# Elastic Agent

**URL:** https://discuss.elastic.co/c/elastic-stack/elastic-agent/91.md?page=35

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 36

---

## [How to monitor host machine by using elastic agent docker container](https://discuss.elastic.co/t/how-to-monitor-host-machine-by-using-elastic-agent-docker-container/333938)

<div class="topic-metadata">

**Author:** [@Kelvin\_Chan](https://discuss.elastic.co/u/Kelvin_Chan)\
**Replies:** 2\
**Last updated:** [May 22, 2023, 9:05am UTC](https://discuss.elastic.co/t/how-to-monitor-host-machine-by-using-elastic-agent-docker-container/333938 "2023-05-22T09:05:27Z")

</div>

Container is isolated, which means i do not have enough privilege to access other container. What i did is to mount log files to elastic agent, but it does not solve metricbeat problem that can not access system stats. T…

---

## [Elastic Agent's elasticsearch integration SSL settings does not work with self-signed cert](https://discuss.elastic.co/t/elastic-agents-elasticsearch-integration-ssl-settings-does-not-work-with-self-signed-cert/333306)

<div class="topic-metadata">

**Author:** [@Kelvin\_Chan](https://discuss.elastic.co/u/Kelvin_Chan)\
**Replies:** 3\
**Last updated:** [May 20, 2023, 12:03am UTC](https://discuss.elastic.co/t/elastic-agents-elasticsearch-integration-ssl-settings-does-not-work-with-self-signed-cert/333306 "2023-05-20T00:03:43Z")

</div>

I uses elastic agent to monitor elasticsearch, kibana, logstash and postgresql. Elastic Agent can send all monitoring data to elasticsearch excluding elasticsearch metrics data. This is my elasticsearch integration metr…

---

## [@elastic/apm-rum-angular Integration with Angular 16 Not Working](https://discuss.elastic.co/t/elastic-apm-rum-angular-integration-with-angular-16-not-working/333819)

<div class="topic-metadata">

**Author:** [@Tucker\_Schell](https://discuss.elastic.co/u/Tucker_Schell)\
**Replies:** 0\
**Last updated:** [May 18, 2023, 9:37pm UTC](https://discuss.elastic.co/t/elastic-apm-rum-angular-integration-with-angular-16-not-working/333819 "2023-05-18T21:37:46Z")

</div>

Hi, two weeks ago I integrated the apm-rum-angular package (2.1.7) in an Angular 15 application by following this doc and it worked just fine: Today, I updated Angular to 16 and now I get the following error: 'ApmMod…

---

## [Apply ingest pipeline to custom logs](https://discuss.elastic.co/t/apply-ingest-pipeline-to-custom-logs/333539)

<div class="topic-metadata">

**Author:** [@temuccio](https://discuss.elastic.co/u/temuccio)\
**Replies:** 1\
**Last updated:** [May 18, 2023, 8:51pm UTC](https://discuss.elastic.co/t/apply-ingest-pipeline-to-custom-logs/333539 "2023-05-18T20:51:58Z")

</div>

Hi all. I have installed a fresh installation of stack ELK. Into kibana, I have installed a Elastic Agent for get custom logs from a syslog server. It works fine ad I see the log. I have make a Ingest Pipeline and I …

---

## [Issue to setup Fleet Server](https://discuss.elastic.co/t/issue-to-setup-fleet-server/333209)

<div class="topic-metadata">

**Author:** [@Shoeb\_Masum](https://discuss.elastic.co/u/Shoeb_Masum)\
**Replies:** 3\
**Last updated:** [May 17, 2023, 1:48pm UTC](https://discuss.elastic.co/t/issue-to-setup-fleet-server/333209 "2023-05-17T13:48:49Z")

</div>

Continuing the discussion from How to get started with Elastic APM?: @Wave I've taken two VM as suggested - VM1 (elasticsearch, kibana): 192.168.1.41 VM2 (Fleet Elastic Agent): 192.168.1.42 I've install Elasticsearc…

---

## [Elastic Agent silent install](https://discuss.elastic.co/t/elastic-agent-silent-install/329543)

<div class="topic-metadata">

**Author:** [@poky](https://discuss.elastic.co/u/poky)\
**Replies:** 2\
**Last updated:** [May 15, 2023, 7:47pm UTC](https://discuss.elastic.co/t/elastic-agent-silent-install/329543 "2023-05-15T19:47:49Z")

</div>

Hi Folks, I want to distribute the Elastic Agent through Windows SCCM onto 100 Windows Server. Therefore, I would like to do a silent install of the elastic Agent on Windows. Is there a way to give all the required pa…

---

## [Please help](https://discuss.elastic.co/t/please-help/333433)

<div class="topic-metadata">

**Author:** [@Bojan\_Dokic](https://discuss.elastic.co/u/Bojan_Dokic)\
**Replies:** 1\
**Last updated:** [May 15, 2023, 5:20pm UTC](https://discuss.elastic.co/t/please-help/333433 "2023-05-15T17:20:18Z")

</div>

I am experiencing following error when trying to install elastic agent on linux macine: Error: fail to enroll: fail to execute request to fleet-server: lookup fleet: Temporary failure in name resolution Error: enroll c…

---

## [Problem with Kubernetes agent status showing as offline](https://discuss.elastic.co/t/problem-with-kubernetes-agent-status-showing-as-offline/333351)

<div class="topic-metadata">

**Author:** [@dbstjdghks25](https://discuss.elastic.co/u/dbstjdghks25)\
**Replies:** 1\
**Last updated:** [May 15, 2023, 10:56am UTC](https://discuss.elastic.co/t/problem-with-kubernetes-agent-status-showing-as-offline/333351 "2023-05-15T10:56:32Z")

</div>

I checked the health of a specific pod in Kubernetes by accessing it, and the fleet appears to be healthy, but the logs are not being sent to the agents and they appear as offline. However, when I check the Elasticsearch…

---

## [Fleet server is offline](https://discuss.elastic.co/t/fleet-server-is-offline/333419)

<div class="topic-metadata">

**Author:** [@samiujan](https://discuss.elastic.co/u/samiujan)\
**Replies:** 0\
**Last updated:** [May 15, 2023, 8:04am UTC](https://discuss.elastic.co/t/fleet-server-is-offline/333419 "2023-05-15T08:04:19Z")

</div>

Hi I am trying to set up APM using Fleet on an on-prem EC2 instance After much back and forth, I got the agent installed and it's running on an unsecured endpoint I want to move it to a secure endpoint and have added …

---

## [Configure host for fleet server/APM agent policy](https://discuss.elastic.co/t/configure-host-for-fleet-server-apm-agent-policy/332507)

<div class="topic-metadata">

**Author:** [@samiujan](https://discuss.elastic.co/u/samiujan)\
**Replies:** 2\
**Last updated:** [May 15, 2023, 7:29am UTC](https://discuss.elastic.co/t/configure-host-for-fleet-server-apm-agent-policy/332507 "2023-05-15T07:29:43Z")

</div>

Hi I have installed Elastic/Kibana 8.7 and am running a Fleet server and APM - this is all running successfully on localhost Now I want to allow access to a NodeJS application on an EC2 and a web app running off S3/clo…

---

## [Suricata Logs Not Received by Elastic Cloud](https://discuss.elastic.co/t/suricata-logs-not-received-by-elastic-cloud/333334)

<div class="topic-metadata">

**Author:** [@Tim\_Mobley](https://discuss.elastic.co/u/Tim_Mobley)\
**Replies:** 0\
**Last updated:** [May 12, 2023, 6:19pm UTC](https://discuss.elastic.co/t/suricata-logs-not-received-by-elastic-cloud/333334 "2023-05-12T18:19:11Z")

</div>

I have set up both the 'Windows' and 'Suricata' integrations, using the same Agent Policy. Both integrations are showing that my client machine is connected. On the client, I have installed the Elastic Agent, however onl…

---

## [Fleet & Elastic Agent not working](https://discuss.elastic.co/t/fleet-elastic-agent-not-working/333282)

<div class="topic-metadata">

**Author:** [@knit](https://discuss.elastic.co/u/knit)\
**Replies:** 0\
**Last updated:** [May 12, 2023, 10:24am UTC](https://discuss.elastic.co/t/fleet-elastic-agent-not-working/333282 "2023-05-12T10:24:29Z")

</div>

Hi Team, We recently moved log data (/var/lib/elasticsearch) from AWS EBS to S3. During this process all the services were stopped except elasticagent. After successful data transfer, integrations through filebeat is wo…

---

## [Adding Processors / Pipelines to an integration attached to a policy breaks running agent (Error creating runner from config: Can only start an input when all related states are finished)](https://discuss.elastic.co/t/adding-processors-pipelines-to-an-integration-attached-to-a-policy-breaks-running-agent-error-creating-runner-from-config-can-only-start-an-input-when-all-related-states-are-finished/332909)

<div class="topic-metadata">

**Author:** [@mehdi-lamrani](https://discuss.elastic.co/u/mehdi-lamrani)\
**Replies:** 1\
**Last updated:** [May 11, 2023, 12:14pm UTC](https://discuss.elastic.co/t/adding-processors-pipelines-to-an-integration-attached-to-a-policy-breaks-running-agent-error-creating-runner-from-config-can-only-start-an-input-when-all-related-states-are-finished/332909 "2023-05-11T12:14:52Z")

</div>

8.7 here, Pretty self explanatory. Steps in the screenshots. Error creating runner from config: Can only start an input when all related states are finished What does related states mean ? there is only that single in…

---

## [How to apply Kubernetes metrics without adding the Elastic agent to Fleet?](https://discuss.elastic.co/t/how-to-apply-kubernetes-metrics-without-adding-the-elastic-agent-to-fleet/333116)

<div class="topic-metadata">

**Author:** [@dbstjdghks25](https://discuss.elastic.co/u/dbstjdghks25)\
**Replies:** 1\
**Last updated:** [May 11, 2023, 4:42am UTC](https://discuss.elastic.co/t/how-to-apply-kubernetes-metrics-without-adding-the-elastic-agent-to-fleet/333116 "2023-05-11T04:42:57Z")

</div>

I want to monitor Kubernetes by adding kubernetes-metricbeat to an existing agent, but when I apply the following YAML file, the agent is additionally registered with Fleet. How can I configure the YAML file to avoid thi…

---

## [Not Able To Install Elastic Agent Onto Windows 10](https://discuss.elastic.co/t/not-able-to-install-elastic-agent-onto-windows-10/332971)

<div class="topic-metadata">

**Author:** [@mx09](https://discuss.elastic.co/u/mx09)\
**Replies:** 2\
**Last updated:** [May 9, 2023, 8:29pm UTC](https://discuss.elastic.co/t/not-able-to-install-elastic-agent-onto-windows-10/332971 "2023-05-09T20:29:52Z")

</div>

Error: unable to perform install command, not executed with Administrator permissions I've tried to add an Agent onto what will be my "Victim Machine" I'm doing this with the Kali Purple instance in a virtual environmen…

---

## [Error Installing Fleet Server Agent on Centralized Host](https://discuss.elastic.co/t/error-installing-fleet-server-agent-on-centralized-host/332310)

<div class="topic-metadata">

**Author:** [@gmosornoza](https://discuss.elastic.co/u/gmosornoza)\
**Replies:** 2\
**Last updated:** [May 9, 2023, 4:55pm UTC](https://discuss.elastic.co/t/error-installing-fleet-server-agent-on-centralized-host/332310 "2023-05-09T16:55:03Z")

</div>

Hi! I'm facing an issue when installing Fleet Server as centralized host. I' running this command sudo ./elastic-agent install \\ --fleet-server-es=https://XXX.XXX.XXX.XXX:9200 \\ --fleet-server-service-token=my\_tok…

---

## [ECK Integration Fleet Kubernetes](https://discuss.elastic.co/t/eck-integration-fleet-kubernetes/332939)

<div class="topic-metadata">

**Author:** [@cboissavy](https://discuss.elastic.co/u/cboissavy)\
**Replies:** 0\
**Last updated:** [May 9, 2023, 1:34pm UTC](https://discuss.elastic.co/t/eck-integration-fleet-kubernetes/332939 "2023-05-09T13:34:51Z")

</div>

Hello, I am using ECK v8.6.2. I have 4 pods elasticsearch and 5 nodes Kubernetes in Scaleway. I have 5 Elastic Agent (one for each nodes) and I added the integration Kubernetes v1.36.0 I have enable "Collect Kubernet…

---

## [Elastic-agent ignores logging level setting](https://discuss.elastic.co/t/elastic-agent-ignores-logging-level-setting/332560)

<div class="topic-metadata">

**Author:** [@vitalyrychkov](https://discuss.elastic.co/u/vitalyrychkov)\
**Replies:** 1\
**Last updated:** [May 9, 2023, 10:07am UTC](https://discuss.elastic.co/t/elastic-agent-ignores-logging-level-setting/332560 "2023-05-09T10:07:38Z")

</div>

I am trying to reduce the output of the elastic-agent containers in Kubernetes. I have added the following parameter to the configmap: agent: logging: level: error and restarted agents. There is still…

---

## [Ingesting multiline fields with the Grok processor](https://discuss.elastic.co/t/ingesting-multiline-fields-with-the-grok-processor/332876)

<div class="topic-metadata">

**Author:** [@adis](https://discuss.elastic.co/u/adis)\
**Replies:** 0\
**Last updated:** [May 9, 2023, 6:54am UTC](https://discuss.elastic.co/t/ingesting-multiline-fields-with-the-grok-processor/332876 "2023-05-09T06:54:06Z")

</div>

Hi I've cloned the Postgresql integration pipelines and changed its grok patterns to fit our custom postgresql log format. Almost everything gets parsed correctly with the following grok pattern: %{POSTGRESQL\_REMOTE\_H…

---

## [Customize the indices name for ingesting data by elastic agent](https://discuss.elastic.co/t/customize-the-indices-name-for-ingesting-data-by-elastic-agent/332854)

<div class="topic-metadata">

**Author:** [@Jaydenchan1983](https://discuss.elastic.co/u/Jaydenchan1983)\
**Replies:** 0\
**Last updated:** [May 9, 2023, 2:12am UTC](https://discuss.elastic.co/t/customize-the-indices-name-for-ingesting-data-by-elastic-agent/332854 "2023-05-09T02:12:05Z")

</div>

I have installed elastic agent in 2 web server to collect iis log. Both log data are ingested to same indices. How could set different indices for different server data?

---

## [Elastic Agent excessive cpu / log output in kubernetes](https://discuss.elastic.co/t/elastic-agent-excessive-cpu-log-output-in-kubernetes/330554)

<div class="topic-metadata">

**Author:** [@jlucas](https://discuss.elastic.co/u/jlucas)\
**Replies:** 2\
**Last updated:** [May 8, 2023, 3:24pm UTC](https://discuss.elastic.co/t/elastic-agent-excessive-cpu-log-output-in-kubernetes/330554 "2023-05-08T15:24:23Z")

</div>

Hello, I am noticing some undesirable behavior when using elastic agent within kubernetes on-prem. I have a fleet managed elastic agent running in kubernetes with APM, System, and Kubernetes integrations turned on. I wa…

---

## [Harvester for file is still running](https://discuss.elastic.co/t/harvester-for-file-is-still-running/332813)

<div class="topic-metadata">

**Author:** [@AndersBolager](https://discuss.elastic.co/u/AndersBolager)\
**Replies:** 0\
**Last updated:** [May 8, 2023, 12:09pm UTC](https://discuss.elastic.co/t/harvester-for-file-is-still-running/332813 "2023-05-08T12:09:13Z")

</div>

Hi. On one of my servers, after working for a few weeks, the following loglines are repeated, and nothing ends up on the elasticstack server: {"log.level":"debug","@timestamp":"2023-05-08T13:53:56.309+0200","log.logger…

---

## [Elastic Agent Ouput to Logstash](https://discuss.elastic.co/t/elastic-agent-ouput-to-logstash/329809)

<div class="topic-metadata">

**Author:** [@praveen\_raju](https://discuss.elastic.co/u/praveen_raju)\
**Replies:** 1\
**Last updated:** [May 8, 2023, 11:56am UTC](https://discuss.elastic.co/t/elastic-agent-ouput-to-logstash/329809 "2023-05-08T11:56:51Z")

</div>

Hi, I'm trying to send the data from fleet to Logstash using agent policy which i configured by following below article. But when choose the output from dropdown, options are greyed out as shown figure. Please be no…

---

## [Elastic-agent to logstash mapper\_parsing\_exception with windows system integration](https://discuss.elastic.co/t/elastic-agent-to-logstash-mapper-parsing-exception-with-windows-system-integration/330300)

<div class="topic-metadata">

**Author:** [@irivas95](https://discuss.elastic.co/u/irivas95)\
**Replies:** 1\
**Last updated:** [May 8, 2023, 11:54am UTC](https://discuss.elastic.co/t/elastic-agent-to-logstash-mapper-parsing-exception-with-windows-system-integration/330300 "2023-05-08T11:54:11Z")

</div>

Hi, I am trying to send windows events via an elastic-agent (8.6.0) (with fleet in 8.6.0) to logstash (8.6.0). the eleastic-agent is configured with an agent policy that has a system integration configured as follows: …

---

## [Error: invalid connection string: must include a username unless a service token is provided](https://discuss.elastic.co/t/error-invalid-connection-string-must-include-a-username-unless-a-service-token-is-provided/332668)

<div class="topic-metadata">

**Author:** [@osdacita](https://discuss.elastic.co/u/osdacita)\
**Replies:** 1\
**Last updated:** [May 8, 2023, 11:33am UTC](https://discuss.elastic.co/t/error-invalid-connection-string-must-include-a-username-unless-a-service-token-is-provided/332668 "2023-05-08T11:33:58Z")

</div>

I'm trying to enroll a host using the fleet to properly use EndPoint Security, but trying directly causes problems so I resorted to the following commands: .\\elastic-agent enroll --fleet-server-es=https://:443 --flee…

---

## [No data received to server](https://discuss.elastic.co/t/no-data-received-to-server/332523)

<div class="topic-metadata">

**Author:** [@target\_test](https://discuss.elastic.co/u/target_test)\
**Replies:** 4\
**Last updated:** [May 8, 2023, 5:30am UTC](https://discuss.elastic.co/t/no-data-received-to-server/332523 "2023-05-08T05:30:21Z")

</div>

i have one agent with status healthy but didn't send any data to the elastic i got this problem after copying my windows machine \*extra note this agent use the agent before that already register

---

## [ES agent doesn't feed "host.cpu.usage" metric when CPU loading 100%](https://discuss.elastic.co/t/es-agent-doesnt-feed-host-cpu-usage-metric-when-cpu-loading-100/332231)

<div class="topic-metadata">

**Author:** [@rickywong](https://discuss.elastic.co/u/rickywong)\
**Replies:** 5\
**Last updated:** [May 8, 2023, 4:00am UTC](https://discuss.elastic.co/t/es-agent-doesnt-feed-host-cpu-usage-metric-when-cpu-loading-100/332231 "2023-05-08T04:00:45Z")

</div>

Hi teams, Once my VM CPU loading is up to 100%, ES agent can't feed log to ES cloud. So the detection rules can't work as well. How to solve this problem? Thanks Ricky

---

## [If i use log\_file config. The apm agent is not starting. If i not using this config. Its starting](https://discuss.elastic.co/t/if-i-use-log-file-config-the-apm-agent-is-not-starting-if-i-not-using-this-config-its-starting/332619)

<div class="topic-metadata">

**Author:** [@Stephen\_Joseph](https://discuss.elastic.co/u/Stephen_Joseph)\
**Replies:** 1\
**Last updated:** [May 8, 2023, 3:15am UTC](https://discuss.elastic.co/t/if-i-use-log-file-config-the-apm-agent-is-not-starting-if-i-not-using-this-config-its-starting/332619 "2023-05-08T03:15:08Z")

</div>

APM Server: 8.5.0 Elastic search:8.5.0 Kibana:8.5.0 apm agent: 1.38.0 elasticapm.properties:- recording: true enabled: true server\_urls: http://apm-server.logging.svc.cluster.local:8200 service\_name: test-app log\_fi…

---

## [ECK 8.7.1 elastic agent error](https://discuss.elastic.co/t/eck-8-7-1-elastic-agent-error/332625)

<div class="topic-metadata">

**Author:** [@khteh](https://discuss.elastic.co/u/khteh)\
**Replies:** 1\
**Last updated:** [May 8, 2023, 3:11am UTC](https://discuss.elastic.co/t/eck-8-7-1-elastic-agent-error/332625 "2023-05-08T03:11:43Z")

</div>

Following Quickstart | Elastic Cloud on Kubernetes \[2.7\] | Elastic to install and run ECK fleet on my EKS but observe the following error in the agent logs: \[elastic-agent-agent-gdpzn\] {"log.level":"info","@timestamp":"…

---

## [Integrations Development and \`elastic-package\` Question](https://discuss.elastic.co/t/integrations-development-and-elastic-package-question/330868)

<div class="topic-metadata">

**Author:** [@MakoWish](https://discuss.elastic.co/u/MakoWish)\
**Replies:** 3\
**Last updated:** [May 5, 2023, 2:38pm UTC](https://discuss.elastic.co/t/integrations-development-and-elastic-package-question/330868 "2023-05-05T14:38:08Z")

</div>

I have been contributing a few PR's for enhancements and bug fixes to Integrations lately, and some of the bigger things I have been attempting require testing the package before submitting a PR. I have gotten my environ…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elastic-agent/91.md?page=34)

[Next page](https://discuss.elastic.co/c/elastic-stack/elastic-agent/91.md?page=36)
