# Elastic Agent **URL:** https://discuss.elastic.co/c/elastic-stack/elastic-agent/91.md?page=16 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 17 --- ## [How to disable add\_cloud\_metadata processing in elastic-agents](https://discuss.elastic.co/t/how-to-disable-add-cloud-metadata-processing-in-elastic-agents/357613)
**Author:** [@Toony](https://discuss.elastic.co/u/Toony)\ **Replies:** 3\ **Last updated:** [September 4, 2024, 11:27am UTC](https://discuss.elastic.co/t/how-to-disable-add-cloud-metadata-processing-in-elastic-agents/357613 "2024-09-04T11:27:04Z")
Hi everybody, Is there a way to disable the default processing of the add\_cloud\_metadata from the "elastic-agent.yml" configuration file ? This is very annoying as at each start of the agent it sends a lot of agent err… --- ## [Fleet Server is not Healthy](https://discuss.elastic.co/t/fleet-server-is-not-healthy/364801)
**Author:** [@rastro](https://discuss.elastic.co/u/rastro)\ **Replies:** 5\ **Last updated:** [September 4, 2024, 3:56am UTC](https://discuss.elastic.co/t/fleet-server-is-not-healthy/364801 "2024-09-04T03:56:49Z")
This just started happening a few days ago. Neither pre-existing ("Cannot checkin in \[sic\] with fleet-server") nor new hosts ("Error: failed to enroll... 8220: connect: connection refused") can talk to fleet. Cannot c… --- ## [Elastic Agent Not Sending Logs FIN ACK after changing a cipher](https://discuss.elastic.co/t/elastic-agent-not-sending-logs-fin-ack-after-changing-a-cipher/365861)
**Author:** [@ahmed\_fetoh](https://discuss.elastic.co/u/ahmed_fetoh)\ **Replies:** 1\ **Last updated:** [September 2, 2024, 3:14pm UTC](https://discuss.elastic.co/t/elastic-agent-not-sending-logs-fin-ack-after-changing-a-cipher/365861 "2024-09-02T15:14:56Z")
Description: I have deployed a setup on the cloud with two VMs: One VM running Elasticsearch. Another VM running Kibana and Fleet Server. Issue: When I try to install an agent to collect logs from an endpoint, Elast… --- ## [Elastic agent send \_nil id to Logstash](https://discuss.elastic.co/t/elastic-agent-send-nil-id-to-logstash/365809)
**Author:** [@Alessio\_Creo](https://discuss.elastic.co/u/Alessio_Creo)\ **Replies:** 0\ **Last updated:** [August 30, 2024, 8:23am UTC](https://discuss.elastic.co/t/elastic-agent-send-nil-id-to-logstash/365809 "2024-08-30T08:23:31Z")
Hi there! we'reusing the logstash output to send data from the elastic agent but we're are facing a strange behaviour. Our logstash pipeline input { elastic\_agent { port =\> 5044 ssl =\> true ssl\_certifica… --- ## [Prometheus Exporter](https://discuss.elastic.co/t/prometheus-exporter/365711)
**Author:** [@erikg](https://discuss.elastic.co/u/erikg)\ **Replies:** 0\ **Last updated:** [August 28, 2024, 4:32pm UTC](https://discuss.elastic.co/t/prometheus-exporter/365711 "2024-08-28T16:32:25Z")
Hello, I been getting started with leveraging Prometheus Exporter from Elastic Agent integrations. I am use node exporter and able to collect the data. I am not too familar with Prometheus' data structure but is there … --- ## [Cloudflare Logpush integration](https://discuss.elastic.co/t/cloudflare-logpush-integration/364437)
**Author:** [@Alessio\_Creo](https://discuss.elastic.co/u/Alessio_Creo)\ **Replies:** 2\ **Last updated:** [August 29, 2024, 9:16am UTC](https://discuss.elastic.co/t/cloudflare-logpush-integration/364437 "2024-08-29T09:16:02Z")
Hi, we're ingesting data from MinIO bucket using Cloudflare logpush integrations, due to the huge amount of data sometimes the data flow is not "real time" because a single agent can handle the data, using more than one… --- ## [Fleet Server - Error - failed version compatibility check with elasticsearch: x509: certificate signed by unknown authority](https://discuss.elastic.co/t/fleet-server-error-failed-version-compatibility-check-with-elasticsearch-x509-certificate-signed-by-unknown-authority/365646)
**Author:** [@juancamiloll](https://discuss.elastic.co/u/juancamiloll)\ **Replies:** 1\ **Last updated:** [August 28, 2024, 2:25pm UTC](https://discuss.elastic.co/t/fleet-server-error-failed-version-compatibility-check-with-elasticsearch-x509-certificate-signed-by-unknown-authority/365646 "2024-08-28T14:25:39Z")
Hello everyone, Once again I am asking for your valuable help. I have ELK installed for testing purposes before moving configurations to production, I am currently working with logstash, elasticsearch and kibana on the… --- ## [Agent healthy but not sending logs](https://discuss.elastic.co/t/agent-healthy-but-not-sending-logs/364405)
**Author:** [@kirolosmena299](https://discuss.elastic.co/u/kirolosmena299)\ **Replies:** 2\ **Last updated:** [August 28, 2024, 12:29pm UTC](https://discuss.elastic.co/t/agent-healthy-but-not-sending-logs/364405 "2024-08-28T12:29:27Z")
I installed Elasticsearch on a server and Fleet on the same server, we I tried to install the agent to a server with the same subnet using a private IP it worked fine, but when I installed the agent to another server us… --- ## ["Saved Object conflict" adding System or Windows Integrations](https://discuss.elastic.co/t/saved-object-conflict-adding-system-or-windows-integrations/365407)
**Author:** [@Gord](https://discuss.elastic.co/u/Gord)\ **Replies:** 2\ **Last updated:** [August 28, 2024, 11:25am UTC](https://discuss.elastic.co/t/saved-object-conflict-adding-system-or-windows-integrations/365407 "2024-08-28T11:25:58Z")
Created a new cluster on Elastic Cloud running 8.14.3 (no agents deployed yet), but when creating new policy and leaving the "system" checkbox enabled, the policy gets created without the system integration. When trying … --- ## [How to bind IPv4 in fleet server](https://discuss.elastic.co/t/how-to-bind-ipv4-in-fleet-server/365289)
**Author:** [@rachelyang](https://discuss.elastic.co/u/rachelyang)\ **Replies:** 2\ **Last updated:** [August 28, 2024, 11:02am UTC](https://discuss.elastic.co/t/how-to-bind-ipv4-in-fleet-server/365289 "2024-08-28T11:02:14Z")
Hello, I am trying to set up elastic agent with IPv4 bound. I set up like this: sudo elastic-agent enroll \\ --fleet-server-es=https://10.0.0.1:9200 \\ --fleet-server-service-token=AAEAAWVsYXN0aWMvZmxlZXQtc2VydmVyL3Rv… --- ## [Working with Elastic-Agent for both Windows and Linux, unsure on how to change the SSL Certificate Authority](https://discuss.elastic.co/t/working-with-elastic-agent-for-both-windows-and-linux-unsure-on-how-to-change-the-ssl-certificate-authority/365606)
**Author:** [@Thomas\_Lee1](https://discuss.elastic.co/u/Thomas_Lee1)\ **Replies:** 1\ **Last updated:** [August 27, 2024, 12:29pm UTC](https://discuss.elastic.co/t/working-with-elastic-agent-for-both-windows-and-linux-unsure-on-how-to-change-the-ssl-certificate-authority/365606 "2024-08-27T12:29:16Z")
For my ELK Stack, I am using a self-Signed Certificate Authority. I have shared my CA certificate to all my linux agents and stored them under /etc/certs and they can work. However when I install them on my windows as a … --- ## [Elastic + OpenMetrics Inquiry](https://discuss.elastic.co/t/elastic-openmetrics-inquiry/365580)
**Author:** [@erikg](https://discuss.elastic.co/u/erikg)\ **Replies:** 0\ **Last updated:** [August 26, 2024, 10:38pm UTC](https://discuss.elastic.co/t/elastic-openmetrics-inquiry/365580 "2024-08-26T22:38:27Z")
Hello, I saw Metricbeat has an Open Metrics module but its beta. I was wondering if this is working for others? Also it seems like the output resembles Prometheus' /metric endpoint. Would it be possible to use Promethe… --- ## [HTTP Monitoring Liveness not activateable via Fleet](https://discuss.elastic.co/t/http-monitoring-liveness-not-activateable-via-fleet/365539)
**Author:** [@Alphayeeeet](https://discuss.elastic.co/u/Alphayeeeet)\ **Replies:** 1\ **Last updated:** [August 26, 2024, 8:59am UTC](https://discuss.elastic.co/t/http-monitoring-liveness-not-activateable-via-fleet/365539 "2024-08-26T08:59:34Z")
After the new HTTP monitoring is configurable in the Fleet agent policy since 8.15. We wanted to use that for liveness/readiness probes in Kubernetes. However even if the ports are configured in the fleet agent policy. T… --- ## [Elastic and Linux agent Connection issue](https://discuss.elastic.co/t/elastic-and-linux-agent-connection-issue/365110)
**Author:** [@khaled7](https://discuss.elastic.co/u/khaled7)\ **Replies:** 1\ **Last updated:** [August 21, 2024, 5:24pm UTC](https://discuss.elastic.co/t/elastic-and-linux-agent-connection-issue/365110 "2024-08-21T17:24:18Z")
Hello Elastic Team, i faced an issue in connection between Elasticsearch cloud and Elastic Agent for linux (rhel 7.7) and the issue logs are like that i can't understad what to do and i'm empty handed for now Thank… --- ## [Installing Elastic Agent MSI with INSTALLARGS option does not work](https://discuss.elastic.co/t/installing-elastic-agent-msi-with-installargs-option-does-not-work/365268)
**Author:** [@loris\_lx](https://discuss.elastic.co/u/loris_lx)\ **Replies:** 0\ **Last updated:** [August 21, 2024, 10:07am UTC](https://discuss.elastic.co/t/installing-elastic-agent-msi-with-installargs-option-does-not-work/365268 "2024-08-21T10:07:21Z")
Hello, I have a problem installing Elastic Agent with MSI package. When i specify INSTALLARGS="--url=\ --enrollment-token=\ the installation ends with an error and the agent is not installed. So i tried to ru… --- ## [Migrating Winlogbeat to Elastic Agent (WEF/WEC)](https://discuss.elastic.co/t/migrating-winlogbeat-to-elastic-agent-wef-wec/365267)
**Author:** [@erik20](https://discuss.elastic.co/u/erik20)\ **Replies:** 0\ **Last updated:** [August 21, 2024, 10:03am UTC](https://discuss.elastic.co/t/migrating-winlogbeat-to-elastic-agent-wef-wec/365267 "2024-08-21T10:03:27Z")
Are there best practices for Elastic Agent and event forwarding in Windows domains? Scenario: We collect Windows events from domain members via Windows Event Forwarding (WEF). On the collecting machine (WEC) Winlogbeat… --- ## [Struggling with Data Operations and Elastic – Any Advice?](https://discuss.elastic.co/t/struggling-with-data-operations-and-elastic-any-advice/365245)
**Author:** [@Oliviabarn](https://discuss.elastic.co/u/Oliviabarn)\ **Replies:** 1\ **Last updated:** [August 21, 2024, 5:25am UTC](https://discuss.elastic.co/t/struggling-with-data-operations-and-elastic-any-advice/365245 "2024-08-21T05:25:16Z")
Hi everyone, I’m having some trouble with data operations while using Elastic and could use some guidance from the community. Here’s what I’m dealing with: Performance Issues: My data operations are running slower th… --- ## [Split a data stream into separate Indexes - to allow different ILM policies](https://discuss.elastic.co/t/split-a-data-stream-into-separate-indexes-to-allow-different-ilm-policies/365223)
**Author:** [@mgordon](https://discuss.elastic.co/u/mgordon)\ **Replies:** 4\ **Last updated:** [August 20, 2024, 7:22pm UTC](https://discuss.elastic.co/t/split-a-data-stream-into-separate-indexes-to-allow-different-ilm-policies/365223 "2024-08-20T19:22:43Z")
I'm using the Custom UDP Logs integration and need to split the data stream into two separate indexes (data streams), so I can enable different ILM policies on the two different types of data coming in. Is that possible,… --- ## [Elastic agent override existing index/datastream](https://discuss.elastic.co/t/elastic-agent-override-existing-index-datastream/363705)
**Author:** [@Mihovil\_Maricic](https://discuss.elastic.co/u/Mihovil_Maricic)\ **Replies:** 6\ **Last updated:** [August 20, 2024, 12:13pm UTC](https://discuss.elastic.co/t/elastic-agent-override-existing-index-datastream/363705 "2024-08-20T12:13:22Z")
Hi all, We have a use case where we use elastic-agent to populate the data where we inject our own document.\_id via the ingest pipeline and everything works fine at first glance. The thing is that when new data arrives… --- ## [Can't collect kubernetes metrics from elastic-agent](https://discuss.elastic.co/t/cant-collect-kubernetes-metrics-from-elastic-agent/365031)
**Author:** [@marone](https://discuss.elastic.co/u/marone)\ **Replies:** 1\ **Last updated:** [August 19, 2024, 3:38pm UTC](https://discuss.elastic.co/t/cant-collect-kubernetes-metrics-from-elastic-agent/365031 "2024-08-19T15:38:46Z")
Hello, It's been days me and a colleague trying to configure elastic-agent to collect kubernetes. I'll explain our stack after this: Before: version of all elastic components: 8.11.4 kube-state-metrics properly deploy… --- ## [Some agents not returning anything to osquery queries regarding bitlocker\_info table](https://discuss.elastic.co/t/some-agents-not-returning-anything-to-osquery-queries-regarding-bitlocker-info-table/365148)
**Author:** [@buzzdeee](https://discuss.elastic.co/u/buzzdeee)\ **Replies:** 0\ **Last updated:** [August 19, 2024, 2:12pm UTC](https://discuss.elastic.co/t/some-agents-not-returning-anything-to-osquery-queries-regarding-bitlocker-info-table/365148 "2024-08-19T14:12:52Z")
Hi, running live query to Windows Elastic Agents: select \* from bitlocker\_info; From the 27 targetted hosts, only 5 or so reply with a result set, the others don't seem to return anything. For a host that doesn't retu… --- ## [ECS compliance ogs-elastic\_agent.endpoint\_security?](https://discuss.elastic.co/t/ecs-compliance-ogs-elastic-agent-endpoint-security/365127)
**Author:** [@buzzdeee](https://discuss.elastic.co/u/buzzdeee)\ **Replies:** 0\ **Last updated:** [August 19, 2024, 10:31am UTC](https://discuss.elastic.co/t/ecs-compliance-ogs-elastic-agent-endpoint-security/365127 "2024-08-19T10:31:13Z")
Hi, looking at: Log Fields | Elastic Common Schema (ECS) Reference \[8.11\] | Elastic I found that for example: log.origin.XXX fields should be "extended". But when I look in Kibana onto logs for example ingested from /… --- ## [\[Solved\] Elasticsearch integration metric settings (elastic-agetnt)](https://discuss.elastic.co/t/solved-elasticsearch-integration-metric-settings-elastic-agetnt/364984)
**Author:** [@Abdarrahmane](https://discuss.elastic.co/u/Abdarrahmane)\ **Replies:** 4\ **Last updated:** [August 16, 2024, 8:55pm UTC](https://discuss.elastic.co/t/solved-elasticsearch-integration-metric-settings-elastic-agetnt/364984 "2024-08-16T20:55:59Z")
hello everyone, I have installed the elastic agent (enrolled in fleet) in all the nodes in my elasticsearch cluster they all have these settings # Enable security features xpack.security.enabled: true xpack.security.en… --- ## [What are the Elastic Agent managed by Fleet Log settings?](https://discuss.elastic.co/t/what-are-the-elastic-agent-managed-by-fleet-log-settings/365049)
**Author:** [@erikg](https://discuss.elastic.co/u/erikg)\ **Replies:** 1\ **Last updated:** [August 16, 2024, 6:07pm UTC](https://discuss.elastic.co/t/what-are-the-elastic-agent-managed-by-fleet-log-settings/365049 "2024-08-16T18:07:16Z")
Hello, I was wondering where I can find the log settings of a Fleet Managed Elastic Agent. --- ## [Cisco FTD Integration](https://discuss.elastic.co/t/cisco-ftd-integration/364935)
**Author:** [@checo2024](https://discuss.elastic.co/u/checo2024)\ **Replies:** 0\ **Last updated:** [August 14, 2024, 10:22pm UTC](https://discuss.elastic.co/t/cisco-ftd-integration/364935 "2024-08-14T22:22:35Z")
Hello, I've installed a Cisco FTD integration in Fleet Manager. While the integration went well, I am not receiving any logs from the Cisco FTD Firewall. Any advice in how to make it work? For that purpose, I have an… --- ## [PFsense integration cannot parse OPNSense ISC DHCP logs properly](https://discuss.elastic.co/t/pfsense-integration-cannot-parse-opnsense-isc-dhcp-logs-properly/364916)
**Author:** [@pcollardez](https://discuss.elastic.co/u/pcollardez)\ **Replies:** 1\ **Last updated:** [August 14, 2024, 4:07pm UTC](https://discuss.elastic.co/t/pfsense-integration-cannot-parse-opnsense-isc-dhcp-logs-properly/364916 "2024-08-14T16:07:41Z")
Hello, The PFSense integration cannot parse OPNSense DHCPv4 logs properly. OS: Debian 11.10 (x86\_64) PFSense integration: 1.19.1 ELK: 8.14.3 Elastic Agent: 8.14.3 OPNSense: 24.7\_9 ISC DHCPv4: 4.4.3P1\_1 For exampl… --- ## [Migrating from self monitoring to elastic agent monitoring](https://discuss.elastic.co/t/migrating-from-self-monitoring-to-elastic-agent-monitoring/364848)
**Author:** [@Abdarrahmane](https://discuss.elastic.co/u/Abdarrahmane)\ **Replies:** 0\ **Last updated:** [August 13, 2024, 4:42pm UTC](https://discuss.elastic.co/t/migrating-from-self-monitoring-to-elastic-agent-monitoring/364848 "2024-08-13T16:42:36Z")
hello dear community i'm monitoring my cluster using self monitoring but I want to move to monitor my cluster with elastic agent instead my configuration: in every elasticsearch nodes I have xpack.monitoring.collecti… --- ## [Elastic Agent cuts the number of logs in the output](https://discuss.elastic.co/t/elastic-agent-cuts-the-number-of-logs-in-the-output/364823)
**Author:** [@Patryk\_Ostrowski](https://discuss.elastic.co/u/Patryk_Ostrowski)\ **Replies:** 0\ **Last updated:** [August 13, 2024, 10:00am UTC](https://discuss.elastic.co/t/elastic-agent-cuts-the-number-of-logs-in-the-output/364823 "2024-08-13T10:00:41Z")
Hello, I have a problem with elastic agent, the problem also repeats when using filebeat. There are about 70k logs per second coming to the interface (each packet is a separate log for SRX). On the other hand, the agent… --- ## [Need help in integrating filebeat with Kibana](https://discuss.elastic.co/t/need-help-in-integrating-filebeat-with-kibana/364817)
**Author:** [@keerthi12](https://discuss.elastic.co/u/keerthi12)\ **Replies:** 0\ **Last updated:** [August 13, 2024, 7:18am UTC](https://discuss.elastic.co/t/need-help-in-integrating-filebeat-with-kibana/364817 "2024-08-13T07:18:25Z")
Hi Team, We had installed filebeat agent in our vm. Able to get the vm logs .Also did Elasticsearch configuration in filebeat yaml file but unable to view in Kibana dashboard. Kindly help. Thanks Keerthi --- ## [Sending multiple logs to same ingestion VM with (elastic agent installed in it) and send them to elasticsearch cluster?](https://discuss.elastic.co/t/sending-multiple-logs-to-same-ingestion-vm-with-elastic-agent-installed-in-it-and-send-them-to-elasticsearch-cluster/364751)
**Author:** [@Abdarrahmane](https://discuss.elastic.co/u/Abdarrahmane)\ **Replies:** 2\ **Last updated:** [August 12, 2024, 7:19pm UTC](https://discuss.elastic.co/t/sending-multiple-logs-to-same-ingestion-vm-with-elastic-agent-installed-in-it-and-send-them-to-elasticsearch-cluster/364751 "2024-08-12T19:19:15Z")
hello everyone ! i need guidance please i want to use an ingestion vm 192.168.1.124 (ubuntu server with elastic agent installed in it and enrolled in fleet) to receive logs from a lot of servers and components in my i… [Previous page](https://discuss.elastic.co/c/elastic-stack/elastic-agent/91.md?page=15) [Next page](https://discuss.elastic.co/c/elastic-stack/elastic-agent/91.md?page=17)