# Elastic Agent **URL:** https://discuss.elastic.co/c/elastic-stack/elastic-agent/91.md?page=28 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 29 --- ## [ElasticSearch Fleet - Outdated Policy](https://discuss.elastic.co/t/elasticsearch-fleet-outdated-policy/346082)
**Author:** [@crypt0ace](https://discuss.elastic.co/u/crypt0ace)\ **Replies:** 0\ **Last updated:** [October 31, 2023, 3:37am UTC](https://discuss.elastic.co/t/elasticsearch-fleet-outdated-policy/346082 "2023-10-31T03:37:25Z")
Hello! I just added a Windows integration in my home lab in the Elasticsearch and I got this error Then when i view the integrations I can see Windows got added but I can also see this "Outdated Policy" with my agen… --- ## [Custom Logs integration upgrade fails with invalid\_index\_template\_exception](https://discuss.elastic.co/t/custom-logs-integration-upgrade-fails-with-invalid-index-template-exception/346056)
**Author:** [@jmartin](https://discuss.elastic.co/u/jmartin)\ **Replies:** 0\ **Last updated:** [October 30, 2023, 3:53pm UTC](https://discuss.elastic.co/t/custom-logs-integration-upgrade-fails-with-invalid-index-template-exception/346056 "2023-10-30T15:53:07Z")
When trying to upgrade the custom logs integration, for fleet from version 2.0.0 to 2.3.0. Kibana gives the following error: invalid\_index\_template\_exception: index\_template \[logs-ERMP@custom\] invalid, cause \[Validati… --- ## [Windows Service Control Manager error with Elastic Agent](https://discuss.elastic.co/t/windows-service-control-manager-error-with-elastic-agent/346039)
**Author:** [@Bearloggs](https://discuss.elastic.co/u/Bearloggs)\ **Replies:** 0\ **Last updated:** [October 30, 2023, 1:21pm UTC](https://discuss.elastic.co/t/windows-service-control-manager-error-with-elastic-agent/346039 "2023-10-30T13:21:56Z")
Description When installing and running the Elastic Agent on a Windows 10 or Windows Server 2019 machine, I encounter Service Control Manager errors. The Elastic Agent seems to be functioning as expected on my Windows m… --- ## [Configure Elastic agent to collect AWS RDS SLOW logs loaded in S3](https://discuss.elastic.co/t/configure-elastic-agent-to-collect-aws-rds-slow-logs-loaded-in-s3/346003)
**Author:** [@douglas0923](https://discuss.elastic.co/u/douglas0923)\ **Replies:** 0\ **Last updated:** [October 30, 2023, 4:54am UTC](https://discuss.elastic.co/t/configure-elastic-agent-to-collect-aws-rds-slow-logs-loaded-in-s3/346003 "2023-10-30T04:54:21Z")
Hi there Is there a way to configure the Elastic Agent to directly read the slow logs from the S3 bucket instead of the local file path? Additionally, I feel that configuring this through Kibana's Fleet GUI might be ch… --- ## [CustomLogs integration turns unhealthy with simple wildcard change](https://discuss.elastic.co/t/customlogs-integration-turns-unhealthy-with-simple-wildcard-change/345423)
**Author:** [@CiscoMT](https://discuss.elastic.co/u/CiscoMT)\ **Replies:** 7\ **Last updated:** [October 26, 2023, 4:34pm UTC](https://discuss.elastic.co/t/customlogs-integration-turns-unhealthy-with-simple-wildcard-change/345423 "2023-10-26T16:34:53Z")
Hello y'all, I am trying to break down the different paths I have for app logs in my server into different customLogs integrations. Originally I was using a single integration of the CustomLog type with path : C:\\ine… --- ## [Unable to Pull GHAS integration into Elastic](https://discuss.elastic.co/t/unable-to-pull-ghas-integration-into-elastic/345822)
**Author:** [@handuo](https://discuss.elastic.co/u/handuo)\ **Replies:** 0\ **Last updated:** [October 26, 2023, 1:25pm UTC](https://discuss.elastic.co/t/unable-to-pull-ghas-integration-into-elastic/345822 "2023-10-26T13:25:10Z")
I'm trying to integrate GHAS into Elastic. Created the API in GitHub with all read-only permissions, and setup per instruction the GitHub in Elastic. When going to Discover and doing a query, for the dataset, nothing s… --- ## [Elastic agent - Logs for Hosts](https://discuss.elastic.co/t/elastic-agent-logs-for-hosts/345772)
**Author:** [@The\_BlueishSky](https://discuss.elastic.co/u/The_BlueishSky)\ **Replies:** 0\ **Last updated:** [October 26, 2023, 5:58am UTC](https://discuss.elastic.co/t/elastic-agent-logs-for-hosts/345772 "2023-10-26T05:58:33Z")
We are in process of implementing ELK Agent and more focus for better SIEM detections. At the moment our config ships all the logs and we also don't want to tailor only security events. Is there a recommendation or exp… --- ## [Parse single array json (Elastic Agent)](https://discuss.elastic.co/t/parse-single-array-json-elastic-agent/345558)
**Author:** [@dmgeurts](https://discuss.elastic.co/u/dmgeurts)\ **Replies:** 5\ **Last updated:** [October 25, 2023, 5:24pm UTC](https://discuss.elastic.co/t/parse-single-array-json-elastic-agent/345558 "2023-10-25T17:24:33Z")
I'm trying to parse parsedmarc json files. These log files contain a single array with multiple records. I've taken the json and am testing with a single record, and am struggling to find the right combination of filebea… --- ## [Elastic Agent - listen on tcp/9200?](https://discuss.elastic.co/t/elastic-agent-listen-on-tcp-9200/345756)
**Author:** [@dmgeurts](https://discuss.elastic.co/u/dmgeurts)\ **Replies:** 0\ **Last updated:** [October 25, 2023, 5:17pm UTC](https://discuss.elastic.co/t/elastic-agent-listen-on-tcp-9200/345756 "2023-10-25T17:17:54Z")
Parsedmarc can send to Elasticsearch using xpack, but rather than go through the pain of this I was hoping to use the Elastic Agent already installed on this server to do the shipping of the data. Is there an Elastic Ag… --- ## [IIS Integration Log Missing Fields](https://discuss.elastic.co/t/iis-integration-log-missing-fields/345704)
**Author:** [@ivanchak](https://discuss.elastic.co/u/ivanchak)\ **Replies:** 0\ **Last updated:** [October 25, 2023, 8:31am UTC](https://discuss.elastic.co/t/iis-integration-log-missing-fields/345704 "2023-10-25T08:31:22Z")
Having IIS integration v1.12.2 with default settings setup. All metric dashboard work just fine. Checked receiving both access and error logs from IIS server as well. However, fields like http.response.status\_code and et… --- ## [Fleet server status offline](https://discuss.elastic.co/t/fleet-server-status-offline/345444)
**Author:** [@candyli](https://discuss.elastic.co/u/candyli)\ **Replies:** 5\ **Last updated:** [October 25, 2023, 7:58am UTC](https://discuss.elastic.co/t/fleet-server-status-offline/345444 "2023-10-25T07:58:29Z")
I install fleet server on my centos7 Successfully. But status always display offline. I also check integration status: commandline status shows as follow: ''' \[root@fleet02 elastic-agent-8.10.4-linux-x86\_64\]# cd … --- ## [Fleet can not show CPU/Memory Value, No relate metric logs as well](https://discuss.elastic.co/t/fleet-can-not-show-cpu-memory-value-no-relate-metric-logs-as-well/345688)
**Author:** [@DEXUAN\_ZHU](https://discuss.elastic.co/u/DEXUAN_ZHU)\ **Replies:** 0\ **Last updated:** [October 25, 2023, 3:29am UTC](https://discuss.elastic.co/t/fleet-can-not-show-cpu-memory-value-no-relate-metric-logs-as-well/345688 "2023-10-25T03:29:47Z")
Hi Guys, I need some help. I installed some elastic agents without any error. Some of them can get CPU/Memory, some are not. Installation steps no difference, and all of them are installed by admin/root permission. For t… --- ## [Parse json in pipeline](https://discuss.elastic.co/t/parse-json-in-pipeline/345612)
**Author:** [@volkerfrank](https://discuss.elastic.co/u/volkerfrank)\ **Replies:** 2\ **Last updated:** [October 24, 2023, 1:28pm UTC](https://discuss.elastic.co/t/parse-json-in-pipeline/345612 "2023-10-24T13:28:36Z")
When I ingest json logs over a pipeline with a json parser, I get a document\_parsing\_exception error: (status = 400): { "type": "document\_parsing\_exception", "reason": "\[1:15872\] failed to parse field \[gitlab.pa… --- ## [Multiple SQL Database Monitoring](https://discuss.elastic.co/t/multiple-sql-database-monitoring/345593)
**Author:** [@brett877](https://discuss.elastic.co/u/brett877)\ **Replies:** 1\ **Last updated:** [October 24, 2023, 1:18pm UTC](https://discuss.elastic.co/t/multiple-sql-database-monitoring/345593 "2023-10-24T13:18:47Z")
Hello! I am trying to figure out how to enable "Fetch from all databases" via Fleet Manager and Microsoft SQL Server integration. I have about 150 Databases I need to monitor and I do not want to add them manually here: … --- ## [Network Packet Capture over Logstash](https://discuss.elastic.co/t/network-packet-capture-over-logstash/344976)
**Author:** [@lduvnjak](https://discuss.elastic.co/u/lduvnjak)\ **Replies:** 3\ **Last updated:** [October 24, 2023, 7:15am UTC](https://discuss.elastic.co/t/network-packet-capture-over-logstash/344976 "2023-10-24T07:15:14Z")
Hi Everyone, I've been having issues trying to use the Network Packet Capture (packetbeat) integration over Logstash. Whenever the Logstash output is configured for fleet, it seems like the integration stops sending da… --- ## [Elastic Agent upgrade option is grayed out on Fleet Server](https://discuss.elastic.co/t/elastic-agent-upgrade-option-is-grayed-out-on-fleet-server/344753)
**Author:** [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\ **Replies:** 5\ **Last updated:** [October 21, 2023, 7:25pm UTC](https://discuss.elastic.co/t/elastic-agent-upgrade-option-is-grayed-out-on-fleet-server/344753 "2023-10-21T19:25:49Z")
Hello, In the product compatibility support matrix page it says that Elasticsearch 8.10.X is compatible with Elastic Agent 7.17.x - 8.10.X, so I would expect the there is no incompatibility issues between patch versions… --- ## [How to change or replace the SSL Certificate used by Fleet Server](https://discuss.elastic.co/t/how-to-change-or-replace-the-ssl-certificate-used-by-fleet-server/344930)
**Author:** [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\ **Replies:** 6\ **Last updated:** [October 20, 2023, 12:06pm UTC](https://discuss.elastic.co/t/how-to-change-or-replace-the-ssl-certificate-used-by-fleet-server/344930 "2023-10-20T12:06:57Z")
Hello, I'm looking for the steps that need to be done to change or replace the SSL Certificate for a existing Fleet Server and I could not find anything in the documentation. All documentation that I found is about how… --- ## [Cloudflare logpush to http elastic agent](https://discuss.elastic.co/t/cloudflare-logpush-to-http-elastic-agent/344383)
**Author:** [@gyterpena](https://discuss.elastic.co/u/gyterpena)\ **Replies:** 1\ **Last updated:** [October 20, 2023, 9:44am UTC](https://discuss.elastic.co/t/cloudflare-logpush-to-http-elastic-agent/344383 "2023-10-20T09:44:03Z")
Hello I'm trying to set up logpush integration with CF. I have set up elastic agent per documentation and I'm trying to enable logpush on CF by API but I'm getting {"errors":\[{"code":1002,"message":"error validatin… --- ## [Elastic agent offline after upgrade from Fleet](https://discuss.elastic.co/t/elastic-agent-offline-after-upgrade-from-fleet/344973)
**Author:** [@DaddyYusk](https://discuss.elastic.co/u/DaddyYusk)\ **Replies:** 15\ **Last updated:** [October 19, 2023, 6:22pm UTC](https://discuss.elastic.co/t/elastic-agent-offline-after-upgrade-from-fleet/344973 "2023-10-19T18:22:20Z")
Hi, Because of the last vulnerabilities from this week affecting Elastic Suite, I've made an upgrade from 8.8.0 to 8.10.3 of all my Elastic Agent from Fleet. Now all the agents are Offline (and displaying the version a… --- ## [Elastic agent not grokking after migrating from filebeat](https://discuss.elastic.co/t/elastic-agent-not-grokking-after-migrating-from-filebeat/345407)
**Author:** [@Cara410](https://discuss.elastic.co/u/Cara410)\ **Replies:** 0\ **Last updated:** [October 19, 2023, 4:48pm UTC](https://discuss.elastic.co/t/elastic-agent-not-grokking-after-migrating-from-filebeat/345407 "2023-10-19T16:48:14Z")
Hello, I had a fully functional GROK written for filebeat and we recently just moved to using Elastic Agent. Now the GROK isn't functioning the same. It seems to take the first few lines of the GROK and execute them but… --- ## [Elastic Agent - Multiple inputs/output through Fleet](https://discuss.elastic.co/t/elastic-agent-multiple-inputs-output-through-fleet/345336)
**Author:** [@vee](https://discuss.elastic.co/u/vee)\ **Replies:** 2\ **Last updated:** [October 19, 2023, 2:58pm UTC](https://discuss.elastic.co/t/elastic-agent-multiple-inputs-output-through-fleet/345336 "2023-10-19T14:58:52Z")
Hello, here's our current setup: Multiple filebeats on a single VM (hundreds of VMs - Linux & windows based) Each filebeat scrapes from a unique path, sends to unique output (logstash endpoints) Metricbeat on ea… --- ## [Elastic agent does not send all of kubernetes container logs](https://discuss.elastic.co/t/elastic-agent-does-not-send-all-of-kubernetes-container-logs/345400)
**Author:** [@enural](https://discuss.elastic.co/u/enural)\ **Replies:** 0\ **Last updated:** [October 19, 2023, 2:21pm UTC](https://discuss.elastic.co/t/elastic-agent-does-not-send-all-of-kubernetes-container-logs/345400 "2023-10-19T14:21:42Z")
Hello, We are using Microsoft Azure Platform. We created a azure virtual machine and install the elastic-stack on this machine following offical documents, and add the fleet server to this virtual machine. We followed … --- ## [Elastic Agent not matching @timestamp](https://discuss.elastic.co/t/elastic-agent-not-matching-timestamp/345334)
**Author:** [@Cara410](https://discuss.elastic.co/u/Cara410)\ **Replies:** 0\ **Last updated:** [October 18, 2023, 9:19pm UTC](https://discuss.elastic.co/t/elastic-agent-not-matching-timestamp/345334 "2023-10-18T21:19:28Z")
Hello, I migrated to Elastic Agent from Filebeat and I am having trouble getting the log timestamp to match the @timestamp. My configuration goes from Elastic Agent -\> Logstash -\> elasticsearch. I have this in my elasti… --- ## [ElasticAgent not creating new index](https://discuss.elastic.co/t/elasticagent-not-creating-new-index/345326)
**Author:** [@Cara410](https://discuss.elastic.co/u/Cara410)\ **Replies:** 1\ **Last updated:** [October 18, 2023, 9:09pm UTC](https://discuss.elastic.co/t/elasticagent-not-creating-new-index/345326 "2023-10-18T21:09:35Z")
Hello, I just migrated from using Filebeat to using Elastic Agent. I am using the custom logs integration to ingest some custom logs I have been able to get the logs into the generic default logs in Discover and have th… --- ## [IIS integration dashboards missing](https://discuss.elastic.co/t/iis-integration-dashboards-missing/345305)
**Author:** [@DaddyYusk](https://discuss.elastic.co/u/DaddyYusk)\ **Replies:** 2\ **Last updated:** [October 18, 2023, 5:31pm UTC](https://discuss.elastic.co/t/iis-integration-dashboards-missing/345305 "2023-10-18T17:31:46Z")
Hi all, After a successful deploiement of Fleet-Server and Elastic-Agent on a IIS server, sadly I couldn't find the associated dashboards that should come with the IIS integration. Is it a limitation of a basic subscri… --- ## [Elastic agent not running](https://discuss.elastic.co/t/elastic-agent-not-running/345153)
**Author:** [@Akshay\_Ranka](https://discuss.elastic.co/u/Akshay_Ranka)\ **Replies:** 1\ **Last updated:** [October 18, 2023, 3:49pm UTC](https://discuss.elastic.co/t/elastic-agent-not-running/345153 "2023-10-18T15:49:11Z")
Hi, I am facing the error Error: failed to communicate with Elastic Agent daemon: rpc error: code = Unavailable desc = connection error: desc = "transport: Error while dialing: dial unix /run/elastic-agent.sock: connec… --- ## [Custom UDP with PANW integration](https://discuss.elastic.co/t/custom-udp-with-panw-integration/344214)
**Author:** [@Patryk\_Ostrowski](https://discuss.elastic.co/u/Patryk_Ostrowski)\ **Replies:** 4\ **Last updated:** [October 17, 2023, 12:19pm UTC](https://discuss.elastic.co/t/custom-udp-with-panw-integration/344214 "2023-10-17T12:19:41Z")
Hello, I used PANOS integration that work great for me. Now I want to change my configuration and use Custom UDP Logs integration. In advanced options I changed Ingest pipelines "logs-udp.generic@custom". I also te… --- ## [Elastic Agent not sending Data to Elastic search From KVM but works for VMWare](https://discuss.elastic.co/t/elastic-agent-not-sending-data-to-elastic-search-from-kvm-but-works-for-vmware/345012)
**Author:** [@AnyThink\_A](https://discuss.elastic.co/u/AnyThink_A)\ **Replies:** 4\ **Last updated:** [October 14, 2023, 3:12am UTC](https://discuss.elastic.co/t/elastic-agent-not-sending-data-to-elastic-search-from-kvm-but-works-for-vmware/345012 "2023-10-14T03:12:04Z")
Hello Team, In further lab setup. I am facing a strange issue. I have two setups LAB Windows -\> VMware (UBUNTU) Windows -\> VMware (Windows) Both guests are connected through host-only adapter. SANDBOX Windows -\> … --- ## [CloudFlare Logpull Integration Recovering Log Gaps](https://discuss.elastic.co/t/cloudflare-logpull-integration-recovering-log-gaps/345011)
**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\ **Replies:** 0\ **Last updated:** [October 13, 2023, 4:14pm UTC](https://discuss.elastic.co/t/cloudflare-logpull-integration-recovering-log-gaps/345011 "2023-10-13T16:14:24Z")
I ran into an issue where the Elastic Agent stopped pulling logs. I resolved that issue by reinstalling the CloudFlare integration. However, I now have a gap in my logs from when it failed to when I got it back online.… --- ## [Fleet - how does the "Oauth2 Endpoint Params" field work in integration configuration](https://discuss.elastic.co/t/fleet-how-does-the-oauth2-endpoint-params-field-work-in-integration-configuration/344833)
**Author:** [@mik0w](https://discuss.elastic.co/u/mik0w)\ **Replies:** 3\ **Last updated:** [October 12, 2023, 12:04pm UTC](https://discuss.elastic.co/t/fleet-how-does-the-oauth2-endpoint-params-field-work-in-integration-configuration/344833 "2023-10-12T12:04:00Z")
Hello, I am trying to integrate Elastic with Zoom API. Even though there's a Zoom Webhook integration plugin available in Elastic, I want to query Zoom's REST API. Zoom's API requires user to authenticate using OAuth a… [Previous page](https://discuss.elastic.co/c/elastic-stack/elastic-agent/91.md?page=27) [Next page](https://discuss.elastic.co/c/elastic-stack/elastic-agent/91.md?page=29)