# Elastic Agent **URL:** https://discuss.elastic.co/c/elastic-stack/elastic-agent/91.md?page=26 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 27 --- ## [Not able install fleet properly on Windows7](https://discuss.elastic.co/t/not-able-install-fleet-properly-on-windows7/348791)
**Author:** [@swapnalimag](https://discuss.elastic.co/u/swapnalimag)\ **Replies:** 2\ **Last updated:** [December 22, 2023, 3:00pm UTC](https://discuss.elastic.co/t/not-able-install-fleet-properly-on-windows7/348791 "2023-12-22T15:00:58Z")
Hello, I am trying to install the fleet agent on Windows 7 . But during installation it is showing me the following error. "Fail to execute request to fleet-server: x509: certificate signed by Unknown authority" We ha… --- ## [Osquery yara rules](https://discuss.elastic.co/t/osquery-yara-rules/349795)
**Author:** [@sh1dow3r](https://discuss.elastic.co/u/sh1dow3r)\ **Replies:** 0\ **Last updated:** [December 21, 2023, 12:57pm UTC](https://discuss.elastic.co/t/osquery-yara-rules/349795 "2023-12-21T12:57:35Z")
Hey there.. I've already tried slack but no luck; hopefully someone here has encounter this issue and solved it. I have over 50 yara rules stored on gitlab in one file that I want to sweep the environment with the elas… --- ## [Change number of shards and refresh interval for all datastreams of Elastic Agent](https://discuss.elastic.co/t/change-number-of-shards-and-refresh-interval-for-all-datastreams-of-elastic-agent/349725)
**Author:** [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\ **Replies:** 0\ **Last updated:** [December 20, 2023, 1:14pm UTC](https://discuss.elastic.co/t/change-number-of-shards-and-refresh-interval-for-all-datastreams-of-elastic-agent/349725 "2023-12-20T13:14:35Z")
Hello, Currently all the data collected by the Elastic Agent integrations uses a default number of shards of 1 and a refresh interval of 1s, those configurations are not optimal for our use case and are starting to impa… --- ## [Elastic Agent Cisco ASA integration - timestamp issue](https://discuss.elastic.co/t/elastic-agent-cisco-asa-integration-timestamp-issue/349646)
**Author:** [@vuylstekeb](https://discuss.elastic.co/u/vuylstekeb)\ **Replies:** 5\ **Last updated:** [December 19, 2023, 5:01pm UTC](https://discuss.elastic.co/t/elastic-agent-cisco-asa-integration-timestamp-issue/349646 "2023-12-19T17:01:35Z")
Hi I've recently started experimenting with Elastic Agent integrations. I've added one for Cisco ASA logs. The problem I'm facing is that my data is coming in with wrong timestamps. The data gets added into the indice wi… --- ## [Failed to reload inputs: 1 error: Error creating runner from config: log\_group\_arn, log\_group\_name and log\_group\_name\_prefix config parametercannot all be empty accessing config](https://discuss.elastic.co/t/failed-to-reload-inputs-1-error-error-creating-runner-from-config-log-group-arn-log-group-name-and-log-group-name-prefix-config-parametercannot-all-be-empty-accessing-config/349353)
**Author:** [@surya\_dadi\_dhamarake](https://discuss.elastic.co/u/surya_dadi_dhamarake)\ **Replies:** 0\ **Last updated:** [December 14, 2023, 11:14am UTC](https://discuss.elastic.co/t/failed-to-reload-inputs-1-error-error-creating-runner-from-config-log-group-arn-log-group-name-and-log-group-name-prefix-config-parametercannot-all-be-empty-accessing-config/349353 "2023-12-14T11:14:21Z")
Hi Team, I was trying to integrate AWS cloudwatch and collect logs from specific log groups. I have configured below options Role ARN Default AWS Region Log Group ARN Log Group Name But I am facing below … --- ## [Security not allowing me to install integration app](https://discuss.elastic.co/t/security-not-allowing-me-to-install-integration-app/349280)
**Author:** [@droidus](https://discuss.elastic.co/u/droidus)\ **Replies:** 0\ **Last updated:** [December 13, 2023, 3:12pm UTC](https://discuss.elastic.co/t/security-not-allowing-me-to-install-integration-app/349280 "2023-12-13T15:12:07Z")
I have a new install, and I went to add this app, and got this message. I followed the instructions in the listed guide, and even restarted the stack, to no avail. I get this same message. --- ## [\[eck-stack\] Unable to gather kubernetes logs via agent while passing ELASTICSEARCH\_CA to agent](https://discuss.elastic.co/t/eck-stack-unable-to-gather-kubernetes-logs-via-agent-while-passing-elasticsearch-ca-to-agent/349198)
**Author:** [@sevaho](https://discuss.elastic.co/u/sevaho)\ **Replies:** 1\ **Last updated:** [December 13, 2023, 2:59pm UTC](https://discuss.elastic.co/t/eck-stack-unable-to-gather-kubernetes-logs-via-agent-while-passing-elasticsearch-ca-to-agent/349198 "2023-12-13T14:59:53Z")
Hello everyone, Hope you're all doing well! I've been diving into setting up Elasticsearch on Kubernetes, and it's been quite the journey. I've been at it for the past two weeks, with my main goal being to seamlessly fe… --- ## [Fleet initial error](https://discuss.elastic.co/t/fleet-initial-error/347225)
**Author:** [@mohd\_sa](https://discuss.elastic.co/u/mohd_sa)\ **Replies:** 17\ **Last updated:** [December 13, 2023, 8:12am UTC](https://discuss.elastic.co/t/fleet-initial-error/347225 "2023-12-13T08:12:49Z")
Hi after upgrade from 8.9.1 to 8.11.1 , I have error on fleet page "unable to initialize fleet, uninstall token is missing the token" --- ## [Elasticsearch/Kibana Fleet and APM via Docker Compose](https://discuss.elastic.co/t/elasticsearch-kibana-fleet-and-apm-via-docker-compose/349204)
**Author:** [@michael.brizic](https://discuss.elastic.co/u/michael.brizic)\ **Replies:** 0\ **Last updated:** [December 13, 2023, 1:31am UTC](https://discuss.elastic.co/t/elasticsearch-kibana-fleet-and-apm-via-docker-compose/349204 "2023-12-13T01:31:36Z")
Hi, I'm attempting to run the Elasticsearch/Kibana stack along with elastic-agent as a Fleet Server and APM Server via Docker Compose in order that I may have a complete local development setup that I can spin up and do… --- ## [Cannot read properties of undefined (reading 'split')](https://discuss.elastic.co/t/cannot-read-properties-of-undefined-reading-split/349034)
**Author:** [@Huzefa](https://discuss.elastic.co/u/Huzefa)\ **Replies:** 0\ **Last updated:** [December 11, 2023, 11:16am UTC](https://discuss.elastic.co/t/cannot-read-properties-of-undefined-reading-split/349034 "2023-12-11T11:16:17Z")
I am currently encountering an issue in Kibana related to "Cannot read properties of undefined (reading 'split')" when attempting to upgrade agent policies or view agent policies. The occurrence of this error was noted a… --- ## [Tenable.sc integration not visible on the intergations tab](https://discuss.elastic.co/t/tenable-sc-integration-not-visible-on-the-intergations-tab/349019)
**Author:** [@Kotsos](https://discuss.elastic.co/u/Kotsos)\ **Replies:** 0\ **Last updated:** [December 11, 2023, 7:48am UTC](https://discuss.elastic.co/t/tenable-sc-integration-not-visible-on-the-intergations-tab/349019 "2023-12-11T07:48:42Z")
Hello, I am trying to install the Tenable.sc integration with the ELK stack, which according to the documentation collects and parses data from the Tenable.sc APIs. However it is nowhere to be found on the "Browse inter… --- ## [Getting the error as "agent\_id\_status": "auth\_metadata\_missing" in the file beat data stream on elastic agent standalone deployed on k8s cluster](https://discuss.elastic.co/t/getting-the-error-as-agent-id-status-auth-metadata-missing-in-the-file-beat-data-stream-on-elastic-agent-standalone-deployed-on-k8s-cluster/349007)
**Author:** [@Subrahmanyam\_Veerank](https://discuss.elastic.co/u/Subrahmanyam_Veerank)\ **Replies:** 0\ **Last updated:** [December 11, 2023, 5:14am UTC](https://discuss.elastic.co/t/getting-the-error-as-agent-id-status-auth-metadata-missing-in-the-file-beat-data-stream-on-elastic-agent-standalone-deployed-on-k8s-cluster/349007 "2023-12-11T05:14:04Z")
Deployed the elastic agent standalone in a kubernetes cluster and a agent policy is created with a kubernetes integration. Getting some of the metric visualizations of the pods,nodes,etc but when i checked the filebeat d… --- ## [Error: fail to enroll: fail to execute request to fleet-server: http: server gave HTTP response to HTTPS client](https://discuss.elastic.co/t/error-fail-to-enroll-fail-to-execute-request-to-fleet-server-http-server-gave-http-response-to-https-client/348678)
**Author:** [@Virtual\_Box](https://discuss.elastic.co/u/Virtual_Box)\ **Replies:** 3\ **Last updated:** [December 9, 2023, 6:47pm UTC](https://discuss.elastic.co/t/error-fail-to-enroll-fail-to-execute-request-to-fleet-server-http-server-gave-http-response-to-https-client/348678 "2023-12-09T18:47:56Z")
Hey there, I've tried to install elastic-agent on ubuntu host and get the next error: Enrolling Elastic Agent with Fleet...{"log.level":"warn","@timestamp":"2023-12-05T20:38:37.405Z","log.logger":"tls","log.origin":{"f… --- ## [Fleet integration for Barracauda Firewall logs](https://discuss.elastic.co/t/fleet-integration-for-barracauda-firewall-logs/348882)
**Author:** [@maadhav](https://discuss.elastic.co/u/maadhav)\ **Replies:** 10\ **Last updated:** [December 9, 2023, 5:46am UTC](https://discuss.elastic.co/t/fleet-integration-for-barracauda-firewall-logs/348882 "2023-12-09T05:46:04Z")
Hi Team We have configured Fleet server and added Elastic Agents. Output is configured using Logstash. Agent policy is added which contains system integration, its working fine and sending logs to logstash output. When… --- ## [Elastic Agent causing VM connectivity issues](https://discuss.elastic.co/t/elastic-agent-causing-vm-connectivity-issues/348445)
**Author:** [@Jordan\_Altmann](https://discuss.elastic.co/u/Jordan_Altmann)\ **Replies:** 2\ **Last updated:** [December 8, 2023, 2:32pm UTC](https://discuss.elastic.co/t/elastic-agent-causing-vm-connectivity-issues/348445 "2023-12-08T14:32:51Z")
We've deployed the 8.11.0 elastic agents to windows and use both the system and windows integration to consume windows logs and host metrics. Since installing the agent, we've been having intermittent connectivity issue… --- ## [Certificate renewal and Fleet](https://discuss.elastic.co/t/certificate-renewal-and-fleet/348828)
**Author:** [@slash24](https://discuss.elastic.co/u/slash24)\ **Replies:** 4\ **Last updated:** [December 8, 2023, 1:06pm UTC](https://discuss.elastic.co/t/certificate-renewal-and-fleet/348828 "2023-12-08T13:06:55Z")
My designated fleet-server (windows) has a internal Enterprise-certificate that is gonna expire soon. I know how to request the new CSR and issue the CER/PEM from my elastic -nodes, but I can't figure out where the Flee… --- ## [How can set providers.docker.host when deploying elastic-agent via docker?](https://discuss.elastic.co/t/how-can-set-providers-docker-host-when-deploying-elastic-agent-via-docker/348737)
**Author:** [@JohannesKoch](https://discuss.elastic.co/u/JohannesKoch)\ **Replies:** 0\ **Last updated:** [December 6, 2023, 3:45pm UTC](https://discuss.elastic.co/t/how-can-set-providers-docker-host-when-deploying-elastic-agent-via-docker/348737 "2023-12-06T15:45:24Z")
Hello, I have already setup elasticsearch, kibana and a fleet-server. They are all reachable and do get data from an elastic-agent running inside docker on another host. I don't like the idea of mounting the docker so… --- ## [Download Windows Agent from source artifacts.elastic.co](https://discuss.elastic.co/t/download-windows-agent-from-source-artifacts-elastic-co/348654)
**Author:** [@Tybe\_sacha](https://discuss.elastic.co/u/Tybe_sacha)\ **Replies:** 4\ **Last updated:** [December 6, 2023, 2:00pm UTC](https://discuss.elastic.co/t/download-windows-agent-from-source-artifacts-elastic-co/348654 "2023-12-06T14:00:04Z")
Hi, I'm trying to install the Fleet Server and Windows Agent. Here is text I paste : $ProgressPreference = 'SilentlyContinue' Invoke-WebRequest -Uri https://artifacts.elastic.co/downloads/beats/elastic-agent/elastic-ag… --- ## [SWEET32 Vulnerability Remediation for Elastic Fleet](https://discuss.elastic.co/t/sweet32-vulnerability-remediation-for-elastic-fleet/348598)
**Author:** [@jakechoi](https://discuss.elastic.co/u/jakechoi)\ **Replies:** 1\ **Last updated:** [December 6, 2023, 10:28am UTC](https://discuss.elastic.co/t/sweet32-vulnerability-remediation-for-elastic-fleet/348598 "2023-12-06T10:28:39Z")
Apologies if this is the wrong location to post this topic. I've been troubleshooting a vulnerability found by our Nessus scanner on our Kibana instance. Nessus shows that the port used by our fleet on our Kibana instan… --- ## [Elastic agent needs elasticseach ca from elastic cloud](https://discuss.elastic.co/t/elastic-agent-needs-elasticseach-ca-from-elastic-cloud/348273)
**Author:** [@logger](https://discuss.elastic.co/u/logger)\ **Replies:** 6\ **Last updated:** [December 1, 2023, 7:38pm UTC](https://discuss.elastic.co/t/elastic-agent-needs-elasticseach-ca-from-elastic-cloud/348273 "2023-12-01T19:38:26Z")
Hi there, currently I am a bit confused with the installation of fleet and elastic-agent. I am using the elastic cloud for elasticsearch, kibana and fleet. On my testserver, debian 10, we are behind a proxy. I have ex… --- ## [AWS Integration - Poor Performance](https://discuss.elastic.co/t/aws-integration-poor-performance/348397)
**Author:** [@digital-thought](https://discuss.elastic.co/u/digital-thought)\ **Replies:** 0\ **Last updated:** [December 1, 2023, 6:20am UTC](https://discuss.elastic.co/t/aws-integration-poor-performance/348397 "2023-12-01T06:20:35Z")
I have deployed an elastic agent with the AWS Integration in order to process VPC and CloudTrail logs. The logs are being placed to seperate S3 buckets which in turn then trigger an event to an SQS queue - one for the V… --- ## [AWS EC2 metrics integration not getting all values](https://discuss.elastic.co/t/aws-ec2-metrics-integration-not-getting-all-values/348278)
**Author:** [@eleong](https://discuss.elastic.co/u/eleong)\ **Replies:** 0\ **Last updated:** [November 29, 2023, 10:29pm UTC](https://discuss.elastic.co/t/aws-ec2-metrics-integration-not-getting-all-values/348278 "2023-11-29T22:29:17Z")
Hi, I am using Elastic 8.9.2. I'm trying to grab EC2 metrics via Elastic Agent integration (not using metricbeat for some reason). The integration is done, but for some reason, it is not getting all the values. The con… --- ## [Elastic-agent AWS cloudtrail integration fails](https://discuss.elastic.co/t/elastic-agent-aws-cloudtrail-integration-fails/348161)
**Author:** [@Merdesz](https://discuss.elastic.co/u/Merdesz)\ **Replies:** 2\ **Last updated:** [November 29, 2023, 9:35am UTC](https://discuss.elastic.co/t/elastic-agent-aws-cloudtrail-integration-fails/348161 "2023-11-29T09:35:43Z")
Trying to set up Elastic-agent with the AWS cloudtrail integration, but it always fails to connect: \[elastic\_agent.filebeat\]\[error\] Input 'aws-s3' failed with: failed to initialize s3 poller: failed to get AWS region fo… --- ## [\[ECK\] 404 error for elastic agent running on ec2 host](https://discuss.elastic.co/t/eck-404-error-for-elastic-agent-running-on-ec2-host/348152)
**Author:** [@nitesh.singh](https://discuss.elastic.co/u/nitesh.singh)\ **Replies:** 0\ **Last updated:** [November 28, 2023, 2:23pm UTC](https://discuss.elastic.co/t/eck-404-error-for-elastic-agent-running-on-ec2-host/348152 "2023-11-28T14:23:07Z")
We are using ECK method of installation which is hosted on EKS in AWS account, where Fleet is also installed. We want to monitor ec2 instances and collect logs using an elastic agent which is managed by Fleet, hosted in… --- ## [Elastic-agent entry /proc/net/udp not found](https://discuss.elastic.co/t/elastic-agent-entry-proc-net-udp-not-found/348140)
**Author:** [@atbc](https://discuss.elastic.co/u/atbc)\ **Replies:** 0\ **Last updated:** [November 28, 2023, 12:40pm UTC](https://discuss.elastic.co/t/elastic-agent-entry-proc-net-udp-not-found/348140 "2023-11-28T12:40:33Z")
Hello, I set up a Fleet server and on this same policy I added a Juniper integration, I see that it listens on the specified ports with the command "sudo ss -tulpn" and I can see the logs arriving with a TCPDUMP. But I … --- ## [\[OPNsense\] (pfsense integration) not logging unbound DNS](https://discuss.elastic.co/t/opnsense-pfsense-integration-not-logging-unbound-dns/348095)
**Author:** [@straw\_hardhat](https://discuss.elastic.co/u/straw_hardhat)\ **Replies:** 0\ **Last updated:** [November 27, 2023, 11:01pm UTC](https://discuss.elastic.co/t/opnsense-pfsense-integration-not-logging-unbound-dns/348095 "2023-11-27T23:01:06Z")
I've set up a OPNsense which is successfully communicating with ELK (running in docker, GitHub - peasead/elastic-container: Stand up a simple Elastic container with Kibana, Fleet, and the Detection Engine) as both filter… --- ## ["Input not supported" with File Integrity Monitoring on Elastic Agent](https://discuss.elastic.co/t/input-not-supported-with-file-integrity-monitoring-on-elastic-agent/346671)
**Author:** [@ivanchak](https://discuss.elastic.co/u/ivanchak)\ **Replies:** 1\ **Last updated:** [November 27, 2023, 12:35pm UTC](https://discuss.elastic.co/t/input-not-supported-with-file-integrity-monitoring-on-elastic-agent/346671 "2023-11-27T12:35:11Z")
As stated in the title, once adding the FIM integration to my Ubuntu 22.04 server. The fleet agent turned "Unhealthy", and shows "input not supported". Once I remove the FIM integration, then everything works just fine a… --- ## [Error: fail to enroll: fail to execute request to fleet-server: x509: cannot validate certificate for X.X.X.X because it doesn't contain any IP SANs](https://discuss.elastic.co/t/error-fail-to-enroll-fail-to-execute-request-to-fleet-server-x509-cannot-validate-certificate-for-x-x-x-x-because-it-doesnt-contain-any-ip-sans/347124)
**Author:** [@ethical20](https://discuss.elastic.co/u/ethical20)\ **Replies:** 5\ **Last updated:** [November 27, 2023, 12:03pm UTC](https://discuss.elastic.co/t/error-fail-to-enroll-fail-to-execute-request-to-fleet-server-x509-cannot-validate-certificate-for-x-x-x-x-because-it-doesnt-contain-any-ip-sans/347124 "2023-11-27T12:03:15Z")
Hi, i was using elastic 8.8.0 and all my agents were online green. Updating the stack went smooth but when came to upgrade the elastic agents from fleet to 8.9.1 i can see that the agents are offline but still getting d… --- ## [Which type of Load Balancer for use with pool of fleet servers](https://discuss.elastic.co/t/which-type-of-load-balancer-for-use-with-pool-of-fleet-servers/347727)
**Author:** [@digital-thought](https://discuss.elastic.co/u/digital-thought)\ **Replies:** 0\ **Last updated:** [November 22, 2023, 11:38am UTC](https://discuss.elastic.co/t/which-type-of-load-balancer-for-use-with-pool-of-fleet-servers/347727 "2023-11-22T11:38:51Z")
I am deploying a pool of fleet servers to support my agents. As is recommended i am goi g to place these behind a load balancer and to have all agents communicate via the load balancer. My initial thought is to go with… --- ## [Error - failed version compatibility check with elasticsearch: x509: certificate signed by unknown authority"](https://discuss.elastic.co/t/error-failed-version-compatibility-check-with-elasticsearch-x509-certificate-signed-by-unknown-authority/347664)
**Author:** [@YULEIDY\_PENAGOS\_BERM](https://discuss.elastic.co/u/YULEIDY_PENAGOS_BERM)\ **Replies:** 0\ **Last updated:** [November 21, 2023, 7:03pm UTC](https://discuss.elastic.co/t/error-failed-version-compatibility-check-with-elasticsearch-x509-certificate-signed-by-unknown-authority/347664 "2023-11-21T19:03:03Z")
Buen día, Soy nueva en este tema de elasticsearch y necesito configurar mi fleet server, pero me agrega el error que se ve en imagen. Por favor, necesito de su ayuda para que me digan que debo tener en cuenta o que paso… [Previous page](https://discuss.elastic.co/c/elastic-stack/elastic-agent/91.md?page=25) [Next page](https://discuss.elastic.co/c/elastic-stack/elastic-agent/91.md?page=27)