# Elastic Agent

**URL:** https://discuss.elastic.co/c/elastic-stack/elastic-agent/91.md?page=32

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 33

---

## [There was problem checking fleet permission](https://discuss.elastic.co/t/there-was-problem-checking-fleet-permission/339192)

<div class="topic-metadata">

**Author:** [@Nirmal](https://discuss.elastic.co/u/Nirmal)\
**Replies:** 0\
**Last updated:** [July 25, 2023, 12:18pm UTC](https://discuss.elastic.co/t/there-was-problem-checking-fleet-permission/339192 "2023-07-25T12:18:28Z")

</div>

I am trying to setup fleet server, but I am facing this issue. Please anybody knows what I am missing here.

---

## [Fleet server agent output not supported](https://discuss.elastic.co/t/fleet-server-agent-output-not-supported/339174)

<div class="topic-metadata">

**Author:** [@quic22](https://discuss.elastic.co/u/quic22)\
**Replies:** 1\
**Last updated:** [July 25, 2023, 11:54am UTC](https://discuss.elastic.co/t/fleet-server-agent-output-not-supported/339174 "2023-07-25T11:54:04Z")

</div>

Hello, I just installed elastic stack (with fleet server on the same host) with logstash as output in fleet settings and that was working until I rebooted. Everything seems to work only is the server not listening on por…

---

## [Fleet Server not deploying in ECK operator](https://discuss.elastic.co/t/fleet-server-not-deploying-in-eck-operator/337110)

<div class="topic-metadata">

**Author:** [@conuoha1](https://discuss.elastic.co/u/conuoha1)\
**Replies:** 1\
**Last updated:** [July 24, 2023, 2:14pm UTC](https://discuss.elastic.co/t/fleet-server-not-deploying-in-eck-operator/337110 "2023-07-24T14:14:45Z")

</div>

This is my fleet.yaml file , i cant seem to understand why im getting this error apiVersion: agent.k8s.elastic.co/v1alpha1 kind: Agent metadata: annotations: association.k8s.elastic.co/es-conf-3796208044: \>- …

---

## [Elastic Agent Not Showing any Logs](https://discuss.elastic.co/t/elastic-agent-not-showing-any-logs/337636)

<div class="topic-metadata">

**Author:** [@ksaimohan2k](https://discuss.elastic.co/u/ksaimohan2k)\
**Replies:** 1\
**Last updated:** [July 24, 2023, 1:50pm UTC](https://discuss.elastic.co/t/elastic-agent-not-showing-any-logs/337636 "2023-07-24T13:50:15Z")

</div>

We deployed ECE in an air-gap environment. There are around three deployments. In one of the deployments, we Installed and configured an agent through fleet and added a MySQL Integration just for testing purposes. Agent …

---

## [Problem of elastic-agent install on windows 10 VM](https://discuss.elastic.co/t/problem-of-elastic-agent-install-on-windows-10-vm/338775)

<div class="topic-metadata">

**Author:** [@jean10](https://discuss.elastic.co/u/jean10)\
**Replies:** 1\
**Last updated:** [July 21, 2023, 10:18am UTC](https://discuss.elastic.co/t/problem-of-elastic-agent-install-on-windows-10-vm/338775 "2023-07-21T10:18:39Z")

</div>

Hello everyone, I would install elastic agent on windows 10 computer test. I use command recommanded by agent of installation but the installation not working and i haven't output for checking status...... For obtain …

---

## [Elastic Agent to OpenTelemetry Collector](https://discuss.elastic.co/t/elastic-agent-to-opentelemetry-collector/338789)

<div class="topic-metadata">

**Author:** [@chadr](https://discuss.elastic.co/u/chadr)\
**Replies:** 3\
**Last updated:** [July 20, 2023, 4:15pm UTC](https://discuss.elastic.co/t/elastic-agent-to-opentelemetry-collector/338789 "2023-07-20T16:15:34Z")

</div>

Hi all, I am researching the capabilities of the current and future roadmap for the Elastic Agent. We have a very diverse infra/app/coding language environment. Specifically, I looking to understand if the Elastic Age…

---

## [Segregating data sent from Elastic-Agents or Beats to a Specified Index](https://discuss.elastic.co/t/segregating-data-sent-from-elastic-agents-or-beats-to-a-specified-index/338811)

<div class="topic-metadata">

**Author:** [@pkward](https://discuss.elastic.co/u/pkward)\
**Replies:** 0\
**Last updated:** [July 19, 2023, 5:32pm UTC](https://discuss.elastic.co/t/segregating-data-sent-from-elastic-agents-or-beats-to-a-specified-index/338811 "2023-07-19T17:32:47Z")

</div>

Hello, I'm ingesting data from multiple systems and different system owners. I have multi-tenancy set up using Kibana spaces and roles, but all of the data is being sent to a single index. I would like to store my data …

---

## [How to connect Stand Alone Elastic Agent to SentinelOne and Logstash?](https://discuss.elastic.co/t/how-to-connect-stand-alone-elastic-agent-to-sentinelone-and-logstash/338726)

<div class="topic-metadata">

**Author:** [@toman](https://discuss.elastic.co/u/toman)\
**Replies:** 1\
**Last updated:** [July 19, 2023, 4:29am UTC](https://discuss.elastic.co/t/how-to-connect-stand-alone-elastic-agent-to-sentinelone-and-logstash/338726 "2023-07-19T04:29:30Z")

</div>

I am trying to make a connection from our SentinelOne environment to our existing Logstash server where we process data. We do not use Fleet or Elasticsearch. It seems that we could use Elastic Agent for this connection…

---

## [How to add labels in apm for python lamda to reflect in kibana](https://discuss.elastic.co/t/how-to-add-labels-in-apm-for-python-lamda-to-reflect-in-kibana/338665)

<div class="topic-metadata">

**Author:** [@sairam\_kadakuntla](https://discuss.elastic.co/u/sairam_kadakuntla)\
**Replies:** 0\
**Last updated:** [July 18, 2023, 11:51am UTC](https://discuss.elastic.co/t/how-to-add-labels-in-apm-for-python-lamda-to-reflect-in-kibana/338665 "2023-07-18T11:51:13Z")

</div>

i have created a elastic apm object like client = Client({ 'SERVICE\_NAME': os.environ.get("ELASTIC\_APM\_SERVICE\_NAME"), 'SERVER\_URL': os.environ.get("ELASTIC\_APM\_LAMBDA\_APM\_SERVER") }) starting with client.begin\_trans…

---

## [Elastic Agent by Docker Image](https://discuss.elastic.co/t/elastic-agent-by-docker-image/338636)

<div class="topic-metadata">

**Author:** [@Retrogamer](https://discuss.elastic.co/u/Retrogamer)\
**Replies:** 0\
**Last updated:** [July 18, 2023, 8:56am UTC](https://discuss.elastic.co/t/elastic-agent-by-docker-image/338636 "2023-07-18T08:56:05Z")

</div>

I want to deploy Stand-alone Elastic Agent using Docker image. I followed the instruction in this page but, I am not sure which environment variables I should use to deploy the Agent as Stand-alone. Elastic Search and Ki…

---

## [Need help with Elastic agent installation](https://discuss.elastic.co/t/need-help-with-elastic-agent-installation/338570)

<div class="topic-metadata">

**Author:** [@Retrogamer](https://discuss.elastic.co/u/Retrogamer)\
**Replies:** 3\
**Last updated:** [July 17, 2023, 2:25pm UTC](https://discuss.elastic.co/t/need-help-with-elastic-agent-installation/338570 "2023-07-17T14:25:27Z")

</div>

It has been a few days that I am going through all documentations to install Elastic-agent either with Fleet Server or Stand-alone, but still, I have not been able to understand how each components works, what is the pre…

---

## [In Elastic Cloud field type is correct i.e. keyword](https://discuss.elastic.co/t/in-elastic-cloud-field-type-is-correct-i-e-keyword/338368)

<div class="topic-metadata">

**Author:** [@Nishant\_Chauhan](https://discuss.elastic.co/u/Nishant_Chauhan)\
**Replies:** 0\
**Last updated:** [July 14, 2023, 4:35am UTC](https://discuss.elastic.co/t/in-elastic-cloud-field-type-is-correct-i-e-keyword/338368 "2023-07-14T04:35:13Z")

</div>

In Elastic Cloud, when I install any integration data ingest in proper field type i.e. keyword. However, in local deployment, when i install any integration data always comes in text field type.

---

## [Documentation on running our own elastic package storage](https://discuss.elastic.co/t/documentation-on-running-our-own-elastic-package-storage/338274)

<div class="topic-metadata">

**Author:** [@hari\_ibm](https://discuss.elastic.co/u/hari_ibm)\
**Replies:** 0\
**Last updated:** [July 13, 2023, 4:43am UTC](https://discuss.elastic.co/t/documentation-on-running-our-own-elastic-package-storage/338274 "2023-07-13T04:43:09Z")

</div>

Documentation on running our own elastic package storage I have build custom integration and also have setup our own elastic package registry? I couldn't able to find documentation on pushing the package to my registry

---

## [Not able to fetch data from openshift cluster, when using different namespace](https://discuss.elastic.co/t/not-able-to-fetch-data-from-openshift-cluster-when-using-different-namespace/338232)

<div class="topic-metadata">

**Author:** [@suryakant.k](https://discuss.elastic.co/u/suryakant.k)\
**Replies:** 0\
**Last updated:** [July 12, 2023, 2:12pm UTC](https://discuss.elastic.co/t/not-able-to-fetch-data-from-openshift-cluster-when-using-different-namespace/338232 "2023-07-12T14:12:16Z")

</div>

I need to add elastic agent host in openshift kubernetes cluster, When I am changing namespace in yaml file to elk from kube-system, Pods are not getting ready, daemonset is not ready. But when I am using kube-system a…

---

## [When namespace in kube-state-metrics are changed from kube-system to other, Daemonset is not ready](https://discuss.elastic.co/t/when-namespace-in-kube-state-metrics-are-changed-from-kube-system-to-other-daemonset-is-not-ready/338231)

<div class="topic-metadata">

**Author:** [@suryakant.k](https://discuss.elastic.co/u/suryakant.k)\
**Replies:** 0\
**Last updated:** [July 12, 2023, 1:55pm UTC](https://discuss.elastic.co/t/when-namespace-in-kube-state-metrics-are-changed-from-kube-system-to-other-daemonset-is-not-ready/338231 "2023-07-12T13:55:54Z")

</div>

I want to install a elastic-agent in openshift kubernetes cluster, for that I was installing a kube-state-metrics with elk namespace as I dont want to install it in kube-system namespace. After running command, I get th…

---

## [Values field event.action for Cisco ASA integration](https://discuss.elastic.co/t/values-field-event-action-for-cisco-asa-integration/337794)

<div class="topic-metadata">

**Author:** [@frederikvandeputte](https://discuss.elastic.co/u/frederikvandeputte)\
**Replies:** 6\
**Last updated:** [July 12, 2023, 2:04pm UTC](https://discuss.elastic.co/t/values-field-event-action-for-cisco-asa-integration/337794 "2023-07-12T14:04:30Z")

</div>

Hi Currently parsed events coming from Cisco ASA firewall ingest pipeline show 4 types of values in field event.action: firewall-rule; flow-expiration; flow-creation and error. Value "firewall-rule" is very much a us…

---

## [Documentation on pushing a custom agent to Elastic packages artifactory](https://discuss.elastic.co/t/documentation-on-pushing-a-custom-agent-to-elastic-packages-artifactory/338000)

<div class="topic-metadata">

**Author:** [@hari\_ibm](https://discuss.elastic.co/u/hari_ibm)\
**Replies:** 6\
**Last updated:** [July 11, 2023, 1:45pm UTC](https://discuss.elastic.co/t/documentation-on-pushing-a-custom-agent-to-elastic-packages-artifactory/338000 "2023-07-11T13:45:21Z")

</div>

I would like to develop an custom agent and push to our own Elastic packages artifactory

---

## [System.auth.ssh.event field not created](https://discuss.elastic.co/t/system-auth-ssh-event-field-not-created/338027)

<div class="topic-metadata">

**Author:** [@Nishant\_Chauhan](https://discuss.elastic.co/u/Nishant_Chauhan)\
**Replies:** 0\
**Last updated:** [July 10, 2023, 12:41pm UTC](https://discuss.elastic.co/t/system-auth-ssh-event-field-not-created/338027 "2023-07-10T12:41:59Z")

</div>

I installed "System" Integration into a policy. however ssh dashboard is not working. \[root@elastic-agent-8-nis elastic-agent-8.7.1-linux-x86\_64\]# sudo elastic-agent status State: HEALTHY Message: Running Fleet St…

---

## [Getting 1 of 19 shards failed on kibana dashboard](https://discuss.elastic.co/t/getting-1-of-19-shards-failed-on-kibana-dashboard/337703)

<div class="topic-metadata">

**Author:** [@Nishant\_Chauhan](https://discuss.elastic.co/u/Nishant_Chauhan)\
**Replies:** 0\
**Last updated:** [July 5, 2023, 5:20pm UTC](https://discuss.elastic.co/t/getting-1-of-19-shards-failed-on-kibana-dashboard/337703 "2023-07-05T17:20:31Z")

</div>

Hi, I have installed elastic agent version 7.17, on fleet page it shows healthy. However when i go to its dashboard, it is showing below error on all dashboards. ## illegal\_argument\_exception at \`shard\` 0\`index\` metri…

---

## [Elastic-agent not connecting to fleet server](https://discuss.elastic.co/t/elastic-agent-not-connecting-to-fleet-server/337744)

<div class="topic-metadata">

**Author:** [@pennywise01](https://discuss.elastic.co/u/pennywise01)\
**Replies:** 0\
**Last updated:** [July 6, 2023, 4:30am UTC](https://discuss.elastic.co/t/elastic-agent-not-connecting-to-fleet-server/337744 "2023-07-06T04:30:40Z")

</div>

Hi, I am still new to this elastic-agent stuff. I am trying to connect my elastic agent that i want to install on my vm on GCP to connect to my fleet server on AWS EC2. I have already configured firewall rules to allow c…

---

## [Elastic Agent - Remove Unused Beats](https://discuss.elastic.co/t/elastic-agent-remove-unused-beats/337726)

<div class="topic-metadata">

**Author:** [@RichardH1](https://discuss.elastic.co/u/RichardH1)\
**Replies:** 0\
**Last updated:** [July 5, 2023, 10:36pm UTC](https://discuss.elastic.co/t/elastic-agent-remove-unused-beats/337726 "2023-07-05T22:36:44Z")

</div>

Hi, We want to use Elastic Agent for our server deployments but the package size is larger than competing technologies. 90% of our servers just need Metricbeat installed so I'm wondering if we can strip out the other be…

---

## [Add a customizable ID for package policy](https://discuss.elastic.co/t/add-a-customizable-id-for-package-policy/337690)

<div class="topic-metadata">

**Author:** [@Bearloggs](https://discuss.elastic.co/u/Bearloggs)\
**Replies:** 2\
**Last updated:** [July 5, 2023, 8:58pm UTC](https://discuss.elastic.co/t/add-a-customizable-id-for-package-policy/337690 "2023-07-05T20:58:05Z")

</div>

Hello, I am trying to create a policy package using the Kibana Dev Tools and I wondered if it was possible to apply a unique customizable ID. For example, I want to create osquery manager package policy with ID "osquer…

---

## [Vulnerability is not being allowed in event.category](https://discuss.elastic.co/t/vulnerability-is-not-being-allowed-in-event-category/337674)

<div class="topic-metadata">

**Author:** [@hodgepodge](https://discuss.elastic.co/u/hodgepodge)\
**Replies:** 2\
**Last updated:** [July 5, 2023, 7:59pm UTC](https://discuss.elastic.co/t/vulnerability-is-not-being-allowed-in-event-category/337674 "2023-07-05T19:59:51Z")

</div>

I am seeing this failure while testing pipeline of integration: \[0\] parsing field value failed: field "event.category"'s value "vulnerability" is not one of the allowed values (authentication, configuration, database, d…

---

## [Enrolling elastic-agent, the production-ready way?](https://discuss.elastic.co/t/enrolling-elastic-agent-the-production-ready-way/337697)

<div class="topic-metadata">

**Author:** [@UPPERCASE](https://discuss.elastic.co/u/UPPERCASE)\
**Replies:** 5\
**Last updated:** [July 5, 2023, 7:07pm UTC](https://discuss.elastic.co/t/enrolling-elastic-agent-the-production-ready-way/337697 "2023-07-05T19:07:39Z")

</div>

I want to use Fleet, but I have some doubts about the documented deployment method. I think it would've been better if it was possible to just install the elastic-agent as an RPM/DEB and then configure a yaml file, then …

---

## [Logs are getting parsed in messages field for M365 Defender Logs](https://discuss.elastic.co/t/logs-are-getting-parsed-in-messages-field-for-m365-defender-logs/337698)

<div class="topic-metadata">

**Author:** [@elastic12](https://discuss.elastic.co/u/elastic12)\
**Replies:** 0\
**Last updated:** [July 5, 2023, 4:27pm UTC](https://discuss.elastic.co/t/logs-are-getting-parsed-in-messages-field-for-m365-defender-logs/337698 "2023-07-05T16:27:11Z")

</div>

The issue is with the logs in Microsoft 365 Defender. All of the logs are being stored in a single message field, instead of being stored in individual fields as shown in Elasticsearch documentation. Previously, the logs…

---

## [Fleet server is Unhealthy](https://discuss.elastic.co/t/fleet-server-is-unhealthy/337194)

<div class="topic-metadata">

**Author:** [@David\_Arshakyan](https://discuss.elastic.co/u/David_Arshakyan)\
**Replies:** 7\
**Last updated:** [July 3, 2023, 2:08pm UTC](https://discuss.elastic.co/t/fleet-server-is-unhealthy/337194 "2023-07-03T14:08:20Z")

</div>

Hi All, I have a problem to setup Fleet server. When I add Fleet Server on my hosts, I notice that the node goes Offline. I checked Settings, Logs on Kibana, Logs on host, and didn't find anything strange. You can find …

---

## [Incoorporate APM agent logging with application logging](https://discuss.elastic.co/t/incoorporate-apm-agent-logging-with-application-logging/337464)

<div class="topic-metadata">

**Author:** [@Smoke](https://discuss.elastic.co/u/Smoke)\
**Replies:** 0\
**Last updated:** [July 3, 2023, 1:38pm UTC](https://discuss.elastic.co/t/incoorporate-apm-agent-logging-with-application-logging/337464 "2023-07-03T13:38:58Z")

</div>

Hello all, I am trying to incoorporate the logging coming from the apm agent with my application logging. However, I do not seem to be able to figure out how to use the custom layout class that I defined and use for my …

---

## [Docker integration not collecting logs](https://discuss.elastic.co/t/docker-integration-not-collecting-logs/337096)

<div class="topic-metadata">

**Author:** [@glenbot](https://discuss.elastic.co/u/glenbot)\
**Replies:** 0\
**Last updated:** [June 28, 2023, 2:12pm UTC](https://discuss.elastic.co/t/docker-integration-not-collecting-logs/337096 "2023-06-28T14:12:44Z")

</div>

The docker integration is collecting metrics perfectly but not logs. Versions: Agent: 8.7.1 Docker Integration: 2.6.0 I have tried changing the container log path to: /var/lib/docker/containers//-json.log and /var…

---

## [Elastic-agent visualizations in non-default space](https://discuss.elastic.co/t/elastic-agent-visualizations-in-non-default-space/337088)

<div class="topic-metadata">

**Author:** [@lduvnjak](https://discuss.elastic.co/u/lduvnjak)\
**Replies:** 0\
**Last updated:** [June 28, 2023, 1:44pm UTC](https://discuss.elastic.co/t/elastic-agent-visualizations-in-non-default-space/337088 "2023-06-28T13:44:20Z")

</div>

Hello Everyone, Is there any way to make the visualizations which are automatically created upon applying an Integration to an Agent Policy, be created in a space other than Default. This would be interesting for us so…

---

## [Agent stopped talking to Fleet](https://discuss.elastic.co/t/agent-stopped-talking-to-fleet/337074)

<div class="topic-metadata">

**Author:** [@willsy](https://discuss.elastic.co/u/willsy)\
**Replies:** 0\
**Last updated:** [June 28, 2023, 12:10pm UTC](https://discuss.elastic.co/t/agent-stopped-talking-to-fleet/337074 "2023-06-28T12:10:46Z")

</div>

After sucessfully adding various fleet agents to my fleet server aftr a few days all of them stopped, including the fleet server itself. I have the log file of the agent so just wondering if someone can point me in the r…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elastic-agent/91.md?page=31)

[Next page](https://discuss.elastic.co/c/elastic-stack/elastic-agent/91.md?page=33)
