# Elastic Agent

**URL:** https://discuss.elastic.co/c/elastic-stack/elastic-agent/91.md?page=27

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 28

---

## [Error: fail to enroll: fail to execute request to fleet-server: x509: cannot validate certificate for because it doesn't contain any IP SANs I'](https://discuss.elastic.co/t/error-fail-to-enroll-fail-to-execute-request-to-fleet-server-x509-cannot-validate-certificate-for-because-it-doesnt-contain-any-ip-sans-i/347576)

<div class="topic-metadata">

**Author:** [@Virtual\_Box](https://discuss.elastic.co/u/Virtual_Box)\
**Replies:** 3\
**Last updated:** [November 21, 2023, 1:05pm UTC](https://discuss.elastic.co/t/error-fail-to-enroll-fail-to-execute-request-to-fleet-server-x509-cannot-validate-certificate-for-because-it-doesnt-contain-any-ip-sans-i/347576 "2023-11-21T13:05:21Z")

</div>

Hello there! I have a problem with fleet server. When I'm trying to install fleet server, I had a next error: Error: fail to enroll: fail to execute request to fleet-server: x509: cannot validate certificate for becaus…

---

## [Elastic-agents goes offline and get back online status frequently](https://discuss.elastic.co/t/elastic-agents-goes-offline-and-get-back-online-status-frequently/347195)

<div class="topic-metadata">

**Author:** [@cLaYYs](https://discuss.elastic.co/u/cLaYYs)\
**Replies:** 5\
**Last updated:** [November 21, 2023, 7:46am UTC](https://discuss.elastic.co/t/elastic-agents-goes-offline-and-get-back-online-status-frequently/347195 "2023-11-21T07:46:48Z")

</div>

Hi All, Version:8.9 OS:Windows Server I have encountered with this problem so recently. And it is not occurs for all elastic-agents. it happens for 4 elastic-agents. The problem is the agent status seems offline whe…

---

## [Elastic Agents don't see upgrade available in Kibana](https://discuss.elastic.co/t/elastic-agents-dont-see-upgrade-available-in-kibana/347271)

<div class="topic-metadata">

**Author:** [@aqiank](https://discuss.elastic.co/u/aqiank)\
**Replies:** 6\
**Last updated:** [November 20, 2023, 2:28pm UTC](https://discuss.elastic.co/t/elastic-agents-dont-see-upgrade-available-in-kibana/347271 "2023-11-20T14:28:55Z")

</div>

Hi, My Elastic Agents are currently at 8.11.0 but they don't seem to see that there is 8.11.1 so I am unable to upgrade them using Kibana. It was the same way when they were still at version 8.10.x and version 8.11.0 wa…

---

## [Unable to upgrade Fleet Server past 8.5.3](https://discuss.elastic.co/t/unable-to-upgrade-fleet-server-past-8-5-3/344941)

<div class="topic-metadata">

**Author:** [@Vestyn](https://discuss.elastic.co/u/Vestyn)\
**Replies:** 16\
**Last updated:** [November 15, 2023, 8:43pm UTC](https://discuss.elastic.co/t/unable-to-upgrade-fleet-server-past-8-5-3/344941 "2023-11-15T20:43:49Z")

</div>

I've been stuck trying to upgrade our Fleet Server past version 8.5.3. Every time I push the update manually (via curl) or through Kibana, I get some random errors (see below) and it reverts back to 8.5.3. For clarificat…

---

## [Elastic agent 8.4.3 - No policy response available](https://discuss.elastic.co/t/elastic-agent-8-4-3-no-policy-response-available/345303)

<div class="topic-metadata">

**Author:** [@elastic\_fan](https://discuss.elastic.co/u/elastic_fan)\
**Replies:** 8\
**Last updated:** [November 15, 2023, 8:23pm UTC](https://discuss.elastic.co/t/elastic-agent-8-4-3-no-policy-response-available/345303 "2023-11-15T20:23:18Z")

</div>

Hello, The Elastic UI displays the following error "No policy response available" Status output: ./elastic-agent status Status: FAILED Message: app endpoint-security--8.4.3-3a97d14d: Missed two check-ins Applica…

---

## [Using Elastic Defend with VPN](https://discuss.elastic.co/t/using-elastic-defend-with-vpn/347174)

<div class="topic-metadata">

**Author:** [@totobarbar](https://discuss.elastic.co/u/totobarbar)\
**Replies:** 0\
**Last updated:** [November 14, 2023, 11:24pm UTC](https://discuss.elastic.co/t/using-elastic-defend-with-vpn/347174 "2023-11-14T23:24:52Z")

</div>

Hello, I use Elastic-Agent with Wireguard like this: I use a vpn because I don't want to expose my elasticsearch cluster on the internet I configured the Wireguard client to run on a custom network namespace where …

---

## [Elastic Agent - Duplicate Collection of AWS CloudWatch Metrics](https://discuss.elastic.co/t/elastic-agent-duplicate-collection-of-aws-cloudwatch-metrics/347112)

<div class="topic-metadata">

**Author:** [@shwanlee](https://discuss.elastic.co/u/shwanlee)\
**Replies:** 0\
**Last updated:** [November 14, 2023, 11:43am UTC](https://discuss.elastic.co/t/elastic-agent-duplicate-collection-of-aws-cloudwatch-metrics/347112 "2023-11-14T11:43:26Z")

</div>

Hello, I am collecting AWS CloudWatch metrics with multiple Elastic Agents with the same policy, but there is an issue with data being collected redundantly. How can I solve this? If I don't have a way to handle this as…

---

## [No span and transaction for Dubbo example](https://discuss.elastic.co/t/no-span-and-transaction-for-dubbo-example/347094)

<div class="topic-metadata">

**Author:** [@bixiyan](https://discuss.elastic.co/u/bixiyan)\
**Replies:** 0\
**Last updated:** [November 14, 2023, 9:12am UTC](https://discuss.elastic.co/t/no-span-and-transaction-for-dubbo-example/347094 "2023-11-14T09:12:30Z")

</div>

Hi team: I am doing a poc on elastic apm using dubbo. Kibana version: 7.16.3 Elasticsearch: 7.16.3 apm-server:v7.16.3 I have create a dubbo provider and consumer. Consumer run every second to call provider. Now I c…

---

## [Elastic Agent RUM - Cryptography](https://discuss.elastic.co/t/elastic-agent-rum-cryptography/345568)

<div class="topic-metadata">

**Author:** [@Gelinski](https://discuss.elastic.co/u/Gelinski)\
**Replies:** 4\
**Last updated:** [November 14, 2023, 3:36am UTC](https://discuss.elastic.co/t/elastic-agent-rum-cryptography/345568 "2023-11-14T03:36:15Z")

</div>

Hello folks, What is the algorithm used to encrypt data between Elastic Agent RUM and APM server? Thanks, Matheus

---

## [Cisco Meraki webhooks integration fails when using shared secrets](https://discuss.elastic.co/t/cisco-meraki-webhooks-integration-fails-when-using-shared-secrets/347007)

<div class="topic-metadata">

**Author:** [@brynjar](https://discuss.elastic.co/u/brynjar)\
**Replies:** 0\
**Last updated:** [November 13, 2023, 11:59am UTC](https://discuss.elastic.co/t/cisco-meraki-webhooks-integration-fails-when-using-shared-secrets/347007 "2023-11-13T11:59:53Z")

</div>

Hello, I've been testing the Cisco Meraki webhooks integration lately, and while it works just fine without specifying a shared secret, it stops working immediately once any text is entered in secret\_value as described …

---

## [Use k8s provider fields in filebeat config](https://discuss.elastic.co/t/use-k8s-provider-fields-in-filebeat-config/346864)

<div class="topic-metadata">

**Author:** [@GeorgeGkinis](https://discuss.elastic.co/u/GeorgeGkinis)\
**Replies:** 1\
**Last updated:** [November 13, 2023, 9:27am UTC](https://discuss.elastic.co/t/use-k8s-provider-fields-in-filebeat-config/346864 "2023-11-13T09:27:07Z")

</div>

Hello everyone! We are deploying the Elastic Agent as a daemonset to slurp up our container logs using hints based autodiscovery. This works and we can selectively parse pods based on the following hint: podTempla…

---

## [How to remove fields not required when sending logs via elastic agent](https://discuss.elastic.co/t/how-to-remove-fields-not-required-when-sending-logs-via-elastic-agent/346892)

<div class="topic-metadata">

**Author:** [@HHobeck](https://discuss.elastic.co/u/HHobeck)\
**Replies:** 2\
**Last updated:** [November 11, 2023, 12:48pm UTC](https://discuss.elastic.co/t/how-to-remove-fields-not-required-when-sending-logs-via-elastic-agent/346892 "2023-11-11T12:48:23Z")

</div>

Dear community. I have exactly the same issue like shi in Reference \[1\] but with the different that I'm using elastic agent with custom log integration. Under the surface I guess file beat will be used but I have no luc…

---

## [Is it possible to create an alert in case an Elastic Agent goes offline?](https://discuss.elastic.co/t/is-it-possible-to-create-an-alert-in-case-an-elastic-agent-goes-offline/346878)

<div class="topic-metadata">

**Author:** [@SamuelSMendes](https://discuss.elastic.co/u/SamuelSMendes)\
**Replies:** 2\
**Last updated:** [November 11, 2023, 12:55am UTC](https://discuss.elastic.co/t/is-it-possible-to-create-an-alert-in-case-an-elastic-agent-goes-offline/346878 "2023-11-11T00:55:03Z")

</div>

I have a few Elastic-Agents working on metric collection but we got a problem for when one of them goes down. I know so far that there's an alerting option for metrics/logs threshold but I'm not sure about how to set an …

---

## [GeoIP enrich IP addresses broken if fileting with include\_fields](https://discuss.elastic.co/t/geoip-enrich-ip-addresses-broken-if-fileting-with-include-fields/346824)

<div class="topic-metadata">

**Author:** [@dmgeurts](https://discuss.elastic.co/u/dmgeurts)\
**Replies:** 1\
**Last updated:** [November 10, 2023, 10:50pm UTC](https://discuss.elastic.co/t/geoip-enrich-ip-addresses-broken-if-fileting-with-include-fields/346824 "2023-11-10T22:50:23Z")

</div>

I'm logging DNS packets without dns.response\_code: NOERROR. This part works fine. But when I try to smile down the logged data, by adding a filter to drop all but some selected fields, GeoIP breaks. GeoIP can't be used …

---

## [Do we have to install new agent for every new host for Fleet](https://discuss.elastic.co/t/do-we-have-to-install-new-agent-for-every-new-host-for-fleet/346846)

<div class="topic-metadata">

**Author:** [@Umang\_Pachaury](https://discuss.elastic.co/u/Umang_Pachaury)\
**Replies:** 2\
**Last updated:** [November 10, 2023, 3:34pm UTC](https://discuss.elastic.co/t/do-we-have-to-install-new-agent-for-every-new-host-for-fleet/346846 "2023-11-10T15:34:42Z")

</div>

I was currently exploring regarding elasticsearch fleet and I set up a basic fleet server and a enrolled an elastic-agent on one machine, for example, "machine-A" with a agent policy: "p1", Agent policy p1 is configured …

---

## [Understanding why only one agent policy can be assigned to an agent](https://discuss.elastic.co/t/understanding-why-only-one-agent-policy-can-be-assigned-to-an-agent/346828)

<div class="topic-metadata">

**Author:** [@HHobeck](https://discuss.elastic.co/u/HHobeck)\
**Replies:** 2\
**Last updated:** [November 10, 2023, 8:23am UTC](https://discuss.elastic.co/t/understanding-why-only-one-agent-policy-can-be-assigned-to-an-agent/346828 "2023-11-10T08:23:59Z")

</div>

Dear community. I'm in the situation to setup an elastic agent to retrieve logs with custom integration from a directory e.g. d:\\Logs\\MyApp\_Staging\\\*.log on machine A and on machine B. So I have created an agent policy…

---

## [A timeout (30000 milliseconds) was reached while waiting for a transaction response from the Elastic Agent service](https://discuss.elastic.co/t/a-timeout-30000-milliseconds-was-reached-while-waiting-for-a-transaction-response-from-the-elastic-agent-service/346751)

<div class="topic-metadata">

**Author:** [@digital-thought](https://discuss.elastic.co/u/digital-thought)\
**Replies:** 0\
**Last updated:** [November 9, 2023, 3:16am UTC](https://discuss.elastic.co/t/a-timeout-30000-milliseconds-was-reached-while-waiting-for-a-transaction-response-from-the-elastic-agent-service/346751 "2023-11-09T03:16:59Z")

</div>

We have installed the Elastic Agent onto a Windows system for monitoring. Since we have installed the agent, we are seeing an Error Event (ID 7011) in the System logs of the OS that is reporting: "A timeout (30000 mill…

---

## [Elastic agent(synthetics) error connecting to fleet](https://discuss.elastic.co/t/elastic-agent-synthetics-error-connecting-to-fleet/346669)

<div class="topic-metadata">

**Author:** [@senyam08](https://discuss.elastic.co/u/senyam08)\
**Replies:** 0\
**Last updated:** [November 7, 2023, 11:47pm UTC](https://discuss.elastic.co/t/elastic-agent-synthetics-error-connecting-to-fleet/346669 "2023-11-07T23:47:03Z")

</div>

Deployed elastic stack using ECK operator Trying to deploy elastic agent as deployment to run synthetics. Deployed fleet server as its required for synthetics elastic agent Followed the config from below https://raw.g…

---

## [Failure to install package \[checkpoint\]](https://discuss.elastic.co/t/failure-to-install-package-checkpoint/346646)

<div class="topic-metadata">

**Author:** [@shaam1](https://discuss.elastic.co/u/shaam1)\
**Replies:** 0\
**Last updated:** [November 7, 2023, 5:44pm UTC](https://discuss.elastic.co/t/failure-to-install-package-checkpoint/346646 "2023-11-07T17:44:03Z")

</div>

Hi, I am not new to ELK, but I have an issue which I hope to solve with your help. I installed the Checkpoint integration using the button, but I get the error below: I am not able to \[WARN \]\[plugins.fleet\] Failure to…

---

## [How to add multiline on custom logs](https://discuss.elastic.co/t/how-to-add-multiline-on-custom-logs/346637)

<div class="topic-metadata">

**Author:** [@MirkoSpezie](https://discuss.elastic.co/u/MirkoSpezie)\
**Replies:** 0\
**Last updated:** [November 7, 2023, 3:39pm UTC](https://discuss.elastic.co/t/how-to-add-multiline-on-custom-logs/346637 "2023-11-07T15:39:36Z")

</div>

I'm trying to figure out on how to configure the custom logs integration to manage multiline logs (log4j)

---

## [Configuring Lifecycle on Elastic Agent](https://discuss.elastic.co/t/configuring-lifecycle-on-elastic-agent/346499)

<div class="topic-metadata">

**Author:** [@frappo](https://discuss.elastic.co/u/frappo)\
**Replies:** 0\
**Last updated:** [November 6, 2023, 8:33am UTC](https://discuss.elastic.co/t/configuring-lifecycle-on-elastic-agent/346499 "2023-11-06T08:33:13Z")

</div>

Hi, I am experiencing an issue with the configuration of an index lifecycle policy for my logs. The policy work perfectly on the hot-warm phase, but indices never go to cold phase. There is something I am missing?

---

## [Elastic Agent Disk Queue](https://discuss.elastic.co/t/elastic-agent-disk-queue/346382)

<div class="topic-metadata">

**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\
**Replies:** 0\
**Last updated:** [November 3, 2023, 3:42pm UTC](https://discuss.elastic.co/t/elastic-agent-disk-queue/346382 "2023-11-03T15:42:03Z")

</div>

Does Elastic Agent support disk queue? How do you configure it?

---

## [Fleet with own artifact registry fails cause of external GPG validation](https://discuss.elastic.co/t/fleet-with-own-artifact-registry-fails-cause-of-external-gpg-validation/345904)

<div class="topic-metadata">

**Author:** [@xtruthx](https://discuss.elastic.co/u/xtruthx)\
**Replies:** 5\
**Last updated:** [November 3, 2023, 1:51pm UTC](https://discuss.elastic.co/t/fleet-with-own-artifact-registry-fails-cause-of-external-gpg-validation/345904 "2023-11-03T13:51:42Z")

</div>

I have in an environment as described here Air Gapped Env artifacts hosted my own artifact registry. This is also cleanly queried during upgrade see log. However, a GPG validation is attempted externally. But why? Wher…

---

## [Additional Elastic Agent Integrations needed](https://discuss.elastic.co/t/additional-elastic-agent-integrations-needed/346308)

<div class="topic-metadata">

**Author:** [@dwortmann](https://discuss.elastic.co/u/dwortmann)\
**Replies:** 2\
**Last updated:** [November 3, 2023, 12:09pm UTC](https://discuss.elastic.co/t/additional-elastic-agent-integrations-needed/346308 "2023-11-03T12:09:51Z")

</div>

We are current users of Elastic stack and are using FileBeat modules to assist with parsing of data. We have begun to review the Elastic Agent and have found there are several additional integrations that are available …

---

## [Issues with collecting Dependabot alerts using GitHub integration](https://discuss.elastic.co/t/issues-with-collecting-dependabot-alerts-using-github-integration/346277)

<div class="topic-metadata">

**Author:** [@bil15](https://discuss.elastic.co/u/bil15)\
**Replies:** 7\
**Last updated:** [November 3, 2023, 8:16am UTC](https://discuss.elastic.co/t/issues-with-collecting-dependabot-alerts-using-github-integration/346277 "2023-11-03T08:16:24Z")

</div>

Hello! I'm trying to ingest Dependabot alerts from a GitHub organization to Elastic but I'm encountering some issues. The most interesting part is that I use the same PAT and input parameters (organization, tag set, et…

---

## [Deleted Restore files from S3 AWS](https://discuss.elastic.co/t/deleted-restore-files-from-s3-aws/345921)

<div class="topic-metadata">

**Author:** [@Pete1](https://discuss.elastic.co/u/Pete1)\
**Replies:** 3\
**Last updated:** [November 2, 2023, 10:57am UTC](https://discuss.elastic.co/t/deleted-restore-files-from-s3-aws/345921 "2023-11-02T10:57:10Z")

</div>

Hello, i am using S3 as a backup storage for my Elasticsearch. The problem is that i deleted all my files except the indices folder from S3. Is there any way to recover the indices ?

---

## [How can I inspect elastic-agent document submissions?](https://discuss.elastic.co/t/how-can-i-inspect-elastic-agent-document-submissions/346259)

<div class="topic-metadata">

**Author:** [@skestle](https://discuss.elastic.co/u/skestle)\
**Replies:** 0\
**Last updated:** [November 2, 2023, 3:54am UTC](https://discuss.elastic.co/t/how-can-i-inspect-elastic-agent-document-submissions/346259 "2023-11-02T03:54:12Z")

</div>

I have an elastic ingestion problem where the elastic agent successfully publishes documents, but they don't show up at all in Elasticsearch. What's more insulting is that the agent logs say that 9 events have been publi…

---

## [Elastic Agent upgrade through Fleet and using Custom Agent Binary Source](https://discuss.elastic.co/t/elastic-agent-upgrade-through-fleet-and-using-custom-agent-binary-source/346206)

<div class="topic-metadata">

**Author:** [@hamidallaoui](https://discuss.elastic.co/u/hamidallaoui)\
**Replies:** 0\
**Last updated:** [November 1, 2023, 2:16pm UTC](https://discuss.elastic.co/t/elastic-agent-upgrade-through-fleet-and-using-custom-agent-binary-source/346206 "2023-11-01T14:16:32Z")

</div>

Hi All, Did someone already test to upgrade Elastic Agent through Fleet and using Custom Agent Binary Source ? We tried from our side by giving url of reverse proxy (Nginx) but it did not work. Thank you for your feed…

---

## [2 agents on a machine?](https://discuss.elastic.co/t/2-agents-on-a-machine/346114)

<div class="topic-metadata">

**Author:** [@Nightingale\_John](https://discuss.elastic.co/u/Nightingale_John)\
**Replies:** 1\
**Last updated:** [October 31, 2023, 12:36pm UTC](https://discuss.elastic.co/t/2-agents-on-a-machine/346114 "2023-10-31T12:36:41Z")

</div>

Hi All, I'm wondering if anyone has any experience of putting 2 elastic agents on a machine? We've got a client who is using elastic for monitoring, and we need to have the elastic agent on for security.. this is on Mi…

---

## [Query on filebeat src rpm or how to get filebeat rpm with ASLR enabled](https://discuss.elastic.co/t/query-on-filebeat-src-rpm-or-how-to-get-filebeat-rpm-with-aslr-enabled/346101)

<div class="topic-metadata">

**Author:** [@vbali3](https://discuss.elastic.co/u/vbali3)\
**Replies:** 0\
**Last updated:** [October 31, 2023, 9:00am UTC](https://discuss.elastic.co/t/query-on-filebeat-src-rpm-or-how-to-get-filebeat-rpm-with-aslr-enabled/346101 "2023-10-31T09:00:42Z")

</div>

Can we get filebeat src rpm or filebeat rpm with ASLR enabled?

[Previous page](https://discuss.elastic.co/c/elastic-stack/elastic-agent/91.md?page=26)

[Next page](https://discuss.elastic.co/c/elastic-stack/elastic-agent/91.md?page=28)
