# Elastic Agent

**URL:** https://discuss.elastic.co/c/elastic-stack/elastic-agent/91.md?page=14

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 15

---

## [MySQL elastic agent dashboard](https://discuss.elastic.co/t/mysql-elastic-agent-dashboard/369300)

<div class="topic-metadata">

**Author:** [@vharish0596](https://discuss.elastic.co/u/vharish0596)\
**Replies:** 6\
**Last updated:** [October 29, 2024, 9:14am UTC](https://discuss.elastic.co/t/mysql-elastic-agent-dashboard/369300 "2024-10-29T09:14:07Z")

</div>

I have added MySQL integration to one of my agent policies. Now where can I see the slowlog, error logs dashboard. In the MySQL elastic agent integration page there were two dashboards mentioned attached here for referen…

---

## [8.15 MySQL connector how to sync using a sql statement](https://discuss.elastic.co/t/8-15-mysql-connector-how-to-sync-using-a-sql-statement/369312)

<div class="topic-metadata">

**Author:** [@Gertjan](https://discuss.elastic.co/u/Gertjan)\
**Replies:** 3\
**Last updated:** [October 25, 2024, 4:38pm UTC](https://discuss.elastic.co/t/8-15-mysql-connector-how-to-sync-using-a-sql-statement/369312 "2024-10-25T16:38:42Z")

</div>

Greetings, I'm using the 8.15 free trial and want to retrieve data from MySQL. I'm using the MySQL connector and in the Configuration, I add some tables under Comma-separated list of tables. On sync, all the rows of t…

---

## [Conflit index template managed by fleet](https://discuss.elastic.co/t/conflit-index-template-managed-by-fleet/360360)

<div class="topic-metadata">

**Author:** [@ahmed\_charafouddine](https://discuss.elastic.co/u/ahmed_charafouddine)\
**Replies:** 3\
**Last updated:** [October 25, 2024, 1:07pm UTC](https://discuss.elastic.co/t/conflit-index-template-managed-by-fleet/360360 "2024-10-25T13:07:01Z")

</div>

Hello, After upgrading our Elastic cluster from 8.11 to 8.13.4, we encountered an issue related to the index template. The followin error has appeared : illegal\_argument\_exception Root causes: illegal\_argument\_exceptio…

---

## [MS Exchange integration field mapped incorrectly](https://discuss.elastic.co/t/ms-exchange-integration-field-mapped-incorrectly/368271)

<div class="topic-metadata">

**Author:** [@rugenl](https://discuss.elastic.co/u/rugenl)\
**Replies:** 4\
**Last updated:** [October 24, 2024, 3:23pm UTC](https://discuss.elastic.co/t/ms-exchange-integration-field-mapped-incorrectly/368271 "2024-10-24T15:23:19Z")

</div>

I just started using the MS Exchange integration and found the message tracking field microsoft \> exchange \> relatedrecipientaddress is mapped as an IP, but contains email addresses like bugs@cartoons.fun. I think it's …

---

## [Define different ILM policyes for each elasticAgent integration](https://discuss.elastic.co/t/define-different-ilm-policyes-for-each-elasticagent-integration/369327)

<div class="topic-metadata">

**Author:** [@fabry\_00](https://discuss.elastic.co/u/fabry_00)\
**Replies:** 0\
**Last updated:** [October 24, 2024, 7:06am UTC](https://discuss.elastic.co/t/define-different-ilm-policyes-for-each-elasticagent-integration/369327 "2024-10-24T07:06:32Z")

</div>

I have an ELK cluster with a fleetServer and some elasticAgents. As for now, I've added 2 prometheus integration to scrape the metrics from 2 different applications: The namespace of both prometheus package\_polices is:…

---

## [Fleet server y elasticsearch cluster](https://discuss.elastic.co/t/fleet-server-y-elasticsearch-cluster/368150)

<div class="topic-metadata">

**Author:** [@juancamiloll](https://discuss.elastic.co/u/juancamiloll)\
**Replies:** 0\
**Last updated:** [October 2, 2024, 8:47pm UTC](https://discuss.elastic.co/t/fleet-server-y-elasticsearch-cluster/368150 "2024-10-02T20:47:01Z")

</div>

I have this configuration for fleet server where the servers 172.26.6.36, 172.26.6.37 and 172.26.6.38 are the Elasticsearch cluster. 172.26.6.41 is the fleet server. Everything has been working correctly until I identi…

---

## [Fleet - Managing Elastic Agent Policies](https://discuss.elastic.co/t/fleet-managing-elastic-agent-policies/369267)

<div class="topic-metadata">

**Author:** [@marcussjogren](https://discuss.elastic.co/u/marcussjogren)\
**Replies:** 0\
**Last updated:** [October 23, 2024, 8:06am UTC](https://discuss.elastic.co/t/fleet-managing-elastic-agent-policies/369267 "2024-10-23T08:06:55Z")

</div>

Hi! I am currently running a fleet of 5-6 agents, but my environment is not that huge, hence I need to apply various integrations to the agents. The issue that I am having, is that I must use one Agent Policy per serve…

---

## [ElasticAgent enrolled with Fleet server - Connection failure Elastic Defend](https://discuss.elastic.co/t/elasticagent-enrolled-with-fleet-server-connection-failure-elastic-defend/369219)

<div class="topic-metadata">

**Author:** [@Fasertio](https://discuss.elastic.co/u/Fasertio)\
**Replies:** 8\
**Last updated:** [October 22, 2024, 3:05pm UTC](https://discuss.elastic.co/t/elasticagent-enrolled-with-fleet-server-connection-failure-elastic-defend/369219 "2024-10-22T15:05:37Z")

</div>

Dear all, I've installed Elasticsearch, kibana and a Fleet server on a Ubuntu machine for Security testing. The main goal is to install the elastic agent with the Defend integration for XDR on a Windows machine. The i…

---

## [Upgrade fleet server](https://discuss.elastic.co/t/upgrade-fleet-server/369177)

<div class="topic-metadata">

**Author:** [@juancamiloll](https://discuss.elastic.co/u/juancamiloll)\
**Replies:** 1\
**Last updated:** [October 21, 2024, 9:39pm UTC](https://discuss.elastic.co/t/upgrade-fleet-server/369177 "2024-10-21T21:39:16Z")

</div>

Hello As I have seen a new version available I decided to upgrade Elasticsearch server OK :white\_check\_mark: Logstas server OK :white\_check\_mark: Elasticsearch server OK :white\_check\_mark: kibana server OK …

---

## [Using Windows integration with policy that is applied to both Windows and Linux hosts](https://discuss.elastic.co/t/using-windows-integration-with-policy-that-is-applied-to-both-windows-and-linux-hosts/369152)

<div class="topic-metadata">

**Author:** [@Zaptros](https://discuss.elastic.co/u/Zaptros)\
**Replies:** 1\
**Last updated:** [October 21, 2024, 8:39pm UTC](https://discuss.elastic.co/t/using-windows-integration-with-policy-that-is-applied-to-both-windows-and-linux-hosts/369152 "2024-10-21T20:39:52Z")

</div>

Hi, is it a good idea to use an agent policy with the System and Windows integration for log collection for both Windows and Linux machines? Will the Windows integration consume too much resources on a OS it does not rea…

---

## [Unable to Save Fleet Settings - Logstash Output](https://discuss.elastic.co/t/unable-to-save-fleet-settings-logstash-output/363309)

<div class="topic-metadata">

**Author:** [@wangsubo](https://discuss.elastic.co/u/wangsubo)\
**Replies:** 5\
**Last updated:** [October 21, 2024, 7:53pm UTC](https://discuss.elastic.co/t/unable-to-save-fleet-settings-logstash-output/363309 "2024-10-21T19:53:34Z")

</div>

I am experiencing issues with saving my Fleet settings Logstash Output . Despite multiple attempts, the configuration just won't save. Could this be related to using the free version? Has anyone else encountered this pro…

---

## [Elastic agent and osquery file integrity monitoring (FIM) integration](https://discuss.elastic.co/t/elastic-agent-and-osquery-file-integrity-monitoring-fim-integration/369159)

<div class="topic-metadata">

**Author:** [@ganrt](https://discuss.elastic.co/u/ganrt)\
**Replies:** 0\
**Last updated:** [October 21, 2024, 2:50pm UTC](https://discuss.elastic.co/t/elastic-agent-and-osquery-file-integrity-monitoring-fim-integration/369159 "2024-10-21T14:50:26Z")

</div>

Hello, I would like to know how to enable the FIM using the agent and the integration of osquery manager, I have set up some configuration according to the documentation of osquery for windows, however it refuses to wor…

---

## [Elastic Cloudtrail for Cognito integration](https://discuss.elastic.co/t/elastic-cloudtrail-for-cognito-integration/368858)

<div class="topic-metadata">

**Author:** [@sami-obvio](https://discuss.elastic.co/u/sami-obvio)\
**Replies:** 2\
**Last updated:** [October 18, 2024, 8:31pm UTC](https://discuss.elastic.co/t/elastic-cloudtrail-for-cognito-integration/368858 "2024-10-18T20:31:05Z")

</div>

Hi I am writing logs from my AWS Cognito service to an S3 bucket I want to read those logs and ingest them in an Elastic Cloud instance using the AWS integration Cognito generats logs in an S3 bucket with the followin…

---

## [Standalone Elastic Agent Integration Add Policy Not Working](https://discuss.elastic.co/t/standalone-elastic-agent-integration-add-policy-not-working/369030)

<div class="topic-metadata">

**Author:** [@elasticfantastik](https://discuss.elastic.co/u/elasticfantastik)\
**Replies:** 0\
**Last updated:** [October 17, 2024, 11:07pm UTC](https://discuss.elastic.co/t/standalone-elastic-agent-integration-add-policy-not-working/369030 "2024-10-17T23:07:58Z")

</div>

We have two standalone elastic agents that are running on separate machines. One policy is called "aws\_agent\_policy", the other is "azure\_agent\_policy". They are both largely identical except differing in a few of the in…

---

## [Elastic prisma cloud integeration](https://discuss.elastic.co/t/elastic-prisma-cloud-integeration/368970)

<div class="topic-metadata">

**Author:** [@Zaryab\_Shaikh](https://discuss.elastic.co/u/Zaryab_Shaikh)\
**Replies:** 0\
**Last updated:** [October 17, 2024, 6:08am UTC](https://discuss.elastic.co/t/elastic-prisma-cloud-integeration/368970 "2024-10-17T06:08:01Z")

</div>

I have single node ELK on prem setup with green health version is 8.15.0. I wanted to add Elastic prisma cloud integeration in it. My fleet is green in health and other integeration run perfectly fine. But i am facing pr…

---

## [Fleet Nginx integration for customized log format](https://discuss.elastic.co/t/fleet-nginx-integration-for-customized-log-format/368358)

<div class="topic-metadata">

**Author:** [@dominique.bejean](https://discuss.elastic.co/u/dominique.bejean)\
**Replies:** 4\
**Last updated:** [October 16, 2024, 9:00pm UTC](https://discuss.elastic.co/t/fleet-nginx-integration-for-customized-log-format/368358 "2024-10-16T21:00:42Z")

</div>

Hi, With Nginx integration, I need to ingest customized logs (log\_format). I need to define a custom Grok processor rule. It is not possible to modify the " logs-nginx.access-1.23.0" pipeline so I want to define a new…

---

## [Elastic agent goes offline & healthy every 5 minutes](https://discuss.elastic.co/t/elastic-agent-goes-offline-healthy-every-5-minutes/367215)

<div class="topic-metadata">

**Author:** [@harshpanchal](https://discuss.elastic.co/u/harshpanchal)\
**Replies:** 3\
**Last updated:** [October 16, 2024, 12:45pm UTC](https://discuss.elastic.co/t/elastic-agent-goes-offline-healthy-every-5-minutes/367215 "2024-10-16T12:45:24Z")

</div>

I have an Elastic Stack setup managed by the ECK operator on Kubernetes. I deployed a Fleet Server on Kubernetes and an Elastic Agent on a separate Alpine Linux VM for log shipping. The installation was successful, and t…

---

## [Error Agent Elastic collection plugin Logstash over filebeat message "failed eval: ERROR:" integrations Logstash](https://discuss.elastic.co/t/error-agent-elastic-collection-plugin-logstash-over-filebeat-message-failed-eval-error-integrations-logstash/368786)

<div class="topic-metadata">

**Author:** [@Vam\_Siqueira](https://discuss.elastic.co/u/Vam_Siqueira)\
**Replies:** 0\
**Last updated:** [October 14, 2024, 2:18pm UTC](https://discuss.elastic.co/t/error-agent-elastic-collection-plugin-logstash-over-filebeat-message-failed-eval-error-integrations-logstash/368786 "2024-10-14T14:18:21Z")

</div>

{"log.level":"error","@timestamp":"2024-10-14T11:06:46.639-0300","message":"failed evaluation","component":{"binary":"filebeat","dataset":"elastic\_agent.filebeat","id":"cel-default","type":"cel"},"log":{"source":"cel-def…

---

## [Add several integrations to one Elastic Agent](https://discuss.elastic.co/t/add-several-integrations-to-one-elastic-agent/368509)

<div class="topic-metadata">

**Author:** [@riahc3](https://discuss.elastic.co/u/riahc3)\
**Replies:** 1\
**Last updated:** [October 11, 2024, 3:23pm UTC](https://discuss.elastic.co/t/add-several-integrations-to-one-elastic-agent/368509 "2024-10-11T15:23:19Z")

</div>

Hello I have a Elastic Agent collecting Windows logs. I want to add that it collects Citrix ADC logs. How do I do this? I tried combining the elastic-agent.yml contents but...it does not work. Can I make several .ym…

---

## [Where to apply integration policy](https://discuss.elastic.co/t/where-to-apply-integration-policy/368692)

<div class="topic-metadata">

**Author:** [@juancamiloll](https://discuss.elastic.co/u/juancamiloll)\
**Replies:** 0\
**Last updated:** [October 11, 2024, 2:55pm UTC](https://discuss.elastic.co/t/where-to-apply-integration-policy/368692 "2024-10-11T14:55:59Z")

</div>

Hello My question is about this integration Where am I supposed to apply the policy? to the policy of my windows machines? or to the policy of the windows machines? or to the fleet server? or to the server where I h…

---

## [Fleet server API](https://discuss.elastic.co/t/fleet-server-api/368538)

<div class="topic-metadata">

**Author:** [@Viktor\_Movita](https://discuss.elastic.co/u/Viktor_Movita)\
**Replies:** 3\
**Last updated:** [October 10, 2024, 6:39am UTC](https://discuss.elastic.co/t/fleet-server-api/368538 "2024-10-10T06:39:24Z")

</div>

Hello everyone, I have a Fleet server that I manually installed on a Linux server. I am trying to follow the instructions from the Elastic documentation to use the API options (Fleet APIs | Fleet and Elastic Agent Guid…

---

## [Filebeat is not sending logs to Kafka](https://discuss.elastic.co/t/filebeat-is-not-sending-logs-to-kafka/368575)

<div class="topic-metadata">

**Author:** [@redangel](https://discuss.elastic.co/u/redangel)\
**Replies:** 1\
**Last updated:** [October 9, 2024, 11:06pm UTC](https://discuss.elastic.co/t/filebeat-is-not-sending-logs-to-kafka/368575 "2024-10-09T23:06:55Z")

</div>

I have filebeat running in GCP cluster and I am trying to send the logs to my Kafka in DC. I see in the logs that it was able to make a connection to Kafka. I configured the filebeat.yml with kafka output using the IP ad…

---

## [Elastic fleet issue- it takes long time to load](https://discuss.elastic.co/t/elastic-fleet-issue-it-takes-long-time-to-load/368311)

<div class="topic-metadata">

**Author:** [@Mahmoud0x](https://discuss.elastic.co/u/Mahmoud0x)\
**Replies:** 15\
**Last updated:** [October 7, 2024, 3:35pm UTC](https://discuss.elastic.co/t/elastic-fleet-issue-it-takes-long-time-to-load/368311 "2024-10-07T15:35:04Z")

</div>

There is a problem with fleet section in kibana takes so mush time loading

---

## ['Unterminated quoted string' when installing elastic-agent](https://discuss.elastic.co/t/unterminated-quoted-string-when-installing-elastic-agent/367007)

<div class="topic-metadata">

**Author:** [@turnerud](https://discuss.elastic.co/u/turnerud)\
**Replies:** 1\
**Last updated:** [October 5, 2024, 10:19pm UTC](https://discuss.elastic.co/t/unterminated-quoted-string-when-installing-elastic-agent/367007 "2024-10-05T22:19:43Z")

</div>

Getting this error when running the curl installation command on my VM. I'm running Kali Linux through UTM on a Mac. "./elastic-agent: 3: Syntax error: Unterminated quoted string" Couldn't see anything wrong with the c…

---

## [Elastic agent unable to connect to kibana](https://discuss.elastic.co/t/elastic-agent-unable-to-connect-to-kibana/368298)

<div class="topic-metadata">

**Author:** [@aws\_account](https://discuss.elastic.co/u/aws_account)\
**Replies:** 1\
**Last updated:** [October 5, 2024, 6:45pm UTC](https://discuss.elastic.co/t/elastic-agent-unable-to-connect-to-kibana/368298 "2024-10-05T18:45:11Z")

</div>

I have enabled the fleet-server and fleet-server pods are running fine, but when i run elsatic-agent daemonset its unable to connect to kibana over https and throws x509 unknow certificate, i have tried giving same certi…

---

## [Trend Micro Vision One integration](https://discuss.elastic.co/t/trend-micro-vision-one-integration/367116)

<div class="topic-metadata">

**Author:** [@juancamiloll](https://discuss.elastic.co/u/juancamiloll)\
**Replies:** 3\
**Last updated:** [October 3, 2024, 1:41pm UTC](https://discuss.elastic.co/t/trend-micro-vision-one-integration/367116 "2024-10-03T13:41:09Z")

</div>

Hello again, I have installed the Trend micro vision one integration, I have already done the process of placing the URL and the API Key and everything was accepted without any error. My question is why it is asking me…

---

## [Windows Elastic Agent for Task Scheduler](https://discuss.elastic.co/t/windows-elastic-agent-for-task-scheduler/368062)

<div class="topic-metadata">

**Author:** [@Ankita\_Pachauri](https://discuss.elastic.co/u/Ankita_Pachauri)\
**Replies:** 1\
**Last updated:** [October 3, 2024, 8:08am UTC](https://discuss.elastic.co/t/windows-elastic-agent-for-task-scheduler/368062 "2024-10-03T08:08:57Z")

</div>

Hi, We are using an elastic agent to collect system metrics of a Windows Server 2019. A few tasks are running via the task scheduler, which we also want to monitor, particularly the status. Can someone tell me if that i…

---

## [Receiving data from multiple Fleet Managed Sonicwall Elastic agents](https://discuss.elastic.co/t/receiving-data-from-multiple-fleet-managed-sonicwall-elastic-agents/368144)

<div class="topic-metadata">

**Author:** [@raiden](https://discuss.elastic.co/u/raiden)\
**Replies:** 0\
**Last updated:** [October 2, 2024, 7:27pm UTC](https://discuss.elastic.co/t/receiving-data-from-multiple-fleet-managed-sonicwall-elastic-agents/368144 "2024-10-02T19:27:08Z")

</div>

So I currently have an Elastic stack deployment with two systems. One with Fleet server installed and a second with Elasticsearch and an elastic agent deployed. We managed to get the stack setup with Kibana and Fleet ser…

---

## [No connection could be made because the target machine actively refused it](https://discuss.elastic.co/t/no-connection-could-be-made-because-the-target-machine-actively-refused-it/364868)

<div class="topic-metadata">

**Author:** [@epikritis](https://discuss.elastic.co/u/epikritis)\
**Replies:** 2\
**Last updated:** [October 2, 2024, 2:54pm UTC](https://discuss.elastic.co/t/no-connection-could-be-made-because-the-target-machine-actively-refused-it/364868 "2024-10-02T14:54:02Z")

</div>

Hi, I set up Elasticsearch, Kibana and a Fleet server as Docker containers on the same host in Azure. All the three are up and running with no issues. I am trying to install an Elastic agent on a Windows VM hosted locall…

---

## [How to change dataset name after duplicating agent policy](https://discuss.elastic.co/t/how-to-change-dataset-name-after-duplicating-agent-policy/368107)

<div class="topic-metadata">

**Author:** [@rugenl](https://discuss.elastic.co/u/rugenl)\
**Replies:** 3\
**Last updated:** [October 1, 2024, 7:26pm UTC](https://discuss.elastic.co/t/how-to-change-dataset-name-after-duplicating-agent-policy/368107 "2024-10-01T19:26:14Z")

</div>

I've created an agent policy with 13 integrations, each specifying one of 2 "qa" datasets. I want to duplicate this policy and want to change the datasets to "prod" names, but they are grey and won't let me change. Ho…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elastic-agent/91.md?page=13)

[Next page](https://discuss.elastic.co/c/elastic-stack/elastic-agent/91.md?page=15)
