# Elastic Agent **URL:** https://discuss.elastic.co/c/elastic-stack/elastic-agent/91.md?page=15 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 16 --- ## [Convert winlogbeat drop to integration custom config](https://discuss.elastic.co/t/convert-winlogbeat-drop-to-integration-custom-config/368102)
**Author:** [@rugenl](https://discuss.elastic.co/u/rugenl)\ **Replies:** 0\ **Last updated:** [October 1, 2024, 5:39pm UTC](https://discuss.elastic.co/t/convert-winlogbeat-drop-to-integration-custom-config/368102 "2024-10-01T17:39:49Z")
I have what was a simple winlogbeat drop: drop\_event.when: and: - equals.event\_id: 4688 - contains.message: "New Process Name" - contains.message: "splunk" I can't figure out in the doc how to put the equivalent i… --- ## [Elastic Agent with Custom Logs capturing mapping errors in event logs](https://discuss.elastic.co/t/elastic-agent-with-custom-logs-capturing-mapping-errors-in-event-logs/366815)
**Author:** [@jeffabar](https://discuss.elastic.co/u/jeffabar)\ **Replies:** 6\ **Last updated:** [September 30, 2024, 5:55pm UTC](https://discuss.elastic.co/t/elastic-agent-with-custom-logs-capturing-mapping-errors-in-event-logs/366815 "2024-09-30T17:55:53Z")
I have an elastic agent running in a docker container with a custom logs integration. The elastic agent generates this warning when ingesting logs: 2024-09-11 11:14:59 {"log.level":"warn","@timestamp":"2024-09-11T15:14:… --- ## [Fleet Integration Custom Log File "1 Error" with No Context of the Error](https://discuss.elastic.co/t/fleet-integration-custom-log-file-1-error-with-no-context-of-the-error/367253)
**Author:** [@Ryan\_Downey](https://discuss.elastic.co/u/Ryan_Downey)\ **Replies:** 1\ **Last updated:** [September 27, 2024, 3:55pm UTC](https://discuss.elastic.co/t/fleet-integration-custom-log-file-1-error-with-no-context-of-the-error/367253 "2024-09-27T15:55:20Z")
We ran into an issue where the Custom logs integration was at version 2.3.1 and apparently at some point you were able to use a dash (-) in the dataset name. You are not able to do this anymore as you can only use a per… --- ## [Understanding - Basics about Agents/Integrations](https://discuss.elastic.co/t/understanding-basics-about-agents-integrations/366966)
**Author:** [@achim](https://discuss.elastic.co/u/achim)\ **Replies:** 1\ **Last updated:** [September 26, 2024, 3:57pm UTC](https://discuss.elastic.co/t/understanding-basics-about-agents-integrations/366966 "2024-09-26T15:57:23Z")
Hello I am looking for some information to understand the 'basics' about Agent Policies and Integrations I inherited an ELASTIC environment and wanted to understand why the "Windows" integration is included in all agen… --- ## [Fleet agent installation failed: x509 error with --insecure](https://discuss.elastic.co/t/fleet-agent-installation-failed-x509-error-with-insecure/366259)
**Author:** [@kev24](https://discuss.elastic.co/u/kev24)\ **Replies:** 5\ **Last updated:** [September 26, 2024, 1:09pm UTC](https://discuss.elastic.co/t/fleet-agent-installation-failed-x509-error-with-insecure/366259 "2024-09-26T13:09:33Z")
Hello everyone, i'm having some trouble installing a fleet server but there's a twist to it: I'm running Elastic 8.4 installed via Elastic Operator on Kubernetes and I'm not using a certificate authority, all is being d… --- ## [Poor performance - SQS / S3](https://discuss.elastic.co/t/poor-performance-sqs-s3/367111)
**Author:** [@ps-e](https://discuss.elastic.co/u/ps-e)\ **Replies:** 6\ **Last updated:** [September 26, 2024, 7:02am UTC](https://discuss.elastic.co/t/poor-performance-sqs-s3/367111 "2024-09-26T07:02:58Z")
I'm using elastic agents on k8s - managed with elastic operator. I have very poor performance for ingesting flow logs via SQS from S3. In the debug logs for elastic agent I can see a lot of logs like this: \[elastic\_ag… --- ## [MS Exchange integration](https://discuss.elastic.co/t/ms-exchange-integration/367113)
**Author:** [@rugenl](https://discuss.elastic.co/u/rugenl)\ **Replies:** 0\ **Last updated:** [September 25, 2024, 3:03pm UTC](https://discuss.elastic.co/t/ms-exchange-integration/367113 "2024-09-25T15:03:59Z")
I'm looking at the Exchange integration to replace what what we developed locally. We are gathering more logs than the new integration gathers, but I'm not an Exchange SME, so I don't know what the SME's will miss. Log… --- ## [Beats Netflow](https://discuss.elastic.co/t/beats-netflow/366746)
**Author:** [@dmgeurts](https://discuss.elastic.co/u/dmgeurts)\ **Replies:** 1\ **Last updated:** [September 24, 2024, 3:42pm UTC](https://discuss.elastic.co/t/beats-netflow/366746 "2024-09-24T15:42:22Z")
Hi all, I've added Fleet Keycloak integration and deployed the policy to some Keycloak servers. I can see the logs in discovery, but the Keycloak integration doesn't include the GeoIP processor, so the reported source.i… --- ## [Elastic agent with Ingest pipeline](https://discuss.elastic.co/t/elastic-agent-with-ingest-pipeline/362400)
**Author:** [@Ankita\_Pachauri](https://discuss.elastic.co/u/Ankita_Pachauri)\ **Replies:** 18\ **Last updated:** [September 24, 2024, 2:20pm UTC](https://discuss.elastic.co/t/elastic-agent-with-ingest-pipeline/362400 "2024-09-24T14:20:24Z")
Hi Team, We are using fleet-managed elastic agents to send log events to elasticsearch. The custom log integration has been done as part of this process and the log events are passed through an ingest pipeline before th… --- ## [Read S3 data and index using Elastic Agent](https://discuss.elastic.co/t/read-s3-data-and-index-using-elastic-agent/367040)
**Author:** [@Naresh\_Kumar1](https://discuss.elastic.co/u/Naresh_Kumar1)\ **Replies:** 0\ **Last updated:** [September 24, 2024, 12:43pm UTC](https://discuss.elastic.co/t/read-s3-data-and-index-using-elastic-agent/367040 "2024-09-24T12:43:09Z")
Hi, Currently, I am pushing the lambda logs to the S3 bucket using the AWS firehose extension and it was working fine and logs are available in the S3 bucket. id: aws-s3-aws.s3access type: aws-s3 data\_stream: datas… --- ## [Migrate from Standalone to Fleet Managed](https://discuss.elastic.co/t/migrate-from-standalone-to-fleet-managed/366934)
**Author:** [@kelvins](https://discuss.elastic.co/u/kelvins)\ **Replies:** 0\ **Last updated:** [September 23, 2024, 6:47am UTC](https://discuss.elastic.co/t/migrate-from-standalone-to-fleet-managed/366934 "2024-09-23T06:47:50Z")
I have an 8.15.1 cluster, with Fleet managing windows agents. However, the linux servers are installed with .deb elastic-agent packages. I hoped that there would be a guide for how one might move from standalone to fle… --- ## [Can custom logs integration in fleet ingest container logs?](https://discuss.elastic.co/t/can-custom-logs-integration-in-fleet-ingest-container-logs/365940)
**Author:** [@Abhi\_Abhishek](https://discuss.elastic.co/u/Abhi_Abhishek)\ **Replies:** 2\ **Last updated:** [September 19, 2024, 10:10pm UTC](https://discuss.elastic.co/t/can-custom-logs-integration-in-fleet-ingest-container-logs/365940 "2024-09-19T22:10:20Z")
Hi all, @warkolm @Baguette I am trying to fetch kubernetes container logs from elastic-agents, i don't want to use Kubernetes integration to get container logs, is their a way to fetch container logs from custom logs i… --- ## [Migrate Filebeat autodiscover for Docker containers to Fleet managed Elastic Agent setup](https://discuss.elastic.co/t/migrate-filebeat-autodiscover-for-docker-containers-to-fleet-managed-elastic-agent-setup/366162)
**Author:** [@piers.geyman](https://discuss.elastic.co/u/piers.geyman)\ **Replies:** 1\ **Last updated:** [September 19, 2024, 5:58pm UTC](https://discuss.elastic.co/t/migrate-filebeat-autodiscover-for-docker-containers-to-fleet-managed-elastic-agent-setup/366162 "2024-09-19T17:58:42Z")
We are currently using Filebeat with autodiscover to send logs from Docker containers of different flavours (Apache HTTP, MySQL, etc). We are now trying to migrate over to Elastic Agent with Fleet managed agents, but I … --- ## [Prometheus Integration - Possible Bug?](https://discuss.elastic.co/t/prometheus-integration-possible-bug/366562)
**Author:** [@erikg](https://discuss.elastic.co/u/erikg)\ **Replies:** 5\ **Last updated:** [September 19, 2024, 2:09pm UTC](https://discuss.elastic.co/t/prometheus-integration-possible-bug/366562 "2024-09-19T14:09:03Z")
I am able to collect data from Prometheus integration. The point of the integration is to grab Prometheus formatted metrics and convert it into ECS. I think I found a bug. I don't see any errors with the intergration b… --- ## [Absence of fields in VMware vSphere Elastic Agent integration](https://discuss.elastic.co/t/absence-of-fields-in-vmware-vsphere-elastic-agent-integration/366761)
**Author:** [@iTiago](https://discuss.elastic.co/u/iTiago)\ **Replies:** 0\ **Last updated:** [September 18, 2024, 10:29pm UTC](https://discuss.elastic.co/t/absence-of-fields-in-vmware-vsphere-elastic-agent-integration/366761 "2024-09-18T22:29:11Z")
The failure is basically that the vsphere.virtualmachine.cpu.total.mhz and sphere.virtualmachine.cpu.free.mhz fields do not record information in a large number of documents, while in another, these metrics are received. … --- ## [Syslog-Agent-How To Help](https://discuss.elastic.co/t/syslog-agent-how-to-help/366588)
**Author:** [@michael005](https://discuss.elastic.co/u/michael005)\ **Replies:** 2\ **Last updated:** [September 18, 2024, 2:33am UTC](https://discuss.elastic.co/t/syslog-agent-how-to-help/366588 "2024-09-18T02:33:47Z")
Hi, I am trying to setup a centralized environment with syslog and use an agent, instead of using Logstash. Reading the Elastic site, the preferred method seems to be to use an agent on every host instead. I have searc… --- ## [Elastic agent -\> reverse proxy -\> ( fleet server & elasticsearch cluster )](https://discuss.elastic.co/t/elastic-agent-reverse-proxy-fleet-server-elasticsearch-cluster/366000)
**Author:** [@Abdarrahmane](https://discuss.elastic.co/u/Abdarrahmane)\ **Replies:** 11\ **Last updated:** [September 17, 2024, 11:06pm UTC](https://discuss.elastic.co/t/elastic-agent-reverse-proxy-fleet-server-elasticsearch-cluster/366000 "2024-09-17T23:06:54Z")
hello, i want that my elastic agents (in company A) send logs to a reverse proxy in front of my fleet server (in company b) which Is connected directly to my elasticsearch cluster is there any guide to follow ? please… --- ## [Fleet with kubernetes integration ignore ssl.validation\_mode on kubelet](https://discuss.elastic.co/t/fleet-with-kubernetes-integration-ignore-ssl-validation-mode-on-kubelet/366682)
**Author:** [@julien\_4158](https://discuss.elastic.co/u/julien_4158)\ **Replies:** 0\ **Last updated:** [September 17, 2024, 2:03pm UTC](https://discuss.elastic.co/t/fleet-with-kubernetes-integration-ignore-ssl-validation-mode-on-kubelet/366682 "2024-09-17T14:03:46Z")
Hi, I have an issue with agents managed by fleets (version 8.15.1) Fleet policy has kubernetes integration (v1.67.0), on kubelet configurations, SSL Verification Mode is none. But after validation, if I check poilcy, … --- ## [Fleet Server is not healthy](https://discuss.elastic.co/t/fleet-server-is-not-healthy/365992)
**Author:** [@Ankita\_Pachauri](https://discuss.elastic.co/u/Ankita_Pachauri)\ **Replies:** 2\ **Last updated:** [September 17, 2024, 1:15pm UTC](https://discuss.elastic.co/t/fleet-server-is-not-healthy/365992 "2024-09-17T13:15:10Z")
Hi Team, We have 2 fleet servers running in our cluster, and one of the fleet nodes is flapping between healthy and down, we did check all the logs but could not find any error messages(all are mostly debug logs), also … --- ## [Error connecting agent to Oracle Database using SQL input integration](https://discuss.elastic.co/t/error-connecting-agent-to-oracle-database-using-sql-input-integration/366532)
**Author:** [@goncalobsantos](https://discuss.elastic.co/u/goncalobsantos)\ **Replies:** 0\ **Last updated:** [September 13, 2024, 12:13pm UTC](https://discuss.elastic.co/t/error-connecting-agent-to-oracle-database-using-sql-input-integration/366532 "2024-09-13T12:13:19Z")
I'm trying to use the sql input integration to query a database, but keep getting the following error: cannot open connection: testing connection: dpoPool\_create user=METRICBEAT extAuth=0: ORA-12154: TNS:could not resol… --- ## [Elastic Integrations - Unmapped Fields](https://discuss.elastic.co/t/elastic-integrations-unmapped-fields/366486)
**Author:** [@erikg](https://discuss.elastic.co/u/erikg)\ **Replies:** 1\ **Last updated:** [September 12, 2024, 3:57pm UTC](https://discuss.elastic.co/t/elastic-integrations-unmapped-fields/366486 "2024-09-12T15:57:32Z")
Hello, I recently started to use Prometheus integration. I am seeing a good number of fields that were unmapped. What can I do to make these mapped? --- ## [\[ElasticAgent\] failed to publish events: 429 Too Many Requests](https://discuss.elastic.co/t/elasticagent-failed-to-publish-events-429-too-many-requests/366468)
**Author:** [@iamp3](https://discuss.elastic.co/u/iamp3)\ **Replies:** 4\ **Last updated:** [September 12, 2024, 2:22pm UTC](https://discuss.elastic.co/t/elasticagent-failed-to-publish-events-429-too-many-requests/366468 "2024-09-12T14:22:27Z")
Hi, I have several ELK clusters deployed in Elastic cloud via Azure integration. We decided to start integrating Azure logs and elastic agents to configure some alerts on the resources we need. On sandbox environment I d… --- ## [Elastic Defend integration failing on eck-agent helm chart pods](https://discuss.elastic.co/t/elastic-defend-integration-failing-on-eck-agent-helm-chart-pods/366264)
**Author:** [@cmarkulin](https://discuss.elastic.co/u/cmarkulin)\ **Replies:** 2\ **Last updated:** [September 11, 2024, 1:11pm UTC](https://discuss.elastic.co/t/elastic-defend-integration-failing-on-eck-agent-helm-chart-pods/366264 "2024-09-11T13:11:43Z")
I've installed the ECK-Stack helm charts in order to use the Elastic security features. I have Elasticsearch, Kibana, Fleet, and 3 Agents installed, all on version 8.15.0. I've got my security rules working for most int… --- ## [Run Fleet server as a http service](https://discuss.elastic.co/t/run-fleet-server-as-a-http-service/366361)
**Author:** [@Hemanth\_Gowda](https://discuss.elastic.co/u/Hemanth_Gowda)\ **Replies:** 0\ **Last updated:** [September 10, 2024, 8:36pm UTC](https://discuss.elastic.co/t/run-fleet-server-as-a-http-service/366361 "2024-09-10T20:36:47Z")
Hello Team, We are installing fleet server in K8s cluster using yamls. We noticed fleet service by default is running as a https service in K8s cluster upon installation. Is there any way we can run Fleet server as just… --- ## [Collect other types of windows logs](https://discuss.elastic.co/t/collect-other-types-of-windows-logs/366256)
**Author:** [@juancamiloll](https://discuss.elastic.co/u/juancamiloll)\ **Replies:** 1\ **Last updated:** [September 10, 2024, 1:53pm UTC](https://discuss.elastic.co/t/collect-other-types-of-windows-logs/366256 "2024-09-10T13:53:32Z")
Hi, I am currently working with Elastic Agent and I am collecting logs without any problem. I am getting the Application, Security and System logs. I would like to know how I can get other types of logs like the ones s… --- ## [Error: unknown flag: --fleet-server-client-auth](https://discuss.elastic.co/t/error-unknown-flag-fleet-server-client-auth/364778)
**Author:** [@kirolosmena299](https://discuss.elastic.co/u/kirolosmena299)\ **Replies:** 3\ **Last updated:** [September 10, 2024, 4:16am UTC](https://discuss.elastic.co/t/error-unknown-flag-fleet-server-client-auth/364778 "2024-09-10T04:16:19Z")
I have a problem whenever i try to install the agent to some of my Ubuntu servers I get this error : Error: unknown flag: --fleet-server-client-auth --- ## [High CPU Usage when laptop outside internal network](https://discuss.elastic.co/t/high-cpu-usage-when-laptop-outside-internal-network/365916)
**Author:** [@Haitham1](https://discuss.elastic.co/u/Haitham1)\ **Replies:** 4\ **Last updated:** [September 7, 2024, 11:33am UTC](https://discuss.elastic.co/t/high-cpu-usage-when-laptop-outside-internal-network/365916 "2024-09-07T11:33:13Z")
Hi, i have setup elastic stack at work , i have installed the agent in few servers and laptops everything works well , but if a laptop is outside the work network then the cpu will hit 100% untill it crash and the do … --- ## [Elastic Agent get refused connections from elasticsearch and fleet after some time](https://discuss.elastic.co/t/elastic-agent-get-refused-connections-from-elasticsearch-and-fleet-after-some-time/366128)
**Author:** [@vitwo](https://discuss.elastic.co/u/vitwo)\ **Replies:** 0\ **Last updated:** [September 6, 2024, 3:00am UTC](https://discuss.elastic.co/t/elastic-agent-get-refused-connections-from-elasticsearch-and-fleet-after-some-time/366128 "2024-09-06T03:00:57Z")
Hello community, I'm suffering with an issue that I don´t know why is happening. I'm using this architecture: 1 - Elasticsearch, Kibana and Fleet on the same server 2 - I'm using elastic agent to collect logs from a … --- ## [Oracle Integeration with elastic-agent](https://discuss.elastic.co/t/oracle-integeration-with-elastic-agent/365384)
**Author:** [@Zaryab\_Shaikh](https://discuss.elastic.co/u/Zaryab_Shaikh)\ **Replies:** 1\ **Last updated:** [September 5, 2024, 1:40pm UTC](https://discuss.elastic.co/t/oracle-integeration-with-elastic-agent/365384 "2024-09-05T13:40:20Z")
Hello Community, I am trying to enable Oracle integration through the Fleet section. I have an Oracle EBS setup with the following configuration: OS: Red Hat Enterprise Linux OS Version: 7.6 DB: 19.11.0.0.0 EBS: R12.2… --- ## [Automating Elastic Agent Policies](https://discuss.elastic.co/t/automating-elastic-agent-policies/357246)
**Author:** [@Sheperd403](https://discuss.elastic.co/u/Sheperd403)\ **Replies:** 2\ **Last updated:** [September 4, 2024, 1:39pm UTC](https://discuss.elastic.co/t/automating-elastic-agent-policies/357246 "2024-09-04T13:39:07Z")
I have been experimenting with attempting to automate the ECK elastic agent policy in fleet. Currently, my fleet server set up is this with these two policies defined: apiVersion: kibana.k8s.elastic.co/v1 kind: Kibana m… [Previous page](https://discuss.elastic.co/c/elastic-stack/elastic-agent/91.md?page=14) [Next page](https://discuss.elastic.co/c/elastic-stack/elastic-agent/91.md?page=16)