# Elastic Agent

**URL:** https://discuss.elastic.co/c/elastic-stack/elastic-agent/91.md?page=37

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 38

---

## [Elastic Fleet Vault Integration](https://discuss.elastic.co/t/elastic-fleet-vault-integration/329330)

<div class="topic-metadata">

**Author:** [@adis3421](https://discuss.elastic.co/u/adis3421)\
**Replies:** 1\
**Last updated:** [April 6, 2023, 11:12am UTC](https://discuss.elastic.co/t/elastic-fleet-vault-integration/329330 "2023-04-06T11:12:05Z")

</div>

Hi, I add vault integration in elastic agent after instalation I have in my vault: on fleet server port 9007/tcp is open but not listen on tcp but only tcp6

---

## [How to disable add\_cloud\_metadata processor?](https://discuss.elastic.co/t/how-to-disable-add-cloud-metadata-processor/329463)

<div class="topic-metadata">

**Author:** [@Vanav](https://discuss.elastic.co/u/Vanav)\
**Replies:** 0\
**Last updated:** [April 5, 2023, 8:01pm UTC](https://discuss.elastic.co/t/how-to-disable-add-cloud-metadata-processor/329463 "2023-04-05T20:01:05Z")

</div>

I have a standalone Elastic Agent with filestream input. I want to cleanup sent data. How to disable default processors add\_cloud\_metadata and others? I can drop fields, but I prefer to disable processor. In filebeat I …

---

## [Is it possible to reconnect to an Agent after uninstalling the Elastic Agent service?](https://discuss.elastic.co/t/is-it-possible-to-reconnect-to-an-agent-after-uninstalling-the-elastic-agent-service/328273)

<div class="topic-metadata">

**Author:** [@kreed](https://discuss.elastic.co/u/kreed)\
**Replies:** 3\
**Last updated:** [April 4, 2023, 5:27pm UTC](https://discuss.elastic.co/t/is-it-possible-to-reconnect-to-an-agent-after-uninstalling-the-elastic-agent-service/328273 "2023-04-04T17:27:46Z")

</div>

I am new the Elastic so this question may be trivial. For some background, I am working on an application that monitors the status of the Elastic Agent Windows service. I want this app to be able to uninstall and re-inst…

---

## [Carbon Black Cloud Integration not working](https://discuss.elastic.co/t/carbon-black-cloud-integration-not-working/329336)

<div class="topic-metadata">

**Author:** [@stgalvisg](https://discuss.elastic.co/u/stgalvisg)\
**Replies:** 0\
**Last updated:** [April 4, 2023, 2:46pm UTC](https://discuss.elastic.co/t/carbon-black-cloud-integration-not-working/329336 "2023-04-04T14:46:47Z")

</div>

Good day to you all! Since a few days ago I have a problem with the Carbon Black Cloud Integration in Elastic 8.4.1 with Fleet server. The API's Keys happened to be working just fine, I received the alert and audit alert…

---

## [Elastic agent fails to install on Centos 7](https://discuss.elastic.co/t/elastic-agent-fails-to-install-on-centos-7/329260)

<div class="topic-metadata">

**Author:** [@sblack](https://discuss.elastic.co/u/sblack)\
**Replies:** 10\
**Last updated:** [April 4, 2023, 4:21am UTC](https://discuss.elastic.co/t/elastic-agent-fails-to-install-on-centos-7/329260 "2023-04-04T04:21:19Z")

</div>

Hi, I am getting the following error message when attempting to install Fleet agent: Installed as a system package, installation will not be altered. Error: failed to execute enroll command: fork/exec /usr/bin/elastic-…

---

## [How do I enable data collection in the elastic agent of my fleet server?](https://discuss.elastic.co/t/how-do-i-enable-data-collection-in-the-elastic-agent-of-my-fleet-server/329251)

<div class="topic-metadata">

**Author:** [@WowSuchLogs](https://discuss.elastic.co/u/WowSuchLogs)\
**Replies:** 0\
**Last updated:** [April 3, 2023, 9:08pm UTC](https://discuss.elastic.co/t/how-do-i-enable-data-collection-in-the-elastic-agent-of-my-fleet-server/329251 "2023-04-03T21:08:43Z")

</div>

Hello, I'm learning ES in a home lab consisting in a server running a cluster of ES/Kibana docker nodes and I installed the fleet server on the docker host itself. I'd like to monitor Docker through the agent of the fl…

---

## [How to Filter Desired Container Logs in Docker Integration in Fleet？](https://discuss.elastic.co/t/how-to-filter-desired-container-logs-in-docker-integration-in-fleet/329030)

<div class="topic-metadata">

**Author:** [@XYYYYY](https://discuss.elastic.co/u/XYYYYY)\
**Replies:** 5\
**Last updated:** [April 3, 2023, 9:20am UTC](https://discuss.elastic.co/t/how-to-filter-desired-container-logs-in-docker-integration-in-fleet/329030 "2023-04-03T09:20:10Z")

</div>

Hello everyone, I am a newcomer using elastic agent. I have tried to collect container logs using Docker integration, but I have a wide variety of container logs. I only want to obtain a few of them. How can I achieve th…

---

## [Synthetics monitors are not working on Elastic Agent (Complete)](https://discuss.elastic.co/t/synthetics-monitors-are-not-working-on-elastic-agent-complete/328978)

<div class="topic-metadata">

**Author:** [@chrispangg](https://discuss.elastic.co/u/chrispangg)\
**Replies:** 1\
**Last updated:** [April 3, 2023, 12:31am UTC](https://discuss.elastic.co/t/synthetics-monitors-are-not-working-on-elastic-agent-complete/328978 "2023-04-03T00:31:15Z")

</div>

The Elastic Agent is running within a container, just like the rest of the stack, in my local environment. Tried this across different versions (on 8.7 now) and they all come back with the same error. Elastic Agent - Do…

---

## [How to add my network logs of my applications to elastic/observability](https://discuss.elastic.co/t/how-to-add-my-network-logs-of-my-applications-to-elastic-observability/327704)

<div class="topic-metadata">

**Author:** [@schavaku](https://discuss.elastic.co/u/schavaku)\
**Replies:** 12\
**Last updated:** [April 2, 2023, 2:12am UTC](https://discuss.elastic.co/t/how-to-add-my-network-logs-of-my-applications-to-elastic-observability/327704 "2023-04-02T02:12:34Z")

</div>

I would like to access my logs and create a dashboard in Elasticsearch/observability. Please let me know how to integrate the application logs from the network. I would like to know the steps.

---

## [Tried to build package registry image but no content](https://discuss.elastic.co/t/tried-to-build-package-registry-image-but-no-content/329039)

<div class="topic-metadata">

**Author:** [@Mudboyzh](https://discuss.elastic.co/u/Mudboyzh)\
**Replies:** 0\
**Last updated:** [March 31, 2023, 10:24am UTC](https://discuss.elastic.co/t/tried-to-build-package-registry-image-but-no-content/329039 "2023-03-31T10:24:55Z")

</div>

Hi I have already deployed ELK / Elastic Agent / Package registry with official images. They work well. Because of our company's standard, images have to fix vulnerability before deploy on k8s(air-gapped), I have to f…

---

## [Fleet giving error | unable to initialize fleet](https://discuss.elastic.co/t/fleet-giving-error-unable-to-initialize-fleet/326337)

<div class="topic-metadata">

**Author:** [@theacodes](https://discuss.elastic.co/u/theacodes)\
**Replies:** 10\
**Last updated:** [March 31, 2023, 9:48am UTC](https://discuss.elastic.co/t/fleet-giving-error-unable-to-initialize-fleet/326337 "2023-03-31T09:48:00Z")

</div>

getting this error sometimes in FLEET resource\_already\_exists\_exception: \[resource\_already\_exists\_exception\] reason: task with id {endpoint.metadata\_current-default-8.6.1} already exist

---

## [Elastic-agent does not restart automatically after machine reboot](https://discuss.elastic.co/t/elastic-agent-does-not-restart-automatically-after-machine-reboot/328894)

<div class="topic-metadata">

**Author:** [@irivas95](https://discuss.elastic.co/u/irivas95)\
**Replies:** 0\
**Last updated:** [March 30, 2023, 7:19am UTC](https://discuss.elastic.co/t/elastic-agent-does-not-restart-automatically-after-machine-reboot/328894 "2023-03-30T07:19:20Z")

</div>

Hi, I have an elastic-agent with a prometheus integration with and another elastic-agent acting as fleet with the service enabled and when the machines (both with Red Hat SO) are restarted neither the fleet nor the elas…

---

## [Elatic-agent not sending any data](https://discuss.elastic.co/t/elatic-agent-not-sending-any-data/328868)

<div class="topic-metadata">

**Author:** [@ermilan2309](https://discuss.elastic.co/u/ermilan2309)\
**Replies:** 0\
**Last updated:** [March 29, 2023, 9:34pm UTC](https://discuss.elastic.co/t/elatic-agent-not-sending-any-data/328868 "2023-03-29T21:34:35Z")

</div>

I have installed elastic agent with the same certificates that used for elasticsearch and kibana to communicate with each other. I have all in one deployment. I used the same certs for agents to communicate but not sure…

---

## [Custom UDP Logs](https://discuss.elastic.co/t/custom-udp-logs/328867)

<div class="topic-metadata">

**Author:** [@Thomas\_Baumann](https://discuss.elastic.co/u/Thomas_Baumann)\
**Replies:** 0\
**Last updated:** [March 29, 2023, 9:10pm UTC](https://discuss.elastic.co/t/custom-udp-logs/328867 "2023-03-29T21:10:47Z")

</div>

Hello, we are using an Fleet Server, including Custom UDP logs integration. We observed an issue with data are not ingested with a load about 500 EPS. About 30% to 50 % messages are not ingested. Also netstat -ulpn …

---

## [Installing Elastic Agent on Kubernetes doesn't come up as healthy - managed by Elastic Fleet](https://discuss.elastic.co/t/installing-elastic-agent-on-kubernetes-doesnt-come-up-as-healthy-managed-by-elastic-fleet/328729)

<div class="topic-metadata">

**Author:** [@Alexios\_Polyzos](https://discuss.elastic.co/u/Alexios_Polyzos)\
**Replies:** 1\
**Last updated:** [March 29, 2023, 6:10pm UTC](https://discuss.elastic.co/t/installing-elastic-agent-on-kubernetes-doesnt-come-up-as-healthy-managed-by-elastic-fleet/328729 "2023-03-29T18:10:00Z")

</div>

So, I'm trying to install the elastic agent on Kubernetes via the daemonset manifest files found here. I'm providing the FLEET\_URL and FLEET\_ENROLLMENT\_TOKEN, and after the first seconds the agents show up as healthy on…

---

## [Tenable.sc integration with Elastic](https://discuss.elastic.co/t/tenable-sc-integration-with-elastic/328724)

<div class="topic-metadata">

**Author:** [@Wenwei](https://discuss.elastic.co/u/Wenwei)\
**Replies:** 2\
**Last updated:** [March 29, 2023, 5:56pm UTC](https://discuss.elastic.co/t/tenable-sc-integration-with-elastic/328724 "2023-03-29T17:56:11Z")

</div>

Hi guys, I am trying Tenable.sc integration with Elasticsearch. I added the integration, configured the URL to be https://private\_ip\_address\_of\_sc also included access key and secret key. Also installed elastic-agent…

---

## [Fleet Server Agent not listening](https://discuss.elastic.co/t/fleet-server-agent-not-listening/328388)

<div class="topic-metadata">

**Author:** [@jerrac](https://discuss.elastic.co/u/jerrac)\
**Replies:** 4\
**Last updated:** [March 29, 2023, 4:17pm UTC](https://discuss.elastic.co/t/fleet-server-agent-not-listening/328388 "2023-03-29T16:17:17Z")

</div>

I'm trying to add a fleet server agent to my stack so I can get rid of the one living on old hardware. I've re-installed the fleet server agent (after running into Adding a Fleet Server integration to an agent that was …

---

## [Does there exist a Helm chart for the Elastic agent for on-prem Elasticsearch?](https://discuss.elastic.co/t/does-there-exist-a-helm-chart-for-the-elastic-agent-for-on-prem-elasticsearch/328675)

<div class="topic-metadata">

**Author:** [@catalin.bulancea](https://discuss.elastic.co/u/catalin.bulancea)\
**Replies:** 2\
**Last updated:** [March 29, 2023, 1:22pm UTC](https://discuss.elastic.co/t/does-there-exist-a-helm-chart-for-the-elastic-agent-for-on-prem-elasticsearch/328675 "2023-03-29T13:22:29Z")

</div>

Hello Elastic gurus, I guess the question is in the subject. I am trying to find a helm chart for the Elastic agent, but it's not in the below list: I found the k8s ymls for the Elastic agent here: and converted th…

---

## ["ORA-00942: table or view does not exist" for Oracle Metrics in Elastic Agent](https://discuss.elastic.co/t/ora-00942-table-or-view-does-not-exist-for-oracle-metrics-in-elastic-agent/328571)

<div class="topic-metadata">

**Author:** [@Wolfram\_Haussig](https://discuss.elastic.co/u/Wolfram_Haussig)\
**Replies:** 3\
**Last updated:** [March 29, 2023, 5:29am UTC](https://discuss.elastic.co/t/ora-00942-table-or-view-does-not-exist-for-oracle-metrics-in-elastic-agent/328571 "2023-03-29T05:29:29Z")

</div>

Hello all, I am using the Elastic Agent with the Oracle integration to monitor the metrics of our Oracle DB. In the logs I find the error Error fetching data for metricset sql.query: fetch variable mode failed: dpiStmt\_…

---

## [Fleet managed elastic agent](https://discuss.elastic.co/t/fleet-managed-elastic-agent/328454)

<div class="topic-metadata">

**Author:** [@Ankita\_Pachauri](https://discuss.elastic.co/u/Ankita_Pachauri)\
**Replies:** 1\
**Last updated:** [March 28, 2023, 3:37pm UTC](https://discuss.elastic.co/t/fleet-managed-elastic-agent/328454 "2023-03-28T15:37:33Z")

</div>

Hi Team, I want to gather some information regarding fleet. when fleet uses metricbeat to collect the data, is it possible to modify the configuration of metricbeat? //Ankita

---

## [Create fleet agent status table for a particular space](https://discuss.elastic.co/t/create-fleet-agent-status-table-for-a-particular-space/328620)

<div class="topic-metadata">

**Author:** [@niveditakathal](https://discuss.elastic.co/u/niveditakathal)\
**Replies:** 0\
**Last updated:** [March 27, 2023, 1:37pm UTC](https://discuss.elastic.co/t/create-fleet-agent-status-table-for-a-particular-space/328620 "2023-03-27T13:37:51Z")

</div>

Hi Experts, I want to create a custom dashboard for a space in my Kibana to show all agents registered to a particular fleet agent policy. In order to achieve this I used Index pattern .fleet-agents\* with appropriate…

---

## [Stack Monitoring does not show my added ES cluster](https://discuss.elastic.co/t/stack-monitoring-does-not-show-my-added-es-cluster/328562)

<div class="topic-metadata">

**Author:** [@stobbe](https://discuss.elastic.co/u/stobbe)\
**Replies:** 4\
**Last updated:** [March 27, 2023, 6:39am UTC](https://discuss.elastic.co/t/stack-monitoring-does-not-show-my-added-es-cluster/328562 "2023-03-27T06:39:38Z")

</div>

Hello, I have deployed an elastic-agent and included the elasticsearch integration. The agent runs without Fleet, and data is filling the indexes. The problem is that I so not see the cluster appear in my Stack Monito…

---

## [ECK operator](https://discuss.elastic.co/t/eck-operator/328516)

<div class="topic-metadata">

**Author:** [@abdul90082](https://discuss.elastic.co/u/abdul90082)\
**Replies:** 0\
**Last updated:** [March 25, 2023, 10:20am UTC](https://discuss.elastic.co/t/eck-operator/328516 "2023-03-25T10:20:56Z")

</div>

Hi everyone! we would like to use ES operator in all our cluster to monitor kubernetes logs. We have tried to get fleet and the agents working based on our scenario that looks the following: We are trying to send the l…

---

## [Tenable.io integration - missing FIXED vulnerabilities](https://discuss.elastic.co/t/tenable-io-integration-missing-fixed-vulnerabilities/328351)

<div class="topic-metadata">

**Author:** [@marrc.rousseau](https://discuss.elastic.co/u/marrc.rousseau)\
**Replies:** 2\
**Last updated:** [March 24, 2023, 11:39am UTC](https://discuss.elastic.co/t/tenable-io-integration-missing-fixed-vulnerabilities/328351 "2023-03-24T11:39:42Z")

</div>

Hello, I started to test tenable.io integration (great work BTW) and found a little issue. Vulnerabilities with state FIXED are missing in logs-tenable\_io.vulnerability indexes, I can only find OPEN and REOPENED event…

---

## [Elastic-agent "Process another repeated request" in loop indefinitely](https://discuss.elastic.co/t/elastic-agent-process-another-repeated-request-in-loop-indefinitely/328251)

<div class="topic-metadata">

**Author:** [@Nicolas\_Pellletier](https://discuss.elastic.co/u/Nicolas_Pellletier)\
**Replies:** 5\
**Last updated:** [March 23, 2023, 4:45pm UTC](https://discuss.elastic.co/t/elastic-agent-process-another-repeated-request-in-loop-indefinitely/328251 "2023-03-23T16:45:41Z")

</div>

Hello, I've got an elastic-agent with no agent monitoring settings (meaning no Agent Logs/Mertrics collection) and only one integration policy. So my elastic-agent.yml is pretty small: id: 949c1a80-c8a9-11ed-8539-532f…

---

## [How do I use Elastic Agent to send log data to Logstash?](https://discuss.elastic.co/t/how-do-i-use-elastic-agent-to-send-log-data-to-logstash/328269)

<div class="topic-metadata">

**Author:** [@Matt\_Johnston](https://discuss.elastic.co/u/Matt_Johnston)\
**Replies:** 7\
**Last updated:** [March 23, 2023, 12:57pm UTC](https://discuss.elastic.co/t/how-do-i-use-elastic-agent-to-send-log-data-to-logstash/328269 "2023-03-23T12:57:14Z")

</div>

Hello. Based on the documentation (Beats and Elastic Agent capabilities | Fleet and Elastic Agent Guide \[8.6\] | Elastic) I am under the impression that the Elastic Agent can send log data to Logstash. However, the only b…

---

## [APM-Server /intake/v2/events http 404 page not found](https://discuss.elastic.co/t/apm-server-intake-v2-events-http-404-page-not-found/328244)

<div class="topic-metadata">

**Author:** [@niemimik](https://discuss.elastic.co/u/niemimik)\
**Replies:** 2\
**Last updated:** [March 23, 2023, 8:40am UTC](https://discuss.elastic.co/t/apm-server-intake-v2-events-http-404-page-not-found/328244 "2023-03-23T08:40:13Z")

</div>

I'm running 7.17 APM server with Fleet and APM agent installed. APM server is responsing healthy status but intake/v2/events not found. I cannot see any errors in log files. Please, could you give some ideas how can I d…

---

## [Internal\_networks setting for netflow integration](https://discuss.elastic.co/t/internal-networks-setting-for-netflow-integration/327586)

<div class="topic-metadata">

**Author:** [@Andres\_Altamirano](https://discuss.elastic.co/u/Andres_Altamirano)\
**Replies:** 1\
**Last updated:** [March 22, 2023, 9:09am UTC](https://discuss.elastic.co/t/internal-networks-setting-for-netflow-integration/327586 "2023-03-22T09:09:36Z")

</div>

Hi, I'm trying to replace filebeat netflow module with elastic integration "netflow" that is deployed on a policy running on a few servers. Flows are indexed properly, but there is no way to set the internal\_networks p…

---

## [Cisco AnyConnect VPN Integration](https://discuss.elastic.co/t/cisco-anyconnect-vpn-integration/327942)

<div class="topic-metadata">

**Author:** [@MDimsey](https://discuss.elastic.co/u/MDimsey)\
**Replies:** 2\
**Last updated:** [March 22, 2023, 4:03pm UTC](https://discuss.elastic.co/t/cisco-anyconnect-vpn-integration/327942 "2023-03-22T16:03:33Z")

</div>

Hello, My organization is looking to use the Elastic Agent as a replacement for running dedicated winlogbeat.exe agents on hosts. However, through winlogbeat we were able to collect logs from Cisco AnyConnect Security M…

---

## [Elastic-agent with Misp integration policy no data received while no errors comes up](https://discuss.elastic.co/t/elastic-agent-with-misp-integration-policy-no-data-received-while-no-errors-comes-up/328183)

<div class="topic-metadata">

**Author:** [@Nicolas\_Pellletier](https://discuss.elastic.co/u/Nicolas_Pellletier)\
**Replies:** 8\
**Last updated:** [March 22, 2023, 2:37pm UTC](https://discuss.elastic.co/t/elastic-agent-with-misp-integration-policy-no-data-received-while-no-errors-comes-up/328183 "2023-03-22T14:37:58Z")

</div>

Hello, I've got a standalone elastic-agent deployed on localhost where my MISP instance is running. I'm trying to integrate MISP IOC's to Elastic in order to use the dashboard. I don't understand why i don't receive a…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elastic-agent/91.md?page=36)

[Next page](https://discuss.elastic.co/c/elastic-stack/elastic-agent/91.md?page=38)
