# Elastic Agent **URL:** https://discuss.elastic.co/c/elastic-stack/elastic-agent/91.md?page=18 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 19 --- ## [Powershell events not collected by Windows Agent?](https://discuss.elastic.co/t/powershell-events-not-collected-by-windows-agent/363105)
**Author:** [@hotcobra](https://discuss.elastic.co/u/hotcobra)\ **Replies:** 0\ **Last updated:** [July 14, 2024, 7:08pm UTC](https://discuss.elastic.co/t/powershell-events-not-collected-by-windows-agent/363105 "2024-07-14T19:08:19Z")
Windows 11Pro 23H2 Integration?. Windows has the Endpoints-Initial Agent Policy including windows-endpoints (v1.38.0) and windows-defender integrations. Powershell events are not being collected in the Window Elastic Ag… --- ## [Error Publishing event](https://discuss.elastic.co/t/error-publishing-event/363061)
**Author:** [@Vm\_Elastic](https://discuss.elastic.co/u/Vm_Elastic)\ **Replies:** 0\ **Last updated:** [July 12, 2024, 11:51pm UTC](https://discuss.elastic.co/t/error-publishing-event/363061 "2024-07-12T23:51:14Z")
Need guidance...On Agent info metrics, on the agent where abusech integration is installed, we have been getting thousands of errors logs everyday that says Message: error Publishing Events, error.message: context cancel… --- ## [Trying to set up a standalone agent, but no data showing up](https://discuss.elastic.co/t/trying-to-set-up-a-standalone-agent-but-no-data-showing-up/363056)
**Author:** [@artschooldropout](https://discuss.elastic.co/u/artschooldropout)\ **Replies:** 0\ **Last updated:** [July 12, 2024, 8:52pm UTC](https://discuss.elastic.co/t/trying-to-set-up-a-standalone-agent-but-no-data-showing-up/363056 "2024-07-12T20:52:31Z")
We're running ES 8.14.2. I'm trying to set up a standalone agent (running Windows) for testing. I successfully installed the agent, and used the config file generated by the ES GUI (after populating the credentials). I c… --- ## [Fleet Server Output Settings](https://discuss.elastic.co/t/fleet-server-output-settings/363047)
**Author:** [@Vm\_Elastic](https://discuss.elastic.co/u/Vm_Elastic)\ **Replies:** 6\ **Last updated:** [July 12, 2024, 6:20pm UTC](https://discuss.elastic.co/t/fleet-server-output-settings/363047 "2024-07-12T18:20:30Z")
Help Please ...Hi Teams, we have a 4 nodes cluster, 3 dimr and one lrt role nodes , we have set the output of fleet server to the one with lrt role, is it recommended to set the output to all data nodes or is there no pr… --- ## [Field data type unknown even with mapping](https://discuss.elastic.co/t/field-data-type-unknown-even-with-mapping/362918)
**Author:** [@chsing](https://discuss.elastic.co/u/chsing)\ **Replies:** 3\ **Last updated:** [July 11, 2024, 4:24pm UTC](https://discuss.elastic.co/t/field-data-type-unknown-even-with-mapping/362918 "2024-07-11T16:24:29Z")
Hi, I'm using an agent policy with a Custom Logs integration to send my logs to Elastic. The logs are coming in fine except for one thing: a couple of the fields are coming in as unknown data types. I have tried to add … --- ## [Using HTTPS on Elastic Agent](https://discuss.elastic.co/t/using-https-on-elastic-agent/362816)
**Author:** [@Victor\_Santana](https://discuss.elastic.co/u/Victor_Santana)\ **Replies:** 1\ **Last updated:** [July 10, 2024, 5:47pm UTC](https://discuss.elastic.co/t/using-https-on-elastic-agent/362816 "2024-07-10T17:47:19Z")
Hello, I tried to enable SSL on my Elastic Agent communications to use HTTPS like in the doc bellow, but, it didn't worked for me and after trying a lot of things I don't now what else to do. Any help? --- ## [SSL for cloudflare integration](https://discuss.elastic.co/t/ssl-for-cloudflare-integration/362820)
**Author:** [@Gabriel\_Cunha](https://discuss.elastic.co/u/Gabriel_Cunha)\ **Replies:** 1\ **Last updated:** [July 9, 2024, 9:41pm UTC](https://discuss.elastic.co/t/ssl-for-cloudflare-integration/362820 "2024-07-09T21:41:47Z")
Hello, we using cloudflare logpush integration to got logs by http request. The problem is, we ssl setup and working bethween all elastic components, but the port used by cloudflare integration on the agent does not wor… --- ## [ECK Adding external agent SSL help!](https://discuss.elastic.co/t/eck-adding-external-agent-ssl-help/362759)
**Author:** [@clockard](https://discuss.elastic.co/u/clockard)\ **Replies:** 2\ **Last updated:** [July 9, 2024, 5:03pm UTC](https://discuss.elastic.co/t/eck-adding-external-agent-ssl-help/362759 "2024-07-09T17:03:29Z")
I've installed ECK on a self-hosted cluster. I cannot get the get data from that agent. Below is the command I am using in my LCX Debian container. I don't know if I'm using the right fingerprint I'm losing my freaking m… --- ## [Fleet server agent with ECK operator in OpenShift deploying error](https://discuss.elastic.co/t/fleet-server-agent-with-eck-operator-in-openshift-deploying-error/362694)
**Author:** [@mohamedmahrous](https://discuss.elastic.co/u/mohamedmahrous)\ **Replies:** 1\ **Last updated:** [July 9, 2024, 8:41am UTC](https://discuss.elastic.co/t/fleet-server-agent-with-eck-operator-in-openshift-deploying-error/362694 "2024-07-09T08:41:05Z")
Error: preparing STATE\_PATH(/usr/share/elastic-agent/state) failed: mkdir /usr/share/elastic-agent/state/data: permission denied I got this error while the deploying of fleet server using this configuration in manifest … --- ## [Fleet Server Unhealthy when first Launched](https://discuss.elastic.co/t/fleet-server-unhealthy-when-first-launched/361850)
**Author:** [@mid\_city](https://discuss.elastic.co/u/mid_city)\ **Replies:** 1\ **Last updated:** [July 9, 2024, 7:40am UTC](https://discuss.elastic.co/t/fleet-server-unhealthy-when-first-launched/361850 "2024-07-09T07:40:40Z")
Whenever I launch a fleet server it has a status of unhealthy. The system integration had warnings and I found the following when looking through my log diagnostic. {"log.level":"error","@timestamp":"2024-06-21T11:10:06… --- ## [Fleet Server Error : enroll command failed for unknown reason: exit status 2](https://discuss.elastic.co/t/fleet-server-error-enroll-command-failed-for-unknown-reason-exit-status-2/362518)
**Author:** [@Tola-Tole](https://discuss.elastic.co/u/Tola-Tole)\ **Replies:** 1\ **Last updated:** [July 9, 2024, 7:35am UTC](https://discuss.elastic.co/t/fleet-server-error-enroll-command-failed-for-unknown-reason-exit-status-2/362518 "2024-07-09T07:35:38Z")
Hello, i've problem to add fleet server, Error : enroll command failed for unknown reason: exit status 2. any help aboud this? --- ## [Deploy and run Powershellscripts with Elastic Agent](https://discuss.elastic.co/t/deploy-and-run-powershellscripts-with-elastic-agent/362725)
**Author:** [@disi\_90](https://discuss.elastic.co/u/disi_90)\ **Replies:** 1\ **Last updated:** [July 8, 2024, 6:22pm UTC](https://discuss.elastic.co/t/deploy-and-run-powershellscripts-with-elastic-agent/362725 "2024-07-08T18:22:08Z")
Hello community, We are using Splunk in our environment and are considering migrating to Elasticsearch. I am totally new to the Elastic topic. The capabilities of the Splunk Universal Forwarder and Splunk Heavy Forward… --- ## [Trouble enrolling Elastic Agent on Windows 2019](https://discuss.elastic.co/t/trouble-enrolling-elastic-agent-on-windows-2019/360990)
**Author:** [@hcherry](https://discuss.elastic.co/u/hcherry)\ **Replies:** 3\ **Last updated:** [July 8, 2024, 3:11pm UTC](https://discuss.elastic.co/t/trouble-enrolling-elastic-agent-on-windows-2019/360990 "2024-07-08T15:11:07Z")
Hello - While trying to install and enroll Elastic Agent on a Windows 2019 server, I am getting the following errors. Has anyone seen this before? I am finding no information about a cause or a solution. Thanks in advanc… --- ## [Elastic APM Agent for AIX OS](https://discuss.elastic.co/t/elastic-apm-agent-for-aix-os/362588)
**Author:** [@amolphp](https://discuss.elastic.co/u/amolphp)\ **Replies:** 4\ **Last updated:** [July 8, 2024, 1:10pm UTC](https://discuss.elastic.co/t/elastic-apm-agent-for-aix-os/362588 "2024-07-08T13:10:46Z")
Is there any plan to introduce Elastic APM Agent for AIX operating system? --- ## [Multiple Syslog Integrations, Port 514](https://discuss.elastic.co/t/multiple-syslog-integrations-port-514/362553)
**Author:** [@MaxFeng](https://discuss.elastic.co/u/MaxFeng)\ **Replies:** 0\ **Last updated:** [July 4, 2024, 1:01pm UTC](https://discuss.elastic.co/t/multiple-syslog-integrations-port-514/362553 "2024-07-04T13:01:19Z")
Hello everyone, I'm still quite new to the Elastic world and currently managing the PoC at our company. The environment is running quite well so far, and various systems are connected. However, I have the following prob… --- ## [AD Entity Analytics - invalid Base DN](https://discuss.elastic.co/t/ad-entity-analytics-invalid-base-dn/362071)
**Author:** [@PhilA](https://discuss.elastic.co/u/PhilA)\ **Replies:** 10\ **Last updated:** [July 3, 2024, 10:16pm UTC](https://discuss.elastic.co/t/ad-entity-analytics-invalid-base-dn/362071 "2024-07-03T22:16:00Z")
I'm aware that the Active Directory Entity Analytics is new and Technical Preview but wanted to check if its me doing something wrong and if not, perhaps it is worth raising for the developers feedback. During configura… --- ## [elastic agent does not open UDP ports on Linux](https://discuss.elastic.co/t/elastic-agent-does-not-open-udp-ports-on-linux/362369)
**Author:** [@obscure\_light](https://discuss.elastic.co/u/obscure_light)\ **Replies:** 3\ **Last updated:** [July 3, 2024, 4:36pm UTC](https://discuss.elastic.co/t/elastic-agent-does-not-open-udp-ports-on-linux/362369 "2024-07-03T16:36:56Z")
Hi, I installed Elastic Agent on some RHEL 8.10 and 8.9. The agent was working properly and receiving logs from machines sending to it with Syslog taking advantage of the integration to listen to UDP ports. It has stoppe… --- ## [How to monitor Systems Up or Down with ping disabled on them?](https://discuss.elastic.co/t/how-to-monitor-systems-up-or-down-with-ping-disabled-on-them/362428)
**Author:** [@sonirajil](https://discuss.elastic.co/u/sonirajil)\ **Replies:** 0\ **Last updated:** [July 3, 2024, 7:03am UTC](https://discuss.elastic.co/t/how-to-monitor-systems-up-or-down-with-ping-disabled-on-them/362428 "2024-07-03T07:03:53Z")
Hello, For security reasons, ping is disabled across servers in organization, Now in order to monitor system status (up/down) hence Heartbeat or Uptime are ruled out (as both work on ping mechanism) . Currently a basic… --- ## [Elastic-Agent errors "failed to publish events" errors when sending Auditd logs to Logstash](https://discuss.elastic.co/t/elastic-agent-errors-failed-to-publish-events-errors-when-sending-auditd-logs-to-logstash/362402)
**Author:** [@julia.navarro](https://discuss.elastic.co/u/julia.navarro)\ **Replies:** 0\ **Last updated:** [July 2, 2024, 7:18pm UTC](https://discuss.elastic.co/t/elastic-agent-errors-failed-to-publish-events-errors-when-sending-auditd-logs-to-logstash/362402 "2024-07-02T19:18:38Z")
We keep getting the following errors and warnings when trying to send auditd logs to logstash. We assume it is an ssl issue but how can we get logstash to ignore ssl verification when receiving data from a standalone ela… --- ## [How can i parse my logs using custom log integration](https://discuss.elastic.co/t/how-can-i-parse-my-logs-using-custom-log-integration/362287)
**Author:** [@sandraimmaculate](https://discuss.elastic.co/u/sandraimmaculate)\ **Replies:** 1\ **Last updated:** [July 2, 2024, 1:20pm UTC](https://discuss.elastic.co/t/how-can-i-parse-my-logs-using-custom-log-integration/362287 "2024-07-02T13:20:14Z")
i want to parse my custom logs symfony which is an application logs. As it doesn't have integration so trying to use custom integration yes the log is getting stored in elasticsearch but not parsing it i mean the whole l… --- ## [Kubernetes integration wrong node name](https://discuss.elastic.co/t/kubernetes-integration-wrong-node-name/362306)
**Author:** [@pk92](https://discuss.elastic.co/u/pk92)\ **Replies:** 0\ **Last updated:** [July 1, 2024, 4:07pm UTC](https://discuss.elastic.co/t/kubernetes-integration-wrong-node-name/362306 "2024-07-01T16:07:22Z")
Hi, Let's say I have a Kubernetes cluster with three nodes: host1 host2 host3 now when I get container logs from these nodes, all of them have host1 in their node.name and node.hostname field, though the host.hostname… --- ## [Elastic Agent Best Practice in remote cluster scenarios](https://discuss.elastic.co/t/elastic-agent-best-practice-in-remote-cluster-scenarios/362206)
**Author:** [@Juma](https://discuss.elastic.co/u/Juma)\ **Replies:** 2\ **Last updated:** [July 1, 2024, 6:26am UTC](https://discuss.elastic.co/t/elastic-agent-best-practice-in-remote-cluster-scenarios/362206 "2024-07-01T06:26:42Z")
Hello everybody, we use Elasticsearch as our SIEM/SOC solution for different customers. Our environment is based on ECK and to not mix data between our customers, we have a seperate one for each customer. Our SIEM rul… --- ## [Elastic-agents Fleet policy](https://discuss.elastic.co/t/elastic-agents-fleet-policy/362247)
**Author:** [@Viktor\_Movita](https://discuss.elastic.co/u/Viktor_Movita)\ **Replies:** 1\ **Last updated:** [June 30, 2024, 2:01pm UTC](https://discuss.elastic.co/t/elastic-agents-fleet-policy/362247 "2024-06-30T14:01:59Z")
Hello everyone, I manage Elastic agents using Fleet server. All agents of a certain type have a uniform policy that I prepared for them in Fleet. Sometimes there is a situation where I need to change a setting in the po… --- ## [Elastic Agent ca\_trusted\_fingerprint does not working, but the certificate works](https://discuss.elastic.co/t/elastic-agent-ca-trusted-fingerprint-does-not-working-but-the-certificate-works/362239)
**Author:** [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\ **Replies:** 9\ **Last updated:** [June 30, 2024, 12:53am UTC](https://discuss.elastic.co/t/elastic-agent-ca-trusted-fingerprint-does-not-working-but-the-certificate-works/362239 "2024-06-30T00:53:04Z")
Hello, I've built a simple docker compose that will spin up a single node cluster with Elasticsearch, Kibana and a Fleet server and I'm facing an issue where the ca\_trusted\_fingerprint is not working as expected. The c… --- ## [Why agent version check is stuck?](https://discuss.elastic.co/t/why-agent-version-check-is-stuck/362241)
**Author:** [@0xankit](https://discuss.elastic.co/u/0xankit)\ **Replies:** 0\ **Last updated:** [June 29, 2024, 6:11am UTC](https://discuss.elastic.co/t/why-agent-version-check-is-stuck/362241 "2024-06-29T06:11:06Z")
When I'm trying to add agent this api is being hit from kibana. http://localhost:5601/api/fleet/agents/available\_versions But is it getting stuck. In my local setup it is working fine, but on remote facing this issue. … --- ## [All of my agents stayed inactive](https://discuss.elastic.co/t/all-of-my-agents-stayed-inactive/362168)
**Author:** [@dmrlixos](https://discuss.elastic.co/u/dmrlixos)\ **Replies:** 4\ **Last updated:** [June 28, 2024, 2:53pm UTC](https://discuss.elastic.co/t/all-of-my-agents-stayed-inactive/362168 "2024-06-28T14:53:57Z")
I have 65 agents and today all these are inactive, I don't did any changes to the cluster to affect these agents. There's a way to recover these agents, my fleet server API are respond healthy curl -f https://localhos… --- ## [Sentinelone RPM\_MOUNT is filling up space](https://discuss.elastic.co/t/sentinelone-rpm-mount-is-filling-up-space/362212)
**Author:** [@dhiyaneshwaran\_r](https://discuss.elastic.co/u/dhiyaneshwaran_r)\ **Replies:** 1\ **Last updated:** [June 28, 2024, 12:36pm UTC](https://discuss.elastic.co/t/sentinelone-rpm-mount-is-filling-up-space/362212 "2024-06-28T12:36:41Z")
Team, We are using Elasticsearch-8.12.2 version, where we are seeing the directory /opt/sentinelone with the same elastic user which is filling space in /opt/sentinelone/rpm\_mount Please clarify the below points: H… --- ## [Multiline logs](https://discuss.elastic.co/t/multiline-logs/362166)
**Author:** [@adis3421](https://discuss.elastic.co/u/adis3421)\ **Replies:** 1\ **Last updated:** [June 28, 2024, 7:55am UTC](https://discuss.elastic.co/t/multiline-logs/362166 "2024-06-28T07:55:37Z")
Hi, I use custom logs integration to process custom logs, but this integration does not connect the multi-lines below: Custom logs configuration and sample log. Config in Custom Log: filebeat.inputs: type: filestrea… --- ## [Elastic Agent not reaching Elastic Cloud from Windows server](https://discuss.elastic.co/t/elastic-agent-not-reaching-elastic-cloud-from-windows-server/362046)
**Author:** [@alex170195](https://discuss.elastic.co/u/alex170195)\ **Replies:** 0\ **Last updated:** [June 25, 2024, 6:30pm UTC](https://discuss.elastic.co/t/elastic-agent-not-reaching-elastic-cloud-from-windows-server/362046 "2024-06-25T18:30:49Z")
I deployed the Elastic Agent using the command generated in Elastic Cloud and while I can see the Agent with Status Healthy in Fleet no data is received. I got the logs from the agent and I saw this: {"log.level":"erro… --- ## [Carbon Black Cloud: Failed to Unmarshal JSON Message](https://discuss.elastic.co/t/carbon-black-cloud-failed-to-unmarshal-json-message/361975)
**Author:** [@promenade8894](https://discuss.elastic.co/u/promenade8894)\ **Replies:** 17\ **Last updated:** [June 25, 2024, 1:17pm UTC](https://discuss.elastic.co/t/carbon-black-cloud-failed-to-unmarshal-json-message/361975 "2024-06-25T13:17:00Z")
I've recently added the Carbon Black Cloud integration to one of my agents using the "Collect Carbon Black Cloud logs via API using CEL \[Beta\]" option. However, all the documents that result from it have no useful inform… [Previous page](https://discuss.elastic.co/c/elastic-stack/elastic-agent/91.md?page=17) [Next page](https://discuss.elastic.co/c/elastic-stack/elastic-agent/91.md?page=19)