# Elastic Agent

**URL:** https://discuss.elastic.co/c/elastic-stack/elastic-agent/91.md?page=30

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 31

---

## [Php agent laravel jobs](https://discuss.elastic.co/t/php-agent-laravel-jobs/342571)

<div class="topic-metadata">

**Author:** [@Vidyanath\_Vemula](https://discuss.elastic.co/u/Vidyanath_Vemula)\
**Replies:** 0\
**Last updated:** [September 8, 2023, 5:39am UTC](https://discuss.elastic.co/t/php-agent-laravel-jobs/342571 "2023-09-08T05:39:04Z")

</div>

Hello, APM does not seem to gather execution statistics of our laravel jobs. We have configured apm agent in php cli and our jobs are executed using supervisor. Manual invocations of php -version does trigger apm stats…

---

## [Can I omit ES\_USERNAME, ES\_PASSWORD, KIBANA\_FLEET\_USERNAME, KIBANA\_FLEET\_PASSWORD from elastic-agent Kubernetes daemonset?](https://discuss.elastic.co/t/can-i-omit-es-username-es-password-kibana-fleet-username-kibana-fleet-password-from-elastic-agent-kubernetes-daemonset/342558)

<div class="topic-metadata">

**Author:** [@Craig\_Rodrigues](https://discuss.elastic.co/u/Craig_Rodrigues)\
**Replies:** 3\
**Last updated:** [September 8, 2023, 12:58am UTC](https://discuss.elastic.co/t/can-i-omit-es-username-es-password-kibana-fleet-username-kibana-fleet-password-from-elastic-agent-kubernetes-daemonset/342558 "2023-09-08T00:58:12Z")

</div>

In the Fleet UI, when specifying the installation method for a Kubernetes cluster, ES\_USERNAME and ES\_PASSWORD are specified as environment variables which are passed down to the docker.elastic.co/beats/elastic-agent c…

---

## [JSON Parsing issue with elasticsearch ingest pipeline](https://discuss.elastic.co/t/json-parsing-issue-with-elasticsearch-ingest-pipeline/342519)

<div class="topic-metadata">

**Author:** [@Jobin\_James](https://discuss.elastic.co/u/Jobin_James)\
**Replies:** 4\
**Last updated:** [September 7, 2023, 1:51pm UTC](https://discuss.elastic.co/t/json-parsing-issue-with-elasticsearch-ingest-pipeline/342519 "2023-09-07T13:51:55Z")

</div>

Hello, I am building an Elasticsearch cluster to aggregate and monitor application logs. I am using ECK for deploying and managing the cluster in k8s and fleet-managed elastic agent deployed across multiple clusters to …

---

## [PFsense integration not working](https://discuss.elastic.co/t/pfsense-integration-not-working/342388)

<div class="topic-metadata">

**Author:** [@Rob\_wylde](https://discuss.elastic.co/u/Rob_wylde)\
**Replies:** 2\
**Last updated:** [September 6, 2023, 8:30pm UTC](https://discuss.elastic.co/t/pfsense-integration-not-working/342388 "2023-09-06T20:30:11Z")

</div>

I have configured pfsense to send UDP logs to a Linux host with the pfense integration added to the policy. I have confirmed that pfsense is sending logs to the desired destination via nc -ul 9001, and I can see the plai…

---

## [Elastic agent Failed Connect Failed to connect to backoff 401 Unauthorized](https://discuss.elastic.co/t/elastic-agent-failed-connect-failed-to-connect-to-backoff-401-unauthorized/342395)

<div class="topic-metadata">

**Author:** [@Khunakorn](https://discuss.elastic.co/u/Khunakorn)\
**Replies:** 0\
**Last updated:** [September 6, 2023, 6:33am UTC](https://discuss.elastic.co/t/elastic-agent-failed-connect-failed-to-connect-to-backoff-401-unauthorized/342395 "2023-09-06T06:33:06Z")

</div>

{"log.level":"error","@timestamp":"2023-09-06T04:35:47.597Z","message":"Failed to connect to backoff(elasticsearch(cloud.com:443)): 401 Unauthorized: {"error":{"root\_cause":\[{"type":"security\_exception","reason":"unable …

---

## [Does Elastic Agent support Docker label based autodiscovery?](https://discuss.elastic.co/t/does-elastic-agent-support-docker-label-based-autodiscovery/342383)

<div class="topic-metadata">

**Author:** [@jerrac](https://discuss.elastic.co/u/jerrac)\
**Replies:** 0\
**Last updated:** [September 5, 2023, 11:13pm UTC](https://discuss.elastic.co/t/does-elastic-agent-support-docker-label-based-autodiscovery/342383 "2023-09-05T23:13:24Z")

</div>

While experimenting with using Metricbeat and Filebeat directly, I found the documentation on hint based auto-discovery that would send the docker logs and metrics through the correct pipelines for different modules. Lik…

---

## [Windows server 2012 and 2008](https://discuss.elastic.co/t/windows-server-2012-and-2008/342371)

<div class="topic-metadata">

**Author:** [@Waseem.M](https://discuss.elastic.co/u/Waseem.M)\
**Replies:** 1\
**Last updated:** [September 5, 2023, 7:11pm UTC](https://discuss.elastic.co/t/windows-server-2012-and-2008/342371 "2023-09-05T19:11:21Z")

</div>

Hi Everyone, Recently start working on Kibana. I have created the dashboard and working on windows server 2008 and 2012 looking for advice. which file do I need to install winlogbeat is there any compatible version of w…

---

## [Fleet not showing latest version of Elastic Agent](https://discuss.elastic.co/t/fleet-not-showing-latest-version-of-elastic-agent/342367)

<div class="topic-metadata">

**Author:** [@JP\_1987](https://discuss.elastic.co/u/JP_1987)\
**Replies:** 0\
**Last updated:** [September 5, 2023, 5:50pm UTC](https://discuss.elastic.co/t/fleet-not-showing-latest-version-of-elastic-agent/342367 "2023-09-05T17:50:50Z")

</div>

Have setup a fleet server with several agents. My fleet server is running agent 8.91, but version of Elastic agent is only allowing updates to version 8.8.2 Is this an automatic update when a new version is released th…

---

## [Problems with Number of replicas and UNASSIGNED errors](https://discuss.elastic.co/t/problems-with-number-of-replicas-and-unassigned-errors/342138)

<div class="topic-metadata">

**Author:** [@Ednei\_Rodrigues](https://discuss.elastic.co/u/Ednei_Rodrigues)\
**Replies:** 9\
**Last updated:** [September 5, 2023, 1:32pm UTC](https://discuss.elastic.co/t/problems-with-number-of-replicas-and-unassigned-errors/342138 "2023-09-05T13:32:54Z")

</div>

Hello, how are you doing ? So, I have a standalone ELK Stack and I am suffering with the error messages "UNASSIGNED" replicas. I know, to not use replica, I need to set 'number\_of\_replicas': 0 to the index. As I am usin…

---

## [Elastic Agent fleet-managed advanced filebeat configuration](https://discuss.elastic.co/t/elastic-agent-fleet-managed-advanced-filebeat-configuration/342310)

<div class="topic-metadata">

**Author:** [@martcus](https://discuss.elastic.co/u/martcus)\
**Replies:** 0\
**Last updated:** [September 5, 2023, 7:23am UTC](https://discuss.elastic.co/t/elastic-agent-fleet-managed-advanced-filebeat-configuration/342310 "2023-09-05T07:23:54Z")

</div>

Hi! We use the elastic agent fleet-managed solution extensively, especially with the custom logs integration for monitoring application logs. We need to set the filebeat close\_\*, scan\_frequency and ignore\_older paramet…

---

## [Deploying elastic agent apm server on kubernates from fleet server](https://discuss.elastic.co/t/deploying-elastic-agent-apm-server-on-kubernates-from-fleet-server/342284)

<div class="topic-metadata">

**Author:** [@Mansoor\_Ur\_Rehman](https://discuss.elastic.co/u/Mansoor_Ur_Rehman)\
**Replies:** 0\
**Last updated:** [September 4, 2023, 6:44pm UTC](https://discuss.elastic.co/t/deploying-elastic-agent-apm-server-on-kubernates-from-fleet-server/342284 "2023-09-04T18:44:24Z")

</div>

i have setup a elasticsearch, kibana and fleet server with elasticsearch self signed certificates successfully, i have also deployed a apm integration on a server with fleet server. the apm server listens on port http:/…

---

## [Fortinet FortiGate Firewall Logs integration](https://discuss.elastic.co/t/fortinet-fortigate-firewall-logs-integration/342116)

<div class="topic-metadata">

**Author:** [@francesco.amato](https://discuss.elastic.co/u/francesco.amato)\
**Replies:** 2\
**Last updated:** [September 1, 2023, 12:40pm UTC](https://discuss.elastic.co/t/fortinet-fortigate-firewall-logs-integration/342116 "2023-09-01T12:40:00Z")

</div>

Hi to all I can't figure out why the Fortigate Firewall Logs Integration doesn't send logs to my Elasticsearch server I can use the filebeat module but not the fleet integration I have setup the Fortigate Firewall to …

---

## [Error while dialing dial unix /var/run/elastic-agent.sock](https://discuss.elastic.co/t/error-while-dialing-dial-unix-var-run-elastic-agent-sock/342249)

<div class="topic-metadata">

**Author:** [@netteans](https://discuss.elastic.co/u/netteans)\
**Replies:** 0\
**Last updated:** [September 4, 2023, 10:56am UTC](https://discuss.elastic.co/t/error-while-dialing-dial-unix-var-run-elastic-agent-sock/342249 "2023-09-04T10:56:40Z")

</div>

I got same errors like https://discuss.elastic.co/t/var-run-elastic-agent-sock-connect-no-such-file-or-directory/335817/2?u=netteans mac@mybookpro Elastic % sudo /Library/Elastic/Agent/elastic-agent status Password: Err…

---

## [Elastic agent shows \`Input not supported error\` when configuring Fleet managed APM integration](https://discuss.elastic.co/t/elastic-agent-shows-input-not-supported-error-when-configuring-fleet-managed-apm-integration/342025)

<div class="topic-metadata">

**Author:** [@Ong\_Yi\_Chong](https://discuss.elastic.co/u/Ong_Yi_Chong)\
**Replies:** 1\
**Last updated:** [September 4, 2023, 4:39am UTC](https://discuss.elastic.co/t/elastic-agent-shows-input-not-supported-error-when-configuring-fleet-managed-apm-integration/342025 "2023-09-04T04:39:20Z")

</div>

Kibana version: 8.9.1 Elasticsearch version: 8.9.1 APM Server version: 8.9.1 I am trying to configure the apm server via \[Fleet-managed APM Server | APM User Guide \[8.9\] | Elastic\](Fleet managed APM). However, when a…

---

## [Question regarding the development of an integration that has a dependency on other integrations](https://discuss.elastic.co/t/question-regarding-the-development-of-an-integration-that-has-a-dependency-on-other-integrations/342143)

<div class="topic-metadata">

**Author:** [@Sebastian\_Huettersen](https://discuss.elastic.co/u/Sebastian_Huettersen)\
**Replies:** 0\
**Last updated:** [September 1, 2023, 6:26pm UTC](https://discuss.elastic.co/t/question-regarding-the-development-of-an-integration-that-has-a-dependency-on-other-integrations/342143 "2023-09-01T18:26:24Z")

</div>

Hello all, I am currently developing an integration for an appliance where it is only possible to configure the entire logs to be sent out via a syslog configuration. However, many applications running on this appliance…

---

## [How to define GeoIP in elastic agent v8.9?](https://discuss.elastic.co/t/how-to-define-geoip-in-elastic-agent-v8-9/342127)

<div class="topic-metadata">

**Author:** [@noor.muradi](https://discuss.elastic.co/u/noor.muradi)\
**Replies:** 0\
**Last updated:** [September 1, 2023, 12:44pm UTC](https://discuss.elastic.co/t/how-to-define-geoip-in-elastic-agent-v8-9/342127 "2023-09-01T12:44:52Z")

</div>

Hello all, How to define GeoIP in elastic agent policy, I have installed elastic agent v8.9 on a standalone ubuntu server, (my ELK stack version is 8.9) I have Nginx server running on that machine I want to monitor logs…

---

## [How to set \`bulk\_max\_size\` and \`compression\_level\`?](https://discuss.elastic.co/t/how-to-set-bulk-max-size-and-compression-level/341387)

<div class="topic-metadata">

**Author:** [@Craig\_Rodrigues](https://discuss.elastic.co/u/Craig_Rodrigues)\
**Replies:** 8\
**Last updated:** [August 31, 2023, 6:34pm UTC](https://discuss.elastic.co/t/how-to-set-bulk-max-size-and-compression-level/341387 "2023-08-31T18:34:19Z")

</div>

I have about 2000 Elastic agents (version 8.9.0) connected to a system with 3 Fleet servers (version 8.9.0). We have about 20 different agent policies, because the various Elastic agents are sending slightly different …

---

## [Elastic Not loading data](https://discuss.elastic.co/t/elastic-not-loading-data/341993)

<div class="topic-metadata">

**Author:** [@Sachin\_Sharma](https://discuss.elastic.co/u/Sachin_Sharma)\
**Replies:** 3\
**Last updated:** [August 30, 2023, 3:59pm UTC](https://discuss.elastic.co/t/elastic-not-loading-data/341993 "2023-08-30T15:59:42Z")

</div>

Hi, We are using BulkProcessor in java to insert records into Elastic Server. We have ExecutorService that creates 12 threads and also 12 connection pools in db. Each thread sends multiple requests to one BulkProcessor …

---

## [Elastic-agent is triggering HTTP 413 (entity too large) errors](https://discuss.elastic.co/t/elastic-agent-is-triggering-http-413-entity-too-large-errors/341932)

<div class="topic-metadata">

**Author:** [@Craig\_Rodrigues](https://discuss.elastic.co/u/Craig_Rodrigues)\
**Replies:** 0\
**Last updated:** [August 30, 2023, 12:42am UTC](https://discuss.elastic.co/t/elastic-agent-is-triggering-http-413-entity-too-large-errors/341932 "2023-08-30T00:42:49Z")

</div>

I have an elastic agent: elastic-agent version Binary: 8.9.0 (build: dc443bc2427920a26141b05f9c07a52191881af5 at 2023-07-19 20:55:16 +0000 UTC) Daemon: 8.9.0 (build: dc443bc2427920a26141b05f9c07a52191881af5 at 2023-07-…

---

## [Deploy python connector with docker ca\_cert parameter is not a path (run locally)](https://discuss.elastic.co/t/deploy-python-connector-with-docker-ca-cert-parameter-is-not-a-path-run-locally/340642)

<div class="topic-metadata">

**Author:** [@sk30613](https://discuss.elastic.co/u/sk30613)\
**Replies:** 1\
**Last updated:** [August 29, 2023, 5:58pm UTC](https://discuss.elastic.co/t/deploy-python-connector-with-docker-ca-cert-parameter-is-not-a-path-run-locally/340642 "2023-08-29T17:58:45Z")

</div>

Hi, I have an error during the run of docker image (run connector service in docker). I have been following the instructions from https://github.com/elastic/connectors-python/blob/main/docs/DOCKER.md (steps: 1-5). Plea…

---

## [Can I configure elastic agent to have logs indexed by elastic search?](https://discuss.elastic.co/t/can-i-configure-elastic-agent-to-have-logs-indexed-by-elastic-search/341856)

<div class="topic-metadata">

**Author:** [@Ong\_Yi\_Chong](https://discuss.elastic.co/u/Ong_Yi_Chong)\
**Replies:** 0\
**Last updated:** [August 29, 2023, 6:35am UTC](https://discuss.elastic.co/t/can-i-configure-elastic-agent-to-have-logs-indexed-by-elastic-search/341856 "2023-08-29T06:35:24Z")

</div>

Hi, I have just started learning about elastic stack one day ago. I have managed to add an elastic agent apm integration to a sample node JS server and I am able to view the log outputs on Observability \> Logs section. …

---

## [Elastic-agent metricbeat no verification mode](https://discuss.elastic.co/t/elastic-agent-metricbeat-no-verification-mode/341851)

<div class="topic-metadata">

**Author:** [@Daniel\_Lopez](https://discuss.elastic.co/u/Daniel_Lopez)\
**Replies:** 0\
**Last updated:** [August 29, 2023, 5:46am UTC](https://discuss.elastic.co/t/elastic-agent-metricbeat-no-verification-mode/341851 "2023-08-29T05:46:02Z")

</div>

Hi guys! I think i found a bug on elastic-agent. I configured the whole fleet server with --insecure and ssl.verification\_mode: none options and i'm getting logs to elastic but not metricbeat metrics as i show in the se…

---

## [Performance impact of setting 'namespace' in Elastic agent policy config](https://discuss.elastic.co/t/performance-impact-of-setting-namespace-in-elastic-agent-policy-config/341294)

<div class="topic-metadata">

**Author:** [@Craig\_Rodrigues](https://discuss.elastic.co/u/Craig_Rodrigues)\
**Replies:** 2\
**Last updated:** [August 28, 2023, 5:14pm UTC](https://discuss.elastic.co/t/performance-impact-of-setting-namespace-in-elastic-agent-policy-config/341294 "2023-08-28T17:14:22Z")

</div>

I have about 2000 Elastic agents (version 8.9.0) connected to a system with 3 Fleet servers (version 8.9.0). We have about 20 different agent policies, because the various Elastic agents are sending slightly different …

---

## [How to setup Cloudflare Logpush via HTTP Endpoint?](https://discuss.elastic.co/t/how-to-setup-cloudflare-logpush-via-http-endpoint/341818)

<div class="topic-metadata">

**Author:** [@nlcsdev](https://discuss.elastic.co/u/nlcsdev)\
**Replies:** 0\
**Last updated:** [August 28, 2023, 3:35pm UTC](https://discuss.elastic.co/t/how-to-setup-cloudflare-logpush-via-http-endpoint/341818 "2023-08-28T15:35:51Z")

</div>

Hello, I am trying to use the Cloudflare Logpush integration via HTTP Endpoint. I have read both the documentation on Cloudflare and Elasticsearch and I am still confused. I have Elasticsearch and Kibana 8.9.0 deployed…

---

## [Elastic Agent tags not part of the log content](https://discuss.elastic.co/t/elastic-agent-tags-not-part-of-the-log-content/341009)

<div class="topic-metadata">

**Author:** [@raulgs](https://discuss.elastic.co/u/raulgs)\
**Replies:** 1\
**Last updated:** [August 28, 2023, 6:07am UTC](https://discuss.elastic.co/t/elastic-agent-tags-not-part-of-the-log-content/341009 "2023-08-28T06:07:55Z")

</div>

Hi community, at my company we use managed Elastic Agents to collect logs from kubernetes. To figure out which cluster the logs belong, every cluster is labeled with a specific kubernetes label that identifies it. This…

---

## [Elastic Agent/Beats DNS Processor Caching Bad Performance?](https://discuss.elastic.co/t/elastic-agent-beats-dns-processor-caching-bad-performance/341757)

<div class="topic-metadata">

**Author:** [@BenB196](https://discuss.elastic.co/u/BenB196)\
**Replies:** 0\
**Last updated:** [August 27, 2023, 4:37pm UTC](https://discuss.elastic.co/t/elastic-agent-beats-dns-processor-caching-bad-performance/341757 "2023-08-27T16:37:08Z")

</div>

Hello All, I was recently messing around with an Elastic Agent Netflow integration setup, but was noticing that events were being dropped. The integration definition looked something like: inputs: - id: netflow-netf…

---

## [Fleet Server Setup failing](https://discuss.elastic.co/t/fleet-server-setup-failing/341380)

<div class="topic-metadata">

**Author:** [@sai\_kiran1](https://discuss.elastic.co/u/sai_kiran1)\
**Replies:** 11\
**Last updated:** [August 25, 2023, 4:00pm UTC](https://discuss.elastic.co/t/fleet-server-setup-failing/341380 "2023-08-25T16:00:55Z")

</div>

Hello, Trying to enroll fleet in docker env and the enroll is not happening with the below continuous log messages. \[root@eicillp949 ~\]# docker logs --since 10m -f elastic-agent Policy selected for enrollment: fleet-s…

---

## [Getting "no field found in the mapping" when creating a scripted field](https://discuss.elastic.co/t/getting-no-field-found-in-the-mapping-when-creating-a-scripted-field/341684)

<div class="topic-metadata">

**Author:** [@mr\_ph](https://discuss.elastic.co/u/mr_ph)\
**Replies:** 0\
**Last updated:** [August 25, 2023, 11:45am UTC](https://discuss.elastic.co/t/getting-no-field-found-in-the-mapping-when-creating-a-scripted-field/341684 "2023-08-25T11:45:15Z")

</div>

Hi team, I am using FortiGate integration in my ELK. So I need to create a new scripted fields for more visibility into that logs. Created a scripted field with the following condition. if ( doc\['fortinet.firewall.acti…

---

## [Elastic Agent restore data views](https://discuss.elastic.co/t/elastic-agent-restore-data-views/341678)

<div class="topic-metadata">

**Author:** [@Daniel\_Lopez](https://discuss.elastic.co/u/Daniel_Lopez)\
**Replies:** 0\
**Last updated:** [August 25, 2023, 11:06am UTC](https://discuss.elastic.co/t/elastic-agent-restore-data-views/341678 "2023-08-25T11:06:48Z")

</div>

Hi guys! Data views from fleet server integrations have been removed, how could I reinstall data views and templates again? BR

---

## [Install via fleet from a local agent repository instead downloading each time?](https://discuss.elastic.co/t/install-via-fleet-from-a-local-agent-repository-instead-downloading-each-time/341544)

<div class="topic-metadata">

**Author:** [@GKre](https://discuss.elastic.co/u/GKre)\
**Replies:** 1\
**Last updated:** [August 24, 2023, 8:02am UTC](https://discuss.elastic.co/t/install-via-fleet-from-a-local-agent-repository-instead-downloading-each-time/341544 "2023-08-24T08:02:35Z")

</div>

well - unfortunately i do not have the best internet connection an installing the updating the agents via fleet takes a lot of time. Is it possible to use a local repository instead so that the agent does not have to be…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elastic-agent/91.md?page=29)

[Next page](https://discuss.elastic.co/c/elastic-stack/elastic-agent/91.md?page=31)
