# Elastic Agent

**URL:** https://discuss.elastic.co/c/elastic-stack/elastic-agent/91.md?page=33

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 34

---

## [Monitoring Elastic Agent integration logs](https://discuss.elastic.co/t/monitoring-elastic-agent-integration-logs/337054)

<div class="topic-metadata">

**Author:** [@DyRS\_16](https://discuss.elastic.co/u/DyRS_16)\
**Replies:** 0\
**Last updated:** [June 28, 2023, 8:40am UTC](https://discuss.elastic.co/t/monitoring-elastic-agent-integration-logs/337054 "2023-06-28T08:40:43Z")

</div>

Hi community, I would like to monitor when there is an integration that stopped sending logs during a certain period of time. Something similar to the "Missing monitoring data" from the Stack Monitoring, but applied to …

---

## [Dynamic instances of Elastic Agent](https://discuss.elastic.co/t/dynamic-instances-of-elastic-agent/337005)

<div class="topic-metadata">

**Author:** [@hti](https://discuss.elastic.co/u/hti)\
**Replies:** 0\
**Last updated:** [June 27, 2023, 2:14pm UTC](https://discuss.elastic.co/t/dynamic-instances-of-elastic-agent/337005 "2023-06-27T14:14:11Z")

</div>

Hello, we are spawning multiple Windows Server instances from a golden image. These instances get destroyed and recreated daily. For log collection we installed and enrolled the Elastic Agent in the golden image. We do…

---

## [NodeJS proxy](https://discuss.elastic.co/t/nodejs-proxy/336921)

<div class="topic-metadata">

**Author:** [@sasheks](https://discuss.elastic.co/u/sasheks)\
**Replies:** 0\
**Last updated:** [June 26, 2023, 4:01pm UTC](https://discuss.elastic.co/t/nodejs-proxy/336921 "2023-06-26T16:01:20Z")

</div>

Hello, hopefully posting this in the correct section. Is there a "recommended" or "best way" to configure a proxy for the agent when using the "elastic-apm-node" package? I couldn't find anything official in the documen…

---

## [cURL does not download the Elastic Agent, only on one of our sites in Amsterdam (otherwise cURL works fine)](https://discuss.elastic.co/t/curl-does-not-download-the-elastic-agent-only-on-one-of-our-sites-in-amsterdam-otherwise-curl-works-fine/336837)

<div class="topic-metadata">

**Author:** [@SedonD](https://discuss.elastic.co/u/SedonD)\
**Replies:** 9\
**Last updated:** [June 26, 2023, 12:37pm UTC](https://discuss.elastic.co/t/curl-does-not-download-the-elastic-agent-only-on-one-of-our-sites-in-amsterdam-otherwise-curl-works-fine/336837 "2023-06-26T12:37:39Z")

</div>

Hi there, Has anyone ever encountered this issue, if so we would appreciate some guidance? Thanks in advance, Br, SedonD ++++edit: What I have seen so far....(something like this) and/or

---

## [How to prevent a duplcation of collecting logs](https://discuss.elastic.co/t/how-to-prevent-a-duplcation-of-collecting-logs/336881)

<div class="topic-metadata">

**Author:** [@shlee](https://discuss.elastic.co/u/shlee)\
**Replies:** 0\
**Last updated:** [June 26, 2023, 8:42am UTC](https://discuss.elastic.co/t/how-to-prevent-a-duplcation-of-collecting-logs/336881 "2023-06-26T08:42:37Z")

</div>

Hi, everyone I'm using an aws integration on elastic agent to gather logs from aws cloudwatch start position is "beginning"(default value) When a server where an aws integration is installed downs for a while and st…

---

## [Prebuilt security rule not working with fleet architecture](https://discuss.elastic.co/t/prebuilt-security-rule-not-working-with-fleet-architecture/336779)

<div class="topic-metadata">

**Author:** [@kfdl](https://discuss.elastic.co/u/kfdl)\
**Replies:** 0\
**Last updated:** [June 23, 2023, 2:16pm UTC](https://discuss.elastic.co/t/prebuilt-security-rule-not-working-with-fleet-architecture/336779 "2023-06-23T14:16:31Z")

</div>

Hello All, first of all thank you for this product, your support and your time. :slight\_smile: I am using the Elastic Stack for a couple month to gather all the logs of my servers and i'm using the fleet server to enro…

---

## [Fleet not sending data after cluster upgrade](https://discuss.elastic.co/t/fleet-not-sending-data-after-cluster-upgrade/336625)

<div class="topic-metadata">

**Author:** [@mhoward](https://discuss.elastic.co/u/mhoward)\
**Replies:** 0\
**Last updated:** [June 21, 2023, 8:21pm UTC](https://discuss.elastic.co/t/fleet-not-sending-data-after-cluster-upgrade/336625 "2023-06-21T20:21:00Z")

</div>

Hello. Last Thursday I upgraded an Elastic cluster to 7.17.10. Since then, Fleet has not been collecting any data from agents and the Fleet server itself doesn't appear to communicating with the cluster. After restart…

---

## [Elastic Agent for Windows - visibility of Docker Containers in Kibana](https://discuss.elastic.co/t/elastic-agent-for-windows-visibility-of-docker-containers-in-kibana/336597)

<div class="topic-metadata">

**Author:** [@JackBurton](https://discuss.elastic.co/u/JackBurton)\
**Replies:** 1\
**Last updated:** [June 21, 2023, 3:48pm UTC](https://discuss.elastic.co/t/elastic-agent-for-windows-visibility-of-docker-containers-in-kibana/336597 "2023-06-21T15:48:39Z")

</div>

Hi, we are trialing a move to Fleet and the Elastic Agent. Everything looks good for Linux Hosts, but with our Windows one if I look at Observability \> Infrastructure \> Inventory, filter for the hosts and then select 'Sh…

---

## [Fleet Server Agent Communication issue](https://discuss.elastic.co/t/fleet-server-agent-communication-issue/336599)

<div class="topic-metadata">

**Author:** [@willsy](https://discuss.elastic.co/u/willsy)\
**Replies:** 0\
**Last updated:** [June 21, 2023, 2:43pm UTC](https://discuss.elastic.co/t/fleet-server-agent-communication-issue/336599 "2023-06-21T14:43:25Z")

</div>

My fleet server and agents have become unhealthy and are presenting me with this error elastic\_agent\]\[warn\] Possible transient error during checkin with fleet-server, retrying \[elastic\_agent\]\[error\] Checkin request to …

---

## [Elasitc-Agent APM integration on Kubernetes](https://discuss.elastic.co/t/elasitc-agent-apm-integration-on-kubernetes/336552)

<div class="topic-metadata">

**Author:** [@Piotr\_Pietka](https://discuss.elastic.co/u/Piotr_Pietka)\
**Replies:** 0\
**Last updated:** [June 21, 2023, 8:26am UTC](https://discuss.elastic.co/t/elasitc-agent-apm-integration-on-kubernetes/336552 "2023-06-21T08:26:44Z")

</div>

Hi, I've got deployed elastic-agents on kubernetes (rancher in my case). How to use APM integration to make it accessible to pods in cluster? Do I need to manualy create service or is that accessible by default? What is…

---

## [Issue with Custom Nginx Ingest Pipeline in Elasticsearch 8.7](https://discuss.elastic.co/t/issue-with-custom-nginx-ingest-pipeline-in-elasticsearch-8-7/336543)

<div class="topic-metadata">

**Author:** [@MIDHUN\_KRISHNA](https://discuss.elastic.co/u/MIDHUN_KRISHNA)\
**Replies:** 0\
**Last updated:** [June 21, 2023, 7:32am UTC](https://discuss.elastic.co/t/issue-with-custom-nginx-ingest-pipeline-in-elasticsearch-8-7/336543 "2023-06-21T07:32:57Z")

</div>

I'm currently facing an issue with Elasticsearch 8.7, specifically with the integration of Nginx logs and custom ingest pipelines. I have successfully installed Fleet Server with Elastic Agent, along with the Nginx integ…

---

## [Getting Nginx Logs From docker Container](https://discuss.elastic.co/t/getting-nginx-logs-from-docker-container/336457)

<div class="topic-metadata">

**Author:** [@ethical20](https://discuss.elastic.co/u/ethical20)\
**Replies:** 1\
**Last updated:** [June 20, 2023, 5:36pm UTC](https://discuss.elastic.co/t/getting-nginx-logs-from-docker-container/336457 "2023-06-20T17:36:40Z")

</div>

Hi All, Usually I used to to read Nginx Logs via the Nginx integration available, but now the nginx app is dockerised within a container. The docker integration available in integrations as i can see will not read the…

---

## [Elastic agent installation failed on windows](https://discuss.elastic.co/t/elastic-agent-installation-failed-on-windows/336424)

<div class="topic-metadata">

**Author:** [@esijati](https://discuss.elastic.co/u/esijati)\
**Replies:** 0\
**Last updated:** [June 20, 2023, 5:23am UTC](https://discuss.elastic.co/t/elastic-agent-installation-failed-on-windows/336424 "2023-06-20T05:23:40Z")

</div>

Fleet managed Elastic agent installation failed on windows With error Error: fail to enroll: fail to execute request to fleet-server: Proxy Authentication Required. Enroll command failed with exist code: 1 Event view…

---

## [Elastic agent and port mirroring](https://discuss.elastic.co/t/elastic-agent-and-port-mirroring/336185)

<div class="topic-metadata">

**Author:** [@Ammar\_Mostafa](https://discuss.elastic.co/u/Ammar_Mostafa)\
**Replies:** 1\
**Last updated:** [June 20, 2023, 12:31am UTC](https://discuss.elastic.co/t/elastic-agent-and-port-mirroring/336185 "2023-06-20T00:31:36Z")

</div>

If i have a server that i make it as destination of port mirroring how can i use this mirrored traffic to ingest it in elastic agent to parse it and deliver it to Elasticsearch.

---

## [\[ERROR\]\[plugins.fleet\] Failed to fetch latest version](https://discuss.elastic.co/t/error-plugins-fleet-failed-to-fetch-latest-version/335115)

<div class="topic-metadata">

**Author:** [@Verdugo\_Gonzalo](https://discuss.elastic.co/u/Verdugo_Gonzalo)\
**Replies:** 2\
**Last updated:** [June 16, 2023, 5:11pm UTC](https://discuss.elastic.co/t/error-plugins-fleet-failed-to-fetch-latest-version/335115 "2023-06-16T17:11:30Z")

</div>

Hello everyone I have the same error that is shown in this closed post: (Fleet server loading slowly) Internet access goes through a proxy, but throwing curl to said URL responds without problems. Also added this info …

---

## [DataStream field host.id is being replaced with a guid in elastic integration. How do I prevent that?](https://discuss.elastic.co/t/datastream-field-host-id-is-being-replaced-with-a-guid-in-elastic-integration-how-do-i-prevent-that/336228)

<div class="topic-metadata">

**Author:** [@hodgepodge](https://discuss.elastic.co/u/hodgepodge)\
**Replies:** 0\
**Last updated:** [June 16, 2023, 1:12pm UTC](https://discuss.elastic.co/t/datastream-field-host-id-is-being-replaced-with-a-guid-in-elastic-integration-how-do-i-prevent-that/336228 "2023-06-16T13:12:18Z")

</div>

Data on target machine is stored in a ndjson logfile and is read by filebeat/elastic-agent then transferred to fleet server agent but the host.id in the Elasticsearch index is no longer the original value stored in the n…

---

## [Using the command line to install the elastic agent, a port error occurs](https://discuss.elastic.co/t/using-the-command-line-to-install-the-elastic-agent-a-port-error-occurs/336035)

<div class="topic-metadata">

**Author:** [@xqaiviwjxzw](https://discuss.elastic.co/u/xqaiviwjxzw)\
**Replies:** 3\
**Last updated:** [June 16, 2023, 11:58am UTC](https://discuss.elastic.co/t/using-the-command-line-to-install-the-elastic-agent-a-port-error-occurs/336035 "2023-06-16T11:58:10Z")

</div>

Using the command line to install the elastic agent, a port error occurs,the access port is communicable,what is the reason? How to solve it? Hope to get a reply, thank you sudo ./elastic-agent install -f --url=https:/…

---

## [Status alerting](https://discuss.elastic.co/t/status-alerting/335403)

<div class="topic-metadata">

**Author:** [@Naina\_Sharma](https://discuss.elastic.co/u/Naina_Sharma)\
**Replies:** 1\
**Last updated:** [June 16, 2023, 11:42am UTC](https://discuss.elastic.co/t/status-alerting/335403 "2023-06-16T11:42:30Z")

</div>

I am trying to create alerts where I want to check if a value of a field stays the same for lets say a minute. Right now I am able to check the number of pods that are pending in the last minute, using document count an…

---

## [OCI( oracle ) Integration elastic-agent](https://discuss.elastic.co/t/oci-oracle-integration-elastic-agent/336207)

<div class="topic-metadata">

**Author:** [@Death](https://discuss.elastic.co/u/Death)\
**Replies:** 0\
**Last updated:** [June 16, 2023, 9:50am UTC](https://discuss.elastic.co/t/oci-oracle-integration-elastic-agent/336207 "2023-06-16T09:50:21Z")

</div>

Hello, can be to know, well be created native connector to OCI ( Oracle Cloud Inf) for get logs from Audit oracle and logs Load Balancer and WAFv2 or Edge policy? whether expansion of support of Oracle is planned except…

---

## [Problem configuring "Custom configurations" in the "Custom Logs" integration of Elastic Agent](https://discuss.elastic.co/t/problem-configuring-custom-configurations-in-the-custom-logs-integration-of-elastic-agent/336102)

<div class="topic-metadata">

**Author:** [@Emilio\_Bruno](https://discuss.elastic.co/u/Emilio_Bruno)\
**Replies:** 0\
**Last updated:** [June 15, 2023, 1:38pm UTC](https://discuss.elastic.co/t/problem-configuring-custom-configurations-in-the-custom-logs-integration-of-elastic-agent/336102 "2023-06-15T13:38:38Z")

</div>

Hello, we are trying to replace our filebeat configuration using the new elastic agent. We had no problem to ingest the logs (we are using the Custom Logs integration), we have problem when we try to add custom propert…

---

## [Squid Logs \[beta\] for Elastic Agent](https://discuss.elastic.co/t/squid-logs-beta-for-elastic-agent/335999)

<div class="topic-metadata">

**Author:** [@dmgeurts](https://discuss.elastic.co/u/dmgeurts)\
**Replies:** 2\
**Last updated:** [June 15, 2023, 10:15am UTC](https://discuss.elastic.co/t/squid-logs-beta-for-elastic-agent/335999 "2023-06-15T10:15:15Z")

</div>

Looking at this document it mentions using a Squid integration for Elastic Agent: Squid Logs | Elastic docs However, In my 8.8.1 Fleet server /app/home#/tutorial/squidLogs only has instructions for Filebeat, which I get…

---

## [Elastic Agent Cloudwatch is not fetching all data](https://discuss.elastic.co/t/elastic-agent-cloudwatch-is-not-fetching-all-data/336047)

<div class="topic-metadata">

**Author:** [@slogger](https://discuss.elastic.co/u/slogger)\
**Replies:** 0\
**Last updated:** [June 15, 2023, 7:21am UTC](https://discuss.elastic.co/t/elastic-agent-cloudwatch-is-not-fetching-all-data/336047 "2023-06-15T07:21:11Z")

</div>

Hello I have our elastic agents collecting metrics about a MSK Kafka cluster using the following config: - namespace: AWS/Kafka And I am filtering by eu-central-1 Thats it. It used to work 100%, but now it is not pu…

---

## [Elastic Agent 8.8.0 disk space requirement](https://discuss.elastic.co/t/elastic-agent-8-8-0-disk-space-requirement/334723)

<div class="topic-metadata">

**Author:** [@schapman](https://discuss.elastic.co/u/schapman)\
**Replies:** 6\
**Last updated:** [June 14, 2023, 2:49pm UTC](https://discuss.elastic.co/t/elastic-agent-8-8-0-disk-space-requirement/334723 "2023-06-14T14:49:08Z")

</div>

Just a heads up if installing the latest elastic agent on Linux servers with relatively small free space... It looks like the elastic-agent's requirement for disk space has increased (almost doubled?) over the past year…

---

## [Fleet not working after update](https://discuss.elastic.co/t/fleet-not-working-after-update/335950)

<div class="topic-metadata">

**Author:** [@acosta353](https://discuss.elastic.co/u/acosta353)\
**Replies:** 0\
**Last updated:** [June 14, 2023, 8:33am UTC](https://discuss.elastic.co/t/fleet-not-working-after-update/335950 "2023-06-14T08:33:19Z")

</div>

Hello, Unfortunately, by mistake, one of my elasticsearch hosts updated from version 8.5.3 to 8.8.0, so this caused a lot of problems with my installation. I've already updated the other 2 elasticserver hosts, but now …

---

## [This output type currently does not support connectivity to a remote Elasticsearch cluster](https://discuss.elastic.co/t/this-output-type-currently-does-not-support-connectivity-to-a-remote-elasticsearch-cluster/335914)

<div class="topic-metadata">

**Author:** [@Verdugo\_Gonzalo](https://discuss.elastic.co/u/Verdugo_Gonzalo)\
**Replies:** 0\
**Last updated:** [June 13, 2023, 8:45pm UTC](https://discuss.elastic.co/t/this-output-type-currently-does-not-support-connectivity-to-a-remote-elasticsearch-cluster/335914 "2023-06-13T20:45:26Z")

</div>

Greetings, I have the following error in fleet that I can't fix. This output type currently does not support connectivity to a remote Elasticsearch cluster. I share the elasticsearch.yml, maybe some configuration is g…

---

## [Elastic agent unable to send logs to elasticsearch](https://discuss.elastic.co/t/elastic-agent-unable-to-send-logs-to-elasticsearch/335870)

<div class="topic-metadata">

**Author:** [@kafikone](https://discuss.elastic.co/u/kafikone)\
**Replies:** 1\
**Last updated:** [June 13, 2023, 6:47pm UTC](https://discuss.elastic.co/t/elastic-agent-unable-to-send-logs-to-elasticsearch/335870 "2023-06-13T18:47:51Z")

</div>

I deployed elasticsearch, kibana and logstash on a CentOS 7 virtual machine, and everything is working correctly. Then I created a fleet server and installed an elastic agent on a Windows 11 Vm. The status of my agent is…

---

## [Fleet-server is unauthorized on indice](https://discuss.elastic.co/t/fleet-server-is-unauthorized-on-indice/332566)

<div class="topic-metadata">

**Author:** [@stenbot1](https://discuss.elastic.co/u/stenbot1)\
**Replies:** 3\
**Last updated:** [June 13, 2023, 5:59pm UTC](https://discuss.elastic.co/t/fleet-server-is-unauthorized-on-indice/332566 "2023-06-13T17:59:56Z")

</div>

Hello! I am pretty green when it comes to Elastic but I recently set up a brand new stack to test ingesting a log file. I installed the Elastic Agent on a Windows machine that outputs logs to a file. I have the integrat…

---

## [Understanding Agent Status Value Matching and Check-in Criteria in Elastic Stack](https://discuss.elastic.co/t/understanding-agent-status-value-matching-and-check-in-criteria-in-elastic-stack/335829)

<div class="topic-metadata">

**Author:** [@Erick\_Choi](https://discuss.elastic.co/u/Erick_Choi)\
**Replies:** 0\
**Last updated:** [June 13, 2023, 7:15am UTC](https://discuss.elastic.co/t/understanding-agent-status-value-matching-and-check-in-criteria-in-elastic-stack/335829 "2023-06-13T07:15:00Z")

</div>

Hello, I have several questions regarding the agent status value matching as well as check-in criteria in Elastic Stack. How is the matching process between unit.state field values for agent status information in Inde…

---

## [Var/run/elastic-agent.sock: connect: no such file or directory](https://discuss.elastic.co/t/var-run-elastic-agent-sock-connect-no-such-file-or-directory/335817)

<div class="topic-metadata">

**Author:** [@xqaiviwjxzw](https://discuss.elastic.co/u/xqaiviwjxzw)\
**Replies:** 0\
**Last updated:** [June 13, 2023, 3:31am UTC](https://discuss.elastic.co/t/var-run-elastic-agent-sock-connect-no-such-file-or-directory/335817 "2023-06-13T03:31:49Z")

</div>

The installation of the elastic agent is not successful, and the following error is displayed when executing the elastic-agent status query. What is the solution? % sudo /Library/Elastic/Agent/elastic-agent status Error…

---

## [Is there a way to avoid elastic agent installation on host?](https://discuss.elastic.co/t/is-there-a-way-to-avoid-elastic-agent-installation-on-host/335643)

<div class="topic-metadata">

**Author:** [@Marcos\_Ivan\_Robles\_H](https://discuss.elastic.co/u/Marcos_Ivan_Robles_H)\
**Replies:** 0\
**Last updated:** [June 9, 2023, 3:49pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-avoid-elastic-agent-installation-on-host/335643 "2023-06-09T15:49:39Z")

</div>

I wonder if it is possible to enroll to the predefined elastic agent in cloud without having to install it on my local host or any host. So far. I understand elastic agent is installed by default in cloud environments. …

[Previous page](https://discuss.elastic.co/c/elastic-stack/elastic-agent/91.md?page=32)

[Next page](https://discuss.elastic.co/c/elastic-stack/elastic-agent/91.md?page=34)
