# Elastic Agent **URL:** https://discuss.elastic.co/c/elastic-stack/elastic-agent/91.md?page=12 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 13 --- ## [Elastic Agent is not getting configured properly](https://discuss.elastic.co/t/elastic-agent-is-not-getting-configured-properly/372034)
**Author:** [@ErGeek](https://discuss.elastic.co/u/ErGeek)\ **Replies:** 5\ **Last updated:** [December 20, 2024, 4:47am UTC](https://discuss.elastic.co/t/elastic-agent-is-not-getting-configured-properly/372034 "2024-12-20T04:47:27Z")
Hi Team, We have installed a standalone Elastic Agent on our machine to capture logs from the ForgeRock API. The logs are expected to be sent to a Kafka topic. While the Elastic Agent installation was successful , these… --- ## [API logs not coming after setting up Elastic Agent , Beats logs are coming](https://discuss.elastic.co/t/api-logs-not-coming-after-setting-up-elastic-agent-beats-logs-are-coming/372081)
**Author:** [@ErGeek](https://discuss.elastic.co/u/ErGeek)\ **Replies:** 14\ **Last updated:** [December 18, 2024, 6:18pm UTC](https://discuss.elastic.co/t/api-logs-not-coming-after-setting-up-elastic-agent-beats-logs-are-coming/372081 "2024-12-18T18:18:41Z")
Hi All, We have setup an Elastic Agent to send logs from an Application API to Kafka. We are able to establish the connection using the Elastic Agent. But instead of the API logs, we are getting Beat logs (Filebeat and… --- ## [Enhancing Ingestion Rate of Elastic Agent Reading from Azure Event Hub](https://discuss.elastic.co/t/enhancing-ingestion-rate-of-elastic-agent-reading-from-azure-event-hub/372162)
**Author:** [@RajuParipelly](https://discuss.elastic.co/u/RajuParipelly)\ **Replies:** 3\ **Last updated:** [December 18, 2024, 2:52pm UTC](https://discuss.elastic.co/t/enhancing-ingestion-rate-of-elastic-agent-reading-from-azure-event-hub/372162 "2024-12-18T14:52:07Z")
I have successfully deployed an Elastic Agent that interfaces with an Azure Event Hub. The current configuration processes approximately 5 to 10 million logs per hour, with individual log sizes ranging between 5 to 20 KB… --- ## [Double processor in ingest pipeline](https://discuss.elastic.co/t/double-processor-in-ingest-pipeline/371768)
**Author:** [@Cristina\_Marletta\_Li](https://discuss.elastic.co/u/Cristina_Marletta_Li)\ **Replies:** 30\ **Last updated:** [December 17, 2024, 3:24pm UTC](https://discuss.elastic.co/t/double-processor-in-ingest-pipeline/371768 "2024-12-17T15:24:28Z")
Hi all, it is possible to create a custom ingest pipeline associated with an integration and a specific Data Stream with 2 processors. The second one should process a field created by the first one. --- ## [Agent Unable to Start Service](https://discuss.elastic.co/t/agent-unable-to-start-service/358773)
**Author:** [@eleong](https://discuss.elastic.co/u/eleong)\ **Replies:** 3\ **Last updated:** [December 16, 2024, 10:28pm UTC](https://discuss.elastic.co/t/agent-unable-to-start-service/358773 "2024-12-16T22:28:14Z")
Hi, I am having issues with this 1 agent (I have 26 in my environment and all is running fine except for this 1 agent). When trying to start the service, it would start awhile and then shutdown on its own. Tried reins… --- ## [Elastic agent log](https://discuss.elastic.co/t/elastic-agent-log/371912)
**Author:** [@Cristina\_Marletta\_Li](https://discuss.elastic.co/u/Cristina_Marletta_Li)\ **Replies:** 1\ **Last updated:** [December 14, 2024, 11:09pm UTC](https://discuss.elastic.co/t/elastic-agent-log/371912 "2024-12-14T23:09:08Z")
Hi, where to find the event log (especially the log of a standalone agent where an integration is behaving abnormally)? --- ## [Calculating log size](https://discuss.elastic.co/t/calculating-log-size/371739)
**Author:** [@Snow](https://discuss.elastic.co/u/Snow)\ **Replies:** 5\ **Last updated:** [December 12, 2024, 12:56pm UTC](https://discuss.elastic.co/t/calculating-log-size/371739 "2024-12-12T12:56:39Z")
Hi, How to calculate size of logs generated by elastic defend integration in kibana portal? also need to calculate, sum of data collected by agents per log type. which field (es field name) will have size of event ? if… --- ## [Docker.elastic.co/beats/elastic-agent:8.16.1 wouldn't listen on UDP 9528](https://discuss.elastic.co/t/docker-elastic-co-beats-elastic-agent-8-16-1-wouldnt-listen-on-udp-9528/371881)
**Author:** [@AlexKulikovsky](https://discuss.elastic.co/u/AlexKulikovsky)\ **Replies:** 1\ **Last updated:** [December 12, 2024, 2:38am UTC](https://discuss.elastic.co/t/docker-elastic-co-beats-elastic-agent-8-16-1-wouldnt-listen-on-udp-9528/371881 "2024-12-12T02:38:47Z")
Hi Trying to enable the WatchGuard Firebox integration at the Elastic Cloud. The docker Agent is connected to Fleet, but doesn't start listening on port 9528/udp. I am getting the following error in the container's log… --- ## [Elastic agent - identification integration in the index](https://discuss.elastic.co/t/elastic-agent-identification-integration-in-the-index/371736)
**Author:** [@hofrichterovak](https://discuss.elastic.co/u/hofrichterovak)\ **Replies:** 2\ **Last updated:** [December 11, 2024, 12:35pm UTC](https://discuss.elastic.co/t/elastic-agent-identification-integration-in-the-index/371736 "2024-12-11T12:35:44Z")
Hello, I would like to ask how I can identify a specific integration in a data stream created by Elastic Agent. I would like to have a system in the data. In which field in the data stream index is the information stor… --- ## [How to modify the configuration of an already installed and active integration and put it online?](https://discuss.elastic.co/t/how-to-modify-the-configuration-of-an-already-installed-and-active-integration-and-put-it-online/371535)
**Author:** [@Cristina\_Marletta\_Li](https://discuss.elastic.co/u/Cristina_Marletta_Li)\ **Replies:** 1\ **Last updated:** [December 10, 2024, 6:49pm UTC](https://discuss.elastic.co/t/how-to-modify-the-configuration-of-an-already-installed-and-active-integration-and-put-it-online/371535 "2024-12-10T18:49:42Z")
Hi all, After modifying Trend Micro Vision One integration (setting 'preserve\_original\_event') and restarting the agent, what can I do to make the change effective? Thanks a lot! --- ## [Microsoft Office 365 integration not ingesting logs](https://discuss.elastic.co/t/microsoft-office-365-integration-not-ingesting-logs/371663)
**Author:** [@enyei](https://discuss.elastic.co/u/enyei)\ **Replies:** 1\ **Last updated:** [December 10, 2024, 6:43am UTC](https://discuss.elastic.co/t/microsoft-office-365-integration-not-ingesting-logs/371663 "2024-12-10T06:43:22Z")
Hi, I'm following this guide here to ingest Microsoft Office 365 logs from the Management API I've already created an application and granted these permissions to the application. I've also granted Admin consent to th… --- ## [Fortinet FortiGate Firewall Logs Integration apply ILM 1 day](https://discuss.elastic.co/t/fortinet-fortigate-firewall-logs-integration-apply-ilm-1-day/371724)
**Author:** [@juancamiloll](https://discuss.elastic.co/u/juancamiloll)\ **Replies:** 1\ **Last updated:** [December 9, 2024, 9:13pm UTC](https://discuss.elastic.co/t/fortinet-fortigate-firewall-logs-integration-apply-ilm-1-day/371724 "2024-12-09T21:13:37Z")
Hello I have installed the “Fortinet FortiGate Firewall Logs” integration. I did the respective configuration The datastream was created and I am receiving logs normally. My problem is that it took a poli… --- ## [Problem with Prometheus Integration](https://discuss.elastic.co/t/problem-with-prometheus-integration/353876)
**Author:** [@Lukasz\_Skrzat](https://discuss.elastic.co/u/Lukasz_Skrzat)\ **Replies:** 0\ **Last updated:** [February 22, 2024, 11:10am UTC](https://discuss.elastic.co/t/problem-with-prometheus-integration/353876 "2024-02-22T11:10:05Z")
Hi I use Prometheus Integration in my ECK stack 8.12.1 version Using with spring-boot java application and working good. But now i add kotlin app and have little problem {"log.level":"error","@timestamp":"2024-02-22T… --- ## [Extracting and mapping fields from event.original in Trend Micro Vision One Integration](https://discuss.elastic.co/t/extracting-and-mapping-fields-from-event-original-in-trend-micro-vision-one-integration/371206)
**Author:** [@cyberm](https://discuss.elastic.co/u/cyberm)\ **Replies:** 12\ **Last updated:** [December 6, 2024, 3:16pm UTC](https://discuss.elastic.co/t/extracting-and-mapping-fields-from-event-original-in-trend-micro-vision-one-integration/371206 "2024-12-06T15:16:06Z")
Hi everyone, I’m trying to properly configure the Vision One integration in Kibana to collect and manage logs. Here’s what I’ve done so far: I’ve set up the Vision One integration in Kibana. I’ve configured the policy… --- ## [Issue between Fleet-managed Elastic agent on external server and Fleet in k8s](https://discuss.elastic.co/t/issue-between-fleet-managed-elastic-agent-on-external-server-and-fleet-in-k8s/358911)
**Author:** [@LazyAgent](https://discuss.elastic.co/u/LazyAgent)\ **Replies:** 2\ **Last updated:** [December 6, 2024, 10:14am UTC](https://discuss.elastic.co/t/issue-between-fleet-managed-elastic-agent-on-external-server-and-fleet-in-k8s/358911 "2024-12-06T10:14:26Z")
Hi, My fleet-managed agent can't send logs (they are always dropped) to ES, but does send the metrics. The error message seen in the agent's status is a 504 Gateway Time-out. Additionally, we see this message in the ag… --- ## [Elastic Agent install rosetta error](https://discuss.elastic.co/t/elastic-agent-install-rosetta-error/371211)
**Author:** [@rschirin](https://discuss.elastic.co/u/rschirin)\ **Replies:** 17\ **Last updated:** [December 2, 2024, 8:10pm UTC](https://discuss.elastic.co/t/elastic-agent-install-rosetta-error/371211 "2024-12-02T20:10:32Z")
hey there, I have to be honest and admit that I have several doubt about Elastic Agent and Fleet so I was trying to monitor a production-fake Elasticsearch cluster using Elastic Agent enrolled by Fleet Server. I follow… --- ## [Netflow integration not listening on port 2055](https://discuss.elastic.co/t/netflow-integration-not-listening-on-port-2055/371283)
**Author:** [@ahsan0331](https://discuss.elastic.co/u/ahsan0331)\ **Replies:** 1\ **Last updated:** [December 2, 2024, 7:11pm UTC](https://discuss.elastic.co/t/netflow-integration-not-listening-on-port-2055/371283 "2024-12-02T19:11:13Z")
hi i have installed elastic 8 and kibana 8. I have installed the netflow from integration but when i check for open ports on server i do not see port 2055 open. when installing the integration it says to use elastica… --- ## [Fleet server restarting frequently](https://discuss.elastic.co/t/fleet-server-restarting-frequently/369140)
**Author:** [@sruthi.sattiraju](https://discuss.elastic.co/u/sruthi.sattiraju)\ **Replies:** 1\ **Last updated:** [December 2, 2024, 3:36pm UTC](https://discuss.elastic.co/t/fleet-server-restarting-frequently/369140 "2024-12-02T15:36:17Z")
we have Elastic Cluster installed on Kubernetes, I have the elastic agents managed by fleet installed on the wokernodes and data is getting pushed to elasticsearch. But I see fleet server getting restarted frequently. k… --- ## [Optimizing Elastic-Agent: How to Reliably Handle 20,000 EPS and Beyond](https://discuss.elastic.co/t/optimizing-elastic-agent-how-to-reliably-handle-20-000-eps-and-beyond/371273)
**Author:** [@wangsubo](https://discuss.elastic.co/u/wangsubo)\ **Replies:** 1\ **Last updated:** [December 2, 2024, 2:53pm UTC](https://discuss.elastic.co/t/optimizing-elastic-agent-how-to-reliably-handle-20-000-eps-and-beyond/371273 "2024-12-02T14:53:43Z")
First Test Scenario Setup: Apache JMeter (192.168.4.171) generates 20,000 EPS -\> Elastic-Agent (192.168.4.1:514) -\> Logstash (192.168.4.1:5044). Observation: Logs are not being forwarded from Logstash to Elasticsearc… --- ## [Fleet server missing config fleet.agent.id](https://discuss.elastic.co/t/fleet-server-missing-config-fleet-agent-id/369072)
**Author:** [@Hemanth\_Gowda](https://discuss.elastic.co/u/Hemanth_Gowda)\ **Replies:** 1\ **Last updated:** [December 2, 2024, 9:17am UTC](https://discuss.elastic.co/t/fleet-server-missing-config-fleet-agent-id/369072 "2024-12-02T09:17:53Z")
Hello, We are running fleet server in ECK environment. Recently we had to restart fleet server for tolerations related changes to make sure fleet server is not running on master node of our K8s cluster. But post that ch… --- ## [Fleet server installation issue with TLS and certificates](https://discuss.elastic.co/t/fleet-server-installation-issue-with-tls-and-certificates/369728)
**Author:** [@arcsons](https://discuss.elastic.co/u/arcsons)\ **Replies:** 1\ **Last updated:** [December 2, 2024, 9:01am UTC](https://discuss.elastic.co/t/fleet-server-installation-issue-with-tls-and-certificates/369728 "2024-12-02T09:01:17Z")
Hello Elastic I have some issue with a new Fleet installation. I'm trying to add the fleet server into my Kibana. I have scp over the http\_ca.crt from the Elastic to my Fleet server. But there is something I have mis… --- ## [Elastic agent 8.15.4 and 3 not installing wpcap/npcap.dll](https://discuss.elastic.co/t/elastic-agent-8-15-4-and-3-not-installing-wpcap-npcap-dll/370854)
**Author:** [@DJMogens](https://discuss.elastic.co/u/DJMogens)\ **Replies:** 2\ **Last updated:** [December 1, 2024, 8:32pm UTC](https://discuss.elastic.co/t/elastic-agent-8-15-4-and-3-not-installing-wpcap-npcap-dll/370854 "2024-12-01T20:32:00Z")
Just tried to upgrade my lab to elastic 8.15.4 and the elastic-agent doesn't install the wpcap.dll automatically. I had to manually install npcap to get packetbeat to start on the agents (via the network packet inspectio… --- ## [Mapping only specific attributes in the Vision One integration](https://discuss.elastic.co/t/mapping-only-specific-attributes-in-the-vision-one-integration/371209)
**Author:** [@cyberm](https://discuss.elastic.co/u/cyberm)\ **Replies:** 1\ **Last updated:** [November 28, 2024, 4:53pm UTC](https://discuss.elastic.co/t/mapping-only-specific-attributes-in-the-vision-one-integration/371209 "2024-11-28T16:53:55Z")
Hi everyone, I’m currently doing a full analysis of all the attributes I’m receiving through the default setup of the Vision One integration (Trend Micro) in Elasticsearch. While reviewing the data, I started wondering: … --- ## [Google Workspace Integration no logs been received](https://discuss.elastic.co/t/google-workspace-integration-no-logs-been-received/371147)
**Author:** [@flczaja](https://discuss.elastic.co/u/flczaja)\ **Replies:** 3\ **Last updated:** [November 28, 2024, 3:57pm UTC](https://discuss.elastic.co/t/google-workspace-integration-no-logs-been-received/371147 "2024-11-28T15:57:02Z")
Hi folks, I'm trying to configure Google Workspace Integration to receive audit reports, but there is no log been received. I've followed the integration doc, but looks like doen't work for me. I know I'm missing somet… --- ## [Elastic Agent on Kubernetes standalone did not collect some important metrics](https://discuss.elastic.co/t/elastic-agent-on-kubernetes-standalone-did-not-collect-some-important-metrics/371195)
**Author:** [@Iure\_Oliveira](https://discuss.elastic.co/u/Iure_Oliveira)\ **Replies:** 0\ **Last updated:** [November 28, 2024, 2:07pm UTC](https://discuss.elastic.co/t/elastic-agent-on-kubernetes-standalone-did-not-collect-some-important-metrics/371195 "2024-11-28T14:07:00Z")
Hello everyone, I’ve deployed Elastic Agent in standalone mode on my Kubernetes cluster (Elastic Stack version 8.14.3). While most of the data is being collected as expected, I’ve noticed that some important Kubernetes … --- ## [Issue with Labels in MSSQL Curated Dashboards](https://discuss.elastic.co/t/issue-with-labels-in-mssql-curated-dashboards/370898)
**Author:** [@Ankita\_Pachauri](https://discuss.elastic.co/u/Ankita_Pachauri)\ **Replies:** 1\ **Last updated:** [November 28, 2024, 6:06am UTC](https://discuss.elastic.co/t/issue-with-labels-in-mssql-curated-dashboards/370898 "2024-11-28T06:06:03Z")
Hi Team, We are using Elastic MSSQL integration (ELK Version 8.13.4) to pull error logs. The elastic agent is installed on the Windows node running the MSSQL service and is managed by fleet. The curated log dashboard do… --- ## [Proofpoint Integration Web Socket Unregistering](https://discuss.elastic.co/t/proofpoint-integration-web-socket-unregistering/371103)
**Author:** [@elasticfantastik](https://discuss.elastic.co/u/elasticfantastik)\ **Replies:** 1\ **Last updated:** [November 27, 2024, 7:28pm UTC](https://discuss.elastic.co/t/proofpoint-integration-web-socket-unregistering/371103 "2024-11-27T19:28:11Z")
We have an elastic agent running a "Proofpoint On Demand" integration. However, it sporadically stops getting data. To clarify, we poll the API once every hour, and at some unpredictable point, it completely stops gettin… --- ## [Tenable Integration](https://discuss.elastic.co/t/tenable-integration/371098)
**Author:** [@juancamiloll](https://discuss.elastic.co/u/juancamiloll)\ **Replies:** 4\ **Last updated:** [November 26, 2024, 9:56pm UTC](https://discuss.elastic.co/t/tenable-integration/371098 "2024-11-26T21:56:21Z")
Hello everyone, I have installed the tenable integration which asks me to generate an API key to be able to use it and perform the ingest. When I noticed that the logs were not arriving I proceeded to review the log… --- ## [Elastic Agent integration for Microsoft SQL Server](https://discuss.elastic.co/t/elastic-agent-integration-for-microsoft-sql-server/371077)
**Author:** [@tapiojaa](https://discuss.elastic.co/u/tapiojaa)\ **Replies:** 0\ **Last updated:** [November 26, 2024, 11:06am UTC](https://discuss.elastic.co/t/elastic-agent-integration-for-microsoft-sql-server/371077 "2024-11-26T11:06:41Z")
I have application that is saving logs to SQL database. Now I'm using Logstash to read data from DB and send it to Elasticsearch and it's working fine. We are now taking Elastic Agent with Fleet into use and it would be … --- ## [Fleet / APM-server Panic with Jenkins OpenTelemetry plugin](https://discuss.elastic.co/t/fleet-apm-server-panic-with-jenkins-opentelemetry-plugin/371068)
**Author:** [@chntatxt](https://discuss.elastic.co/u/chntatxt)\ **Replies:** 0\ **Last updated:** [November 26, 2024, 8:42am UTC](https://discuss.elastic.co/t/fleet-apm-server-panic-with-jenkins-opentelemetry-plugin/371068 "2024-11-26T08:42:53Z")
Hi everyone, I have set a jenkins Opentelemetry output to a local apm-server deployed by fleet. Most of the time it works well, but sometime apm-server panic, and i really don't know how to deal with it. Unfortunatly,… [Previous page](https://discuss.elastic.co/c/elastic-stack/elastic-agent/91.md?page=11) [Next page](https://discuss.elastic.co/c/elastic-stack/elastic-agent/91.md?page=13)