# Elastic Agent **URL:** https://discuss.elastic.co/c/elastic-stack/elastic-agent/91.md [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) --- ## [About the Elastic Agent category](https://discuss.elastic.co/t/about-the-elastic-agent-category/309279)
**Author:** [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Replies:** 0
This category is for any questions relating to our Elastic Agent. --- ## [Support for metrics for kafka consumer group using new Consumer Rebalance Protocol](https://discuss.elastic.co/t/support-for-metrics-for-kafka-consumer-group-using-new-consumer-rebalance-protocol/390766)
**Author:** [@rakesh.iitism95](https://discuss.elastic.co/u/rakesh.iitism95)\ **Replies:** 0\ **Last updated:** [September 29, 2026, 8:29pm UTC](https://discuss.elastic.co/t/support-for-metrics-for-kafka-consumer-group-using-new-consumer-rebalance-protocol/390766 "2026-09-29T20:29:36Z")
We are currently using elastic agent to collect kafka consumer group metric. After a consumer group was configured to use the new consumer rebalance protocol available in Kafka 4.0 , the agent was not collecting the metr… --- ## [CISA KEV integration upgrade to 1.10](https://discuss.elastic.co/t/cisa-kev-integration-upgrade-to-1-10/388850)
**Author:** [@rklee](https://discuss.elastic.co/u/rklee)\ **Replies:** 1\ **Last updated:** [September 29, 2026, 7:59pm UTC](https://discuss.elastic.co/t/cisa-kev-integration-upgrade-to-1-10/388850 "2026-09-29T19:59:16Z")
So I was on a CISA KEV integration before version 1.7. I upgraded it to 1.10 and vulnerability reports are not coming in anymore. The integration says to re-enter configuration details and re-enable the package. However … --- ## [Integration-level Outputs](https://discuss.elastic.co/t/integration-level-outputs/390582)
**Author:** [@jameswiggins](https://discuss.elastic.co/u/jameswiggins)\ **Replies:** 3\ **Last updated:** [September 22, 2026, 8:17pm UTC](https://discuss.elastic.co/t/integration-level-outputs/390582 "2026-09-22T20:17:35Z")
I'm trying to determine how to configure integration-level outputs: Set integration-level outputs | Elastic Docs I followed the instructions for configuring, but do not see the option. Can someone share a screenshot of… --- ## [POSTFIX Ingest and the future of Logstash](https://discuss.elastic.co/t/postfix-ingest-and-the-future-of-logstash/390279)
**Author:** [@RalphDibney](https://discuss.elastic.co/u/RalphDibney)\ **Replies:** 6\ **Last updated:** [September 16, 2026, 12:40pm UTC](https://discuss.elastic.co/t/postfix-ingest-and-the-future-of-logstash/390279 "2026-09-16T12:40:22Z")
We have a mail gateway based on Postfix, and we want to get these logs into Elastic. For our product, our MSP that helps us with it has a logstash based integration that is also merges the mutliline log of postfix to on… --- ## [Unhealthy EDOT/OTEL Collector in Agent 9.4.x](https://discuss.elastic.co/t/unhealthy-edot-otel-collector-in-agent-9-4-x/388928)
**Author:** [@DavidA](https://discuss.elastic.co/u/DavidA)\ **Replies:** 1\ **Last updated:** [September 15, 2026, 7:09pm UTC](https://discuss.elastic.co/t/unhealthy-edot-otel-collector-in-agent-9-4-x/388928 "2026-09-15T19:09:34Z")
Environment: Elastic Agent / EDOT: 9.4.4 (build baed89504b1a1c0a7642d60dc0b6c1b0eb34f100, elastic-otel-collector service.version 9.4.4) OS: Ubuntu 24.04 (HP thin client) Fleet-managed, policy "Thin Client" Agent runtim… --- ## [External Inference using google vertex ai and gemini-3.6-flash error](https://discuss.elastic.co/t/external-inference-using-google-vertex-ai-and-gemini-3-6-flash-error/390296)
**Author:** [@tallakh](https://discuss.elastic.co/u/tallakh)\ **Replies:** 2\ **Last updated:** [September 11, 2026, 7:13am UTC](https://discuss.elastic.co/t/external-inference-using-google-vertex-ai-and-gemini-3-6-flash-error/390296 "2026-09-11T07:13:06Z")
Hi! I'm trying to set up an external inference using our Google vertex ai account and the model gemini-3.6-flash. The inference creation works, but trying to use it as a chat-completion fails with an error: Error: Rec… --- ## [Elastic Agent 9.3.7 CPU spikes](https://discuss.elastic.co/t/elastic-agent-9-3-7-cpu-spikes/390264)
**Author:** [@etrevino-lumificyber](https://discuss.elastic.co/u/etrevino-lumificyber)\ **Replies:** 1\ **Last updated:** [September 9, 2026, 1:36am UTC](https://discuss.elastic.co/t/elastic-agent-9-3-7-cpu-spikes/390264 "2026-09-09T01:36:06Z")
I mostly see the spiking when apps are being opened or occasionally while they are being used. I tested using standard apps like Outlook, Excel, Word, Chrome. Doing a search in Chrome for example caused a spike from 7% t… --- ## [System integration does not report filesystem metrics for network-mounted filesystem](https://discuss.elastic.co/t/system-integration-does-not-report-filesystem-metrics-for-network-mounted-filesystem/389722)
**Author:** [@Barbarossa](https://discuss.elastic.co/u/Barbarossa)\ **Replies:** 2\ **Last updated:** [September 3, 2026, 9:07pm UTC](https://discuss.elastic.co/t/system-integration-does-not-report-filesystem-metrics-for-network-mounted-filesystem/389722 "2026-09-03T21:07:15Z")
Hi, I’m collecting host metrics from my Elasticsearch nodes using the System integration. Filesystem metrics are collected correctly for all of my local mount points under /mnt/\*, for example /mnt/es\_data, but I’m not … --- ## [Error fetching data for metricset system.service](https://discuss.elastic.co/t/error-fetching-data-for-metricset-system-service/389951)
**Author:** [@Viktor\_Movita](https://discuss.elastic.co/u/Viktor_Movita)\ **Replies:** 1\ **Last updated:** [August 31, 2026, 5:12am UTC](https://discuss.elastic.co/t/error-fetching-data-for-metricset-system-service/389951 "2026-08-31T05:12:50Z")
Hello everyone, I’m using Elastic Agent version 8.19.14, managed by Fleet, with the Linux Metrics integration to collect the status of Systemd units. Sometimes I notice that the agent becomes “Unhealthy” due to the fol… --- ## [Response\_split not splitting final response after a chain/while sequence completes](https://discuss.elastic.co/t/response-split-not-splitting-final-response-after-a-chain-while-sequence-completes/389417)
**Author:** [@lduvnjak](https://discuss.elastic.co/u/lduvnjak)\ **Replies:** 2\ **Last updated:** [August 20, 2026, 10:42pm UTC](https://discuss.elastic.co/t/response-split-not-splitting-final-response-after-a-chain-while-sequence-completes/389417 "2026-08-20T22:42:35Z")
I have a working chain/while setup that polls an async job-status endpoint until completion — this part works correctly, and only the final ("finished") response reaches message/event.original, as expected. The problem:… --- ## [Fleet Server - disable certificate verification](https://discuss.elastic.co/t/fleet-server-disable-certificate-verification/389825)
**Author:** [@Rnx](https://discuss.elastic.co/u/Rnx)\ **Replies:** 1\ **Last updated:** [August 20, 2026, 3:07pm UTC](https://discuss.elastic.co/t/fleet-server-disable-certificate-verification/389825 "2026-08-20T15:07:59Z")
Hi How can I disable cert verification on integrations running on Fleet Server? The agent (fleet server) is Fleet Managed, running as a service on Linux. All agents are running well, sending logs and metrics, however, … --- ## [Can't Install Elastic Agent On Windows Server](https://discuss.elastic.co/t/cant-install-elastic-agent-on-windows-server/389779)
**Author:** [@mureeb](https://discuss.elastic.co/u/mureeb)\ **Replies:** 0\ **Last updated:** [August 19, 2026, 10:17am UTC](https://discuss.elastic.co/t/cant-install-elastic-agent-on-windows-server/389779 "2026-08-19T10:17:48Z")
Environment Context: OS: Windows (x86\_64) Elastic Agent Version: 9.5.1 Deployment: Fleet-managed (On-Prem/Self-Managed Fleet Server) Endpoint Protection: Kaspersky EDR (Disabled during troubleshooting) Iss… --- ## [Security Update Cadence Concern - Too Frequent for Enterprise Upgrade Cycles and Recurring Fleet Vulnerabilities](https://discuss.elastic.co/t/security-update-cadence-concern-too-frequent-for-enterprise-upgrade-cycles-and-recurring-fleet-vulnerabilities/386569)
**Author:** [@Tortoise](https://discuss.elastic.co/u/Tortoise)\ **Replies:** 4\ **Last updated:** [August 13, 2026, 12:37pm UTC](https://discuss.elastic.co/t/security-update-cadence-concern-too-frequent-for-enterprise-upgrade-cycles-and-recurring-fleet-vulnerabilities/386569 "2026-08-13T12:37:55Z")
Hi Elastic team and community, I want to raise a concern around the frequency of security updates and the recurring nature of vulnerabilities in the Fleet plugin specifically. Looking at the Security Announcements foru… --- ## [Indices Stack Monitoring - Cannot expand \`inner\_hits\` for collapse field \`index\_stats.index\`](https://discuss.elastic.co/t/indices-stack-monitoring-cannot-expand-inner-hits-for-collapse-field-index-stats-index/386205)
**Author:** [@adminunix](https://discuss.elastic.co/u/adminunix)\ **Replies:** 3\ **Last updated:** [August 12, 2026, 3:53pm UTC](https://discuss.elastic.co/t/indices-stack-monitoring-cannot-expand-inner-hits-for-collapse-field-index-stats-index/386205 "2026-08-12T15:53:42Z")
Hello, We have updated to Elasticsearch 9.4.0, Kibana 9.4.0, Elastic Agent 9.4.0 and Elasticsearch monitoring integration 1.20.2. Since then, the Stack Monitong Indices tab is broken and does not load the dashboard: … --- ## [Change grpc port to 6788 on fleet controled agent](https://discuss.elastic.co/t/change-grpc-port-to-6788-on-fleet-controled-agent/388416)
**Author:** [@GKre](https://discuss.elastic.co/u/GKre)\ **Replies:** 12\ **Last updated:** [August 8, 2026, 4:44am UTC](https://discuss.elastic.co/t/change-grpc-port-to-6788-on-fleet-controled-agent/388416 "2026-08-08T04:44:56Z")
Hello, i want to install UniFi OS Server on my windows server. Unfortunately the elastic agent is using port 6789. I wonder if i can change this with a dedicated policy for this server? seems like agent.grpc.port: 67… --- ## [Fleet Server Enroll failure](https://discuss.elastic.co/t/fleet-server-enroll-failure/388685)
**Author:** [@Zaryab\_Shaikh](https://discuss.elastic.co/u/Zaryab_Shaikh)\ **Replies:** 4\ **Last updated:** [July 30, 2026, 7:11am UTC](https://discuss.elastic.co/t/fleet-server-enroll-failure/388685 "2026-07-30T07:11:51Z")
Title: Fleet Server on External Ubuntu VM Fails to Bootstrap with ECK Deployment Dear Community, I hope you are doing well. I am trying to deploy a standalone Fleet Server on an Ubuntu VM and connect it to my Elastic … --- ## [Elastic stack \> Monitoring \> Indices Not Showing the indices](https://discuss.elastic.co/t/elastic-stack-monitoring-indices-not-showing-the-indices/387608)
**Author:** [@kkumar123](https://discuss.elastic.co/u/kkumar123)\ **Replies:** 3\ **Last updated:** [July 15, 2026, 8:39pm UTC](https://discuss.elastic.co/t/elastic-stack-monitoring-indices-not-showing-the-indices/387608 "2026-07-15T20:39:37Z")
Kibana Stack monitoring \> Indices not showing indices i have monitoring enabled via elastic agent and currently i see other monitoring stats but this one tab is not showing any indices stats Elastic Stack \> Kibana ela… --- ## [Elastic agent / kibana http requests to 169.254.169.254 on startup](https://discuss.elastic.co/t/elastic-agent-kibana-http-requests-to-169-254-169-254-on-startup/388325)
**Author:** [@username456](https://discuss.elastic.co/u/username456)\ **Replies:** 3\ **Last updated:** [July 15, 2026, 7:41am UTC](https://discuss.elastic.co/t/elastic-agent-kibana-http-requests-to-169-254-169-254-on-startup/388325 "2026-07-15T07:41:44Z")
We've noticed that restarting the Elastic Agent or Kibana service results in outgoing requests to 169.254.169.254 on ports 80 and 443. Does anyone know why these requests are made and whether this behavior can be disabl… --- ## [Elastic Agent Go update to v0.52.0](https://discuss.elastic.co/t/elastic-agent-go-update-to-v0-52-0/388334)
**Author:** [@rdmorris1914](https://discuss.elastic.co/u/rdmorris1914)\ **Replies:** 0\ **Last updated:** [July 14, 2026, 2:59pm UTC](https://discuss.elastic.co/t/elastic-agent-go-update-to-v0-52-0/388334 "2026-07-14T14:59:05Z")
There are several CVE's covered in the May 22 release of Go v0.52.0 which are not covered in the latest agent. When will Go be updated? The following CVEs are all present in the Linux Agent 9.4.3: CVE-2026-46595 CVE-20… --- ## [Unable to get keyspace metrics for Redis Integration](https://discuss.elastic.co/t/unable-to-get-keyspace-metrics-for-redis-integration/388123)
**Author:** [@Mansi\_Sharma1](https://discuss.elastic.co/u/Mansi_Sharma1)\ **Replies:** 0\ **Last updated:** [July 10, 2026, 1:06pm UTC](https://discuss.elastic.co/t/unable-to-get-keyspace-metrics-for-redis-integration/388123 "2026-07-10T13:06:45Z")
Hello, I integrated Redis Integration my Elastic Stack version is 9.1.2. For 1 service every dataset is coming. but for rest 3 the keyspace dataset is not populating anything. i cant even see the redis.keyspace datas… --- ## [Ingesting Logs Without Integration Approach (SIEM)](https://discuss.elastic.co/t/ingesting-logs-without-integration-approach-siem/387666)
**Author:** [@jatin3101](https://discuss.elastic.co/u/jatin3101)\ **Replies:** 1\ **Last updated:** [July 7, 2026, 2:14pm UTC](https://discuss.elastic.co/t/ingesting-logs-without-integration-approach-siem/387666 "2026-07-07T14:14:35Z")
I have been taksed to ingest logs of APPS/WEBSITES which are hosted on cloud like SAP S/4 , paypac , tally etc etc (30+apps - mainly proprietary/internal apps like ) Q1. what approach should i be using each time i get … --- ## [Filebeat to Elastic Agent(otel collector) migration - 9.4.2](https://discuss.elastic.co/t/filebeat-to-elastic-agent-otel-collector-migration-9-4-2/387302)
**Author:** [@Ts\_P](https://discuss.elastic.co/u/Ts_P)\ **Replies:** 7\ **Last updated:** [July 7, 2026, 1:15pm UTC](https://discuss.elastic.co/t/filebeat-to-elastic-agent-otel-collector-migration-9-4-2/387302 "2026-07-07T13:15:03Z")
I am currently migrating our existing Filebeat-based log collection architecture to the Elastic Agent as OpenTelemetry Collector approach and would appreciate some clarification. I am following the "Elastic Agent as O… --- ## [In oracle integration, The sysmetric dataset is not being populated ? Could it be because of the oracle db being a PDB instead of CDB?](https://discuss.elastic.co/t/in-oracle-integration-the-sysmetric-dataset-is-not-being-populated-could-it-be-because-of-the-oracle-db-being-a-pdb-instead-of-cdb/387344)
**Author:** [@Mansi\_Sharma1](https://discuss.elastic.co/u/Mansi_Sharma1)\ **Replies:** 0\ **Last updated:** [June 26, 2026, 9:08am UTC](https://discuss.elastic.co/t/in-oracle-integration-the-sysmetric-dataset-is-not-being-populated-could-it-be-because-of-the-oracle-db-being-a-pdb-instead-of-cdb/387344 "2026-06-26T09:08:02Z")
Hi, I integrated a oracle db using elastic agent oracle integration, the rest of the datastream\_datasets are populating all of the fields execept for the SYSMETRIC one. I even checked with the DB team and they have gra… --- ## [\[PSA\] Data shipped via Elastic Agent 9.3.4 might be dropped due to problem in the serialization of time fields](https://discuss.elastic.co/t/psa-data-shipped-via-elastic-agent-9-3-4-might-be-dropped-due-to-problem-in-the-serialization-of-time-fields/386888)
**Author:** [@Luca\_Belluccini](https://discuss.elastic.co/u/Luca_Belluccini)\ **Replies:** 0\ **Last updated:** [June 17, 2026, 4:36pm UTC](https://discuss.elastic.co/t/psa-data-shipped-via-elastic-agent-9-3-4-might-be-dropped-due-to-problem-in-the-serialization-of-time-fields/386888 "2026-06-17T16:36:04Z")
A performance optimization in Elastic Agent 9.3.4 causes timestamp fields sent from Beats based inputs and integrations to be incorrectly serialized to an empty {} JSON object. This does not affect the primary @timestamp … --- ## [404 when curl URL Ingest, Elasticsearch and Fleet](https://discuss.elastic.co/t/404-when-curl-url-ingest-elasticsearch-and-fleet/386860)
**Author:** [@steven.p](https://discuss.elastic.co/u/steven.p)\ **Replies:** 3\ **Last updated:** [June 16, 2026, 2:12pm UTC](https://discuss.elastic.co/t/404-when-curl-url-ingest-elasticsearch-and-fleet/386860 "2026-06-16T14:12:17Z")
Hi I am just trying to understand when doing a CURL on the URLs of Fleet, Elasticsearch and Ingest, that it always presents a 404. This is with an agents installed and without. Is there some sort of block? --- ## [Unable to create private location](https://discuss.elastic.co/t/unable-to-create-private-location/386864)
**Author:** [@umesh2020](https://discuss.elastic.co/u/umesh2020)\ **Replies:** 2\ **Last updated:** [June 16, 2026, 10:09am UTC](https://discuss.elastic.co/t/unable-to-create-private-location/386864 "2026-06-16T10:09:02Z")
Invalid spaces. Private location spaces \[default\] must be fully contained within agent policy 532963e5-1c04-4475-b0a3-0d807c6a12e7 spaces \[\]. GET kbn:/api/fleet/agent\_policies/532963e5-1c04-4475-b0a3-0d807c6a12e7 { "… --- ## [Spring WebFlux 7 (Spring Boot 4): NoSuchMethodError in DispatcherHandlerInstrumentation](https://discuss.elastic.co/t/spring-webflux-7-spring-boot-4-nosuchmethoderror-in-dispatcherhandlerinstrumentation/386817)
**Author:** [@VVK](https://discuss.elastic.co/u/VVK)\ **Replies:** 1\ **Last updated:** [June 16, 2026, 5:09am UTC](https://discuss.elastic.co/t/spring-webflux-7-spring-boot-4-nosuchmethoderror-in-dispatcherhandlerinstrumentation/386817 "2026-06-16T05:09:49Z")
Hi there, When the fix will be released? Looking eagerly for above fix. Current latest build 1.55.6 has been released in April 2nd week. Regards --- ## [Newly created Agent policy has space\_id set to null in version 9.4.2](https://discuss.elastic.co/t/newly-created-agent-policy-has-space-id-set-to-null-in-version-9-4-2/386845)
**Author:** [@umesh2020](https://discuss.elastic.co/u/umesh2020)\ **Replies:** 3\ **Last updated:** [June 13, 2026, 12:14am UTC](https://discuss.elastic.co/t/newly-created-agent-policy-has-space-id-set-to-null-in-version-9-4-2/386845 "2026-06-13T00:14:32Z")
POST kbn://api/fleet/agent\_policies { "description": "Private Location Agent Policy", "monitoring\_enabled": \[ "logs", "metrics" \], "name": "Priv Location Agent Policy", "namespace": "default" } { "item": {… --- ## [Elastic Agents Update Issue Behind Proxy](https://discuss.elastic.co/t/elastic-agents-update-issue-behind-proxy/362361)
**Author:** [@werheids](https://discuss.elastic.co/u/werheids)\ **Replies:** 6\ **Last updated:** [June 12, 2026, 5:36pm UTC](https://discuss.elastic.co/t/elastic-agents-update-issue-behind-proxy/362361 "2026-06-12T17:36:33Z")
Hello, I'm having an issue where my Elastic Agents are unable to update. The following error occurs: \[elastic\_agent\]\[warn\] unable to download package: 2 errors occurred: \* package '/opt/Elastic/Agent/data/elastic-agen… [Next page](https://discuss.elastic.co/c/elastic-stack/elastic-agent/91.md?page=1)