# Elastic Agent **URL:** https://discuss.elastic.co/c/elastic-stack/elastic-agent/91.md?page=11 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 12 --- ## [Grok for this log format](https://discuss.elastic.co/t/grok-for-this-log-format/373247)
**Author:** [@nkknkk](https://discuss.elastic.co/u/nkknkk)\ **Replies:** 16\ **Last updated:** [January 23, 2025, 3:59pm UTC](https://discuss.elastic.co/t/grok-for-this-log-format/373247 "2025-01-23T15:59:02Z")
Hi, I am trying to parse log file. I am using elastic agent. below is the log format \[\<1 15, 2025 11:12:12 AM\>: This is message1\] \[\<1 15, 2025 11:12:12 AM\>: This is message2 \] This is the grok i am using and it only … --- ## ["Combined beat ran only by the Elastic Agent" Processes Running in Task Manager](https://discuss.elastic.co/t/combined-beat-ran-only-by-the-elastic-agent-processes-running-in-task-manager/373406)
**Author:** [@pcglr](https://discuss.elastic.co/u/pcglr)\ **Replies:** 2\ **Last updated:** [January 23, 2025, 8:18am UTC](https://discuss.elastic.co/t/combined-beat-ran-only-by-the-elastic-agent-processes-running-in-task-manager/373406 "2025-01-23T08:18:22Z")
Hi everyone, I'm encountering an issue where multiple processes named "Combined beat ran only by the Elastic Agent" are running simultaneously on my system. I'm using Elastic Agent to manage and collect logs. I notice… --- ## [Oracle Integration in Elastic](https://discuss.elastic.co/t/oracle-integration-in-elastic/373492)
**Author:** [@Ankita\_Pachauri](https://discuss.elastic.co/u/Ankita_Pachauri)\ **Replies:** 0\ **Last updated:** [January 22, 2025, 5:00am UTC](https://discuss.elastic.co/t/oracle-integration-in-elastic/373492 "2025-01-22T05:00:07Z")
Hi Team, During the Oracle Integration, i faced the below attached error. (upload://dyJsAvKaG9uFfCDyUxHDdPjoQuV.png) However, I have fixed it by using the below procedure and now getting the error as: Steps: Che… --- ## [Full file snapshot ingest](https://discuss.elastic.co/t/full-file-snapshot-ingest/373399)
**Author:** [@catn0b0t](https://discuss.elastic.co/u/catn0b0t)\ **Replies:** 0\ **Last updated:** [January 20, 2025, 11:16am UTC](https://discuss.elastic.co/t/full-file-snapshot-ingest/373399 "2025-01-20T11:16:32Z")
We have a case where we want to monitor a specific file on a lot of hosts enrolled in our fleet and we want to read the entire file every time it changes. Currently we are struggling with the custom log ingest since it i… --- ## [Documents Dropped in Ingestion Pipeline for Okta Integration](https://discuss.elastic.co/t/documents-dropped-in-ingestion-pipeline-for-okta-integration/373375)
**Author:** [@Felipe\_Matamoros](https://discuss.elastic.co/u/Felipe_Matamoros)\ **Replies:** 0\ **Last updated:** [January 20, 2025, 3:30am UTC](https://discuss.elastic.co/t/documents-dropped-in-ingestion-pipeline-for-okta-integration/373375 "2025-01-20T03:30:53Z")
Hello Elastic Community, I hope you’re all doing well. I’m reaching out to request your guidance on an issue I’m facing with an ingestion pipeline in Elastic for an Okta 2.11 integration. Some documents are being dropp… --- ## [Running Elastic agent 8.17 on Raspberry Pi 4](https://discuss.elastic.co/t/running-elastic-agent-8-17-on-raspberry-pi-4/373335)
**Author:** [@Vincent\_Maury](https://discuss.elastic.co/u/Vincent_Maury)\ **Replies:** 1\ **Last updated:** [January 17, 2025, 3:18pm UTC](https://discuss.elastic.co/t/running-elastic-agent-8-17-on-raspberry-pi-4/373335 "2025-01-17T15:18:16Z")
Hi! I'm trying to run the Elastic agent 8.17.0 on a raspberry Pi 4. I tried several flavours, starting with the arm64: vincent@raspberrypi:~/elastic-agent-8.17.0-linux-arm64 $ sudo ./elastic-agent install --url=URL --… --- ## [System integration not follow new mapping structure for index.mapping.source.mode](https://discuss.elastic.co/t/system-integration-not-follow-new-mapping-structure-for-index-mapping-source-mode/373330)
**Author:** [@dbc](https://discuss.elastic.co/u/dbc)\ **Replies:** 0\ **Last updated:** [January 17, 2025, 1:34pm UTC](https://discuss.elastic.co/t/system-integration-not-follow-new-mapping-structure-for-index-mapping-source-mode/373330 "2025-01-17T13:34:41Z")
After updating Elastic to version 8.17, and having updated all integrations and Elastic Agents, I noticed that I get several Critical deprecation issues related to the change to use index.mapping.source.mode. Having loo… --- ## [Elastic Agent with Kubernetes integration conflicting with System integration](https://discuss.elastic.co/t/elastic-agent-with-kubernetes-integration-conflicting-with-system-integration/371106)
**Author:** [@ingmf](https://discuss.elastic.co/u/ingmf)\ **Replies:** 3\ **Last updated:** [January 15, 2025, 6:23pm UTC](https://discuss.elastic.co/t/elastic-agent-with-kubernetes-integration-conflicting-with-system-integration/371106 "2025-01-15T18:23:57Z")
Hello, I have installed a Fleet Server and I am using Elastic Agent 8.15.5 as Daemonset on Kubernetes. In my Agent Policy I have added system & kubernetes integration together but not all Kubernetes metrics are coming … --- ## [Debug logs not working](https://discuss.elastic.co/t/debug-logs-not-working/362801)
**Author:** [@chntatxt](https://discuss.elastic.co/u/chntatxt)\ **Replies:** 3\ **Last updated:** [January 15, 2025, 4:58pm UTC](https://discuss.elastic.co/t/debug-logs-not-working/362801 "2025-01-15T16:58:30Z")
Hello Elastic community, I have an issue with elastic-agent debug logging, perhaps you could help me ? Some events are dropped because the mapping changed o logs, but it's impossible for me to find where exactly, i hav… --- ## [Heartbeat roles that are required](https://discuss.elastic.co/t/heartbeat-roles-that-are-required/373189)
**Author:** [@Gong](https://discuss.elastic.co/u/Gong)\ **Replies:** 0\ **Last updated:** [January 14, 2025, 4:00pm UTC](https://discuss.elastic.co/t/heartbeat-roles-that-are-required/373189 "2025-01-14T16:00:18Z")
Hi, I'm integrating Heartbeat and I've created a user but despite reading the doc's including Grant users access to secured resources | Heartbeat Reference \[8.17\] | Elastic and scribbling a page of notes, I'm still gett… --- ## [Elastic Agent Panic with nil pointer on \`null\` processor](https://discuss.elastic.co/t/elastic-agent-panic-with-nil-pointer-on-null-processor/373078)
**Author:** [@BenB196](https://discuss.elastic.co/u/BenB196)\ **Replies:** 0\ **Last updated:** [January 10, 2025, 7:55pm UTC](https://discuss.elastic.co/t/elastic-agent-panic-with-nil-pointer-on-null-processor/373078 "2025-01-10T19:55:08Z")
Hi, I was wondering if anyone else has hit this issue, if I define a null processor in an integration policy, the Elastic Agent will immediately enter a crashloop with the error: panic: runtime error: invalid memory add… --- ## [Elastic endpoint high CPU usage](https://discuss.elastic.co/t/elastic-endpoint-high-cpu-usage/373055)
**Author:** [@mike123](https://discuss.elastic.co/u/mike123)\ **Replies:** 0\ **Last updated:** [January 10, 2025, 11:04am UTC](https://discuss.elastic.co/t/elastic-endpoint-high-cpu-usage/373055 "2025-01-10T11:04:01Z")
I could observe high CPU usage by elastic endpoint in my machines. I also found that elastic agents CPU usage can be controlled using Limit CPU usage option in elastic agent policy settings. Will this setting be applied … --- ## [Struggling with Elastic Agent Log Forwarding in ELK Stack Setup](https://discuss.elastic.co/t/struggling-with-elastic-agent-log-forwarding-in-elk-stack-setup/373024)
**Author:** [@pok\_lehbim](https://discuss.elastic.co/u/pok_lehbim)\ **Replies:** 1\ **Last updated:** [January 9, 2025, 6:55pm UTC](https://discuss.elastic.co/t/struggling-with-elastic-agent-log-forwarding-in-elk-stack-setup/373024 "2025-01-09T18:55:44Z")
Hello everyone, I'm in the process of setting up an ELK stack for my home lab, and I've hit a brick wall regarding Elastic Agent's ability to send logs. Despite following the setup carefully and ensuring everything conn… --- ## [Fleet server - dial tcp connection refused](https://discuss.elastic.co/t/fleet-server-dial-tcp-connection-refused/372912)
**Author:** [@aldafalda](https://discuss.elastic.co/u/aldafalda)\ **Replies:** 4\ **Last updated:** [January 9, 2025, 11:51am UTC](https://discuss.elastic.co/t/fleet-server-dial-tcp-connection-refused/372912 "2025-01-09T11:51:18Z")
Hi, I have docker compose file for elasticsearch, kibana, elastic-agent and fleet server (version 8.17.0). Elasticsearch works well with Kibana. The problem is with starting fleet server where the starting procedure fai… --- ## [File was truncated. Begin reading file from offset 0 multiple time](https://discuss.elastic.co/t/file-was-truncated-begin-reading-file-from-offset-0-multiple-time/371459)
**Author:** [@Mimouz](https://discuss.elastic.co/u/Mimouz)\ **Replies:** 5\ **Last updated:** [January 9, 2025, 9:31am UTC](https://discuss.elastic.co/t/file-was-truncated-begin-reading-file-from-offset-0-multiple-time/371459 "2025-01-09T09:31:04Z")
Hi, I'm new to the ELK stack and currently exploring its features for log aggregation. We are using tomcat-9 and elk stack 8.5.1 and we faced an issue that the logs are duplicated in Kibana more then 3 or 5 times depen… --- ## [Does Elastic Agent support kafka as an input?](https://discuss.elastic.co/t/does-elastic-agent-support-kafka-as-an-input/372878)
**Author:** [@Priyanka\_chauhan](https://discuss.elastic.co/u/Priyanka_chauhan)\ **Replies:** 4\ **Last updated:** [January 7, 2025, 8:12pm UTC](https://discuss.elastic.co/t/does-elastic-agent-support-kafka-as-an-input/372878 "2025-01-07T20:12:31Z")
If I have to send logs data from kafka topic of cisco ise logs for using CISO integration using elastic agent . how to setup that . As I am getting that kafka input is not supporting in elastic agent yaml . --- ## [Elastic Agent container image cannot read logs from Journal](https://discuss.elastic.co/t/elastic-agent-container-image-cannot-read-logs-from-journal/372905)
**Author:** [@lpeter](https://discuss.elastic.co/u/lpeter)\ **Replies:** 0\ **Last updated:** [January 7, 2025, 6:56pm UTC](https://discuss.elastic.co/t/elastic-agent-container-image-cannot-read-logs-from-journal/372905 "2025-01-07T18:56:02Z")
Hello! I'm fairly certain this is a bug, but on GitHub I'm told to post here, so here we go: Since Journal logs are now read via journalctl (PR) the agent container (8.17.0 for example) cannot read journal system logs … --- ## [Error while setting up agent](https://discuss.elastic.co/t/error-while-setting-up-agent/372750)
**Author:** [@Ahmad3](https://discuss.elastic.co/u/Ahmad3)\ **Replies:** 3\ **Last updated:** [January 6, 2025, 10:33pm UTC](https://discuss.elastic.co/t/error-while-setting-up-agent/372750 "2025-01-06T22:33:27Z")
has anyone encountered this annoying error, i tried deleting re trying nothing seems to work. --- ## [Elastic agent is not able to read files defined in configuration file](https://discuss.elastic.co/t/elastic-agent-is-not-able-to-read-files-defined-in-configuration-file/372843)
**Author:** [@Eshwar\_K](https://discuss.elastic.co/u/Eshwar_K)\ **Replies:** 3\ **Last updated:** [January 6, 2025, 4:00pm UTC](https://discuss.elastic.co/t/elastic-agent-is-not-able-to-read-files-defined-in-configuration-file/372843 "2025-01-06T16:00:36Z")
Hi Community, I am trying to integrate Symantec endpoint protection with elastic stack but not able to fetch Symantec data into elastic. I had tried with log input file option which elastic agent read the file in the g… --- ## [Not enough Privileges Elastic\_agent.metricbeat logs errors on Windows](https://discuss.elastic.co/t/not-enough-privileges-elastic-agent-metricbeat-logs-errors-on-windows/372321)
**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\ **Replies:** 5\ **Last updated:** [January 6, 2025, 3:46pm UTC](https://discuss.elastic.co/t/not-enough-privileges-elastic-agent-metricbeat-logs-errors-on-windows/372321 "2025-01-06T15:46:15Z")
Hello, The elastic\_agent.metricbeat contains a lot of errors such as: Error fetching data for metricset system.process\_summary: Not enough privileges to fetch information: Not enough privileges to fetch information: Ge… --- ## [Unable to use tail in cel ymp.hbs for integration package data stream agent](https://discuss.elastic.co/t/unable-to-use-tail-in-cel-ymp-hbs-for-integration-package-data-stream-agent/372801)
**Author:** [@RAVIKUMAR\_IGHARE](https://discuss.elastic.co/u/RAVIKUMAR_IGHARE)\ **Replies:** 0\ **Last updated:** [January 5, 2025, 2:39am UTC](https://discuss.elastic.co/t/unable-to-use-tail-in-cel-ymp-hbs-for-integration-package-data-stream-agent/372801 "2025-01-05T02:39:59Z")
Elastic search integration development Data stream - agent - cel yml.hbs I am trying to use tail(\[1,2,3,4\]) inside cel.yml.hbs file Which is supposed to return \[2,3,4\] But I'm getting error - failed to check program:… --- ## [Unable to install new version of agent (fleet managed)](https://discuss.elastic.co/t/unable-to-install-new-version-of-agent-fleet-managed/372742)
**Author:** [@jay29300](https://discuss.elastic.co/u/jay29300)\ **Replies:** 1\ **Last updated:** [January 3, 2025, 6:54pm UTC](https://discuss.elastic.co/t/unable-to-install-new-version-of-agent-fleet-managed/372742 "2025-01-03T18:54:29Z")
Hello. I try to install agent with fleet integration but i don't understand why it doesn't work. in fleet i have this script: $ProgressPreference = 'SilentlyContinue' Invoke-WebRequest -Uri http://srv-ansible:8088/end… --- ## [Cloudwatch logs to Kafka using Elastic agent](https://discuss.elastic.co/t/cloudwatch-logs-to-kafka-using-elastic-agent/372736)
**Author:** [@ErGeek](https://discuss.elastic.co/u/ErGeek)\ **Replies:** 0\ **Last updated:** [January 3, 2025, 8:25am UTC](https://discuss.elastic.co/t/cloudwatch-logs-to-kafka-using-elastic-agent/372736 "2025-01-03T08:25:23Z")
Hi All, We are trying to get Cloudwatch logs to Kafka using the elastic agent using the below config: agent: logging: files: keepfiles: 7 name: elastic-agent path: /var/log/elastic-agent/ … --- ## [Unable to uninstall elastic agent silently](https://discuss.elastic.co/t/unable-to-uninstall-elastic-agent-silently/372645)
**Author:** [@Al1984](https://discuss.elastic.co/u/Al1984)\ **Replies:** 1\ **Last updated:** [December 30, 2024, 11:37pm UTC](https://discuss.elastic.co/t/unable-to-uninstall-elastic-agent-silently/372645 "2024-12-30T23:37:03Z")
Hi All, I'm trying to use the following query "C:\\Program Files\\Elastic\\Agent\\elastic-agent.exe uninstall" to uninstall the Elastic agent on many devices, if I run that script on one device it uninstall the agent success… --- ## [Adding new raw data, requesting suggestions](https://discuss.elastic.co/t/adding-new-raw-data-requesting-suggestions/372607)
**Author:** [@Trent-alex](https://discuss.elastic.co/u/Trent-alex)\ **Replies:** 9\ **Last updated:** [December 30, 2024, 8:17pm UTC](https://discuss.elastic.co/t/adding-new-raw-data-requesting-suggestions/372607 "2024-12-30T20:17:31Z")
Hello Community, I appreciate you. Ok, on to my question. I have 30 TB of data on a windows drive that I plan to move to my linux cluster, hosting elastic stack. All resources are self managed on premises. For referen… --- ## [Analysis on the Data Usage in Elastic](https://discuss.elastic.co/t/analysis-on-the-data-usage-in-elastic/372614)
**Author:** [@vishal96](https://discuss.elastic.co/u/vishal96)\ **Replies:** 1\ **Last updated:** [December 30, 2024, 1:57pm UTC](https://discuss.elastic.co/t/analysis-on-the-data-usage-in-elastic/372614 "2024-12-30T13:57:30Z")
Hi Elastic Community, I need some guidance in analyzing the data usage in the Elastic Tool. My first objective is to fetch the daily/weekly/monthly data usage. My second objective is to find how much data is sent to t… --- ## [Grok Parsing Error When Integrating Elastic Agent with Juniper SRX](https://discuss.elastic.co/t/grok-parsing-error-when-integrating-elastic-agent-with-juniper-srx/372346)
**Author:** [@wangsubo](https://discuss.elastic.co/u/wangsubo)\ **Replies:** 4\ **Last updated:** [December 25, 2024, 7:32am UTC](https://discuss.elastic.co/t/grok-parsing-error-when-integrating-elastic-agent-with-juniper-srx/372346 "2024-12-25T07:32:11Z")
Hello everyone, I encountered an issue while integrating Elastic Agent with Juniper SRX and would like to seek some help or suggestions. I have configured Juniper to send structured-data logs via syslog to Elastic Agen… --- ## [Qualys VMDR bug](https://discuss.elastic.co/t/qualys-vmdr-bug/362777)
**Author:** [@djkprojects](https://discuss.elastic.co/u/djkprojects)\ **Replies:** 5\ **Last updated:** [December 23, 2024, 9:55pm UTC](https://discuss.elastic.co/t/qualys-vmdr-bug/362777 "2024-12-23T21:55:55Z")
Hello, It looks that the v4.0.0 of Qualys VMDR integration is broken as when enabling Host Detection we are getting the following error: failed to check program: failed compilation: ERROR: :15:9: unsupported syntax '?… --- ## [Qualys VMDR integration, add Qualys Tags in documents](https://discuss.elastic.co/t/qualys-vmdr-integration-add-qualys-tags-in-documents/368891)
**Author:** [@Juma](https://discuss.elastic.co/u/Juma)\ **Replies:** 1\ **Last updated:** [December 23, 2024, 9:50pm UTC](https://discuss.elastic.co/t/qualys-vmdr-integration-add-qualys-tags-in-documents/368891 "2024-12-23T21:50:45Z")
Hello everybody, we are an MSP providing security services for our customers. The customers in our Qualys environment are divided by different tags inside of Qualys, like cust:CUST1, cust:CUST2... For now we use a sel… --- ## [Ingesting AWS Glue Metrics into Elasticsearch](https://discuss.elastic.co/t/ingesting-aws-glue-metrics-into-elasticsearch/371629)
**Author:** [@mkirankumar](https://discuss.elastic.co/u/mkirankumar)\ **Replies:** 1\ **Last updated:** [December 23, 2024, 9:44am UTC](https://discuss.elastic.co/t/ingesting-aws-glue-metrics-into-elasticsearch/371629 "2024-12-23T09:44:52Z")
Hello Community, I have an Elastic integration with AWS, where the Elastic Agent (running on EC2) fetches metrics from AWS CloudWatch and stores them in an index. Metrics for various resources (EC2, RDS, DynamoDB, ECS, … [Previous page](https://discuss.elastic.co/c/elastic-stack/elastic-agent/91.md?page=10) [Next page](https://discuss.elastic.co/c/elastic-stack/elastic-agent/91.md?page=12)