# Elastic Agent **URL:** https://discuss.elastic.co/c/elastic-stack/elastic-agent/91.md?page=20 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 21 --- ## [Elastic agent sending system beats but not forwarding netflow to ElasticSearch](https://discuss.elastic.co/t/elastic-agent-sending-system-beats-but-not-forwarding-netflow-to-elasticsearch/360242)
**Author:** [@MYK](https://discuss.elastic.co/u/MYK)\ **Replies:** 1\ **Last updated:** [May 27, 2024, 3:12pm UTC](https://discuss.elastic.co/t/elastic-agent-sending-system-beats-but-not-forwarding-netflow-to-elasticsearch/360242 "2024-05-27T15:12:26Z")
Hi Everyone, I am new to the ELK world and learning the stack. I deployed ELK v8.11 using Helm in Kubernetes. I am currently trying to integrate Mikrotik NetFlow logs with Elasticsearch. My current setup already has Elas… --- ## [Can we have two java web applications inside the same JVM loggin in different service names?](https://discuss.elastic.co/t/can-we-have-two-java-web-applications-inside-the-same-jvm-loggin-in-different-service-names/360200)
**Author:** [@Rubens\_Do\_Nascimento](https://discuss.elastic.co/u/Rubens_Do_Nascimento)\ **Replies:** 0\ **Last updated:** [May 24, 2024, 5:57pm UTC](https://discuss.elastic.co/t/can-we-have-two-java-web-applications-inside-the-same-jvm-loggin-in-different-service-names/360200 "2024-05-24T17:57:41Z")
Hello people! Is there any way to have two different Java web applications logging into two different service names while being inside the same JVM? I have tried, but one of the configurations got suppressed and was log… --- ## [Managemant Firewall](https://discuss.elastic.co/t/managemant-firewall/360170)
**Author:** [@adis3421](https://discuss.elastic.co/u/adis3421)\ **Replies:** 0\ **Last updated:** [May 24, 2024, 2:18pm UTC](https://discuss.elastic.co/t/managemant-firewall/360170 "2024-05-24T14:18:08Z")
Hello, I am raising an inquiry as in the case below. --- ## [Fleet APM and Synthetic Monitors](https://discuss.elastic.co/t/fleet-apm-and-synthetic-monitors/360067)
**Author:** [@catn0b0t](https://discuss.elastic.co/u/catn0b0t)\ **Replies:** 2\ **Last updated:** [May 24, 2024, 1:45pm UTC](https://discuss.elastic.co/t/fleet-apm-and-synthetic-monitors/360067 "2024-05-24T13:45:30Z")
We are looking into deploying APM throughout our fleet of agents (+300), but we are discovering some challenges. Context: These agents are running on appliances we have deployed at our customers. We are looking into usi… --- ## [Enabling/Disabling Elastic agents remotely after they have been added to a fleet](https://discuss.elastic.co/t/enabling-disabling-elastic-agents-remotely-after-they-have-been-added-to-a-fleet/360089)
**Author:** [@JayAskrenPureStorage](https://discuss.elastic.co/u/JayAskrenPureStorage)\ **Replies:** 1\ **Last updated:** [May 23, 2024, 8:13pm UTC](https://discuss.elastic.co/t/enabling-disabling-elastic-agents-remotely-after-they-have-been-added-to-a-fleet/360089 "2024-05-23T20:13:29Z")
We want to install the Elastic Agent on our OS image so all servers have the agent by default. We want to have these agents not report metrics by default but have the ability to turn them on remotely and report to the f… --- ## [Custom Logs integration with variable file path?](https://discuss.elastic.co/t/custom-logs-integration-with-variable-file-path/358508)
**Author:** [@jbrasee](https://discuss.elastic.co/u/jbrasee)\ **Replies:** 1\ **Last updated:** [May 23, 2024, 7:41am UTC](https://discuss.elastic.co/t/custom-logs-integration-with-variable-file-path/358508 "2024-05-23T07:41:14Z")
I'm using a Fleet Agent with Custom Logs integration, but the path to the log file is dynamic and dependent on the name of the agent host -- so I have "C:\\logs\\${host.hostname}\\elastic\*.log" as the log file path. However… --- ## [The difference between the EPR and EAR, do I need both for an air-gapped environment?](https://discuss.elastic.co/t/the-difference-between-the-epr-and-ear-do-i-need-both-for-an-air-gapped-environment/359947)
**Author:** [@sreeves0](https://discuss.elastic.co/u/sreeves0)\ **Replies:** 0\ **Last updated:** [May 22, 2024, 2:35am UTC](https://discuss.elastic.co/t/the-difference-between-the-epr-and-ear-do-i-need-both-for-an-air-gapped-environment/359947 "2024-05-22T02:35:35Z")
Hello, Sorry if this is a dumb question but I am new to setting up Elastic and hosting my own package registry. When using Elastic Agent do I need to have both the Elastic package registry and artifact registry to be ho… --- ## [Agents in Fleet Server going offline and inactive and becoming healthy any reason and how to delete the offline Agents from the Fleet server](https://discuss.elastic.co/t/agents-in-fleet-server-going-offline-and-inactive-and-becoming-healthy-any-reason-and-how-to-delete-the-offline-agents-from-the-fleet-server/357983)
**Author:** [@nkreddyp](https://discuss.elastic.co/u/nkreddyp)\ **Replies:** 1\ **Last updated:** [May 21, 2024, 11:09am UTC](https://discuss.elastic.co/t/agents-in-fleet-server-going-offline-and-inactive-and-becoming-healthy-any-reason-and-how-to-delete-the-offline-agents-from-the-fleet-server/357983 "2024-05-21T11:09:11Z")
we have integrated Linux and Windows hosts to Fleet server facing issue especially with windows agents its going offline very often and becoming healthy again i have checked the logs however i couldn't see any about this… --- ## [Elastic Agent (fleet) change default mapping](https://discuss.elastic.co/t/elastic-agent-fleet-change-default-mapping/357212)
**Author:** [@Eran\_Hadad](https://discuss.elastic.co/u/Eran_Hadad)\ **Replies:** 1\ **Last updated:** [May 21, 2024, 9:45am UTC](https://discuss.elastic.co/t/elastic-agent-fleet-change-default-mapping/357212 "2024-05-21T09:45:26Z")
Hi, I'm using fleet agent to collect logs from Azure event hub. I'm simply trying to change mapping so one field would be a text instead of a keyword. To make a long story short, I found the Component Templates that i… --- ## [Error when assigning agent policy after data loss](https://discuss.elastic.co/t/error-when-assigning-agent-policy-after-data-loss/356854)
**Author:** [@malthuis](https://discuss.elastic.co/u/malthuis)\ **Replies:** 1\ **Last updated:** [May 21, 2024, 9:43am UTC](https://discuss.elastic.co/t/error-when-assigning-agent-policy-after-data-loss/356854 "2024-05-21T09:43:33Z")
Hello, a few days ago I had the problem that Kibana was still loading and followed the suggestion to delete everything related to kibana on StackOverflow (which I can't link to from here, but the topic was "Kibana serve… --- ## [Logs-azure.eventhub@custom](https://discuss.elastic.co/t/logs-azure-eventhub-custom/356775)
**Author:** [@Eran\_Hadad](https://discuss.elastic.co/u/Eran_Hadad)\ **Replies:** 1\ **Last updated:** [May 21, 2024, 9:41am UTC](https://discuss.elastic.co/t/logs-azure-eventhub-custom/356775 "2024-05-21T09:41:05Z")
Hi, I'm using fleet to insert Azure logs into elasticsearch. I want to enrich my index with a new field so I created a new ingest pipeline named: logs-azure.eventhub@custom which I see that is been called from the mana… --- ## [How to take the fleet ouptut?](https://discuss.elastic.co/t/how-to-take-the-fleet-ouptut/359218)
**Author:** [@Brian\_Jeong](https://discuss.elastic.co/u/Brian_Jeong)\ **Replies:** 1\ **Last updated:** [May 21, 2024, 7:24am UTC](https://discuss.elastic.co/t/how-to-take-the-fleet-ouptut/359218 "2024-05-21T07:24:17Z")
Does Elasticsearch snapshot restore information from fleet \> settings \> output also recover? --- ## [Node Elastic APM agent not instrumenting PSQL database calls made in API (nest-js framework with drizzle ORM)](https://discuss.elastic.co/t/node-elastic-apm-agent-not-instrumenting-psql-database-calls-made-in-api-nest-js-framework-with-drizzle-orm/359857)
**Author:** [@hypernova](https://discuss.elastic.co/u/hypernova)\ **Replies:** 0\ **Last updated:** [May 20, 2024, 4:37pm UTC](https://discuss.elastic.co/t/node-elastic-apm-agent-not-instrumenting-psql-database-calls-made-in-api-nest-js-framework-with-drizzle-orm/359857 "2024-05-20T16:37:12Z")
Hi, I was recently experimenting with the elastic stack for my backend server monitoring. I am doing self managed setup with docker containers. I setup the elastic, kibana, metricbeat and fleet-server. It works well b… --- ## [How do I receive logs from a Cisco device?](https://discuss.elastic.co/t/how-do-i-receive-logs-from-a-cisco-device/359723)
**Author:** [@jreyes25](https://discuss.elastic.co/u/jreyes25)\ **Replies:** 2\ **Last updated:** [May 20, 2024, 12:58pm UTC](https://discuss.elastic.co/t/how-do-i-receive-logs-from-a-cisco-device/359723 "2024-05-20T12:58:22Z")
Hello, I'm trying to see how to configure elasticstack to receive logs from cisco devices. I see in the Integrations for 'Cisco Logs' and says to configure the output.elasticsearch section of the filebeat.yml file then … --- ## [Unable to use apm-server dynamic kafka topic with elastic-agent-standalone](https://discuss.elastic.co/t/unable-to-use-apm-server-dynamic-kafka-topic-with-elastic-agent-standalone/359826)
**Author:** [@Garvit\_Jain](https://discuss.elastic.co/u/Garvit_Jain)\ **Replies:** 0\ **Last updated:** [May 20, 2024, 12:48pm UTC](https://discuss.elastic.co/t/unable-to-use-apm-server-dynamic-kafka-topic-with-elastic-agent-standalone/359826 "2024-05-20T12:48:29Z")
Using following config with elastic agent standalone mode kafka-output: type: kafka hosts: - 'kafka:9092' client\_id: kafka-output topic: '%{\[data\_stream.type\]}-%{\[data\_str… --- ## [\_geoip\_database\_unavailable\_GeoLite2-City.mmdb Error](https://discuss.elastic.co/t/geoip-database-unavailable-geolite2-city-mmdb-error/359439)
**Author:** [@shrikantgulia](https://discuss.elastic.co/u/shrikantgulia)\ **Replies:** 11\ **Last updated:** [May 20, 2024, 12:13pm UTC](https://discuss.elastic.co/t/geoip-database-unavailable-geolite2-city-mmdb-error/359439 "2024-05-20T12:13:33Z")
Dear Members, can someone please guide i am facing the below issues don't know unable to lookup my field with geo ip details \[2024-05-14T12:21:49,461\]\[ERROR\]\[o.e.i.g.GeoIpDownloader \] \[node1\] exception during geoip da… --- ## [Integration Error - OpenCTI](https://discuss.elastic.co/t/integration-error-opencti/359767)
**Author:** [@Knight7](https://discuss.elastic.co/u/Knight7)\ **Replies:** 0\ **Last updated:** [May 19, 2024, 8:35pm UTC](https://discuss.elastic.co/t/integration-error-opencti/359767 "2024-05-19T20:35:29Z")
Hello, After installing Opencti in a docker environment, I want to get the threat indicators to Elasticsearch. For that, I used the Elastic Agent integration for OpenCTI. However, this integration always shows me this … --- ## [When and how are logs transformed the elastic-agent collects](https://discuss.elastic.co/t/when-and-how-are-logs-transformed-the-elastic-agent-collects/359751)
**Author:** [@fbr](https://discuss.elastic.co/u/fbr)\ **Replies:** 0\ **Last updated:** [May 18, 2024, 2:16pm UTC](https://discuss.elastic.co/t/when-and-how-are-logs-transformed-the-elastic-agent-collects/359751 "2024-05-18T14:16:49Z")
Hi there, we are running multiple web-applications (symfony) distributed over multiple server. Now we want to have a centralized place for the logs. I've set up the ELK-Stack (OK, to be honest... i've registered an clo… --- ## [Cloudflare Logpush Integration issue](https://discuss.elastic.co/t/cloudflare-logpush-integration-issue/359716)
**Author:** [@Gregg\_Douglas](https://discuss.elastic.co/u/Gregg_Douglas)\ **Replies:** 0\ **Last updated:** [May 17, 2024, 1:43pm UTC](https://discuss.elastic.co/t/cloudflare-logpush-integration-issue/359716 "2024-05-17T13:43:04Z")
Hi, I have setup a self hosted environment and I am trying to get the Cloudflare Logpush working, but I keep running into the same issue. When I run the curl command to enable the logpush against the Cloudflare API, I … --- ## [Cloudflare Logpush Integration: incorrect header or header secret](https://discuss.elastic.co/t/cloudflare-logpush-integration-incorrect-header-or-header-secret/359595)
**Author:** [@Gregg\_Douglas](https://discuss.elastic.co/u/Gregg_Douglas)\ **Replies:** 0\ **Last updated:** [May 16, 2024, 7:33am UTC](https://discuss.elastic.co/t/cloudflare-logpush-integration-incorrect-header-or-header-secret/359595 "2024-05-16T07:33:42Z")
Hi All, I have been struggling for weeks with the Cloudflare Logpush to a HTTP Endpoint integration. I have tried the Elastic examples, the Cloudflare examples and examples from other posts. These are the configuration… --- ## [Installation of custom integrations](https://discuss.elastic.co/t/installation-of-custom-integrations/359466)
**Author:** [@gscheidl](https://discuss.elastic.co/u/gscheidl)\ **Replies:** 0\ **Last updated:** [May 14, 2024, 1:17pm UTC](https://discuss.elastic.co/t/installation-of-custom-integrations/359466 "2024-05-14T13:17:55Z")
Hi all, I'm currently writing a test integration using elastic-package in windows on a test stack directly installed in Windows. elastic-agent is used to display the Windows events and it's actually running fine. So my… --- ## [Working with multiline messages on Elastic Agent](https://discuss.elastic.co/t/working-with-multiline-messages-on-elastic-agent/359435)
**Author:** [@chad1st](https://discuss.elastic.co/u/chad1st)\ **Replies:** 3\ **Last updated:** [May 14, 2024, 12:49pm UTC](https://discuss.elastic.co/t/working-with-multiline-messages-on-elastic-agent/359435 "2024-05-14T12:49:05Z")
Hello fellow devs, i have a usecase to ingest a application log to the elastic using Elastic Agent on my Java application, right now I got a problem when the application caught an unhandled exception and it prints it to … --- ## [Inquiry about elastic agents](https://discuss.elastic.co/t/inquiry-about-elastic-agents/359298)
**Author:** [@wwwryuwww](https://discuss.elastic.co/u/wwwryuwww)\ **Replies:** 2\ **Last updated:** [May 13, 2024, 6:15am UTC](https://discuss.elastic.co/t/inquiry-about-elastic-agents/359298 "2024-05-13T06:15:22Z")
Hi, everybody. I am very new to elastic agent and I'm trying to get used to it. Once I install elastic agent to a server, I see many instances are running. Are the default instances always running statically regardle… --- ## [Elastic Agent horizontal scaling vs logs duplicates](https://discuss.elastic.co/t/elastic-agent-horizontal-scaling-vs-logs-duplicates/359254)
**Author:** [@djkprojects](https://discuss.elastic.co/u/djkprojects)\ **Replies:** 4\ **Last updated:** [May 10, 2024, 3:17pm UTC](https://discuss.elastic.co/t/elastic-agent-horizontal-scaling-vs-logs-duplicates/359254 "2024-05-10T15:17:35Z")
Hello, We have multiple Elastic Agents assigned to one policy and this is causing an issue with data collected by the integrations being duplicated. I understand that the policy and integrations get applied to each Age… --- ## [Elastic Agent (IronBank) Components: Missing Executable Permissions on GO CLI Binaries](https://discuss.elastic.co/t/elastic-agent-ironbank-components-missing-executable-permissions-on-go-cli-binaries/358997)
**Author:** [@zedtran](https://discuss.elastic.co/u/zedtran)\ **Replies:** 1\ **Last updated:** [May 8, 2024, 9:08pm UTC](https://discuss.elastic.co/t/elastic-agent-ironbank-components-missing-executable-permissions-on-go-cli-binaries/358997 "2024-05-08T21:08:00Z")
The following files are missing the executable permission in the resulting Elastic Agent image stored in the IronBank container registry (File Type: ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically lin… --- ## [\[K8S\]Can not enroll elastic-agent: API KEY INVALID!](https://discuss.elastic.co/t/k8s-can-not-enroll-elastic-agent-api-key-invalid/359006)
**Author:** [@hcnhcn321](https://discuss.elastic.co/u/hcnhcn321)\ **Replies:** 0\ **Last updated:** [May 8, 2024, 1:59am UTC](https://discuss.elastic.co/t/k8s-can-not-enroll-elastic-agent-api-key-invalid/359006 "2024-05-08T01:59:47Z")
error log in elastic-agent pod: {"log.level":"error","@timestamp":"2024-05-08T01:51:37.250Z","message":"Failed to connect to backoff(elasticsearch(https://172.19.29.57:9200)): 401 Unauthorized: {\\"error\\":{\\"root\_cause\\… --- ## [ElasticAgent 8.13 and Kafka](https://discuss.elastic.co/t/elasticagent-8-13-and-kafka/358704)
**Author:** [@tapiojaa](https://discuss.elastic.co/u/tapiojaa)\ **Replies:** 9\ **Last updated:** [May 7, 2024, 1:22pm UTC](https://discuss.elastic.co/t/elasticagent-8-13-and-kafka/358704 "2024-05-07T13:22:24Z")
I'm using ElasticAgent to output data into Kafka. When using version 8.13.3 there is an error: status: (FAILED) could not start output: failed to reload output: topic '%{\[fields.kafka\_topic\]}' is invalid, it must match … --- ## [Drop event doesnt drop any](https://discuss.elastic.co/t/drop-event-doesnt-drop-any/358894)
**Author:** [@ninab](https://discuss.elastic.co/u/ninab)\ **Replies:** 0\ **Last updated:** [May 7, 2024, 6:17am UTC](https://discuss.elastic.co/t/drop-event-doesnt-drop-any/358894 "2024-05-07T06:17:18Z")
I am trying to config elastic-agent.yml to drop some events using processors but not filtering occures. Please advise: type: windows/metrics data\_stream.namespace: default use\_output: default period: 60s streams: m… --- ## [Filebeat.yml for a csv file](https://discuss.elastic.co/t/filebeat-yml-for-a-csv-file/358822)
**Author:** [@uhxqc](https://discuss.elastic.co/u/uhxqc)\ **Replies:** 0\ **Last updated:** [May 6, 2024, 12:05pm UTC](https://discuss.elastic.co/t/filebeat-yml-for-a-csv-file/358822 "2024-05-06T12:05:08Z")
Hello, I've been trying to write a filebeat.yml for a csv file with data in the following format: "ParameterA","ParameterB","ParameterC","ParameterD","ParameterE" "DataA1","DataB1","DataC1","DataD1","DataE1" "DataA2","… --- ## [Elastic-agent \> nginx \> logstash -- nginx proxy error](https://discuss.elastic.co/t/elastic-agent-nginx-logstash-nginx-proxy-error/358387)
**Author:** [@marlonws](https://discuss.elastic.co/u/marlonws)\ **Replies:** 22\ **Last updated:** [May 1, 2024, 7:15pm UTC](https://discuss.elastic.co/t/elastic-agent-nginx-logstash-nginx-proxy-error/358387 "2024-05-01T19:15:42Z")
I configured the fleet server perfectly, the policy that makes the elastic-agent output directly to elasticsearch works normally. I configured a logstash, without errors, it connects normally to elasticsearch. Logstash … [Previous page](https://discuss.elastic.co/c/elastic-stack/elastic-agent/91.md?page=19) [Next page](https://discuss.elastic.co/c/elastic-stack/elastic-agent/91.md?page=21)