# Elastic Agent

**URL:** https://discuss.elastic.co/c/elastic-stack/elastic-agent/91.md?page=29

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 30

---

## [Error in Pipeline used within Cisco Umbrella Integration](https://discuss.elastic.co/t/error-in-pipeline-used-within-cisco-umbrella-integration/344853)

<div class="topic-metadata">

**Author:** [@digital-thought](https://discuss.elastic.co/u/digital-thought)\
**Replies:** 0\
**Last updated:** [October 12, 2023, 1:03am UTC](https://discuss.elastic.co/t/error-in-pipeline-used-within-cisco-umbrella-integration/344853 "2023-10-12T01:03:37Z")

</div>

I have found an issue with the Cisco Umbrella integration. I observed that all the events being processed into ELK had a timestamp of when the document was ingested into ELK and not the time/date of the event from Umbre…

---

## [Windows uninstall fails](https://discuss.elastic.co/t/windows-uninstall-fails/344403)

<div class="topic-metadata">

**Author:** [@GonzalezAldo](https://discuss.elastic.co/u/GonzalezAldo)\
**Replies:** 1\
**Last updated:** [October 11, 2023, 3:44pm UTC](https://discuss.elastic.co/t/windows-uninstall-fails/344403 "2023-10-11T15:44:25Z")

</div>

PS C:\\Program Files\\elastic\\Agent\> .\\elastic-agent.exe uninstall Error: can only be uninstalled by executing the installed Elastic Agent at: C:\\Program Files\\Elastic\\Agent\\elastic-agent.exe For help, please see our tro…

---

## [Elastic Agent was installed failure on Windows 10](https://discuss.elastic.co/t/elastic-agent-was-installed-failure-on-windows-10/343321)

<div class="topic-metadata">

**Author:** [@yshulin](https://discuss.elastic.co/u/yshulin)\
**Replies:** 1\
**Last updated:** [October 11, 2023, 3:42pm UTC](https://discuss.elastic.co/t/elastic-agent-was-installed-failure-on-windows-10/343321 "2023-10-11T15:42:36Z")

</div>

Elastic Agent was installed failure on Windows 10, and it show "Error: symlink" error message. Elastic Agent Version: 8.6.1 Install command: .\\elastic-agent.exe install --url=https://10.x.x.12:5042 --enrollment-token=…

---

## [XML Array parsing](https://discuss.elastic.co/t/xml-array-parsing/344795)

<div class="topic-metadata">

**Author:** [@Matthias\_Brauchle](https://discuss.elastic.co/u/Matthias_Brauchle)\
**Replies:** 0\
**Last updated:** [October 11, 2023, 8:04am UTC](https://discuss.elastic.co/t/xml-array-parsing/344795 "2023-10-11T08:04:45Z")

</div>

Hello, Setup: Elasticsearch Elastic Agent with the CEL Integration (Documentation) XML Processor Ingest Pipeline My goal is to store the output in Elasticsearch (of course). The URL is from Cisco CUCM and responds w…

---

## [Elastic-agent kubernetes-integration does not collect kubernetes metrics](https://discuss.elastic.co/t/elastic-agent-kubernetes-integration-does-not-collect-kubernetes-metrics/344749)

<div class="topic-metadata">

**Author:** [@tara](https://discuss.elastic.co/u/tara)\
**Replies:** 0\
**Last updated:** [October 10, 2023, 3:05pm UTC](https://discuss.elastic.co/t/elastic-agent-kubernetes-integration-does-not-collect-kubernetes-metrics/344749 "2023-10-10T15:05:54Z")

</div>

Hello team, I have Elastic Agent deployed with ECK, but for some reason I don't get the kubernetes metrics. Instead I see this error in the logs: {"log.level":"info","@timestamp":"2023-10-10T14:55:42.666Z","message":"c…

---

## [Collect all Prometheus Metrics 8.7 integration, also looking to target live\_msgs](https://discuss.elastic.co/t/collect-all-prometheus-metrics-8-7-integration-also-looking-to-target-live-msgs/344536)

<div class="topic-metadata">

**Author:** [@Ryan\_Downey](https://discuss.elastic.co/u/Ryan_Downey)\
**Replies:** 0\
**Last updated:** [October 6, 2023, 3:25pm UTC](https://discuss.elastic.co/t/collect-all-prometheus-metrics-8-7-integration-also-looking-to-target-live-msgs/344536 "2023-10-06T15:25:26Z")

</div>

Team, I'm having trouble understanding how to collect all of the Prometheus metrics available. We currently have Elastic Agent (EA) working and connected to the Prometheus server but its not pulling any data for one of…

---

## [Throughput tweaks for Elastic Agent Integrations? Agent integration not able to keep up with volume of events within an Eventhub](https://discuss.elastic.co/t/throughput-tweaks-for-elastic-agent-integrations-agent-integration-not-able-to-keep-up-with-volume-of-events-within-an-eventhub/344515)

<div class="topic-metadata">

**Author:** [@elasticnub](https://discuss.elastic.co/u/elasticnub)\
**Replies:** 0\
**Last updated:** [October 6, 2023, 3:17am UTC](https://discuss.elastic.co/t/throughput-tweaks-for-elastic-agent-integrations-agent-integration-not-able-to-keep-up-with-volume-of-events-within-an-eventhub/344515 "2023-10-06T03:17:32Z")

</div>

We are having issues with the agent being able to support roughly ~80GB a day of M365 event data ingestion being pulled from an EventHub. The aggregation server is by no means pegged on any resources so I am trying to fi…

---

## [Elastic-Agent takes up too much disk space](https://discuss.elastic.co/t/elastic-agent-takes-up-too-much-disk-space/344429)

<div class="topic-metadata">

**Author:** [@swtrux](https://discuss.elastic.co/u/swtrux)\
**Replies:** 3\
**Last updated:** [October 5, 2023, 1:32pm UTC](https://discuss.elastic.co/t/elastic-agent-takes-up-too-much-disk-space/344429 "2023-10-05T13:32:50Z")

</div>

The size of elastic-agent continues to increase with every version: 8.8 1.7G 8.7 1.4G 8.6 1.2G 8.5 415M 1.7GB for this package size is way too big. We are looking at moving to elastic-agent but can't have over 2000 …

---

## [Elastic-Agent is not getting installed](https://discuss.elastic.co/t/elastic-agent-is-not-getting-installed/343976)

<div class="topic-metadata">

**Author:** [@syedsyed](https://discuss.elastic.co/u/syedsyed)\
**Replies:** 0\
**Last updated:** [September 27, 2023, 11:07am UTC](https://discuss.elastic.co/t/elastic-agent-is-not-getting-installed/343976 "2023-09-27T11:07:29Z")

</div>

Hello, I have 2 Problems, i have installed the integration of sonicwall in Elasticsearch and enrolled the elastic agent in fleet server by using the debian package, but the service is not getting started and iam getting …

---

## [How to replace fleet tls cert when expired?](https://discuss.elastic.co/t/how-to-replace-fleet-tls-cert-when-expired/343941)

<div class="topic-metadata">

**Author:** [@chengye233](https://discuss.elastic.co/u/chengye233)\
**Replies:** 0\
**Last updated:** [September 27, 2023, 2:11am UTC](https://discuss.elastic.co/t/how-to-replace-fleet-tls-cert-when-expired/343941 "2023-09-27T02:11:58Z")

</div>

Hi, I'm using fleet -server with tls cert. Recently, the cert will be expired and I need to replace a new one. All elastic-stack version is 8.4 Last year, I used this command to install: sudo elastic-agent-8.4.3-linux…

---

## [Elastic agent dropwizard configuration](https://discuss.elastic.co/t/elastic-agent-dropwizard-configuration/343920)

<div class="topic-metadata">

**Author:** [@umesh2020](https://discuss.elastic.co/u/umesh2020)\
**Replies:** 0\
**Last updated:** [September 26, 2023, 6:48pm UTC](https://discuss.elastic.co/t/elastic-agent-dropwizard-configuration/343920 "2023-09-26T18:48:37Z")

</div>

Does elastic agent support dropwizard configuration ? I couldn't find any documentation on how to enable dropwizard configuration using elastic agent. I am running elastic agent in kubernetes, and would like to know ho…

---

## [Fleet server cannot connect to Elasticsearch when it's behind nginx reverse proxy](https://discuss.elastic.co/t/fleet-server-cannot-connect-to-elasticsearch-when-its-behind-nginx-reverse-proxy/343751)

<div class="topic-metadata">

**Author:** [@totobarbar](https://discuss.elastic.co/u/totobarbar)\
**Replies:** 0\
**Last updated:** [September 25, 2023, 12:21pm UTC](https://discuss.elastic.co/t/fleet-server-cannot-connect-to-elasticsearch-when-its-behind-nginx-reverse-proxy/343751 "2023-09-25T12:21:55Z")

</div>

Hello everyone, I want to use Elastic Stack behind nginx reverse proxies. So Kibana and Elasticsearch have a reverse proxy and they work very well together. But Fleet Server can't connect to Elasticsearch through its …

---

## [Error "illegal base64 data at input byte 56" when enroll elastic-agent](https://discuss.elastic.co/t/error-illegal-base64-data-at-input-byte-56-when-enroll-elastic-agent/343553)

<div class="topic-metadata">

**Author:** [@neva-ops](https://discuss.elastic.co/u/neva-ops)\
**Replies:** 1\
**Last updated:** [September 25, 2023, 8:12am UTC](https://discuss.elastic.co/t/error-illegal-base64-data-at-input-byte-56-when-enroll-elastic-agent/343553 "2023-09-25T08:12:45Z")

</div>

Can't enroll elastic-agent in Fleet. When I run elastic-agent with docker compose then I get this errors: {"log.level":"info","@timestamp":"2023-09-21T14:02:42.544Z","message":"HTTP request error","component":{"binary…

---

## [Fleet Server Agent Not able to 'identify' kibana secret in ECK](https://discuss.elastic.co/t/fleet-server-agent-not-able-to-identify-kibana-secret-in-eck/343105)

<div class="topic-metadata">

**Author:** [@VVK](https://discuss.elastic.co/u/VVK)\
**Replies:** 2\
**Last updated:** [September 25, 2023, 8:00am UTC](https://discuss.elastic.co/t/fleet-server-agent-not-able-to-identify-kibana-secret-in-eck/343105 "2023-09-25T08:00:03Z")

</div>

Environment: We are managing our own k8s enviornment and have our kibana/Elasticsearch w/o any problems. Filebeat and Metricbeat are working fine. No issues. Observability & Elastic APM is working as per expectation. …

---

## [Elastic Agent, aws-s3-default-aws-s3-vpcflow keeps failing](https://discuss.elastic.co/t/elastic-agent-aws-s3-default-aws-s3-vpcflow-keeps-failing/343697)

<div class="topic-metadata">

**Author:** [@digital-thought](https://discuss.elastic.co/u/digital-thought)\
**Replies:** 5\
**Last updated:** [September 25, 2023, 4:51am UTC](https://discuss.elastic.co/t/elastic-agent-aws-s3-default-aws-s3-vpcflow-keeps-failing/343697 "2023-09-25T04:51:41Z")

</div>

I have an AWS environment which ships VPC logs to a S3 bucket. I am using the AWS VPC Log Processing integration within Elastic Agent to process these logs and to monitor for new logs. It connects to the bucket success…

---

## [Ability to create multiple datastreams with Elastic integrations?](https://discuss.elastic.co/t/ability-to-create-multiple-datastreams-with-elastic-integrations/343325)

<div class="topic-metadata">

**Author:** [@yago82](https://discuss.elastic.co/u/yago82)\
**Replies:** 4\
**Last updated:** [September 21, 2023, 2:42pm UTC](https://discuss.elastic.co/t/ability-to-create-multiple-datastreams-with-elastic-integrations/343325 "2023-09-21T14:42:32Z")

</div>

Hello everyone, I'm currently exploring Elastic integrations and have a question regarding the creation of multiple datastreams. I noticed that in the integration example with Cisco ISE, there are about ten Ingest Pipel…

---

## [Kubernetes Monitoring using Elastic-Agent](https://discuss.elastic.co/t/kubernetes-monitoring-using-elastic-agent/343521)

<div class="topic-metadata">

**Author:** [@praveen\_raju](https://discuss.elastic.co/u/praveen_raju)\
**Replies:** 0\
**Last updated:** [September 21, 2023, 9:40am UTC](https://discuss.elastic.co/t/kubernetes-monitoring-using-elastic-agent/343521 "2023-09-21T09:40:34Z")

</div>

Hello, We would like to use " Add Kubernetes integration" to our existing policy in Fleet. So, would like to understand where we need the configurations of our Kubernetes clusters which need to be monitored and authetic…

---

## [AWS logging integration error](https://discuss.elastic.co/t/aws-logging-integration-error/343469)

<div class="topic-metadata">

**Author:** [@rachelyang](https://discuss.elastic.co/u/rachelyang)\
**Replies:** 4\
**Last updated:** [September 20, 2023, 4:27pm UTC](https://discuss.elastic.co/t/aws-logging-integration-error/343469 "2023-09-20T16:27:30Z")

</div>

Hi, I want to integrate the AWS logs into my Kibana Observability log stream. Here is the access policy of SQS queue: { "Version": "2012-10-17", "Id": "arn:aws:sqs:us-east-1:334811116626:ingest-ec2-logs-sqs/SQSDef…

---

## [Document to setup on-prem single node ECK on Kubernetes with elastic agent](https://discuss.elastic.co/t/document-to-setup-on-prem-single-node-eck-on-kubernetes-with-elastic-agent/343428)

<div class="topic-metadata">

**Author:** [@sankumar](https://discuss.elastic.co/u/sankumar)\
**Replies:** 0\
**Last updated:** [September 20, 2023, 8:19am UTC](https://discuss.elastic.co/t/document-to-setup-on-prem-single-node-eck-on-kubernetes-with-elastic-agent/343428 "2023-09-20T08:19:00Z")

</div>

Want to setup single node ECK on Kubernetes with elastic agent. So looking for the document to setup.

---

## [ECK sample config to run elastiic agent for synthetic monitoring](https://discuss.elastic.co/t/eck-sample-config-to-run-elastiic-agent-for-synthetic-monitoring/343386)

<div class="topic-metadata">

**Author:** [@senyam08](https://discuss.elastic.co/u/senyam08)\
**Replies:** 0\
**Last updated:** [September 19, 2023, 4:06pm UTC](https://discuss.elastic.co/t/eck-sample-config-to-run-elastiic-agent-for-synthetic-monitoring/343386 "2023-09-19T16:06:26Z")

</div>

Looking to setup synthetic monitoring private location with elastic agent deployment using ECK operator. is there ECK operator recipe or sample config to run standalone elastic agent with elastic-agent-complete Docker im…

---

## [Enrolling agent on Graviton ARM processor](https://discuss.elastic.co/t/enrolling-agent-on-graviton-arm-processor/342351)

<div class="topic-metadata">

**Author:** [@Jasonespo](https://discuss.elastic.co/u/Jasonespo)\
**Replies:** 4\
**Last updated:** [September 19, 2023, 3:26pm UTC](https://discuss.elastic.co/t/enrolling-agent-on-graviton-arm-processor/342351 "2023-09-19T15:26:59Z")

</div>

Hi, I was wondering if it is possible to run the agent on aarm64 architecture? We're potentially aiming to migrate all of our hosts from x86\_64 to aarm64. However when I try to run the agent install command on a host r…

---

## [Elastic-agent and Veeam man plugin](https://discuss.elastic.co/t/elastic-agent-and-veeam-man-plugin/343316)

<div class="topic-metadata">

**Author:** [@thiesens](https://discuss.elastic.co/u/thiesens)\
**Replies:** 0\
**Last updated:** [September 19, 2023, 6:16am UTC](https://discuss.elastic.co/t/elastic-agent-and-veeam-man-plugin/343316 "2023-09-19T06:16:36Z")

</div>

Hi all.. I have a few Oracle servers, where I want to install elastic-agent. The problem for me is that I have Veeam RMAN plugin installed, and it seems that both are using port 6791. Is it possible to change the elas…

---

## [Changing default configuration of Elastic Agent Integration to filter out events before ingestion](https://discuss.elastic.co/t/changing-default-configuration-of-elastic-agent-integration-to-filter-out-events-before-ingestion/343164)

<div class="topic-metadata">

**Author:** [@Sushant\_Bhatnagar](https://discuss.elastic.co/u/Sushant_Bhatnagar)\
**Replies:** 0\
**Last updated:** [September 15, 2023, 9:38pm UTC](https://discuss.elastic.co/t/changing-default-configuration-of-elastic-agent-integration-to-filter-out-events-before-ingestion/343164 "2023-09-15T21:38:27Z")

</div>

Hello, I created an Elastic agent policy to attach it few hosts and while creating it - I checked the Collect agent logs checkbox under Agent Monitoring section. Now in the events in discover tab, I see dataset as "el…

---

## [A way to reduced needed storage space for Elastic Agent?](https://discuss.elastic.co/t/a-way-to-reduced-needed-storage-space-for-elastic-agent/343052)

<div class="topic-metadata">

**Author:** [@Amadeus](https://discuss.elastic.co/u/Amadeus)\
**Replies:** 0\
**Last updated:** [September 14, 2023, 12:13pm UTC](https://discuss.elastic.co/t/a-way-to-reduced-needed-storage-space-for-elastic-agent/343052 "2023-09-14T12:13:51Z")

</div>

Hello everyone, I have two questions. When installing/enrolling a Fleet-managed Elastic Agent (as tar) I'm required to download the tar.gz, extract the files and execute the install/enroll command. By doing so the …

---

## [Monitor cluster with elastic agent](https://discuss.elastic.co/t/monitor-cluster-with-elastic-agent/342413)

<div class="topic-metadata">

**Author:** [@lduvnjak](https://discuss.elastic.co/u/lduvnjak)\
**Replies:** 16\
**Last updated:** [September 13, 2023, 6:39pm UTC](https://discuss.elastic.co/t/monitor-cluster-with-elastic-agent/342413 "2023-09-13T18:39:17Z")

</div>

Hey Everyone, We're trying to move from the legacy exporters over to Elastic Agent. Our data pipeline is Elastic Agent \> Logstash \> Kafka \> Elastic. I have a couple of questions and would appreciate any and all knowledg…

---

## [Fleet Server shutdown after enroll](https://discuss.elastic.co/t/fleet-server-shutdown-after-enroll/342791)

<div class="topic-metadata">

**Author:** [@bixiyan](https://discuss.elastic.co/u/bixiyan)\
**Replies:** 0\
**Last updated:** [September 12, 2023, 8:47am UTC](https://discuss.elastic.co/t/fleet-server-shutdown-after-enroll/342791 "2023-09-12T08:47:39Z")

</div>

Hi Team: I want to set up fleet server but failed after executed enroll command. My es version is v 7.16.3 . Let me know any more infomation you needed. Here is my fleet enroll command. elastic-agent enroll --url=htt…

---

## [Elastic agent indices - ILM](https://discuss.elastic.co/t/elastic-agent-indices-ilm/342243)

<div class="topic-metadata">

**Author:** [@Tyty](https://discuss.elastic.co/u/Tyty)\
**Replies:** 5\
**Last updated:** [September 13, 2023, 3:30pm UTC](https://discuss.elastic.co/t/elastic-agent-indices-ilm/342243 "2023-09-13T15:30:02Z")

</div>

Hi All, Currently using ELK stack 8.91. Fleet enable. Elasticc-agent deployed on around 100 Servers/vm. I notice that indexes will never be cleared. Seems to be a default behavior. I need to know how to setup an Inde…

---

## [No logs from /var/containers/\* in kubernetes integration](https://discuss.elastic.co/t/no-logs-from-var-containers-in-kubernetes-integration/342671)

<div class="topic-metadata">

**Author:** [@georgi.hristov](https://discuss.elastic.co/u/georgi.hristov)\
**Replies:** 0\
**Last updated:** [September 10, 2023, 7:34am UTC](https://discuss.elastic.co/t/no-logs-from-var-containers-in-kubernetes-integration/342671 "2023-09-10T07:34:30Z")

</div>

Hello guys, I have been trying to setup ECK lately as a monitoring solution for our local K8s cluster. I have used the examples provided in the official documentation for Fleet-managed Elastic Agent on ECK with system …

---

## [ECK 8.7 Fleet managed Agents, Create Policy, Add Integrations & Agent enrollment via code](https://discuss.elastic.co/t/eck-8-7-fleet-managed-agents-create-policy-add-integrations-agent-enrollment-via-code/342626)

<div class="topic-metadata">

**Author:** [@mayur.kadam](https://discuss.elastic.co/u/mayur.kadam)\
**Replies:** 0\
**Last updated:** [September 8, 2023, 3:26pm UTC](https://discuss.elastic.co/t/eck-8-7-fleet-managed-agents-create-policy-add-integrations-agent-enrollment-via-code/342626 "2023-09-08T15:26:33Z")

</div>

We have ECK (2.7) installed on our AKS cluster and used Elastic agents for policy orchestration managed by fleet server. The Policy creation and addition of Integration to the Policy is currently done via UI console and …

---

## [Elastic Agent Standalone: Does agent reload when items in inputs.d/ are updated?](https://discuss.elastic.co/t/elastic-agent-standalone-does-agent-reload-when-items-in-inputs-d-are-updated/342621)

<div class="topic-metadata">

**Author:** [@DougR](https://discuss.elastic.co/u/DougR)\
**Replies:** 0\
**Last updated:** [September 8, 2023, 3:08pm UTC](https://discuss.elastic.co/t/elastic-agent-standalone-does-agent-reload-when-items-in-inputs-d-are-updated/342621 "2023-09-08T15:08:42Z")

</div>

A quick question. I'm deploying Elastic Agent standalone to our Kubernetes environment. I am saving the inputs as individual files in input.d/ and would like to mount that directory from a secret, since secrets automatic…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elastic-agent/91.md?page=28)

[Next page](https://discuss.elastic.co/c/elastic-stack/elastic-agent/91.md?page=30)
