# Elastic Agent

**URL:** https://discuss.elastic.co/c/elastic-stack/elastic-agent/91.md?page=17

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 18

---

## [How to change permissions for fleet-managed Elastic Agents? \[security\_exception\]](https://discuss.elastic.co/t/how-to-change-permissions-for-fleet-managed-elastic-agents-security-exception/363780)

<div class="topic-metadata">

**Author:** [@B\_Grimm](https://discuss.elastic.co/u/B_Grimm)\
**Replies:** 6\
**Last updated:** [August 12, 2024, 1:45pm UTC](https://discuss.elastic.co/t/how-to-change-permissions-for-fleet-managed-elastic-agents-security-exception/363780 "2024-08-12T13:45:51Z")

</div>

Hello, I am reaching out to you with an issue that has been concerning me for quite some time now. Overview I have enrolled a fleet-managed Elastic Agent on a machine and created an ingest pipeline in the Elastic Clu…

---

## [Can't see Jolokia integration on Elastic Agent](https://discuss.elastic.co/t/cant-see-jolokia-integration-on-elastic-agent/364775)

<div class="topic-metadata">

**Author:** [@Ronaldo\_Lanhellas](https://discuss.elastic.co/u/Ronaldo_Lanhellas)\
**Replies:** 1\
**Last updated:** [August 12, 2024, 1:11pm UTC](https://discuss.elastic.co/t/cant-see-jolokia-integration-on-elastic-agent/364775 "2024-08-12T13:11:33Z")

</div>

I'm using Jolokia (JMX) for a log time with vanilla metricbeat, now migrating to elastic agent I can't find the Jolokia on Kibana, in Fleet menu. (Jolokia Input | Documentation)

---

## [Unable to create a fleet server with SSL certificates configured](https://discuss.elastic.co/t/unable-to-create-a-fleet-server-with-ssl-certificates-configured/364610)

<div class="topic-metadata">

**Author:** [@martianzz](https://discuss.elastic.co/u/martianzz)\
**Replies:** 2\
**Last updated:** [August 9, 2024, 4:57am UTC](https://discuss.elastic.co/t/unable-to-create-a-fleet-server-with-ssl-certificates-configured/364610 "2024-08-09T04:57:33Z")

</div>

Unable to create a fleet server with SSL certificates configured. the below error is coming. Please tell why ? ./elastic-agent install --url=https://10.0.30.129:8220 Elastic Agent will be installed at /opt/Elastic/A…

---

## [Error when adding Windows integration](https://discuss.elastic.co/t/error-when-adding-windows-integration/364188)

<div class="topic-metadata">

**Author:** [@riahc3](https://discuss.elastic.co/u/riahc3)\
**Replies:** 2\
**Last updated:** [August 8, 2024, 12:10pm UTC](https://discuss.elastic.co/t/error-when-adding-windows-integration/364188 "2024-08-08T12:10:54Z")

</div>

Hello I am trying to setup a Windows integration but I get this error message and I cannot add the Elastic Agent: Error installing windows 1.47.0: mapper\_parsing\_exception Caused by: illegal\_argument\_exception: analyze…

---

## [Using Azure integration without Azure storage](https://discuss.elastic.co/t/using-azure-integration-without-azure-storage/363848)

<div class="topic-metadata">

**Author:** [@Rihards](https://discuss.elastic.co/u/Rihards)\
**Replies:** 2\
**Last updated:** [August 8, 2024, 8:04am UTC](https://discuss.elastic.co/t/using-azure-integration-without-azure-storage/363848 "2024-08-08T08:04:39Z")

</div>

As per Azure Logs | Documentation , setting up Azure integration requires Azure storage for state registry to share it between agents. Is it possible to skip Azure storage and use local state registry (single agent or s…

---

## [Elastic-agent Custom UDP Logs Log Parsing Field Mapping Issue](https://discuss.elastic.co/t/elastic-agent-custom-udp-logs-log-parsing-field-mapping-issue/364523)

<div class="topic-metadata">

**Author:** [@wangsubo](https://discuss.elastic.co/u/wangsubo)\
**Replies:** 3\
**Last updated:** [August 8, 2024, 4:00am UTC](https://discuss.elastic.co/t/elastic-agent-custom-udp-logs-log-parsing-field-mapping-issue/364523 "2024-08-08T04:00:27Z")

</div>

I am currently using Elastic-agent to transmit log data to Elasticsearch through Logstash. I have two integrations configured: one for Fortigate and another for Custom UDP Logs. During the integration with Fortigate,…

---

## [\[bug\] Syslog RFC 5424 parser does not properly handle escaped characters in structured data](https://discuss.elastic.co/t/bug-syslog-rfc-5424-parser-does-not-properly-handle-escaped-characters-in-structured-data/364483)

<div class="topic-metadata">

**Author:** [@pcollardez](https://discuss.elastic.co/u/pcollardez)\
**Replies:** 4\
**Last updated:** [August 7, 2024, 2:16pm UTC](https://discuss.elastic.co/t/bug-syslog-rfc-5424-parser-does-not-properly-handle-escaped-characters-in-structured-data/364483 "2024-08-07T14:16:16Z")

</div>

Hello, I'm trying to collect logs from different appliances by using an Elastic Agent 8.14.3 with the Custom UDP Logs integration 1.19.1. One of the appliance is sending RFC 5424 formatted logs, with a structured data …

---

## [Back up and elastic agent](https://discuss.elastic.co/t/back-up-and-elastic-agent/364393)

<div class="topic-metadata">

**Author:** [@mmttt](https://discuss.elastic.co/u/mmttt)\
**Replies:** 0\
**Last updated:** [August 5, 2024, 1:39pm UTC](https://discuss.elastic.co/t/back-up-and-elastic-agent/364393 "2024-08-05T13:39:51Z")

</div>

Hello. I want to back up my system using the Elasticsearch features. It is very important for me here to be able to return their agents without going to the endpoints and succeed in getting logs from them. Thanks

---

## [Elastic-Agent and Logstash Integration Issue: FortiGate Logs Not Correctly Parsed in Elasticsearch](https://discuss.elastic.co/t/elastic-agent-and-logstash-integration-issue-fortigate-logs-not-correctly-parsed-in-elasticsearch/364342)

<div class="topic-metadata">

**Author:** [@wangsubo](https://discuss.elastic.co/u/wangsubo)\
**Replies:** 4\
**Last updated:** [August 5, 2024, 12:35pm UTC](https://discuss.elastic.co/t/elastic-agent-and-logstash-integration-issue-fortigate-logs-not-correctly-parsed-in-elasticsearch/364342 "2024-08-05T12:35:34Z")

</div>

I am currently trying to integrate Fortinet FortiGate Firewall logs through Elastic-Agent and Logstash, finally directing them into Elasticsearch. Here is my Logstash configuration: input { elastic\_agent { port =\> …

---

## [Fleet Policy different IP from the server](https://discuss.elastic.co/t/fleet-policy-different-ip-from-the-server/362595)

<div class="topic-metadata">

**Author:** [@otortosa](https://discuss.elastic.co/u/otortosa)\
**Replies:** 13\
**Last updated:** [July 31, 2024, 7:29pm UTC](https://discuss.elastic.co/t/fleet-policy-different-ip-from-the-server/362595 "2024-07-31T19:29:47Z")

</div>

Hello guys! My Fleet server have a private IP, but i need to recolect logs from a VM with only public IP, working with a PFSense, created a Port Forwarder to the Fleet Server private IP. The issue is that the Fleet Age…

---

## [Integration Issue with Sending Windows Event Logs to Elastic-Agent and Logstash via UDP](https://discuss.elastic.co/t/integration-issue-with-sending-windows-event-logs-to-elastic-agent-and-logstash-via-udp/364127)

<div class="topic-metadata">

**Author:** [@wangsubo](https://discuss.elastic.co/u/wangsubo)\
**Replies:** 0\
**Last updated:** [July 31, 2024, 9:13am UTC](https://discuss.elastic.co/t/integration-issue-with-sending-windows-event-logs-to-elastic-agent-and-logstash-via-udp/364127 "2024-07-31T09:13:27Z")

</div>

Hello everyone, I am currently working in a specific network environment where, due to network restrictions,I plan to transmit Windows event logs to Elastic-Agent via UDP. The specific data flow is as follows: Windows …

---

## [Elastic Agent Not Sending Logs from Endpoint Outside the Network (AWS Cloud deployemnt on VM)](https://discuss.elastic.co/t/elastic-agent-not-sending-logs-from-endpoint-outside-the-network-aws-cloud-deployemnt-on-vm/364122)

<div class="topic-metadata">

**Author:** [@ahmed\_fetoh](https://discuss.elastic.co/u/ahmed_fetoh)\
**Replies:** 0\
**Last updated:** [July 31, 2024, 8:40am UTC](https://discuss.elastic.co/t/elastic-agent-not-sending-logs-from-endpoint-outside-the-network-aws-cloud-deployemnt-on-vm/364122 "2024-07-31T08:40:29Z")

</div>

Hello! Description: I have deployed a setup on AWS with two VMs: One VM running Elasticsearch. Another VM running Kibana and Fleet Server. Issue: When I try to install an agent to collect logs from an endpoint, Ela…

---

## [A tls handshake error on fleet server](https://discuss.elastic.co/t/a-tls-handshake-error-on-fleet-server/364045)

<div class="topic-metadata">

**Author:** [@aristotel](https://discuss.elastic.co/u/aristotel)\
**Replies:** 0\
**Last updated:** [July 30, 2024, 11:46am UTC](https://discuss.elastic.co/t/a-tls-handshake-error-on-fleet-server/364045 "2024-07-30T11:46:22Z")

</div>

I'm running fleet agent on Nomad environment. The logs giving this error http: TLS handshake error from x.x.x.x:yyyy EOF\\n","component":{"binary":"fleet-server","dataset":"elastic\_agent.fleet\_server","id":"fleet-server…

---

## [Yml in inputs.d is not being read](https://discuss.elastic.co/t/yml-in-inputs-d-is-not-being-read/364030)

<div class="topic-metadata">

**Author:** [@riahc3](https://discuss.elastic.co/u/riahc3)\
**Replies:** 0\
**Last updated:** [July 30, 2024, 8:06am UTC](https://discuss.elastic.co/t/yml-in-inputs-d-is-not-being-read/364030 "2024-07-30T08:06:27Z")

</div>

Hello I put a yml file in inputs.d (/opt/Elastic/Agent/inputs.d) but it isnt being uploaded (I should see a new listening port) AFAIK, its just put it in there and done. Maybe I could see the Elastic Agent logs and t…

---

## [Support for transaction parentIds in Elastic Rum agent](https://discuss.elastic.co/t/support-for-transaction-parentids-in-elastic-rum-agent/363771)

<div class="topic-metadata">

**Author:** [@pedrogranja](https://discuss.elastic.co/u/pedrogranja)\
**Replies:** 2\
**Last updated:** [July 25, 2024, 12:59pm UTC](https://discuss.elastic.co/t/support-for-transaction-parentids-in-elastic-rum-agent/363771 "2024-07-25T12:59:45Z")

</div>

Hello Elastic team, In the context of a web extension, we are using the Elastic RUM agent. We created an agent in both the "FE" of the web extension and in the service worker of the web extension and we would now like t…

---

## [Two elk stack in same kubernetes cluster having agent port conflict](https://discuss.elastic.co/t/two-elk-stack-in-same-kubernetes-cluster-having-agent-port-conflict/363776)

<div class="topic-metadata">

**Author:** [@Pop\_Adrian](https://discuss.elastic.co/u/Pop_Adrian)\
**Replies:** 0\
**Last updated:** [July 25, 2024, 10:04am UTC](https://discuss.elastic.co/t/two-elk-stack-in-same-kubernetes-cluster-having-agent-port-conflict/363776 "2024-07-25T10:04:58Z")

</div>

Hello, I have an elk stack deployed from helm eck-stack repo and I wanna setup the second one in a new namespace The problem is that the agents will start with the same port and I got Error: could not start the HTTP s…

---

## [Elastic Agent Filebeat - keep line order](https://discuss.elastic.co/t/elastic-agent-filebeat-keep-line-order/363472)

<div class="topic-metadata">

**Author:** [@Marko\_Todoric](https://discuss.elastic.co/u/Marko_Todoric)\
**Replies:** 2\
**Last updated:** [July 24, 2024, 7:08am UTC](https://discuss.elastic.co/t/elastic-agent-filebeat-keep-line-order/363472 "2024-07-24T07:08:13Z")

</div>

I'm shipping logs from Wildfly application to elasticsearch using Elastic Agent 'Custom Log File" integration. However I've noticed that log lines are not shipped or displayed in the exact order. It probably has somethi…

---

## [Cannot read existing Message Signing Key pair](https://discuss.elastic.co/t/cannot-read-existing-message-signing-key-pair/363554)

<div class="topic-metadata">

**Author:** [@Mahmoud0x](https://discuss.elastic.co/u/Mahmoud0x)\
**Replies:** 0\
**Last updated:** [July 22, 2024, 12:02pm UTC](https://discuss.elastic.co/t/cannot-read-existing-message-signing-key-pair/363554 "2024-07-22T12:02:09Z")

</div>

Add integration or create new policy , i found message Cannot read existing Message Signing Key pair

---

## [Fleet managed elastic agent: Kubernetes Prometheus Metrics Autodiscover](https://discuss.elastic.co/t/fleet-managed-elastic-agent-kubernetes-prometheus-metrics-autodiscover/362808)

<div class="topic-metadata">

**Author:** [@Alphayeeeet](https://discuss.elastic.co/u/Alphayeeeet)\
**Replies:** 7\
**Last updated:** [July 22, 2024, 11:54am UTC](https://discuss.elastic.co/t/fleet-managed-elastic-agent-kubernetes-prometheus-metrics-autodiscover/362808 "2024-07-22T11:54:11Z")

</div>

Moved the discussion from github to here: Prometheus Input - auto discovery and leader election in fleet · Issue #4126 · elastic/elastic-agent · GitHub

---

## [Redundant syslog processing](https://discuss.elastic.co/t/redundant-syslog-processing/363178)

<div class="topic-metadata">

**Author:** [@dmgeurts](https://discuss.elastic.co/u/dmgeurts)\
**Replies:** 2\
**Last updated:** [July 19, 2024, 6:58pm UTC](https://discuss.elastic.co/t/redundant-syslog-processing/363178 "2024-07-19T18:58:29Z")

</div>

I'm testing log collection from some Palo Alto firewalls and am considering what the best design might be for reliable and redundant log collection. What do other do? Log to two collectors and have Elastic deduplicate…

---

## [O365 Audit Log Severe Delay](https://discuss.elastic.co/t/o365-audit-log-severe-delay/363419)

<div class="topic-metadata">

**Author:** [@JS2005](https://discuss.elastic.co/u/JS2005)\
**Replies:** 0\
**Last updated:** [July 19, 2024, 11:03am UTC](https://discuss.elastic.co/t/o365-audit-log-severe-delay/363419 "2024-07-19T11:03:33Z")

</div>

We have been having issues surrounding the o365.audit Integration within Elastic. We are running this integration on multiple machines and tenants and are having massive delays in logs being created on 365 before we see…

---

## [Drop\_event processor in Powershell Channels](https://discuss.elastic.co/t/drop-event-processor-in-powershell-channels/362377)

<div class="topic-metadata">

**Author:** [@fsch](https://discuss.elastic.co/u/fsch)\
**Replies:** 3\
**Last updated:** [July 18, 2024, 11:29am UTC](https://discuss.elastic.co/t/drop-event-processor-in-powershell-channels/362377 "2024-07-18T11:29:10Z")

</div>

Hello We’ve recently rolled out the Elastic Agent on our Windows servers and since our main focus lies on building rules based on powershell events we would like to filter out as much of those events as possible before …

---

## [Data\_stream.dataset: kubernetes.state\_node produce empty fields](https://discuss.elastic.co/t/data-stream-dataset-kubernetes-state-node-produce-empty-fields/363318)

<div class="topic-metadata">

**Author:** [@Mihai-CMM](https://discuss.elastic.co/u/Mihai-CMM)\
**Replies:** 0\
**Last updated:** [July 18, 2024, 6:01am UTC](https://discuss.elastic.co/t/data-stream-dataset-kubernetes-state-node-produce-empty-fields/363318 "2024-07-18T06:01:33Z")

</div>

Hello - I've deployed ECK with a standalone elastic agent. In the Kubernetes integration configuration i've set kube-state-metrics.monitoring:8080 as the host Then if i do a curl i can see the metrics exposed. But on th…

---

## [\[elastic\_agent\]\[error\] Cannot checkin in with fleet-server, retrying](https://discuss.elastic.co/t/elastic-agent-error-cannot-checkin-in-with-fleet-server-retrying/363046)

<div class="topic-metadata">

**Author:** [@samy\_guest](https://discuss.elastic.co/u/samy_guest)\
**Replies:** 4\
**Last updated:** [July 17, 2024, 8:38am UTC](https://discuss.elastic.co/t/elastic-agent-error-cannot-checkin-in-with-fleet-server-retrying/363046 "2024-07-17T08:38:22Z")

</div>

I have an elk on-promise cluster on which I have deployed fleet server and elastic agent nodes following an upgrade of ELK from 8.12.1 to 8.14.1 then .2 I had a problem with elastic agent managed by fleet the problem …

---

## [Please help: Fleetserver reinstall is not working after 8.14.0 upgrade](https://discuss.elastic.co/t/please-help-fleetserver-reinstall-is-not-working-after-8-14-0-upgrade/360995)

<div class="topic-metadata">

**Author:** [@Alphayeeeet](https://discuss.elastic.co/u/Alphayeeeet)\
**Replies:** 2\
**Last updated:** [July 17, 2024, 8:16am UTC](https://discuss.elastic.co/t/please-help-fleetserver-reinstall-is-not-working-after-8-14-0-upgrade/360995 "2024-07-17T08:16:16Z")

</div>

This is the correspondig Github issue: Fleet server tries elasticsearch connection via localhost instead of configured elasticsearch url. · Issue #4873 · elastic/elastic-agent · GitHub

---

## [\--insecure flag in fleet/elastic agent deployment to solve X509: certificate signed by unknown authority](https://discuss.elastic.co/t/insecure-flag-in-fleet-elastic-agent-deployment-to-solve-x509-certificate-signed-by-unknown-authority/363122)

<div class="topic-metadata">

**Author:** [@Abdarrahmane](https://discuss.elastic.co/u/Abdarrahmane)\
**Replies:** 8\
**Last updated:** [July 16, 2024, 3:45pm UTC](https://discuss.elastic.co/t/insecure-flag-in-fleet-elastic-agent-deployment-to-solve-x509-certificate-signed-by-unknown-authority/363122 "2024-07-16T15:45:04Z")

</div>

hello everyone, hope you're doing well i really love the elk stack and its community, much love to you guys !! i have a question : while deploying fleet or elastic agents i get this error message x509 to solved it I f…

---

## [How to disable TLS1.1 on Elastic Agent](https://discuss.elastic.co/t/how-to-disable-tls1-1-on-elastic-agent/363171)

<div class="topic-metadata">

**Author:** [@CCee](https://discuss.elastic.co/u/CCee)\
**Replies:** 2\
**Last updated:** [July 15, 2024, 5:27pm UTC](https://discuss.elastic.co/t/how-to-disable-tls1-1-on-elastic-agent/363171 "2024-07-15T17:27:15Z")

</div>

We are trying to disable TLS 1.1 service on port 8220 for the Elastic Agent Fleet Server. The configuration file is as follows，I have three three different configuration methods but it is still not working. The elastic…

---

## [X509: certificate signed by unknown authority + fleet "Set up encryption key" in kibana \> fleet](https://discuss.elastic.co/t/x509-certificate-signed-by-unknown-authority-fleet-set-up-encryption-key-in-kibana-fleet/363062)

<div class="topic-metadata">

**Author:** [@Abdarrahmane](https://discuss.elastic.co/u/Abdarrahmane)\
**Replies:** 6\
**Last updated:** [July 15, 2024, 3:40pm UTC](https://discuss.elastic.co/t/x509-certificate-signed-by-unknown-authority-fleet-set-up-encryption-key-in-kibana-fleet/363062 "2024-07-15T15:40:14Z")

</div>

hello i really really need help please creating a fleet server i have an elasticsearch cluster with 2 nodes (192.168.1.15:9200, 192.168.1.16:9200) and kibana instance 192.168.1.20:5601, and a fleetserver 192.168.1.23:82…

---

## [Set custom hostname for Elastic-Agent](https://discuss.elastic.co/t/set-custom-hostname-for-elastic-agent/363146)

<div class="topic-metadata">

**Author:** [@disi\_90](https://discuss.elastic.co/u/disi_90)\
**Replies:** 0\
**Last updated:** [July 15, 2024, 12:00pm UTC](https://discuss.elastic.co/t/set-custom-hostname-for-elastic-agent/363146 "2024-07-15T12:00:00Z")

</div>

Hello community, Is there a possibility to set a custom hostname for my Elastic host when installing Elastic Agent or after the installation in the configuration files? The reason is that we are using system aliases und…

---

## [To pinpoint the exact time when connectivity was lost and restored, even if logs are backfilled upon reconnection](https://discuss.elastic.co/t/to-pinpoint-the-exact-time-when-connectivity-was-lost-and-restored-even-if-logs-are-backfilled-upon-reconnection/363095)

<div class="topic-metadata">

**Author:** [@Muhammad\_Bilal](https://discuss.elastic.co/u/Muhammad_Bilal)\
**Replies:** 1\
**Last updated:** [July 14, 2024, 11:50am UTC](https://discuss.elastic.co/t/to-pinpoint-the-exact-time-when-connectivity-was-lost-and-restored-even-if-logs-are-backfilled-upon-reconnection/363095 "2024-07-14T11:50:35Z")

</div>

Hi, Any one help me regarding how to know in elastic the exact time when connectivity was lost and restored to elastic, even if logs are backfilled upon reconnection

[Previous page](https://discuss.elastic.co/c/elastic-stack/elastic-agent/91.md?page=16)

[Next page](https://discuss.elastic.co/c/elastic-stack/elastic-agent/91.md?page=18)
