2025-11-22 08:08:32,525, INFO - MDE is onboarded
2025-11-22 08:08:32,747, INFO - MDC tags in MDE are valid
2025-11-22 08:08:32,747, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2025-11-22 08:08:38,203, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.3 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25092.0001
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25092.0001
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2025-11-22 08:08:38,204, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2025-11-22 08:08:39,958, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.9/status/5.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2025-11-22 08:08:39,958, INFO - End executing installer wrapper
2025-11-23 08:02:45,339, INFO - Start executing installer wrapper
2025-11-23 08:02:45,341, INFO - proxy settings: {}
2025-11-23 08:02:45,342, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2025-11-23 08:02:45,412, INFO - MDE is installed
2025-11-23 08:02:45,412, INFO - Wait for MDE service to be available
2025-11-23 08:02:46,255, INFO - MDE is onboarded
2025-11-23 08:02:46,544, INFO - MDC tags in MDE are valid
2025-11-23 08:02:46,544, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2025-11-23 08:02:53,614, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.3 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25092.0001
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25092.0001
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2025-11-23 08:02:53,615, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2025-11-23 08:02:53,878, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.9/status/5.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/briscoewebsite-rg/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2025-11-23 08:02:53,879, INFO - End executing installer wrapper
2025-11-24 08:06:30,517, INFO - Start executing installer wrapper
2025-11-24 08:06:30,519, INFO - proxy settings: {}
2025-11-24 08:06:30,519, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2025-11-24 08:06:30,591, INFO - MDE is installed
2025-11-24 08:06:30,591, INFO - Wait for MDE service to be available
2025-11-24 08:06:31,434, INFO - MDE is onboarded
2025-11-24 08:06:31,731, INFO - MDC tags in MDE are valid
2025-11-24 08:06:31,731, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2025-11-24 08:06:39,699, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.3 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25092.0001
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25092.0001
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2025-11-24 08:06:39,700, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2025-11-24 08:06:39,969, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.9/status/5.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/briscoewebsite-rg/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2025-11-24 08:06:39,970, INFO - End executing installer wrapper
2025-11-25 08:04:20,743, INFO - Start executing installer wrapper
2025-11-25 08:04:20,745, INFO - proxy settings: {}
2025-11-25 08:04:20,746, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2025-11-25 08:04:20,820, INFO - MDE is installed
2025-11-25 08:04:20,820, INFO - Wait for MDE service to be available
2025-11-25 08:04:21,739, INFO - MDE is onboarded
2025-11-25 08:04:22,040, INFO - MDC tags in MDE are valid
2025-11-25 08:04:22,041, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2025-11-25 08:04:31,399, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.3 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25092.0001
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25092.0001
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2025-11-25 08:04:31,400, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2025-11-25 08:04:31,764, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.9/status/5.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/briscoewebsite-rg/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2025-11-25 08:04:32,027, INFO - End executing installer wrapper
2025-11-26 08:04:59,853, INFO - Start executing installer wrapper
2025-11-26 08:04:59,855, INFO - proxy settings: {}
2025-11-26 08:04:59,856, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2025-11-26 08:04:59,940, INFO - MDE is installed
2025-11-26 08:04:59,940, INFO - Wait for MDE service to be available
2025-11-26 08:05:00,353, INFO - MDE is onboarded
2025-11-26 08:05:00,557, INFO - MDC tags in MDE are valid
2025-11-26 08:05:00,558, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2025-11-26 08:05:09,713, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.3 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25092.0001
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25092.0001
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2025-11-26 08:05:09,714, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2025-11-26 08:05:09,901, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.9/status/5.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/briscoewebsite-rg/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2025-11-26 08:05:09,902, INFO - End executing installer wrapper
2025-11-27 08:12:52,691, INFO - Start executing installer wrapper
2025-11-27 08:12:52,694, INFO - proxy settings: {}
2025-11-27 08:12:52,694, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2025-11-27 08:12:52,768, INFO - MDE is installed
2025-11-27 08:12:52,768, INFO - Wait for MDE service to be available
2025-11-27 08:12:53,595, INFO - MDE is onboarded
2025-11-27 08:12:53,886, INFO - MDC tags in MDE are valid
2025-11-27 08:12:53,887, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2025-11-27 08:13:00,456, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.3 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25092.0001
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25092.0001
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2025-11-27 08:13:00,457, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2025-11-27 08:13:01,420, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.9/status/5.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/briscoewebsite-rg/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2025-11-27 08:13:01,421, INFO - End executing installer wrapper
2025-11-28 08:07:58,619, INFO - Start executing installer wrapper
2025-11-28 08:07:58,649, INFO - proxy settings: {}
2025-11-28 08:07:58,649, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2025-11-28 08:07:58,723, INFO - MDE is installed
2025-11-28 08:07:58,723, INFO - Wait for MDE service to be available
2025-11-28 08:07:59,320, INFO - MDE is onboarded
2025-11-28 08:07:59,521, INFO - MDC tags in MDE are valid
2025-11-28 08:07:59,521, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2025-11-28 08:08:07,586, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.3 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25092.0001
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25092.0001
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2025-11-28 08:08:07,587, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2025-11-28 08:08:07,847, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.9/status/5.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/briscoewebsite-rg/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2025-11-28 08:08:07,848, INFO - End executing installer wrapper
2025-11-28 23:43:09,076, INFO - Start executing installer wrapper
2025-11-28 23:43:09,078, INFO - proxy settings: {}
2025-11-28 23:43:09,078, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2025-11-28 23:43:09,170, INFO - MDE is installed
2025-11-28 23:43:09,170, INFO - Wait for MDE service to be available
2025-11-28 23:43:09,566, INFO - MDE is onboarded
2025-11-28 23:43:09,769, INFO - MDC tags in MDE are valid
2025-11-28 23:43:09,770, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2025-11-28 23:43:18,949, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.3 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25092.0001
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25092.0001
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2025-11-28 23:43:18,950, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2025-11-28 23:43:19,209, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.9/status/6.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/briscoewebsite-rg/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2025-11-28 23:43:19,210, INFO - End executing installer wrapper
2025-11-29 08:10:13,711, INFO - Start executing installer wrapper
2025-11-29 08:10:13,737, INFO - proxy settings: {}
2025-11-29 08:10:13,737, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2025-11-29 08:10:13,808, INFO - MDE is installed
2025-11-29 08:10:13,809, INFO - Wait for MDE service to be available
2025-11-29 08:10:14,172, INFO - MDE is onboarded
2025-11-29 08:10:14,374, INFO - MDC tags in MDE are valid
2025-11-29 08:10:14,375, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2025-11-29 08:10:21,219, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.3 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25092.0001
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25092.0001
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2025-11-29 08:10:21,220, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2025-11-29 08:10:21,478, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.9/status/6.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2025-11-29 08:10:21,478, INFO - End executing installer wrapper
2025-11-30 08:07:40,590, INFO - Start executing installer wrapper
2025-11-30 08:07:40,601, INFO - proxy settings: {}
2025-11-30 08:07:40,602, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2025-11-30 08:07:40,677, INFO - MDE is installed
2025-11-30 08:07:40,678, INFO - Wait for MDE service to be available
2025-11-30 08:07:41,259, INFO - MDE is onboarded
2025-11-30 08:07:41,577, INFO - MDC tags in MDE are valid
2025-11-30 08:07:41,577, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2025-11-30 08:07:48,352, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.3 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25092.0001
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25092.0001
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2025-11-30 08:07:48,352, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2025-11-30 08:07:48,705, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.9/status/6.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/briscoewebsite-rg/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2025-11-30 08:07:48,706, INFO - End executing installer wrapper
2025-12-01 08:08:29,105, INFO - Start executing installer wrapper
2025-12-01 08:08:29,108, INFO - proxy settings: {}
2025-12-01 08:08:29,108, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2025-12-01 08:08:29,186, INFO - MDE is installed
2025-12-01 08:08:29,186, INFO - Wait for MDE service to be available
2025-12-01 08:08:29,995, INFO - MDE is onboarded
2025-12-01 08:08:30,302, INFO - MDC tags in MDE are valid
2025-12-01 08:08:30,303, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2025-12-01 08:08:37,544, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.3 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25092.0001
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25092.0001
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2025-12-01 08:08:37,545, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2025-12-01 08:08:37,912, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.9/status/6.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/briscoewebsite-rg/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2025-12-01 08:08:37,912, INFO - End executing installer wrapper
2025-12-02 08:07:16,105, INFO - Start executing installer wrapper
2025-12-02 08:07:16,107, INFO - proxy settings: {}
2025-12-02 08:07:16,107, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2025-12-02 08:07:16,183, INFO - MDE is installed
2025-12-02 08:07:16,183, INFO - Wait for MDE service to be available
2025-12-02 08:07:16,647, INFO - MDE is onboarded
2025-12-02 08:07:16,850, INFO - MDC tags in MDE are valid
2025-12-02 08:07:16,851, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2025-12-02 08:07:22,541, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.3 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25092.0001
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25092.0001
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2025-12-02 08:07:22,542, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2025-12-02 08:07:22,796, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.9/status/6.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/briscoewebsite-rg/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2025-12-02 08:07:22,797, INFO - End executing installer wrapper
2025-12-03 08:10:52,756, INFO - Start executing installer wrapper
2025-12-03 08:10:52,757, INFO - proxy settings: {}
2025-12-03 08:10:52,757, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2025-12-03 08:10:52,839, INFO - MDE is installed
2025-12-03 08:10:52,839, INFO - Wait for MDE service to be available
2025-12-03 08:10:53,194, INFO - MDE is onboarded
2025-12-03 08:10:53,392, INFO - MDC tags in MDE are valid
2025-12-03 08:10:53,393, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2025-12-03 08:10:58,740, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.3 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25092.0001
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25092.0001
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2025-12-03 08:10:58,740, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2025-12-03 08:10:58,934, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.9/status/6.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/briscoewebsite-rg/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2025-12-03 08:10:58,935, INFO - End executing installer wrapper
2025-12-04 08:08:24,328, INFO - Start executing installer wrapper
2025-12-04 08:08:24,329, INFO - proxy settings: {}
2025-12-04 08:08:24,330, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2025-12-04 08:08:24,423, INFO - MDE is installed
2025-12-04 08:08:24,423, INFO - Wait for MDE service to be available
2025-12-04 08:08:25,186, INFO - MDE is onboarded
2025-12-04 08:08:25,408, INFO - MDC tags in MDE are valid
2025-12-04 08:08:25,408, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2025-12-04 08:08:31,276, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.0 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25092.0001
[>] Running command: yum  -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25092.0001
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2025-12-04 08:08:31,277, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2025-12-04 08:08:31,648, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.9/status/6.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/briscoewebsite-rg/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2025-12-04 08:08:31,649, INFO - End executing installer wrapper
2025-12-05 08:03:49,404, INFO - Start executing installer wrapper
2025-12-05 08:03:49,406, INFO - proxy settings: {}
2025-12-05 08:03:49,406, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2025-12-05 08:03:49,485, INFO - MDE is installed
2025-12-05 08:03:49,486, INFO - Wait for MDE service to be available
2025-12-05 08:03:50,415, INFO - MDE is onboarded
2025-12-05 08:03:50,719, INFO - MDC tags in MDE are valid
2025-12-05 08:03:50,720, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2025-12-05 08:03:57,816, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.0 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25092.0001
[>] Running command: yum  -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25092.0001
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2025-12-05 08:03:57,817, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2025-12-05 08:03:58,252, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.9/status/6.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/briscoewebsite-rg/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2025-12-05 08:03:58,253, INFO - End executing installer wrapper
2025-12-06 05:43:19,208, INFO - Start executing installer wrapper
2025-12-06 05:43:19,210, INFO - proxy settings: {}
2025-12-06 05:43:19,210, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2025-12-06 05:43:19,288, INFO - MDE is installed
2025-12-06 05:43:19,289, INFO - Wait for MDE service to be available
2025-12-06 05:43:19,898, INFO - MDE is onboarded
2025-12-06 05:43:20,207, INFO - MDC tags in MDE are valid
2025-12-06 05:43:20,207, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2025-12-06 05:43:26,254, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.0 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25092.0001
[>] Running command: yum  -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25092.0001
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2025-12-06 05:43:26,255, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2025-12-06 05:43:26,520, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.9/status/7.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2025-12-06 05:43:26,521, INFO - End executing installer wrapper
2025-12-06 08:07:26,957, INFO - Start executing installer wrapper
2025-12-06 08:07:26,957, INFO - proxy settings: {}
2025-12-06 08:07:26,957, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2025-12-06 08:07:27,035, INFO - MDE is installed
2025-12-06 08:07:27,035, INFO - Wait for MDE service to be available
2025-12-06 08:07:27,578, INFO - MDE is onboarded
2025-12-06 08:07:27,878, INFO - MDC tags in MDE are valid
2025-12-06 08:07:27,878, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2025-12-06 08:07:35,153, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.0 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25092.0001
[>] Running command: yum  -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25092.0001
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2025-12-06 08:07:35,154, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2025-12-06 08:07:35,417, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.9/status/7.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2025-12-06 08:07:35,418, INFO - End executing installer wrapper
2025-12-07 08:03:56,603, INFO - Start executing installer wrapper
2025-12-07 08:03:56,605, INFO - proxy settings: {}
2025-12-07 08:03:56,605, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2025-12-07 08:03:56,680, INFO - MDE is installed
2025-12-07 08:03:56,680, INFO - Wait for MDE service to be available
2025-12-07 08:03:57,295, INFO - MDE is onboarded
2025-12-07 08:03:57,515, INFO - MDC tags in MDE are valid
2025-12-07 08:03:57,515, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2025-12-07 08:04:04,624, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.0 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25092.0001
[>] Running command: yum  -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25092.0001
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2025-12-07 08:04:04,625, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2025-12-07 08:04:04,942, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.9/status/7.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/briscoewebsite-rg/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2025-12-07 08:04:04,942, INFO - End executing installer wrapper
2025-12-08 08:08:14,938, INFO - Start executing installer wrapper
2025-12-08 08:08:14,942, INFO - proxy settings: {}
2025-12-08 08:08:14,943, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2025-12-08 08:08:15,026, INFO - MDE is installed
2025-12-08 08:08:15,026, INFO - Wait for MDE service to be available
2025-12-08 08:08:15,701, INFO - MDE is onboarded
2025-12-08 08:08:15,992, INFO - MDC tags in MDE are valid
2025-12-08 08:08:15,992, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2025-12-08 08:08:22,662, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.0 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25092.0001
[>] Running command: yum  -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25092.0001
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2025-12-08 08:08:22,663, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2025-12-08 08:08:23,114, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.9/status/7.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/briscoewebsite-rg/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2025-12-08 08:08:23,115, INFO - End executing installer wrapper
2025-12-09 08:07:19,785, INFO - Start executing installer wrapper
2025-12-09 08:07:19,787, INFO - proxy settings: {}
2025-12-09 08:07:19,787, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2025-12-09 08:07:19,877, INFO - MDE is installed
2025-12-09 08:07:19,878, INFO - Wait for MDE service to be available
2025-12-09 08:07:20,645, INFO - MDE is onboarded
2025-12-09 08:07:20,866, INFO - MDC tags in MDE are valid
2025-12-09 08:07:20,866, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2025-12-09 08:07:28,412, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.0 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25092.0001
[>] Running command: yum  -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25092.0001
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2025-12-09 08:07:28,413, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2025-12-09 08:07:28,778, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.9/status/7.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/briscoewebsite-rg/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2025-12-09 08:07:28,778, INFO - End executing installer wrapper
2025-12-10 08:03:26,356, INFO - Start executing installer wrapper
2025-12-10 08:03:26,359, INFO - proxy settings: {}
2025-12-10 08:03:26,360, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2025-12-10 08:03:26,434, INFO - MDE is installed
2025-12-10 08:03:26,434, INFO - Wait for MDE service to be available
2025-12-10 08:03:27,134, INFO - MDE is onboarded
2025-12-10 08:03:27,437, INFO - MDC tags in MDE are valid
2025-12-10 08:03:27,437, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2025-12-10 08:03:35,487, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.3 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25092.0002
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25092.0002
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2025-12-10 08:03:35,488, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2025-12-10 08:03:35,860, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.9/status/7.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/briscoewebsite-rg/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2025-12-10 08:03:36,158, INFO - End executing installer wrapper
2025-12-11 08:05:17,842, INFO - Start executing installer wrapper
2025-12-11 08:05:17,845, INFO - proxy settings: {}
2025-12-11 08:05:17,845, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2025-12-11 08:05:17,920, INFO - MDE is installed
2025-12-11 08:05:17,920, INFO - Wait for MDE service to be available
2025-12-11 08:05:18,869, INFO - MDE is onboarded
2025-12-11 08:05:19,180, INFO - MDC tags in MDE are valid
2025-12-11 08:05:19,180, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2025-12-11 08:05:27,134, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.3 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25092.0002
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25092.0002
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2025-12-11 08:05:27,135, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2025-12-11 08:05:27,605, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.9/status/7.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/briscoewebsite-rg/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2025-12-11 08:05:27,606, INFO - End executing installer wrapper
2025-12-12 08:11:33,319, INFO - Start executing installer wrapper
2025-12-12 08:11:33,322, INFO - proxy settings: {}
2025-12-12 08:11:33,323, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2025-12-12 08:11:33,399, INFO - MDE is installed
2025-12-12 08:11:33,400, INFO - Wait for MDE service to be available
2025-12-12 08:11:34,239, INFO - MDE is onboarded
2025-12-12 08:11:34,542, INFO - MDC tags in MDE are valid
2025-12-12 08:11:34,542, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2025-12-12 08:11:43,518, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.3 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25092.0002
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25092.0002
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2025-12-12 08:11:43,519, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2025-12-12 08:11:43,896, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.9/status/7.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/briscoewebsite-rg/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2025-12-12 08:11:43,896, INFO - End executing installer wrapper
2025-12-13 08:02:44,444, INFO - Start executing installer wrapper
2025-12-13 08:02:44,446, INFO - proxy settings: {}
2025-12-13 08:02:44,447, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2025-12-13 08:02:44,523, INFO - MDE is installed
2025-12-13 08:02:44,523, INFO - Wait for MDE service to be available
2025-12-13 08:02:45,227, INFO - MDE is onboarded
2025-12-13 08:02:45,531, INFO - MDC tags in MDE are valid
2025-12-13 08:02:45,532, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2025-12-13 08:02:52,905, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.3 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25092.0002
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25092.0002
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2025-12-13 08:02:52,906, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2025-12-13 08:02:53,851, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.9/status/7.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/briscoewebsite-rg/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2025-12-13 08:02:53,851, INFO - End executing installer wrapper
2025-12-13 11:43:10,913, INFO - Start executing installer wrapper
2025-12-13 11:43:10,914, INFO - proxy settings: {}
2025-12-13 11:43:10,914, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2025-12-13 11:43:10,988, INFO - MDE is installed
2025-12-13 11:43:10,988, INFO - Wait for MDE service to be available
2025-12-13 11:43:11,619, INFO - MDE is onboarded
2025-12-13 11:43:11,919, INFO - MDC tags in MDE are valid
2025-12-13 11:43:11,920, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2025-12-13 11:43:17,903, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.3 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25092.0002
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25092.0002
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2025-12-13 11:43:17,904, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2025-12-13 11:43:18,239, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.9/status/8.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/briscoewebsite-rg/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2025-12-13 11:43:18,239, INFO - End executing installer wrapper
2025-12-14 08:09:25,526, INFO - Start executing installer wrapper
2025-12-14 08:09:25,528, INFO - proxy settings: {}
2025-12-14 08:09:25,528, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2025-12-14 08:09:25,600, INFO - MDE is installed
2025-12-14 08:09:25,600, INFO - Wait for MDE service to be available
2025-12-14 08:09:26,421, INFO - MDE is onboarded
2025-12-14 08:09:26,723, INFO - MDC tags in MDE are valid
2025-12-14 08:09:26,724, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2025-12-14 08:09:34,106, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.3 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25092.0002
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25092.0002
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2025-12-14 08:09:34,107, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2025-12-14 08:09:34,452, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.9/status/8.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2025-12-14 08:09:34,453, INFO - End executing installer wrapper
2025-12-15 08:07:18,774, INFO - Start executing installer wrapper
2025-12-15 08:07:18,780, INFO - proxy settings: {}
2025-12-15 08:07:18,780, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2025-12-15 08:07:18,856, INFO - MDE is installed
2025-12-15 08:07:18,856, INFO - Wait for MDE service to be available
2025-12-15 08:07:19,743, INFO - MDE is onboarded
2025-12-15 08:07:20,051, INFO - MDC tags in MDE are valid
2025-12-15 08:07:20,051, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2025-12-15 08:07:28,610, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.3 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25092.0002
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25092.0002
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2025-12-15 08:07:28,611, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2025-12-15 08:07:28,986, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.9/status/8.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/briscoewebsite-rg/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2025-12-15 08:07:28,987, INFO - End executing installer wrapper
2025-12-16 08:06:30,293, INFO - Start executing installer wrapper
2025-12-16 08:06:30,295, INFO - proxy settings: {}
2025-12-16 08:06:30,295, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2025-12-16 08:06:30,367, INFO - MDE is installed
2025-12-16 08:06:30,367, INFO - Wait for MDE service to be available
2025-12-16 08:06:31,240, INFO - MDE is onboarded
2025-12-16 08:06:31,619, INFO - MDC tags in MDE are valid
2025-12-16 08:06:31,620, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2025-12-16 08:06:39,705, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.3 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25092.0002
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25092.0002
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2025-12-16 08:06:39,706, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2025-12-16 08:06:39,979, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.9/status/8.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/briscoewebsite-rg/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2025-12-16 08:06:39,981, INFO - End executing installer wrapper
2025-12-17 08:08:43,027, INFO - Start executing installer wrapper
2025-12-17 08:08:43,028, INFO - proxy settings: {}
2025-12-17 08:08:43,028, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2025-12-17 08:08:43,106, INFO - MDE is installed
2025-12-17 08:08:43,106, INFO - Wait for MDE service to be available
2025-12-17 08:08:44,149, INFO - MDE is onboarded
2025-12-17 08:08:44,453, INFO - MDC tags in MDE are valid
2025-12-17 08:08:44,453, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2025-12-17 08:08:52,072, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.3 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25092.0002
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25092.0002
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2025-12-17 08:08:52,073, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2025-12-17 08:08:52,693, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.9/status/8.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/briscoewebsite-rg/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2025-12-17 08:08:52,693, INFO - End executing installer wrapper
2025-12-18 08:07:39,341, INFO - Start executing installer wrapper
2025-12-18 08:07:39,343, INFO - proxy settings: {}
2025-12-18 08:07:39,343, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2025-12-18 08:07:39,419, INFO - MDE is installed
2025-12-18 08:07:39,419, INFO - Wait for MDE service to be available
2025-12-18 08:07:40,191, INFO - MDE is onboarded
2025-12-18 08:07:40,492, INFO - MDC tags in MDE are valid
2025-12-18 08:07:40,492, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2025-12-18 08:07:47,544, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.3 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25092.0002
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25092.0002
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2025-12-18 08:07:47,545, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2025-12-18 08:07:47,911, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.9/status/8.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/briscoewebsite-rg/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2025-12-18 08:07:47,912, INFO - End executing installer wrapper
2025-12-19 08:04:27,665, INFO - Start executing installer wrapper
2025-12-19 08:04:27,667, INFO - proxy settings: {}
2025-12-19 08:04:27,667, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2025-12-19 08:04:27,749, INFO - MDE is installed
2025-12-19 08:04:27,750, INFO - Wait for MDE service to be available
2025-12-19 08:04:28,220, INFO - MDE is onboarded
2025-12-19 08:04:28,431, INFO - MDC tags in MDE are valid
2025-12-19 08:04:28,432, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2025-12-19 08:04:35,180, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.3 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25092.0002
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25092.0002
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2025-12-19 08:04:35,181, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2025-12-19 08:04:35,546, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.9/status/8.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/briscoewebsite-rg/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2025-12-19 08:04:35,546, INFO - End executing installer wrapper
2025-12-20 08:07:00,642, INFO - Start executing installer wrapper
2025-12-20 08:07:00,644, INFO - proxy settings: {}
2025-12-20 08:07:00,645, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2025-12-20 08:07:00,724, INFO - MDE is installed
2025-12-20 08:07:00,724, INFO - Wait for MDE service to be available
2025-12-20 08:07:01,424, INFO - MDE is onboarded
2025-12-20 08:07:02,022, INFO - MDC tags in MDE are valid
2025-12-20 08:07:02,022, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2025-12-20 08:07:09,297, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.3 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25092.0002
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25092.0002
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2025-12-20 08:07:09,298, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2025-12-20 08:07:09,968, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.9/status/8.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/briscoewebsite-rg/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2025-12-20 08:07:09,969, INFO - End executing installer wrapper
2025-12-20 17:43:02,527, INFO - Start executing installer wrapper
2025-12-20 17:43:02,530, INFO - proxy settings: {}
2025-12-20 17:43:02,530, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2025-12-20 17:43:02,604, INFO - MDE is installed
2025-12-20 17:43:02,605, INFO - Wait for MDE service to be available
2025-12-20 17:43:03,139, INFO - MDE is onboarded
2025-12-20 17:43:03,435, INFO - MDC tags in MDE are valid
2025-12-20 17:43:03,436, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2025-12-20 17:43:10,094, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.3 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25092.0002
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25092.0002
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2025-12-20 17:43:10,095, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2025-12-20 17:43:10,525, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.9/status/9.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2025-12-20 17:43:10,526, INFO - End executing installer wrapper
2025-12-21 08:04:06,622, INFO - Start executing installer wrapper
2025-12-21 08:04:06,635, INFO - proxy settings: {}
2025-12-21 08:04:06,635, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2025-12-21 08:04:06,714, INFO - MDE is installed
2025-12-21 08:04:06,715, INFO - Wait for MDE service to be available
2025-12-21 08:04:07,620, INFO - MDE is onboarded
2025-12-21 08:04:07,999, INFO - MDC tags in MDE are valid
2025-12-21 08:04:08,000, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2025-12-21 08:04:16,969, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.3 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25092.0002
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25092.0002
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2025-12-21 08:04:16,970, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2025-12-21 08:04:17,339, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.9/status/9.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2025-12-21 08:04:17,340, INFO - End executing installer wrapper
2025-12-22 08:06:30,206, INFO - Start executing installer wrapper
2025-12-22 08:06:30,208, INFO - proxy settings: {}
2025-12-22 08:06:30,208, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2025-12-22 08:06:30,284, INFO - MDE is installed
2025-12-22 08:06:30,284, INFO - Wait for MDE service to be available
2025-12-22 08:06:31,127, INFO - MDE is onboarded
2025-12-22 08:06:31,430, INFO - MDC tags in MDE are valid
2025-12-22 08:06:31,431, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2025-12-22 08:06:39,977, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.3 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25092.0002
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25092.0002
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2025-12-22 08:06:39,978, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2025-12-22 08:06:40,345, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.9/status/9.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/briscoewebsite-rg/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2025-12-22 08:06:40,346, INFO - End executing installer wrapper
2025-12-23 08:02:53,791, INFO - Start executing installer wrapper
2025-12-23 08:02:53,793, INFO - proxy settings: {}
2025-12-23 08:02:53,793, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2025-12-23 08:02:53,863, INFO - MDE is installed
2025-12-23 08:02:53,863, INFO - Wait for MDE service to be available
2025-12-23 08:02:54,369, INFO - MDE is onboarded
2025-12-23 08:02:54,658, INFO - MDC tags in MDE are valid
2025-12-23 08:02:54,658, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2025-12-23 08:03:02,792, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.3 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25092.0002
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25092.0002
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2025-12-23 08:03:02,793, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2025-12-23 08:03:03,482, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.9/status/9.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/briscoewebsite-rg/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2025-12-23 08:03:03,483, INFO - End executing installer wrapper
2025-12-24 08:07:47,140, INFO - Start executing installer wrapper
2025-12-24 08:07:47,142, INFO - proxy settings: {}
2025-12-24 08:07:47,142, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2025-12-24 08:07:47,235, INFO - MDE is installed
2025-12-24 08:07:47,235, INFO - Wait for MDE service to be available
2025-12-24 08:07:48,157, INFO - MDE is onboarded
2025-12-24 08:07:48,551, INFO - MDC tags in MDE are valid
2025-12-24 08:07:48,551, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2025-12-24 08:07:57,326, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.3 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25092.0002
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25092.0002
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2025-12-24 08:07:57,327, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2025-12-24 08:07:58,198, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.9/status/9.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/briscoewebsite-rg/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2025-12-24 08:07:58,199, INFO - End executing installer wrapper
2025-12-25 08:03:45,904, INFO - Start executing installer wrapper
2025-12-25 08:03:45,906, INFO - proxy settings: {}
2025-12-25 08:03:45,906, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2025-12-25 08:03:45,979, INFO - MDE is installed
2025-12-25 08:03:45,979, INFO - Wait for MDE service to be available
2025-12-25 08:03:46,603, INFO - MDE is onboarded
2025-12-25 08:03:46,911, INFO - MDC tags in MDE are valid
2025-12-25 08:03:46,911, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2025-12-25 08:03:55,861, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.3 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25092.0005
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25092.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2025-12-25 08:03:55,862, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2025-12-25 08:03:56,228, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.9/status/9.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/briscoewebsite-rg/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2025-12-25 08:03:56,229, INFO - End executing installer wrapper
2025-12-26 08:12:34,930, INFO - Start executing installer wrapper
2025-12-26 08:12:34,932, INFO - proxy settings: {}
2025-12-26 08:12:34,932, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2025-12-26 08:12:35,041, INFO - MDE is installed
2025-12-26 08:12:35,041, INFO - Wait for MDE service to be available
2025-12-26 08:12:35,693, INFO - MDE is onboarded
2025-12-26 08:12:35,993, INFO - MDC tags in MDE are valid
2025-12-26 08:12:35,993, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2025-12-26 08:12:42,261, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.3 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25092.0005
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25092.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2025-12-26 08:12:42,262, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2025-12-26 08:12:44,311, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.9/status/9.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/briscoewebsite-rg/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2025-12-26 08:12:44,312, INFO - End executing installer wrapper
2025-12-27 08:04:39,124, INFO - Start executing installer wrapper
2025-12-27 08:04:39,128, INFO - proxy settings: {}
2025-12-27 08:04:39,128, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2025-12-27 08:04:39,202, INFO - MDE is installed
2025-12-27 08:04:39,203, INFO - Wait for MDE service to be available
2025-12-27 08:04:39,762, INFO - MDE is onboarded
2025-12-27 08:04:40,061, INFO - MDC tags in MDE are valid
2025-12-27 08:04:40,062, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2025-12-27 08:04:46,459, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.3 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25092.0005
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25092.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2025-12-27 08:04:46,460, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2025-12-27 08:04:48,099, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.9/status/9.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/briscoewebsite-rg/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2025-12-27 08:04:48,100, INFO - End executing installer wrapper
2025-12-27 22:33:42,470, INFO - Start executing installer wrapper
2025-12-27 22:33:42,477, INFO - proxy settings: {}
2025-12-27 22:33:42,478, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2025-12-27 22:33:42,554, INFO - MDE is installed
2025-12-27 22:33:42,554, INFO - Wait for MDE service to be available
2025-12-27 22:33:43,172, INFO - MDE is onboarded
2025-12-27 22:33:43,483, INFO - MDC tags in MDE are valid
2025-12-27 22:33:43,483, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2025-12-27 22:33:50,233, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.3 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25092.0005
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25092.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2025-12-27 22:33:50,234, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2025-12-27 22:33:50,594, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.9/status/10.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/briscoewebsite-rg/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2025-12-27 22:33:50,595, INFO - End executing installer wrapper
2025-12-28 08:13:16,627, INFO - Start executing installer wrapper
2025-12-28 08:13:16,629, INFO - proxy settings: {}
2025-12-28 08:13:16,629, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2025-12-28 08:13:16,710, INFO - MDE is installed
2025-12-28 08:13:16,710, INFO - Wait for MDE service to be available
2025-12-28 08:13:17,466, INFO - MDE is onboarded
2025-12-28 08:13:17,775, INFO - MDC tags in MDE are valid
2025-12-28 08:13:17,776, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2025-12-28 08:13:25,956, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.3 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25092.0005
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25092.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2025-12-28 08:13:25,957, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2025-12-28 08:13:26,393, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.9/status/10.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/briscoewebsite-rg/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2025-12-28 08:13:26,393, INFO - End executing installer wrapper
2025-12-29 08:11:53,752, INFO - Start executing installer wrapper
2025-12-29 08:11:53,753, INFO - proxy settings: {}
2025-12-29 08:11:53,754, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2025-12-29 08:11:53,829, INFO - MDE is installed
2025-12-29 08:11:53,829, INFO - Wait for MDE service to be available
2025-12-29 08:11:54,524, INFO - MDE is onboarded
2025-12-29 08:11:54,824, INFO - MDC tags in MDE are valid
2025-12-29 08:11:54,825, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2025-12-29 08:12:02,919, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.3 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25092.0005
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25092.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2025-12-29 08:12:02,920, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2025-12-29 08:12:03,270, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.9/status/10.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/briscoewebsite-rg/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2025-12-29 08:12:03,271, INFO - End executing installer wrapper
2025-12-30 08:05:13,246, INFO - Start executing installer wrapper
2025-12-30 08:05:13,265, INFO - proxy settings: {}
2025-12-30 08:05:13,265, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2025-12-30 08:05:13,521, INFO - MDE is installed
2025-12-30 08:05:13,521, INFO - Wait for MDE service to be available
2025-12-30 08:05:19,430, INFO - MDE is onboarded
2025-12-30 08:05:21,498, INFO - MDC tags in MDE are valid
2025-12-30 08:05:21,516, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2025-12-30 08:06:10,230, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.3 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25092.0005
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25092.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2025-12-30 08:06:10,231, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2025-12-30 08:06:12,890, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.9/status/10.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/briscoewebsite-rg/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2025-12-30 08:06:12,909, INFO - End executing installer wrapper
2025-12-31 08:04:48,833, INFO - Start executing installer wrapper
2025-12-31 08:04:48,851, INFO - proxy settings: {}
2025-12-31 08:04:48,851, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2025-12-31 08:04:49,087, INFO - MDE is installed
2025-12-31 08:04:49,087, INFO - Wait for MDE service to be available
2025-12-31 08:04:52,532, INFO - MDE is onboarded
2025-12-31 08:04:53,886, INFO - MDC tags in MDE are valid
2025-12-31 08:04:53,887, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2025-12-31 08:05:41,861, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.3 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25092.0005
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25092.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2025-12-31 08:05:41,870, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2025-12-31 08:05:43,977, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.9/status/10.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/briscoewebsite-rg/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2025-12-31 08:05:44,035, INFO - End executing installer wrapper
2026-01-01 08:07:55,018, INFO - Start executing installer wrapper
2026-01-01 08:07:55,037, INFO - proxy settings: {}
2026-01-01 08:07:55,037, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-01-01 08:07:55,252, INFO - MDE is installed
2026-01-01 08:07:55,252, INFO - Wait for MDE service to be available
2026-01-01 08:08:00,573, INFO - MDE is onboarded
2026-01-01 08:08:02,861, INFO - MDC tags in MDE are valid
2026-01-01 08:08:02,862, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-01-01 08:09:07,058, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.3 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25092.0005
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25092.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2026-01-01 08:09:07,059, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-01-01 08:09:10,214, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.9/status/10.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/briscoewebsite-rg/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-01-01 08:09:10,252, INFO - End executing installer wrapper
2026-01-02 08:11:24,922, INFO - Start executing installer wrapper
2026-01-02 08:11:24,940, INFO - proxy settings: {}
2026-01-02 08:11:24,940, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-01-02 08:11:25,151, INFO - MDE is installed
2026-01-02 08:11:25,151, INFO - Wait for MDE service to be available
2026-01-02 08:11:28,754, INFO - MDE is onboarded
2026-01-02 08:11:30,471, INFO - MDC tags in MDE are valid
2026-01-02 08:11:30,471, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-01-02 08:12:19,541, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.3 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25092.0005
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25092.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2026-01-02 08:12:19,542, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-01-02 08:12:21,837, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.9/status/10.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/briscoewebsite-rg/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-01-02 08:12:21,856, INFO - End executing installer wrapper
2026-01-03 07:52:56,129, INFO - Start executing installer wrapper
2026-01-03 07:52:56,147, INFO - proxy settings: {}
2026-01-03 07:52:56,147, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-01-03 07:52:56,900, INFO - MDE is installed
2026-01-03 07:52:56,901, INFO - Wait for MDE service to be available
2026-01-03 07:52:58,476, INFO - start parsing onboarding script
2026-01-03 07:52:58,477, INFO - decode onboarding script successfully
2026-01-03 07:52:58,506, INFO - parse onboarding script successfully
2026-01-03 07:52:58,506, INFO - Starting onboarding script...
2026-01-03 07:52:58,506, INFO - Checking if Mde is installed
2026-01-03 07:52:58,506, INFO - Mde is installed: True
2026-01-03 07:52:58,506, INFO - Removing offboarding file if exists
2026-01-03 07:53:00,513, INFO - Onboarding...
2026-01-03 07:53:00,513, INFO - Generating /etc/opt/microsoft/mdatp/mdatp_onboard.json...
2026-01-03 07:53:01,727, INFO - Onboarding done
2026-01-03 07:53:01,728, INFO - Checking if Mde is healthy after onboarding
2026-01-03 07:55:41,016, INFO - Onboarding failed
2026-01-03 07:55:41,017, ERROR - MDE agent is not healthy after onboarding
2026-01-03 07:55:41,035, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-01-03 07:55:42,518, ERROR - Failed to configure Microsoft Defender for Endpoint: MDE agent is not healthy after onboarding
{"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/briscoewebsite-rg/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "N/A", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "correlationId": "N/A"}
2026-01-03 07:55:42,555, ERROR - Stack trace: Traceback (most recent call last):
  File "src/MdeInstallerWrapper.py", line 209, in main
    logutils.throw_and_write_log(error_message)
  File "/var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.9/src/LogUtils.py", line 25, in throw_and_write_log
    raise Exception(message)
Exception: MDE agent is not healthy after onboarding

2026-01-03 07:55:42,767, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.9/status/10.status, Status= error, Code= 443, Message= Failed to configure Microsoft Defender for Endpoint: MDE agent is not healthy after onboarding
{"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/briscoewebsite-rg/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "N/A", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "correlationId": "N/A"}
2026-01-03 07:55:42,795, INFO - End executing installer wrapper
2026-01-03 08:04:24,418, INFO - Start executing installer wrapper
2026-01-03 08:04:24,418, INFO - proxy settings: {}
2026-01-03 08:04:24,418, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-01-03 08:04:24,683, INFO - MDE is installed
2026-01-03 08:04:24,683, INFO - Wait for MDE service to be available
2026-01-03 08:04:29,918, INFO - MDE is onboarded
2026-01-03 08:04:32,050, INFO - MDC tags in MDE are valid
2026-01-03 08:04:32,050, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-01-03 08:05:29,400, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.3 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25092.0005
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25092.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2026-01-03 08:05:29,409, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-01-03 08:05:31,517, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.9/status/10.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/briscoewebsite-rg/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-01-03 08:05:31,545, INFO - End executing installer wrapper
2026-01-03 23:43:23,225, INFO - Start executing installer wrapper
2026-01-03 23:43:23,234, INFO - proxy settings: {}
2026-01-03 23:43:23,234, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-01-03 23:43:23,453, INFO - MDE is installed
2026-01-03 23:43:23,453, INFO - Wait for MDE service to be available
2026-01-03 23:43:28,508, INFO - MDE is onboarded
2026-01-03 23:43:30,447, INFO - MDC tags in MDE are valid
2026-01-03 23:43:30,448, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-01-03 23:44:06,409, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.3 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25092.0005
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25092.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2026-01-03 23:44:06,410, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-01-03 23:44:08,357, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.9/status/11.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/briscoewebsite-rg/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-01-03 23:44:08,357, INFO - End executing installer wrapper
2026-01-04 08:10:26,721, INFO - Start executing installer wrapper
2026-01-04 08:10:26,731, INFO - proxy settings: {}
2026-01-04 08:10:26,732, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-01-04 08:10:26,988, INFO - MDE is installed
2026-01-04 08:10:26,989, INFO - Wait for MDE service to be available
2026-01-04 08:10:32,872, INFO - MDE is onboarded
2026-01-04 08:10:35,026, INFO - MDC tags in MDE are valid
2026-01-04 08:10:35,027, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-01-04 08:11:23,824, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.3 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25092.0005
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25092.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2026-01-04 08:11:23,825, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-01-04 08:11:26,243, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.9/status/11.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/briscoewebsite-rg/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-01-04 08:11:26,252, INFO - End executing installer wrapper
2026-01-05 08:08:00,520, INFO - Start executing installer wrapper
2026-01-05 08:08:00,539, INFO - proxy settings: {}
2026-01-05 08:08:00,539, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-01-05 08:08:00,769, INFO - MDE is installed
2026-01-05 08:08:00,769, INFO - Wait for MDE service to be available
2026-01-05 08:08:07,690, INFO - MDE is onboarded
2026-01-05 08:08:09,772, INFO - MDC tags in MDE are valid
2026-01-05 08:08:09,773, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-01-05 08:08:32,774, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.3 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
error: rpmdb: BDB0113 Thread/process 2298/140387561138240 failed: BDB1507 Thread died in Berkeley DB library
error: db5 error(-30973) from dbenv->failchk: BDB0087 DB_RUNRECOVERY: Fatal error, run database recovery
error: cannot open Packages index using db5 -  (-30973)
error: cannot open Packages database in /var/lib/rpm
error: rpmdb: BDB0113 Thread/process 2298/140387561138240 failed: BDB1507 Thread died in Berkeley DB library
error: db5 error(-30973) from dbenv->failchk: BDB0087 DB_RUNRECOVERY: Fatal error, run database recovery
error: cannot open Packages database in /var/lib/rpm
error: rpmdb: BDB0113 Thread/process 2298/140387561138240 failed: BDB1507 Thread died in Berkeley DB library
error: db5 error(-30973) from dbenv->failchk: BDB0087 DB_RUNRECOVERY: Fatal error, run database recovery
error: cannot open Packages index using db5 -  (-30973)
error: cannot open Packages database in /var/lib/rpm
error: rpmdb: BDB0113 Thread/process 2298/140387561138240 failed: BDB1507 Thread died in Berkeley DB library
error: db5 error(-30973) from dbenv->failchk: BDB0087 DB_RUNRECOVERY: Fatal error, run database recovery
error: cannot open Packages database in /var/lib/rpm
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25092.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] MDE package is not installed. Please install it with --install option
[*] exiting (20)

2026-01-05 08:08:32,774, WARNING - Microsoft Defender for Endpoint installation failed with error code 20, error message Mde not installed
2026-01-05 08:08:32,775, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-01-05 08:08:36,008, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.9/status/11.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/briscoewebsite-rg/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-01-05 08:08:36,054, INFO - End executing installer wrapper
2026-01-06 08:11:48,017, INFO - Start executing installer wrapper
2026-01-06 08:11:48,019, INFO - proxy settings: {}
2026-01-06 08:11:48,019, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-01-06 08:11:48,097, INFO - MDE is installed
2026-01-06 08:11:48,097, INFO - Wait for MDE service to be available
2026-01-06 08:11:48,918, INFO - MDE is onboarded
2026-01-06 08:11:49,299, INFO - MDC tags in MDE are valid
2026-01-06 08:11:49,299, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-01-06 08:11:57,114, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.3 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25092.0005
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25092.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2026-01-06 08:11:57,114, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-01-06 08:11:57,649, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.9/status/11.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/briscoewebsite-rg/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-01-06 08:11:57,650, INFO - End executing installer wrapper
2026-01-07 08:10:02,758, INFO - Start executing installer wrapper
2026-01-07 08:10:02,763, INFO - proxy settings: {}
2026-01-07 08:10:02,763, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-01-07 08:10:02,847, INFO - MDE is installed
2026-01-07 08:10:02,847, INFO - Wait for MDE service to be available
2026-01-07 08:10:03,812, INFO - MDE is onboarded
2026-01-07 08:10:04,420, INFO - MDC tags in MDE are valid
2026-01-07 08:10:04,420, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-01-07 08:10:13,782, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.3 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25092.0005
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25092.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2026-01-07 08:10:13,784, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-01-07 08:10:15,753, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.9/status/11.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/briscoewebsite-rg/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-01-07 08:10:15,754, INFO - End executing installer wrapper
2026-01-08 08:02:43,327, INFO - Start executing installer wrapper
2026-01-08 08:02:43,329, INFO - proxy settings: {}
2026-01-08 08:02:43,329, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-01-08 08:02:43,406, INFO - MDE is installed
2026-01-08 08:02:43,407, INFO - Wait for MDE service to be available
2026-01-08 08:02:44,096, INFO - MDE is onboarded
2026-01-08 08:02:44,404, INFO - MDC tags in MDE are valid
2026-01-08 08:02:44,404, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-01-08 08:02:52,464, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.3 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25092.0005
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25092.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2026-01-08 08:02:52,465, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-01-08 08:02:52,852, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.9/status/11.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/briscoewebsite-rg/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-01-08 08:02:52,853, INFO - End executing installer wrapper
2026-01-09 08:07:24,500, INFO - Start executing installer wrapper
2026-01-09 08:07:24,501, INFO - proxy settings: {}
2026-01-09 08:07:24,501, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-01-09 08:07:24,576, INFO - MDE is installed
2026-01-09 08:07:24,576, INFO - Wait for MDE service to be available
2026-01-09 08:07:25,403, INFO - MDE is onboarded
2026-01-09 08:07:25,699, INFO - MDC tags in MDE are valid
2026-01-09 08:07:25,700, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-01-09 08:07:33,090, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.3 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25092.0005
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25092.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2026-01-09 08:07:33,091, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-01-09 08:07:33,361, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.9/status/11.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/briscoewebsite-rg/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-01-09 08:07:33,362, INFO - End executing installer wrapper
2026-01-10 08:08:16,595, INFO - Start executing installer wrapper
2026-01-10 08:08:16,596, INFO - proxy settings: {}
2026-01-10 08:08:16,596, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-01-10 08:08:16,672, INFO - MDE is installed
2026-01-10 08:08:16,672, INFO - Wait for MDE service to be available
2026-01-10 08:08:17,336, INFO - MDE is onboarded
2026-01-10 08:08:17,638, INFO - MDC tags in MDE are valid
2026-01-10 08:08:17,638, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-01-10 08:08:24,713, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.3 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25092.0005
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25092.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2026-01-10 08:08:24,713, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-01-10 08:08:25,460, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.8.9/status/11.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/briscoewebsite-rg/providers/Microsoft.Compute/virtualMachines/Sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-01-10 08:08:25,461, INFO - End executing installer wrapper
2026-01-11 05:43:30,735, INFO - Start executing installer wrapper
2026-01-11 05:43:30,738, INFO - proxy settings: {}
2026-01-11 05:43:30,738, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-01-11 05:43:30,815, INFO - MDE is installed
2026-01-11 05:43:30,816, INFO - Wait for MDE service to be available
2026-01-11 05:43:31,672, INFO - MDE is onboarded
2026-01-11 05:43:31,975, INFO - MDC tags in MDE are valid
2026-01-11 05:43:31,975, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-01-11 05:43:37,943, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.3 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25092.0005
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25092.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2026-01-11 05:43:37,944, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-01-11 05:43:38,287, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.9.0/status/12.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-01-11 05:43:38,287, INFO - End executing installer wrapper
2026-01-11 08:09:52,781, INFO - Start executing installer wrapper
2026-01-11 08:09:52,782, INFO - proxy settings: {}
2026-01-11 08:09:52,782, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-01-11 08:09:52,857, INFO - MDE is installed
2026-01-11 08:09:52,858, INFO - Wait for MDE service to be available
2026-01-11 08:09:53,453, INFO - MDE is onboarded
2026-01-11 08:09:53,676, INFO - MDC tags in MDE are valid
2026-01-11 08:09:53,676, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-01-11 08:09:59,747, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.3 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25092.0005
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25092.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2026-01-11 08:09:59,748, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-01-11 08:10:00,202, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.9.0/status/12.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-01-11 08:10:00,202, INFO - End executing installer wrapper
2026-01-12 08:03:27,542, INFO - Start executing installer wrapper
2026-01-12 08:03:27,544, INFO - proxy settings: {}
2026-01-12 08:03:27,544, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-01-12 08:03:27,616, INFO - MDE is installed
2026-01-12 08:03:27,616, INFO - Wait for MDE service to be available
2026-01-12 08:03:28,487, INFO - MDE is onboarded
2026-01-12 08:03:28,796, INFO - MDC tags in MDE are valid
2026-01-12 08:03:28,796, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-01-12 08:03:37,361, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.3 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2026-01-12 08:03:37,362, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-01-12 08:03:37,733, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.9.0/status/12.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-01-12 08:03:37,734, INFO - End executing installer wrapper
2026-01-13 08:13:21,005, INFO - Start executing installer wrapper
2026-01-13 08:13:21,006, INFO - proxy settings: {}
2026-01-13 08:13:21,007, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-01-13 08:13:21,083, INFO - MDE is installed
2026-01-13 08:13:21,083, INFO - Wait for MDE service to be available
2026-01-13 08:13:21,701, INFO - MDE is onboarded
2026-01-13 08:13:21,994, INFO - MDC tags in MDE are valid
2026-01-13 08:13:21,995, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-01-13 08:13:27,863, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.3 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2026-01-13 08:13:27,865, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-01-13 08:13:28,133, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.9.0/status/12.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-01-13 08:13:28,133, INFO - End executing installer wrapper
2026-01-14 08:06:33,089, INFO - Start executing installer wrapper
2026-01-14 08:06:33,091, INFO - proxy settings: {}
2026-01-14 08:06:33,091, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-01-14 08:06:33,167, INFO - MDE is installed
2026-01-14 08:06:33,167, INFO - Wait for MDE service to be available
2026-01-14 08:06:34,033, INFO - MDE is onboarded
2026-01-14 08:06:34,328, INFO - MDC tags in MDE are valid
2026-01-14 08:06:34,329, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-01-14 08:06:41,100, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.3 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2026-01-14 08:06:41,101, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-01-14 08:06:41,361, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.9.0/status/12.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-01-14 08:06:41,363, INFO - End executing installer wrapper
2026-01-15 08:03:41,050, INFO - Start executing installer wrapper
2026-01-15 08:03:41,052, INFO - proxy settings: {}
2026-01-15 08:03:41,052, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-01-15 08:03:41,127, INFO - MDE is installed
2026-01-15 08:03:41,127, INFO - Wait for MDE service to be available
2026-01-15 08:03:42,029, INFO - MDE is onboarded
2026-01-15 08:03:42,336, INFO - MDC tags in MDE are valid
2026-01-15 08:03:42,336, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-01-15 08:03:50,086, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.3 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2026-01-15 08:03:50,087, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-01-15 08:03:50,441, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.9.0/status/12.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-01-15 08:03:50,442, INFO - End executing installer wrapper
2026-01-16 08:07:58,001, INFO - Start executing installer wrapper
2026-01-16 08:07:58,002, INFO - proxy settings: {}
2026-01-16 08:07:58,002, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-01-16 08:07:58,082, INFO - MDE is installed
2026-01-16 08:07:58,083, INFO - Wait for MDE service to be available
2026-01-16 08:07:58,757, INFO - MDE is onboarded
2026-01-16 08:07:59,064, INFO - MDC tags in MDE are valid
2026-01-16 08:07:59,065, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-01-16 08:08:07,460, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.4 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2026-01-16 08:08:07,461, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-01-16 08:08:07,963, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.9.0/status/12.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-01-16 08:08:07,964, INFO - End executing installer wrapper
2026-01-17 08:04:41,311, INFO - Start executing installer wrapper
2026-01-17 08:04:41,312, INFO - proxy settings: {}
2026-01-17 08:04:41,312, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-01-17 08:04:41,390, INFO - MDE is installed
2026-01-17 08:04:41,390, INFO - Wait for MDE service to be available
2026-01-17 08:04:42,169, INFO - MDE is onboarded
2026-01-17 08:04:42,469, INFO - MDC tags in MDE are valid
2026-01-17 08:04:42,469, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-01-17 08:04:49,765, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.4 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2026-01-17 08:04:49,766, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-01-17 08:04:50,031, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.9.0/status/12.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-01-17 08:04:50,032, INFO - End executing installer wrapper
2026-01-18 08:07:35,514, INFO - Start executing installer wrapper
2026-01-18 08:07:35,517, INFO - proxy settings: {}
2026-01-18 08:07:35,517, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-01-18 08:07:35,592, INFO - MDE is installed
2026-01-18 08:07:35,592, INFO - Wait for MDE service to be available
2026-01-18 08:07:36,180, INFO - MDE is onboarded
2026-01-18 08:07:36,483, INFO - MDC tags in MDE are valid
2026-01-18 08:07:36,484, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-01-18 08:07:43,346, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.4 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2026-01-18 08:07:43,347, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-01-18 08:07:43,694, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.9.0/status/12.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-01-18 08:07:43,695, INFO - End executing installer wrapper
2026-01-18 11:43:39,734, INFO - Start executing installer wrapper
2026-01-18 11:43:39,734, INFO - proxy settings: {}
2026-01-18 11:43:39,734, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-01-18 11:43:39,823, INFO - MDE is installed
2026-01-18 11:43:39,823, INFO - Wait for MDE service to be available
2026-01-18 11:43:40,385, INFO - MDE is onboarded
2026-01-18 11:43:40,684, INFO - MDC tags in MDE are valid
2026-01-18 11:43:40,684, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-01-18 11:43:47,801, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.4 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2026-01-18 11:43:47,802, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-01-18 11:43:48,243, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.9.0/status/13.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-01-18 11:43:48,244, INFO - End executing installer wrapper
2026-01-19 08:02:38,218, INFO - Start executing installer wrapper
2026-01-19 08:02:38,220, INFO - proxy settings: {}
2026-01-19 08:02:38,220, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-01-19 08:02:38,295, INFO - MDE is installed
2026-01-19 08:02:38,296, INFO - Wait for MDE service to be available
2026-01-19 08:02:39,154, INFO - MDE is onboarded
2026-01-19 08:02:39,457, INFO - MDC tags in MDE are valid
2026-01-19 08:02:39,458, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-01-19 08:02:48,126, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.4 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2026-01-19 08:02:48,127, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-01-19 08:02:48,478, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.9.0/status/13.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-01-19 08:02:48,479, INFO - End executing installer wrapper
2026-01-20 08:02:09,831, INFO - Start executing installer wrapper
2026-01-20 08:02:09,833, INFO - proxy settings: {}
2026-01-20 08:02:09,833, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-01-20 08:02:09,906, INFO - MDE is installed
2026-01-20 08:02:09,906, INFO - Wait for MDE service to be available
2026-01-20 08:02:10,935, INFO - MDE is onboarded
2026-01-20 08:02:11,240, INFO - MDC tags in MDE are valid
2026-01-20 08:02:11,240, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-01-20 08:02:19,411, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.4 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2026-01-20 08:02:19,412, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-01-20 08:02:20,156, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.9.0/status/13.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-01-20 08:02:20,157, INFO - End executing installer wrapper
2026-01-21 08:06:14,379, INFO - Start executing installer wrapper
2026-01-21 08:06:14,380, INFO - proxy settings: {}
2026-01-21 08:06:14,381, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-01-21 08:06:14,458, INFO - MDE is installed
2026-01-21 08:06:14,459, INFO - Wait for MDE service to be available
2026-01-21 08:06:15,539, INFO - MDE is onboarded
2026-01-21 08:06:15,838, INFO - MDC tags in MDE are valid
2026-01-21 08:06:15,838, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-01-21 08:06:23,699, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.4 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2026-01-21 08:06:23,701, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-01-21 08:06:23,989, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.9.0/status/13.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-01-21 08:06:23,990, INFO - End executing installer wrapper
2026-01-22 08:07:08,087, INFO - Start executing installer wrapper
2026-01-22 08:07:08,089, INFO - proxy settings: {}
2026-01-22 08:07:08,089, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-01-22 08:07:08,180, INFO - MDE is installed
2026-01-22 08:07:08,180, INFO - Wait for MDE service to be available
2026-01-22 08:07:08,920, INFO - MDE is onboarded
2026-01-22 08:07:09,216, INFO - MDC tags in MDE are valid
2026-01-22 08:07:09,217, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-01-22 08:07:16,790, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.4 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2026-01-22 08:07:16,791, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-01-22 08:07:17,266, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.9.0/status/13.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-01-22 08:07:17,267, INFO - End executing installer wrapper
2026-01-23 08:11:37,893, INFO - Start executing installer wrapper
2026-01-23 08:11:37,902, INFO - proxy settings: {}
2026-01-23 08:11:37,902, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-01-23 08:11:38,016, INFO - MDE is installed
2026-01-23 08:11:38,016, INFO - Wait for MDE service to be available
2026-01-23 08:11:38,697, INFO - MDE is onboarded
2026-01-23 08:11:38,970, INFO - MDC tags in MDE are valid
2026-01-23 08:11:38,971, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-01-23 08:11:47,308, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.4 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2026-01-23 08:11:47,309, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-01-23 08:11:48,144, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.9.0/status/13.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-01-23 08:11:48,145, INFO - End executing installer wrapper
2026-01-24 08:08:28,709, INFO - Start executing installer wrapper
2026-01-24 08:08:28,711, INFO - proxy settings: {}
2026-01-24 08:08:28,711, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-01-24 08:08:28,785, INFO - MDE is installed
2026-01-24 08:08:28,785, INFO - Wait for MDE service to be available
2026-01-24 08:08:29,490, INFO - MDE is onboarded
2026-01-24 08:08:29,789, INFO - MDC tags in MDE are valid
2026-01-24 08:08:29,790, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-01-24 08:08:37,861, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.4 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2026-01-24 08:08:37,862, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-01-24 08:08:38,228, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.9.0/status/13.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-01-24 08:08:38,229, INFO - End executing installer wrapper
2026-01-25 08:05:12,802, INFO - Start executing installer wrapper
2026-01-25 08:05:12,804, INFO - proxy settings: {}
2026-01-25 08:05:12,804, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-01-25 08:05:12,884, INFO - MDE is installed
2026-01-25 08:05:12,885, INFO - Wait for MDE service to be available
2026-01-25 08:05:13,569, INFO - MDE is onboarded
2026-01-25 08:05:13,864, INFO - MDC tags in MDE are valid
2026-01-25 08:05:13,865, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-01-25 08:05:21,125, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.4 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2026-01-25 08:05:21,125, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-01-25 08:05:21,649, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.9.0/status/13.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-01-25 08:05:21,654, INFO - End executing installer wrapper
2026-01-25 17:43:15,321, INFO - Start executing installer wrapper
2026-01-25 17:43:15,323, INFO - proxy settings: {}
2026-01-25 17:43:15,323, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-01-25 17:43:15,399, INFO - MDE is installed
2026-01-25 17:43:15,399, INFO - Wait for MDE service to be available
2026-01-25 17:43:16,467, INFO - MDE is onboarded
2026-01-25 17:43:16,763, INFO - MDC tags in MDE are valid
2026-01-25 17:43:16,763, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-01-25 17:43:23,047, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.4 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2026-01-25 17:43:23,047, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-01-25 17:43:23,309, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.9.0/status/14.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-01-25 17:43:23,310, INFO - End executing installer wrapper
2026-01-26 08:11:27,311, INFO - Start executing installer wrapper
2026-01-26 08:11:27,313, INFO - proxy settings: {}
2026-01-26 08:11:27,313, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-01-26 08:11:27,388, INFO - MDE is installed
2026-01-26 08:11:27,389, INFO - Wait for MDE service to be available
2026-01-26 08:11:28,282, INFO - MDE is onboarded
2026-01-26 08:11:28,582, INFO - MDC tags in MDE are valid
2026-01-26 08:11:28,582, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-01-26 08:11:36,130, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.4 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2026-01-26 08:11:36,131, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-01-26 08:11:36,417, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.9.0/status/14.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-01-26 08:11:36,418, INFO - End executing installer wrapper
2026-01-27 08:05:09,678, INFO - Start executing installer wrapper
2026-01-27 08:05:09,679, INFO - proxy settings: {}
2026-01-27 08:05:09,679, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-01-27 08:05:09,767, INFO - MDE is installed
2026-01-27 08:05:09,767, INFO - Wait for MDE service to be available
2026-01-27 08:05:10,629, INFO - MDE is onboarded
2026-01-27 08:05:10,927, INFO - MDC tags in MDE are valid
2026-01-27 08:05:10,927, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-01-27 08:05:20,018, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.4 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2026-01-27 08:05:20,019, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-01-27 08:05:20,379, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.9.0/status/14.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-01-27 08:05:20,381, INFO - End executing installer wrapper
2026-01-27 18:33:37,235, INFO - Start executing installer wrapper
2026-01-27 18:33:37,236, INFO - proxy settings: {}
2026-01-27 18:33:37,236, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-01-27 18:33:37,311, INFO - MDE is installed
2026-01-27 18:33:37,311, INFO - Wait for MDE service to be available
2026-01-27 18:33:37,946, INFO - MDE is onboarded
2026-01-27 18:33:38,248, INFO - MDC tags in MDE are valid
2026-01-27 18:33:38,248, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-01-27 18:33:44,505, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.4 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2026-01-27 18:33:44,506, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-01-27 18:33:44,783, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.9.0/status/14.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-01-27 18:33:44,784, INFO - End executing installer wrapper
2026-01-28 08:10:38,673, INFO - Start executing installer wrapper
2026-01-28 08:10:38,691, INFO - proxy settings: {}
2026-01-28 08:10:38,691, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-01-28 08:10:38,785, INFO - MDE is installed
2026-01-28 08:10:38,786, INFO - Wait for MDE service to be available
2026-01-28 08:10:39,592, INFO - MDE is onboarded
2026-01-28 08:10:39,894, INFO - MDC tags in MDE are valid
2026-01-28 08:10:39,894, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-01-28 08:10:48,663, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.4 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2026-01-28 08:10:48,664, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-01-28 08:10:49,034, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.9.0/status/14.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-01-28 08:10:49,035, INFO - End executing installer wrapper
2026-01-29 08:06:18,339, INFO - Start executing installer wrapper
2026-01-29 08:06:18,341, INFO - proxy settings: {}
2026-01-29 08:06:18,341, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-01-29 08:06:18,415, INFO - MDE is installed
2026-01-29 08:06:18,415, INFO - Wait for MDE service to be available
2026-01-29 08:06:18,830, INFO - MDE is onboarded
2026-01-29 08:06:19,039, INFO - MDC tags in MDE are valid
2026-01-29 08:06:19,040, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-01-29 08:06:25,295, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.4 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2026-01-29 08:06:25,296, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-01-29 08:06:25,700, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.9.0/status/14.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-01-29 08:06:25,700, INFO - End executing installer wrapper
2026-01-30 08:12:28,590, INFO - Start executing installer wrapper
2026-01-30 08:12:28,595, INFO - proxy settings: {}
2026-01-30 08:12:28,595, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-01-30 08:12:28,669, INFO - MDE is installed
2026-01-30 08:12:28,669, INFO - Wait for MDE service to be available
2026-01-30 08:12:29,213, INFO - MDE is onboarded
2026-01-30 08:12:29,423, INFO - MDC tags in MDE are valid
2026-01-30 08:12:29,423, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-01-30 08:12:37,309, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.4 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2026-01-30 08:12:37,310, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-01-30 08:12:37,561, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.9.0/status/14.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-01-30 08:12:37,562, INFO - End executing installer wrapper
2026-01-31 08:02:11,381, INFO - Start executing installer wrapper
2026-01-31 08:02:11,383, INFO - proxy settings: {}
2026-01-31 08:02:11,383, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-01-31 08:02:11,457, INFO - MDE is installed
2026-01-31 08:02:11,457, INFO - Wait for MDE service to be available
2026-01-31 08:02:12,510, INFO - MDE is onboarded
2026-01-31 08:02:12,821, INFO - MDC tags in MDE are valid
2026-01-31 08:02:12,822, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-01-31 08:02:20,793, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.4 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2026-01-31 08:02:20,794, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-01-31 08:02:21,160, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.9.0/status/14.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-01-31 08:02:21,162, INFO - End executing installer wrapper
2026-02-01 08:06:55,919, INFO - Start executing installer wrapper
2026-02-01 08:06:55,922, INFO - proxy settings: {}
2026-02-01 08:06:55,922, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-02-01 08:06:55,995, INFO - MDE is installed
2026-02-01 08:06:55,995, INFO - Wait for MDE service to be available
2026-02-01 08:06:57,069, INFO - MDE is onboarded
2026-02-01 08:06:57,477, INFO - MDC tags in MDE are valid
2026-02-01 08:06:57,478, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-02-01 08:07:05,937, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.4 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2026-02-01 08:07:05,938, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-02-01 08:07:06,311, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.9.0/status/14.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-02-01 08:07:06,313, INFO - End executing installer wrapper
2026-02-01 23:58:53,441, INFO - Start executing installer wrapper
2026-02-01 23:58:53,452, INFO - proxy settings: {}
2026-02-01 23:58:53,460, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-02-01 23:58:53,762, INFO - MDE is installed
2026-02-01 23:58:53,762, INFO - Wait for MDE service to be available
2026-02-01 23:59:02,925, INFO - MDE is onboarded
2026-02-01 23:59:06,433, INFO - MDC tags in MDE are valid
2026-02-01 23:59:06,434, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-02-02 00:00:16,459, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.4 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2026-02-02 00:00:16,460, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-02-02 00:00:19,011, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.9.0/status/15.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-02-02 00:00:19,021, INFO - End executing installer wrapper
2026-02-02 08:07:03,515, INFO - Start executing installer wrapper
2026-02-02 08:07:03,526, INFO - proxy settings: {}
2026-02-02 08:07:03,526, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-02-02 08:07:03,646, INFO - MDE is installed
2026-02-02 08:07:03,646, INFO - Wait for MDE service to be available
2026-02-02 08:07:04,638, INFO - MDE is onboarded
2026-02-02 08:07:05,123, INFO - MDC tags in MDE are valid
2026-02-02 08:07:05,124, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-02-02 08:07:14,890, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.4 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2026-02-02 08:07:14,891, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-02-02 08:07:15,263, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.9.0/status/15.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-02-02 08:07:15,264, INFO - End executing installer wrapper
2026-02-03 08:04:41,308, INFO - Start executing installer wrapper
2026-02-03 08:04:41,310, INFO - proxy settings: {}
2026-02-03 08:04:41,310, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-02-03 08:04:41,384, INFO - MDE is installed
2026-02-03 08:04:41,384, INFO - Wait for MDE service to be available
2026-02-03 08:04:42,314, INFO - MDE is onboarded
2026-02-03 08:04:42,624, INFO - MDC tags in MDE are valid
2026-02-03 08:04:42,624, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-02-03 08:04:50,309, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.4 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2026-02-03 08:04:50,310, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-02-03 08:04:50,957, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.9.0/status/15.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-02-03 08:04:50,958, INFO - End executing installer wrapper
2026-02-04 08:03:58,083, INFO - Start executing installer wrapper
2026-02-04 08:03:58,085, INFO - proxy settings: {}
2026-02-04 08:03:58,085, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-02-04 08:03:58,160, INFO - MDE is installed
2026-02-04 08:03:58,160, INFO - Wait for MDE service to be available
2026-02-04 08:03:58,827, INFO - MDE is onboarded
2026-02-04 08:03:59,115, INFO - MDC tags in MDE are valid
2026-02-04 08:03:59,116, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-02-04 08:04:04,909, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.4 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2026-02-04 08:04:04,910, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-02-04 08:04:05,168, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.9.0/status/15.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-02-04 08:04:05,169, INFO - End executing installer wrapper
2026-02-05 08:04:58,310, INFO - Start executing installer wrapper
2026-02-05 08:04:58,311, INFO - proxy settings: {}
2026-02-05 08:04:58,312, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-02-05 08:04:58,387, INFO - MDE is installed
2026-02-05 08:04:58,387, INFO - Wait for MDE service to be available
2026-02-05 08:04:59,241, INFO - MDE is onboarded
2026-02-05 08:04:59,547, INFO - MDC tags in MDE are valid
2026-02-05 08:04:59,548, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-02-05 08:05:08,305, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.4 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2026-02-05 08:05:08,306, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-02-05 08:05:08,666, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.9.0/status/15.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-02-05 08:05:08,667, INFO - End executing installer wrapper
2026-02-06 08:08:27,079, INFO - Start executing installer wrapper
2026-02-06 08:08:27,080, INFO - proxy settings: {}
2026-02-06 08:08:27,080, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-02-06 08:08:27,159, INFO - MDE is installed
2026-02-06 08:08:27,160, INFO - Wait for MDE service to be available
2026-02-06 08:08:27,852, INFO - MDE is onboarded
2026-02-06 08:08:28,237, INFO - MDC tags in MDE are valid
2026-02-06 08:08:28,238, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-02-06 08:08:36,012, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.4 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2026-02-06 08:08:36,013, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-02-06 08:08:36,374, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.9.0/status/15.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-02-06 08:08:36,375, INFO - End executing installer wrapper
2026-02-06 09:17:49,006, INFO - Start executing installer wrapper
2026-02-06 09:17:49,007, INFO - proxy settings: {}
2026-02-06 09:17:49,007, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-02-06 09:17:49,076, INFO - MDE is installed
2026-02-06 09:17:49,076, INFO - Wait for MDE service to be available
2026-02-06 09:17:49,638, INFO - MDE is onboarded
2026-02-06 09:17:49,848, INFO - MDC tags in MDE are valid
2026-02-06 09:17:49,849, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-02-06 09:17:55,811, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.4 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2026-02-06 09:17:55,811, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-02-06 09:17:56,080, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.9.0/status/15.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-02-06 09:17:56,081, INFO - End executing installer wrapper
2026-02-07 08:04:07,425, INFO - Start executing installer wrapper
2026-02-07 08:04:07,430, INFO - proxy settings: {}
2026-02-07 08:04:07,431, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-02-07 08:04:07,552, INFO - MDE is installed
2026-02-07 08:04:07,553, INFO - Wait for MDE service to be available
2026-02-07 08:04:08,453, INFO - MDE is onboarded
2026-02-07 08:04:08,828, INFO - MDC tags in MDE are valid
2026-02-07 08:04:08,829, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-02-07 08:04:17,727, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.4 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2026-02-07 08:04:17,729, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-02-07 08:04:18,083, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.9.0/status/15.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-02-07 08:04:18,084, INFO - End executing installer wrapper
2026-02-08 08:06:56,903, INFO - Start executing installer wrapper
2026-02-08 08:06:56,904, INFO - proxy settings: {}
2026-02-08 08:06:56,905, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-02-08 08:06:57,079, INFO - MDE is installed
2026-02-08 08:06:57,079, INFO - Wait for MDE service to be available
2026-02-08 08:06:57,951, INFO - MDE is onboarded
2026-02-08 08:06:58,253, INFO - MDC tags in MDE are valid
2026-02-08 08:06:58,254, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-02-08 08:07:05,991, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.4 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2026-02-08 08:07:05,991, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-02-08 08:07:06,523, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.9.0/status/15.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-02-08 08:07:06,524, INFO - End executing installer wrapper
2026-02-09 05:43:56,682, INFO - Start executing installer wrapper
2026-02-09 05:43:56,688, INFO - proxy settings: {}
2026-02-09 05:43:56,688, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-02-09 05:43:56,780, INFO - MDE is installed
2026-02-09 05:43:56,780, INFO - Wait for MDE service to be available
2026-02-09 05:43:58,285, INFO - MDE is onboarded
2026-02-09 05:43:58,661, INFO - MDC tags in MDE are valid
2026-02-09 05:43:58,661, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-02-09 05:44:05,960, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.4 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2026-02-09 05:44:05,961, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-02-09 05:44:06,290, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.9.2/status/16.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-02-09 05:44:06,292, INFO - End executing installer wrapper
2026-02-09 08:07:21,711, INFO - Start executing installer wrapper
2026-02-09 08:07:21,712, INFO - proxy settings: {}
2026-02-09 08:07:21,712, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-02-09 08:07:21,787, INFO - MDE is installed
2026-02-09 08:07:21,787, INFO - Wait for MDE service to be available
2026-02-09 08:07:22,359, INFO - MDE is onboarded
2026-02-09 08:07:22,663, INFO - MDC tags in MDE are valid
2026-02-09 08:07:22,663, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-02-09 08:07:31,167, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.4 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2026-02-09 08:07:31,168, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-02-09 08:07:31,580, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.9.2/status/16.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-02-09 08:07:31,581, INFO - End executing installer wrapper
2026-02-10 08:02:37,468, INFO - Start executing installer wrapper
2026-02-10 08:02:37,469, INFO - proxy settings: {}
2026-02-10 08:02:37,470, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-02-10 08:02:37,543, INFO - MDE is installed
2026-02-10 08:02:37,543, INFO - Wait for MDE service to be available
2026-02-10 08:02:38,020, INFO - MDE is onboarded
2026-02-10 08:02:38,309, INFO - MDC tags in MDE are valid
2026-02-10 08:02:38,309, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-02-10 08:02:44,264, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.4 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2026-02-10 08:02:44,265, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-02-10 08:02:44,518, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.9.2/status/16.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-02-10 08:02:44,519, INFO - End executing installer wrapper
2026-02-11 08:05:59,954, INFO - Start executing installer wrapper
2026-02-11 08:05:59,973, INFO - proxy settings: {}
2026-02-11 08:05:59,973, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-02-11 08:06:00,185, INFO - MDE is installed
2026-02-11 08:06:00,185, INFO - Wait for MDE service to be available
2026-02-11 08:06:08,561, INFO - MDE is onboarded
2026-02-11 08:06:11,678, INFO - MDC tags in MDE are valid
2026-02-11 08:06:11,679, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-02-11 08:07:02,950, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.4 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2026-02-11 08:07:02,979, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-02-11 08:07:06,293, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.9.2/status/16.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-02-11 08:07:06,368, INFO - End executing installer wrapper
2026-02-12 08:10:53,519, INFO - Start executing installer wrapper
2026-02-12 08:10:53,522, INFO - proxy settings: {}
2026-02-12 08:10:53,522, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-02-12 08:10:53,598, INFO - MDE is installed
2026-02-12 08:10:53,598, INFO - Wait for MDE service to be available
2026-02-12 08:10:54,477, INFO - MDE is onboarded
2026-02-12 08:10:54,771, INFO - MDC tags in MDE are valid
2026-02-12 08:10:54,772, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-02-12 08:11:02,259, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.4 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2026-02-12 08:11:02,260, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-02-12 08:11:02,808, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.9.2/status/16.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-02-12 08:11:02,809, INFO - End executing installer wrapper
2026-02-13 08:08:47,267, INFO - Start executing installer wrapper
2026-02-13 08:08:47,270, INFO - proxy settings: {}
2026-02-13 08:08:47,270, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-02-13 08:08:47,341, INFO - MDE is installed
2026-02-13 08:08:47,341, INFO - Wait for MDE service to be available
2026-02-13 08:08:48,420, INFO - MDE is onboarded
2026-02-13 08:08:48,762, INFO - MDC tags in MDE are valid
2026-02-13 08:08:48,763, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-02-13 08:08:58,324, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.4 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2026-02-13 08:08:58,325, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-02-13 08:08:58,751, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.9.2/status/16.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-02-13 08:08:58,755, INFO - End executing installer wrapper
2026-02-14 08:09:17,302, INFO - Start executing installer wrapper
2026-02-14 08:09:17,304, INFO - proxy settings: {}
2026-02-14 08:09:17,304, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-02-14 08:09:17,378, INFO - MDE is installed
2026-02-14 08:09:17,378, INFO - Wait for MDE service to be available
2026-02-14 08:09:18,202, INFO - MDE is onboarded
2026-02-14 08:09:18,505, INFO - MDC tags in MDE are valid
2026-02-14 08:09:18,505, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-02-14 08:09:25,560, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.4 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2026-02-14 08:09:25,562, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-02-14 08:09:26,023, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.9.2/status/16.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-02-14 08:09:26,023, INFO - End executing installer wrapper
2026-02-15 08:09:53,392, INFO - Start executing installer wrapper
2026-02-15 08:09:53,396, INFO - proxy settings: {}
2026-02-15 08:09:53,396, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-02-15 08:09:53,469, INFO - MDE is installed
2026-02-15 08:09:53,469, INFO - Wait for MDE service to be available
2026-02-15 08:09:54,256, INFO - MDE is onboarded
2026-02-15 08:09:54,558, INFO - MDC tags in MDE are valid
2026-02-15 08:09:54,559, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-02-15 08:10:02,224, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.4 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2026-02-15 08:10:02,225, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-02-15 08:10:02,774, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.9.2/status/16.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-02-15 08:10:02,779, INFO - End executing installer wrapper
2026-02-16 06:05:33,254, INFO - Start executing installer wrapper
2026-02-16 06:05:33,258, INFO - proxy settings: {}
2026-02-16 06:05:33,258, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-02-16 06:05:33,333, INFO - MDE is installed
2026-02-16 06:05:33,334, INFO - Wait for MDE service to be available
2026-02-16 06:05:34,287, INFO - MDE is onboarded
2026-02-16 06:05:34,597, INFO - MDC tags in MDE are valid
2026-02-16 06:05:34,597, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-02-16 06:05:41,153, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.4 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2026-02-16 06:05:41,154, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-02-16 06:05:41,514, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.9.2/status/17.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-02-16 06:05:41,515, INFO - End executing installer wrapper
2026-02-16 08:02:18,004, INFO - Start executing installer wrapper
2026-02-16 08:02:18,004, INFO - proxy settings: {}
2026-02-16 08:02:18,004, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-02-16 08:02:18,076, INFO - MDE is installed
2026-02-16 08:02:18,076, INFO - Wait for MDE service to be available
2026-02-16 08:02:18,787, INFO - MDE is onboarded
2026-02-16 08:02:19,085, INFO - MDC tags in MDE are valid
2026-02-16 08:02:19,085, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-02-16 08:02:25,496, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.4 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2026-02-16 08:02:25,497, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-02-16 08:02:26,234, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.9.2/status/17.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-02-16 08:02:26,235, INFO - End executing installer wrapper
2026-02-17 08:11:28,102, INFO - Start executing installer wrapper
2026-02-17 08:11:28,104, INFO - proxy settings: {}
2026-02-17 08:11:28,104, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-02-17 08:11:28,176, INFO - MDE is installed
2026-02-17 08:11:28,176, INFO - Wait for MDE service to be available
2026-02-17 08:11:28,916, INFO - MDE is onboarded
2026-02-17 08:11:29,216, INFO - MDC tags in MDE are valid
2026-02-17 08:11:29,217, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-02-17 08:11:36,931, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.4 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2026-02-17 08:11:36,932, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-02-17 08:11:37,499, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.9.2/status/17.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-02-17 08:11:37,516, INFO - End executing installer wrapper
2026-02-18 08:06:04,324, INFO - Start executing installer wrapper
2026-02-18 08:06:04,335, INFO - proxy settings: {}
2026-02-18 08:06:04,335, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-02-18 08:06:04,459, INFO - MDE is installed
2026-02-18 08:06:04,459, INFO - Wait for MDE service to be available
2026-02-18 08:06:05,589, INFO - MDE is onboarded
2026-02-18 08:06:05,979, INFO - MDC tags in MDE are valid
2026-02-18 08:06:05,980, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-02-18 08:06:14,029, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.4 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2026-02-18 08:06:14,030, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-02-18 08:06:14,964, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.9.2/status/17.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-02-18 08:06:14,964, INFO - End executing installer wrapper
2026-02-19 01:22:29,367, INFO - Start executing installer wrapper
2026-02-19 01:22:29,373, INFO - proxy settings: {}
2026-02-19 01:22:29,373, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-02-19 01:22:29,527, INFO - MDE is installed
2026-02-19 01:22:29,528, INFO - Wait for MDE service to be available
2026-02-19 01:22:30,022, INFO - start parsing onboarding script
2026-02-19 01:22:30,022, INFO - decode onboarding script successfully
2026-02-19 01:22:30,023, INFO - parse onboarding script successfully
2026-02-19 01:22:30,023, INFO - Starting onboarding script...
2026-02-19 01:22:30,024, INFO - Checking if Mde is installed
2026-02-19 01:22:30,024, INFO - Mde is installed: True
2026-02-19 01:22:30,024, INFO - Removing offboarding file if exists
2026-02-19 01:22:32,026, INFO - Onboarding...
2026-02-19 01:22:32,026, INFO - Generating /etc/opt/microsoft/mdatp/mdatp_onboard.json...
2026-02-19 01:22:32,097, INFO - Onboarding done
2026-02-19 01:22:32,097, INFO - Checking if Mde is healthy after onboarding
2026-02-19 01:22:47,922, INFO - Onboarding succeeded
2026-02-19 01:22:49,819, INFO - MDC tags in MDE are valid
2026-02-19 01:22:49,819, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-02-19 01:23:03,392, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.4 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2026-02-19 01:23:03,393, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-02-19 01:23:04,323, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.9.2/status/17.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-02-19 01:23:04,326, INFO - End executing installer wrapper
2026-02-19 08:08:47,912, INFO - Start executing installer wrapper
2026-02-19 08:08:47,914, INFO - proxy settings: {}
2026-02-19 08:08:47,914, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-02-19 08:08:47,993, INFO - MDE is installed
2026-02-19 08:08:47,993, INFO - Wait for MDE service to be available
2026-02-19 08:08:48,915, INFO - MDE is onboarded
2026-02-19 08:08:49,227, INFO - MDC tags in MDE are valid
2026-02-19 08:08:49,228, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-02-19 08:08:57,583, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.4 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2026-02-19 08:08:57,584, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-02-19 08:08:57,942, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.9.2/status/17.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-02-19 08:08:57,943, INFO - End executing installer wrapper
2026-02-20 08:03:20,816, INFO - Start executing installer wrapper
2026-02-20 08:03:20,817, INFO - proxy settings: {}
2026-02-20 08:03:20,818, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-02-20 08:03:20,891, INFO - MDE is installed
2026-02-20 08:03:20,891, INFO - Wait for MDE service to be available
2026-02-20 08:03:21,915, INFO - MDE is onboarded
2026-02-20 08:03:22,312, INFO - MDC tags in MDE are valid
2026-02-20 08:03:22,312, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-02-20 08:03:30,765, INFO - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.4 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[i] MDE is already up to date.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2026-02-20 08:03:30,766, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-02-20 08:03:31,386, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.9.2/status/17.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-02-20 08:03:31,425, INFO - End executing installer wrapper
2026-02-21 08:09:52,618, INFO - Start executing installer wrapper
2026-02-21 08:09:52,620, INFO - proxy settings: {}
2026-02-21 08:09:52,620, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-02-21 08:09:52,696, INFO - MDE is installed
2026-02-21 08:09:52,696, INFO - Wait for MDE service to be available
2026-02-21 08:09:53,267, INFO - MDE is onboarded
2026-02-21 08:09:53,554, INFO - MDC tags in MDE are valid
2026-02-21 08:09:53,555, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-02-21 08:10:14,032, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.4 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 184.94.200.4
 * cpanel-addons-production-feed: 184.94.200.4
 * cpanel-plugins: 184.94.200.4
Resolving Dependencies
--> Running transaction check
---> Package mdatp.x86_64 0:101.25102.0005-1 will be updated
---> Package mdatp.x86_64 0:101.25122.0004-1 will be an update
--> Finished Dependency Resolution

Dependencies Resolved

================================================================================
 Package  Arch      Version                Repository                      Size
================================================================================
Updating:
 mdatp    x86_64    101.25122.0004-1       packages-microsoft-com-prod    212 M

Transaction Summary
================================================================================
Upgrade  1 Package

Total download size: 212 M
Downloading packages:
Delta RPMs disabled because /usr/bin/applydeltarpm not installed.
Running transaction check
Running transaction test


Transaction check error:
  installing package mdatp-101.25122.0004-1.x86_64 needs 750MB on the / filesystem

Error Summary
-------------
Disk Requirements:
  At least 750MB more space needed on the / filesystem.

1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE 0
[*] exiting (21)

2026-02-21 08:10:14,033, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-02-21 08:10:14,033, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-02-21 08:10:14,295, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.9.2/status/17.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-02-21 08:10:14,304, INFO - End executing installer wrapper
2026-02-22 08:10:46,944, INFO - Start executing installer wrapper
2026-02-22 08:10:46,946, INFO - proxy settings: {}
2026-02-22 08:10:46,947, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-02-22 08:10:47,022, INFO - MDE is installed
2026-02-22 08:10:47,022, INFO - Wait for MDE service to be available
2026-02-22 08:10:47,957, INFO - MDE is onboarded
2026-02-22 08:10:48,269, INFO - MDC tags in MDE are valid
2026-02-22 08:10:48,270, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-02-22 08:11:06,237, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.4 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 89.222.122.163
 * cpanel-addons-production-feed: 89.222.122.163
 * cpanel-plugins: 89.222.122.163
Resolving Dependencies
--> Running transaction check
---> Package mdatp.x86_64 0:101.25102.0005-1 will be updated
---> Package mdatp.x86_64 0:101.25122.0004-1 will be an update
--> Finished Dependency Resolution

Dependencies Resolved

================================================================================
 Package  Arch      Version                Repository                      Size
================================================================================
Updating:
 mdatp    x86_64    101.25122.0004-1       packages-microsoft-com-prod    212 M

Transaction Summary
================================================================================
Upgrade  1 Package

Total download size: 212 M
Downloading packages:
Delta RPMs disabled because /usr/bin/applydeltarpm not installed.
Running transaction check
Running transaction test


Transaction check error:
  installing package mdatp-101.25122.0004-1.x86_64 needs 677MB on the / filesystem

Error Summary
-------------
Disk Requirements:
  At least 677MB more space needed on the / filesystem.

1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE 0
[*] exiting (21)

2026-02-22 08:11:06,237, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-02-22 08:11:06,238, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-02-22 08:11:06,592, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.9.2/status/17.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-02-22 08:11:06,595, INFO - End executing installer wrapper
2026-02-23 08:11:16,066, INFO - Start executing installer wrapper
2026-02-23 08:11:16,067, INFO - proxy settings: {}
2026-02-23 08:11:16,067, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-02-23 08:11:16,144, INFO - MDE is installed
2026-02-23 08:11:16,145, INFO - Wait for MDE service to be available
2026-02-23 08:11:17,165, INFO - MDE is onboarded
2026-02-23 08:11:17,569, INFO - MDC tags in MDE are valid
2026-02-23 08:11:17,570, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-02-23 08:11:38,843, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.4 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 89.222.122.167
 * cpanel-addons-production-feed: 89.222.122.167
 * cpanel-plugins: 89.222.122.167
Resolving Dependencies
--> Running transaction check
---> Package mdatp.x86_64 0:101.25102.0005-1 will be updated
---> Package mdatp.x86_64 0:101.25122.0004-1 will be an update
--> Finished Dependency Resolution

Dependencies Resolved

================================================================================
 Package  Arch      Version                Repository                      Size
================================================================================
Updating:
 mdatp    x86_64    101.25122.0004-1       packages-microsoft-com-prod    212 M

Transaction Summary
================================================================================
Upgrade  1 Package

Total download size: 212 M
Downloading packages:
Delta RPMs disabled because /usr/bin/applydeltarpm not installed.
Running transaction check
Running transaction test


Transaction check error:
  installing package mdatp-101.25122.0004-1.x86_64 needs 151MB on the / filesystem

Error Summary
-------------
Disk Requirements:
  At least 151MB more space needed on the / filesystem.

1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE 0
[*] exiting (21)

2026-02-23 08:11:38,844, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-02-23 08:11:38,844, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-02-23 08:11:39,403, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.9.2/status/17.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-02-23 08:11:39,409, INFO - End executing installer wrapper
2026-02-23 11:43:26,798, INFO - Start executing installer wrapper
2026-02-23 11:43:26,798, INFO - proxy settings: {}
2026-02-23 11:43:26,798, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-02-23 11:43:26,870, INFO - MDE is installed
2026-02-23 11:43:26,870, INFO - Wait for MDE service to be available
2026-02-23 11:43:27,556, INFO - MDE is onboarded
2026-02-23 11:43:27,868, INFO - MDC tags in MDE are valid
2026-02-23 11:43:27,868, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-02-23 11:43:38,228, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.4 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 89.222.122.167
 * cpanel-addons-production-feed: 89.222.122.167
 * cpanel-plugins: 89.222.122.167
Resolving Dependencies
--> Running transaction check
---> Package mdatp.x86_64 0:101.25102.0005-1 will be updated
---> Package mdatp.x86_64 0:101.25122.0004-1 will be an update
--> Finished Dependency Resolution

Dependencies Resolved

================================================================================
 Package  Arch      Version                Repository                      Size
================================================================================
Updating:
 mdatp    x86_64    101.25122.0004-1       packages-microsoft-com-prod    212 M

Transaction Summary
================================================================================
Upgrade  1 Package

Total size: 212 M
Downloading packages:
Running transaction check
Running transaction test


Transaction check error:
  installing package mdatp-101.25122.0004-1.x86_64 needs 159MB on the / filesystem

Error Summary
-------------
Disk Requirements:
  At least 159MB more space needed on the / filesystem.

1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE 0
[*] exiting (21)

2026-02-23 11:43:38,228, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-02-23 11:43:38,229, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-02-23 11:43:38,662, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.9.2/status/18.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-02-23 11:43:38,663, INFO - End executing installer wrapper
2026-02-24 08:06:28,427, INFO - Start executing installer wrapper
2026-02-24 08:06:28,430, INFO - proxy settings: {}
2026-02-24 08:06:28,430, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-02-24 08:06:28,521, INFO - MDE is installed
2026-02-24 08:06:28,521, INFO - Wait for MDE service to be available
2026-02-24 08:06:29,886, INFO - MDE is onboarded
2026-02-24 08:06:30,477, INFO - MDC tags in MDE are valid
2026-02-24 08:06:30,478, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-02-24 08:06:46,051, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.4 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 89.222.122.167
 * cpanel-addons-production-feed: 89.222.122.167
 * cpanel-plugins: 89.222.122.167
Resolving Dependencies
--> Running transaction check
---> Package mdatp.x86_64 0:101.25102.0005-1 will be updated
---> Package mdatp.x86_64 0:101.25122.0004-1 will be an update
--> Finished Dependency Resolution

Dependencies Resolved

================================================================================
 Package  Arch      Version                Repository                      Size
================================================================================
Updating:
 mdatp    x86_64    101.25122.0004-1       packages-microsoft-com-prod    212 M

Transaction Summary
================================================================================
Upgrade  1 Package

Total download size: 212 M
Downloading packages:
Delta RPMs disabled because /usr/bin/applydeltarpm not installed.


Error downloading packages:
  mdatp-101.25122.0004-1.x86_64: Insufficient space in download directory /var/cache/yum/x86_64/7/packages-microsoft-com-prod/packages
    * free   18 M
    * needed 212 M

1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE 0
[*] exiting (21)

2026-02-24 08:06:46,051, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-02-24 08:06:46,064, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-02-24 08:06:46,540, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.9.2/status/18.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-02-24 08:06:46,569, INFO - End executing installer wrapper
2026-02-25 08:04:17,189, INFO - Start executing installer wrapper
2026-02-25 08:04:17,192, INFO - proxy settings: {}
2026-02-25 08:04:17,192, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-02-25 08:04:17,269, INFO - MDE is installed
2026-02-25 08:04:17,269, INFO - Wait for MDE service to be available
2026-02-25 08:04:18,080, INFO - MDE is onboarded
2026-02-25 08:04:18,471, INFO - MDC tags in MDE are valid
2026-02-25 08:04:18,472, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-02-25 08:04:32,046, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.4 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 89.222.122.163
 * cpanel-addons-production-feed: 89.222.122.163
 * cpanel-plugins: 89.222.122.163
Resolving Dependencies
--> Running transaction check
---> Package mdatp.x86_64 0:101.25102.0005-1 will be updated
---> Pac2026-02-25 08:04:32,514, INFO - End executing installer wrapper
2026-02-25 11:20:08,856, INFO - Start executing installer wrapper
2026-02-25 11:20:08,856, INFO - proxy settings: {}
2026-02-25 11:20:08,856, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-02-25 11:20:08,928, INFO - MDE is installed
2026-02-25 11:20:08,928, INFO - Wait for MDE service to be available
2026-02-25 11:20:09,672, INFO - MDE is onboarded
2026-02-25 11:20:10,085, INFO - MDC tags in MDE are valid
2026-02-25 11:20:10,086, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-02-25 11:20:26,997, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.4 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 89.222.122.163
 * cpanel-addons-production-feed: 89.222.122.163
 * cpanel-plugins: 89.222.122.163
Resolving Dependencies
--> Running transaction check
---> Package mdatp.x86_64 0:101.25102.0005-1 will be updated
---> Package mdatp.x86_64 0:101.25122.0004-1 will be an update
--> Finished Dependency Resolution

Dependencies Resolved

================================================================================
 Package  Arch      Version                Repository                      Size
================================================================================
Updating:
 mdatp    x86_64    101.25122.0004-1       packages-microsoft-com-prod    212 M

Transaction Summary
================================================================================
Upgrade  1 Package

Total download size: 212 M
Downloading packages:
Delta RPMs disabled because /usr/bin/applydeltarpm not installed.


Error downloading packages:
  mdatp-101.25122.0004-1.x86_64: Insufficient space in download directory /var/cache/yum/x86_64/7/packages-microsoft-com-prod/packages
    * free   168 k
    * needed 212 M

1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourceGroups/BRISCOEWEBSITE-RG/providers/Microsoft.Compute/virtualMachines/Sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE 0
[*] exiting (21)

2026-02-25 11:20:26,997, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-02-25 11:20:26,998, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-02-25 11:20:27,721, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.9.2/status/18.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "5917e60995222898eb7615f9aec076641b58d0af", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-02-25 11:20:27,746, INFO - End executing installer wrapper
2026-02-26 12:10:32,884, INFO - Start executing installer wrapper
2026-02-26 12:10:32,886, INFO - proxy settings: {}
2026-02-26 12:10:32,886, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-02-26 12:10:32,962, INFO - MDE is installed
2026-02-26 12:10:32,962, INFO - Wait for MDE service to be available
2026-02-26 12:10:33,867, INFO - MDE is onboarded
2026-02-26 12:10:34,169, INFO - Start to run the tags set command: src/mde_installer.latest.sh --debug --tag SecurityWorkspaceId 0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338 --tag AzureResourceId /subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-02-26 12:10:37,951, INFO - MDE process stdout: --- mde_installer.sh v0.8.4 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[>] setting tag: (AzureResourceId, /subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow)
[>] Running command: mdatp edr tag set --name AzureResourceId --value /subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow
[>] setting tag: (SecurityWorkspaceId, 0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338)
[>] Running command: mdatp edr tag set --name SecurityWorkspaceId --value 0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338
[v] tags set.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2026-02-26 12:10:37,952, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-02-26 12:10:53,536, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.4 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 89.222.122.163
 * cpanel-addons-production-feed: 89.222.122.163
 * cpanel-plugins: 89.222.122.163
Resolving Dependencies
--> Running transaction check
---> Package mdatp.x86_64 0:101.25102.0005-1 will be updated
---> Package mdatp.x86_64 0:101.25122.0004-1 will be an update
--> Finished Dependency Resolution

Dependencies Resolved

================================================================================
 Package  Arch      Version                Repository                      Size
================================================================================
Updating:
 mdatp    x86_64    101.25122.0004-1       packages-microsoft-com-prod    212 M

Transaction Summary
================================================================================
Upgrade  1 Package

Total download size: 212 M
Downloading packages:
Delta RPMs disabled because /usr/bin/applydeltarpm not installed.
Running transaction check
Running transaction test


Transaction check error:
  installing package mdatp-101.25122.0004-1.x86_64 needs 727MB on the / filesystem

Error Summary
-------------
Disk Requirements:
  At least 727MB more space needed on the / filesystem.

1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE 0
[*] exiting (21)

2026-02-26 12:10:53,536, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-02-26 12:10:53,537, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-02-26 12:10:53,794, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.9.2/status/18.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-02-26 12:10:53,795, INFO - End executing installer wrapper
2026-02-27 08:03:21,051, INFO - Start executing installer wrapper
2026-02-27 08:03:21,052, INFO - proxy settings: {}
2026-02-27 08:03:21,052, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-02-27 08:03:21,124, INFO - MDE is installed
2026-02-27 08:03:21,124, INFO - Wait for MDE service to be available
2026-02-27 08:03:21,578, INFO - MDE is onboarded
2026-02-27 08:03:21,787, INFO - MDC tags in MDE are valid
2026-02-27 08:03:21,787, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-02-27 08:03:30,730, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.4 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 89.222.122.163
 * cpanel-addons-production-feed: 89.222.122.163
 * cpanel-plugins: 89.222.122.163
Resolving Dependencies
--> Running transaction check
---> Package mdatp.x86_64 0:101.25102.0005-1 will be updated
---> Package mdatp.x86_64 0:101.25122.0004-1 will be an update
--> Finished Dependency Resolution

Dependencies Resolved

================================================================================
 Package  Arch      Version                Repository                      Size
================================================================================
Updating:
 mdatp    x86_64    101.25122.0004-1       packages-microsoft-com-prod    212 M

Transaction Summary
================================================================================
Upgrade  1 Package

Total size: 212 M
Downloading packages:
Running transaction check
Running transaction test


Transaction check error:
  installing package mdatp-101.25122.0004-1.x86_64 needs 734MB on the / filesystem

Error Summary
-------------
Disk Requirements:
  At least 734MB more space needed on the / filesystem.

1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE 0
[*] exiting (21)

2026-02-27 08:03:30,731, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-02-27 08:03:30,732, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-02-27 08:03:30,981, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.9.2/status/18.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-02-27 08:03:30,982, INFO - End executing installer wrapper
2026-02-28 08:02:32,717, INFO - Start executing installer wrapper
2026-02-28 08:02:32,718, INFO - proxy settings: {}
2026-02-28 08:02:32,718, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-02-28 08:02:32,793, INFO - MDE is installed
2026-02-28 08:02:32,793, INFO - Wait for MDE service to be available
2026-02-28 08:02:33,174, INFO - MDE is onboarded
2026-02-28 08:02:33,387, INFO - MDC tags in MDE are valid
2026-02-28 08:02:33,387, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-02-28 08:02:42,357, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.4 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 89.222.122.163
 * cpanel-addons-production-feed: 89.222.122.163
 * cpanel-plugins: 89.222.122.163
Resolving Dependencies
--> Running transaction check
---> Package mdatp.x86_64 0:101.25102.0005-1 will be updated
---> Package mdatp.x86_64 0:101.25122.0004-1 will be an update
--> Finished Dependency Resolution

Dependencies Resolved

================================================================================
 Package  Arch      Version                Repository                      Size
================================================================================
Updating:
 mdatp    x86_64    101.25122.0004-1       packages-microsoft-com-prod    212 M

Transaction Summary
================================================================================
Upgrade  1 Package

Total size: 212 M
Downloading packages:
Running transaction check
Running transaction test


Transaction check error:
  installing package mdatp-101.25122.0004-1.x86_64 needs 726MB on the / filesystem

Error Summary
-------------
Disk Requirements:
  At least 726MB more space needed on the / filesystem.

1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE 0
[*] exiting (21)

2026-02-28 08:02:42,357, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-02-28 08:02:42,358, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-02-28 08:02:42,604, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.9.2/status/18.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-02-28 08:02:43,521, INFO - End executing installer wrapper
2026-03-01 08:11:15,728, INFO - Start executing installer wrapper
2026-03-01 08:11:15,728, INFO - proxy settings: {}
2026-03-01 08:11:15,728, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-03-01 08:11:15,804, INFO - MDE is installed
2026-03-01 08:11:15,804, INFO - Wait for MDE service to be available
2026-03-01 08:11:16,273, INFO - MDE is onboarded
2026-03-01 08:11:16,485, INFO - MDC tags in MDE are valid
2026-03-01 08:11:16,486, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-03-01 08:11:26,539, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.4 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 89.222.122.163
 * cpanel-addons-production-feed: 89.222.122.163
 * cpanel-plugins: 89.222.122.163
Resolving Dependencies
--> Running transaction check
---> Package mdatp.x86_64 0:101.25102.0005-1 will be updated
---> Package mdatp.x86_64 0:101.25122.0004-1 will be an update
--> Finished Dependency Resolution

Dependencies Resolved

================================================================================
 Package  Arch      Version                Repository                      Size
================================================================================
Updating:
 mdatp    x86_64    101.25122.0004-1       packages-microsoft-com-prod    212 M

Transaction Summary
================================================================================
Upgrade  1 Package

Total size: 212 M
Downloading packages:
Running transaction check
Running transaction test


Transaction check error:
  installing package mdatp-101.25122.0004-1.x86_64 needs 723MB on the / filesystem

Error Summary
-------------
Disk Requirements:
  At least 723MB more space needed on the / filesystem.

1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE 0
[*] exiting (21)

2026-03-01 08:11:26,539, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-03-01 08:11:26,540, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-03-01 08:11:26,781, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.9.2/status/18.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-03-01 08:11:26,782, INFO - End executing installer wrapper
2026-03-02 08:11:14,087, INFO - Start executing installer wrapper
2026-03-02 08:11:14,088, INFO - proxy settings: {}
2026-03-02 08:11:14,088, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-03-02 08:11:14,163, INFO - MDE is installed
2026-03-02 08:11:14,163, INFO - Wait for MDE service to be available
2026-03-02 08:11:14,767, INFO - MDE is onboarded
2026-03-02 08:11:14,986, INFO - MDC tags in MDE are valid
2026-03-02 08:11:14,986, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-03-02 08:11:25,322, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.4 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 89.222.122.163
 * cpanel-addons-production-feed: 89.222.122.163
 * cpanel-plugins: 89.222.122.163
Resolving Dependencies
--> Running transaction check
---> Package mdatp.x86_64 0:101.25102.0005-1 will be updated
---> Package mdatp.x86_64 0:101.25122.0004-1 will be an update
--> Finished Dependency Resolution

Dependencies Resolved

================================================================================
 Package  Arch      Version                Repository                      Size
================================================================================
Updating:
 mdatp    x86_64    101.25122.0004-1       packages-microsoft-com-prod    212 M

Transaction Summary
================================================================================
Upgrade  1 Package

Total size: 212 M
Downloading packages:
Running transaction check
Running transaction test


Transaction check error:
  installing package mdatp-101.25122.0004-1.x86_64 needs 700MB on the / filesystem

Error Summary
-------------
Disk Requirements:
  At least 700MB more space needed on the / filesystem.

1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE 0
[*] exiting (21)

2026-03-02 08:11:25,323, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-03-02 08:11:25,325, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-03-02 08:11:25,860, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.9.2/status/18.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-03-02 08:11:25,886, INFO - End executing installer wrapper
2026-03-02 17:24:51,297, INFO - Start executing installer wrapper
2026-03-02 17:24:51,297, INFO - scrubbed proxy settings: {}
2026-03-02 17:24:51,297, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-03-02 17:24:51,369, INFO - MDE is installed
2026-03-02 17:24:51,369, INFO - Wait for MDE service to be available
2026-03-02 17:24:51,968, INFO - MDE is onboarded
2026-03-02 17:24:52,180, INFO - MDC tags in MDE are valid
2026-03-02 17:24:52,181, INFO - Start to run the update command: --proxy <<PII>>s--proxy <<PII>>r--proxy <<PII>>c--proxy <<PII>>/--proxy <<PII>>m--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>_--proxy <<PII>>i--proxy <<PII>>n--proxy <<PII>>s--proxy <<PII>>t--proxy <<PII>>a--proxy <<PII>>l--proxy <<PII>>l--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>.--proxy <<PII>>l--proxy <<PII>>a--proxy <<PII>>t--proxy <<PII>>e--proxy <<PII>>s--proxy <<PII>>t--proxy <<PII>>.--proxy <<PII>>s--proxy <<PII>>h--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>---proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>b--proxy <<PII>>u--proxy <<PII>>g--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>---proxy <<PII>>u--proxy <<PII>>p--proxy <<PII>>g--proxy <<PII>>r--proxy <<PII>>a--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>y--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>---proxy <<PII>>l--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>---proxy <<PII>>p--proxy <<PII>>a--proxy <<PII>>t--proxy <<PII>>h--proxy <<PII>> --proxy <<PII>>/--proxy <<PII>>v--proxy <<PII>>a--proxy <<PII>>r--proxy <<PII>>/--proxy <<PII>>l--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>/--proxy <<PII>>a--proxy <<PII>>z--proxy <<PII>>u--proxy <<PII>>r--proxy <<PII>>e--proxy <<PII>>/--proxy <<PII>>M--proxy <<PII>>i--proxy <<PII>>c--proxy <<PII>>r--proxy <<PII>>o--proxy <<PII>>s--proxy <<PII>>o--proxy <<PII>>f--proxy <<PII>>t--proxy <<PII>>.--proxy <<PII>>A--proxy <<PII>>z--proxy <<PII>>u--proxy <<PII>>r--proxy <<PII>>e--proxy <<PII>>.--proxy <<PII>>A--proxy <<PII>>z--proxy <<PII>>u--proxy <<PII>>r--proxy <<PII>>e--proxy <<PII>>D--proxy <<PII>>e--proxy <<PII>>f--proxy <<PII>>e--proxy <<PII>>n--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>F--proxy <<PII>>o--proxy <<PII>>r--proxy <<PII>>S--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>v--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>s--proxy <<PII>>.--proxy <<PII>>M--proxy <<PII>>D--proxy <<PII>>E--proxy <<PII>>.--proxy <<PII>>L--proxy <<PII>>i--proxy <<PII>>n--proxy <<PII>>u--proxy <<PII>>x--proxy <<PII>>/--proxy <<PII>>M--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>I--proxy <<PII>>n--proxy <<PII>>s--proxy <<PII>>t--proxy <<PII>>a--proxy <<PII>>l--proxy <<PII>>l--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>L--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>.--proxy <<PII>>l--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>
2026-03-02 17:25:00,958, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.4 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 89.222.122.163
 * cpanel-addons-production-feed: 89.222.122.163
 * cpanel-plugins: 89.222.122.163
Resolving Dependencies
--> Running transaction check
---> Package mdatp.x86_64 0:101.25102.0005-1 will be updated
---> Package mdatp.x86_64 0:101.25122.0004-1 will be an update
--> Finished Dependency Resolution

Dependencies Resolved

================================================================================
 Package  Arch      Version                Repository                      Size
================================================================================
Updating:
 mdatp    x86_64    101.25122.0004-1       packages-microsoft-com-prod    212 M

Transaction Summary
================================================================================
Upgrade  1 Package

Total size: 212 M
Downloading packages:
Running transaction check
Running transaction test


Transaction check error:
  installing package mdatp-101.25122.0004-1.x86_64 needs 709MB on the / filesystem

Error Summary
-------------
Disk Requirements:
  At least 709MB more space needed on the / filesystem.

1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE 0
[*] exiting (21)

2026-03-02 17:25:00,958, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-03-02 17:25:00,959, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-03-02 17:25:01,392, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.10.0/status/19.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-03-02 17:25:01,393, INFO - End executing installer wrapper
2026-03-03 08:07:39,182, INFO - Start executing installer wrapper
2026-03-03 08:07:39,182, INFO - scrubbed proxy settings: {}
2026-03-03 08:07:39,182, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-03-03 08:07:39,253, INFO - MDE is installed
2026-03-03 08:07:39,253, INFO - Wait for MDE service to be available
2026-03-03 08:07:39,766, INFO - MDE is onboarded
2026-03-03 08:07:39,983, INFO - MDC tags in MDE are valid
2026-03-03 08:07:39,983, INFO - Start to run the update command: --proxy <<PII>>s--proxy <<PII>>r--proxy <<PII>>c--proxy <<PII>>/--proxy <<PII>>m--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>_--proxy <<PII>>i--proxy <<PII>>n--proxy <<PII>>s--proxy <<PII>>t--proxy <<PII>>a--proxy <<PII>>l--proxy <<PII>>l--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>.--proxy <<PII>>l--proxy <<PII>>a--proxy <<PII>>t--proxy <<PII>>e--proxy <<PII>>s--proxy <<PII>>t--proxy <<PII>>.--proxy <<PII>>s--proxy <<PII>>h--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>---proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>b--proxy <<PII>>u--proxy <<PII>>g--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>---proxy <<PII>>u--proxy <<PII>>p--proxy <<PII>>g--proxy <<PII>>r--proxy <<PII>>a--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>y--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>---proxy <<PII>>l--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>---proxy <<PII>>p--proxy <<PII>>a--proxy <<PII>>t--proxy <<PII>>h--proxy <<PII>> --proxy <<PII>>/--proxy <<PII>>v--proxy <<PII>>a--proxy <<PII>>r--proxy <<PII>>/--proxy <<PII>>l--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>/--proxy <<PII>>a--proxy <<PII>>z--proxy <<PII>>u--proxy <<PII>>r--proxy <<PII>>e--proxy <<PII>>/--proxy <<PII>>M--proxy <<PII>>i--proxy <<PII>>c--proxy <<PII>>r--proxy <<PII>>o--proxy <<PII>>s--proxy <<PII>>o--proxy <<PII>>f--proxy <<PII>>t--proxy <<PII>>.--proxy <<PII>>A--proxy <<PII>>z--proxy <<PII>>u--proxy <<PII>>r--proxy <<PII>>e--proxy <<PII>>.--proxy <<PII>>A--proxy <<PII>>z--proxy <<PII>>u--proxy <<PII>>r--proxy <<PII>>e--proxy <<PII>>D--proxy <<PII>>e--proxy <<PII>>f--proxy <<PII>>e--proxy <<PII>>n--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>F--proxy <<PII>>o--proxy <<PII>>r--proxy <<PII>>S--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>v--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>s--proxy <<PII>>.--proxy <<PII>>M--proxy <<PII>>D--proxy <<PII>>E--proxy <<PII>>.--proxy <<PII>>L--proxy <<PII>>i--proxy <<PII>>n--proxy <<PII>>u--proxy <<PII>>x--proxy <<PII>>/--proxy <<PII>>M--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>I--proxy <<PII>>n--proxy <<PII>>s--proxy <<PII>>t--proxy <<PII>>a--proxy <<PII>>l--proxy <<PII>>l--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>L--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>.--proxy <<PII>>l--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>
2026-03-03 08:07:49,844, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.4 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 89.222.122.163
 * cpanel-addons-production-feed: 89.222.122.163
 * cpanel-plugins: 89.222.122.163
Resolving Dependencies
--> Running transaction check
---> Package mdatp.x86_64 0:101.25102.0005-1 will be updated
---> Package mdatp.x86_64 0:101.25122.0004-1 will be an update
--> Finished Dependency Resolution

Dependencies Resolved

================================================================================
 Package  Arch      Version                Repository                      Size
================================================================================
Updating:
 mdatp    x86_64    101.25122.0004-1       packages-microsoft-com-prod    212 M

Transaction Summary
================================================================================
Upgrade  1 Package

Total size: 212 M
Downloading packages:
Running transaction check
Running transaction test


Transaction check error:
  installing package mdatp-101.25122.0004-1.x86_64 needs 701MB on the / filesystem

Error Summary
-------------
Disk Requirements:
  At least 701MB more space needed on the / filesystem.

1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE 0
[*] exiting (21)

2026-03-03 08:07:49,844, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-03-03 08:07:49,845, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-03-03 08:07:50,092, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.10.0/status/19.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-03-03 08:07:50,195, INFO - End executing installer wrapper
2026-03-04 08:06:25,456, INFO - Start executing installer wrapper
2026-03-04 08:06:25,457, INFO - scrubbed proxy settings: {}
2026-03-04 08:06:25,457, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-03-04 08:06:25,533, INFO - MDE is installed
2026-03-04 08:06:25,533, INFO - Wait for MDE service to be available
2026-03-04 08:06:26,082, INFO - MDE is onboarded
2026-03-04 08:06:26,372, INFO - MDC tags in MDE are valid
2026-03-04 08:06:26,373, INFO - Start to run the update command: --proxy <<PII>>s--proxy <<PII>>r--proxy <<PII>>c--proxy <<PII>>/--proxy <<PII>>m--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>_--proxy <<PII>>i--proxy <<PII>>n--proxy <<PII>>s--proxy <<PII>>t--proxy <<PII>>a--proxy <<PII>>l--proxy <<PII>>l--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>.--proxy <<PII>>l--proxy <<PII>>a--proxy <<PII>>t--proxy <<PII>>e--proxy <<PII>>s--proxy <<PII>>t--proxy <<PII>>.--proxy <<PII>>s--proxy <<PII>>h--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>---proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>b--proxy <<PII>>u--proxy <<PII>>g--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>---proxy <<PII>>u--proxy <<PII>>p--proxy <<PII>>g--proxy <<PII>>r--proxy <<PII>>a--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>y--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>---proxy <<PII>>l--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>---proxy <<PII>>p--proxy <<PII>>a--proxy <<PII>>t--proxy <<PII>>h--proxy <<PII>> --proxy <<PII>>/--proxy <<PII>>v--proxy <<PII>>a--proxy <<PII>>r--proxy <<PII>>/--proxy <<PII>>l--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>/--proxy <<PII>>a--proxy <<PII>>z--proxy <<PII>>u--proxy <<PII>>r--proxy <<PII>>e--proxy <<PII>>/--proxy <<PII>>M--proxy <<PII>>i--proxy <<PII>>c--proxy <<PII>>r--proxy <<PII>>o--proxy <<PII>>s--proxy <<PII>>o--proxy <<PII>>f--proxy <<PII>>t--proxy <<PII>>.--proxy <<PII>>A--proxy <<PII>>z--proxy <<PII>>u--proxy <<PII>>r--proxy <<PII>>e--proxy <<PII>>.--proxy <<PII>>A--proxy <<PII>>z--proxy <<PII>>u--proxy <<PII>>r--proxy <<PII>>e--proxy <<PII>>D--proxy <<PII>>e--proxy <<PII>>f--proxy <<PII>>e--proxy <<PII>>n--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>F--proxy <<PII>>o--proxy <<PII>>r--proxy <<PII>>S--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>v--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>s--proxy <<PII>>.--proxy <<PII>>M--proxy <<PII>>D--proxy <<PII>>E--proxy <<PII>>.--proxy <<PII>>L--proxy <<PII>>i--proxy <<PII>>n--proxy <<PII>>u--proxy <<PII>>x--proxy <<PII>>/--proxy <<PII>>M--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>I--proxy <<PII>>n--proxy <<PII>>s--proxy <<PII>>t--proxy <<PII>>a--proxy <<PII>>l--proxy <<PII>>l--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>L--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>.--proxy <<PII>>l--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>
2026-03-04 08:06:35,342, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.4 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 89.222.122.163
 * cpanel-addons-production-feed: 89.222.122.163
 * cpanel-plugins: 89.222.122.163
Resolving Dependencies
--> Running transaction check
---> Package mdatp.x86_64 0:101.25102.0005-1 will be updated
---> Package mdatp.x86_64 0:101.25122.0004-1 will be an update
--> Finished Dependency Resolution

Dependencies Resolved

================================================================================
 Package  Arch      Version                Repository                      Size
================================================================================
Updating:
 mdatp    x86_64    101.25122.0004-1       packages-microsoft-com-prod    212 M

Transaction Summary
================================================================================
Upgrade  1 Package

Total size: 212 M
Downloading packages:
Running transaction check
Running transaction test


Transaction check error:
  installing package mdatp-101.25122.0004-1.x86_64 needs 697MB on the / filesystem

Error Summary
-------------
Disk Requirements:
  At least 697MB more space needed on the / filesystem.

1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE 0
[*] exiting (21)

2026-03-04 08:06:35,343, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-03-04 08:06:35,343, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-03-04 08:06:35,867, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.10.0/status/19.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-03-04 08:06:35,867, INFO - End executing installer wrapper
2026-03-05 08:11:51,851, INFO - Start executing installer wrapper
2026-03-05 08:11:51,851, INFO - scrubbed proxy settings: {}
2026-03-05 08:11:51,851, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-03-05 08:11:51,924, INFO - MDE is installed
2026-03-05 08:11:51,924, INFO - Wait for MDE service to be available
2026-03-05 08:11:52,479, INFO - MDE is onboarded
2026-03-05 08:11:52,766, INFO - MDC tags in MDE are valid
2026-03-05 08:11:52,767, INFO - Start to run the update command: --proxy <<PII>>s--proxy <<PII>>r--proxy <<PII>>c--proxy <<PII>>/--proxy <<PII>>m--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>_--proxy <<PII>>i--proxy <<PII>>n--proxy <<PII>>s--proxy <<PII>>t--proxy <<PII>>a--proxy <<PII>>l--proxy <<PII>>l--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>.--proxy <<PII>>l--proxy <<PII>>a--proxy <<PII>>t--proxy <<PII>>e--proxy <<PII>>s--proxy <<PII>>t--proxy <<PII>>.--proxy <<PII>>s--proxy <<PII>>h--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>---proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>b--proxy <<PII>>u--proxy <<PII>>g--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>---proxy <<PII>>u--proxy <<PII>>p--proxy <<PII>>g--proxy <<PII>>r--proxy <<PII>>a--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>y--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>---proxy <<PII>>l--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>---proxy <<PII>>p--proxy <<PII>>a--proxy <<PII>>t--proxy <<PII>>h--proxy <<PII>> --proxy <<PII>>/--proxy <<PII>>v--proxy <<PII>>a--proxy <<PII>>r--proxy <<PII>>/--proxy <<PII>>l--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>/--proxy <<PII>>a--proxy <<PII>>z--proxy <<PII>>u--proxy <<PII>>r--proxy <<PII>>e--proxy <<PII>>/--proxy <<PII>>M--proxy <<PII>>i--proxy <<PII>>c--proxy <<PII>>r--proxy <<PII>>o--proxy <<PII>>s--proxy <<PII>>o--proxy <<PII>>f--proxy <<PII>>t--proxy <<PII>>.--proxy <<PII>>A--proxy <<PII>>z--proxy <<PII>>u--proxy <<PII>>r--proxy <<PII>>e--proxy <<PII>>.--proxy <<PII>>A--proxy <<PII>>z--proxy <<PII>>u--proxy <<PII>>r--proxy <<PII>>e--proxy <<PII>>D--proxy <<PII>>e--proxy <<PII>>f--proxy <<PII>>e--proxy <<PII>>n--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>F--proxy <<PII>>o--proxy <<PII>>r--proxy <<PII>>S--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>v--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>s--proxy <<PII>>.--proxy <<PII>>M--proxy <<PII>>D--proxy <<PII>>E--proxy <<PII>>.--proxy <<PII>>L--proxy <<PII>>i--proxy <<PII>>n--proxy <<PII>>u--proxy <<PII>>x--proxy <<PII>>/--proxy <<PII>>M--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>I--proxy <<PII>>n--proxy <<PII>>s--proxy <<PII>>t--proxy <<PII>>a--proxy <<PII>>l--proxy <<PII>>l--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>L--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>.--proxy <<PII>>l--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>
2026-03-05 08:12:02,742, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.4 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 89.222.122.163
 * cpanel-addons-production-feed: 89.222.122.163
 * cpanel-plugins: 89.222.122.163
Resolving Dependencies
--> Running transaction check
---> Package mdatp.x86_64 0:101.25102.0005-1 will be updated
---> Package mdatp.x86_64 0:101.25122.0004-1 will be an update
--> Finished Dependency Resolution

Dependencies Resolved

================================================================================
 Package  Arch      Version                Repository                      Size
================================================================================
Updating:
 mdatp    x86_64    101.25122.0004-1       packages-microsoft-com-prod    212 M

Transaction Summary
================================================================================
Upgrade  1 Package

Total size: 212 M
Downloading packages:
Running transaction check
Running transaction test


Transaction check error:
  installing package mdatp-101.25122.0004-1.x86_64 needs 753MB on the / filesystem

Error Summary
-------------
Disk Requirements:
  At least 753MB more space needed on the / filesystem.

1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE 0
[*] exiting (21)

2026-03-05 08:12:02,742, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-03-05 08:12:02,743, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-03-05 08:12:03,089, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.10.0/status/19.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-03-05 08:12:03,089, INFO - End executing installer wrapper
2026-03-05 13:14:59,611, INFO - Start executing installer wrapper
2026-03-05 13:14:59,612, INFO - scrubbed proxy settings: {}
2026-03-05 13:14:59,612, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-03-05 13:14:59,688, INFO - MDE is installed
2026-03-05 13:14:59,688, INFO - Wait for MDE service to be available
2026-03-05 13:15:00,186, INFO - MDE is onboarded
2026-03-05 13:15:00,465, INFO - MDC tags in MDE are valid
2026-03-05 13:15:00,466, INFO - Start to run the update command: --proxy <<PII>>s--proxy <<PII>>r--proxy <<PII>>c--proxy <<PII>>/--proxy <<PII>>m--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>_--proxy <<PII>>i--proxy <<PII>>n--proxy <<PII>>s--proxy <<PII>>t--proxy <<PII>>a--proxy <<PII>>l--proxy <<PII>>l--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>.--proxy <<PII>>l--proxy <<PII>>a--proxy <<PII>>t--proxy <<PII>>e--proxy <<PII>>s--proxy <<PII>>t--proxy <<PII>>.--proxy <<PII>>s--proxy <<PII>>h--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>---proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>b--proxy <<PII>>u--proxy <<PII>>g--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>---proxy <<PII>>u--proxy <<PII>>p--proxy <<PII>>g--proxy <<PII>>r--proxy <<PII>>a--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>y--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>---proxy <<PII>>l--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>---proxy <<PII>>p--proxy <<PII>>a--proxy <<PII>>t--proxy <<PII>>h--proxy <<PII>> --proxy <<PII>>/--proxy <<PII>>v--proxy <<PII>>a--proxy <<PII>>r--proxy <<PII>>/--proxy <<PII>>l--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>/--proxy <<PII>>a--proxy <<PII>>z--proxy <<PII>>u--proxy <<PII>>r--proxy <<PII>>e--proxy <<PII>>/--proxy <<PII>>M--proxy <<PII>>i--proxy <<PII>>c--proxy <<PII>>r--proxy <<PII>>o--proxy <<PII>>s--proxy <<PII>>o--proxy <<PII>>f--proxy <<PII>>t--proxy <<PII>>.--proxy <<PII>>A--proxy <<PII>>z--proxy <<PII>>u--proxy <<PII>>r--proxy <<PII>>e--proxy <<PII>>.--proxy <<PII>>A--proxy <<PII>>z--proxy <<PII>>u--proxy <<PII>>r--proxy <<PII>>e--proxy <<PII>>D--proxy <<PII>>e--proxy <<PII>>f--proxy <<PII>>e--proxy <<PII>>n--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>F--proxy <<PII>>o--proxy <<PII>>r--proxy <<PII>>S--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>v--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>s--proxy <<PII>>.--proxy <<PII>>M--proxy <<PII>>D--proxy <<PII>>E--proxy <<PII>>.--proxy <<PII>>L--proxy <<PII>>i--proxy <<PII>>n--proxy <<PII>>u--proxy <<PII>>x--proxy <<PII>>/--proxy <<PII>>M--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>I--proxy <<PII>>n--proxy <<PII>>s--proxy <<PII>>t--proxy <<PII>>a--proxy <<PII>>l--proxy <<PII>>l--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>L--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>.--proxy <<PII>>l--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>
2026-03-05 13:15:08,641, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.4 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 89.222.122.163
 * cpanel-addons-production-feed: 89.222.122.163
 * cpanel-plugins: 89.222.122.163
Resolving Dependencies
--> Running transaction check
---> Package mdatp.x86_64 0:101.25102.0005-1 will be updated
---> Package mdatp.x86_64 0:101.25122.0004-1 will be an update
--> Finished Dependency Resolution

Dependencies Resolved

================================================================================
 Package  Arch      Version                Repository                      Size
================================================================================
Updating:
 mdatp    x86_64    101.25122.0004-1       packages-microsoft-com-prod    212 M

Transaction Summary
================================================================================
Upgrade  1 Package

Total size: 212 M
Downloading packages:
Running transaction check
Running transaction test


Transaction check error:
  installing package mdatp-101.25122.0004-1.x86_64 needs 716MB on the / filesystem

Error Summary
-------------
Disk Requirements:
  At least 716MB more space needed on the / filesystem.

1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE 0
[*] exiting (21)

2026-03-05 13:15:08,642, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-03-05 13:15:08,643, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-03-05 13:15:08,896, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.10.0/status/19.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-03-05 13:15:08,897, INFO - End executing installer wrapper
2026-03-05 13:16:33,072, INFO - Start executing installer wrapper
2026-03-05 13:16:33,082, INFO - scrubbed proxy settings: {}
2026-03-05 13:16:33,082, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-03-05 13:16:33,174, INFO - MDE is installed
2026-03-05 13:16:33,174, INFO - Wait for MDE service to be available
2026-03-05 13:16:33,342, INFO - start parsing onboarding script
2026-03-05 13:16:33,342, INFO - decode onboarding script successfully
2026-03-05 13:16:33,343, INFO - parse onboarding script successfully
2026-03-05 13:16:33,343, INFO - Starting onboarding script...
2026-03-05 13:16:33,343, INFO - Checking if Mde is installed
2026-03-05 13:16:33,344, INFO - Mde is installed: True
2026-03-05 13:16:33,344, INFO - Removing offboarding file if exists
2026-03-05 13:16:35,346, INFO - Onboarding...
2026-03-05 13:16:35,346, INFO - Generating /etc/opt/microsoft/mdatp/mdatp_onboard.json...
2026-03-05 13:16:35,362, INFO - Onboarding done
2026-03-05 13:16:35,362, INFO - Checking if Mde is healthy after onboarding
2026-03-05 13:16:51,184, INFO - Onboarding succeeded
2026-03-05 13:16:52,195, INFO - MDC tags in MDE are valid
2026-03-05 13:16:52,196, INFO - Start to run the update command: --proxy <<PII>>s--proxy <<PII>>r--proxy <<PII>>c--proxy <<PII>>/--proxy <<PII>>m--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>_--proxy <<PII>>i--proxy <<PII>>n--proxy <<PII>>s--proxy <<PII>>t--proxy <<PII>>a--proxy <<PII>>l--proxy <<PII>>l--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>.--proxy <<PII>>l--proxy <<PII>>a--proxy <<PII>>t--proxy <<PII>>e--proxy <<PII>>s--proxy <<PII>>t--proxy <<PII>>.--proxy <<PII>>s--proxy <<PII>>h--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>---proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>b--proxy <<PII>>u--proxy <<PII>>g--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>---proxy <<PII>>u--proxy <<PII>>p--proxy <<PII>>g--proxy <<PII>>r--proxy <<PII>>a--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>y--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>---proxy <<PII>>l--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>---proxy <<PII>>p--proxy <<PII>>a--proxy <<PII>>t--proxy <<PII>>h--proxy <<PII>> --proxy <<PII>>/--proxy <<PII>>v--proxy <<PII>>a--proxy <<PII>>r--proxy <<PII>>/--proxy <<PII>>l--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>/--proxy <<PII>>a--proxy <<PII>>z--proxy <<PII>>u--proxy <<PII>>r--proxy <<PII>>e--proxy <<PII>>/--proxy <<PII>>M--proxy <<PII>>i--proxy <<PII>>c--proxy <<PII>>r--proxy <<PII>>o--proxy <<PII>>s--proxy <<PII>>o--proxy <<PII>>f--proxy <<PII>>t--proxy <<PII>>.--proxy <<PII>>A--proxy <<PII>>z--proxy <<PII>>u--proxy <<PII>>r--proxy <<PII>>e--proxy <<PII>>.--proxy <<PII>>A--proxy <<PII>>z--proxy <<PII>>u--proxy <<PII>>r--proxy <<PII>>e--proxy <<PII>>D--proxy <<PII>>e--proxy <<PII>>f--proxy <<PII>>e--proxy <<PII>>n--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>F--proxy <<PII>>o--proxy <<PII>>r--proxy <<PII>>S--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>v--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>s--proxy <<PII>>.--proxy <<PII>>M--proxy <<PII>>D--proxy <<PII>>E--proxy <<PII>>.--proxy <<PII>>L--proxy <<PII>>i--proxy <<PII>>n--proxy <<PII>>u--proxy <<PII>>x--proxy <<PII>>/--proxy <<PII>>M--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>I--proxy <<PII>>n--proxy <<PII>>s--proxy <<PII>>t--proxy <<PII>>a--proxy <<PII>>l--proxy <<PII>>l--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>L--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>.--proxy <<PII>>l--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>
2026-03-05 13:17:06,171, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.4 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 89.222.122.163
 * cpanel-addons-production-feed: 89.222.122.163
 * cpanel-plugins: 89.222.122.163
Resolving Dependencies
--> Running transaction check
---> Package mdatp.x86_64 0:101.25102.0005-1 will be updated
---> Package mdatp.x86_64 0:101.25122.0004-1 will be an update
--> Finished Dependency Resolution

Dependencies Resolved

================================================================================
 Package  Arch      Version                Repository                      Size
================================================================================
Updating:
 mdatp    x86_64    101.25122.0004-1       packages-microsoft-com-prod    212 M

Transaction Summary
================================================================================
Upgrade  1 Package

Total size: 212 M
Downloading packages:
Running transaction check
Running transaction test


Transaction check error:
  installing package mdatp-101.25122.0004-1.x86_64 needs 797MB on the / filesystem

Error Summary
-------------
Disk Requirements:
  At least 797MB more space needed on the / filesystem.

1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE 0
[*] exiting (21)

2026-03-05 13:17:06,171, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-03-05 13:17:06,172, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-03-05 13:17:06,401, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.10.0/status/19.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-03-05 13:17:06,402, INFO - End executing installer wrapper
2026-03-06 08:07:55,415, INFO - Start executing installer wrapper
2026-03-06 08:07:55,417, INFO - scrubbed proxy settings: {}
2026-03-06 08:07:55,417, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-03-06 08:07:55,493, INFO - MDE is installed
2026-03-06 08:07:55,494, INFO - Wait for MDE service to be available
2026-03-06 08:07:56,180, INFO - MDE is onboarded
2026-03-06 08:07:56,488, INFO - MDC tags in MDE are valid
2026-03-06 08:07:56,489, INFO - Start to run the update command: --proxy <<PII>>s--proxy <<PII>>r--proxy <<PII>>c--proxy <<PII>>/--proxy <<PII>>m--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>_--proxy <<PII>>i--proxy <<PII>>n--proxy <<PII>>s--proxy <<PII>>t--proxy <<PII>>a--proxy <<PII>>l--proxy <<PII>>l--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>.--proxy <<PII>>l--proxy <<PII>>a--proxy <<PII>>t--proxy <<PII>>e--proxy <<PII>>s--proxy <<PII>>t--proxy <<PII>>.--proxy <<PII>>s--proxy <<PII>>h--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>---proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>b--proxy <<PII>>u--proxy <<PII>>g--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>---proxy <<PII>>u--proxy <<PII>>p--proxy <<PII>>g--proxy <<PII>>r--proxy <<PII>>a--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>y--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>---proxy <<PII>>l--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>---proxy <<PII>>p--proxy <<PII>>a--proxy <<PII>>t--proxy <<PII>>h--proxy <<PII>> --proxy <<PII>>/--proxy <<PII>>v--proxy <<PII>>a--proxy <<PII>>r--proxy <<PII>>/--proxy <<PII>>l--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>/--proxy <<PII>>a--proxy <<PII>>z--proxy <<PII>>u--proxy <<PII>>r--proxy <<PII>>e--proxy <<PII>>/--proxy <<PII>>M--proxy <<PII>>i--proxy <<PII>>c--proxy <<PII>>r--proxy <<PII>>o--proxy <<PII>>s--proxy <<PII>>o--proxy <<PII>>f--proxy <<PII>>t--proxy <<PII>>.--proxy <<PII>>A--proxy <<PII>>z--proxy <<PII>>u--proxy <<PII>>r--proxy <<PII>>e--proxy <<PII>>.--proxy <<PII>>A--proxy <<PII>>z--proxy <<PII>>u--proxy <<PII>>r--proxy <<PII>>e--proxy <<PII>>D--proxy <<PII>>e--proxy <<PII>>f--proxy <<PII>>e--proxy <<PII>>n--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>F--proxy <<PII>>o--proxy <<PII>>r--proxy <<PII>>S--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>v--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>s--proxy <<PII>>.--proxy <<PII>>M--proxy <<PII>>D--proxy <<PII>>E--proxy <<PII>>.--proxy <<PII>>L--proxy <<PII>>i--proxy <<PII>>n--proxy <<PII>>u--proxy <<PII>>x--proxy <<PII>>/--proxy <<PII>>M--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>I--proxy <<PII>>n--proxy <<PII>>s--proxy <<PII>>t--proxy <<PII>>a--proxy <<PII>>l--proxy <<PII>>l--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>L--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>.--proxy <<PII>>l--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>
2026-03-06 08:08:13,538, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.4 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 89.222.122.163
 * cpanel-addons-production-feed: 89.222.122.163
 * cpanel-plugins: 89.222.122.163
Resolving Dependencies
--> Running transaction check
---> Package mdatp.x86_64 0:101.25102.0005-1 will be updated
---> Package mdatp.x86_64 0:101.25122.0004-1 will be an update
--> Finished Dependency Resolution

Dependencies Resolved

================================================================================
 Package  Arch      Version                Repository                      Size
================================================================================
Updating:
 mdatp    x86_64    101.25122.0004-1       packages-microsoft-com-prod    212 M

Transaction Summary
================================================================================
Upgrade  1 Package

Total download size: 212 M
Downloading packages:
Delta RPMs disabled because /usr/bin/applydeltarpm not installed.
Running transaction check
Running transaction test


Transaction check error:
  installing package mdatp-101.25122.0004-1.x86_64 needs 619MB on the / filesystem

Error Summary
-------------
Disk Requirements:
  At least 619MB more space needed on the / filesystem.

1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE 0
[*] exiting (21)

2026-03-06 08:08:13,538, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-03-06 08:08:13,539, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-03-06 08:08:13,900, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.10.0/status/19.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-03-06 08:08:13,901, INFO - End executing installer wrapper
2026-03-07 08:03:31,690, INFO - Start executing installer wrapper
2026-03-07 08:03:31,692, INFO - scrubbed proxy settings: {}
2026-03-07 08:03:31,692, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-03-07 08:03:31,766, INFO - MDE is installed
2026-03-07 08:03:31,766, INFO - Wait for MDE service to be available
2026-03-07 08:03:32,435, INFO - MDE is onboarded
2026-03-07 08:03:32,744, INFO - MDC tags in MDE are valid
2026-03-07 08:03:32,745, INFO - Start to run the update command: --proxy <<PII>>s--proxy <<PII>>r--proxy <<PII>>c--proxy <<PII>>/--proxy <<PII>>m--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>_--proxy <<PII>>i--proxy <<PII>>n--proxy <<PII>>s--proxy <<PII>>t--proxy <<PII>>a--proxy <<PII>>l--proxy <<PII>>l--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>.--proxy <<PII>>l--proxy <<PII>>a--proxy <<PII>>t--proxy <<PII>>e--proxy <<PII>>s--proxy <<PII>>t--proxy <<PII>>.--proxy <<PII>>s--proxy <<PII>>h--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>---proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>b--proxy <<PII>>u--proxy <<PII>>g--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>---proxy <<PII>>u--proxy <<PII>>p--proxy <<PII>>g--proxy <<PII>>r--proxy <<PII>>a--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>y--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>---proxy <<PII>>l--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>---proxy <<PII>>p--proxy <<PII>>a--proxy <<PII>>t--proxy <<PII>>h--proxy <<PII>> --proxy <<PII>>/--proxy <<PII>>v--proxy <<PII>>a--proxy <<PII>>r--proxy <<PII>>/--proxy <<PII>>l--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>/--proxy <<PII>>a--proxy <<PII>>z--proxy <<PII>>u--proxy <<PII>>r--proxy <<PII>>e--proxy <<PII>>/--proxy <<PII>>M--proxy <<PII>>i--proxy <<PII>>c--proxy <<PII>>r--proxy <<PII>>o--proxy <<PII>>s--proxy <<PII>>o--proxy <<PII>>f--proxy <<PII>>t--proxy <<PII>>.--proxy <<PII>>A--proxy <<PII>>z--proxy <<PII>>u--proxy <<PII>>r--proxy <<PII>>e--proxy <<PII>>.--proxy <<PII>>A--proxy <<PII>>z--proxy <<PII>>u--proxy <<PII>>r--proxy <<PII>>e--proxy <<PII>>D--proxy <<PII>>e--proxy <<PII>>f--proxy <<PII>>e--proxy <<PII>>n--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>F--proxy <<PII>>o--proxy <<PII>>r--proxy <<PII>>S--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>v--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>s--proxy <<PII>>.--proxy <<PII>>M--proxy <<PII>>D--proxy <<PII>>E--proxy <<PII>>.--proxy <<PII>>L--proxy <<PII>>i--proxy <<PII>>n--proxy <<PII>>u--proxy <<PII>>x--proxy <<PII>>/--proxy <<PII>>M--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>I--proxy <<PII>>n--proxy <<PII>>s--proxy <<PII>>t--proxy <<PII>>a--proxy <<PII>>l--proxy <<PII>>l--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>L--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>.--proxy <<PII>>l--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>
2026-03-07 08:03:52,103, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.4 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 89.222.122.167
 * cpanel-addons-production-feed: 89.222.122.167
 * cpanel-plugins: 89.222.122.167
Resolving Dependencies
--> Running transaction check
---> Package mdatp.x86_64 0:101.25102.0005-1 will be updated
---> Package mdatp.x86_64 0:101.25122.0004-1 will be an update
--> Finished Dependency Resolution

Dependencies Resolved

================================================================================
 Package  Arch      Version                Repository                      Size
================================================================================
Updating:
 mdatp    x86_64    101.25122.0004-1       packages-microsoft-com-prod    212 M

Transaction Summary
================================================================================
Upgrade  1 Package

Total download size: 212 M
Downloading packages:
Delta RPMs disabled because /usr/bin/applydeltarpm not installed.
Running transaction check
Running transaction test


Transaction check error:
  installing package mdatp-101.25122.0004-1.x86_64 needs 665MB on the / filesystem

Error Summary
-------------
Disk Requirements:
  At least 665MB more space needed on the / filesystem.

1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE 0
[*] exiting (21)

2026-03-07 08:03:52,104, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-03-07 08:03:52,104, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-03-07 08:03:52,482, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.10.0/status/19.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-03-07 08:03:52,483, INFO - End executing installer wrapper
2026-03-08 08:11:20,739, INFO - Start executing installer wrapper
2026-03-08 08:11:20,741, INFO - scrubbed proxy settings: {}
2026-03-08 08:11:20,741, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-03-08 08:11:20,813, INFO - MDE is installed
2026-03-08 08:11:20,813, INFO - Wait for MDE service to be available
2026-03-08 08:11:21,682, INFO - MDE is onboarded
2026-03-08 08:11:21,989, INFO - MDC tags in MDE are valid
2026-03-08 08:11:21,989, INFO - Start to run the update command: --proxy <<PII>>s--proxy <<PII>>r--proxy <<PII>>c--proxy <<PII>>/--proxy <<PII>>m--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>_--proxy <<PII>>i--proxy <<PII>>n--proxy <<PII>>s--proxy <<PII>>t--proxy <<PII>>a--proxy <<PII>>l--proxy <<PII>>l--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>.--proxy <<PII>>l--proxy <<PII>>a--proxy <<PII>>t--proxy <<PII>>e--proxy <<PII>>s--proxy <<PII>>t--proxy <<PII>>.--proxy <<PII>>s--proxy <<PII>>h--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>---proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>b--proxy <<PII>>u--proxy <<PII>>g--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>---proxy <<PII>>u--proxy <<PII>>p--proxy <<PII>>g--proxy <<PII>>r--proxy <<PII>>a--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>y--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>---proxy <<PII>>l--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>---proxy <<PII>>p--proxy <<PII>>a--proxy <<PII>>t--proxy <<PII>>h--proxy <<PII>> --proxy <<PII>>/--proxy <<PII>>v--proxy <<PII>>a--proxy <<PII>>r--proxy <<PII>>/--proxy <<PII>>l--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>/--proxy <<PII>>a--proxy <<PII>>z--proxy <<PII>>u--proxy <<PII>>r--proxy <<PII>>e--proxy <<PII>>/--proxy <<PII>>M--proxy <<PII>>i--proxy <<PII>>c--proxy <<PII>>r--proxy <<PII>>o--proxy <<PII>>s--proxy <<PII>>o--proxy <<PII>>f--proxy <<PII>>t--proxy <<PII>>.--proxy <<PII>>A--proxy <<PII>>z--proxy <<PII>>u--proxy <<PII>>r--proxy <<PII>>e--proxy <<PII>>.--proxy <<PII>>A--proxy <<PII>>z--proxy <<PII>>u--proxy <<PII>>r--proxy <<PII>>e--proxy <<PII>>D--proxy <<PII>>e--proxy <<PII>>f--proxy <<PII>>e--proxy <<PII>>n--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>F--proxy <<PII>>o--proxy <<PII>>r--proxy <<PII>>S--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>v--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>s--proxy <<PII>>.--proxy <<PII>>M--proxy <<PII>>D--proxy <<PII>>E--proxy <<PII>>.--proxy <<PII>>L--proxy <<PII>>i--proxy <<PII>>n--proxy <<PII>>u--proxy <<PII>>x--proxy <<PII>>/--proxy <<PII>>M--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>I--proxy <<PII>>n--proxy <<PII>>s--proxy <<PII>>t--proxy <<PII>>a--proxy <<PII>>l--proxy <<PII>>l--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>L--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>.--proxy <<PII>>l--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>
2026-03-08 08:11:42,654, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.4 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 89.222.122.163
 * cpanel-addons-production-feed: 89.222.122.163
 * cpanel-plugins: 89.222.122.163
Resolving Dependencies
--> Running transaction check
---> Package mdatp.x86_64 0:101.25102.0005-1 will be updated
---> Package mdatp.x86_64 0:101.25122.0004-1 will be an update
--> Finished Dependency Resolution

Dependencies Resolved

================================================================================
 Package  Arch      Version                Repository                      Size
================================================================================
Updating:
 mdatp    x86_64    101.25122.0004-1       packages-microsoft-com-prod    212 M

Transaction Summary
================================================================================
Upgrade  1 Package

Total download size: 212 M
Downloading packages:
Delta RPMs disabled because /usr/bin/applydeltarpm not installed.
Running transaction check
Running transaction test


Transaction check error:
  installing package mdatp-101.25122.0004-1.x86_64 needs 726MB on the / filesystem

Error Summary
-------------
Disk Requirements:
  At least 726MB more space needed on the / filesystem.

1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE 0
[*] exiting (21)

2026-03-08 08:11:42,655, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-03-08 08:11:42,655, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-03-08 08:11:42,994, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.10.0/status/19.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-03-08 08:11:42,995, INFO - End executing installer wrapper
2026-03-09 08:03:32,923, INFO - Start executing installer wrapper
2026-03-09 08:03:32,925, INFO - scrubbed proxy settings: {}
2026-03-09 08:03:32,925, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-03-09 08:03:32,998, INFO - MDE is installed
2026-03-09 08:03:32,998, INFO - Wait for MDE service to be available
2026-03-09 08:03:33,810, INFO - MDE is onboarded
2026-03-09 08:03:34,197, INFO - MDC tags in MDE are valid
2026-03-09 08:03:34,197, INFO - Start to run the update command: --proxy <<PII>>s--proxy <<PII>>r--proxy <<PII>>c--proxy <<PII>>/--proxy <<PII>>m--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>_--proxy <<PII>>i--proxy <<PII>>n--proxy <<PII>>s--proxy <<PII>>t--proxy <<PII>>a--proxy <<PII>>l--proxy <<PII>>l--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>.--proxy <<PII>>l--proxy <<PII>>a--proxy <<PII>>t--proxy <<PII>>e--proxy <<PII>>s--proxy <<PII>>t--proxy <<PII>>.--proxy <<PII>>s--proxy <<PII>>h--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>---proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>b--proxy <<PII>>u--proxy <<PII>>g--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>---proxy <<PII>>u--proxy <<PII>>p--proxy <<PII>>g--proxy <<PII>>r--proxy <<PII>>a--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>y--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>---proxy <<PII>>l--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>---proxy <<PII>>p--proxy <<PII>>a--proxy <<PII>>t--proxy <<PII>>h--proxy <<PII>> --proxy <<PII>>/--proxy <<PII>>v--proxy <<PII>>a--proxy <<PII>>r--proxy <<PII>>/--proxy <<PII>>l--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>/--proxy <<PII>>a--proxy <<PII>>z--proxy <<PII>>u--proxy <<PII>>r--proxy <<PII>>e--proxy <<PII>>/--proxy <<PII>>M--proxy <<PII>>i--proxy <<PII>>c--proxy <<PII>>r--proxy <<PII>>o--proxy <<PII>>s--proxy <<PII>>o--proxy <<PII>>f--proxy <<PII>>t--proxy <<PII>>.--proxy <<PII>>A--proxy <<PII>>z--proxy <<PII>>u--proxy <<PII>>r--proxy <<PII>>e--proxy <<PII>>.--proxy <<PII>>A--proxy <<PII>>z--proxy <<PII>>u--proxy <<PII>>r--proxy <<PII>>e--proxy <<PII>>D--proxy <<PII>>e--proxy <<PII>>f--proxy <<PII>>e--proxy <<PII>>n--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>F--proxy <<PII>>o--proxy <<PII>>r--proxy <<PII>>S--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>v--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>s--proxy <<PII>>.--proxy <<PII>>M--proxy <<PII>>D--proxy <<PII>>E--proxy <<PII>>.--proxy <<PII>>L--proxy <<PII>>i--proxy <<PII>>n--proxy <<PII>>u--proxy <<PII>>x--proxy <<PII>>/--proxy <<PII>>M--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>I--proxy <<PII>>n--proxy <<PII>>s--proxy <<PII>>t--proxy <<PII>>a--proxy <<PII>>l--proxy <<PII>>l--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>L--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>.--proxy <<PII>>l--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>
2026-03-09 08:04:06,765, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.4 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 89.222.122.167
 * cpanel-addons-production-feed: 89.222.122.167
 * cpanel-plugins: 89.222.122.167
Resolving Dependencies
--> Running transaction check
---> Package mdatp.x86_64 0:101.25102.0005-1 will be updated
---> Package mdatp.x86_64 0:101.25122.0004-1 will be an update
--> Finished Dependency Resolution

Dependencies Resolved

================================================================================
 Package  Arch      Version                Repository                      Size
================================================================================
Updating:
 mdatp    x86_64    101.25122.0004-1       packages-microsoft-com-prod    212 M

Transaction Summary
================================================================================
Upgrade  1 Package

Total download size: 212 M
Downloading packages:
Delta RPMs disabled because /usr/bin/applydeltarpm not installed.
Running transaction check
Running transaction test


Transaction check error:
  installing package mdatp-101.25122.0004-1.x86_64 needs 756MB on the / filesystem

Error Summary
-------------
Disk Requirements:
  At least 756MB more space needed on the / filesystem.

1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE 0
[*] exiting (21)

2026-03-09 08:04:06,766, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-03-09 08:04:06,768, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-03-09 08:04:07,140, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.10.0/status/19.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-03-09 08:04:07,140, INFO - End executing installer wrapper
2026-03-09 17:43:27,437, INFO - Start executing installer wrapper
2026-03-09 17:43:27,446, INFO - scrubbed proxy settings: {}
2026-03-09 17:43:27,446, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-03-09 17:43:27,553, INFO - MDE is installed
2026-03-09 17:43:27,553, INFO - Wait for MDE service to be available
2026-03-09 17:43:28,596, INFO - MDE is onboarded
2026-03-09 17:43:28,912, INFO - MDC tags in MDE are valid
2026-03-09 17:43:28,913, INFO - Start to run the update command: --proxy <<PII>>s--proxy <<PII>>r--proxy <<PII>>c--proxy <<PII>>/--proxy <<PII>>m--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>_--proxy <<PII>>i--proxy <<PII>>n--proxy <<PII>>s--proxy <<PII>>t--proxy <<PII>>a--proxy <<PII>>l--proxy <<PII>>l--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>.--proxy <<PII>>l--proxy <<PII>>a--proxy <<PII>>t--proxy <<PII>>e--proxy <<PII>>s--proxy <<PII>>t--proxy <<PII>>.--proxy <<PII>>s--proxy <<PII>>h--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>---proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>b--proxy <<PII>>u--proxy <<PII>>g--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>---proxy <<PII>>u--proxy <<PII>>p--proxy <<PII>>g--proxy <<PII>>r--proxy <<PII>>a--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>y--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>---proxy <<PII>>l--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>---proxy <<PII>>p--proxy <<PII>>a--proxy <<PII>>t--proxy <<PII>>h--proxy <<PII>> --proxy <<PII>>/--proxy <<PII>>v--proxy <<PII>>a--proxy <<PII>>r--proxy <<PII>>/--proxy <<PII>>l--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>/--proxy <<PII>>a--proxy <<PII>>z--proxy <<PII>>u--proxy <<PII>>r--proxy <<PII>>e--proxy <<PII>>/--proxy <<PII>>M--proxy <<PII>>i--proxy <<PII>>c--proxy <<PII>>r--proxy <<PII>>o--proxy <<PII>>s--proxy <<PII>>o--proxy <<PII>>f--proxy <<PII>>t--proxy <<PII>>.--proxy <<PII>>A--proxy <<PII>>z--proxy <<PII>>u--proxy <<PII>>r--proxy <<PII>>e--proxy <<PII>>.--proxy <<PII>>A--proxy <<PII>>z--proxy <<PII>>u--proxy <<PII>>r--proxy <<PII>>e--proxy <<PII>>D--proxy <<PII>>e--proxy <<PII>>f--proxy <<PII>>e--proxy <<PII>>n--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>F--proxy <<PII>>o--proxy <<PII>>r--proxy <<PII>>S--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>v--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>s--proxy <<PII>>.--proxy <<PII>>M--proxy <<PII>>D--proxy <<PII>>E--proxy <<PII>>.--proxy <<PII>>L--proxy <<PII>>i--proxy <<PII>>n--proxy <<PII>>u--proxy <<PII>>x--proxy <<PII>>/--proxy <<PII>>M--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>I--proxy <<PII>>n--proxy <<PII>>s--proxy <<PII>>t--proxy <<PII>>a--proxy <<PII>>l--proxy <<PII>>l--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>L--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>.--proxy <<PII>>l--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>
2026-03-09 17:43:44,591, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.4 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 89.222.122.167
 * cpanel-addons-production-feed: 89.222.122.167
 * cpanel-plugins: 89.222.122.167
Resolving Dependencies
--> Running transaction check
---> Package mdatp.x86_64 0:101.25102.0005-1 will be updated
---> Package mdatp.x86_64 0:101.25122.0004-1 will be an update
--> Finished Dependency Resolution

Dependencies Resolved

================================================================================
 Package  Arch      Version                Repository                      Size
================================================================================
Updating:
 mdatp    x86_64    101.25122.0004-1       packages-microsoft-com-prod    212 M

Transaction Summary
================================================================================
Upgrade  1 Package

Total size: 212 M
Downloading packages:
Running transaction check
Running transaction test


Transaction check error:
  installing package mdatp-101.25122.0004-1.x86_64 needs 754MB on the / filesystem

Error Summary
-------------
Disk Requirements:
  At least 754MB more space needed on the / filesystem.

1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE 0
[*] exiting (21)

2026-03-09 17:43:44,592, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-03-09 17:43:44,592, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-03-09 17:43:44,926, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.10.0/status/20.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-03-09 17:43:44,927, INFO - End executing installer wrapper
2026-03-10 08:06:43,795, INFO - Start executing installer wrapper
2026-03-10 08:06:43,797, INFO - scrubbed proxy settings: {}
2026-03-10 08:06:43,797, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-03-10 08:06:43,877, INFO - MDE is installed
2026-03-10 08:06:43,877, INFO - Wait for MDE service to be available
2026-03-10 08:06:44,821, INFO - MDE is onboarded
2026-03-10 08:06:45,135, INFO - MDC tags in MDE are valid
2026-03-10 08:06:45,135, INFO - Start to run the update command: --proxy <<PII>>s--proxy <<PII>>r--proxy <<PII>>c--proxy <<PII>>/--proxy <<PII>>m--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>_--proxy <<PII>>i--proxy <<PII>>n--proxy <<PII>>s--proxy <<PII>>t--proxy <<PII>>a--proxy <<PII>>l--proxy <<PII>>l--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>.--proxy <<PII>>l--proxy <<PII>>a--proxy <<PII>>t--proxy <<PII>>e--proxy <<PII>>s--proxy <<PII>>t--proxy <<PII>>.--proxy <<PII>>s--proxy <<PII>>h--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>---proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>b--proxy <<PII>>u--proxy <<PII>>g--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>---proxy <<PII>>u--proxy <<PII>>p--proxy <<PII>>g--proxy <<PII>>r--proxy <<PII>>a--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>y--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>---proxy <<PII>>l--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>---proxy <<PII>>p--proxy <<PII>>a--proxy <<PII>>t--proxy <<PII>>h--proxy <<PII>> --proxy <<PII>>/--proxy <<PII>>v--proxy <<PII>>a--proxy <<PII>>r--proxy <<PII>>/--proxy <<PII>>l--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>/--proxy <<PII>>a--proxy <<PII>>z--proxy <<PII>>u--proxy <<PII>>r--proxy <<PII>>e--proxy <<PII>>/--proxy <<PII>>M--proxy <<PII>>i--proxy <<PII>>c--proxy <<PII>>r--proxy <<PII>>o--proxy <<PII>>s--proxy <<PII>>o--proxy <<PII>>f--proxy <<PII>>t--proxy <<PII>>.--proxy <<PII>>A--proxy <<PII>>z--proxy <<PII>>u--proxy <<PII>>r--proxy <<PII>>e--proxy <<PII>>.--proxy <<PII>>A--proxy <<PII>>z--proxy <<PII>>u--proxy <<PII>>r--proxy <<PII>>e--proxy <<PII>>D--proxy <<PII>>e--proxy <<PII>>f--proxy <<PII>>e--proxy <<PII>>n--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>F--proxy <<PII>>o--proxy <<PII>>r--proxy <<PII>>S--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>v--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>s--proxy <<PII>>.--proxy <<PII>>M--proxy <<PII>>D--proxy <<PII>>E--proxy <<PII>>.--proxy <<PII>>L--proxy <<PII>>i--proxy <<PII>>n--proxy <<PII>>u--proxy <<PII>>x--proxy <<PII>>/--proxy <<PII>>M--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>I--proxy <<PII>>n--proxy <<PII>>s--proxy <<PII>>t--proxy <<PII>>a--proxy <<PII>>l--proxy <<PII>>l--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>L--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>.--proxy <<PII>>l--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>
2026-03-10 08:07:03,209, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.4 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 89.222.122.167
 * cpanel-addons-production-feed: 89.222.122.167
 * cpanel-plugins: 89.222.122.167
Resolving Dependencies
--> Running transaction check
---> Package mdatp.x86_64 0:101.25102.0005-1 will be updated
---> Package mdatp.x86_64 0:101.25122.0004-1 will be an update
--> Finished Dependency Resolution

Dependencies Resolved

================================================================================
 Package  Arch      Version                Repository                      Size
================================================================================
Updating:
 mdatp    x86_64    101.25122.0004-1       packages-microsoft-com-prod    212 M

Transaction Summary
================================================================================
Upgrade  1 Package

Total download size: 212 M
Downloading packages:
Delta RPMs disabled because /usr/bin/applydeltarpm not installed.
Running transaction check
Running transaction test


Transaction check error:
  installing package mdatp-101.25122.0004-1.x86_64 needs 865MB on the / filesystem

Error Summary
-------------
Disk Requirements:
  At least 865MB more space needed on the / filesystem.

1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE 0
[*] exiting (21)

2026-03-10 08:07:03,209, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-03-10 08:07:03,210, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-03-10 08:07:03,564, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.10.0/status/20.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-03-10 08:07:03,565, INFO - End executing installer wrapper
2026-03-11 08:10:05,746, INFO - Start executing installer wrapper
2026-03-11 08:10:05,747, INFO - scrubbed proxy settings: {}
2026-03-11 08:10:05,747, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-03-11 08:10:05,821, INFO - MDE is installed
2026-03-11 08:10:05,821, INFO - Wait for MDE service to be available
2026-03-11 08:10:06,939, INFO - MDE is onboarded
2026-03-11 08:10:07,415, INFO - MDC tags in MDE are valid
2026-03-11 08:10:07,415, INFO - Start to run the update command: --proxy <<PII>>s--proxy <<PII>>r--proxy <<PII>>c--proxy <<PII>>/--proxy <<PII>>m--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>_--proxy <<PII>>i--proxy <<PII>>n--proxy <<PII>>s--proxy <<PII>>t--proxy <<PII>>a--proxy <<PII>>l--proxy <<PII>>l--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>.--proxy <<PII>>l--proxy <<PII>>a--proxy <<PII>>t--proxy <<PII>>e--proxy <<PII>>s--proxy <<PII>>t--proxy <<PII>>.--proxy <<PII>>s--proxy <<PII>>h--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>---proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>b--proxy <<PII>>u--proxy <<PII>>g--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>---proxy <<PII>>u--proxy <<PII>>p--proxy <<PII>>g--proxy <<PII>>r--proxy <<PII>>a--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>y--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>---proxy <<PII>>l--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>---proxy <<PII>>p--proxy <<PII>>a--proxy <<PII>>t--proxy <<PII>>h--proxy <<PII>> --proxy <<PII>>/--proxy <<PII>>v--proxy <<PII>>a--proxy <<PII>>r--proxy <<PII>>/--proxy <<PII>>l--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>/--proxy <<PII>>a--proxy <<PII>>z--proxy <<PII>>u--proxy <<PII>>r--proxy <<PII>>e--proxy <<PII>>/--proxy <<PII>>M--proxy <<PII>>i--proxy <<PII>>c--proxy <<PII>>r--proxy <<PII>>o--proxy <<PII>>s--proxy <<PII>>o--proxy <<PII>>f--proxy <<PII>>t--proxy <<PII>>.--proxy <<PII>>A--proxy <<PII>>z--proxy <<PII>>u--proxy <<PII>>r--proxy <<PII>>e--proxy <<PII>>.--proxy <<PII>>A--proxy <<PII>>z--proxy <<PII>>u--proxy <<PII>>r--proxy <<PII>>e--proxy <<PII>>D--proxy <<PII>>e--proxy <<PII>>f--proxy <<PII>>e--proxy <<PII>>n--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>F--proxy <<PII>>o--proxy <<PII>>r--proxy <<PII>>S--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>v--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>s--proxy <<PII>>.--proxy <<PII>>M--proxy <<PII>>D--proxy <<PII>>E--proxy <<PII>>.--proxy <<PII>>L--proxy <<PII>>i--proxy <<PII>>n--proxy <<PII>>u--proxy <<PII>>x--proxy <<PII>>/--proxy <<PII>>M--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>I--proxy <<PII>>n--proxy <<PII>>s--proxy <<PII>>t--proxy <<PII>>a--proxy <<PII>>l--proxy <<PII>>l--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>L--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>.--proxy <<PII>>l--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>
2026-03-11 08:10:25,893, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v0.8.4 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 89.222.122.163
 * cpanel-addons-production-feed: 89.222.122.163
 * cpanel-plugins: 89.222.122.163
Resolving Dependencies
--> Running transaction check
---> Package mdatp.x86_64 0:101.25102.0005-1 will be updated
---> Package mdatp.x86_64 0:101.25122.0004-1 will be an update
--> Finished Dependency Resolution

Dependencies Resolved

================================================================================
 Package  Arch      Version                Repository                      Size
================================================================================
Updating:
 mdatp    x86_64    101.25122.0004-1       packages-microsoft-com-prod    212 M

Transaction Summary
================================================================================
Upgrade  1 Package

Total download size: 212 M
Downloading packages:
Delta RPMs disabled because /usr/bin/applydeltarpm not installed.
Running transaction check
Running transaction test


Transaction check error:
  installing package mdatp-101.25122.0004-1.x86_64 needs 824MB on the / filesystem

Error Summary
-------------
Disk Requirements:
  At least 824MB more space needed on the / filesystem.

1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE 0
[*] exiting (21)

2026-03-11 08:10:25,893, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-03-11 08:10:25,894, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-03-11 08:10:26,268, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.10.0/status/20.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-03-11 08:10:26,273, INFO - End executing installer wrapper
2026-03-12 08:05:27,530, INFO - Start executing installer wrapper
2026-03-12 08:05:27,534, INFO - scrubbed proxy settings: {}
2026-03-12 08:05:27,534, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-03-12 08:05:27,609, INFO - MDE is installed
2026-03-12 08:05:27,609, INFO - Wait for MDE service to be available
2026-03-12 08:05:28,693, INFO - MDE is onboarded
2026-03-12 08:05:29,084, INFO - MDC tags in MDE are valid
2026-03-12 08:05:29,084, INFO - Start to run the update command: --proxy <<PII>>s--proxy <<PII>>r--proxy <<PII>>c--proxy <<PII>>/--proxy <<PII>>m--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>_--proxy <<PII>>i--proxy <<PII>>n--proxy <<PII>>s--proxy <<PII>>t--proxy <<PII>>a--proxy <<PII>>l--proxy <<PII>>l--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>.--proxy <<PII>>l--proxy <<PII>>a--proxy <<PII>>t--proxy <<PII>>e--proxy <<PII>>s--proxy <<PII>>t--proxy <<PII>>.--proxy <<PII>>s--proxy <<PII>>h--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>---proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>b--proxy <<PII>>u--proxy <<PII>>g--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>---proxy <<PII>>u--proxy <<PII>>p--proxy <<PII>>g--proxy <<PII>>r--proxy <<PII>>a--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>y--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>---proxy <<PII>>l--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>---proxy <<PII>>p--proxy <<PII>>a--proxy <<PII>>t--proxy <<PII>>h--proxy <<PII>> --proxy <<PII>>/--proxy <<PII>>v--proxy <<PII>>a--proxy <<PII>>r--proxy <<PII>>/--proxy <<PII>>l--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>/--proxy <<PII>>a--proxy <<PII>>z--proxy <<PII>>u--proxy <<PII>>r--proxy <<PII>>e--proxy <<PII>>/--proxy <<PII>>M--proxy <<PII>>i--proxy <<PII>>c--proxy <<PII>>r--proxy <<PII>>o--proxy <<PII>>s--proxy <<PII>>o--proxy <<PII>>f--proxy <<PII>>t--proxy <<PII>>.--proxy <<PII>>A--proxy <<PII>>z--proxy <<PII>>u--proxy <<PII>>r--proxy <<PII>>e--proxy <<PII>>.--proxy <<PII>>A--proxy <<PII>>z--proxy <<PII>>u--proxy <<PII>>r--proxy <<PII>>e--proxy <<PII>>D--proxy <<PII>>e--proxy <<PII>>f--proxy <<PII>>e--proxy <<PII>>n--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>F--proxy <<PII>>o--proxy <<PII>>r--proxy <<PII>>S--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>v--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>s--proxy <<PII>>.--proxy <<PII>>M--proxy <<PII>>D--proxy <<PII>>E--proxy <<PII>>.--proxy <<PII>>L--proxy <<PII>>i--proxy <<PII>>n--proxy <<PII>>u--proxy <<PII>>x--proxy <<PII>>/--proxy <<PII>>M--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>I--proxy <<PII>>n--proxy <<PII>>s--proxy <<PII>>t--proxy <<PII>>a--proxy <<PII>>l--proxy <<PII>>l--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>L--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>.--proxy <<PII>>l--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>
2026-03-12 08:05:49,846, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.1 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 89.222.122.163
 * cpanel-addons-production-feed: 89.222.122.163
 * cpanel-plugins: 89.222.122.163
Resolving Dependencies
--> Running transaction check
---> Package mdatp.x86_64 0:101.25102.0005-1 will be updated
---> Package mdatp.x86_64 0:101.25122.0004-1 will be an update
--> Finished Dependency Resolution

Dependencies Resolved

================================================================================
 Package  Arch      Version                Repository                      Size
================================================================================
Updating:
 mdatp    x86_64    101.25122.0004-1       packages-microsoft-com-prod    212 M

Transaction Summary
================================================================================
Upgrade  1 Package

Total download size: 212 M
Downloading packages:
Delta RPMs disabled because /usr/bin/applydeltarpm not installed.
Running transaction check
Running transaction test


Transaction check error:
  installing package mdatp-101.25122.0004-1.x86_64 needs 578MB on the / filesystem

Error Summary
-------------
Disk Requirements:
  At least 578MB more space needed on the / filesystem.

1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE (exit code: 1)
[*] exiting (21)

2026-03-12 08:05:49,848, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-03-12 08:05:49,848, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-03-12 08:05:50,211, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.10.0/status/20.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-03-12 08:05:50,217, INFO - End executing installer wrapper
2026-03-13 08:11:07,439, INFO - Start executing installer wrapper
2026-03-13 08:11:07,441, INFO - scrubbed proxy settings: {}
2026-03-13 08:11:07,441, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-03-13 08:11:07,514, INFO - MDE is installed
2026-03-13 08:11:07,515, INFO - Wait for MDE service to be available
2026-03-13 08:11:08,571, INFO - MDE is onboarded
2026-03-13 08:11:08,978, INFO - MDC tags in MDE are valid
2026-03-13 08:11:08,979, INFO - Start to run the update command: --proxy <<PII>>s--proxy <<PII>>r--proxy <<PII>>c--proxy <<PII>>/--proxy <<PII>>m--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>_--proxy <<PII>>i--proxy <<PII>>n--proxy <<PII>>s--proxy <<PII>>t--proxy <<PII>>a--proxy <<PII>>l--proxy <<PII>>l--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>.--proxy <<PII>>l--proxy <<PII>>a--proxy <<PII>>t--proxy <<PII>>e--proxy <<PII>>s--proxy <<PII>>t--proxy <<PII>>.--proxy <<PII>>s--proxy <<PII>>h--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>---proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>b--proxy <<PII>>u--proxy <<PII>>g--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>---proxy <<PII>>u--proxy <<PII>>p--proxy <<PII>>g--proxy <<PII>>r--proxy <<PII>>a--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>y--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>---proxy <<PII>>l--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>---proxy <<PII>>p--proxy <<PII>>a--proxy <<PII>>t--proxy <<PII>>h--proxy <<PII>> --proxy <<PII>>/--proxy <<PII>>v--proxy <<PII>>a--proxy <<PII>>r--proxy <<PII>>/--proxy <<PII>>l--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>/--proxy <<PII>>a--proxy <<PII>>z--proxy <<PII>>u--proxy <<PII>>r--proxy <<PII>>e--proxy <<PII>>/--proxy <<PII>>M--proxy <<PII>>i--proxy <<PII>>c--proxy <<PII>>r--proxy <<PII>>o--proxy <<PII>>s--proxy <<PII>>o--proxy <<PII>>f--proxy <<PII>>t--proxy <<PII>>.--proxy <<PII>>A--proxy <<PII>>z--proxy <<PII>>u--proxy <<PII>>r--proxy <<PII>>e--proxy <<PII>>.--proxy <<PII>>A--proxy <<PII>>z--proxy <<PII>>u--proxy <<PII>>r--proxy <<PII>>e--proxy <<PII>>D--proxy <<PII>>e--proxy <<PII>>f--proxy <<PII>>e--proxy <<PII>>n--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>F--proxy <<PII>>o--proxy <<PII>>r--proxy <<PII>>S--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>v--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>s--proxy <<PII>>.--proxy <<PII>>M--proxy <<PII>>D--proxy <<PII>>E--proxy <<PII>>.--proxy <<PII>>L--proxy <<PII>>i--proxy <<PII>>n--proxy <<PII>>u--proxy <<PII>>x--proxy <<PII>>/--proxy <<PII>>M--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>I--proxy <<PII>>n--proxy <<PII>>s--proxy <<PII>>t--proxy <<PII>>a--proxy <<PII>>l--proxy <<PII>>l--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>L--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>.--proxy <<PII>>l--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>
2026-03-13 08:11:25,741, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.1 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 89.222.122.167
 * cpanel-addons-production-feed: 89.222.122.167
 * cpanel-plugins: 89.222.122.167
Resolving Dependencies
--> Running transaction check
---> Package mdatp.x86_64 0:101.25102.0005-1 will be updated
---> Package mdatp.x86_64 0:101.25122.0004-1 will be an update
--> Finished Dependency Resolution

Dependencies Resolved

================================================================================
 Package  Arch      Version                Repository                      Size
================================================================================
Updating:
 mdatp    x86_64    101.25122.0004-1       packages-microsoft-com-prod    212 M

Transaction Summary
================================================================================
Upgrade  1 Package

Total download size: 212 M
Downloading packages:
Delta RPMs disabled because /usr/bin/applydeltarpm not installed.
Running transaction check
Running transaction test


Transaction check error:
  installing package mdatp-101.25122.0004-1.x86_64 needs 235MB on the / filesystem

Error Summary
-------------
Disk Requirements:
  At least 235MB more space needed on the / filesystem.

1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE (exit code: 1)
[*] exiting (21)

2026-03-13 08:11:25,741, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-03-13 08:11:25,744, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-03-13 08:11:26,113, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.10.0/status/20.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-03-13 08:11:26,124, INFO - End executing installer wrapper
2026-03-14 08:11:09,105, INFO - Start executing installer wrapper
2026-03-14 08:11:09,107, INFO - scrubbed proxy settings: {}
2026-03-14 08:11:09,107, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-03-14 08:11:09,184, INFO - MDE is installed
2026-03-14 08:11:09,184, INFO - Wait for MDE service to be available
2026-03-14 08:11:09,810, INFO - MDE is onboarded
2026-03-14 08:11:10,215, INFO - MDC tags in MDE are valid
2026-03-14 08:11:10,216, INFO - Start to run the update command: --proxy <<PII>>s--proxy <<PII>>r--proxy <<PII>>c--proxy <<PII>>/--proxy <<PII>>m--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>_--proxy <<PII>>i--proxy <<PII>>n--proxy <<PII>>s--proxy <<PII>>t--proxy <<PII>>a--proxy <<PII>>l--proxy <<PII>>l--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>.--proxy <<PII>>l--proxy <<PII>>a--proxy <<PII>>t--proxy <<PII>>e--proxy <<PII>>s--proxy <<PII>>t--proxy <<PII>>.--proxy <<PII>>s--proxy <<PII>>h--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>---proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>b--proxy <<PII>>u--proxy <<PII>>g--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>---proxy <<PII>>u--proxy <<PII>>p--proxy <<PII>>g--proxy <<PII>>r--proxy <<PII>>a--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>y--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>---proxy <<PII>>l--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>---proxy <<PII>>p--proxy <<PII>>a--proxy <<PII>>t--proxy <<PII>>h--proxy <<PII>> --proxy <<PII>>/--proxy <<PII>>v--proxy <<PII>>a--proxy <<PII>>r--proxy <<PII>>/--proxy <<PII>>l--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>/--proxy <<PII>>a--proxy <<PII>>z--proxy <<PII>>u--proxy <<PII>>r--proxy <<PII>>e--proxy <<PII>>/--proxy <<PII>>M--proxy <<PII>>i--proxy <<PII>>c--proxy <<PII>>r--proxy <<PII>>o--proxy <<PII>>s--proxy <<PII>>o--proxy <<PII>>f--proxy <<PII>>t--proxy <<PII>>.--proxy <<PII>>A--proxy <<PII>>z--proxy <<PII>>u--proxy <<PII>>r--proxy <<PII>>e--proxy <<PII>>.--proxy <<PII>>A--proxy <<PII>>z--proxy <<PII>>u--proxy <<PII>>r--proxy <<PII>>e--proxy <<PII>>D--proxy <<PII>>e--proxy <<PII>>f--proxy <<PII>>e--proxy <<PII>>n--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>F--proxy <<PII>>o--proxy <<PII>>r--proxy <<PII>>S--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>v--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>s--proxy <<PII>>.--proxy <<PII>>M--proxy <<PII>>D--proxy <<PII>>E--proxy <<PII>>.--proxy <<PII>>L--proxy <<PII>>i--proxy <<PII>>n--proxy <<PII>>u--proxy <<PII>>x--proxy <<PII>>/--proxy <<PII>>M--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>I--proxy <<PII>>n--proxy <<PII>>s--proxy <<PII>>t--proxy <<PII>>a--proxy <<PII>>l--proxy <<PII>>l--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>L--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>.--proxy <<PII>>l--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>
2026-03-14 08:11:14,584, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.1 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 89.222.122.167
 * cpanel-addons-production-feed: 89.222.122.167
 * cpanel-plugins: 89.222.122.167
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
Trying other mirror.


 One of the configured repositories failed (CentOS-7 - Base),
 and yum doesn't have enough cached data to continue. At this point the only
 safe thing yum can do is fail. There are a few ways to work "fix" this:

     1. Contact the upstream for the repository and get them to fix the problem.

     2. Reconfigure the baseurl/etc. for the repository, to point to a working
        upstream. This is most often useful if you are using a newer
        distribution release than is supported by the repository (and the
        packages for the previous distribution release still work).

     3. Run the command with the repository temporarily disabled
            yum --disablerepo=base ...

     4. Disable the repository permanently, so yum won't use it by default. Yum
        will then just ignore the repository until you permanently enable it
        again or use --enablerepo for temporary usage:

            yum-config-manager --disable base
        or
            subscription-manager repos --disable=base

     5. Configure the failing repository to be skipped, if it is unavailable.
        Note that yum will try to contact the repo. when it runs most commands,
        so will have to try and fail each time (and thus. yum will be be much
        slower). If it is a very temporary problem though, this is often a nice
        compromise:

            yum-config-manager --save --setopt=base.skip_if_unavailable=true

failure: repodata/repomd.xml from base: [Errno 256] No more mirrors to try.
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE (exit code: 1)
[*] exiting (21)

2026-03-14 08:11:14,584, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-03-14 08:11:14,585, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-03-14 08:11:16,778, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.10.0/status/20.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-03-14 08:11:16,778, INFO - End executing installer wrapper
2026-03-15 08:09:37,046, INFO - Start executing installer wrapper
2026-03-15 08:09:37,049, INFO - scrubbed proxy settings: {}
2026-03-15 08:09:37,049, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-03-15 08:09:37,126, INFO - MDE is installed
2026-03-15 08:09:37,126, INFO - Wait for MDE service to be available
2026-03-15 08:09:38,056, INFO - MDE is onboarded
2026-03-15 08:09:38,442, INFO - MDC tags in MDE are valid
2026-03-15 08:09:38,442, INFO - Start to run the update command: --proxy <<PII>>s--proxy <<PII>>r--proxy <<PII>>c--proxy <<PII>>/--proxy <<PII>>m--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>_--proxy <<PII>>i--proxy <<PII>>n--proxy <<PII>>s--proxy <<PII>>t--proxy <<PII>>a--proxy <<PII>>l--proxy <<PII>>l--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>.--proxy <<PII>>l--proxy <<PII>>a--proxy <<PII>>t--proxy <<PII>>e--proxy <<PII>>s--proxy <<PII>>t--proxy <<PII>>.--proxy <<PII>>s--proxy <<PII>>h--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>---proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>b--proxy <<PII>>u--proxy <<PII>>g--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>---proxy <<PII>>u--proxy <<PII>>p--proxy <<PII>>g--proxy <<PII>>r--proxy <<PII>>a--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>y--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>---proxy <<PII>>l--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>---proxy <<PII>>p--proxy <<PII>>a--proxy <<PII>>t--proxy <<PII>>h--proxy <<PII>> --proxy <<PII>>/--proxy <<PII>>v--proxy <<PII>>a--proxy <<PII>>r--proxy <<PII>>/--proxy <<PII>>l--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>/--proxy <<PII>>a--proxy <<PII>>z--proxy <<PII>>u--proxy <<PII>>r--proxy <<PII>>e--proxy <<PII>>/--proxy <<PII>>M--proxy <<PII>>i--proxy <<PII>>c--proxy <<PII>>r--proxy <<PII>>o--proxy <<PII>>s--proxy <<PII>>o--proxy <<PII>>f--proxy <<PII>>t--proxy <<PII>>.--proxy <<PII>>A--proxy <<PII>>z--proxy <<PII>>u--proxy <<PII>>r--proxy <<PII>>e--proxy <<PII>>.--proxy <<PII>>A--proxy <<PII>>z--proxy <<PII>>u--proxy <<PII>>r--proxy <<PII>>e--proxy <<PII>>D--proxy <<PII>>e--proxy <<PII>>f--proxy <<PII>>e--proxy <<PII>>n--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>F--proxy <<PII>>o--proxy <<PII>>r--proxy <<PII>>S--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>v--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>s--proxy <<PII>>.--proxy <<PII>>M--proxy <<PII>>D--proxy <<PII>>E--proxy <<PII>>.--proxy <<PII>>L--proxy <<PII>>i--proxy <<PII>>n--proxy <<PII>>u--proxy <<PII>>x--proxy <<PII>>/--proxy <<PII>>M--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>I--proxy <<PII>>n--proxy <<PII>>s--proxy <<PII>>t--proxy <<PII>>a--proxy <<PII>>l--proxy <<PII>>l--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>L--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>.--proxy <<PII>>l--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>
2026-03-15 08:09:42,217, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.1 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 89.222.122.167
 * cpanel-addons-production-feed: 89.222.122.167
 * cpanel-plugins: 89.222.122.167
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
Trying other mirror.


 One of the configured repositories failed (CentOS-7 - Base),
 and yum doesn't have enough cached data to continue. At this point the only
 safe thing yum can do is fail. There are a few ways to work "fix" this:

     1. Contact the upstream for the repository and get them to fix the problem.

     2. Reconfigure the baseurl/etc. for the repository, to point to a working
        upstream. This is most often useful if you are using a newer
        distribution release than is supported by the repository (and the
        packages for the previous distribution release still work).

     3. Run the command with the repository temporarily disabled
            yum --disablerepo=base ...

     4. Disable the repository permanently, so yum won't use it by default. Yum
        will then just ignore the repository until you permanently enable it
        again or use --enablerepo for temporary usage:

            yum-config-manager --disable base
        or
            subscription-manager repos --disable=base

     5. Configure the failing repository to be skipped, if it is unavailable.
        Note that yum will try to contact the repo. when it runs most commands,
        so will have to try and fail each time (and thus. yum will be be much
        slower). If it is a very temporary problem though, this is often a nice
        compromise:

            yum-config-manager --save --setopt=base.skip_if_unavailable=true

failure: repodata/repomd.xml from base: [Errno 256] No more mirrors to try.
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE (exit code: 1)
[*] exiting (21)

2026-03-15 08:09:42,217, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-03-15 08:09:42,218, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-03-15 08:09:42,568, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.10.0/status/20.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-03-15 08:09:42,569, INFO - End executing installer wrapper
2026-03-16 08:03:44,797, INFO - Start executing installer wrapper
2026-03-16 08:03:44,799, INFO - scrubbed proxy settings: {}
2026-03-16 08:03:44,799, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-03-16 08:03:44,875, INFO - MDE is installed
2026-03-16 08:03:44,875, INFO - Wait for MDE service to be available
2026-03-16 08:03:45,522, INFO - MDE is onboarded
2026-03-16 08:03:45,831, INFO - MDC tags in MDE are valid
2026-03-16 08:03:45,831, INFO - Start to run the update command: --proxy <<PII>>s--proxy <<PII>>r--proxy <<PII>>c--proxy <<PII>>/--proxy <<PII>>m--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>_--proxy <<PII>>i--proxy <<PII>>n--proxy <<PII>>s--proxy <<PII>>t--proxy <<PII>>a--proxy <<PII>>l--proxy <<PII>>l--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>.--proxy <<PII>>l--proxy <<PII>>a--proxy <<PII>>t--proxy <<PII>>e--proxy <<PII>>s--proxy <<PII>>t--proxy <<PII>>.--proxy <<PII>>s--proxy <<PII>>h--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>---proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>b--proxy <<PII>>u--proxy <<PII>>g--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>---proxy <<PII>>u--proxy <<PII>>p--proxy <<PII>>g--proxy <<PII>>r--proxy <<PII>>a--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>y--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>---proxy <<PII>>l--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>---proxy <<PII>>p--proxy <<PII>>a--proxy <<PII>>t--proxy <<PII>>h--proxy <<PII>> --proxy <<PII>>/--proxy <<PII>>v--proxy <<PII>>a--proxy <<PII>>r--proxy <<PII>>/--proxy <<PII>>l--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>/--proxy <<PII>>a--proxy <<PII>>z--proxy <<PII>>u--proxy <<PII>>r--proxy <<PII>>e--proxy <<PII>>/--proxy <<PII>>M--proxy <<PII>>i--proxy <<PII>>c--proxy <<PII>>r--proxy <<PII>>o--proxy <<PII>>s--proxy <<PII>>o--proxy <<PII>>f--proxy <<PII>>t--proxy <<PII>>.--proxy <<PII>>A--proxy <<PII>>z--proxy <<PII>>u--proxy <<PII>>r--proxy <<PII>>e--proxy <<PII>>.--proxy <<PII>>A--proxy <<PII>>z--proxy <<PII>>u--proxy <<PII>>r--proxy <<PII>>e--proxy <<PII>>D--proxy <<PII>>e--proxy <<PII>>f--proxy <<PII>>e--proxy <<PII>>n--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>F--proxy <<PII>>o--proxy <<PII>>r--proxy <<PII>>S--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>v--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>s--proxy <<PII>>.--proxy <<PII>>M--proxy <<PII>>D--proxy <<PII>>E--proxy <<PII>>.--proxy <<PII>>L--proxy <<PII>>i--proxy <<PII>>n--proxy <<PII>>u--proxy <<PII>>x--proxy <<PII>>/--proxy <<PII>>M--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>I--proxy <<PII>>n--proxy <<PII>>s--proxy <<PII>>t--proxy <<PII>>a--proxy <<PII>>l--proxy <<PII>>l--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>L--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>.--proxy <<PII>>l--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>
2026-03-16 08:03:49,817, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.1 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 89.222.122.163
 * cpanel-addons-production-feed: 89.222.122.163
 * cpanel-plugins: 89.222.122.163
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
Trying other mirror.


 One of the configured repositories failed (CentOS-7 - Base),
 and yum doesn't have enough cached data to continue. At this point the only
 safe thing yum can do is fail. There are a few ways to work "fix" this:

     1. Contact the upstream for the repository and get them to fix the problem.

     2. Reconfigure the baseurl/etc. for the repository, to point to a working
        upstream. This is most often useful if you are using a newer
        distribution release than is supported by the repository (and the
        packages for the previous distribution release still work).

     3. Run the command with the repository temporarily disabled
            yum --disablerepo=base ...

     4. Disable the repository permanently, so yum won't use it by default. Yum
        will then just ignore the repository until you permanently enable it
        again or use --enablerepo for temporary usage:

            yum-config-manager --disable base
        or
            subscription-manager repos --disable=base

     5. Configure the failing repository to be skipped, if it is unavailable.
        Note that yum will try to contact the repo. when it runs most commands,
        so will have to try and fail each time (and thus. yum will be be much
        slower). If it is a very temporary problem though, this is often a nice
        compromise:

            yum-config-manager --save --setopt=base.skip_if_unavailable=true

failure: repodata/repomd.xml from base: [Errno 256] No more mirrors to try.
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE (exit code: 1)
[*] exiting (21)

2026-03-16 08:03:49,817, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-03-16 08:03:49,818, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-03-16 08:03:50,160, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.10.0/status/20.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-03-16 08:03:50,161, INFO - End executing installer wrapper
2026-03-16 23:43:05,734, INFO - Start executing installer wrapper
2026-03-16 23:43:05,741, INFO - scrubbed proxy settings: {}
2026-03-16 23:43:05,741, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-03-16 23:43:05,829, INFO - MDE is installed
2026-03-16 23:43:05,829, INFO - Wait for MDE service to be available
2026-03-16 23:43:07,062, INFO - MDE is onboarded
2026-03-16 23:43:07,550, INFO - MDC tags in MDE are valid
2026-03-16 23:43:07,550, INFO - Start to run the update command: --proxy <<PII>>s--proxy <<PII>>r--proxy <<PII>>c--proxy <<PII>>/--proxy <<PII>>m--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>_--proxy <<PII>>i--proxy <<PII>>n--proxy <<PII>>s--proxy <<PII>>t--proxy <<PII>>a--proxy <<PII>>l--proxy <<PII>>l--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>.--proxy <<PII>>l--proxy <<PII>>a--proxy <<PII>>t--proxy <<PII>>e--proxy <<PII>>s--proxy <<PII>>t--proxy <<PII>>.--proxy <<PII>>s--proxy <<PII>>h--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>---proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>b--proxy <<PII>>u--proxy <<PII>>g--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>---proxy <<PII>>u--proxy <<PII>>p--proxy <<PII>>g--proxy <<PII>>r--proxy <<PII>>a--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>y--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>---proxy <<PII>>l--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>---proxy <<PII>>p--proxy <<PII>>a--proxy <<PII>>t--proxy <<PII>>h--proxy <<PII>> --proxy <<PII>>/--proxy <<PII>>v--proxy <<PII>>a--proxy <<PII>>r--proxy <<PII>>/--proxy <<PII>>l--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>/--proxy <<PII>>a--proxy <<PII>>z--proxy <<PII>>u--proxy <<PII>>r--proxy <<PII>>e--proxy <<PII>>/--proxy <<PII>>M--proxy <<PII>>i--proxy <<PII>>c--proxy <<PII>>r--proxy <<PII>>o--proxy <<PII>>s--proxy <<PII>>o--proxy <<PII>>f--proxy <<PII>>t--proxy <<PII>>.--proxy <<PII>>A--proxy <<PII>>z--proxy <<PII>>u--proxy <<PII>>r--proxy <<PII>>e--proxy <<PII>>.--proxy <<PII>>A--proxy <<PII>>z--proxy <<PII>>u--proxy <<PII>>r--proxy <<PII>>e--proxy <<PII>>D--proxy <<PII>>e--proxy <<PII>>f--proxy <<PII>>e--proxy <<PII>>n--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>F--proxy <<PII>>o--proxy <<PII>>r--proxy <<PII>>S--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>v--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>s--proxy <<PII>>.--proxy <<PII>>M--proxy <<PII>>D--proxy <<PII>>E--proxy <<PII>>.--proxy <<PII>>L--proxy <<PII>>i--proxy <<PII>>n--proxy <<PII>>u--proxy <<PII>>x--proxy <<PII>>/--proxy <<PII>>M--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>I--proxy <<PII>>n--proxy <<PII>>s--proxy <<PII>>t--proxy <<PII>>a--proxy <<PII>>l--proxy <<PII>>l--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>L--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>.--proxy <<PII>>l--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>
2026-03-16 23:43:11,753, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.1 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 184.94.200.5
 * cpanel-addons-production-feed: 184.94.200.5
 * cpanel-plugins: 184.94.200.5
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
Trying other mirror.


 One of the configured repositories failed (CentOS-7 - Base),
 and yum doesn't have enough cached data to continue. At this point the only
 safe thing yum can do is fail. There are a few ways to work "fix" this:

     1. Contact the upstream for the repository and get them to fix the problem.

     2. Reconfigure the baseurl/etc. for the repository, to point to a working
        upstream. This is most often useful if you are using a newer
        distribution release than is supported by the repository (and the
        packages for the previous distribution release still work).

     3. Run the command with the repository temporarily disabled
            yum --disablerepo=base ...

     4. Disable the repository permanently, so yum won't use it by default. Yum
        will then just ignore the repository until you permanently enable it
        again or use --enablerepo for temporary usage:

            yum-config-manager --disable base
        or
            subscription-manager repos --disable=base

     5. Configure the failing repository to be skipped, if it is unavailable.
        Note that yum will try to contact the repo. when it runs most commands,
        so will have to try and fail each time (and thus. yum will be be much
        slower). If it is a very temporary problem though, this is often a nice
        compromise:

            yum-config-manager --save --setopt=base.skip_if_unavailable=true

failure: repodata/repomd.xml from base: [Errno 256] No more mirrors to try.
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE (exit code: 1)
[*] exiting (21)

2026-03-16 23:43:11,753, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-03-16 23:43:11,754, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-03-16 23:43:12,133, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.10.0/status/21.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-03-16 23:43:12,134, INFO - End executing installer wrapper
2026-03-17 08:07:49,546, INFO - Start executing installer wrapper
2026-03-17 08:07:49,548, INFO - scrubbed proxy settings: {}
2026-03-17 08:07:49,548, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-03-17 08:07:49,624, INFO - MDE is installed
2026-03-17 08:07:49,624, INFO - Wait for MDE service to be available
2026-03-17 08:07:50,861, INFO - MDE is onboarded
2026-03-17 08:07:51,362, INFO - MDC tags in MDE are valid
2026-03-17 08:07:51,363, INFO - Start to run the update command: --proxy <<PII>>s--proxy <<PII>>r--proxy <<PII>>c--proxy <<PII>>/--proxy <<PII>>m--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>_--proxy <<PII>>i--proxy <<PII>>n--proxy <<PII>>s--proxy <<PII>>t--proxy <<PII>>a--proxy <<PII>>l--proxy <<PII>>l--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>.--proxy <<PII>>l--proxy <<PII>>a--proxy <<PII>>t--proxy <<PII>>e--proxy <<PII>>s--proxy <<PII>>t--proxy <<PII>>.--proxy <<PII>>s--proxy <<PII>>h--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>---proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>b--proxy <<PII>>u--proxy <<PII>>g--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>---proxy <<PII>>u--proxy <<PII>>p--proxy <<PII>>g--proxy <<PII>>r--proxy <<PII>>a--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>y--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>---proxy <<PII>>l--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>---proxy <<PII>>p--proxy <<PII>>a--proxy <<PII>>t--proxy <<PII>>h--proxy <<PII>> --proxy <<PII>>/--proxy <<PII>>v--proxy <<PII>>a--proxy <<PII>>r--proxy <<PII>>/--proxy <<PII>>l--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>/--proxy <<PII>>a--proxy <<PII>>z--proxy <<PII>>u--proxy <<PII>>r--proxy <<PII>>e--proxy <<PII>>/--proxy <<PII>>M--proxy <<PII>>i--proxy <<PII>>c--proxy <<PII>>r--proxy <<PII>>o--proxy <<PII>>s--proxy <<PII>>o--proxy <<PII>>f--proxy <<PII>>t--proxy <<PII>>.--proxy <<PII>>A--proxy <<PII>>z--proxy <<PII>>u--proxy <<PII>>r--proxy <<PII>>e--proxy <<PII>>.--proxy <<PII>>A--proxy <<PII>>z--proxy <<PII>>u--proxy <<PII>>r--proxy <<PII>>e--proxy <<PII>>D--proxy <<PII>>e--proxy <<PII>>f--proxy <<PII>>e--proxy <<PII>>n--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>F--proxy <<PII>>o--proxy <<PII>>r--proxy <<PII>>S--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>v--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>s--proxy <<PII>>.--proxy <<PII>>M--proxy <<PII>>D--proxy <<PII>>E--proxy <<PII>>.--proxy <<PII>>L--proxy <<PII>>i--proxy <<PII>>n--proxy <<PII>>u--proxy <<PII>>x--proxy <<PII>>/--proxy <<PII>>M--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>I--proxy <<PII>>n--proxy <<PII>>s--proxy <<PII>>t--proxy <<PII>>a--proxy <<PII>>l--proxy <<PII>>l--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>L--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>.--proxy <<PII>>l--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>
2026-03-17 08:07:57,527, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.1 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 184.94.200.5
 * cpanel-addons-production-feed: 184.94.200.5
 * cpanel-plugins: 184.94.200.5
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
Trying other mirror.


 One of the configured repositories failed (CentOS-7 - Base),
 and yum doesn't have enough cached data to continue. At this point the only
 safe thing yum can do is fail. There are a few ways to work "fix" this:

     1. Contact the upstream for the repository and get them to fix the problem.

     2. Reconfigure the baseurl/etc. for the repository, to point to a working
        upstream. This is most often useful if you are using a newer
        distribution release than is supported by the repository (and the
        packages for the previous distribution release still work).

     3. Run the command with the repository temporarily disabled
            yum --disablerepo=base ...

     4. Disable the repository permanently, so yum won't use it by default. Yum
        will then just ignore the repository until you permanently enable it
        again or use --enablerepo for temporary usage:

            yum-config-manager --disable base
        or
            subscription-manager repos --disable=base

     5. Configure the failing repository to be skipped, if it is unavailable.
        Note that yum will try to contact the repo. when it runs most commands,
        so will have to try and fail each time (and thus. yum will be be much
        slower). If it is a very temporary problem though, this is often a nice
        compromise:

            yum-config-manager --save --setopt=base.skip_if_unavailable=true

failure: repodata/repomd.xml from base: [Errno 256] No more mirrors to try.
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE (exit code: 1)
[*] exiting (21)

2026-03-17 08:07:57,527, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-03-17 08:07:57,528, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-03-17 08:07:57,889, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.10.0/status/21.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-03-17 08:07:57,890, INFO - End executing installer wrapper
2026-03-18 08:08:38,476, INFO - Start executing installer wrapper
2026-03-18 08:08:38,486, INFO - scrubbed proxy settings: {}
2026-03-18 08:08:38,486, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-03-18 08:08:38,610, INFO - MDE is installed
2026-03-18 08:08:38,610, INFO - Wait for MDE service to be available
2026-03-18 08:08:39,391, INFO - MDE is onboarded
2026-03-18 08:08:39,770, INFO - MDC tags in MDE are valid
2026-03-18 08:08:39,771, INFO - Start to run the update command: --proxy <<PII>>s--proxy <<PII>>r--proxy <<PII>>c--proxy <<PII>>/--proxy <<PII>>m--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>_--proxy <<PII>>i--proxy <<PII>>n--proxy <<PII>>s--proxy <<PII>>t--proxy <<PII>>a--proxy <<PII>>l--proxy <<PII>>l--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>.--proxy <<PII>>l--proxy <<PII>>a--proxy <<PII>>t--proxy <<PII>>e--proxy <<PII>>s--proxy <<PII>>t--proxy <<PII>>.--proxy <<PII>>s--proxy <<PII>>h--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>---proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>b--proxy <<PII>>u--proxy <<PII>>g--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>---proxy <<PII>>u--proxy <<PII>>p--proxy <<PII>>g--proxy <<PII>>r--proxy <<PII>>a--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>y--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>---proxy <<PII>>l--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>---proxy <<PII>>p--proxy <<PII>>a--proxy <<PII>>t--proxy <<PII>>h--proxy <<PII>> --proxy <<PII>>/--proxy <<PII>>v--proxy <<PII>>a--proxy <<PII>>r--proxy <<PII>>/--proxy <<PII>>l--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>/--proxy <<PII>>a--proxy <<PII>>z--proxy <<PII>>u--proxy <<PII>>r--proxy <<PII>>e--proxy <<PII>>/--proxy <<PII>>M--proxy <<PII>>i--proxy <<PII>>c--proxy <<PII>>r--proxy <<PII>>o--proxy <<PII>>s--proxy <<PII>>o--proxy <<PII>>f--proxy <<PII>>t--proxy <<PII>>.--proxy <<PII>>A--proxy <<PII>>z--proxy <<PII>>u--proxy <<PII>>r--proxy <<PII>>e--proxy <<PII>>.--proxy <<PII>>A--proxy <<PII>>z--proxy <<PII>>u--proxy <<PII>>r--proxy <<PII>>e--proxy <<PII>>D--proxy <<PII>>e--proxy <<PII>>f--proxy <<PII>>e--proxy <<PII>>n--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>F--proxy <<PII>>o--proxy <<PII>>r--proxy <<PII>>S--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>v--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>s--proxy <<PII>>.--proxy <<PII>>M--proxy <<PII>>D--proxy <<PII>>E--proxy <<PII>>.--proxy <<PII>>L--proxy <<PII>>i--proxy <<PII>>n--proxy <<PII>>u--proxy <<PII>>x--proxy <<PII>>/--proxy <<PII>>M--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>I--proxy <<PII>>n--proxy <<PII>>s--proxy <<PII>>t--proxy <<PII>>a--proxy <<PII>>l--proxy <<PII>>l--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>L--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>.--proxy <<PII>>l--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>
2026-03-18 08:08:44,340, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.1 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 89.222.122.163
 * cpanel-addons-production-feed: 89.222.122.163
 * cpanel-plugins: 89.222.122.163
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
Trying other mirror.


 One of the configured repositories failed (CentOS-7 - Base),
 and yum doesn't have enough cached data to continue. At this point the only
 safe thing yum can do is fail. There are a few ways to work "fix" this:

     1. Contact the upstream for the repository and get them to fix the problem.

     2. Reconfigure the baseurl/etc. for the repository, to point to a working
        upstream. This is most often useful if you are using a newer
        distribution release than is supported by the repository (and the
        packages for the previous distribution release still work).

     3. Run the command with the repository temporarily disabled
            yum --disablerepo=base ...

     4. Disable the repository permanently, so yum won't use it by default. Yum
        will then just ignore the repository until you permanently enable it
        again or use --enablerepo for temporary usage:

            yum-config-manager --disable base
        or
            subscription-manager repos --disable=base

     5. Configure the failing repository to be skipped, if it is unavailable.
        Note that yum will try to contact the repo. when it runs most commands,
        so will have to try and fail each time (and thus. yum will be be much
        slower). If it is a very temporary problem though, this is often a nice
        compromise:

            yum-config-manager --save --setopt=base.skip_if_unavailable=true

failure: repodata/repomd.xml from base: [Errno 256] No more mirrors to try.
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE (exit code: 1)
[*] exiting (21)

2026-03-18 08:08:44,341, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-03-18 08:08:44,341, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-03-18 08:08:44,709, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.10.0/status/21.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-03-18 08:08:44,710, INFO - End executing installer wrapper
2026-03-19 08:02:53,703, INFO - Start executing installer wrapper
2026-03-19 08:02:53,705, INFO - scrubbed proxy settings: {}
2026-03-19 08:02:53,705, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-03-19 08:02:53,780, INFO - MDE is installed
2026-03-19 08:02:53,780, INFO - Wait for MDE service to be available
2026-03-19 08:02:54,472, INFO - MDE is onboarded
2026-03-19 08:02:54,855, INFO - MDC tags in MDE are valid
2026-03-19 08:02:54,855, INFO - Start to run the update command: --proxy <<PII>>s--proxy <<PII>>r--proxy <<PII>>c--proxy <<PII>>/--proxy <<PII>>m--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>_--proxy <<PII>>i--proxy <<PII>>n--proxy <<PII>>s--proxy <<PII>>t--proxy <<PII>>a--proxy <<PII>>l--proxy <<PII>>l--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>.--proxy <<PII>>l--proxy <<PII>>a--proxy <<PII>>t--proxy <<PII>>e--proxy <<PII>>s--proxy <<PII>>t--proxy <<PII>>.--proxy <<PII>>s--proxy <<PII>>h--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>---proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>b--proxy <<PII>>u--proxy <<PII>>g--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>---proxy <<PII>>u--proxy <<PII>>p--proxy <<PII>>g--proxy <<PII>>r--proxy <<PII>>a--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>y--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>---proxy <<PII>>l--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>---proxy <<PII>>p--proxy <<PII>>a--proxy <<PII>>t--proxy <<PII>>h--proxy <<PII>> --proxy <<PII>>/--proxy <<PII>>v--proxy <<PII>>a--proxy <<PII>>r--proxy <<PII>>/--proxy <<PII>>l--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>/--proxy <<PII>>a--proxy <<PII>>z--proxy <<PII>>u--proxy <<PII>>r--proxy <<PII>>e--proxy <<PII>>/--proxy <<PII>>M--proxy <<PII>>i--proxy <<PII>>c--proxy <<PII>>r--proxy <<PII>>o--proxy <<PII>>s--proxy <<PII>>o--proxy <<PII>>f--proxy <<PII>>t--proxy <<PII>>.--proxy <<PII>>A--proxy <<PII>>z--proxy <<PII>>u--proxy <<PII>>r--proxy <<PII>>e--proxy <<PII>>.--proxy <<PII>>A--proxy <<PII>>z--proxy <<PII>>u--proxy <<PII>>r--proxy <<PII>>e--proxy <<PII>>D--proxy <<PII>>e--proxy <<PII>>f--proxy <<PII>>e--proxy <<PII>>n--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>F--proxy <<PII>>o--proxy <<PII>>r--proxy <<PII>>S--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>v--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>s--proxy <<PII>>.--proxy <<PII>>M--proxy <<PII>>D--proxy <<PII>>E--proxy <<PII>>.--proxy <<PII>>L--proxy <<PII>>i--proxy <<PII>>n--proxy <<PII>>u--proxy <<PII>>x--proxy <<PII>>/--proxy <<PII>>M--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>I--proxy <<PII>>n--proxy <<PII>>s--proxy <<PII>>t--proxy <<PII>>a--proxy <<PII>>l--proxy <<PII>>l--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>L--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>.--proxy <<PII>>l--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>
2026-03-19 08:04:58,834, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.1 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 89.222.122.167
 * cpanel-addons-production-feed: 89.222.122.167
 * cpanel-plugins: 89.222.122.167
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 12] Timeout on http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: (28, 'Connection timed out after 30001 milliseconds')
Trying other mirror.
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 12] Timeout on http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: (28, 'Connection timed out after 30002 milliseconds')
Trying other mirror.
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 12] Timeout on http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: (28, 'Connection timed out after 30001 milliseconds')
Trying other mirror.
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 12] Timeout on http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: (28, 'Connection timed out after 30002 milliseconds')
Trying other mirror.
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
Trying other mirror.


 One of the configured repositories failed (CentOS-7 - Base),
 and yum doesn't have enough cached data to continue. At this point the only
 safe thing yum can do is fail. There are a few ways to work "fix" this:

     1. Contact the upstream for the repository and get them to fix the problem.

     2. Reconfigure the baseurl/etc. for the repository, to point to a working
        upstream. This is most often useful if you are using a newer
        distribution release than is supported by the repository (and the
        packages for the previous distribution release still work).

     3. Run the command with the repository temporarily disabled
            yum --disablerepo=base ...

     4. Disable the repository permanently, so yum won't use it by default. Yum
        will then just ignore the repository until you permanently enable it
        again or use --enablerepo for temporary usage:

            yum-config-manager --disable base
        or
            subscription-manager repos --disable=base

     5. Configure the failing repository to be skipped, if it is unavailable.
        Note that yum will try to contact the repo. when it runs most commands,
        so will have to try and fail each time (and thus. yum will be be much
        slower). If it is a very temporary problem though, this is often a nice
        compromise:

            yum-config-manager --save --setopt=base.skip_if_unavailable=true

failure: repodata/repomd.xml from base: [Errno 256] No more mirrors to try.
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 12] Timeout on http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: (28, 'Connection timed out after 30001 milliseconds')
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 12] Timeout on http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: (28, 'Connection timed out after 30002 milliseconds')
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 12] Timeout on http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: (28, 'Connection timed out after 30001 milliseconds')
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 12] Timeout on http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: (28, 'Connection timed out after 30002 milliseconds')
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE (exit code: 1)
[*] exiting (21)

2026-03-19 08:04:58,834, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-03-19 08:04:58,835, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-03-19 08:04:59,205, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.10.0/status/21.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-03-19 08:04:59,207, INFO - End executing installer wrapper
2026-03-20 08:07:18,617, INFO - Start executing installer wrapper
2026-03-20 08:07:18,618, INFO - scrubbed proxy settings: {}
2026-03-20 08:07:18,619, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-03-20 08:07:18,695, INFO - MDE is installed
2026-03-20 08:07:18,695, INFO - Wait for MDE service to be available
2026-03-20 08:07:19,358, INFO - MDE is onboarded
2026-03-20 08:07:19,666, INFO - MDC tags in MDE are valid
2026-03-20 08:07:19,666, INFO - Start to run the update command: --proxy <<PII>>s--proxy <<PII>>r--proxy <<PII>>c--proxy <<PII>>/--proxy <<PII>>m--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>_--proxy <<PII>>i--proxy <<PII>>n--proxy <<PII>>s--proxy <<PII>>t--proxy <<PII>>a--proxy <<PII>>l--proxy <<PII>>l--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>.--proxy <<PII>>l--proxy <<PII>>a--proxy <<PII>>t--proxy <<PII>>e--proxy <<PII>>s--proxy <<PII>>t--proxy <<PII>>.--proxy <<PII>>s--proxy <<PII>>h--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>---proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>b--proxy <<PII>>u--proxy <<PII>>g--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>---proxy <<PII>>u--proxy <<PII>>p--proxy <<PII>>g--proxy <<PII>>r--proxy <<PII>>a--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>y--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>---proxy <<PII>>l--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>---proxy <<PII>>p--proxy <<PII>>a--proxy <<PII>>t--proxy <<PII>>h--proxy <<PII>> --proxy <<PII>>/--proxy <<PII>>v--proxy <<PII>>a--proxy <<PII>>r--proxy <<PII>>/--proxy <<PII>>l--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>/--proxy <<PII>>a--proxy <<PII>>z--proxy <<PII>>u--proxy <<PII>>r--proxy <<PII>>e--proxy <<PII>>/--proxy <<PII>>M--proxy <<PII>>i--proxy <<PII>>c--proxy <<PII>>r--proxy <<PII>>o--proxy <<PII>>s--proxy <<PII>>o--proxy <<PII>>f--proxy <<PII>>t--proxy <<PII>>.--proxy <<PII>>A--proxy <<PII>>z--proxy <<PII>>u--proxy <<PII>>r--proxy <<PII>>e--proxy <<PII>>.--proxy <<PII>>A--proxy <<PII>>z--proxy <<PII>>u--proxy <<PII>>r--proxy <<PII>>e--proxy <<PII>>D--proxy <<PII>>e--proxy <<PII>>f--proxy <<PII>>e--proxy <<PII>>n--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>F--proxy <<PII>>o--proxy <<PII>>r--proxy <<PII>>S--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>v--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>s--proxy <<PII>>.--proxy <<PII>>M--proxy <<PII>>D--proxy <<PII>>E--proxy <<PII>>.--proxy <<PII>>L--proxy <<PII>>i--proxy <<PII>>n--proxy <<PII>>u--proxy <<PII>>x--proxy <<PII>>/--proxy <<PII>>M--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>I--proxy <<PII>>n--proxy <<PII>>s--proxy <<PII>>t--proxy <<PII>>a--proxy <<PII>>l--proxy <<PII>>l--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>L--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>.--proxy <<PII>>l--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>
2026-03-20 08:07:23,972, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.1 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 89.222.122.167
 * cpanel-addons-production-feed: 89.222.122.167
 * cpanel-plugins: 89.222.122.167
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
Trying other mirror.


 One of the configured repositories failed (CentOS-7 - Base),
 and yum doesn't have enough cached data to continue. At this point the only
 safe thing yum can do is fail. There are a few ways to work "fix" this:

     1. Contact the upstream for the repository and get them to fix the problem.

     2. Reconfigure the baseurl/etc. for the repository, to point to a working
        upstream. This is most often useful if you are using a newer
        distribution release than is supported by the repository (and the
        packages for the previous distribution release still work).

     3. Run the command with the repository temporarily disabled
            yum --disablerepo=base ...

     4. Disable the repository permanently, so yum won't use it by default. Yum
        will then just ignore the repository until you permanently enable it
        again or use --enablerepo for temporary usage:

            yum-config-manager --disable base
        or
            subscription-manager repos --disable=base

     5. Configure the failing repository to be skipped, if it is unavailable.
        Note that yum will try to contact the repo. when it runs most commands,
        so will have to try and fail each time (and thus. yum will be be much
        slower). If it is a very temporary problem though, this is often a nice
        compromise:

            yum-config-manager --save --setopt=base.skip_if_unavailable=true

failure: repodata/repomd.xml from base: [Errno 256] No more mirrors to try.
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE (exit code: 1)
[*] exiting (21)

2026-03-20 08:07:23,973, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-03-20 08:07:23,973, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-03-20 08:07:25,270, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.10.0/status/21.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-03-20 08:07:25,271, INFO - End executing installer wrapper
2026-03-21 08:05:25,591, INFO - Start executing installer wrapper
2026-03-21 08:05:25,594, INFO - scrubbed proxy settings: {}
2026-03-21 08:05:25,594, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-03-21 08:05:25,668, INFO - MDE is installed
2026-03-21 08:05:25,668, INFO - Wait for MDE service to be available
2026-03-21 08:05:26,570, INFO - MDE is onboarded
2026-03-21 08:05:26,879, INFO - MDC tags in MDE are valid
2026-03-21 08:05:26,880, INFO - Start to run the update command: --proxy <<PII>>s--proxy <<PII>>r--proxy <<PII>>c--proxy <<PII>>/--proxy <<PII>>m--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>_--proxy <<PII>>i--proxy <<PII>>n--proxy <<PII>>s--proxy <<PII>>t--proxy <<PII>>a--proxy <<PII>>l--proxy <<PII>>l--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>.--proxy <<PII>>l--proxy <<PII>>a--proxy <<PII>>t--proxy <<PII>>e--proxy <<PII>>s--proxy <<PII>>t--proxy <<PII>>.--proxy <<PII>>s--proxy <<PII>>h--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>---proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>b--proxy <<PII>>u--proxy <<PII>>g--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>---proxy <<PII>>u--proxy <<PII>>p--proxy <<PII>>g--proxy <<PII>>r--proxy <<PII>>a--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>y--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>---proxy <<PII>>l--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>---proxy <<PII>>p--proxy <<PII>>a--proxy <<PII>>t--proxy <<PII>>h--proxy <<PII>> --proxy <<PII>>/--proxy <<PII>>v--proxy <<PII>>a--proxy <<PII>>r--proxy <<PII>>/--proxy <<PII>>l--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>/--proxy <<PII>>a--proxy <<PII>>z--proxy <<PII>>u--proxy <<PII>>r--proxy <<PII>>e--proxy <<PII>>/--proxy <<PII>>M--proxy <<PII>>i--proxy <<PII>>c--proxy <<PII>>r--proxy <<PII>>o--proxy <<PII>>s--proxy <<PII>>o--proxy <<PII>>f--proxy <<PII>>t--proxy <<PII>>.--proxy <<PII>>A--proxy <<PII>>z--proxy <<PII>>u--proxy <<PII>>r--proxy <<PII>>e--proxy <<PII>>.--proxy <<PII>>A--proxy <<PII>>z--proxy <<PII>>u--proxy <<PII>>r--proxy <<PII>>e--proxy <<PII>>D--proxy <<PII>>e--proxy <<PII>>f--proxy <<PII>>e--proxy <<PII>>n--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>F--proxy <<PII>>o--proxy <<PII>>r--proxy <<PII>>S--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>v--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>s--proxy <<PII>>.--proxy <<PII>>M--proxy <<PII>>D--proxy <<PII>>E--proxy <<PII>>.--proxy <<PII>>L--proxy <<PII>>i--proxy <<PII>>n--proxy <<PII>>u--proxy <<PII>>x--proxy <<PII>>/--proxy <<PII>>M--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>I--proxy <<PII>>n--proxy <<PII>>s--proxy <<PII>>t--proxy <<PII>>a--proxy <<PII>>l--proxy <<PII>>l--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>L--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>.--proxy <<PII>>l--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>
2026-03-21 08:05:31,228, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.1 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 184.94.200.3
 * cpanel-addons-production-feed: 184.94.200.3
 * cpanel-plugins: 184.94.200.3
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
Trying other mirror.


 One of the configured repositories failed (CentOS-7 - Base),
 and yum doesn't have enough cached data to continue. At this point the only
 safe thing yum can do is fail. There are a few ways to work "fix" this:

     1. Contact the upstream for the repository and get them to fix the problem.

     2. Reconfigure the baseurl/etc. for the repository, to point to a working
        upstream. This is most often useful if you are using a newer
        distribution release than is supported by the repository (and the
        packages for the previous distribution release still work).

     3. Run the command with the repository temporarily disabled
            yum --disablerepo=base ...

     4. Disable the repository permanently, so yum won't use it by default. Yum
        will then just ignore the repository until you permanently enable it
        again or use --enablerepo for temporary usage:

            yum-config-manager --disable base
        or
            subscription-manager repos --disable=base

     5. Configure the failing repository to be skipped, if it is unavailable.
        Note that yum will try to contact the repo. when it runs most commands,
        so will have to try and fail each time (and thus. yum will be be much
        slower). If it is a very temporary problem though, this is often a nice
        compromise:

            yum-config-manager --save --setopt=base.skip_if_unavailable=true

failure: repodata/repomd.xml from base: [Errno 256] No more mirrors to try.
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE (exit code: 1)
[*] exiting (21)

2026-03-21 08:05:31,229, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-03-21 08:05:31,229, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-03-21 08:05:31,578, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.10.0/status/21.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-03-21 08:05:31,579, INFO - End executing installer wrapper
2026-03-22 08:02:37,606, INFO - Start executing installer wrapper
2026-03-22 08:02:37,609, INFO - scrubbed proxy settings: {}
2026-03-22 08:02:37,609, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-03-22 08:02:37,700, INFO - MDE is installed
2026-03-22 08:02:37,700, INFO - Wait for MDE service to be available
2026-03-22 08:02:38,610, INFO - MDE is onboarded
2026-03-22 08:02:39,006, INFO - MDC tags in MDE are valid
2026-03-22 08:02:39,006, INFO - Start to run the update command: --proxy <<PII>>s--proxy <<PII>>r--proxy <<PII>>c--proxy <<PII>>/--proxy <<PII>>m--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>_--proxy <<PII>>i--proxy <<PII>>n--proxy <<PII>>s--proxy <<PII>>t--proxy <<PII>>a--proxy <<PII>>l--proxy <<PII>>l--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>.--proxy <<PII>>l--proxy <<PII>>a--proxy <<PII>>t--proxy <<PII>>e--proxy <<PII>>s--proxy <<PII>>t--proxy <<PII>>.--proxy <<PII>>s--proxy <<PII>>h--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>---proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>b--proxy <<PII>>u--proxy <<PII>>g--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>---proxy <<PII>>u--proxy <<PII>>p--proxy <<PII>>g--proxy <<PII>>r--proxy <<PII>>a--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>y--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>---proxy <<PII>>l--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>---proxy <<PII>>p--proxy <<PII>>a--proxy <<PII>>t--proxy <<PII>>h--proxy <<PII>> --proxy <<PII>>/--proxy <<PII>>v--proxy <<PII>>a--proxy <<PII>>r--proxy <<PII>>/--proxy <<PII>>l--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>/--proxy <<PII>>a--proxy <<PII>>z--proxy <<PII>>u--proxy <<PII>>r--proxy <<PII>>e--proxy <<PII>>/--proxy <<PII>>M--proxy <<PII>>i--proxy <<PII>>c--proxy <<PII>>r--proxy <<PII>>o--proxy <<PII>>s--proxy <<PII>>o--proxy <<PII>>f--proxy <<PII>>t--proxy <<PII>>.--proxy <<PII>>A--proxy <<PII>>z--proxy <<PII>>u--proxy <<PII>>r--proxy <<PII>>e--proxy <<PII>>.--proxy <<PII>>A--proxy <<PII>>z--proxy <<PII>>u--proxy <<PII>>r--proxy <<PII>>e--proxy <<PII>>D--proxy <<PII>>e--proxy <<PII>>f--proxy <<PII>>e--proxy <<PII>>n--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>F--proxy <<PII>>o--proxy <<PII>>r--proxy <<PII>>S--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>v--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>s--proxy <<PII>>.--proxy <<PII>>M--proxy <<PII>>D--proxy <<PII>>E--proxy <<PII>>.--proxy <<PII>>L--proxy <<PII>>i--proxy <<PII>>n--proxy <<PII>>u--proxy <<PII>>x--proxy <<PII>>/--proxy <<PII>>M--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>I--proxy <<PII>>n--proxy <<PII>>s--proxy <<PII>>t--proxy <<PII>>a--proxy <<PII>>l--proxy <<PII>>l--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>L--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>.--proxy <<PII>>l--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>
2026-03-22 08:02:43,508, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.1 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 89.222.122.167
 * cpanel-addons-production-feed: 89.222.122.167
 * cpanel-plugins: 89.222.122.167
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
Trying other mirror.


 One of the configured repositories failed (CentOS-7 - Base),
 and yum doesn't have enough cached data to continue. At this point the only
 safe thing yum can do is fail. There are a few ways to work "fix" this:

     1. Contact the upstream for the repository and get them to fix the problem.

     2. Reconfigure the baseurl/etc. for the repository, to point to a working
        upstream. This is most often useful if you are using a newer
        distribution release than is supported by the repository (and the
        packages for the previous distribution release still work).

     3. Run the command with the repository temporarily disabled
            yum --disablerepo=base ...

     4. Disable the repository permanently, so yum won't use it by default. Yum
        will then just ignore the repository until you permanently enable it
        again or use --enablerepo for temporary usage:

            yum-config-manager --disable base
        or
            subscription-manager repos --disable=base

     5. Configure the failing repository to be skipped, if it is unavailable.
        Note that yum will try to contact the repo. when it runs most commands,
        so will have to try and fail each time (and thus. yum will be be much
        slower). If it is a very temporary problem though, this is often a nice
        compromise:

            yum-config-manager --save --setopt=base.skip_if_unavailable=true

failure: repodata/repomd.xml from base: [Errno 256] No more mirrors to try.
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE (exit code: 1)
[*] exiting (21)

2026-03-22 08:02:43,508, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-03-22 08:02:43,509, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-03-22 08:02:43,847, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.10.0/status/21.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-03-22 08:02:43,848, INFO - End executing installer wrapper
2026-03-23 08:09:14,343, INFO - Start executing installer wrapper
2026-03-23 08:09:14,352, INFO - scrubbed proxy settings: {}
2026-03-23 08:09:14,352, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-03-23 08:09:14,434, INFO - MDE is installed
2026-03-23 08:09:14,434, INFO - Wait for MDE service to be available
2026-03-23 08:09:14,891, INFO - MDE is onboarded
2026-03-23 08:09:15,170, INFO - MDC tags in MDE are valid
2026-03-23 08:09:15,171, INFO - Start to run the update command: --proxy <<PII>>s--proxy <<PII>>r--proxy <<PII>>c--proxy <<PII>>/--proxy <<PII>>m--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>_--proxy <<PII>>i--proxy <<PII>>n--proxy <<PII>>s--proxy <<PII>>t--proxy <<PII>>a--proxy <<PII>>l--proxy <<PII>>l--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>.--proxy <<PII>>l--proxy <<PII>>a--proxy <<PII>>t--proxy <<PII>>e--proxy <<PII>>s--proxy <<PII>>t--proxy <<PII>>.--proxy <<PII>>s--proxy <<PII>>h--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>---proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>b--proxy <<PII>>u--proxy <<PII>>g--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>---proxy <<PII>>u--proxy <<PII>>p--proxy <<PII>>g--proxy <<PII>>r--proxy <<PII>>a--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>y--proxy <<PII>> --proxy <<PII>>---proxy <<PII>>---proxy <<PII>>l--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>---proxy <<PII>>p--proxy <<PII>>a--proxy <<PII>>t--proxy <<PII>>h--proxy <<PII>> --proxy <<PII>>/--proxy <<PII>>v--proxy <<PII>>a--proxy <<PII>>r--proxy <<PII>>/--proxy <<PII>>l--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>/--proxy <<PII>>a--proxy <<PII>>z--proxy <<PII>>u--proxy <<PII>>r--proxy <<PII>>e--proxy <<PII>>/--proxy <<PII>>M--proxy <<PII>>i--proxy <<PII>>c--proxy <<PII>>r--proxy <<PII>>o--proxy <<PII>>s--proxy <<PII>>o--proxy <<PII>>f--proxy <<PII>>t--proxy <<PII>>.--proxy <<PII>>A--proxy <<PII>>z--proxy <<PII>>u--proxy <<PII>>r--proxy <<PII>>e--proxy <<PII>>.--proxy <<PII>>A--proxy <<PII>>z--proxy <<PII>>u--proxy <<PII>>r--proxy <<PII>>e--proxy <<PII>>D--proxy <<PII>>e--proxy <<PII>>f--proxy <<PII>>e--proxy <<PII>>n--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>F--proxy <<PII>>o--proxy <<PII>>r--proxy <<PII>>S--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>v--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>s--proxy <<PII>>.--proxy <<PII>>M--proxy <<PII>>D--proxy <<PII>>E--proxy <<PII>>.--proxy <<PII>>L--proxy <<PII>>i--proxy <<PII>>n--proxy <<PII>>u--proxy <<PII>>x--proxy <<PII>>/--proxy <<PII>>M--proxy <<PII>>d--proxy <<PII>>e--proxy <<PII>>I--proxy <<PII>>n--proxy <<PII>>s--proxy <<PII>>t--proxy <<PII>>a--proxy <<PII>>l--proxy <<PII>>l--proxy <<PII>>e--proxy <<PII>>r--proxy <<PII>>L--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>.--proxy <<PII>>l--proxy <<PII>>o--proxy <<PII>>g--proxy <<PII>>
2026-03-23 08:09:18,254, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.1 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 89.222.122.167
 * cpanel-addons-production-feed: 89.222.122.167
 * cpanel-plugins: 89.222.122.167
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
Trying other mirror.


 One of the configured repositories failed (CentOS-7 - Base),
 and yum doesn't have enough cached data to continue. At this point the only
 safe thing yum can do is fail. There are a few ways to work "fix" this:

     1. Contact the upstream for the repository and get them to fix the problem.

     2. Reconfigure the baseurl/etc. for the repository, to point to a working
        upstream. This is most often useful if you are using a newer
        distribution release than is supported by the repository (and the
        packages for the previous distribution release still work).

     3. Run the command with the repository temporarily disabled
            yum --disablerepo=base ...

     4. Disable the repository permanently, so yum won't use it by default. Yum
        will then just ignore the repository until you permanently enable it
        again or use --enablerepo for temporary usage:

            yum-config-manager --disable base
        or
            subscription-manager repos --disable=base

     5. Configure the failing repository to be skipped, if it is unavailable.
        Note that yum will try to contact the repo. when it runs most commands,
        so will have to try and fail each time (and thus. yum will be be much
        slower). If it is a very temporary problem though, this is often a nice
        compromise:

            yum-config-manager --save --setopt=base.skip_if_unavailable=true

failure: repodata/repomd.xml from base: [Errno 256] No more mirrors to try.
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE (exit code: 1)
[*] exiting (21)

2026-03-23 08:09:18,255, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-03-23 08:09:18,255, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-03-23 08:09:18,611, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.10.0/status/21.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-03-23 08:09:18,612, INFO - End executing installer wrapper
2026-03-23 23:44:29,973, INFO - Start executing installer wrapper
2026-03-23 23:44:29,976, INFO - scrubbed proxy settings: {}
2026-03-23 23:44:29,976, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-03-23 23:44:30,049, INFO - MDE is installed
2026-03-23 23:44:30,049, INFO - Wait for MDE service to be available
2026-03-23 23:44:30,499, INFO - MDE is onboarded
2026-03-23 23:44:30,779, INFO - MDC tags in MDE are valid
2026-03-23 23:44:30,779, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-03-23 23:44:33,944, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.1 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 184.94.200.2
 * cpanel-addons-production-feed: 184.94.200.2
 * cpanel-plugins: 184.94.200.2
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
Trying other mirror.


 One of the configured repositories failed (CentOS-7 - Base),
 and yum doesn't have enough cached data to continue. At this point the only
 safe thing yum can do is fail. There are a few ways to work "fix" this:

     1. Contact the upstream for the repository and get them to fix the problem.

     2. Reconfigure the baseurl/etc. for the repository, to point to a working
        upstream. This is most often useful if you are using a newer
        distribution release than is supported by the repository (and the
        packages for the previous distribution release still work).

     3. Run the command with the repository temporarily disabled
            yum --disablerepo=base ...

     4. Disable the repository permanently, so yum won't use it by default. Yum
        will then just ignore the repository until you permanently enable it
        again or use --enablerepo for temporary usage:

            yum-config-manager --disable base
        or
            subscription-manager repos --disable=base

     5. Configure the failing repository to be skipped, if it is unavailable.
        Note that yum will try to contact the repo. when it runs most commands,
        so will have to try and fail each time (and thus. yum will be be much
        slower). If it is a very temporary problem though, this is often a nice
        compromise:

            yum-config-manager --save --setopt=base.skip_if_unavailable=true

failure: repodata/repomd.xml from base: [Errno 256] No more mirrors to try.
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE (exit code: 1)
[*] exiting (21)

2026-03-23 23:44:33,945, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-03-23 23:44:33,946, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-03-23 23:44:34,212, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.11.0/status/22.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-03-23 23:44:34,213, INFO - End executing installer wrapper
2026-03-24 08:10:57,549, INFO - Start executing installer wrapper
2026-03-24 08:10:57,549, INFO - scrubbed proxy settings: {}
2026-03-24 08:10:57,549, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-03-24 08:10:57,631, INFO - MDE is installed
2026-03-24 08:10:57,631, INFO - Wait for MDE service to be available
2026-03-24 08:10:58,279, INFO - MDE is onboarded
2026-03-24 08:10:58,585, INFO - MDC tags in MDE are valid
2026-03-24 08:10:58,586, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-03-24 08:11:02,563, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.1 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 184.94.200.2
 * cpanel-addons-production-feed: 184.94.200.2
 * cpanel-plugins: 184.94.200.2
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
Trying other mirror.


 One of the configured repositories failed (CentOS-7 - Base),
 and yum doesn't have enough cached data to continue. At this point the only
 safe thing yum can do is fail. There are a few ways to work "fix" this:

     1. Contact the upstream for the repository and get them to fix the problem.

     2. Reconfigure the baseurl/etc. for the repository, to point to a working
        upstream. This is most often useful if you are using a newer
        distribution release than is supported by the repository (and the
        packages for the previous distribution release still work).

     3. Run the command with the repository temporarily disabled
            yum --disablerepo=base ...

     4. Disable the repository permanently, so yum won't use it by default. Yum
        will then just ignore the repository until you permanently enable it
        again or use --enablerepo for temporary usage:

            yum-config-manager --disable base
        or
            subscription-manager repos --disable=base

     5. Configure the failing repository to be skipped, if it is unavailable.
        Note that yum will try to contact the repo. when it runs most commands,
        so will have to try and fail each time (and thus. yum will be be much
        slower). If it is a very temporary problem though, this is often a nice
        compromise:

            yum-config-manager --save --setopt=base.skip_if_unavailable=true

failure: repodata/repomd.xml from base: [Errno 256] No more mirrors to try.
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE (exit code: 1)
[*] exiting (21)

2026-03-24 08:11:02,563, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-03-24 08:11:02,564, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-03-24 08:11:03,007, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.11.0/status/22.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-03-24 08:11:03,008, INFO - End executing installer wrapper
2026-03-25 08:10:13,392, INFO - Start executing installer wrapper
2026-03-25 08:10:13,394, INFO - scrubbed proxy settings: {}
2026-03-25 08:10:13,394, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-03-25 08:10:13,475, INFO - MDE is installed
2026-03-25 08:10:13,475, INFO - Wait for MDE service to be available
2026-03-25 08:10:14,378, INFO - MDE is onboarded
2026-03-25 08:10:14,685, INFO - MDC tags in MDE are valid
2026-03-25 08:10:14,686, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-03-25 08:10:18,535, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.1 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 89.222.122.163
 * cpanel-addons-production-feed: 89.222.122.163
 * cpanel-plugins: 89.222.122.163
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
Trying other mirror.


 One of the configured repositories failed (CentOS-7 - Base),
 and yum doesn't have enough cached data to continue. At this point the only
 safe thing yum can do is fail. There are a few ways to work "fix" this:

     1. Contact the upstream for the repository and get them to fix the problem.

     2. Reconfigure the baseurl/etc. for the repository, to point to a working
        upstream. This is most often useful if you are using a newer
        distribution release than is supported by the repository (and the
        packages for the previous distribution release still work).

     3. Run the command with the repository temporarily disabled
            yum --disablerepo=base ...

     4. Disable the repository permanently, so yum won't use it by default. Yum
        will then just ignore the repository until you permanently enable it
        again or use --enablerepo for temporary usage:

            yum-config-manager --disable base
        or
            subscription-manager repos --disable=base

     5. Configure the failing repository to be skipped, if it is unavailable.
        Note that yum will try to contact the repo. when it runs most commands,
        so will have to try and fail each time (and thus. yum will be be much
        slower). If it is a very temporary problem though, this is often a nice
        compromise:

            yum-config-manager --save --setopt=base.skip_if_unavailable=true

failure: repodata/repomd.xml from base: [Errno 256] No more mirrors to try.
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE (exit code: 1)
[*] exiting (21)

2026-03-25 08:10:18,535, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-03-25 08:10:18,536, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-03-25 08:10:18,892, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.11.0/status/22.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-03-25 08:10:18,893, INFO - End executing installer wrapper
2026-03-26 08:09:23,415, INFO - Start executing installer wrapper
2026-03-26 08:09:23,417, INFO - scrubbed proxy settings: {}
2026-03-26 08:09:23,418, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-03-26 08:09:23,494, INFO - MDE is installed
2026-03-26 08:09:23,494, INFO - Wait for MDE service to be available
2026-03-26 08:09:24,141, INFO - MDE is onboarded
2026-03-26 08:09:24,447, INFO - MDC tags in MDE are valid
2026-03-26 08:09:24,448, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-03-26 08:09:28,025, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.1 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 89.222.122.163
 * cpanel-addons-production-feed: 89.222.122.163
 * cpanel-plugins: 89.222.122.163
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
Trying other mirror.


 One of the configured repositories failed (CentOS-7 - Base),
 and yum doesn't have enough cached data to continue. At this point the only
 safe thing yum can do is fail. There are a few ways to work "fix" this:

     1. Contact the upstream for the repository and get them to fix the problem.

     2. Reconfigure the baseurl/etc. for the repository, to point to a working
        upstream. This is most often useful if you are using a newer
        distribution release than is supported by the repository (and the
        packages for the previous distribution release still work).

     3. Run the command with the repository temporarily disabled
            yum --disablerepo=base ...

     4. Disable the repository permanently, so yum won't use it by default. Yum
        will then just ignore the repository until you permanently enable it
        again or use --enablerepo for temporary usage:

            yum-config-manager --disable base
        or
            subscription-manager repos --disable=base

     5. Configure the failing repository to be skipped, if it is unavailable.
        Note that yum will try to contact the repo. when it runs most commands,
        so will have to try and fail each time (and thus. yum will be be much
        slower). If it is a very temporary problem though, this is often a nice
        compromise:

            yum-config-manager --save --setopt=base.skip_if_unavailable=true

failure: repodata/repomd.xml from base: [Errno 256] No more mirrors to try.
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE (exit code: 1)
[*] exiting (21)

2026-03-26 08:09:28,025, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-03-26 08:09:28,026, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-03-26 08:09:28,369, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.11.0/status/22.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-03-26 08:09:28,370, INFO - End executing installer wrapper
2026-03-27 08:02:48,049, INFO - Start executing installer wrapper
2026-03-27 08:02:48,051, INFO - scrubbed proxy settings: {}
2026-03-27 08:02:48,051, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-03-27 08:02:48,131, INFO - MDE is installed
2026-03-27 08:02:48,131, INFO - Wait for MDE service to be available
2026-03-27 08:02:49,315, INFO - MDE is onboarded
2026-03-27 08:02:49,632, INFO - MDC tags in MDE are valid
2026-03-27 08:02:49,633, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-03-27 08:02:54,707, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.1 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 89.222.122.167
 * cpanel-addons-production-feed: 89.222.122.167
 * cpanel-plugins: 89.222.122.167
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
Trying other mirror.


 One of the configured repositories failed (CentOS-7 - Base),
 and yum doesn't have enough cached data to continue. At this point the only
 safe thing yum can do is fail. There are a few ways to work "fix" this:

     1. Contact the upstream for the repository and get them to fix the problem.

     2. Reconfigure the baseurl/etc. for the repository, to point to a working
        upstream. This is most often useful if you are using a newer
        distribution release than is supported by the repository (and the
        packages for the previous distribution release still work).

     3. Run the command with the repository temporarily disabled
            yum --disablerepo=base ...

     4. Disable the repository permanently, so yum won't use it by default. Yum
        will then just ignore the repository until you permanently enable it
        again or use --enablerepo for temporary usage:

            yum-config-manager --disable base
        or
            subscription-manager repos --disable=base

     5. Configure the failing repository to be skipped, if it is unavailable.
        Note that yum will try to contact the repo. when it runs most commands,
        so will have to try and fail each time (and thus. yum will be be much
        slower). If it is a very temporary problem though, this is often a nice
        compromise:

            yum-config-manager --save --setopt=base.skip_if_unavailable=true

failure: repodata/repomd.xml from base: [Errno 256] No more mirrors to try.
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE (exit code: 1)
[*] exiting (21)

2026-03-27 08:02:54,707, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-03-27 08:02:54,708, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-03-27 08:02:55,123, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.11.0/status/22.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-03-27 08:02:55,124, INFO - End executing installer wrapper
2026-03-28 08:08:07,051, INFO - Start executing installer wrapper
2026-03-28 08:08:07,053, INFO - scrubbed proxy settings: {}
2026-03-28 08:08:07,053, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-03-28 08:08:07,126, INFO - MDE is installed
2026-03-28 08:08:07,126, INFO - Wait for MDE service to be available
2026-03-28 08:08:07,819, INFO - MDE is onboarded
2026-03-28 08:08:08,123, INFO - MDC tags in MDE are valid
2026-03-28 08:08:08,124, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-03-28 08:08:11,984, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.1 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 89.222.122.167
 * cpanel-addons-production-feed: 89.222.122.167
 * cpanel-plugins: 89.222.122.167
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
Trying other mirror.


 One of the configured repositories failed (CentOS-7 - Base),
 and yum doesn't have enough cached data to continue. At this point the only
 safe thing yum can do is fail. There are a few ways to work "fix" this:

     1. Contact the upstream for the repository and get them to fix the problem.

     2. Reconfigure the baseurl/etc. for the repository, to point to a working
        upstream. This is most often useful if you are using a newer
        distribution release than is supported by the repository (and the
        packages for the previous distribution release still work).

     3. Run the command with the repository temporarily disabled
            yum --disablerepo=base ...

     4. Disable the repository permanently, so yum won't use it by default. Yum
        will then just ignore the repository until you permanently enable it
        again or use --enablerepo for temporary usage:

            yum-config-manager --disable base
        or
            subscription-manager repos --disable=base

     5. Configure the failing repository to be skipped, if it is unavailable.
        Note that yum will try to contact the repo. when it runs most commands,
        so will have to try and fail each time (and thus. yum will be be much
        slower). If it is a very temporary problem though, this is often a nice
        compromise:

            yum-config-manager --save --setopt=base.skip_if_unavailable=true

failure: repodata/repomd.xml from base: [Errno 256] No more mirrors to try.
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE (exit code: 1)
[*] exiting (21)

2026-03-28 08:08:11,984, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-03-28 08:08:11,985, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-03-28 08:08:12,505, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.11.0/status/22.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-03-28 08:08:12,507, INFO - End executing installer wrapper
2026-03-29 08:03:57,999, INFO - Start executing installer wrapper
2026-03-29 08:03:58,001, INFO - scrubbed proxy settings: {}
2026-03-29 08:03:58,001, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-03-29 08:03:58,079, INFO - MDE is installed
2026-03-29 08:03:58,079, INFO - Wait for MDE service to be available
2026-03-29 08:03:58,804, INFO - MDE is onboarded
2026-03-29 08:03:59,105, INFO - MDC tags in MDE are valid
2026-03-29 08:03:59,105, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-03-29 08:04:03,080, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.1 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 184.94.200.3
 * cpanel-addons-production-feed: 184.94.200.3
 * cpanel-plugins: 184.94.200.3
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
Trying other mirror.


 One of the configured repositories failed (CentOS-7 - Base),
 and yum doesn't have enough cached data to continue. At this point the only
 safe thing yum can do is fail. There are a few ways to work "fix" this:

     1. Contact the upstream for the repository and get them to fix the problem.

     2. Reconfigure the baseurl/etc. for the repository, to point to a working
        upstream. This is most often useful if you are using a newer
        distribution release than is supported by the repository (and the
        packages for the previous distribution release still work).

     3. Run the command with the repository temporarily disabled
            yum --disablerepo=base ...

     4. Disable the repository permanently, so yum won't use it by default. Yum
        will then just ignore the repository until you permanently enable it
        again or use --enablerepo for temporary usage:

            yum-config-manager --disable base
        or
            subscription-manager repos --disable=base

     5. Configure the failing repository to be skipped, if it is unavailable.
        Note that yum will try to contact the repo. when it runs most commands,
        so will have to try and fail each time (and thus. yum will be be much
        slower). If it is a very temporary problem though, this is often a nice
        compromise:

            yum-config-manager --save --setopt=base.skip_if_unavailable=true

failure: repodata/repomd.xml from base: [Errno 256] No more mirrors to try.
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE (exit code: 1)
[*] exiting (21)

2026-03-29 08:04:03,081, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-03-29 08:04:03,082, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-03-29 08:04:04,438, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.11.0/status/22.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-03-29 08:04:04,439, INFO - End executing installer wrapper
2026-03-30 08:07:49,800, INFO - Start executing installer wrapper
2026-03-30 08:07:49,802, INFO - scrubbed proxy settings: {}
2026-03-30 08:07:49,802, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-03-30 08:07:49,894, INFO - MDE is installed
2026-03-30 08:07:49,894, INFO - Wait for MDE service to be available
2026-03-30 08:07:50,657, INFO - MDE is onboarded
2026-03-30 08:07:50,958, INFO - MDC tags in MDE are valid
2026-03-30 08:07:50,959, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-03-30 08:07:54,822, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.1 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 89.222.122.167
 * cpanel-addons-production-feed: 89.222.122.167
 * cpanel-plugins: 89.222.122.167
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
Trying other mirror.


 One of the configured repositories failed (CentOS-7 - Base),
 and yum doesn't have enough cached data to continue. At this point the only
 safe thing yum can do is fail. There are a few ways to work "fix" this:

     1. Contact the upstream for the repository and get them to fix the problem.

     2. Reconfigure the baseurl/etc. for the repository, to point to a working
        upstream. This is most often useful if you are using a newer
        distribution release than is supported by the repository (and the
        packages for the previous distribution release still work).

     3. Run the command with the repository temporarily disabled
            yum --disablerepo=base ...

     4. Disable the repository permanently, so yum won't use it by default. Yum
        will then just ignore the repository until you permanently enable it
        again or use --enablerepo for temporary usage:

            yum-config-manager --disable base
        or
            subscription-manager repos --disable=base

     5. Configure the failing repository to be skipped, if it is unavailable.
        Note that yum will try to contact the repo. when it runs most commands,
        so will have to try and fail each time (and thus. yum will be be much
        slower). If it is a very temporary problem though, this is often a nice
        compromise:

            yum-config-manager --save --setopt=base.skip_if_unavailable=true

failure: repodata/repomd.xml from base: [Errno 256] No more mirrors to try.
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE (exit code: 1)
[*] exiting (21)

2026-03-30 08:07:54,823, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-03-30 08:07:54,823, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-03-30 08:07:55,172, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.11.0/status/22.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-03-30 08:07:55,173, INFO - End executing installer wrapper
2026-03-31 05:25:21,162, INFO - Start executing installer wrapper
2026-03-31 05:25:21,164, INFO - scrubbed proxy settings: {}
2026-03-31 05:25:21,164, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-03-31 05:25:21,237, INFO - MDE is installed
2026-03-31 05:25:21,237, INFO - Wait for MDE service to be available
2026-03-31 05:25:22,195, INFO - MDE is onboarded
2026-03-31 05:25:22,496, INFO - MDC tags in MDE are valid
2026-03-31 05:25:22,497, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-03-31 05:25:25,968, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.1 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 89.222.122.163
 * cpanel-addons-production-feed: 89.222.122.163
 * cpanel-plugins: 89.222.122.163
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
Trying other mirror.


 One of the configured repositories failed (CentOS-7 - Base),
 and yum doesn't have enough cached data to continue. At this point the only
 safe thing yum can do is fail. There are a few ways to work "fix" this:

     1. Contact the upstream for the repository and get them to fix the problem.

     2. Reconfigure the baseurl/etc. for the repository, to point to a working
        upstream. This is most often useful if you are using a newer
        distribution release than is supported by the repository (and the
        packages for the previous distribution release still work).

     3. Run the command with the repository temporarily disabled
            yum --disablerepo=base ...

     4. Disable the repository permanently, so yum won't use it by default. Yum
        will then just ignore the repository until you permanently enable it
        again or use --enablerepo for temporary usage:

            yum-config-manager --disable base
        or
            subscription-manager repos --disable=base

     5. Configure the failing repository to be skipped, if it is unavailable.
        Note that yum will try to contact the repo. when it runs most commands,
        so will have to try and fail each time (and thus. yum will be be much
        slower). If it is a very temporary problem though, this is often a nice
        compromise:

            yum-config-manager --save --setopt=base.skip_if_unavailable=true

failure: repodata/repomd.xml from base: [Errno 256] No more mirrors to try.
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE (exit code: 1)
[*] exiting (21)

2026-03-31 05:25:25,969, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-03-31 05:25:25,969, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-03-31 05:25:26,296, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.11.0/status/23.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-03-31 05:25:26,297, INFO - End executing installer wrapper
2026-03-31 08:04:27,770, INFO - Start executing installer wrapper
2026-03-31 08:04:27,771, INFO - scrubbed proxy settings: {}
2026-03-31 08:04:27,771, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-03-31 08:04:27,846, INFO - MDE is installed
2026-03-31 08:04:27,846, INFO - Wait for MDE service to be available
2026-03-31 08:04:28,394, INFO - MDE is onboarded
2026-03-31 08:04:28,693, INFO - MDC tags in MDE are valid
2026-03-31 08:04:28,693, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-03-31 08:04:32,248, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.1 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 89.222.122.163
 * cpanel-addons-production-feed: 89.222.122.163
 * cpanel-plugins: 89.222.122.163
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
Trying other mirror.


 One of the configured repositories failed (CentOS-7 - Base),
 and yum doesn't have enough cached data to continue. At this point the only
 safe thing yum can do is fail. There are a few ways to work "fix" this:

     1. Contact the upstream for the repository and get them to fix the problem.

     2. Reconfigure the baseurl/etc. for the repository, to point to a working
        upstream. This is most often useful if you are using a newer
        distribution release than is supported by the repository (and the
        packages for the previous distribution release still work).

     3. Run the command with the repository temporarily disabled
            yum --disablerepo=base ...

     4. Disable the repository permanently, so yum won't use it by default. Yum
        will then just ignore the repository until you permanently enable it
        again or use --enablerepo for temporary usage:

            yum-config-manager --disable base
        or
            subscription-manager repos --disable=base

     5. Configure the failing repository to be skipped, if it is unavailable.
        Note that yum will try to contact the repo. when it runs most commands,
        so will have to try and fail each time (and thus. yum will be be much
        slower). If it is a very temporary problem though, this is often a nice
        compromise:

            yum-config-manager --save --setopt=base.skip_if_unavailable=true

failure: repodata/repomd.xml from base: [Errno 256] No more mirrors to try.
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE (exit code: 1)
[*] exiting (21)

2026-03-31 08:04:32,248, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-03-31 08:04:32,249, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-03-31 08:04:32,587, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.11.0/status/23.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-03-31 08:04:32,588, INFO - End executing installer wrapper
2026-04-01 08:02:42,691, INFO - Start executing installer wrapper
2026-04-01 08:02:42,693, INFO - scrubbed proxy settings: {}
2026-04-01 08:02:42,694, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-04-01 08:02:42,767, INFO - MDE is installed
2026-04-01 08:02:42,767, INFO - Wait for MDE service to be available
2026-04-01 08:02:43,828, INFO - MDE is onboarded
2026-04-01 08:02:44,125, INFO - MDC tags in MDE are valid
2026-04-01 08:02:44,125, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-04-01 08:02:48,489, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.1 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 184.94.200.5
 * cpanel-addons-production-feed: 184.94.200.5
 * cpanel-plugins: 184.94.200.5
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
Trying other mirror.


 One of the configured repositories failed (CentOS-7 - Base),
 and yum doesn't have enough cached data to continue. At this point the only
 safe thing yum can do is fail. There are a few ways to work "fix" this:

     1. Contact the upstream for the repository and get them to fix the problem.

     2. Reconfigure the baseurl/etc. for the repository, to point to a working
        upstream. This is most often useful if you are using a newer
        distribution release than is supported by the repository (and the
        packages for the previous distribution release still work).

     3. Run the command with the repository temporarily disabled
            yum --disablerepo=base ...

     4. Disable the repository permanently, so yum won't use it by default. Yum
        will then just ignore the repository until you permanently enable it
        again or use --enablerepo for temporary usage:

            yum-config-manager --disable base
        or
            subscription-manager repos --disable=base

     5. Configure the failing repository to be skipped, if it is unavailable.
        Note that yum will try to contact the repo. when it runs most commands,
        so will have to try and fail each time (and thus. yum will be be much
        slower). If it is a very temporary problem though, this is often a nice
        compromise:

            yum-config-manager --save --setopt=base.skip_if_unavailable=true

failure: repodata/repomd.xml from base: [Errno 256] No more mirrors to try.
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE (exit code: 1)
[*] exiting (21)

2026-04-01 08:02:48,489, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-04-01 08:02:48,490, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-04-01 08:02:49,936, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.11.0/status/23.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-04-01 08:02:49,937, INFO - End executing installer wrapper
2026-04-02 08:10:07,693, INFO - Start executing installer wrapper
2026-04-02 08:10:07,695, INFO - scrubbed proxy settings: {}
2026-04-02 08:10:07,695, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-04-02 08:10:07,771, INFO - MDE is installed
2026-04-02 08:10:07,771, INFO - Wait for MDE service to be available
2026-04-02 08:10:08,931, INFO - MDE is onboarded
2026-04-02 08:10:09,238, INFO - MDC tags in MDE are valid
2026-04-02 08:10:09,238, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-04-02 08:10:13,180, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.1 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 89.222.122.167
 * cpanel-addons-production-feed: 89.222.122.167
 * cpanel-plugins: 89.222.122.167
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
Trying other mirror.


 One of the configured repositories failed (CentOS-7 - Base),
 and yum doesn't have enough cached data to continue. At this point the only
 safe thing yum can do is fail. There are a few ways to work "fix" this:

     1. Contact the upstream for the repository and get them to fix the problem.

     2. Reconfigure the baseurl/etc. for the repository, to point to a working
        upstream. This is most often useful if you are using a newer
        distribution release than is supported by the repository (and the
        packages for the previous distribution release still work).

     3. Run the command with the repository temporarily disabled
            yum --disablerepo=base ...

     4. Disable the repository permanently, so yum won't use it by default. Yum
        will then just ignore the repository until you permanently enable it
        again or use --enablerepo for temporary usage:

            yum-config-manager --disable base
        or
            subscription-manager repos --disable=base

     5. Configure the failing repository to be skipped, if it is unavailable.
        Note that yum will try to contact the repo. when it runs most commands,
        so will have to try and fail each time (and thus. yum will be be much
        slower). If it is a very temporary problem though, this is often a nice
        compromise:

            yum-config-manager --save --setopt=base.skip_if_unavailable=true

failure: repodata/repomd.xml from base: [Errno 256] No more mirrors to try.
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE (exit code: 1)
[*] exiting (21)

2026-04-02 08:10:13,180, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-04-02 08:10:13,181, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-04-02 08:10:13,533, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.11.0/status/23.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-04-02 08:10:13,535, INFO - End executing installer wrapper
2026-04-03 08:10:38,689, INFO - Start executing installer wrapper
2026-04-03 08:10:38,690, INFO - scrubbed proxy settings: {}
2026-04-03 08:10:38,691, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-04-03 08:10:38,766, INFO - MDE is installed
2026-04-03 08:10:38,766, INFO - Wait for MDE service to be available
2026-04-03 08:10:39,565, INFO - MDE is onboarded
2026-04-03 08:10:39,869, INFO - MDC tags in MDE are valid
2026-04-03 08:10:39,870, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-04-03 08:10:45,822, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.1 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 89.222.122.167
 * cpanel-addons-production-feed: 89.222.122.167
 * cpanel-plugins: 89.222.122.167
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
Trying other mirror.


 One of the configured repositories failed (CentOS-7 - Base),
 and yum doesn't have enough cached data to continue. At this point the only
 safe thing yum can do is fail. There are a few ways to work "fix" this:

     1. Contact the upstream for the repository and get them to fix the problem.

     2. Reconfigure the baseurl/etc. for the repository, to point to a working
        upstream. This is most often useful if you are using a newer
        distribution release than is supported by the repository (and the
        packages for the previous distribution release still work).

     3. Run the command with the repository temporarily disabled
            yum --disablerepo=base ...

     4. Disable the repository permanently, so yum won't use it by default. Yum
        will then just ignore the repository until you permanently enable it
        again or use --enablerepo for temporary usage:

            yum-config-manager --disable base
        or
            subscription-manager repos --disable=base

     5. Configure the failing repository to be skipped, if it is unavailable.
        Note that yum will try to contact the repo. when it runs most commands,
        so will have to try and fail each time (and thus. yum will be be much
        slower). If it is a very temporary problem though, this is often a nice
        compromise:

            yum-config-manager --save --setopt=base.skip_if_unavailable=true

failure: repodata/repomd.xml from base: [Errno 256] No more mirrors to try.
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE (exit code: 1)
[*] exiting (21)

2026-04-03 08:10:45,823, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-04-03 08:10:45,823, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-04-03 08:10:46,167, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.11.0/status/23.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-04-03 08:10:46,168, INFO - End executing installer wrapper
2026-04-04 08:06:17,771, INFO - Start executing installer wrapper
2026-04-04 08:06:17,779, INFO - scrubbed proxy settings: {}
2026-04-04 08:06:17,779, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-04-04 08:06:17,871, INFO - MDE is installed
2026-04-04 08:06:17,871, INFO - Wait for MDE service to be available
2026-04-04 08:06:19,212, INFO - MDE is onboarded
2026-04-04 08:06:19,519, INFO - MDC tags in MDE are valid
2026-04-04 08:06:19,520, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-04-04 08:06:23,479, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.1 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 89.222.122.167
 * cpanel-addons-production-feed: 89.222.122.167
 * cpanel-plugins: 89.222.122.167
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
Trying other mirror.


 One of the configured repositories failed (CentOS-7 - Base),
 and yum doesn't have enough cached data to continue. At this point the only
 safe thing yum can do is fail. There are a few ways to work "fix" this:

     1. Contact the upstream for the repository and get them to fix the problem.

     2. Reconfigure the baseurl/etc. for the repository, to point to a working
        upstream. This is most often useful if you are using a newer
        distribution release than is supported by the repository (and the
        packages for the previous distribution release still work).

     3. Run the command with the repository temporarily disabled
            yum --disablerepo=base ...

     4. Disable the repository permanently, so yum won't use it by default. Yum
        will then just ignore the repository until you permanently enable it
        again or use --enablerepo for temporary usage:

            yum-config-manager --disable base
        or
            subscription-manager repos --disable=base

     5. Configure the failing repository to be skipped, if it is unavailable.
        Note that yum will try to contact the repo. when it runs most commands,
        so will have to try and fail each time (and thus. yum will be be much
        slower). If it is a very temporary problem though, this is often a nice
        compromise:

            yum-config-manager --save --setopt=base.skip_if_unavailable=true

failure: repodata/repomd.xml from base: [Errno 256] No more mirrors to try.
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE (exit code: 1)
[*] exiting (21)

2026-04-04 08:06:23,479, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-04-04 08:06:23,480, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-04-04 08:06:23,766, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.11.0/status/23.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-04-04 08:06:23,768, INFO - End executing installer wrapper
2026-04-05 08:07:22,255, INFO - Start executing installer wrapper
2026-04-05 08:07:22,257, INFO - scrubbed proxy settings: {}
2026-04-05 08:07:22,257, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-04-05 08:07:22,331, INFO - MDE is installed
2026-04-05 08:07:22,331, INFO - Wait for MDE service to be available
2026-04-05 08:07:22,891, INFO - MDE is onboarded
2026-04-05 08:07:23,189, INFO - MDC tags in MDE are valid
2026-04-05 08:07:23,190, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-04-05 08:07:27,501, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.1 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 89.222.122.163
 * cpanel-addons-production-feed: 89.222.122.163
 * cpanel-plugins: 89.222.122.163
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
Trying other mirror.


 One of the configured repositories failed (CentOS-7 - Base),
 and yum doesn't have enough cached data to continue. At this point the only
 safe thing yum can do is fail. There are a few ways to work "fix" this:

     1. Contact the upstream for the repository and get them to fix the problem.

     2. Reconfigure the baseurl/etc. for the repository, to point to a working
        upstream. This is most often useful if you are using a newer
        distribution release than is supported by the repository (and the
        packages for the previous distribution release still work).

     3. Run the command with the repository temporarily disabled
            yum --disablerepo=base ...

     4. Disable the repository permanently, so yum won't use it by default. Yum
        will then just ignore the repository until you permanently enable it
        again or use --enablerepo for temporary usage:

            yum-config-manager --disable base
        or
            subscription-manager repos --disable=base

     5. Configure the failing repository to be skipped, if it is unavailable.
        Note that yum will try to contact the repo. when it runs most commands,
        so will have to try and fail each time (and thus. yum will be be much
        slower). If it is a very temporary problem though, this is often a nice
        compromise:

            yum-config-manager --save --setopt=base.skip_if_unavailable=true

failure: repodata/repomd.xml from base: [Errno 256] No more mirrors to try.
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE (exit code: 1)
[*] exiting (21)

2026-04-05 08:07:27,502, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-04-05 08:07:27,503, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-04-05 08:07:27,797, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.11.0/status/23.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-04-05 08:07:27,799, INFO - End executing installer wrapper
2026-04-06 08:04:31,731, INFO - Start executing installer wrapper
2026-04-06 08:04:31,733, INFO - scrubbed proxy settings: {}
2026-04-06 08:04:31,733, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-04-06 08:04:31,809, INFO - MDE is installed
2026-04-06 08:04:31,809, INFO - Wait for MDE service to be available
2026-04-06 08:04:32,479, INFO - MDE is onboarded
2026-04-06 08:04:32,775, INFO - MDC tags in MDE are valid
2026-04-06 08:04:32,776, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-04-06 08:04:36,157, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.1 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 184.94.200.5
 * cpanel-addons-production-feed: 184.94.200.5
 * cpanel-plugins: 184.94.200.5
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
Trying other mirror.


 One of the configured repositories failed (CentOS-7 - Base),
 and yum doesn't have enough cached data to continue. At this point the only
 safe thing yum can do is fail. There are a few ways to work "fix" this:

     1. Contact the upstream for the repository and get them to fix the problem.

     2. Reconfigure the baseurl/etc. for the repository, to point to a working
        upstream. This is most often useful if you are using a newer
        distribution release than is supported by the repository (and the
        packages for the previous distribution release still work).

     3. Run the command with the repository temporarily disabled
            yum --disablerepo=base ...

     4. Disable the repository permanently, so yum won't use it by default. Yum
        will then just ignore the repository until you permanently enable it
        again or use --enablerepo for temporary usage:

            yum-config-manager --disable base
        or
            subscription-manager repos --disable=base

     5. Configure the failing repository to be skipped, if it is unavailable.
        Note that yum will try to contact the repo. when it runs most commands,
        so will have to try and fail each time (and thus. yum will be be much
        slower). If it is a very temporary problem though, this is often a nice
        compromise:

            yum-config-manager --save --setopt=base.skip_if_unavailable=true

failure: repodata/repomd.xml from base: [Errno 256] No more mirrors to try.
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE (exit code: 1)
[*] exiting (21)

2026-04-06 08:04:36,157, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-04-06 08:04:36,158, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-04-06 08:04:36,400, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.11.0/status/23.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-04-06 08:04:36,401, INFO - End executing installer wrapper
2026-04-07 08:04:45,675, INFO - Start executing installer wrapper
2026-04-07 08:04:45,677, INFO - scrubbed proxy settings: {}
2026-04-07 08:04:45,677, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-04-07 08:04:45,751, INFO - MDE is installed
2026-04-07 08:04:45,751, INFO - Wait for MDE service to be available
2026-04-07 08:04:46,945, INFO - MDE is onboarded
2026-04-07 08:04:47,323, INFO - MDC tags in MDE are valid
2026-04-07 08:04:47,324, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-04-07 08:04:52,797, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.1 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 89.222.122.167
 * cpanel-addons-production-feed: 89.222.122.167
 * cpanel-plugins: 89.222.122.167
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
Trying other mirror.


 One of the configured repositories failed (CentOS-7 - Base),
 and yum doesn't have enough cached data to continue. At this point the only
 safe thing yum can do is fail. There are a few ways to work "fix" this:

     1. Contact the upstream for the repository and get them to fix the problem.

     2. Reconfigure the baseurl/etc. for the repository, to point to a working
        upstream. This is most often useful if you are using a newer
        distribution release than is supported by the repository (and the
        packages for the previous distribution release still work).

     3. Run the command with the repository temporarily disabled
            yum --disablerepo=base ...

     4. Disable the repository permanently, so yum won't use it by default. Yum
        will then just ignore the repository until you permanently enable it
        again or use --enablerepo for temporary usage:

            yum-config-manager --disable base
        or
            subscription-manager repos --disable=base

     5. Configure the failing repository to be skipped, if it is unavailable.
        Note that yum will try to contact the repo. when it runs most commands,
        so will have to try and fail each time (and thus. yum will be be much
        slower). If it is a very temporary problem though, this is often a nice
        compromise:

            yum-config-manager --save --setopt=base.skip_if_unavailable=true

failure: repodata/repomd.xml from base: [Errno 256] No more mirrors to try.
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE (exit code: 1)
[*] exiting (21)

2026-04-07 08:04:52,797, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-04-07 08:04:52,798, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-04-07 08:04:53,615, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.11.0/status/23.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-04-07 08:04:53,709, INFO - End executing installer wrapper
2026-04-07 11:26:02,607, INFO - Start executing installer wrapper
2026-04-07 11:26:02,607, INFO - scrubbed proxy settings: {}
2026-04-07 11:26:02,607, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-04-07 11:26:02,683, INFO - MDE is installed
2026-04-07 11:26:02,683, INFO - Wait for MDE service to be available
2026-04-07 11:26:03,251, INFO - MDE is onboarded
2026-04-07 11:26:03,545, INFO - MDC tags in MDE are valid
2026-04-07 11:26:03,545, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-04-07 11:26:06,911, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.1 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 89.222.122.167
 * cpanel-addons-production-feed: 89.222.122.167
 * cpanel-plugins: 89.222.122.167
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
Trying other mirror.


 One of the configured repositories failed (CentOS-7 - Base),
 and yum doesn't have enough cached data to continue. At this point the only
 safe thing yum can do is fail. There are a few ways to work "fix" this:

     1. Contact the upstream for the repository and get them to fix the problem.

     2. Reconfigure the baseurl/etc. for the repository, to point to a working
        upstream. This is most often useful if you are using a newer
        distribution release than is supported by the repository (and the
        packages for the previous distribution release still work).

     3. Run the command with the repository temporarily disabled
            yum --disablerepo=base ...

     4. Disable the repository permanently, so yum won't use it by default. Yum
        will then just ignore the repository until you permanently enable it
        again or use --enablerepo for temporary usage:

            yum-config-manager --disable base
        or
            subscription-manager repos --disable=base

     5. Configure the failing repository to be skipped, if it is unavailable.
        Note that yum will try to contact the repo. when it runs most commands,
        so will have to try and fail each time (and thus. yum will be be much
        slower). If it is a very temporary problem though, this is often a nice
        compromise:

            yum-config-manager --save --setopt=base.skip_if_unavailable=true

failure: repodata/repomd.xml from base: [Errno 256] No more mirrors to try.
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE (exit code: 1)
[*] exiting (21)

2026-04-07 11:26:06,912, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-04-07 11:26:06,912, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-04-07 11:26:07,157, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.11.0/status/24.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-04-07 11:26:07,158, INFO - End executing installer wrapper
2026-04-08 08:11:20,953, INFO - Start executing installer wrapper
2026-04-08 08:11:20,955, INFO - scrubbed proxy settings: {}
2026-04-08 08:11:20,956, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-04-08 08:11:21,033, INFO - MDE is installed
2026-04-08 08:11:21,033, INFO - Wait for MDE service to be available
2026-04-08 08:11:22,265, INFO - MDE is onboarded
2026-04-08 08:11:22,565, INFO - MDC tags in MDE are valid
2026-04-08 08:11:22,565, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-04-08 08:11:25,942, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.1 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 89.222.122.167
 * cpanel-addons-production-feed: 89.222.122.167
 * cpanel-plugins: 89.222.122.167
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
Trying other mirror.


 One of the configured repositories failed (CentOS-7 - Base),
 and yum doesn't have enough cached data to continue. At this point the only
 safe thing yum can do is fail. There are a few ways to work "fix" this:

     1. Contact the upstream for the repository and get them to fix the problem.

     2. Reconfigure the baseurl/etc. for the repository, to point to a working
        upstream. This is most often useful if you are using a newer
        distribution release than is supported by the repository (and the
        packages for the previous distribution release still work).

     3. Run the command with the repository temporarily disabled
            yum --disablerepo=base ...

     4. Disable the repository permanently, so yum won't use it by default. Yum
        will then just ignore the repository until you permanently enable it
        again or use --enablerepo for temporary usage:

            yum-config-manager --disable base
        or
            subscription-manager repos --disable=base

     5. Configure the failing repository to be skipped, if it is unavailable.
        Note that yum will try to contact the repo. when it runs most commands,
        so will have to try and fail each time (and thus. yum will be be much
        slower). If it is a very temporary problem though, this is often a nice
        compromise:

            yum-config-manager --save --setopt=base.skip_if_unavailable=true

failure: repodata/repomd.xml from base: [Errno 256] No more mirrors to try.
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE (exit code: 1)
[*] exiting (21)

2026-04-08 08:11:25,942, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-04-08 08:11:25,943, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-04-08 08:11:26,344, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.11.0/status/24.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-04-08 08:11:26,356, INFO - End executing installer wrapper
2026-04-09 08:10:57,060, INFO - Start executing installer wrapper
2026-04-09 08:10:57,061, INFO - scrubbed proxy settings: {}
2026-04-09 08:10:57,061, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-04-09 08:10:57,141, INFO - MDE is installed
2026-04-09 08:10:57,141, INFO - Wait for MDE service to be available
2026-04-09 08:10:58,224, INFO - MDE is onboarded
2026-04-09 08:10:58,529, INFO - MDC tags in MDE are valid
2026-04-09 08:10:58,530, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-04-09 08:11:02,957, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.1 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 89.222.122.163
 * cpanel-addons-production-feed: 89.222.122.163
 * cpanel-plugins: 89.222.122.163
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
Trying other mirror.


 One of the configured repositories failed (CentOS-7 - Base),
 and yum doesn't have enough cached data to continue. At this point the only
 safe thing yum can do is fail. There are a few ways to work "fix" this:

     1. Contact the upstream for the repository and get them to fix the problem.

     2. Reconfigure the baseurl/etc. for the repository, to point to a working
        upstream. This is most often useful if you are using a newer
        distribution release than is supported by the repository (and the
        packages for the previous distribution release still work).

     3. Run the command with the repository temporarily disabled
            yum --disablerepo=base ...

     4. Disable the repository permanently, so yum won't use it by default. Yum
        will then just ignore the repository until you permanently enable it
        again or use --enablerepo for temporary usage:

            yum-config-manager --disable base
        or
            subscription-manager repos --disable=base

     5. Configure the failing repository to be skipped, if it is unavailable.
        Note that yum will try to contact the repo. when it runs most commands,
        so will have to try and fail each time (and thus. yum will be be much
        slower). If it is a very temporary problem though, this is often a nice
        compromise:

            yum-config-manager --save --setopt=base.skip_if_unavailable=true

failure: repodata/repomd.xml from base: [Errno 256] No more mirrors to try.
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE (exit code: 1)
[*] exiting (21)

2026-04-09 08:11:02,957, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-04-09 08:11:02,958, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-04-09 08:11:04,120, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.11.0/status/24.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-04-09 08:11:04,121, INFO - End executing installer wrapper
2026-04-10 08:05:24,121, INFO - Start executing installer wrapper
2026-04-10 08:05:24,128, INFO - scrubbed proxy settings: {}
2026-04-10 08:05:24,128, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-04-10 08:05:24,204, INFO - MDE is installed
2026-04-10 08:05:24,204, INFO - Wait for MDE service to be available
2026-04-10 08:05:25,412, INFO - MDE is onboarded
2026-04-10 08:05:25,713, INFO - MDC tags in MDE are valid
2026-04-10 08:05:25,713, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-04-10 08:05:29,505, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.1 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 89.222.122.167
 * cpanel-addons-production-feed: 89.222.122.167
 * cpanel-plugins: 89.222.122.167
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
Trying other mirror.


 One of the configured repositories failed (CentOS-7 - Base),
 and yum doesn't have enough cached data to continue. At this point the only
 safe thing yum can do is fail. There are a few ways to work "fix" this:

     1. Contact the upstream for the repository and get them to fix the problem.

     2. Reconfigure the baseurl/etc. for the repository, to point to a working
        upstream. This is most often useful if you are using a newer
        distribution release than is supported by the repository (and the
        packages for the previous distribution release still work).

     3. Run the command with the repository temporarily disabled
            yum --disablerepo=base ...

     4. Disable the repository permanently, so yum won't use it by default. Yum
        will then just ignore the repository until you permanently enable it
        again or use --enablerepo for temporary usage:

            yum-config-manager --disable base
        or
            subscription-manager repos --disable=base

     5. Configure the failing repository to be skipped, if it is unavailable.
        Note that yum will try to contact the repo. when it runs most commands,
        so will have to try and fail each time (and thus. yum will be be much
        slower). If it is a very temporary problem though, this is often a nice
        compromise:

            yum-config-manager --save --setopt=base.skip_if_unavailable=true

failure: repodata/repomd.xml from base: [Errno 256] No more mirrors to try.
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE (exit code: 1)
[*] exiting (21)

2026-04-10 08:05:29,505, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-04-10 08:05:29,506, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-04-10 08:05:29,751, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.11.0/status/24.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-04-10 08:05:29,752, INFO - End executing installer wrapper
2026-04-11 08:17:06,361, INFO - Start executing installer wrapper
2026-04-11 08:17:06,380, INFO - scrubbed proxy settings: {}
2026-04-11 08:17:06,381, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-04-11 08:17:06,875, INFO - MDE is installed
2026-04-11 08:17:06,875, INFO - Wait for MDE service to be available
2026-04-11 08:19:12,891, INFO - MDE is onboarded
2026-04-11 08:19:15,700, INFO - MDC tags in MDE are valid
2026-04-11 08:19:15,708, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-04-11 08:19:53,083, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.1 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 89.222.122.167
 * cpanel-addons-production-feed: 89.222.122.167
 * cpanel-plugins: 89.222.122.167
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
Trying other mirror.


 One of the configured repositories failed (CentOS-7 - Base),
 and yum doesn't have enough cached data to continue. At this point the only
 safe thing yum can do is fail. There are a few ways to work "fix" this:

     1. Contact the upstream for the repository and get them to fix the problem.

     2. Reconfigure the baseurl/etc. for the repository, to point to a working
        upstream. This is most often useful if you are using a newer
        distribution release than is supported by the repository (and the
        packages for the previous distribution release still work).

     3. Run the command with the repository temporarily disabled
            yum --disablerepo=base ...

     4. Disable the repository permanently, so yum won't use it by default. Yum
        will then just ignore the repository until you permanently enable it
        again or use --enablerepo for temporary usage:

            yum-config-manager --disable base
        or
            subscription-manager repos --disable=base

     5. Configure the failing repository to be skipped, if it is unavailable.
        Note that yum will try to contact the repo. when it runs most commands,
        so will have to try and fail each time (and thus. yum will be be much
        slower). If it is a very temporary problem though, this is often a nice
        compromise:

            yum-config-manager --save --setopt=base.skip_if_unavailable=true

failure: repodata/repomd.xml from base: [Errno 256] No more mirrors to try.
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE (exit code: 1)
[*] exiting (21)

2026-04-11 08:19:53,083, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-04-11 08:19:53,119, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-04-11 08:19:56,976, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.11.0/status/24.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-04-11 08:19:56,985, INFO - End executing installer wrapper
2026-04-12 08:04:19,173, INFO - Start executing installer wrapper
2026-04-12 08:04:19,175, INFO - scrubbed proxy settings: {}
2026-04-12 08:04:19,175, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-04-12 08:04:19,250, INFO - MDE is installed
2026-04-12 08:04:19,250, INFO - Wait for MDE service to be available
2026-04-12 08:04:19,931, INFO - MDE is onboarded
2026-04-12 08:04:20,159, INFO - MDC tags in MDE are valid
2026-04-12 08:04:20,160, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-04-12 08:04:23,402, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.1 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 89.222.122.167
 * cpanel-addons-production-feed: 89.222.122.167
 * cpanel-plugins: 89.222.122.167
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
Trying other mirror.


 One of the configured repositories failed (CentOS-7 - Base),
 and yum doesn't have enough cached data to continue. At this point the only
 safe thing yum can do is fail. There are a few ways to work "fix" this:

     1. Contact the upstream for the repository and get them to fix the problem.

     2. Reconfigure the baseurl/etc. for the repository, to point to a working
        upstream. This is most often useful if you are using a newer
        distribution release than is supported by the repository (and the
        packages for the previous distribution release still work).

     3. Run the command with the repository temporarily disabled
            yum --disablerepo=base ...

     4. Disable the repository permanently, so yum won't use it by default. Yum
        will then just ignore the repository until you permanently enable it
        again or use --enablerepo for temporary usage:

            yum-config-manager --disable base
        or
            subscription-manager repos --disable=base

     5. Configure the failing repository to be skipped, if it is unavailable.
        Note that yum will try to contact the repo. when it runs most commands,
        so will have to try and fail each time (and thus. yum will be be much
        slower). If it is a very temporary problem though, this is often a nice
        compromise:

            yum-config-manager --save --setopt=base.skip_if_unavailable=true

failure: repodata/repomd.xml from base: [Errno 256] No more mirrors to try.
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE (exit code: 1)
[*] exiting (21)

2026-04-12 08:04:23,402, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-04-12 08:04:23,403, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-04-12 08:04:23,674, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.11.0/status/24.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-04-12 08:04:23,675, INFO - End executing installer wrapper
2026-04-13 08:11:33,206, INFO - Start executing installer wrapper
2026-04-13 08:11:33,209, INFO - scrubbed proxy settings: {}
2026-04-13 08:11:33,209, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-04-13 08:11:33,361, INFO - MDE is installed
2026-04-13 08:11:33,361, INFO - Wait for MDE service to be available
2026-04-13 08:11:36,339, INFO - MDE is onboarded
2026-04-13 08:11:37,505, INFO - MDC tags in MDE are valid
2026-04-13 08:11:37,531, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-04-13 08:11:57,360, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.1 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 184.94.200.5
 * cpanel-addons-production-feed: 184.94.200.5
 * cpanel-plugins: 184.94.200.5
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
Trying other mirror.


 One of the configured repositories failed (CentOS-7 - Base),
 and yum doesn't have enough cached data to continue. At this point the only
 safe thing yum can do is fail. There are a few ways to work "fix" this:

     1. Contact the upstream for the repository and get them to fix the problem.

     2. Reconfigure the baseurl/etc. for the repository, to point to a working
        upstream. This is most often useful if you are using a newer
        distribution release than is supported by the repository (and the
        packages for the previous distribution release still work).

     3. Run the command with the repository temporarily disabled
            yum --disablerepo=base ...

     4. Disable the repository permanently, so yum won't use it by default. Yum
        will then just ignore the repository until you permanently enable it
        again or use --enablerepo for temporary usage:

            yum-config-manager --disable base
        or
            subscription-manager repos --disable=base

     5. Configure the failing repository to be skipped, if it is unavailable.
        Note that yum will try to contact the repo. when it runs most commands,
        so will have to try and fail each time (and thus. yum will be be much
        slower). If it is a very temporary problem though, this is often a nice
        compromise:

            yum-config-manager --save --setopt=base.skip_if_unavailable=true

failure: repodata/repomd.xml from base: [Errno 256] No more mirrors to try.
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE (exit code: 1)
[*] exiting (21)

2026-04-13 08:11:57,360, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-04-13 08:11:57,361, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-04-13 08:11:57,626, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.11.0/status/24.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-04-13 08:11:57,627, INFO - End executing installer wrapper
2026-04-13 11:25:56,674, INFO - Start executing installer wrapper
2026-04-13 11:25:56,675, INFO - scrubbed proxy settings: {}
2026-04-13 11:25:56,675, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-04-13 11:25:56,752, INFO - MDE is installed
2026-04-13 11:25:56,753, INFO - Wait for MDE service to be available
2026-04-13 11:25:57,510, INFO - MDE is onboarded
2026-04-13 11:25:57,798, INFO - MDC tags in MDE are valid
2026-04-13 11:25:57,798, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-04-13 11:26:01,164, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.1 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 89.222.122.167
 * cpanel-addons-production-feed: 89.222.122.167
 * cpanel-plugins: 89.222.122.167
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
Trying other mirror.


 One of the configured repositories failed (CentOS-7 - Base),
 and yum doesn't have enough cached data to continue. At this point the only
 safe thing yum can do is fail. There are a few ways to work "fix" this:

     1. Contact the upstream for the repository and get them to fix the problem.

     2. Reconfigure the baseurl/etc. for the repository, to point to a working
        upstream. This is most often useful if you are using a newer
        distribution release than is supported by the repository (and the
        packages for the previous distribution release still work).

     3. Run the command with the repository temporarily disabled
            yum --disablerepo=base ...

     4. Disable the repository permanently, so yum won't use it by default. Yum
        will then just ignore the repository until you permanently enable it
        again or use --enablerepo for temporary usage:

            yum-config-manager --disable base
        or
            subscription-manager repos --disable=base

     5. Configure the failing repository to be skipped, if it is unavailable.
        Note that yum will try to contact the repo. when it runs most commands,
        so will have to try and fail each time (and thus. yum will be be much
        slower). If it is a very temporary problem though, this is often a nice
        compromise:

            yum-config-manager --save --setopt=base.skip_if_unavailable=true

failure: repodata/repomd.xml from base: [Errno 256] No more mirrors to try.
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE (exit code: 1)
[*] exiting (21)

2026-04-13 11:26:01,165, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-04-13 11:26:01,165, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-04-13 11:26:01,416, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.11.0/status/25.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-04-13 11:26:01,417, INFO - End executing installer wrapper
2026-04-14 08:08:27,121, INFO - Start executing installer wrapper
2026-04-14 08:08:27,131, INFO - scrubbed proxy settings: {}
2026-04-14 08:08:27,131, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-04-14 08:08:27,203, INFO - MDE is installed
2026-04-14 08:08:27,204, INFO - Wait for MDE service to be available
2026-04-14 08:08:27,771, INFO - MDE is onboarded
2026-04-14 08:08:28,065, INFO - MDC tags in MDE are valid
2026-04-14 08:08:28,066, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-04-14 08:08:31,343, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.1 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 89.222.122.167
 * cpanel-addons-production-feed: 89.222.122.167
 * cpanel-plugins: 89.222.122.167
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
Trying other mirror.


 One of the configured repositories failed (CentOS-7 - Base),
 and yum doesn't have enough cached data to continue. At this point the only
 safe thing yum can do is fail. There are a few ways to work "fix" this:

     1. Contact the upstream for the repository and get them to fix the problem.

     2. Reconfigure the baseurl/etc. for the repository, to point to a working
        upstream. This is most often useful if you are using a newer
        distribution release than is supported by the repository (and the
        packages for the previous distribution release still work).

     3. Run the command with the repository temporarily disabled
            yum --disablerepo=base ...

     4. Disable the repository permanently, so yum won't use it by default. Yum
        will then just ignore the repository until you permanently enable it
        again or use --enablerepo for temporary usage:

            yum-config-manager --disable base
        or
            subscription-manager repos --disable=base

     5. Configure the failing repository to be skipped, if it is unavailable.
        Note that yum will try to contact the repo. when it runs most commands,
        so will have to try and fail each time (and thus. yum will be be much
        slower). If it is a very temporary problem though, this is often a nice
        compromise:

            yum-config-manager --save --setopt=base.skip_if_unavailable=true

failure: repodata/repomd.xml from base: [Errno 256] No more mirrors to try.
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE (exit code: 1)
[*] exiting (21)

2026-04-14 08:08:31,343, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-04-14 08:08:31,344, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-04-14 08:08:31,601, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.11.0/status/25.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-04-14 08:08:31,602, INFO - End executing installer wrapper
2026-04-14 11:27:27,534, INFO - Start executing installer wrapper
2026-04-14 11:27:27,535, INFO - scrubbed proxy settings: {}
2026-04-14 11:27:27,535, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-04-14 11:27:27,620, INFO - MDE is installed
2026-04-14 11:27:27,621, INFO - Wait for MDE service to be available
2026-04-14 11:27:28,476, INFO - MDE is onboarded
2026-04-14 11:27:28,766, INFO - MDC tags in MDE are valid
2026-04-14 11:27:28,767, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-04-14 11:27:31,951, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.1 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 89.222.122.167
 * cpanel-addons-production-feed: 89.222.122.167
 * cpanel-plugins: 89.222.122.167
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
Trying other mirror.


 One of the configured repositories failed (CentOS-7 - Base),
 and yum doesn't have enough cached data to continue. At this point the only
 safe thing yum can do is fail. There are a few ways to work "fix" this:

     1. Contact the upstream for the repository and get them to fix the problem.

     2. Reconfigure the baseurl/etc. for the repository, to point to a working
        upstream. This is most often useful if you are using a newer
        distribution release than is supported by the repository (and the
        packages for the previous distribution release still work).

     3. Run the command with the repository temporarily disabled
            yum --disablerepo=base ...

     4. Disable the repository permanently, so yum won't use it by default. Yum
        will then just ignore the repository until you permanently enable it
        again or use --enablerepo for temporary usage:

            yum-config-manager --disable base
        or
            subscription-manager repos --disable=base

     5. Configure the failing repository to be skipped, if it is unavailable.
        Note that yum will try to contact the repo. when it runs most commands,
        so will have to try and fail each time (and thus. yum will be be much
        slower). If it is a very temporary problem though, this is often a nice
        compromise:

            yum-config-manager --save --setopt=base.skip_if_unavailable=true

failure: repodata/repomd.xml from base: [Errno 256] No more mirrors to try.
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE (exit code: 1)
[*] exiting (21)

2026-04-14 11:27:31,952, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-04-14 11:27:31,953, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-04-14 11:27:32,194, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.11.0/status/26.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-04-14 11:27:32,195, INFO - End executing installer wrapper
2026-04-15 08:09:15,092, INFO - Start executing installer wrapper
2026-04-15 08:09:15,094, INFO - scrubbed proxy settings: {}
2026-04-15 08:09:15,094, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-04-15 08:09:15,171, INFO - MDE is installed
2026-04-15 08:09:15,171, INFO - Wait for MDE service to be available
2026-04-15 08:09:15,629, INFO - MDE is onboarded
2026-04-15 08:09:15,827, INFO - MDC tags in MDE are valid
2026-04-15 08:09:15,828, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-04-15 08:09:18,292, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.1 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 184.94.200.3
 * cpanel-addons-production-feed: 184.94.200.3
 * cpanel-plugins: 184.94.200.3
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
Trying other mirror.


 One of the configured repositories failed (CentOS-7 - Base),
 and yum doesn't have enough cached data to continue. At this point the only
 safe thing yum can do is fail. There are a few ways to work "fix" this:

     1. Contact the upstream for the repository and get them to fix the problem.

     2. Reconfigure the baseurl/etc. for the repository, to point to a working
        upstream. This is most often useful if you are using a newer
        distribution release than is supported by the repository (and the
        packages for the previous distribution release still work).

     3. Run the command with the repository temporarily disabled
            yum --disablerepo=base ...

     4. Disable the repository permanently, so yum won't use it by default. Yum
        will then just ignore the repository until you permanently enable it
        again or use --enablerepo for temporary usage:

            yum-config-manager --disable base
        or
            subscription-manager repos --disable=base

     5. Configure the failing repository to be skipped, if it is unavailable.
        Note that yum will try to contact the repo. when it runs most commands,
        so will have to try and fail each time (and thus. yum will be be much
        slower). If it is a very temporary problem though, this is often a nice
        compromise:

            yum-config-manager --save --setopt=base.skip_if_unavailable=true

failure: repodata/repomd.xml from base: [Errno 256] No more mirrors to try.
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE (exit code: 1)
[*] exiting (21)

2026-04-15 08:09:18,292, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-04-15 08:09:18,293, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-04-15 08:09:18,462, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.11.0/status/26.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-04-15 08:09:18,463, INFO - End executing installer wrapper
2026-04-16 02:15:49,628, INFO - Start executing installer wrapper
2026-04-16 02:15:49,630, INFO - scrubbed proxy settings: {}
2026-04-16 02:15:49,630, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-04-16 02:15:49,706, INFO - MDE is installed
2026-04-16 02:15:49,706, INFO - Wait for MDE service to be available
2026-04-16 02:15:50,922, INFO - MDE is onboarded
2026-04-16 02:15:51,237, INFO - MDC tags in MDE are valid
2026-04-16 02:15:51,237, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-04-16 02:15:55,708, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.1 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 89.222.122.167
 * cpanel-addons-production-feed: 89.222.122.167
 * cpanel-plugins: 89.222.122.167
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
Trying other mirror.


 One of the configured repositories failed (CentOS-7 - Base),
 and yum doesn't have enough cached data to continue. At this point the only
 safe thing yum can do is fail. There are a few ways to work "fix" this:

     1. Contact the upstream for the repository and get them to fix the problem.

     2. Reconfigure the baseurl/etc. for the repository, to point to a working
        upstream. This is most often useful if you are using a newer
        distribution release than is supported by the repository (and the
        packages for the previous distribution release still work).

     3. Run the command with the repository temporarily disabled
            yum --disablerepo=base ...

     4. Disable the repository permanently, so yum won't use it by default. Yum
        will then just ignore the repository until you permanently enable it
        again or use --enablerepo for temporary usage:

            yum-config-manager --disable base
        or
            subscription-manager repos --disable=base

     5. Configure the failing repository to be skipped, if it is unavailable.
        Note that yum will try to contact the repo. when it runs most commands,
        so will have to try and fail each time (and thus. yum will be be much
        slower). If it is a very temporary problem though, this is often a nice
        compromise:

            yum-config-manager --save --setopt=base.skip_if_unavailable=true

failure: repodata/repomd.xml from base: [Errno 256] No more mirrors to try.
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE (exit code: 1)
[*] exiting (21)

2026-04-16 02:15:55,708, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-04-16 02:15:55,708, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-04-16 02:15:55,953, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.11.0/status/26.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-04-16 02:15:55,954, INFO - End executing installer wrapper
2026-04-16 08:11:51,611, INFO - Start executing installer wrapper
2026-04-16 08:11:51,616, INFO - scrubbed proxy settings: {}
2026-04-16 08:11:51,616, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-04-16 08:11:51,695, INFO - MDE is installed
2026-04-16 08:11:51,695, INFO - Wait for MDE service to be available
2026-04-16 08:11:52,135, INFO - MDE is onboarded
2026-04-16 08:11:52,414, INFO - MDC tags in MDE are valid
2026-04-16 08:11:52,415, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-04-16 08:11:55,682, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.1 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 89.222.122.167
 * cpanel-addons-production-feed: 89.222.122.167
 * cpanel-plugins: 89.222.122.167
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
Trying other mirror.


 One of the configured repositories failed (CentOS-7 - Base),
 and yum doesn't have enough cached data to continue. At this point the only
 safe thing yum can do is fail. There are a few ways to work "fix" this:

     1. Contact the upstream for the repository and get them to fix the problem.

     2. Reconfigure the baseurl/etc. for the repository, to point to a working
        upstream. This is most often useful if you are using a newer
        distribution release than is supported by the repository (and the
        packages for the previous distribution release still work).

     3. Run the command with the repository temporarily disabled
            yum --disablerepo=base ...

     4. Disable the repository permanently, so yum won't use it by default. Yum
        will then just ignore the repository until you permanently enable it
        again or use --enablerepo for temporary usage:

            yum-config-manager --disable base
        or
            subscription-manager repos --disable=base

     5. Configure the failing repository to be skipped, if it is unavailable.
        Note that yum will try to contact the repo. when it runs most commands,
        so will have to try and fail each time (and thus. yum will be be much
        slower). If it is a very temporary problem though, this is often a nice
        compromise:

            yum-config-manager --save --setopt=base.skip_if_unavailable=true

failure: repodata/repomd.xml from base: [Errno 256] No more mirrors to try.
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE (exit code: 1)
[*] exiting (21)

2026-04-16 08:11:55,683, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-04-16 08:11:55,683, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-04-16 08:11:55,929, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.11.0/status/26.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-04-16 08:11:55,930, INFO - End executing installer wrapper
2026-04-17 08:08:25,374, INFO - Start executing installer wrapper
2026-04-17 08:08:25,376, INFO - scrubbed proxy settings: {}
2026-04-17 08:08:25,376, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-04-17 08:08:25,457, INFO - MDE is installed
2026-04-17 08:08:25,458, INFO - Wait for MDE service to be available
2026-04-17 08:08:26,103, INFO - MDE is onboarded
2026-04-17 08:08:26,401, INFO - MDC tags in MDE are valid
2026-04-17 08:08:26,401, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-04-17 08:08:29,973, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.1 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 89.222.122.167
 * cpanel-addons-production-feed: 89.222.122.167
 * cpanel-plugins: 89.222.122.167
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
Trying other mirror.


 One of the configured repositories failed (CentOS-7 - Base),
 and yum doesn't have enough cached data to continue. At this point the only
 safe thing yum can do is fail. There are a few ways to work "fix" this:

     1. Contact the upstream for the repository and get them to fix the problem.

     2. Reconfigure the baseurl/etc. for the repository, to point to a working
        upstream. This is most often useful if you are using a newer
        distribution release than is supported by the repository (and the
        packages for the previous distribution release still work).

     3. Run the command with the repository temporarily disabled
            yum --disablerepo=base ...

     4. Disable the repository permanently, so yum won't use it by default. Yum
        will then just ignore the repository until you permanently enable it
        again or use --enablerepo for temporary usage:

            yum-config-manager --disable base
        or
            subscription-manager repos --disable=base

     5. Configure the failing repository to be skipped, if it is unavailable.
        Note that yum will try to contact the repo. when it runs most commands,
        so will have to try and fail each time (and thus. yum will be be much
        slower). If it is a very temporary problem though, this is often a nice
        compromise:

            yum-config-manager --save --setopt=base.skip_if_unavailable=true

failure: repodata/repomd.xml from base: [Errno 256] No more mirrors to try.
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE (exit code: 1)
[*] exiting (21)

2026-04-17 08:08:29,974, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-04-17 08:08:29,974, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-04-17 08:08:31,039, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.11.0/status/26.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-04-17 08:08:31,040, INFO - End executing installer wrapper
2026-04-18 08:11:54,624, INFO - Start executing installer wrapper
2026-04-18 08:11:54,626, INFO - scrubbed proxy settings: {}
2026-04-18 08:11:54,626, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-04-18 08:11:54,702, INFO - MDE is installed
2026-04-18 08:11:54,702, INFO - Wait for MDE service to be available
2026-04-18 08:11:55,623, INFO - MDE is onboarded
2026-04-18 08:11:55,848, INFO - MDC tags in MDE are valid
2026-04-18 08:11:55,849, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-04-18 08:12:00,993, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.1 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 89.222.122.167
 * cpanel-addons-production-feed: 89.222.122.167
 * cpanel-plugins: 89.222.122.167
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
Trying other mirror.


 One of the configured repositories failed (CentOS-7 - Base),
 and yum doesn't have enough cached data to continue. At this point the only
 safe thing yum can do is fail. There are a few ways to work "fix" this:

     1. Contact the upstream for the repository and get them to fix the problem.

     2. Reconfigure the baseurl/etc. for the repository, to point to a working
        upstream. This is most often useful if you are using a newer
        distribution release than is supported by the repository (and the
        packages for the previous distribution release still work).

     3. Run the command with the repository temporarily disabled
            yum --disablerepo=base ...

     4. Disable the repository permanently, so yum won't use it by default. Yum
        will then just ignore the repository until you permanently enable it
        again or use --enablerepo for temporary usage:

            yum-config-manager --disable base
        or
            subscription-manager repos --disable=base

     5. Configure the failing repository to be skipped, if it is unavailable.
        Note that yum will try to contact the repo. when it runs most commands,
        so will have to try and fail each time (and thus. yum will be be much
        slower). If it is a very temporary problem though, this is often a nice
        compromise:

            yum-config-manager --save --setopt=base.skip_if_unavailable=true

failure: repodata/repomd.xml from base: [Errno 256] No more mirrors to try.
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE (exit code: 1)
[*] exiting (21)

2026-04-18 08:12:00,993, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-04-18 08:12:00,994, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-04-18 08:12:01,556, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.11.0/status/26.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-04-18 08:12:01,557, INFO - End executing installer wrapper
2026-04-19 08:09:25,119, INFO - Start executing installer wrapper
2026-04-19 08:09:25,121, INFO - scrubbed proxy settings: {}
2026-04-19 08:09:25,121, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-04-19 08:09:25,195, INFO - MDE is installed
2026-04-19 08:09:25,195, INFO - Wait for MDE service to be available
2026-04-19 08:09:25,723, INFO - MDE is onboarded
2026-04-19 08:09:26,015, INFO - MDC tags in MDE are valid
2026-04-19 08:09:26,016, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-04-19 08:09:29,375, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.1 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 184.94.200.2
 * cpanel-addons-production-feed: 184.94.200.2
 * cpanel-plugins: 184.94.200.2
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
Trying other mirror.


 One of the configured repositories failed (CentOS-7 - Base),
 and yum doesn't have enough cached data to continue. At this point the only
 safe thing yum can do is fail. There are a few ways to work "fix" this:

     1. Contact the upstream for the repository and get them to fix the problem.

     2. Reconfigure the baseurl/etc. for the repository, to point to a working
        upstream. This is most often useful if you are using a newer
        distribution release than is supported by the repository (and the
        packages for the previous distribution release still work).

     3. Run the command with the repository temporarily disabled
            yum --disablerepo=base ...

     4. Disable the repository permanently, so yum won't use it by default. Yum
        will then just ignore the repository until you permanently enable it
        again or use --enablerepo for temporary usage:

            yum-config-manager --disable base
        or
            subscription-manager repos --disable=base

     5. Configure the failing repository to be skipped, if it is unavailable.
        Note that yum will try to contact the repo. when it runs most commands,
        so will have to try and fail each time (and thus. yum will be be much
        slower). If it is a very temporary problem though, this is often a nice
        compromise:

            yum-config-manager --save --setopt=base.skip_if_unavailable=true

failure: repodata/repomd.xml from base: [Errno 256] No more mirrors to try.
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE (exit code: 1)
[*] exiting (21)

2026-04-19 08:09:29,375, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-04-19 08:09:29,376, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-04-19 08:09:29,718, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.11.0/status/26.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-04-19 08:09:29,719, INFO - End executing installer wrapper
2026-04-20 08:04:56,442, INFO - Start executing installer wrapper
2026-04-20 08:04:56,444, INFO - scrubbed proxy settings: {}
2026-04-20 08:04:56,444, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-04-20 08:04:56,519, INFO - MDE is installed
2026-04-20 08:04:56,519, INFO - Wait for MDE service to be available
2026-04-20 08:04:57,095, INFO - MDE is onboarded
2026-04-20 08:04:57,395, INFO - MDC tags in MDE are valid
2026-04-20 08:04:57,395, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-04-20 08:05:01,077, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.1 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 89.222.122.167
 * cpanel-addons-production-feed: 89.222.122.167
 * cpanel-plugins: 89.222.122.167
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
Trying other mirror.


 One of the configured repositories failed (CentOS-7 - Base),
 and yum doesn't have enough cached data to continue. At this point the only
 safe thing yum can do is fail. There are a few ways to work "fix" this:

     1. Contact the upstream for the repository and get them to fix the problem.

     2. Reconfigure the baseurl/etc. for the repository, to point to a working
        upstream. This is most often useful if you are using a newer
        distribution release than is supported by the repository (and the
        packages for the previous distribution release still work).

     3. Run the command with the repository temporarily disabled
            yum --disablerepo=base ...

     4. Disable the repository permanently, so yum won't use it by default. Yum
        will then just ignore the repository until you permanently enable it
        again or use --enablerepo for temporary usage:

            yum-config-manager --disable base
        or
            subscription-manager repos --disable=base

     5. Configure the failing repository to be skipped, if it is unavailable.
        Note that yum will try to contact the repo. when it runs most commands,
        so will have to try and fail each time (and thus. yum will be be much
        slower). If it is a very temporary problem though, this is often a nice
        compromise:

            yum-config-manager --save --setopt=base.skip_if_unavailable=true

failure: repodata/repomd.xml from base: [Errno 256] No more mirrors to try.
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE (exit code: 1)
[*] exiting (21)

2026-04-20 08:05:01,078, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-04-20 08:05:01,079, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-04-20 08:05:01,400, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.11.0/status/26.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-04-20 08:05:01,401, INFO - End executing installer wrapper
2026-04-20 11:43:11,577, INFO - Start executing installer wrapper
2026-04-20 11:43:11,577, INFO - scrubbed proxy settings: {}
2026-04-20 11:43:11,577, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-04-20 11:43:11,652, INFO - MDE is installed
2026-04-20 11:43:11,653, INFO - Wait for MDE service to be available
2026-04-20 11:43:12,302, INFO - MDE is onboarded
2026-04-20 11:43:12,597, INFO - MDC tags in MDE are valid
2026-04-20 11:43:12,598, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-04-20 11:43:16,357, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.1 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 89.222.122.167
 * cpanel-addons-production-feed: 89.222.122.167
 * cpanel-plugins: 89.222.122.167
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
Trying other mirror.


 One of the configured repositories failed (CentOS-7 - Base),
 and yum doesn't have enough cached data to continue. At this point the only
 safe thing yum can do is fail. There are a few ways to work "fix" this:

     1. Contact the upstream for the repository and get them to fix the problem.

     2. Reconfigure the baseurl/etc. for the repository, to point to a working
        upstream. This is most often useful if you are using a newer
        distribution release than is supported by the repository (and the
        packages for the previous distribution release still work).

     3. Run the command with the repository temporarily disabled
            yum --disablerepo=base ...

     4. Disable the repository permanently, so yum won't use it by default. Yum
        will then just ignore the repository until you permanently enable it
        again or use --enablerepo for temporary usage:

            yum-config-manager --disable base
        or
            subscription-manager repos --disable=base

     5. Configure the failing repository to be skipped, if it is unavailable.
        Note that yum will try to contact the repo. when it runs most commands,
        so will have to try and fail each time (and thus. yum will be be much
        slower). If it is a very temporary problem though, this is often a nice
        compromise:

            yum-config-manager --save --setopt=base.skip_if_unavailable=true

failure: repodata/repomd.xml from base: [Errno 256] No more mirrors to try.
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE (exit code: 1)
[*] exiting (21)

2026-04-20 11:43:16,358, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-04-20 11:43:16,359, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-04-20 11:43:16,618, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.11.1/status/27.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-04-20 11:43:16,619, INFO - End executing installer wrapper
2026-04-21 08:06:01,228, INFO - Start executing installer wrapper
2026-04-21 08:06:01,230, INFO - scrubbed proxy settings: {}
2026-04-21 08:06:01,230, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-04-21 08:06:01,306, INFO - MDE is installed
2026-04-21 08:06:01,306, INFO - Wait for MDE service to be available
2026-04-21 08:06:02,399, INFO - MDE is onboarded
2026-04-21 08:06:02,719, INFO - MDC tags in MDE are valid
2026-04-21 08:06:02,719, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-04-21 08:06:06,281, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.1 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 89.222.122.167
 * cpanel-addons-production-feed: 89.222.122.167
 * cpanel-plugins: 89.222.122.167
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
Trying other mirror.


 One of the configured repositories failed (CentOS-7 - Base),
 and yum doesn't have enough cached data to continue. At this point the only
 safe thing yum can do is fail. There are a few ways to work "fix" this:

     1. Contact the upstream for the repository and get them to fix the problem.

     2. Reconfigure the baseurl/etc. for the repository, to point to a working
        upstream. This is most often useful if you are using a newer
        distribution release than is supported by the repository (and the
        packages for the previous distribution release still work).

     3. Run the command with the repository temporarily disabled
            yum --disablerepo=base ...

     4. Disable the repository permanently, so yum won't use it by default. Yum
        will then just ignore the repository until you permanently enable it
        again or use --enablerepo for temporary usage:

            yum-config-manager --disable base
        or
            subscription-manager repos --disable=base

     5. Configure the failing repository to be skipped, if it is unavailable.
        Note that yum will try to contact the repo. when it runs most commands,
        so will have to try and fail each time (and thus. yum will be be much
        slower). If it is a very temporary problem though, this is often a nice
        compromise:

            yum-config-manager --save --setopt=base.skip_if_unavailable=true

failure: repodata/repomd.xml from base: [Errno 256] No more mirrors to try.
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE (exit code: 1)
[*] exiting (21)

2026-04-21 08:06:06,281, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-04-21 08:06:06,282, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-04-21 08:06:06,521, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.11.1/status/27.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-04-21 08:06:06,523, INFO - End executing installer wrapper
2026-04-22 08:11:04,067, INFO - Start executing installer wrapper
2026-04-22 08:11:04,069, INFO - scrubbed proxy settings: {}
2026-04-22 08:11:04,069, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-04-22 08:11:04,170, INFO - MDE is installed
2026-04-22 08:11:04,171, INFO - Wait for MDE service to be available
2026-04-22 08:11:04,834, INFO - MDE is onboarded
2026-04-22 08:11:05,128, INFO - MDC tags in MDE are valid
2026-04-22 08:11:05,129, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-04-22 08:11:08,614, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.1 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 89.222.122.163
 * cpanel-addons-production-feed: 89.222.122.163
 * cpanel-plugins: 89.222.122.163
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
Trying other mirror.


 One of the configured repositories failed (CentOS-7 - Base),
 and yum doesn't have enough cached data to continue. At this point the only
 safe thing yum can do is fail. There are a few ways to work "fix" this:

     1. Contact the upstream for the repository and get them to fix the problem.

     2. Reconfigure the baseurl/etc. for the repository, to point to a working
        upstream. This is most often useful if you are using a newer
        distribution release than is supported by the repository (and the
        packages for the previous distribution release still work).

     3. Run the command with the repository temporarily disabled
            yum --disablerepo=base ...

     4. Disable the repository permanently, so yum won't use it by default. Yum
        will then just ignore the repository until you permanently enable it
        again or use --enablerepo for temporary usage:

            yum-config-manager --disable base
        or
            subscription-manager repos --disable=base

     5. Configure the failing repository to be skipped, if it is unavailable.
        Note that yum will try to contact the repo. when it runs most commands,
        so will have to try and fail each time (and thus. yum will be be much
        slower). If it is a very temporary problem though, this is often a nice
        compromise:

            yum-config-manager --save --setopt=base.skip_if_unavailable=true

failure: repodata/repomd.xml from base: [Errno 256] No more mirrors to try.
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE (exit code: 1)
[*] exiting (21)

2026-04-22 08:11:08,615, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-04-22 08:11:08,616, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-04-22 08:11:09,828, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.11.1/status/27.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-04-22 08:11:09,829, INFO - End executing installer wrapper
2026-04-23 08:08:11,542, INFO - Start executing installer wrapper
2026-04-23 08:08:11,544, INFO - scrubbed proxy settings: {}
2026-04-23 08:08:11,545, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-04-23 08:08:11,628, INFO - MDE is installed
2026-04-23 08:08:11,628, INFO - Wait for MDE service to be available
2026-04-23 08:08:12,576, INFO - MDE is onboarded
2026-04-23 08:08:12,880, INFO - MDC tags in MDE are valid
2026-04-23 08:08:12,880, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-04-23 08:08:16,842, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.1 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 184.94.200.5
 * cpanel-addons-production-feed: 184.94.200.5
 * cpanel-plugins: 184.94.200.5
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
Trying other mirror.


 One of the configured repositories failed (CentOS-7 - Base),
 and yum doesn't have enough cached data to continue. At this point the only
 safe thing yum can do is fail. There are a few ways to work "fix" this:

     1. Contact the upstream for the repository and get them to fix the problem.

     2. Reconfigure the baseurl/etc. for the repository, to point to a working
        upstream. This is most often useful if you are using a newer
        distribution release than is supported by the repository (and the
        packages for the previous distribution release still work).

     3. Run the command with the repository temporarily disabled
            yum --disablerepo=base ...

     4. Disable the repository permanently, so yum won't use it by default. Yum
        will then just ignore the repository until you permanently enable it
        again or use --enablerepo for temporary usage:

            yum-config-manager --disable base
        or
            subscription-manager repos --disable=base

     5. Configure the failing repository to be skipped, if it is unavailable.
        Note that yum will try to contact the repo. when it runs most commands,
        so will have to try and fail each time (and thus. yum will be be much
        slower). If it is a very temporary problem though, this is often a nice
        compromise:

            yum-config-manager --save --setopt=base.skip_if_unavailable=true

failure: repodata/repomd.xml from base: [Errno 256] No more mirrors to try.
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE (exit code: 1)
[*] exiting (21)

2026-04-23 08:08:16,843, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-04-23 08:08:16,843, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-04-23 08:08:17,209, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.11.1/status/27.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-04-23 08:08:17,210, INFO - End executing installer wrapper
2026-04-24 08:03:11,467, INFO - Start executing installer wrapper
2026-04-24 08:03:11,470, INFO - scrubbed proxy settings: {}
2026-04-24 08:03:11,470, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-04-24 08:03:11,555, INFO - MDE is installed
2026-04-24 08:03:11,555, INFO - Wait for MDE service to be available
2026-04-24 08:03:12,431, INFO - MDE is onboarded
2026-04-24 08:03:12,801, INFO - MDC tags in MDE are valid
2026-04-24 08:03:12,802, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-04-24 08:03:17,097, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.1 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 89.222.122.167
 * cpanel-addons-production-feed: 89.222.122.167
 * cpanel-plugins: 89.222.122.167
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
Trying other mirror.


 One of the configured repositories failed (CentOS-7 - Base),
 and yum doesn't have enough cached data to continue. At this point the only
 safe thing yum can do is fail. There are a few ways to work "fix" this:

     1. Contact the upstream for the repository and get them to fix the problem.

     2. Reconfigure the baseurl/etc. for the repository, to point to a working
        upstream. This is most often useful if you are using a newer
        distribution release than is supported by the repository (and the
        packages for the previous distribution release still work).

     3. Run the command with the repository temporarily disabled
            yum --disablerepo=base ...

     4. Disable the repository permanently, so yum won't use it by default. Yum
        will then just ignore the repository until you permanently enable it
        again or use --enablerepo for temporary usage:

            yum-config-manager --disable base
        or
            subscription-manager repos --disable=base

     5. Configure the failing repository to be skipped, if it is unavailable.
        Note that yum will try to contact the repo. when it runs most commands,
        so will have to try and fail each time (and thus. yum will be be much
        slower). If it is a very temporary problem though, this is often a nice
        compromise:

            yum-config-manager --save --setopt=base.skip_if_unavailable=true

failure: repodata/repomd.xml from base: [Errno 256] No more mirrors to try.
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE (exit code: 1)
[*] exiting (21)

2026-04-24 08:03:17,098, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-04-24 08:03:17,098, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-04-24 08:03:18,375, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.11.1/status/27.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-04-24 08:03:18,376, INFO - End executing installer wrapper
2026-04-24 19:57:32,118, INFO - Start executing installer wrapper
2026-04-24 19:57:32,160, INFO - scrubbed proxy settings: {}
2026-04-24 19:57:32,160, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-04-24 19:57:32,545, INFO - MDE is installed
2026-04-24 19:57:32,545, INFO - Wait for MDE service to be available
2026-04-24 19:57:35,274, INFO - start parsing onboarding script
2026-04-24 19:57:35,386, INFO - decode onboarding script successfully
2026-04-24 19:57:35,388, INFO - parse onboarding script successfully
2026-04-24 19:57:35,388, INFO - Starting onboarding script...
2026-04-24 19:57:35,388, INFO - Checking if Mde is installed
2026-04-24 19:57:35,428, INFO - Mde is installed: True
2026-04-24 19:57:35,428, INFO - Removing offboarding file if exists
2026-04-24 19:57:37,434, INFO - Onboarding...
2026-04-24 19:57:37,434, INFO - Generating /etc/opt/microsoft/mdatp/mdatp_onboard.json...
2026-04-24 19:57:37,703, INFO - Onboarding done
2026-04-24 19:57:37,703, INFO - Checking if Mde is healthy after onboarding
2026-04-24 20:41:37,121, INFO - Onboarding failed
2026-04-24 20:41:37,126, ERROR - MDE agent is not healthy after onboarding
2026-04-24 20:41:37,127, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-04-24 20:41:39,248, ERROR - Failed to configure Microsoft Defender for Endpoint: MDE agent is not healthy after onboarding
{"healthIssues": ["engine not available"], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "correlationId": "N/A"}
2026-04-24 20:41:39,305, ERROR - Stack trace: Traceback (most recent call last):
  File "src/MdeInstallerWrapper.py", line 211, in main
    logutils.throw_and_write_log(error_message)
  File "/var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.11.1/src/LogUtils.py", line 25, in throw_and_write_log
    raise Exception(message)
Exception: MDE agent is not healthy after onboarding

2026-04-24 20:41:39,308, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.11.1/status/27.status, Status= error, Code= 443, Message= Failed to configure Microsoft Defender for Endpoint: MDE agent is not healthy after onboarding
{"healthIssues": ["engine not available"], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "correlationId": "N/A"}
2026-04-24 20:41:39,308, INFO - End executing installer wrapper
2026-04-24 23:44:55,709, INFO - Start executing installer wrapper
2026-04-24 23:44:55,719, INFO - scrubbed proxy settings: {}
2026-04-24 23:44:55,719, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-04-24 23:44:55,816, INFO - MDE is installed
2026-04-24 23:44:55,816, INFO - Wait for MDE service to be available
2026-04-24 23:44:59,489, INFO - MDE is onboarded
2026-04-24 23:45:00,390, INFO - MDC tags in MDE are valid
2026-04-24 23:45:00,391, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-04-24 23:45:18,936, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.1 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 184.94.200.5
 * cpanel-addons-production-feed: 184.94.200.5
 * cpanel-plugins: 184.94.200.5
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
Trying other mirror.


 One of the configured repositories failed (CentOS-7 - Base),
 and yum doesn't have enough cached data to continue. At this point the only
 safe thing yum can do is fail. There are a few ways to work "fix" this:

     1. Contact the upstream for the repository and get them to fix the problem.

     2. Reconfigure the baseurl/etc. for the repository, to point to a working
        upstream. This is most often useful if you are using a newer
        distribution release than is supported by the repository (and the
        packages for the previous distribution release still work).

     3. Run the command with the repository temporarily disabled
            yum --disablerepo=base ...

     4. Disable the repository permanently, so yum won't use it by default. Yum
        will then just ignore the repository until you permanently enable it
        again or use --enablerepo for temporary usage:

            yum-config-manager --disable base
        or
            subscription-manager repos --disable=base

     5. Configure the failing repository to be skipped, if it is unavailable.
        Note that yum will try to contact the repo. when it runs most commands,
        so will have to try and fail each time (and thus. yum will be be much
        slower). If it is a very temporary problem though, this is often a nice
        compromise:

            yum-config-manager --save --setopt=base.skip_if_unavailable=true

failure: repodata/repomd.xml from base: [Errno 256] No more mirrors to try.
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE (exit code: 1)
[*] exiting (21)

2026-04-24 23:45:18,937, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-04-24 23:45:18,945, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-04-24 23:45:22,237, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.11.1/status/28.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-04-24 23:45:22,264, INFO - End executing installer wrapper
2026-04-25 08:19:49,262, INFO - Start executing installer wrapper
2026-04-25 08:19:49,269, INFO - scrubbed proxy settings: {}
2026-04-25 08:19:49,269, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-04-25 08:19:49,364, INFO - MDE is installed
2026-04-25 08:19:49,364, INFO - Wait for MDE service to be available
2026-04-25 08:19:51,780, INFO - MDE is onboarded
2026-04-25 08:19:52,375, INFO - MDC tags in MDE are valid
2026-04-25 08:19:52,376, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-04-25 08:20:00,341, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.1 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 184.94.200.2
 * cpanel-addons-production-feed: 184.94.200.2
 * cpanel-plugins: 184.94.200.2
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
Trying other mirror.


 One of the configured repositories failed (CentOS-7 - Base),
 and yum doesn't have enough cached data to continue. At this point the only
 safe thing yum can do is fail. There are a few ways to work "fix" this:

     1. Contact the upstream for the repository and get them to fix the problem.

     2. Reconfigure the baseurl/etc. for the repository, to point to a working
        upstream. This is most often useful if you are using a newer
        distribution release than is supported by the repository (and the
        packages for the previous distribution release still work).

     3. Run the command with the repository temporarily disabled
            yum --disablerepo=base ...

     4. Disable the repository permanently, so yum won't use it by default. Yum
        will then just ignore the repository until you permanently enable it
        again or use --enablerepo for temporary usage:

            yum-config-manager --disable base
        or
            subscription-manager repos --disable=base

     5. Configure the failing repository to be skipped, if it is unavailable.
        Note that yum will try to contact the repo. when it runs most commands,
        so will have to try and fail each time (and thus. yum will be be much
        slower). If it is a very temporary problem though, this is often a nice
        compromise:

            yum-config-manager --save --setopt=base.skip_if_unavailable=true

failure: repodata/repomd.xml from base: [Errno 256] No more mirrors to try.
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE (exit code: 1)
[*] exiting (21)

2026-04-25 08:20:00,341, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-04-25 08:20:00,342, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-04-25 08:20:01,115, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.11.1/status/28.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-04-25 08:20:01,115, INFO - End executing installer wrapper
2026-04-25 11:47:33,913, INFO - Start executing installer wrapper
2026-04-25 11:47:33,919, INFO - scrubbed proxy settings: {}
2026-04-25 11:47:33,919, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-04-25 11:47:34,012, INFO - MDE is installed
2026-04-25 11:47:34,012, INFO - Wait for MDE service to be available
2026-04-25 11:47:36,682, INFO - MDE is onboarded
2026-04-25 11:47:37,672, INFO - MDC tags in MDE are valid
2026-04-25 11:47:37,673, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-04-25 11:47:46,746, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.1 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
error: rpmdb: BDB0113 Thread/process 2678/139945350293568 failed: BDB1507 Thread died in Berkeley DB library
error: db5 error(-30973) from dbenv->failchk: BDB0087 DB_RUNRECOVERY: Fatal error, run database recovery
error: cannot open Packages index using db5 -  (-30973)
error: cannot open Packages database in /var/lib/rpm
error: rpmdb: BDB0113 Thread/process 2678/139945350293568 failed: BDB1507 Thread died in Berkeley DB library
error: db5 error(-30973) from dbenv->failchk: BDB0087 DB_RUNRECOVERY: Fatal error, run database recovery
error: cannot open Packages database in /var/lib/rpm
error: rpmdb: BDB0113 Thread/process 2678/139945350293568 failed: BDB1507 Thread died in Berkeley DB library
error: db5 error(-30973) from dbenv->failchk: BDB0087 DB_RUNRECOVERY: Fatal error, run database recovery
error: cannot open Packages index using db5 -  (-30973)
error: cannot open Packages database in /var/lib/rpm
error: rpmdb: BDB0113 Thread/process 2678/139945350293568 failed: BDB1507 Thread died in Berkeley DB library
error: db5 error(-30973) from dbenv->failchk: BDB0087 DB_RUNRECOVERY: Fatal error, run database recovery
error: cannot open Packages database in /var/lib/rpm
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] MDE package is not installed. Please install it with --install option
[*] exiting (20)

2026-04-25 11:47:46,746, WARNING - Microsoft Defender for Endpoint installation failed with error code 20, error message Mde not installed
2026-04-25 11:47:46,747, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-04-25 11:47:47,798, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.11.1/status/29.status, Status= success, Code= 0, Message= {"healthIssues": ["engine not available"], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-04-25 11:47:47,800, INFO - End executing installer wrapper
2026-04-26 08:45:25,146, INFO - Start executing installer wrapper
2026-04-26 08:45:25,166, INFO - scrubbed proxy settings: {}
2026-04-26 08:45:25,167, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-04-26 08:45:25,667, INFO - MDE is installed
2026-04-26 08:45:25,667, INFO - Wait for MDE service to be available
2026-04-26 08:45:31,206, INFO - MDE is onboarded
2026-04-26 08:45:35,404, INFO - MDC tags in MDE are valid
2026-04-26 08:45:35,404, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-04-26 08:45:45,387, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.1 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 89.222.122.167
 * cpanel-addons-production-feed: 89.222.122.167
 * cpanel-plugins: 89.222.122.167
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
Trying other mirror.


 One of the configured repositories failed (CentOS-7 - Base),
 and yum doesn't have enough cached data to continue. At this point the only
 safe thing yum can do is fail. There are a few ways to work "fix" this:

     1. Contact the upstream for the repository and get them to fix the problem.

     2. Reconfigure the baseurl/etc. for the repository, to point to a working
        upstream. This is most often useful if you are using a newer
        distribution release than is supported by the repository (and the
        packages for the previous distribution release still work).

     3. Run the command with the repository temporarily disabled
            yum --disablerepo=base ...

     4. Disable the repository permanently, so yum won't use it by default. Yum
        will then just ignore the repository until you permanently enable it
        again or use --enablerepo for temporary usage:

            yum-config-manager --disable base
        or
            subscription-manager repos --disable=base

     5. Configure the failing repository to be skipped, if it is unavailable.
        Note that yum will try to contact the repo. when it runs most commands,
        so will have to try and fail each time (and thus. yum will be be much
        slower). If it is a very temporary problem though, this is often a nice
        compromise:

            yum-config-manager --save --setopt=base.skip_if_unavailable=true

failure: repodata/repomd.xml from base: [Errno 256] No more mirrors to try.
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE (exit code: 1)
[*] exiting (21)

2026-04-26 08:45:45,388, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-04-26 08:45:45,388, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-04-26 08:45:47,042, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.11.1/status/29.status, Status= success, Code= 0, Message= {"healthIssues": ["engine not available"], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-04-26 08:45:47,047, INFO - End executing installer wrapper
2026-04-27 07:19:24,386, INFO - Start executing installer wrapper
2026-04-27 07:19:24,388, INFO - scrubbed proxy settings: {}
2026-04-27 07:19:24,388, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-04-27 07:19:24,457, INFO - MDE is installed
2026-04-27 07:19:24,458, INFO - Wait for MDE service to be available
2026-04-27 07:19:25,222, INFO - MDE is onboarded
2026-04-27 07:19:25,525, INFO - MDC tags in MDE are valid
2026-04-27 07:19:25,525, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-04-27 07:19:29,378, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.1 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 89.222.122.163
 * cpanel-addons-production-feed: 89.222.122.163
 * cpanel-plugins: 89.222.122.163
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
Trying other mirror.


 One of the configured repositories failed (CentOS-7 - Base),
 and yum doesn't have enough cached data to continue. At this point the only
 safe thing yum can do is fail. There are a few ways to work "fix" this:

     1. Contact the upstream for the repository and get them to fix the problem.

     2. Reconfigure the baseurl/etc. for the repository, to point to a working
        upstream. This is most often useful if you are using a newer
        distribution release than is supported by the repository (and the
        packages for the previous distribution release still work).

     3. Run the command with the repository temporarily disabled
            yum --disablerepo=base ...

     4. Disable the repository permanently, so yum won't use it by default. Yum
        will then just ignore the repository until you permanently enable it
        again or use --enablerepo for temporary usage:

            yum-config-manager --disable base
        or
            subscription-manager repos --disable=base

     5. Configure the failing repository to be skipped, if it is unavailable.
        Note that yum will try to contact the repo. when it runs most commands,
        so will have to try and fail each time (and thus. yum will be be much
        slower). If it is a very temporary problem though, this is often a nice
        compromise:

            yum-config-manager --save --setopt=base.skip_if_unavailable=true

failure: repodata/repomd.xml from base: [Errno 256] No more mirrors to try.
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE (exit code: 1)
[*] exiting (21)

2026-04-27 07:19:29,379, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-04-27 07:19:29,379, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-04-27 07:19:29,735, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.11.1/status/29.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-04-27 07:19:29,736, INFO - End executing installer wrapper
2026-04-28 07:18:22,499, INFO - Start executing installer wrapper
2026-04-28 07:18:22,501, INFO - scrubbed proxy settings: {}
2026-04-28 07:18:22,501, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-04-28 07:18:22,581, INFO - MDE is installed
2026-04-28 07:18:22,582, INFO - Wait for MDE service to be available
2026-04-28 07:18:23,602, INFO - MDE is onboarded
2026-04-28 07:18:23,908, INFO - MDC tags in MDE are valid
2026-04-28 07:18:23,909, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-04-28 07:18:27,686, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.1 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 89.222.122.167
 * cpanel-addons-production-feed: 89.222.122.167
 * cpanel-plugins: 89.222.122.167
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
Trying other mirror.


 One of the configured repositories failed (CentOS-7 - Base),
 and yum doesn't have enough cached data to continue. At this point the only
 safe thing yum can do is fail. There are a few ways to work "fix" this:

     1. Contact the upstream for the repository and get them to fix the problem.

     2. Reconfigure the baseurl/etc. for the repository, to point to a working
        upstream. This is most often useful if you are using a newer
        distribution release than is supported by the repository (and the
        packages for the previous distribution release still work).

     3. Run the command with the repository temporarily disabled
            yum --disablerepo=base ...

     4. Disable the repository permanently, so yum won't use it by default. Yum
        will then just ignore the repository until you permanently enable it
        again or use --enablerepo for temporary usage:

            yum-config-manager --disable base
        or
            subscription-manager repos --disable=base

     5. Configure the failing repository to be skipped, if it is unavailable.
        Note that yum will try to contact the repo. when it runs most commands,
        so will have to try and fail each time (and thus. yum will be be much
        slower). If it is a very temporary problem though, this is often a nice
        compromise:

            yum-config-manager --save --setopt=base.skip_if_unavailable=true

failure: repodata/repomd.xml from base: [Errno 256] No more mirrors to try.
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE (exit code: 1)
[*] exiting (21)

2026-04-28 07:18:27,686, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-04-28 07:18:27,687, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-04-28 07:18:28,023, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.11.1/status/29.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-04-28 07:18:28,025, INFO - End executing installer wrapper
2026-04-29 07:21:26,294, INFO - Start executing installer wrapper
2026-04-29 07:21:26,307, INFO - scrubbed proxy settings: {}
2026-04-29 07:21:26,307, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-04-29 07:21:26,410, INFO - MDE is installed
2026-04-29 07:21:26,411, INFO - Wait for MDE service to be available
2026-04-29 07:21:27,814, INFO - MDE is onboarded
2026-04-29 07:21:28,717, INFO - MDC tags in MDE are valid
2026-04-29 07:21:28,718, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-04-29 07:21:39,950, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.1 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 89.222.122.163
 * cpanel-addons-production-feed: 89.222.122.163
 * cpanel-plugins: 89.222.122.163
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
Trying other mirror.


 One of the configured repositories failed (CentOS-7 - Base),
 and yum doesn't have enough cached data to continue. At this point the only
 safe thing yum can do is fail. There are a few ways to work "fix" this:

     1. Contact the upstream for the repository and get them to fix the problem.

     2. Reconfigure the baseurl/etc. for the repository, to point to a working
        upstream. This is most often useful if you are using a newer
        distribution release than is supported by the repository (and the
        packages for the previous distribution release still work).

     3. Run the command with the repository temporarily disabled
            yum --disablerepo=base ...

     4. Disable the repository permanently, so yum won't use it by default. Yum
        will then just ignore the repository until you permanently enable it
        again or use --enablerepo for temporary usage:

            yum-config-manager --disable base
        or
            subscription-manager repos --disable=base

     5. Configure the failing repository to be skipped, if it is unavailable.
        Note that yum will try to contact the repo. when it runs most commands,
        so will have to try and fail each time (and thus. yum will be be much
        slower). If it is a very temporary problem though, this is often a nice
        compromise:

            yum-config-manager --save --setopt=base.skip_if_unavailable=true

failure: repodata/repomd.xml from base: [Errno 256] No more mirrors to try.
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE (exit code: 1)
[*] exiting (21)

2026-04-29 07:21:39,950, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-04-29 07:21:39,967, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-04-29 07:21:40,863, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.11.1/status/29.status, Status= success, Code= 0, Message= {"healthIssues": ["engine not available"], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-04-29 07:21:40,931, INFO - End executing installer wrapper
2026-04-30 07:23:47,898, INFO - Start executing installer wrapper
2026-04-30 07:23:47,900, INFO - scrubbed proxy settings: {}
2026-04-30 07:23:47,900, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-04-30 07:23:47,971, INFO - MDE is installed
2026-04-30 07:23:47,971, INFO - Wait for MDE service to be available
2026-04-30 07:23:49,190, INFO - MDE is onboarded
2026-04-30 07:23:49,594, INFO - MDC tags in MDE are valid
2026-04-30 07:23:49,594, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-04-30 07:23:53,954, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.1 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 89.222.122.167
 * cpanel-addons-production-feed: 89.222.122.167
 * cpanel-plugins: 89.222.122.167
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
Trying other mirror.


 One of the configured repositories failed (CentOS-7 - Base),
 and yum doesn't have enough cached data to continue. At this point the only
 safe thing yum can do is fail. There are a few ways to work "fix" this:

     1. Contact the upstream for the repository and get them to fix the problem.

     2. Reconfigure the baseurl/etc. for the repository, to point to a working
        upstream. This is most often useful if you are using a newer
        distribution release than is supported by the repository (and the
        packages for the previous distribution release still work).

     3. Run the command with the repository temporarily disabled
            yum --disablerepo=base ...

     4. Disable the repository permanently, so yum won't use it by default. Yum
        will then just ignore the repository until you permanently enable it
        again or use --enablerepo for temporary usage:

            yum-config-manager --disable base
        or
            subscription-manager repos --disable=base

     5. Configure the failing repository to be skipped, if it is unavailable.
        Note that yum will try to contact the repo. when it runs most commands,
        so will have to try and fail each time (and thus. yum will be be much
        slower). If it is a very temporary problem though, this is often a nice
        compromise:

            yum-config-manager --save --setopt=base.skip_if_unavailable=true

failure: repodata/repomd.xml from base: [Errno 256] No more mirrors to try.
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE (exit code: 1)
[*] exiting (21)

2026-04-30 07:23:53,954, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-04-30 07:23:53,955, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-04-30 07:23:54,402, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.11.1/status/29.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-04-30 07:23:54,403, INFO - End executing installer wrapper
2026-05-01 07:28:19,000, INFO - Start executing installer wrapper
2026-05-01 07:28:19,034, INFO - scrubbed proxy settings: {}
2026-05-01 07:28:19,034, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-05-01 07:28:19,262, INFO - MDE is installed
2026-05-01 07:28:19,262, INFO - Wait for MDE service to be available
2026-05-01 07:28:22,613, INFO - MDE is onboarded
2026-05-01 07:28:24,227, INFO - MDC tags in MDE are valid
2026-05-01 07:28:24,228, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-05-01 07:28:47,569, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.1 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 89.222.122.163
 * cpanel-addons-production-feed: 89.222.122.163
 * cpanel-plugins: 89.222.122.163
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
Trying other mirror.


 One of the configured repositories failed (CentOS-7 - Base),
 and yum doesn't have enough cached data to continue. At this point the only
 safe thing yum can do is fail. There are a few ways to work "fix" this:

     1. Contact the upstream for the repository and get them to fix the problem.

     2. Reconfigure the baseurl/etc. for the repository, to point to a working
        upstream. This is most often useful if you are using a newer
        distribution release than is supported by the repository (and the
        packages for the previous distribution release still work).

     3. Run the command with the repository temporarily disabled
            yum --disablerepo=base ...

     4. Disable the repository permanently, so yum won't use it by default. Yum
        will then just ignore the repository until you permanently enable it
        again or use --enablerepo for temporary usage:

            yum-config-manager --disable base
        or
            subscription-manager repos --disable=base

     5. Configure the failing repository to be skipped, if it is unavailable.
        Note that yum will try to contact the repo. when it runs most commands,
        so will have to try and fail each time (and thus. yum will be be much
        slower). If it is a very temporary problem though, this is often a nice
        compromise:

            yum-config-manager --save --setopt=base.skip_if_unavailable=true

failure: repodata/repomd.xml from base: [Errno 256] No more mirrors to try.
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE (exit code: 1)
[*] exiting (21)

2026-05-01 07:28:47,569, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-05-01 07:28:47,578, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-05-01 07:28:50,151, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.11.1/status/29.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-05-01 07:28:50,246, INFO - End executing installer wrapper
2026-05-02 07:23:49,833, INFO - Start executing installer wrapper
2026-05-02 07:23:49,851, INFO - scrubbed proxy settings: {}
2026-05-02 07:23:49,851, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-05-02 07:23:50,225, INFO - MDE is installed
2026-05-02 07:23:50,226, INFO - Wait for MDE service to be available
2026-05-02 07:27:51,045, INFO - MDE is onboarded
2026-05-02 07:31:39,890, INFO - MDC tags in MDE are valid
2026-05-02 07:31:39,984, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-05-02 08:14:45,823, ERROR - MDE process stdout after timeout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.1 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 184.94.200.2
 * cpanel-addons-production-feed: 184.94.200.2
 * cpanel-plugins: 184.94.200.2
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
Trying other mirror.


 One of the configured repositories failed (CentOS-7 - Base),
 and yum doesn't have enough cached data to continue. At this point the only
 safe thing yum can do is fail. There are a few ways to work "fix" this:

     1. Contact the upstream for the repository and get them to fix the problem.

     2. Reconfigure the baseurl/etc. for the repository, to point to a working
        upstream. This is most often useful if you are using a newer
        distribution release than is supported by the repository (and the
        packages for the previous distribution release still work).

     3. Run the command with the repository temporarily disabled
            yum --disablerepo=base ...

     4. Disable the repository permanently, so yum won't use it by default. Yum
        will then just ignore the repository until you permanently enable it
        again or use --enablerepo for temporary usage:

            yum-config-manager --disable base
        or
            subscription-manager repos --disable=base

     5. Configure the failing repository to be skipped, if it is unavailable.
        Note that yum will try to contact the repo. when it runs most commands,
        so will have to try and fail each time (and thus. yum will be be much
        slower). If it is a very temporary problem though, this is often a nice
        compromise:

            yum-config-manager --save --setopt=base.skip_if_unavailable=true

failure: repodata/repomd.xml from base: [Errno 256] No more mirrors to try.
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
1

2026-05-02 08:14:45,840, WARNING - Microsoft Defender for Endpoint update timed out.
2026-05-02 08:14:45,841, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-05-02 08:14:55,366, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.11.1/status/29.status, Status= success, Code= 0, Message= {"healthIssues": ["engine not available"], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-05-02 08:14:55,551, INFO - End executing installer wrapper
2026-05-02 15:52:24,195, INFO - Start executing installer wrapper
2026-05-02 15:52:24,229, INFO - scrubbed proxy settings: {}
2026-05-02 15:52:24,229, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-05-02 15:52:24,551, INFO - MDE is installed
2026-05-02 15:52:24,551, INFO - Wait for MDE service to be available
2026-05-02 15:52:27,969, INFO - MDE is onboarded
2026-05-02 15:52:29,799, INFO - MDC tags in MDE are valid
2026-05-02 15:52:29,799, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-05-02 15:52:46,941, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.1 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 184.94.200.2
 * cpanel-addons-production-feed: 184.94.200.2
 * cpanel-plugins: 184.94.200.2
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
Trying other mirror.


 One of the configured repositories failed (CentOS-7 - Base),
 and yum doesn't have enough cached data to continue. At this point the only
 safe thing yum can do is fail. There are a few ways to work "fix" this:

     1. Contact the upstream for the repository and get them to fix the problem.

     2. Reconfigure the baseurl/etc. for the repository, to point to a working
        upstream. This is most often useful if you are using a newer
        distribution release than is supported by the repository (and the
        packages for the previous distribution release still work).

     3. Run the command with the repository temporarily disabled
            yum --disablerepo=base ...

     4. Disable the repository permanently, so yum won't use it by default. Yum
        will then just ignore the repository until you permanently enable it
        again or use --enablerepo for temporary usage:

            yum-config-manager --disable base
        or
            subscription-manager repos --disable=base

     5. Configure the failing repository to be skipped, if it is unavailable.
        Note that yum will try to contact the repo. when it runs most commands,
        so will have to try and fail each time (and thus. yum will be be much
        slower). If it is a very temporary problem though, this is often a nice
        compromise:

            yum-config-manager --save --setopt=base.skip_if_unavailable=true

failure: repodata/repomd.xml from base: [Errno 256] No more mirrors to try.
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE (exit code: 1)
[*] exiting (21)

2026-05-02 15:52:46,941, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-05-02 15:52:46,942, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-05-02 15:52:48,763, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.11.1/status/30.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-05-02 15:52:48,763, INFO - End executing installer wrapper
2026-05-03 08:23:01,688, INFO - Start executing installer wrapper
2026-05-03 08:23:01,713, INFO - scrubbed proxy settings: {}
2026-05-03 08:23:01,713, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-05-03 08:23:01,881, INFO - MDE is installed
2026-05-03 08:23:01,881, INFO - Wait for MDE service to be available
2026-05-03 08:23:02,681, INFO - start parsing onboarding script
2026-05-03 08:23:02,681, INFO - decode onboarding script successfully
2026-05-03 08:23:02,698, INFO - parse onboarding script successfully
2026-05-03 08:23:02,698, INFO - Starting onboarding script...
2026-05-03 08:23:02,698, INFO - Checking if Mde is installed
2026-05-03 08:23:02,699, INFO - Mde is installed: True
2026-05-03 08:23:02,699, INFO - Removing offboarding file if exists
2026-05-03 08:23:04,704, INFO - Onboarding...
2026-05-03 08:23:04,704, INFO - Generating /etc/opt/microsoft/mdatp/mdatp_onboard.json...
2026-05-03 08:23:04,924, INFO - Onboarding done
2026-05-03 08:23:04,924, INFO - Checking if Mde is healthy after onboarding
2026-05-03 08:25:03,908, INFO - Onboarding succeeded
2026-05-03 08:25:19,003, INFO - MDC tags in MDE are valid
2026-05-03 08:25:19,011, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-05-03 08:26:21,338, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.1 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 89.222.122.163
 * cpanel-addons-production-feed: 89.222.122.163
 * cpanel-plugins: 89.222.122.163
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
Trying other mirror.


 One of the configured repositories failed (CentOS-7 - Base),
 and yum doesn't have enough cached data to continue. At this point the only
 safe thing yum can do is fail. There are a few ways to work "fix" this:

     1. Contact the upstream for the repository and get them to fix the problem.

     2. Reconfigure the baseurl/etc. for the repository, to point to a working
        upstream. This is most often useful if you are using a newer
        distribution release than is supported by the repository (and the
        packages for the previous distribution release still work).

     3. Run the command with the repository temporarily disabled
            yum --disablerepo=base ...

     4. Disable the repository permanently, so yum won't use it by default. Yum
        will then just ignore the repository until you permanently enable it
        again or use --enablerepo for temporary usage:

            yum-config-manager --disable base
        or
            subscription-manager repos --disable=base

     5. Configure the failing repository to be skipped, if it is unavailable.
        Note that yum will try to contact the repo. when it runs most commands,
        so will have to try and fail each time (and thus. yum will be be much
        slower). If it is a very temporary problem though, this is often a nice
        compromise:

            yum-config-manager --save --setopt=base.skip_if_unavailable=true

failure: repodata/repomd.xml from base: [Errno 256] No more mirrors to try.
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE (exit code: 1)
[*] exiting (21)

2026-05-03 08:26:21,338, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-05-03 08:26:21,346, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-05-03 08:26:26,810, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.11.1/status/30.status, Status= success, Code= 0, Message= {"healthIssues": ["engine not available"], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-05-03 08:26:26,818, INFO - End executing installer wrapper
2026-05-04 08:11:47,482, INFO - Start executing installer wrapper
2026-05-04 08:11:47,526, INFO - scrubbed proxy settings: {}
2026-05-04 08:11:47,526, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-05-04 08:11:48,395, INFO - MDE is installed
2026-05-04 08:11:48,396, INFO - Wait for MDE service to be available
2026-05-04 08:32:50,439, INFO - MDE is onboarded
2026-05-04 08:40:46,174, INFO - MDC tags in MDE are valid
2026-05-04 08:40:46,870, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-05-04 09:14:09,443, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.1 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 89.222.122.163
 * cpanel-addons-production-feed: 89.222.122.163
 * cpanel-plugins: 89.222.122.163
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
Trying other mirror.


 One of the configured repositories failed (CentOS-7 - Base),
 and yum doesn't have enough cached data to continue. At this point the only
 safe thing yum can do is fail. There are a few ways to work "fix" this:

     1. Contact the upstream for the repository and get them to fix the problem.

     2. Reconfigure the baseurl/etc. for the repository, to point to a working
        upstream. This is most often useful if you are using a newer
        distribution release than is supported by the repository (and the
        packages for the previous distribution release still work).

     3. Run the command with the repository temporarily disabled
            yum --disablerepo=base ...

     4. Disable the repository permanently, so yum won't use it by default. Yum
        will then just ignore the repository until you permanently enable it
        again or use --enablerepo for temporary usage:

            yum-config-manager --disable base
        or
            subscription-manager repos --disable=base

     5. Configure the failing repository to be skipped, if it is unavailable.
        Note that yum will try to contact the repo. when it runs most commands,
        so will have to try and fail each time (and thus. yum will be be much
        slower). If it is a very temporary problem though, this is often a nice
        compromise:

            yum-config-manager --save --setopt=base.skip_if_unavailable=true

failure: repodata/repomd.xml from base: [Errno 256] No more mirrors to try.
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE (exit code: 1)
[*] exiting (21)

2026-05-04 09:14:09,460, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-05-04 09:14:09,478, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-05-04 09:14:12,271, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.11.1/status/30.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-05-04 09:14:12,272, INFO - End executing installer wrapper
2026-05-04 09:48:55,768, INFO - Start executing installer wrapper
2026-05-04 09:48:55,785, INFO - scrubbed proxy settings: {}
2026-05-04 09:48:55,785, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-05-04 09:48:56,042, INFO - MDE is installed
2026-05-04 09:48:56,043, INFO - Wait for MDE service to be available
2026-05-04 09:49:01,103, INFO - MDE is onboarded
2026-05-04 09:49:03,272, INFO - MDC tags in MDE are valid
2026-05-04 09:49:03,280, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-06-03 18:51:29,864, INFO - Start executing installer wrapper
2026-06-03 18:51:29,942, INFO - scrubbed proxy settings: {}
2026-06-03 18:51:29,942, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-06-03 18:51:30,037, INFO - MDE is installed
2026-06-03 18:51:30,038, INFO - Wait for MDE service to be available
2026-06-03 18:51:30,880, INFO - MDE is onboarded
2026-06-03 18:51:31,085, INFO - Start to run the tags set command: src/mde_installer.latest.sh --debug --tag SecurityWorkspaceId 0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338 --tag AzureResourceId /subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow-new-june -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-06-03 18:51:33,737, INFO - MDE process stdout: --- mde_installer.sh v1.2.1 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[>] setting tag: (AzureResourceId, /subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow-new-june)
[>] Running command: mdatp edr tag set --name AzureResourceId --value /subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow-new-june
[i] tag SecurityWorkspaceId already set to value 0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338
[v] tags set.
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow-new-june"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[v] --- mde_installer.sh ended. ---
[*] exiting (0)

2026-06-03 18:51:33,737, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-06-03 18:51:38,936, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.1 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Determining fastest mirrors
 * EA4: 184.94.200.3
 * cpanel-addons-production-feed: 184.94.200.3
 * cpanel-plugins: 184.94.200.3
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
Trying other mirror.


 One of the configured repositories failed (CentOS-7 - Base),
 and yum doesn't have enough cached data to continue. At this point the only
 safe thing yum can do is fail. There are a few ways to work "fix" this:

     1. Contact the upstream for the repository and get them to fix the problem.

     2. Reconfigure the baseurl/etc. for the repository, to point to a working
        upstream. This is most often useful if you are using a newer
        distribution release than is supported by the repository (and the
        packages for the previous distribution release still work).

     3. Run the command with the repository temporarily disabled
            yum --disablerepo=base ...

     4. Disable the repository permanently, so yum won't use it by default. Yum
        will then just ignore the repository until you permanently enable it
        again or use --enablerepo for temporary usage:

            yum-config-manager --disable base
        or
            subscription-manager repos --disable=base

     5. Configure the failing repository to be skipped, if it is unavailable.
        Note that yum will try to contact the repo. when it runs most commands,
        so will have to try and fail each time (and thus. yum will be be much
        slower). If it is a very temporary problem though, this is often a nice
        compromise:

            yum-config-manager --save --setopt=base.skip_if_unavailable=true

failure: repodata/repomd.xml from base: [Errno 256] No more mirrors to try.
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow-new-june"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE (exit code: 1)
[*] exiting (21)

2026-06-03 18:51:38,937, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-06-03 18:51:38,937, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-06-03 18:51:39,180, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.14.1/status/0.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow-new-june", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-06-03 18:51:39,181, INFO - End executing installer wrapper
2026-06-04 05:55:55,038, INFO - Start executing installer wrapper
2026-06-04 05:55:55,039, INFO - scrubbed proxy settings: {}
2026-06-04 05:55:55,039, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-06-04 05:55:55,109, INFO - MDE is installed
2026-06-04 05:55:55,110, INFO - Wait for MDE service to be available
2026-06-04 05:55:55,586, INFO - MDE is onboarded
2026-06-04 05:55:55,988, INFO - MDC tags in MDE are valid
2026-06-04 05:55:55,988, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-06-04 05:56:00,356, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.1 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 89.222.122.163
 * cpanel-addons-production-feed: 89.222.122.163
 * cpanel-plugins: 89.222.122.163
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
Trying other mirror.


 One of the configured repositories failed (CentOS-7 - Base),
 and yum doesn't have enough cached data to continue. At this point the only
 safe thing yum can do is fail. There are a few ways to work "fix" this:

     1. Contact the upstream for the repository and get them to fix the problem.

     2. Reconfigure the baseurl/etc. for the repository, to point to a working
        upstream. This is most often useful if you are using a newer
        distribution release than is supported by the repository (and the
        packages for the previous distribution release still work).

     3. Run the command with the repository temporarily disabled
            yum --disablerepo=base ...

     4. Disable the repository permanently, so yum won't use it by default. Yum
        will then just ignore the repository until you permanently enable it
        again or use --enablerepo for temporary usage:

            yum-config-manager --disable base
        or
            subscription-manager repos --disable=base

     5. Configure the failing repository to be skipped, if it is unavailable.
        Note that yum will try to contact the repo. when it runs most commands,
        so will have to try and fail each time (and thus. yum will be be much
        slower). If it is a very temporary problem though, this is often a nice
        compromise:

            yum-config-manager --save --setopt=base.skip_if_unavailable=true

failure: repodata/repomd.xml from base: [Errno 256] No more mirrors to try.
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow-new-june"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE (exit code: 1)
[*] exiting (21)

2026-06-04 05:56:00,357, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-06-04 05:56:00,357, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-06-04 05:56:00,680, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.14.1/status/0.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow-new-june", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-06-04 05:56:00,681, INFO - End executing installer wrapper
2026-06-04 17:26:29,252, INFO - Start executing installer wrapper
2026-06-04 17:26:29,266, INFO - scrubbed proxy settings: {}
2026-06-04 17:26:29,266, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-06-04 17:26:29,366, INFO - MDE is installed
2026-06-04 17:26:29,366, INFO - Wait for MDE service to be available
2026-06-04 17:26:29,570, INFO - start parsing onboarding script
2026-06-04 17:26:29,571, INFO - decode onboarding script successfully
2026-06-04 17:26:29,572, INFO - parse onboarding script successfully
2026-06-04 17:26:29,572, INFO - Starting onboarding script...
2026-06-04 17:26:29,572, INFO - Checking if Mde is installed
2026-06-04 17:26:29,572, INFO - Mde is installed: True
2026-06-04 17:26:29,572, INFO - Removing offboarding file if exists
2026-06-04 17:26:31,590, INFO - Onboarding...
2026-06-04 17:26:31,591, INFO - Generating /etc/opt/microsoft/mdatp/mdatp_onboard.json...
2026-06-04 17:26:31,604, INFO - Onboarding done
2026-06-04 17:26:31,605, INFO - Checking if Mde is healthy after onboarding
2026-06-04 17:26:47,016, INFO - Onboarding succeeded
2026-06-04 17:26:47,715, INFO - MDC tags in MDE are valid
2026-06-04 17:26:47,716, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-06-04 17:26:54,071, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.1 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 89.222.122.163
 * cpanel-addons-production-feed: 89.222.122.163
 * cpanel-plugins: 89.222.122.163
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
Trying other mirror.


 One of the configured repositories failed (CentOS-7 - Base),
 and yum doesn't have enough cached data to continue. At this point the only
 safe thing yum can do is fail. There are a few ways to work "fix" this:

     1. Contact the upstream for the repository and get them to fix the problem.

     2. Reconfigure the baseurl/etc. for the repository, to point to a working
        upstream. This is most often useful if you are using a newer
        distribution release than is supported by the repository (and the
        packages for the previous distribution release still work).

     3. Run the command with the repository temporarily disabled
            yum --disablerepo=base ...

     4. Disable the repository permanently, so yum won't use it by default. Yum
        will then just ignore the repository until you permanently enable it
        again or use --enablerepo for temporary usage:

            yum-config-manager --disable base
        or
            subscription-manager repos --disable=base

     5. Configure the failing repository to be skipped, if it is unavailable.
        Note that yum will try to contact the repo. when it runs most commands,
        so will have to try and fail each time (and thus. yum will be be much
        slower). If it is a very temporary problem though, this is often a nice
        compromise:

            yum-config-manager --save --setopt=base.skip_if_unavailable=true

failure: repodata/repomd.xml from base: [Errno 256] No more mirrors to try.
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow-new-june"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE (exit code: 1)
[*] exiting (21)

2026-06-04 17:26:54,071, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-06-04 17:26:54,072, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-06-04 17:26:54,631, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.14.1/status/0.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow-new-june", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-06-04 17:26:54,632, INFO - End executing installer wrapper
2026-06-05 15:25:10,629, INFO - Start executing installer wrapper
2026-06-05 15:25:10,630, INFO - scrubbed proxy settings: {}
2026-06-05 15:25:10,630, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-06-05 15:25:10,706, INFO - MDE is installed
2026-06-05 15:25:10,707, INFO - Wait for MDE service to be available
2026-06-05 15:25:11,318, INFO - MDE is onboarded
2026-06-05 15:25:11,614, INFO - MDC tags in MDE are valid
2026-06-05 15:25:11,615, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-06-05 15:25:15,176, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.1 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 89.222.122.167
 * cpanel-addons-production-feed: 89.222.122.167
 * cpanel-plugins: 89.222.122.167
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
Trying other mirror.


 One of the configured repositories failed (CentOS-7 - Base),
 and yum doesn't have enough cached data to continue. At this point the only
 safe thing yum can do is fail. There are a few ways to work "fix" this:

     1. Contact the upstream for the repository and get them to fix the problem.

     2. Reconfigure the baseurl/etc. for the repository, to point to a working
        upstream. This is most often useful if you are using a newer
        distribution release than is supported by the repository (and the
        packages for the previous distribution release still work).

     3. Run the command with the repository temporarily disabled
            yum --disablerepo=base ...

     4. Disable the repository permanently, so yum won't use it by default. Yum
        will then just ignore the repository until you permanently enable it
        again or use --enablerepo for temporary usage:

            yum-config-manager --disable base
        or
            subscription-manager repos --disable=base

     5. Configure the failing repository to be skipped, if it is unavailable.
        Note that yum will try to contact the repo. when it runs most commands,
        so will have to try and fail each time (and thus. yum will be be much
        slower). If it is a very temporary problem though, this is often a nice
        compromise:

            yum-config-manager --save --setopt=base.skip_if_unavailable=true

failure: repodata/repomd.xml from base: [Errno 256] No more mirrors to try.
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow-new-june"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE (exit code: 1)
[*] exiting (21)

2026-06-05 15:25:15,176, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-06-05 15:25:15,177, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-06-05 15:25:15,518, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.14.1/status/0.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow-new-june", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-06-05 15:25:15,519, INFO - End executing installer wrapper
2026-06-05 15:26:44,918, INFO - Start executing installer wrapper
2026-06-05 15:26:44,925, INFO - scrubbed proxy settings: {}
2026-06-05 15:26:44,925, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-06-05 15:26:45,018, INFO - MDE is installed
2026-06-05 15:26:45,018, INFO - Wait for MDE service to be available
2026-06-05 15:26:45,185, INFO - start parsing onboarding script
2026-06-05 15:26:45,186, INFO - decode onboarding script successfully
2026-06-05 15:26:45,187, INFO - parse onboarding script successfully
2026-06-05 15:26:45,187, INFO - Starting onboarding script...
2026-06-05 15:26:45,187, INFO - Checking if Mde is installed
2026-06-05 15:26:45,187, INFO - Mde is installed: True
2026-06-05 15:26:45,187, INFO - Removing offboarding file if exists
2026-06-05 15:26:47,191, INFO - Onboarding...
2026-06-05 15:26:47,192, INFO - Generating /etc/opt/microsoft/mdatp/mdatp_onboard.json...
2026-06-05 15:26:47,230, INFO - Onboarding done
2026-06-05 15:26:47,231, INFO - Checking if Mde is healthy after onboarding
2026-06-05 15:27:03,069, INFO - Onboarding succeeded
2026-06-05 15:27:03,666, INFO - MDC tags in MDE are valid
2026-06-05 15:27:03,667, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-06-05 15:27:10,044, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.1 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 89.222.122.167
 * cpanel-addons-production-feed: 89.222.122.167
 * cpanel-plugins: 89.222.122.167
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
Trying other mirror.


 One of the configured repositories failed (CentOS-7 - Base),
 and yum doesn't have enough cached data to continue. At this point the only
 safe thing yum can do is fail. There are a few ways to work "fix" this:

     1. Contact the upstream for the repository and get them to fix the problem.

     2. Reconfigure the baseurl/etc. for the repository, to point to a working
        upstream. This is most often useful if you are using a newer
        distribution release than is supported by the repository (and the
        packages for the previous distribution release still work).

     3. Run the command with the repository temporarily disabled
            yum --disablerepo=base ...

     4. Disable the repository permanently, so yum won't use it by default. Yum
        will then just ignore the repository until you permanently enable it
        again or use --enablerepo for temporary usage:

            yum-config-manager --disable base
        or
            subscription-manager repos --disable=base

     5. Configure the failing repository to be skipped, if it is unavailable.
        Note that yum will try to contact the repo. when it runs most commands,
        so will have to try and fail each time (and thus. yum will be be much
        slower). If it is a very temporary problem though, this is often a nice
        compromise:

            yum-config-manager --save --setopt=base.skip_if_unavailable=true

failure: repodata/repomd.xml from base: [Errno 256] No more mirrors to try.
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow-new-june"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE (exit code: 1)
[*] exiting (21)

2026-06-05 15:27:10,044, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-06-05 15:27:10,045, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-06-05 15:27:10,680, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.14.1/status/0.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow-new-june", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-06-05 15:27:10,681, INFO - End executing installer wrapper
2026-06-05 16:38:53,232, INFO - Start executing installer wrapper
2026-06-05 16:38:53,232, INFO - scrubbed proxy settings: {}
2026-06-05 16:38:53,232, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-06-05 16:38:53,299, INFO - MDE is installed
2026-06-05 16:38:53,300, INFO - Wait for MDE service to be available
2026-06-05 16:38:53,790, INFO - MDE is onboarded
2026-06-05 16:38:54,093, INFO - MDC tags in MDE are valid
2026-06-05 16:38:54,094, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-06-05 16:38:58,358, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.1 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 89.222.122.167
 * cpanel-addons-production-feed: 89.222.122.167
 * cpanel-plugins: 89.222.122.167
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
Trying other mirror.


 One of the configured repositories failed (CentOS-7 - Base),
 and yum doesn't have enough cached data to continue. At this point the only
 safe thing yum can do is fail. There are a few ways to work "fix" this:

     1. Contact the upstream for the repository and get them to fix the problem.

     2. Reconfigure the baseurl/etc. for the repository, to point to a working
        upstream. This is most often useful if you are using a newer
        distribution release than is supported by the repository (and the
        packages for the previous distribution release still work).

     3. Run the command with the repository temporarily disabled
            yum --disablerepo=base ...

     4. Disable the repository permanently, so yum won't use it by default. Yum
        will then just ignore the repository until you permanently enable it
        again or use --enablerepo for temporary usage:

            yum-config-manager --disable base
        or
            subscription-manager repos --disable=base

     5. Configure the failing repository to be skipped, if it is unavailable.
        Note that yum will try to contact the repo. when it runs most commands,
        so will have to try and fail each time (and thus. yum will be be much
        slower). If it is a very temporary problem though, this is often a nice
        compromise:

            yum-config-manager --save --setopt=base.skip_if_unavailable=true

failure: repodata/repomd.xml from base: [Errno 256] No more mirrors to try.
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow-new-june"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE (exit code: 1)
[*] exiting (21)

2026-06-05 16:38:58,359, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-06-05 16:38:58,359, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-06-05 16:38:58,686, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.14.1/status/0.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow-new-june", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-06-05 16:38:58,687, INFO - End executing installer wrapper
2026-06-06 00:38:42,225, INFO - Start executing installer wrapper
2026-06-06 00:38:42,227, INFO - scrubbed proxy settings: {}
2026-06-06 00:38:42,227, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-06-06 00:38:42,299, INFO - MDE is installed
2026-06-06 00:38:42,299, INFO - Wait for MDE service to be available
2026-06-06 00:38:42,797, INFO - MDE is onboarded
2026-06-06 00:38:43,094, INFO - MDC tags in MDE are valid
2026-06-06 00:38:43,095, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-06-06 00:38:46,587, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.1 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 89.222.122.167
 * cpanel-addons-production-feed: 89.222.122.167
 * cpanel-plugins: 89.222.122.167
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
Trying other mirror.


 One of the configured repositories failed (CentOS-7 - Base),
 and yum doesn't have enough cached data to continue. At this point the only
 safe thing yum can do is fail. There are a few ways to work "fix" this:

     1. Contact the upstream for the repository and get them to fix the problem.

     2. Reconfigure the baseurl/etc. for the repository, to point to a working
        upstream. This is most often useful if you are using a newer
        distribution release than is supported by the repository (and the
        packages for the previous distribution release still work).

     3. Run the command with the repository temporarily disabled
            yum --disablerepo=base ...

     4. Disable the repository permanently, so yum won't use it by default. Yum
        will then just ignore the repository until you permanently enable it
        again or use --enablerepo for temporary usage:

            yum-config-manager --disable base
        or
            subscription-manager repos --disable=base

     5. Configure the failing repository to be skipped, if it is unavailable.
        Note that yum will try to contact the repo. when it runs most commands,
        so will have to try and fail each time (and thus. yum will be be much
        slower). If it is a very temporary problem though, this is often a nice
        compromise:

            yum-config-manager --save --setopt=base.skip_if_unavailable=true

failure: repodata/repomd.xml from base: [Errno 256] No more mirrors to try.
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow-new-june"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE (exit code: 1)
[*] exiting (21)

2026-06-06 00:38:46,588, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-06-06 00:38:46,588, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-06-06 00:38:46,920, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.14.1/status/0.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow-new-june", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-06-06 00:38:46,920, INFO - End executing installer wrapper
2026-06-07 00:34:30,743, INFO - Start executing installer wrapper
2026-06-07 00:34:30,761, INFO - scrubbed proxy settings: {}
2026-06-07 00:34:30,761, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-06-07 00:34:30,910, INFO - MDE is installed
2026-06-07 00:34:30,910, INFO - Wait for MDE service to be available
2026-06-07 00:34:34,452, INFO - MDE is onboarded
2026-06-07 00:34:35,821, INFO - MDC tags in MDE are valid
2026-06-07 00:34:35,828, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-06-07 00:34:56,702, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.1 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 89.222.122.167
 * cpanel-addons-production-feed: 89.222.122.167
 * cpanel-plugins: 89.222.122.167
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
Trying other mirror.


 One of the configured repositories failed (CentOS-7 - Base),
 and yum doesn't have enough cached data to continue. At this point the only
 safe thing yum can do is fail. There are a few ways to work "fix" this:

     1. Contact the upstream for the repository and get them to fix the problem.

     2. Reconfigure the baseurl/etc. for the repository, to point to a working
        upstream. This is most often useful if you are using a newer
        distribution release than is supported by the repository (and the
        packages for the previous distribution release still work).

     3. Run the command with the repository temporarily disabled
            yum --disablerepo=base ...

     4. Disable the repository permanently, so yum won't use it by default. Yum
        will then just ignore the repository until you permanently enable it
        again or use --enablerepo for temporary usage:

            yum-config-manager --disable base
        or
            subscription-manager repos --disable=base

     5. Configure the failing repository to be skipped, if it is unavailable.
        Note that yum will try to contact the repo. when it runs most commands,
        so will have to try and fail each time (and thus. yum will be be much
        slower). If it is a very temporary problem though, this is often a nice
        compromise:

            yum-config-manager --save --setopt=base.skip_if_unavailable=true

failure: repodata/repomd.xml from base: [Errno 256] No more mirrors to try.
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow-new-june"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE (exit code: 1)
[*] exiting (21)

2026-06-07 00:34:56,703, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-06-07 00:34:56,703, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-06-07 00:34:58,673, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.14.1/status/0.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow-new-june", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-06-07 00:34:58,839, INFO - End executing installer wrapper
2026-06-08 00:33:37,712, INFO - Start executing installer wrapper
2026-06-08 00:33:37,732, INFO - scrubbed proxy settings: {}
2026-06-08 00:33:37,732, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-06-08 00:33:37,906, INFO - MDE is installed
2026-06-08 00:33:37,906, INFO - Wait for MDE service to be available
2026-06-08 00:33:40,919, INFO - MDE is onboarded
2026-06-08 00:33:42,694, INFO - MDC tags in MDE are valid
2026-06-08 00:33:42,695, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-06-08 00:34:00,748, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.1 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 184.94.200.4
 * cpanel-addons-production-feed: 184.94.200.4
 * cpanel-plugins: 184.94.200.4
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
Trying other mirror.


 One of the configured repositories failed (CentOS-7 - Base),
 and yum doesn't have enough cached data to continue. At this point the only
 safe thing yum can do is fail. There are a few ways to work "fix" this:

     1. Contact the upstream for the repository and get them to fix the problem.

     2. Reconfigure the baseurl/etc. for the repository, to point to a working
        upstream. This is most often useful if you are using a newer
        distribution release than is supported by the repository (and the
        packages for the previous distribution release still work).

     3. Run the command with the repository temporarily disabled
            yum --disablerepo=base ...

     4. Disable the repository permanently, so yum won't use it by default. Yum
        will then just ignore the repository until you permanently enable it
        again or use --enablerepo for temporary usage:

            yum-config-manager --disable base
        or
            subscription-manager repos --disable=base

     5. Configure the failing repository to be skipped, if it is unavailable.
        Note that yum will try to contact the repo. when it runs most commands,
        so will have to try and fail each time (and thus. yum will be be much
        slower). If it is a very temporary problem though, this is often a nice
        compromise:

            yum-config-manager --save --setopt=base.skip_if_unavailable=true

failure: repodata/repomd.xml from base: [Errno 256] No more mirrors to try.
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow-new-june"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE (exit code: 1)
[*] exiting (21)

2026-06-08 00:34:00,749, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-06-08 00:34:00,756, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-06-08 00:34:03,058, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.14.1/status/0.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow-new-june", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-06-08 00:34:03,585, INFO - End executing installer wrapper
2026-06-09 00:48:56,797, INFO - Start executing installer wrapper
2026-06-09 00:48:56,826, INFO - scrubbed proxy settings: {}
2026-06-09 00:48:56,826, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-06-09 00:48:58,498, INFO - MDE is installed
2026-06-09 00:48:58,498, INFO - Wait for MDE service to be available
2026-06-09 00:49:06,054, INFO - MDE is onboarded
2026-06-09 00:49:09,581, INFO - MDC tags in MDE are valid
2026-06-09 00:49:09,582, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-06-09 00:49:36,406, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.1 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 89.222.122.161
 * cpanel-addons-production-feed: 89.222.122.161
 * cpanel-plugins: 89.222.122.161
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
Trying other mirror.


 One of the configured repositories failed (CentOS-7 - Base),
 and yum doesn't have enough cached data to continue. At this point the only
 safe thing yum can do is fail. There are a few ways to work "fix" this:

     1. Contact the upstream for the repository and get them to fix the problem.

     2. Reconfigure the baseurl/etc. for the repository, to point to a working
        upstream. This is most often useful if you are using a newer
        distribution release than is supported by the repository (and the
        packages for the previous distribution release still work).

     3. Run the command with the repository temporarily disabled
            yum --disablerepo=base ...

     4. Disable the repository permanently, so yum won't use it by default. Yum
        will then just ignore the repository until you permanently enable it
        again or use --enablerepo for temporary usage:

            yum-config-manager --disable base
        or
            subscription-manager repos --disable=base

     5. Configure the failing repository to be skipped, if it is unavailable.
        Note that yum will try to contact the repo. when it runs most commands,
        so will have to try and fail each time (and thus. yum will be be much
        slower). If it is a very temporary problem though, this is often a nice
        compromise:

            yum-config-manager --save --setopt=base.skip_if_unavailable=true

failure: repodata/repomd.xml from base: [Errno 256] No more mirrors to try.
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow-new-june"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE (exit code: 1)
[*] exiting (21)

2026-06-09 00:49:36,407, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-06-09 00:49:36,407, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-06-09 00:49:38,610, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.14.1/status/0.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow-new-june", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-06-09 00:49:38,641, INFO - End executing installer wrapper
2026-06-10 00:39:26,471, INFO - Start executing installer wrapper
2026-06-10 00:39:26,490, INFO - scrubbed proxy settings: {}
2026-06-10 00:39:26,490, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-06-10 00:39:26,735, INFO - MDE is installed
2026-06-10 00:39:26,735, INFO - Wait for MDE service to be available
2026-06-10 00:39:32,237, INFO - MDE is onboarded
2026-06-10 00:39:34,615, INFO - MDC tags in MDE are valid
2026-06-10 00:39:34,615, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-06-10 00:57:18,667, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.1 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 184.94.200.2
 * cpanel-addons-production-feed: 184.94.200.2
 * cpanel-plugins: 184.94.200.2
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
Trying other mirror.


 One of the configured repositories failed (CentOS-7 - Base),
 and yum doesn't have enough cached data to continue. At this point the only
 safe thing yum can do is fail. There are a few ways to work "fix" this:

     1. Contact the upstream for the repository and get them to fix the problem.

     2. Reconfigure the baseurl/etc. for the repository, to point to a working
        upstream. This is most often useful if you are using a newer
        distribution release than is supported by the repository (and the
        packages for the previous distribution release still work).

     3. Run the command with the repository temporarily disabled
            yum --disablerepo=base ...

     4. Disable the repository permanently, so yum won't use it by default. Yum
        will then just ignore the repository until you permanently enable it
        again or use --enablerepo for temporary usage:

            yum-config-manager --disable base
        or
            subscription-manager repos --disable=base

     5. Configure the failing repository to be skipped, if it is unavailable.
        Note that yum will try to contact the repo. when it runs most commands,
        so will have to try and fail each time (and thus. yum will be be much
        slower). If it is a very temporary problem though, this is often a nice
        compromise:

            yum-config-manager --save --setopt=base.skip_if_unavailable=true

failure: repodata/repomd.xml from base: [Errno 256] No more mirrors to try.
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow-new-june"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE (exit code: 1)
[*] exiting (21)

2026-06-10 00:57:18,683, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-06-10 00:57:18,704, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-06-10 00:57:23,281, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.14.1/status/0.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow-new-june", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-06-10 00:57:23,428, INFO - End executing installer wrapper
2026-06-10 23:24:54,614, INFO - Start executing installer wrapper
2026-06-10 23:24:54,625, INFO - scrubbed proxy settings: {}
2026-06-10 23:24:54,625, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-06-10 23:24:54,778, INFO - MDE is installed
2026-06-10 23:24:54,778, INFO - Wait for MDE service to be available
2026-06-10 23:24:58,546, INFO - MDE is onboarded
2026-06-10 23:24:59,825, INFO - MDC tags in MDE are valid
2026-06-10 23:24:59,826, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-06-10 23:25:14,419, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.1 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
error: rpmdb: BDB0113 Thread/process 11159/140024517027648 failed: BDB1507 Thread died in Berkeley DB library
error: db5 error(-30973) from dbenv->failchk: BDB0087 DB_RUNRECOVERY: Fatal error, run database recovery
error: cannot open Packages index using db5 -  (-30973)
error: cannot open Packages database in /var/lib/rpm
error: rpmdb: BDB0113 Thread/process 11159/140024517027648 failed: BDB1507 Thread died in Berkeley DB library
error: db5 error(-30973) from dbenv->failchk: BDB0087 DB_RUNRECOVERY: Fatal error, run database recovery
error: cannot open Packages database in /var/lib/rpm
error: rpmdb: BDB0113 Thread/process 11159/140024517027648 failed: BDB1507 Thread died in Berkeley DB library
error: db5 error(-30973) from dbenv->failchk: BDB0087 DB_RUNRECOVERY: Fatal error, run database recovery
error: cannot open Packages index using db5 -  (-30973)
error: cannot open Packages database in /var/lib/rpm
error: rpmdb: BDB0113 Thread/process 11159/140024517027648 failed: BDB1507 Thread died in Berkeley DB library
error: db5 error(-30973) from dbenv->failchk: BDB0087 DB_RUNRECOVERY: Fatal error, run database recovery
error: cannot open Packages database in /var/lib/rpm
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow-new-june"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] MDE package is not installed. Please install it with --install option
[*] exiting (20)

2026-06-10 23:25:14,420, WARNING - Microsoft Defender for Endpoint installation failed with error code 20, error message Mde not installed
2026-06-10 23:25:14,421, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-06-10 23:25:16,521, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.14.1/status/1.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow-new-june", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-06-10 23:25:16,522, INFO - End executing installer wrapper
2026-06-11 00:35:50,917, INFO - Start executing installer wrapper
2026-06-11 00:35:50,917, INFO - scrubbed proxy settings: {}
2026-06-11 00:35:50,917, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-06-11 00:35:51,083, INFO - MDE is installed
2026-06-11 00:35:51,083, INFO - Wait for MDE service to be available
2026-06-11 00:35:54,216, INFO - MDE is onboarded
2026-06-11 00:35:55,742, INFO - MDC tags in MDE are valid
2026-06-11 00:35:55,743, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-06-11 00:36:12,297, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.1 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
error: rpmdb: BDB0113 Thread/process 11159/140024517027648 failed: BDB1507 Thread died in Berkeley DB library
error: db5 error(-30973) from dbenv->failchk: BDB0087 DB_RUNRECOVERY: Fatal error, run database recovery
error: cannot open Packages index using db5 -  (-30973)
error: cannot open Packages database in /var/lib/rpm
error: rpmdb: BDB0113 Thread/process 11159/140024517027648 failed: BDB1507 Thread died in Berkeley DB library
error: db5 error(-30973) from dbenv->failchk: BDB0087 DB_RUNRECOVERY: Fatal error, run database recovery
error: cannot open Packages database in /var/lib/rpm
error: rpmdb: BDB0113 Thread/process 11159/140024517027648 failed: BDB1507 Thread died in Berkeley DB library
error: db5 error(-30973) from dbenv->failchk: BDB0087 DB_RUNRECOVERY: Fatal error, run database recovery
error: cannot open Packages index using db5 -  (-30973)
error: cannot open Packages database in /var/lib/rpm
error: rpmdb: BDB0113 Thread/process 11159/140024517027648 failed: BDB1507 Thread died in Berkeley DB library
error: db5 error(-30973) from dbenv->failchk: BDB0087 DB_RUNRECOVERY: Fatal error, run database recovery
error: cannot open Packages database in /var/lib/rpm
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow-new-june"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] MDE package is not installed. Please install it with --install option
[*] exiting (20)

2026-06-11 00:36:12,298, WARNING - Microsoft Defender for Endpoint installation failed with error code 20, error message Mde not installed
2026-06-11 00:36:12,299, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-06-11 00:36:14,228, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.14.1/status/1.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow-new-june", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-06-11 00:36:14,336, INFO - End executing installer wrapper
2026-06-19 16:58:59,359, INFO - Start executing installer wrapper
2026-06-19 16:58:59,374, INFO - scrubbed proxy settings: {}
2026-06-19 16:58:59,374, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-06-19 16:58:59,531, INFO - MDE is installed
2026-06-19 16:58:59,531, INFO - Wait for MDE service to be available
2026-06-19 16:58:59,774, INFO - start parsing onboarding script
2026-06-19 16:58:59,774, INFO - decode onboarding script successfully
2026-06-19 16:58:59,775, INFO - parse onboarding script successfully
2026-06-19 16:58:59,775, INFO - Starting onboarding script...
2026-06-19 16:58:59,776, INFO - Checking if Mde is installed
2026-06-19 16:58:59,776, INFO - Mde is installed: True
2026-06-19 16:58:59,776, INFO - Removing offboarding file if exists
2026-06-19 16:59:01,785, INFO - Onboarding...
2026-06-19 16:59:01,785, INFO - Generating /etc/opt/microsoft/mdatp/mdatp_onboard.json...
2026-06-19 16:59:01,844, INFO - Onboarding done
2026-06-19 16:59:01,844, INFO - Checking if Mde is healthy after onboarding
2026-06-19 16:59:17,544, INFO - Onboarding succeeded
2026-06-19 16:59:18,147, INFO - MDC tags in MDE are valid
2026-06-19 16:59:18,148, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-06-19 16:59:34,537, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.1 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Determining fastest mirrors
 * EA4: 89.222.122.167
 * cpanel-addons-production-feed: 89.222.122.167
 * cpanel-plugins: 89.222.122.167
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
Trying other mirror.


 One of the configured repositories failed (CentOS-7 - Base),
 and yum doesn't have enough cached data to continue. At this point the only
 safe thing yum can do is fail. There are a few ways to work "fix" this:

     1. Contact the upstream for the repository and get them to fix the problem.

     2. Reconfigure the baseurl/etc. for the repository, to point to a working
        upstream. This is most often useful if you are using a newer
        distribution release than is supported by the repository (and the
        packages for the previous distribution release still work).

     3. Run the command with the repository temporarily disabled
            yum --disablerepo=base ...

     4. Disable the repository permanently, so yum won't use it by default. Yum
        will then just ignore the repository until you permanently enable it
        again or use --enablerepo for temporary usage:

            yum-config-manager --disable base
        or
            subscription-manager repos --disable=base

     5. Configure the failing repository to be skipped, if it is unavailable.
        Note that yum will try to contact the repo. when it runs most commands,
        so will have to try and fail each time (and thus. yum will be be much
        slower). If it is a very temporary problem though, this is often a nice
        compromise:

            yum-config-manager --save --setopt=base.skip_if_unavailable=true

failure: repodata/repomd.xml from base: [Errno 256] No more mirrors to try.
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow-new-june"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE (exit code: 1)
[*] exiting (21)

2026-06-19 16:59:34,537, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-06-19 16:59:34,538, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-06-19 16:59:35,668, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.14.1/status/1.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow-new-june", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-06-19 16:59:35,669, INFO - End executing installer wrapper
2026-06-19 17:54:23,682, INFO - Start executing installer wrapper
2026-06-19 17:54:23,693, INFO - scrubbed proxy settings: {}
2026-06-19 17:54:23,693, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-06-19 17:54:23,783, INFO - MDE is installed
2026-06-19 17:54:23,783, INFO - Wait for MDE service to be available
2026-06-19 17:54:26,988, INFO - MDE is onboarded
2026-06-19 17:54:28,955, INFO - MDC tags in MDE are valid
2026-06-19 17:54:28,955, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-06-19 17:54:38,949, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.1 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 89.222.122.167
 * cpanel-addons-production-feed: 89.222.122.167
 * cpanel-plugins: 89.222.122.167
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
Trying other mirror.


 One of the configured repositories failed (CentOS-7 - Base),
 and yum doesn't have enough cached data to continue. At this point the only
 safe thing yum can do is fail. There are a few ways to work "fix" this:

     1. Contact the upstream for the repository and get them to fix the problem.

     2. Reconfigure the baseurl/etc. for the repository, to point to a working
        upstream. This is most often useful if you are using a newer
        distribution release than is supported by the repository (and the
        packages for the previous distribution release still work).

     3. Run the command with the repository temporarily disabled
            yum --disablerepo=base ...

     4. Disable the repository permanently, so yum won't use it by default. Yum
        will then just ignore the repository until you permanently enable it
        again or use --enablerepo for temporary usage:

            yum-config-manager --disable base
        or
            subscription-manager repos --disable=base

     5. Configure the failing repository to be skipped, if it is unavailable.
        Note that yum will try to contact the repo. when it runs most commands,
        so will have to try and fail each time (and thus. yum will be be much
        slower). If it is a very temporary problem though, this is often a nice
        compromise:

            yum-config-manager --save --setopt=base.skip_if_unavailable=true

failure: repodata/repomd.xml from base: [Errno 256] No more mirrors to try.
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow-new-june"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE (exit code: 1)
[*] exiting (21)

2026-06-19 17:54:38,950, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-06-19 17:54:38,950, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-06-19 17:54:40,017, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.14.1/status/2.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow-new-june", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-06-19 17:54:40,019, INFO - End executing installer wrapper
2026-06-19 20:00:09,505, INFO - Start executing installer wrapper
2026-06-19 20:00:09,506, INFO - scrubbed proxy settings: {}
2026-06-19 20:00:09,506, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-06-19 20:00:09,629, INFO - MDE is installed
2026-06-19 20:00:09,629, INFO - Wait for MDE service to be available
2026-06-19 20:00:12,887, INFO - MDE is onboarded
2026-06-19 20:00:14,466, INFO - MDC tags in MDE are valid
2026-06-19 20:00:14,485, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-06-19 20:00:37,516, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.1 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 89.222.122.167
 * cpanel-addons-production-feed: 89.222.122.167
 * cpanel-plugins: 89.222.122.167
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
Trying other mirror.


 One of the configured repositories failed (CentOS-7 - Base),
 and yum doesn't have enough cached data to continue. At this point the only
 safe thing yum can do is fail. There are a few ways to work "fix" this:

     1. Contact the upstream for the repository and get them to fix the problem.

     2. Reconfigure the baseurl/etc. for the repository, to point to a working
        upstream. This is most often useful if you are using a newer
        distribution release than is supported by the repository (and the
        packages for the previous distribution release still work).

     3. Run the command with the repository temporarily disabled
            yum --disablerepo=base ...

     4. Disable the repository permanently, so yum won't use it by default. Yum
        will then just ignore the repository until you permanently enable it
        again or use --enablerepo for temporary usage:

            yum-config-manager --disable base
        or
            subscription-manager repos --disable=base

     5. Configure the failing repository to be skipped, if it is unavailable.
        Note that yum will try to contact the repo. when it runs most commands,
        so will have to try and fail each time (and thus. yum will be be much
        slower). If it is a very temporary problem though, this is often a nice
        compromise:

            yum-config-manager --save --setopt=base.skip_if_unavailable=true

failure: repodata/repomd.xml from base: [Errno 256] No more mirrors to try.
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow-new-june"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE (exit code: 1)
[*] exiting (21)

2026-06-19 20:00:37,516, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-06-19 20:00:37,529, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-06-19 20:00:39,303, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.14.1/status/2.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow-new-june", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-06-19 20:00:39,355, INFO - End executing installer wrapper
2026-06-20 00:34:45,782, INFO - Start executing installer wrapper
2026-06-20 00:34:45,800, INFO - scrubbed proxy settings: {}
2026-06-20 00:34:45,800, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-06-20 00:34:45,982, INFO - MDE is installed
2026-06-20 00:34:45,982, INFO - Wait for MDE service to be available
2026-06-20 00:34:49,890, INFO - MDE is onboarded
2026-06-20 00:34:51,283, INFO - MDC tags in MDE are valid
2026-06-20 00:34:51,283, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-06-20 00:35:18,409, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.1 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 89.222.122.167
 * cpanel-addons-production-feed: 89.222.122.167
 * cpanel-plugins: 89.222.122.167
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
Trying other mirror.


 One of the configured repositories failed (CentOS-7 - Base),
 and yum doesn't have enough cached data to continue. At this point the only
 safe thing yum can do is fail. There are a few ways to work "fix" this:

     1. Contact the upstream for the repository and get them to fix the problem.

     2. Reconfigure the baseurl/etc. for the repository, to point to a working
        upstream. This is most often useful if you are using a newer
        distribution release than is supported by the repository (and the
        packages for the previous distribution release still work).

     3. Run the command with the repository temporarily disabled
            yum --disablerepo=base ...

     4. Disable the repository permanently, so yum won't use it by default. Yum
        will then just ignore the repository until you permanently enable it
        again or use --enablerepo for temporary usage:

            yum-config-manager --disable base
        or
            subscription-manager repos --disable=base

     5. Configure the failing repository to be skipped, if it is unavailable.
        Note that yum will try to contact the repo. when it runs most commands,
        so will have to try and fail each time (and thus. yum will be be much
        slower). If it is a very temporary problem though, this is often a nice
        compromise:

            yum-config-manager --save --setopt=base.skip_if_unavailable=true

failure: repodata/repomd.xml from base: [Errno 256] No more mirrors to try.
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow-new-june"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE (exit code: 1)
[*] exiting (21)

2026-06-20 00:35:18,409, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-06-20 00:35:18,410, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-06-20 00:35:20,023, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.14.1/status/2.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow-new-june", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-06-20 00:35:20,032, INFO - End executing installer wrapper
2026-06-21 00:30:50,514, INFO - Start executing installer wrapper
2026-06-21 00:30:50,524, INFO - scrubbed proxy settings: {}
2026-06-21 00:30:50,524, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-06-21 00:30:50,711, INFO - MDE is installed
2026-06-21 00:30:50,711, INFO - Wait for MDE service to be available
2026-06-21 00:30:55,566, INFO - MDE is onboarded
2026-06-21 00:30:57,168, INFO - MDC tags in MDE are valid
2026-06-21 00:30:57,168, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-06-21 00:31:25,943, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.1 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 184.94.200.2
 * cpanel-addons-production-feed: 184.94.200.2
 * cpanel-plugins: 184.94.200.2
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
Trying other mirror.


 One of the configured repositories failed (CentOS-7 - Base),
 and yum doesn't have enough cached data to continue. At this point the only
 safe thing yum can do is fail. There are a few ways to work "fix" this:

     1. Contact the upstream for the repository and get them to fix the problem.

     2. Reconfigure the baseurl/etc. for the repository, to point to a working
        upstream. This is most often useful if you are using a newer
        distribution release than is supported by the repository (and the
        packages for the previous distribution release still work).

     3. Run the command with the repository temporarily disabled
            yum --disablerepo=base ...

     4. Disable the repository permanently, so yum won't use it by default. Yum
        will then just ignore the repository until you permanently enable it
        again or use --enablerepo for temporary usage:

            yum-config-manager --disable base
        or
            subscription-manager repos --disable=base

     5. Configure the failing repository to be skipped, if it is unavailable.
        Note that yum will try to contact the repo. when it runs most commands,
        so will have to try and fail each time (and thus. yum will be be much
        slower). If it is a very temporary problem though, this is often a nice
        compromise:

            yum-config-manager --save --setopt=base.skip_if_unavailable=true

failure: repodata/repomd.xml from base: [Errno 256] No more mirrors to try.
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow-new-june"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE (exit code: 1)
[*] exiting (21)

2026-06-21 00:31:25,943, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-06-21 00:31:25,963, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-06-21 00:31:28,132, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.14.1/status/2.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow-new-june", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-06-21 00:31:28,300, INFO - End executing installer wrapper
2026-06-22 00:38:18,425, INFO - Start executing installer wrapper
2026-06-22 00:38:18,427, INFO - scrubbed proxy settings: {}
2026-06-22 00:38:18,427, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-06-22 00:38:18,553, INFO - MDE is installed
2026-06-22 00:38:18,553, INFO - Wait for MDE service to be available
2026-06-22 00:38:22,050, INFO - MDE is onboarded
2026-06-22 00:38:23,562, INFO - MDC tags in MDE are valid
2026-06-22 00:38:23,569, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-06-22 00:38:41,637, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.1 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 89.222.122.167
 * cpanel-addons-production-feed: 89.222.122.167
 * cpanel-plugins: 89.222.122.167
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
Trying other mirror.


 One of the configured repositories failed (CentOS-7 - Base),
 and yum doesn't have enough cached data to continue. At this point the only
 safe thing yum can do is fail. There are a few ways to work "fix" this:

     1. Contact the upstream for the repository and get them to fix the problem.

     2. Reconfigure the baseurl/etc. for the repository, to point to a working
        upstream. This is most often useful if you are using a newer
        distribution release than is supported by the repository (and the
        packages for the previous distribution release still work).

     3. Run the command with the repository temporarily disabled
            yum --disablerepo=base ...

     4. Disable the repository permanently, so yum won't use it by default. Yum
        will then just ignore the repository until you permanently enable it
        again or use --enablerepo for temporary usage:

            yum-config-manager --disable base
        or
            subscription-manager repos --disable=base

     5. Configure the failing repository to be skipped, if it is unavailable.
        Note that yum will try to contact the repo. when it runs most commands,
        so will have to try and fail each time (and thus. yum will be be much
        slower). If it is a very temporary problem though, this is often a nice
        compromise:

            yum-config-manager --save --setopt=base.skip_if_unavailable=true

failure: repodata/repomd.xml from base: [Errno 256] No more mirrors to try.
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow-new-june"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE (exit code: 1)
[*] exiting (21)

2026-06-22 00:38:41,638, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-06-22 00:38:41,638, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-06-22 00:38:43,104, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.14.1/status/2.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow-new-june", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-06-22 00:38:43,178, INFO - End executing installer wrapper
2026-06-23 00:38:07,912, INFO - Start executing installer wrapper
2026-06-23 00:38:07,931, INFO - scrubbed proxy settings: {}
2026-06-23 00:38:07,931, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-06-23 00:38:08,111, INFO - MDE is installed
2026-06-23 00:38:08,111, INFO - Wait for MDE service to be available
2026-06-23 00:38:12,054, INFO - MDE is onboarded
2026-06-23 00:38:13,359, INFO - MDC tags in MDE are valid
2026-06-23 00:38:13,360, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-06-23 00:38:35,996, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.1 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 184.94.200.5
 * cpanel-addons-production-feed: 184.94.200.5
 * cpanel-plugins: 184.94.200.5
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
Trying other mirror.


 One of the configured repositories failed (CentOS-7 - Base),
 and yum doesn't have enough cached data to continue. At this point the only
 safe thing yum can do is fail. There are a few ways to work "fix" this:

     1. Contact the upstream for the repository and get them to fix the problem.

     2. Reconfigure the baseurl/etc. for the repository, to point to a working
        upstream. This is most often useful if you are using a newer
        distribution release than is supported by the repository (and the
        packages for the previous distribution release still work).

     3. Run the command with the repository temporarily disabled
            yum --disablerepo=base ...

     4. Disable the repository permanently, so yum won't use it by default. Yum
        will then just ignore the repository until you permanently enable it
        again or use --enablerepo for temporary usage:

            yum-config-manager --disable base
        or
            subscription-manager repos --disable=base

     5. Configure the failing repository to be skipped, if it is unavailable.
        Note that yum will try to contact the repo. when it runs most commands,
        so will have to try and fail each time (and thus. yum will be be much
        slower). If it is a very temporary problem though, this is often a nice
        compromise:

            yum-config-manager --save --setopt=base.skip_if_unavailable=true

failure: repodata/repomd.xml from base: [Errno 256] No more mirrors to try.
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow-new-june"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE (exit code: 1)
[*] exiting (21)

2026-06-23 00:38:35,996, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-06-23 00:38:36,004, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-06-23 00:38:37,717, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.14.1/status/2.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow-new-june", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-06-23 00:38:37,813, INFO - End executing installer wrapper
2026-06-24 00:33:32,098, INFO - Start executing installer wrapper
2026-06-24 00:33:32,110, INFO - scrubbed proxy settings: {}
2026-06-24 00:33:32,110, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-06-24 00:33:32,274, INFO - MDE is installed
2026-06-24 00:33:32,274, INFO - Wait for MDE service to be available
2026-06-24 00:33:35,862, INFO - MDE is onboarded
2026-06-24 00:33:37,379, INFO - MDC tags in MDE are valid
2026-06-24 00:33:37,379, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-06-24 00:34:00,072, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.1 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 89.222.122.167
 * cpanel-addons-production-feed: 89.222.122.167
 * cpanel-plugins: 89.222.122.167
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
Trying other mirror.


 One of the configured repositories failed (CentOS-7 - Base),
 and yum doesn't have enough cached data to continue. At this point the only
 safe thing yum can do is fail. There are a few ways to work "fix" this:

     1. Contact the upstream for the repository and get them to fix the problem.

     2. Reconfigure the baseurl/etc. for the repository, to point to a working
        upstream. This is most often useful if you are using a newer
        distribution release than is supported by the repository (and the
        packages for the previous distribution release still work).

     3. Run the command with the repository temporarily disabled
            yum --disablerepo=base ...

     4. Disable the repository permanently, so yum won't use it by default. Yum
        will then just ignore the repository until you permanently enable it
        again or use --enablerepo for temporary usage:

            yum-config-manager --disable base
        or
            subscription-manager repos --disable=base

     5. Configure the failing repository to be skipped, if it is unavailable.
        Note that yum will try to contact the repo. when it runs most commands,
        so will have to try and fail each time (and thus. yum will be be much
        slower). If it is a very temporary problem though, this is often a nice
        compromise:

            yum-config-manager --save --setopt=base.skip_if_unavailable=true

failure: repodata/repomd.xml from base: [Errno 256] No more mirrors to try.
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow-new-june"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE (exit code: 1)
[*] exiting (21)

2026-06-24 00:34:00,072, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-06-24 00:34:00,073, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-06-24 00:34:02,242, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.14.1/status/2.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow-new-june", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-06-24 00:34:02,331, INFO - End executing installer wrapper
2026-06-25 00:52:22,068, INFO - Start executing installer wrapper
2026-06-25 00:52:22,657, INFO - scrubbed proxy settings: {}
2026-06-25 00:52:22,657, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-06-25 00:53:22,619, INFO - MDE is installed
2026-06-25 00:53:22,621, INFO - Wait for MDE service to be available
2026-06-25 01:07:35,515, INFO - MDE is onboarded
2026-06-25 01:07:36,850, INFO - MDC tags in MDE are valid
2026-06-25 01:07:36,851, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-06-25 01:07:48,139, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.1 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 89.222.122.163
 * cpanel-addons-production-feed: 89.222.122.163
 * cpanel-plugins: 89.222.122.163
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
Trying other mirror.


 One of the configured repositories failed (CentOS-7 - Base),
 and yum doesn't have enough cached data to continue. At this point the only
 safe thing yum can do is fail. There are a few ways to work "fix" this:

     1. Contact the upstream for the repository and get them to fix the problem.

     2. Reconfigure the baseurl/etc. for the repository, to point to a working
        upstream. This is most often useful if you are using a newer
        distribution release than is supported by the repository (and the
        packages for the previous distribution release still work).

     3. Run the command with the repository temporarily disabled
            yum --disablerepo=base ...

     4. Disable the repository permanently, so yum won't use it by default. Yum
        will then just ignore the repository until you permanently enable it
        again or use --enablerepo for temporary usage:

            yum-config-manager --disable base
        or
            subscription-manager repos --disable=base

     5. Configure the failing repository to be skipped, if it is unavailable.
        Note that yum will try to contact the repo. when it runs most commands,
        so will have to try and fail each time (and thus. yum will be be much
        slower). If it is a very temporary problem though, this is often a nice
        compromise:

            yum-config-manager --save --setopt=base.skip_if_unavailable=true

failure: repodata/repomd.xml from base: [Errno 256] No more mirrors to try.
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow-new-june"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE (exit code: 1)
[*] exiting (21)

2026-06-25 01:07:48,139, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-06-25 01:07:48,140, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-06-25 01:07:48,468, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.14.1/status/2.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow-new-june", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-06-25 01:07:48,469, INFO - End executing installer wrapper
2026-06-26 00:35:39,803, INFO - Start executing installer wrapper
2026-06-26 00:35:39,821, INFO - scrubbed proxy settings: {}
2026-06-26 00:35:39,821, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-06-26 00:35:40,026, INFO - MDE is installed
2026-06-26 00:35:40,026, INFO - Wait for MDE service to be available
2026-06-26 00:35:43,366, INFO - MDE is onboarded
2026-06-26 00:35:45,058, INFO - MDC tags in MDE are valid
2026-06-26 00:35:45,059, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-06-26 00:36:21,494, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.1 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 89.222.122.167
 * cpanel-addons-production-feed: 89.222.122.167
 * cpanel-plugins: 89.222.122.167
https://repo.alt.tuxcare.com/alt-common/rpm/el/7/stable/x86_64/repodata/repomd.xml: [Errno 14] curl#35 - "TCP connection reset by peer"
Trying other mirror.
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
Trying other mirror.


 One of the configured repositories failed (CentOS-7 - Base),
 and yum doesn't have enough cached data to continue. At this point the only
 safe thing yum can do is fail. There are a few ways to work "fix" this:

     1. Contact the upstream for the repository and get them to fix the problem.

     2. Reconfigure the baseurl/etc. for the repository, to point to a working
        upstream. This is most often useful if you are using a newer
        distribution release than is supported by the repository (and the
        packages for the previous distribution release still work).

     3. Run the command with the repository temporarily disabled
            yum --disablerepo=base ...

     4. Disable the repository permanently, so yum won't use it by default. Yum
        will then just ignore the repository until you permanently enable it
        again or use --enablerepo for temporary usage:

            yum-config-manager --disable base
        or
            subscription-manager repos --disable=base

     5. Configure the failing repository to be skipped, if it is unavailable.
        Note that yum will try to contact the repo. when it runs most commands,
        so will have to try and fail each time (and thus. yum will be be much
        slower). If it is a very temporary problem though, this is often a nice
        compromise:

            yum-config-manager --save --setopt=base.skip_if_unavailable=true

failure: repodata/repomd.xml from base: [Errno 256] No more mirrors to try.
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow-new-june"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE (exit code: 1)
[*] exiting (21)

2026-06-26 00:36:21,494, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-06-26 00:36:21,511, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-06-26 00:36:23,428, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.14.1/status/2.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow-new-june", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-06-26 00:36:23,487, INFO - End executing installer wrapper
2026-06-26 23:43:13,877, INFO - Start executing installer wrapper
2026-06-26 23:43:13,896, INFO - scrubbed proxy settings: {}
2026-06-26 23:43:13,897, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-06-26 23:43:14,065, INFO - MDE is installed
2026-06-26 23:43:14,065, INFO - Wait for MDE service to be available
2026-06-26 23:43:17,176, INFO - MDE is onboarded
2026-06-26 23:43:18,498, INFO - MDC tags in MDE are valid
2026-06-26 23:43:18,499, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-06-26 23:43:34,601, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.1 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 184.94.200.2
 * cpanel-addons-production-feed: 184.94.200.2
 * cpanel-plugins: 184.94.200.2
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
Trying other mirror.


 One of the configured repositories failed (CentOS-7 - Base),
 and yum doesn't have enough cached data to continue. At this point the only
 safe thing yum can do is fail. There are a few ways to work "fix" this:

     1. Contact the upstream for the repository and get them to fix the problem.

     2. Reconfigure the baseurl/etc. for the repository, to point to a working
        upstream. This is most often useful if you are using a newer
        distribution release than is supported by the repository (and the
        packages for the previous distribution release still work).

     3. Run the command with the repository temporarily disabled
            yum --disablerepo=base ...

     4. Disable the repository permanently, so yum won't use it by default. Yum
        will then just ignore the repository until you permanently enable it
        again or use --enablerepo for temporary usage:

            yum-config-manager --disable base
        or
            subscription-manager repos --disable=base

     5. Configure the failing repository to be skipped, if it is unavailable.
        Note that yum will try to contact the repo. when it runs most commands,
        so will have to try and fail each time (and thus. yum will be be much
        slower). If it is a very temporary problem though, this is often a nice
        compromise:

            yum-config-manager --save --setopt=base.skip_if_unavailable=true

failure: repodata/repomd.xml from base: [Errno 256] No more mirrors to try.
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow-new-june"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE (exit code: 1)
[*] exiting (21)

2026-06-26 23:43:34,602, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-06-26 23:43:34,609, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-06-26 23:43:36,193, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.14.1/status/3.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow-new-june", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-06-26 23:43:36,220, INFO - End executing installer wrapper
2026-06-27 00:39:14,368, INFO - Start executing installer wrapper
2026-06-27 00:39:14,369, INFO - scrubbed proxy settings: {}
2026-06-27 00:39:14,369, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-06-27 00:39:14,574, INFO - MDE is installed
2026-06-27 00:39:14,574, INFO - Wait for MDE service to be available
2026-06-27 00:39:17,775, INFO - MDE is onboarded
2026-06-27 00:39:19,261, INFO - MDC tags in MDE are valid
2026-06-27 00:39:19,262, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-06-27 00:39:43,112, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.1 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 184.94.200.2
 * cpanel-addons-production-feed: 184.94.200.2
 * cpanel-plugins: 184.94.200.2
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
Trying other mirror.


 One of the configured repositories failed (CentOS-7 - Base),
 and yum doesn't have enough cached data to continue. At this point the only
 safe thing yum can do is fail. There are a few ways to work "fix" this:

     1. Contact the upstream for the repository and get them to fix the problem.

     2. Reconfigure the baseurl/etc. for the repository, to point to a working
        upstream. This is most often useful if you are using a newer
        distribution release than is supported by the repository (and the
        packages for the previous distribution release still work).

     3. Run the command with the repository temporarily disabled
            yum --disablerepo=base ...

     4. Disable the repository permanently, so yum won't use it by default. Yum
        will then just ignore the repository until you permanently enable it
        again or use --enablerepo for temporary usage:

            yum-config-manager --disable base
        or
            subscription-manager repos --disable=base

     5. Configure the failing repository to be skipped, if it is unavailable.
        Note that yum will try to contact the repo. when it runs most commands,
        so will have to try and fail each time (and thus. yum will be be much
        slower). If it is a very temporary problem though, this is often a nice
        compromise:

            yum-config-manager --save --setopt=base.skip_if_unavailable=true

failure: repodata/repomd.xml from base: [Errno 256] No more mirrors to try.
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow-new-june"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE (exit code: 1)
[*] exiting (21)

2026-06-27 00:39:43,112, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-06-27 00:39:43,113, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-06-27 00:39:45,213, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.14.1/status/3.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow-new-june", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-06-27 00:39:45,320, INFO - End executing installer wrapper
2026-06-28 00:52:10,789, INFO - Start executing installer wrapper
2026-06-28 00:52:10,799, INFO - scrubbed proxy settings: {}
2026-06-28 00:52:10,800, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-06-28 00:52:11,124, INFO - MDE is installed
2026-06-28 00:52:11,125, INFO - Wait for MDE service to be available
2026-06-28 00:55:59,588, INFO - MDE is onboarded
2026-06-28 00:58:32,454, INFO - MDC tags in MDE are valid
2026-06-28 00:58:32,480, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-06-28 00:59:14,094, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.1 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 184.94.200.5
 * cpanel-addons-production-feed: 184.94.200.5
 * cpanel-plugins: 184.94.200.5
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
Trying other mirror.


 One of the configured repositories failed (CentOS-7 - Base),
 and yum doesn't have enough cached data to continue. At this point the only
 safe thing yum can do is fail. There are a few ways to work "fix" this:

     1. Contact the upstream for the repository and get them to fix the problem.

     2. Reconfigure the baseurl/etc. for the repository, to point to a working
        upstream. This is most often useful if you are using a newer
        distribution release than is supported by the repository (and the
        packages for the previous distribution release still work).

     3. Run the command with the repository temporarily disabled
            yum --disablerepo=base ...

     4. Disable the repository permanently, so yum won't use it by default. Yum
        will then just ignore the repository until you permanently enable it
        again or use --enablerepo for temporary usage:

            yum-config-manager --disable base
        or
            subscription-manager repos --disable=base

     5. Configure the failing repository to be skipped, if it is unavailable.
        Note that yum will try to contact the repo. when it runs most commands,
        so will have to try and fail each time (and thus. yum will be be much
        slower). If it is a very temporary problem though, this is often a nice
        compromise:

            yum-config-manager --save --setopt=base.skip_if_unavailable=true

failure: repodata/repomd.xml from base: [Errno 256] No more mirrors to try.
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow-new-june"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE (exit code: 1)
[*] exiting (21)

2026-06-28 00:59:14,094, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-06-28 00:59:14,095, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-06-28 00:59:17,429, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.14.1/status/3.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow-new-june", "machineId": "894a603dc80ec9534c9f095da3d515ac00052116", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-06-28 00:59:17,458, INFO - End executing installer wrapper
2026-06-29 01:06:39,483, INFO - Start executing installer wrapper
2026-06-29 01:06:39,493, INFO - scrubbed proxy settings: {}
2026-06-29 01:06:39,493, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-06-29 01:06:39,683, INFO - MDE is installed
2026-06-29 01:06:39,683, INFO - Wait for MDE service to be available
2026-06-29 01:06:40,476, INFO - start parsing onboarding script
2026-06-29 01:06:40,572, INFO - decode onboarding script successfully
2026-06-29 01:06:40,574, INFO - parse onboarding script successfully
2026-06-29 01:06:40,574, INFO - Starting onboarding script...
2026-06-29 01:06:40,574, INFO - Checking if Mde is installed
2026-06-29 01:06:40,574, INFO - Mde is installed: True
2026-06-29 01:06:40,574, INFO - Removing offboarding file if exists
2026-06-29 01:06:42,581, INFO - Onboarding...
2026-06-29 01:06:42,581, INFO - Generating /etc/opt/microsoft/mdatp/mdatp_onboard.json...
2026-06-29 01:06:42,729, INFO - Onboarding done
2026-06-29 01:06:42,730, INFO - Checking if Mde is healthy after onboarding
2026-06-29 01:07:19,460, INFO - Onboarding succeeded
2026-06-29 01:07:32,356, INFO - MDC tags in MDE are valid
2026-06-29 01:07:32,357, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-06-29 01:08:37,301, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.1 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 89.222.122.167
 * cpanel-addons-production-feed: 89.222.122.167
 * cpanel-plugins: 89.222.122.167
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
Trying other mirror.


 One of the configured repositories failed (CentOS-7 - Base),
 and yum doesn't have enough cached data to continue. At this point the only
 safe thing yum can do is fail. There are a few ways to work "fix" this:

     1. Contact the upstream for the repository and get them to fix the problem.

     2. Reconfigure the baseurl/etc. for the repository, to point to a working
        upstream. This is most often useful if you are using a newer
        distribution release than is supported by the repository (and the
        packages for the previous distribution release still work).

     3. Run the command with the repository temporarily disabled
            yum --disablerepo=base ...

     4. Disable the repository permanently, so yum won't use it by default. Yum
        will then just ignore the repository until you permanently enable it
        again or use --enablerepo for temporary usage:

            yum-config-manager --disable base
        or
            subscription-manager repos --disable=base

     5. Configure the failing repository to be skipped, if it is unavailable.
        Note that yum will try to contact the repo. when it runs most commands,
        so will have to try and fail each time (and thus. yum will be be much
        slower). If it is a very temporary problem though, this is often a nice
        compromise:

            yum-config-manager --save --setopt=base.skip_if_unavailable=true

failure: repodata/repomd.xml from base: [Errno 256] No more mirrors to try.
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow-new-june"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE (exit code: 1)
[*] exiting (21)

2026-06-29 01:08:37,309, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-06-29 01:08:37,310, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-06-29 01:08:41,891, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.14.1/status/3.status, Status= success, Code= 0, Message= {"healthIssues": ["engine not available"], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow-new-june", "machineId": "888b091d748d2a7c11047df24ed7ef381dd8e356", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-06-29 01:08:41,893, INFO - End executing installer wrapper
2026-06-29 19:49:03,954, INFO - Start executing installer wrapper
2026-06-29 19:49:04,033, INFO - scrubbed proxy settings: {}
2026-06-29 19:49:04,034, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-06-29 19:49:04,109, INFO - MDE is installed
2026-06-29 19:49:04,109, INFO - Wait for MDE service to be available
2026-06-29 19:49:04,676, INFO - start parsing onboarding script
2026-06-29 19:49:04,677, INFO - decode onboarding script successfully
2026-06-29 19:49:04,678, INFO - parse onboarding script successfully
2026-06-29 19:49:04,678, INFO - Starting onboarding script...
2026-06-29 19:49:04,678, INFO - Checking if Mde is installed
2026-06-29 19:49:04,678, INFO - Mde is installed: True
2026-06-29 19:49:04,678, INFO - Removing offboarding file if exists
2026-06-29 19:49:06,680, INFO - Onboarding...
2026-06-29 19:49:06,680, INFO - Generating /etc/opt/microsoft/mdatp/mdatp_onboard.json...
2026-06-29 19:49:06,712, INFO - Onboarding done
2026-06-29 19:49:06,712, INFO - Checking if Mde is healthy after onboarding
2026-06-29 19:49:21,878, INFO - Onboarding succeeded
2026-06-29 19:49:22,092, INFO - MDC tags in MDE are valid
2026-06-29 19:49:22,093, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-06-29 19:49:25,755, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.1 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 89.222.122.161
 * cpanel-addons-production-feed: 89.222.122.161
 * cpanel-plugins: 89.222.122.161
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
Trying other mirror.


 One of the configured repositories failed (CentOS-7 - Base),
 and yum doesn't have enough cached data to continue. At this point the only
 safe thing yum can do is fail. There are a few ways to work "fix" this:

     1. Contact the upstream for the repository and get them to fix the problem.

     2. Reconfigure the baseurl/etc. for the repository, to point to a working
        upstream. This is most often useful if you are using a newer
        distribution release than is supported by the repository (and the
        packages for the previous distribution release still work).

     3. Run the command with the repository temporarily disabled
            yum --disablerepo=base ...

     4. Disable the repository permanently, so yum won't use it by default. Yum
        will then just ignore the repository until you permanently enable it
        again or use --enablerepo for temporary usage:

            yum-config-manager --disable base
        or
            subscription-manager repos --disable=base

     5. Configure the failing repository to be skipped, if it is unavailable.
        Note that yum will try to contact the repo. when it runs most commands,
        so will have to try and fail each time (and thus. yum will be be much
        slower). If it is a very temporary problem though, this is often a nice
        compromise:

            yum-config-manager --save --setopt=base.skip_if_unavailable=true

failure: repodata/repomd.xml from base: [Errno 256] No more mirrors to try.
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow-new-june"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE (exit code: 1)
[*] exiting (21)

2026-06-29 19:49:25,756, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-06-29 19:49:25,756, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-06-29 19:49:25,993, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.14.1/status/3.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow-new-june", "machineId": "888b091d748d2a7c11047df24ed7ef381dd8e356", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-06-29 19:49:25,993, INFO - End executing installer wrapper
2026-06-30 00:38:27,795, INFO - Start executing installer wrapper
2026-06-30 00:38:27,796, INFO - scrubbed proxy settings: {}
2026-06-30 00:38:27,796, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-06-30 00:38:27,866, INFO - MDE is installed
2026-06-30 00:38:27,866, INFO - Wait for MDE service to be available
2026-06-30 00:38:28,393, INFO - MDE is onboarded
2026-06-30 00:38:28,599, INFO - MDC tags in MDE are valid
2026-06-30 00:38:28,599, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-06-30 00:38:35,021, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.1 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 89.222.122.161
 * cpanel-addons-production-feed: 89.222.122.161
 * cpanel-plugins: 89.222.122.161
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
Trying other mirror.


 One of the configured repositories failed (CentOS-7 - Base),
 and yum doesn't have enough cached data to continue. At this point the only
 safe thing yum can do is fail. There are a few ways to work "fix" this:

     1. Contact the upstream for the repository and get them to fix the problem.

     2. Reconfigure the baseurl/etc. for the repository, to point to a working
        upstream. This is most often useful if you are using a newer
        distribution release than is supported by the repository (and the
        packages for the previous distribution release still work).

     3. Run the command with the repository temporarily disabled
            yum --disablerepo=base ...

     4. Disable the repository permanently, so yum won't use it by default. Yum
        will then just ignore the repository until you permanently enable it
        again or use --enablerepo for temporary usage:

            yum-config-manager --disable base
        or
            subscription-manager repos --disable=base

     5. Configure the failing repository to be skipped, if it is unavailable.
        Note that yum will try to contact the repo. when it runs most commands,
        so will have to try and fail each time (and thus. yum will be be much
        slower). If it is a very temporary problem though, this is often a nice
        compromise:

            yum-config-manager --save --setopt=base.skip_if_unavailable=true

failure: repodata/repomd.xml from base: [Errno 256] No more mirrors to try.
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow-new-june"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE (exit code: 1)
[*] exiting (21)

2026-06-30 00:38:35,022, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-06-30 00:38:35,022, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-06-30 00:38:35,405, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.14.1/status/3.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow-new-june", "machineId": "888b091d748d2a7c11047df24ed7ef381dd8e356", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-06-30 00:38:35,406, INFO - End executing installer wrapper
2026-07-01 00:32:53,350, INFO - Start executing installer wrapper
2026-07-01 00:32:53,351, INFO - scrubbed proxy settings: {}
2026-07-01 00:32:53,351, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-07-01 00:32:53,423, INFO - MDE is installed
2026-07-01 00:32:53,423, INFO - Wait for MDE service to be available
2026-07-01 00:32:53,809, INFO - MDE is onboarded
2026-07-01 00:32:54,083, INFO - MDC tags in MDE are valid
2026-07-01 00:32:54,083, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-07-01 00:32:57,075, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.1 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 89.222.122.163
 * cpanel-addons-production-feed: 89.222.122.163
 * cpanel-plugins: 89.222.122.163
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
Trying other mirror.


 One of the configured repositories failed (CentOS-7 - Base),
 and yum doesn't have enough cached data to continue. At this point the only
 safe thing yum can do is fail. There are a few ways to work "fix" this:

     1. Contact the upstream for the repository and get them to fix the problem.

     2. Reconfigure the baseurl/etc. for the repository, to point to a working
        upstream. This is most often useful if you are using a newer
        distribution release than is supported by the repository (and the
        packages for the previous distribution release still work).

     3. Run the command with the repository temporarily disabled
            yum --disablerepo=base ...

     4. Disable the repository permanently, so yum won't use it by default. Yum
        will then just ignore the repository until you permanently enable it
        again or use --enablerepo for temporary usage:

            yum-config-manager --disable base
        or
            subscription-manager repos --disable=base

     5. Configure the failing repository to be skipped, if it is unavailable.
        Note that yum will try to contact the repo. when it runs most commands,
        so will have to try and fail each time (and thus. yum will be be much
        slower). If it is a very temporary problem though, this is often a nice
        compromise:

            yum-config-manager --save --setopt=base.skip_if_unavailable=true

failure: repodata/repomd.xml from base: [Errno 256] No more mirrors to try.
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow-new-june"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE (exit code: 1)
[*] exiting (21)

2026-07-01 00:32:57,076, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-07-01 00:32:57,076, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-07-01 00:32:57,296, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.14.1/status/3.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow-new-june", "machineId": "888b091d748d2a7c11047df24ed7ef381dd8e356", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-07-01 00:32:57,296, INFO - End executing installer wrapper
2026-07-02 00:37:08,134, INFO - Start executing installer wrapper
2026-07-02 00:37:08,135, INFO - scrubbed proxy settings: {}
2026-07-02 00:37:08,135, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-07-02 00:37:08,201, INFO - MDE is installed
2026-07-02 00:37:08,201, INFO - Wait for MDE service to be available
2026-07-02 00:37:08,693, INFO - MDE is onboarded
2026-07-02 00:37:08,988, INFO - MDC tags in MDE are valid
2026-07-02 00:37:08,988, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-07-02 00:37:12,674, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.2 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 89.222.122.163
 * cpanel-addons-production-feed: 89.222.122.163
 * cpanel-plugins: 89.222.122.163
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
Trying other mirror.


 One of the configured repositories failed (CentOS-7 - Base),
 and yum doesn't have enough cached data to continue. At this point the only
 safe thing yum can do is fail. There are a few ways to work "fix" this:

     1. Contact the upstream for the repository and get them to fix the problem.

     2. Reconfigure the baseurl/etc. for the repository, to point to a working
        upstream. This is most often useful if you are using a newer
        distribution release than is supported by the repository (and the
        packages for the previous distribution release still work).

     3. Run the command with the repository temporarily disabled
            yum --disablerepo=base ...

     4. Disable the repository permanently, so yum won't use it by default. Yum
        will then just ignore the repository until you permanently enable it
        again or use --enablerepo for temporary usage:

            yum-config-manager --disable base
        or
            subscription-manager repos --disable=base

     5. Configure the failing repository to be skipped, if it is unavailable.
        Note that yum will try to contact the repo. when it runs most commands,
        so will have to try and fail each time (and thus. yum will be be much
        slower). If it is a very temporary problem though, this is often a nice
        compromise:

            yum-config-manager --save --setopt=base.skip_if_unavailable=true

failure: repodata/repomd.xml from base: [Errno 256] No more mirrors to try.
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow-new-june"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE (exit code: 1)
[*] exiting (21)

2026-07-02 00:37:12,675, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-07-02 00:37:12,675, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-07-02 00:37:12,922, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.14.1/status/3.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow-new-june", "machineId": "888b091d748d2a7c11047df24ed7ef381dd8e356", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-07-02 00:37:12,923, INFO - End executing installer wrapper
2026-07-03 00:41:09,860, INFO - Start executing installer wrapper
2026-07-03 00:41:09,860, INFO - scrubbed proxy settings: {}
2026-07-03 00:41:09,860, INFO - Get latest installation script from https://raw.githubusercontent.com/microsoft/mdatp-xplat/master/linux/installation/mde_installer.sh
2026-07-03 00:41:09,932, INFO - MDE is installed
2026-07-03 00:41:09,932, INFO - Wait for MDE service to be available
2026-07-03 00:41:10,498, INFO - MDE is onboarded
2026-07-03 00:41:10,802, INFO - MDC tags in MDE are valid
2026-07-03 00:41:10,803, INFO - Start to run the update command: src/mde_installer.latest.sh --debug --upgrade -y --log-path /var/log/azure/Microsoft.Azure.AzureDefenderForServers.MDE.Linux/MdeInstallerLog.log
2026-07-03 00:41:14,848, ERROR - MDE process stdout: [i] Specify the version to be installed using "--mdatp" argument. If not provided, latest mde will be installed by default.
--- mde_installer.sh v1.2.2 ---
[v] detected: x86_64 architecture
[v] detected: centos 7  (fedora)
[v] scaled: 7
[v] set package manager: yum
[i] Current Version : 101.25102.0005
[>] Running command: yum -y -y update mdatp
[>] Command output: Loaded plugins: fastestmirror, langpacks, universal-hooks
Loading mirror speeds from cached hostfile
 * EA4: 89.222.122.163
 * cpanel-addons-production-feed: 89.222.122.163
 * cpanel-plugins: 89.222.122.163
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
Trying other mirror.


 One of the configured repositories failed (CentOS-7 - Base),
 and yum doesn't have enough cached data to continue. At this point the only
 safe thing yum can do is fail. There are a few ways to work "fix" this:

     1. Contact the upstream for the repository and get them to fix the problem.

     2. Reconfigure the baseurl/etc. for the repository, to point to a working
        upstream. This is most often useful if you are using a newer
        distribution release than is supported by the repository (and the
        packages for the previous distribution release still work).

     3. Run the command with the repository temporarily disabled
            yum --disablerepo=base ...

     4. Disable the repository permanently, so yum won't use it by default. Yum
        will then just ignore the repository until you permanently enable it
        again or use --enablerepo for temporary usage:

            yum-config-manager --disable base
        or
            subscription-manager repos --disable=base

     5. Configure the failing repository to be skipped, if it is unavailable.
        Note that yum will try to contact the repo. when it runs most commands,
        so will have to try and fail each time (and thus. yum will be be much
        slower). If it is a very temporary problem though, this is often a nice
        compromise:

            yum-config-manager --save --setopt=base.skip_if_unavailable=true

failure: repodata/repomd.xml from base: [Errno 256] No more mirrors to try.
http://olcentgbl.trafficmanager.net/centos/7/os/x86_64/repodata/repomd.xml: [Errno 14] curl#6 - "Could not resolve host: olcentgbl.trafficmanager.net; Name or service not known"
1
[>] Command exit_code: 1
[S] MDE installed.
[>] Running command: mdatp health
[S] Version: 101.25102.0005
[S] Onboarded: true
[S] Passive mode: true
[S] Device tags: [{"key":"AzureResourceId","value":"/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow-new-june"},{"key":"SecurityWorkspaceId","value":"0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338"}]
[S] Subsystem: fanotify
[S] Conflicting applications: []
[x] Unable to upgrade MDE (exit code: 1)
[*] exiting (21)

2026-07-03 00:41:14,848, WARNING - Microsoft Defender for Endpoint installation failed with error code 21, error message installation failed
2026-07-03 00:41:14,849, INFO - Detected OS details: {'osName': 'CentOS Linux 7.9.2009', 'osMetadata': {'distributionVersion': '7.9.2009', 'distributionName': 'CentOS Linux'}}
2026-07-03 00:41:15,210, INFO - Set handler status file /var/lib/waagent/Microsoft.Azure.AzureDefenderForServers.MDE.Linux-1.0.14.1/status/3.status, Status= success, Code= 0, Message= {"healthIssues": [], "azureResourceId": "/subscriptions/0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338/resourcegroups/briscoewebsite-rg/providers/microsoft.compute/virtualmachines/sparrow-new-june", "machineId": "888b091d748d2a7c11047df24ed7ef381dd8e356", "securityWorkspaceId": "0c6ced9c-a92c-40d4-94a4-b4b5ed6a1338", "osDetails": {"osName": "CentOS Linux 7.9.2009", "osMetadata": {"distributionVersion": "7.9.2009", "distributionName": "CentOS Linux"}}, "onboardingPackageOperationResultCode": "Success", "correlationId": "N/A"}
2026-07-03 00:41:15,211, INFO - End executing installer wrapper