# Elastic Agent **URL:** https://discuss.elastic.co/c/elastic-stack/elastic-agent/91.md?page=36 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 37 --- ## [ECK 8.7.1 Fleet agent error "precondition failed: x509: certificate is valid for..."](https://discuss.elastic.co/t/eck-8-7-1-fleet-agent-error-precondition-failed-x509-certificate-is-valid-for/332629)
**Author:** [@khteh](https://discuss.elastic.co/u/khteh)\ **Replies:** 0\ **Last updated:** [May 5, 2023, 9:06am UTC](https://discuss.elastic.co/t/eck-8-7-1-fleet-agent-error-precondition-failed-x509-certificate-is-valid-for/332629 "2023-05-05T09:06:02Z")
Following Quickstart | Elastic Cloud on Kubernetes \[2.7\] | Elastic to install and run ECK fleet on my EKS but observe the following error in the agent logs: \[elastic-agent-agent-kgzn5\] {"log.level":"error","@timestamp":… --- ## [Sophos XG module not separating data into variables ( Fleet And Elastic Agent )](https://discuss.elastic.co/t/sophos-xg-module-not-separating-data-into-variables-fleet-and-elastic-agent/332516)
**Author:** [@Ahmad\_Shrateh](https://discuss.elastic.co/u/Ahmad_Shrateh)\ **Replies:** 0\ **Last updated:** [May 4, 2023, 8:25am UTC](https://discuss.elastic.co/t/sophos-xg-module-not-separating-data-into-variables-fleet-and-elastic-agent/332516 "2023-05-04T08:25:24Z")
I cannot see the fields (variables) in the message. All data is inside a field called event. code any suggestion? --- ## [Error when installing/enrolling Fleet Server](https://discuss.elastic.co/t/error-when-installing-enrolling-fleet-server/332294)
**Author:** [@Miguel\_Azorin](https://discuss.elastic.co/u/Miguel_Azorin)\ **Replies:** 4\ **Last updated:** [May 4, 2023, 9:58am UTC](https://discuss.elastic.co/t/error-when-installing-enrolling-fleet-server/332294 "2023-05-04T09:58:38Z")
Hi, I've been trying to deploy a Fleet Server (ELK stack 7.17.6), but I'm running into a problem I cannot solve, and the logs don't give enough info for me to figure it out (also, there is nothing about this in the elas… --- ## [How to add Azure Service Bus log to elastic](https://discuss.elastic.co/t/how-to-add-azure-service-bus-log-to-elastic/332431)
**Author:** [@abh-remitra](https://discuss.elastic.co/u/abh-remitra)\ **Replies:** 0\ **Last updated:** [May 3, 2023, 1:39pm UTC](https://discuss.elastic.co/t/how-to-add-azure-service-bus-log-to-elastic/332431 "2023-05-03T13:39:32Z")
We have ECE on-prem (8.5.2) and we have recently added some services running in Azure. Looking for recommendations / advice for the best way to collect and ship Azure Service Bus logs to our ES cluster. Thanks in advan… --- ## [Issue parsing azure platform properties](https://discuss.elastic.co/t/issue-parsing-azure-platform-properties/332042)
**Author:** [@intsec](https://discuss.elastic.co/u/intsec)\ **Replies:** 10\ **Last updated:** [May 2, 2023, 4:35pm UTC](https://discuss.elastic.co/t/issue-parsing-azure-platform-properties/332042 "2023-05-02T16:35:51Z")
I am also working with support on this but was hoping to get a faster response here. Anyone using Azure Eventhubs forAppServiceHTTPLogs, I can get the logs to come in but I need to parse the azure.platform.properties fi… --- ## [Upgrade elastic agents using Fleet API](https://discuss.elastic.co/t/upgrade-elastic-agents-using-fleet-api/332194)
**Author:** [@alextg](https://discuss.elastic.co/u/alextg)\ **Replies:** 2\ **Last updated:** [May 2, 2023, 2:06pm UTC](https://discuss.elastic.co/t/upgrade-elastic-agents-using-fleet-api/332194 "2023-05-02T14:06:50Z")
Hi, Is there a way to upgrade elastic agents using Fleet API for both Windows and Linux? --- ## [Elastic defendで取得するログについて](https://discuss.elastic.co/t/elastic-defend/331118)
**Author:** [@e-se](https://discuss.elastic.co/u/e-se)\ **Replies:** 0\ **Last updated:** [April 29, 2023, 8:20am UTC](https://discuss.elastic.co/t/elastic-defend/331118 "2023-04-29T08:20:28Z")
linuxのサーバにelastic agentを導入し、にelastic defend integrationをあてて、logを収集することを検討しています。 そこで疑問です。 Linuxの場合、File、Network、Processのイベントを取得できるようですが、これらは何処で作成されたログになるのでしょうか。 System integrationや、Auditd log integrationなら、設定にファイルを指定する… --- ## [Not able to connect my apm-agent to my apm-server and data transfer from hosted on same server](https://discuss.elastic.co/t/not-able-to-connect-my-apm-agent-to-my-apm-server-and-data-transfer-from-hosted-on-same-server/330627)
**Author:** [@Tataelastic](https://discuss.elastic.co/u/Tataelastic)\ **Replies:** 1\ **Last updated:** [April 28, 2023, 4:39pm UTC](https://discuss.elastic.co/t/not-able-to-connect-my-apm-agent-to-my-apm-server-and-data-transfer-from-hosted-on-same-server/330627 "2023-04-28T16:39:35Z")
I have deployed elasticsearch, kibana, apm-server on same server ip: 10.8.30.220 output for http://10.8.30.220:8200 { "build\_date": "2023-01-31T04:33:06Z", "build\_sha": "71a8b4c241eb5b4609862c8354d2aa2270f6c568", "… --- ## [Azure Logs Integration with ECS logs](https://discuss.elastic.co/t/azure-logs-integration-with-ecs-logs/331041)
**Author:** [@CrystalDesignDR](https://discuss.elastic.co/u/CrystalDesignDR)\ **Replies:** 0\ **Last updated:** [April 28, 2023, 10:03am UTC](https://discuss.elastic.co/t/azure-logs-integration-with-ecs-logs/331041 "2023-04-28T10:03:24Z")
Hi, we are running Elastic Cloud and want to add Application Logs to it with Elastic Agent, these logs need to be correlated with out APM traces. We are running the Elastic Azure Logs Integration with the Elastic Agent… --- ## [Empty alerts in Palo Alto Cortex XDR Integration](https://discuss.elastic.co/t/empty-alerts-in-palo-alto-cortex-xdr-integration/330997)
**Author:** [@dhsmf](https://discuss.elastic.co/u/dhsmf)\ **Replies:** 0\ **Last updated:** [April 28, 2023, 2:05am UTC](https://discuss.elastic.co/t/empty-alerts-in-palo-alto-cortex-xdr-integration/330997 "2023-04-28T02:05:56Z")
I'm planning to use Palo Alto Cortex XDR Integration to ingest alerts for our analyses. It looks that the Integration often brings almost empty alerts (without file hash, process info and so on, showing reply: 0). Is it … --- ## [Best practice for running Elastic Agents in EKS](https://discuss.elastic.co/t/best-practice-for-running-elastic-agents-in-eks/330931)
**Author:** [@mikkoc](https://discuss.elastic.co/u/mikkoc)\ **Replies:** 0\ **Last updated:** [April 27, 2023, 9:16am UTC](https://discuss.elastic.co/t/best-practice-for-running-elastic-agents-in-eks/330931 "2023-04-27T09:16:11Z")
Hello, We run Elastic Agents via Fleet in our EKS cluster, as DaemonSet, with about 20 nodes. We want to monitor and collect AWS Cloudwatch metrics, in addition to Kubernetes logs on each node. How do we go about inst… --- ## [Elastic Agent kubernetes container logs not shipping from nodes](https://discuss.elastic.co/t/elastic-agent-kubernetes-container-logs-not-shipping-from-nodes/330664)
**Author:** [@Rydzu](https://discuss.elastic.co/u/Rydzu)\ **Replies:** 0\ **Last updated:** [April 24, 2023, 2:21pm UTC](https://discuss.elastic.co/t/elastic-agent-kubernetes-container-logs-not-shipping-from-nodes/330664 "2023-04-24T14:21:01Z")
I'm quite fresh with elastic stack and I have a problem with elastic agents on k8. Setup: Both Elastic Stack (v8.7) and k8 (v1.25 with cri-o; 1 master, 3 nodes) are deployed on local environment. Elastic Stack deployed… --- ## [Need help adding Fleet server](https://discuss.elastic.co/t/need-help-adding-fleet-server/330565)
**Author:** [@Tanner\_Sutherlin](https://discuss.elastic.co/u/Tanner_Sutherlin)\ **Replies:** 18\ **Last updated:** [April 23, 2023, 2:52pm UTC](https://discuss.elastic.co/t/need-help-adding-fleet-server/330565 "2023-04-23T14:52:11Z")
I've installed the fleet server on my virtual Ubuntu version 22 machine but I can't get the fleet server to show in Kibana. I checked Ubuntu elastic-agent service and it was showing inactive so I started it with "systemc… --- ## [PlainElastic Agent Installation](https://discuss.elastic.co/t/plainelastic-agent-installation/330402)
**Author:** [@Christian\_V](https://discuss.elastic.co/u/Christian_V)\ **Replies:** 2\ **Last updated:** [April 21, 2023, 5:44am UTC](https://discuss.elastic.co/t/plainelastic-agent-installation/330402 "2023-04-21T05:44:21Z")
Hello, I tried to install via zip/tar on either on windows or linux host, both finished and there is a connection to the self managed fleet server. On Windows if i call diagnost I get the message: Error: failed to fet… --- ## [Customize Elastic Agent modules/integrations just like what we did with Metricbeat using Golang](https://discuss.elastic.co/t/customize-elastic-agent-modules-integrations-just-like-what-we-did-with-metricbeat-using-golang/329283)
**Author:** [@jtrongkhoa](https://discuss.elastic.co/u/jtrongkhoa)\ **Replies:** 1\ **Last updated:** [April 20, 2023, 4:33am UTC](https://discuss.elastic.co/t/customize-elastic-agent-modules-integrations-just-like-what-we-did-with-metricbeat-using-golang/329283 "2023-04-20T04:33:41Z")
Hi all, Our company is considering using Elastic Agent instead of Beats (Metricbeat). But I am curious whether Elastic agent could be customized/extended to collect the metrics that has not been supported yet by the cur… --- ## [Fleet Server Unable to Communicate to Elasticsearch Due to Bad Certificate](https://discuss.elastic.co/t/fleet-server-unable-to-communicate-to-elasticsearch-due-to-bad-certificate/328038)
**Author:** [@Kowshik\_Islam](https://discuss.elastic.co/u/Kowshik_Islam)\ **Replies:** 4\ **Last updated:** [April 19, 2023, 9:13am UTC](https://discuss.elastic.co/t/fleet-server-unable-to-communicate-to-elasticsearch-due-to-bad-certificate/328038 "2023-04-19T09:13:03Z")
Hi, I am having trouble with having my fleet server communicate with elasticsearch cluster. My current stack has have 2 EC2 instance for Elasticsearch (es01, es02), 1 EC2 Instance for Kibana and 1 EC2 instance for Fleet … --- ## [Exiting: error initializing publisher: output type http undefined in filebeat.yml](https://discuss.elastic.co/t/exiting-error-initializing-publisher-output-type-http-undefined-in-filebeat-yml/330258)
**Author:** [@karthic](https://discuss.elastic.co/u/karthic)\ **Replies:** 1\ **Last updated:** [April 19, 2023, 5:39am UTC](https://discuss.elastic.co/t/exiting-error-initializing-publisher-output-type-http-undefined-in-filebeat-yml/330258 "2023-04-19T05:39:28Z")
Hi I need to forward the logs to my own api, In the config, i am using Http.output which says the error "Exiting: error initializing publisher: output type http undefined in filebeat" output.http: url: "https://API… --- ## [Error: fleet-server failed: context canceled](https://discuss.elastic.co/t/error-fleet-server-failed-context-canceled/330050)
**Author:** [@Lelc79](https://discuss.elastic.co/u/Lelc79)\ **Replies:** 3\ **Last updated:** [April 18, 2023, 6:21pm UTC](https://discuss.elastic.co/t/error-fleet-server-failed-context-canceled/330050 "2023-04-18T18:21:28Z")
hello elastic community I have a problem trying to configure the fleet server, I have done the following: Inside Kibana - fleet/settings Fleet server hosts I have put my local server 192.0.1.20 with port 8220 Output… --- ## [My elastic agent's won't send logs without the ssl.verification\_mode: none](https://discuss.elastic.co/t/my-elastic-agents-wont-send-logs-without-the-ssl-verification-mode-none/330228)
**Author:** [@Elier\_Saavedra](https://discuss.elastic.co/u/Elier_Saavedra)\ **Replies:** 0\ **Last updated:** [April 18, 2023, 2:00pm UTC](https://discuss.elastic.co/t/my-elastic-agents-wont-send-logs-without-the-ssl-verification-mode-none/330228 "2023-04-18T14:00:17Z")
Hi, i’ve been having some trouble with the elastic agent, I have 3 agents enrolled (1 Windows 2 Centos 7) all of them are healthy but they won’t send logs if I don’t have the ssl.verification\_mode: none In fleet setting… --- ## [Sysmon events not getting to SOC kibana or hunt - connection issues](https://discuss.elastic.co/t/sysmon-events-not-getting-to-soc-kibana-or-hunt-connection-issues/327966)
**Author:** [@iqworks](https://discuss.elastic.co/u/iqworks)\ **Replies:** 23\ **Last updated:** [April 17, 2023, 11:47pm UTC](https://discuss.elastic.co/t/sysmon-events-not-getting-to-soc-kibana-or-hunt-connection-issues/327966 "2023-04-17T23:47:57Z")
Hi, i am using elasticsearch 8.6.2, Winlogbeat 8.6.2 and sysmon 74 I am trying the ELK system. The data gets into sysmon ok. There are probably many reasons. I was pointing to output.logstash because as I understand … --- ## [Block installation of bundled Npcap via Network Packet Capture integration?](https://discuss.elastic.co/t/block-installation-of-bundled-npcap-via-network-packet-capture-integration/329748)
**Author:** [@jaegerschnitzel](https://discuss.elastic.co/u/jaegerschnitzel)\ **Replies:** 2\ **Last updated:** [April 17, 2023, 9:01am UTC](https://discuss.elastic.co/t/block-installation-of-bundled-npcap-via-network-packet-capture-integration/329748 "2023-04-17T09:01:28Z")
My old thread is closed so I'm creating a new one. We updated our Elastic Agent to v8.7.0 in order to use the new feature to block installation of the bundled Npcap library. Unfortunately this option is not available in… --- ## [Error when importing Postgres 12 and 15 queries](https://discuss.elastic.co/t/error-when-importing-postgres-12-and-15-queries/330021)
**Author:** [@\_Leonardo\_Moerschber](https://discuss.elastic.co/u/_Leonardo_Moerschber)\ **Replies:** 0\ **Last updated:** [April 14, 2023, 2:04pm UTC](https://discuss.elastic.co/t/error-when-importing-postgres-12-and-15-queries/330021 "2023-04-14T14:04:24Z")
My environment is for testing: Elasticsearch 8.7 + fleetserver I'm trying to collect queries from Postgres version 12 and version 15 through elastic-agent. I'm not able to collect them through the csv log. Here are th… --- ## [Is it possible to change the logging path for Elastic Agent?](https://discuss.elastic.co/t/is-it-possible-to-change-the-logging-path-for-elastic-agent/329983)
**Author:** [@lengoyvaerts](https://discuss.elastic.co/u/lengoyvaerts)\ **Replies:** 0\ **Last updated:** [April 14, 2023, 8:59am UTC](https://discuss.elastic.co/t/is-it-possible-to-change-the-logging-path-for-elastic-agent/329983 "2023-04-14T08:59:43Z")
Hi community As per the topic's title, I'm trying to configure the logging path when installing the Elastic Agent. I'm using central fleet management and following the installation guidelines from the Kibana UI as descr… --- ## [FleetServer Policy with Logstash type output failing](https://discuss.elastic.co/t/fleetserver-policy-with-logstash-type-output-failing/329839)
**Author:** [@Bradut\_B](https://discuss.elastic.co/u/Bradut_B)\ **Replies:** 6\ **Last updated:** [April 13, 2023, 3:02pm UTC](https://discuss.elastic.co/t/fleetserver-policy-with-logstash-type-output-failing/329839 "2023-04-13T15:02:08Z")
I have the following scenario that works: FleetServer policy -\> output type Elasticsearch AgentPolicy -\> output type Logstash However if I try to change the output type for the Fleet Server policy, to Logstash I get a… --- ## [Unable to send bunyan logs in kibana using elastic apm node module (node js code)](https://discuss.elastic.co/t/unable-to-send-bunyan-logs-in-kibana-using-elastic-apm-node-module-node-js-code/329652)
**Author:** [@sandboxpd123](https://discuss.elastic.co/u/sandboxpd123)\ **Replies:** 3\ **Last updated:** [April 13, 2023, 4:52am UTC](https://discuss.elastic.co/t/unable-to-send-bunyan-logs-in-kibana-using-elastic-apm-node-module-node-js-code/329652 "2023-04-13T04:52:32Z")
Hi Team, I have created a node js code where I created a bunyan logger class consist of a constructor that returns the logger in below format - public logger: any constructor (serviceName: string) { this.logger = bun… --- ## [Kube State Metrics stop reporting / Potential Leader Election issue](https://discuss.elastic.co/t/kube-state-metrics-stop-reporting-potential-leader-election-issue/329794)
**Author:** [@RichardMatthews](https://discuss.elastic.co/u/RichardMatthews)\ **Replies:** 0\ **Last updated:** [April 12, 2023, 4:00am UTC](https://discuss.elastic.co/t/kube-state-metrics-stop-reporting-potential-leader-election-issue/329794 "2023-04-12T04:00:19Z")
Hey, I am having an issue with collecting data from kube state metrics where it will randomly stop coming through into Kibana and all that seems to help is restarting the elastic-agents until it starts to come back. I … --- ## [Pod container logs stop randomly](https://discuss.elastic.co/t/pod-container-logs-stop-randomly/325632)
**Author:** [@woodywoodsta](https://discuss.elastic.co/u/woodywoodsta)\ **Replies:** 5\ **Last updated:** [April 10, 2023, 5:20pm UTC](https://discuss.elastic.co/t/pod-container-logs-stop-randomly/325632 "2023-04-10T17:20:23Z")
Since upgrading to 8.6.1 (from 8.5.x), I'm finding that logs that are supposed to be collected via the Kubernetes Integration for an elastic agent in Fleet mode are stopping completely and randomly (as far as I can see). … --- ## [Elastic Agent v8.7.0, Filebeat UDP listener error](https://discuss.elastic.co/t/elastic-agent-v8-7-0-filebeat-udp-listener-error/329579)
**Author:** [@rowra](https://discuss.elastic.co/u/rowra)\ **Replies:** 5\ **Last updated:** [April 10, 2023, 2:55pm UTC](https://discuss.elastic.co/t/elastic-agent-v8-7-0-filebeat-udp-listener-error/329579 "2023-04-10T14:55:47Z")
Hi After upgrading from 8.6.2 to 8.7.0 this error happens all the time causing the agent/filebeat to crash and restart: nagent | {"log.level":"error","@timestamp":"2023-04-07T12:57:29.090+0200","message":"panic: runti… --- ## [Difference between KIBANA\_CA and KIBANA\_FLEET\_CA](https://discuss.elastic.co/t/difference-between-kibana-ca-and-kibana-fleet-ca/329634)
**Author:** [@OmFJ](https://discuss.elastic.co/u/OmFJ)\ **Replies:** 0\ **Last updated:** [April 10, 2023, 4:06am UTC](https://discuss.elastic.co/t/difference-between-kibana-ca-and-kibana-fleet-ca/329634 "2023-04-10T04:06:15Z")
Hello everyone. Currently i'm having trouble with applying elastic agent(managed by fleet) to my kubernetes environment. i think one of the related parameter is KIBANA\_CA and KIBANA\_FLEET\_CA. so far, i followed steps … --- ## [Elastic Agent show \`Error dialing x509: certificate signed by unknown authority\` but it is healthy in fleet](https://discuss.elastic.co/t/elastic-agent-show-error-dialing-x509-certificate-signed-by-unknown-authority-but-it-is-healthy-in-fleet/329514)
**Author:** [@Kelvin\_Chan](https://discuss.elastic.co/u/Kelvin_Chan)\ **Replies:** 3\ **Last updated:** [April 7, 2023, 5:09am UTC](https://discuss.elastic.co/t/elastic-agent-show-error-dialing-x509-certificate-signed-by-unknown-authority-but-it-is-healthy-in-fleet/329514 "2023-04-07T05:09:06Z")
I am building elastic stack for testing, which uses self-signed certificate. And i use docker compose to deploy them. Here is part of compose efleet: image: docker.elastic.co/beats/elastic-agent:${STACK\_VERSION} … [Previous page](https://discuss.elastic.co/c/elastic-stack/elastic-agent/91.md?page=35) [Next page](https://discuss.elastic.co/c/elastic-stack/elastic-agent/91.md?page=37)