# Elastic Agent **URL:** https://discuss.elastic.co/c/elastic-stack/elastic-agent/91.md?page=38 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 39 --- ## [Docker Logs keep getting dropped with tried to parse field \[image\] as object, but found a concrete value error](https://discuss.elastic.co/t/docker-logs-keep-getting-dropped-with-tried-to-parse-field-image-as-object-but-found-a-concrete-value-error/326245)
**Author:** [@jerrac](https://discuss.elastic.co/u/jerrac)\ **Replies:** 49\ **Last updated:** [March 22, 2023, 1:15am UTC](https://discuss.elastic.co/t/docker-logs-keep-getting-dropped-with-tried-to-parse-field-image-as-object-but-found-a-concrete-value-error/326245 "2023-03-22T01:15:41Z")
When investigating why I couldn't find my docker logs in Elastic, I found that Elastic Agent has been dropping them. It keeps logging stuff like: {"log.level":"warn","@timestamp":"2023-02-22T18:48:50.007-0800","message"… --- ## [Error: failed to perform any bulk index operations: 429 Too Many Requests](https://discuss.elastic.co/t/error-failed-to-perform-any-bulk-index-operations-429-too-many-requests/328074)
**Author:** [@Nicolas\_Pelletier](https://discuss.elastic.co/u/Nicolas_Pelletier)\ **Replies:** 10\ **Last updated:** [March 21, 2023, 10:07am UTC](https://discuss.elastic.co/t/error-failed-to-perform-any-bulk-index-operations-429-too-many-requests/328074 "2023-03-21T10:07:04Z")
Hello, I know that there is already a lot of post on (github | stackoverflow | here) about this error and how to fix it but despite the reading of all of these ones i was not able to get rid of this error: Here is a sn… --- ## [Elastic Agent falling after first enrollment on fleet server](https://discuss.elastic.co/t/elastic-agent-falling-after-first-enrollment-on-fleet-server/327385)
**Author:** [@thiago8martins](https://discuss.elastic.co/u/thiago8martins)\ **Replies:** 2\ **Last updated:** [March 20, 2023, 4:45pm UTC](https://discuss.elastic.co/t/elastic-agent-falling-after-first-enrollment-on-fleet-server/327385 "2023-03-20T16:45:16Z")
Hello Folks, I'm deploying Elastic Agent and Fleet Server on K8s environment: The Fleet Server I have deployed at the same cluster as the Kibana and ES using ECK. The Elastic Agent i need to deploy in other K8s clust… --- ## [Fleet server limits](https://discuss.elastic.co/t/fleet-server-limits/328005)
**Author:** [@bex](https://discuss.elastic.co/u/bex)\ **Replies:** 2\ **Last updated:** [March 20, 2023, 8:01am UTC](https://discuss.elastic.co/t/fleet-server-limits/328005 "2023-03-20T08:01:28Z")
Hello, I would like to clarify how many sources(elastic agents) can be managed by one fleet server? Is there any limits for fleet server? Best regards, Bex --- ## [Best practices for spot/preemptible instances](https://discuss.elastic.co/t/best-practices-for-spot-preemptible-instances/326812)
**Author:** [@marcoderama](https://discuss.elastic.co/u/marcoderama)\ **Replies:** 3\ **Last updated:** [March 20, 2023, 4:43am UTC](https://discuss.elastic.co/t/best-practices-for-spot-preemptible-instances/326812 "2023-03-20T04:43:45Z")
I'm a noob with this stuff so looking for some guidance. Say I have a GCP cluster that uses preemptible instances, or an AWS cluster that uses spot instances. If I have an Agent policy with the "Google Cloud Platform" … --- ## [How to configure Elastic stack with Fleet server and APM integration using docker compose?](https://discuss.elastic.co/t/how-to-configure-elastic-stack-with-fleet-server-and-apm-integration-using-docker-compose/326974)
**Author:** [@hexsorcerer](https://discuss.elastic.co/u/hexsorcerer)\ **Replies:** 0\ **Last updated:** [March 4, 2023, 1:51am UTC](https://discuss.elastic.co/t/how-to-configure-elastic-stack-with-fleet-server-and-apm-integration-using-docker-compose/326974 "2023-03-04T01:51:56Z")
I'm trying to setup an example project with the following functionality: Elasticsearch Logstash Kibana Fleet Server Elastic Agent with APM Integration OpenTelemetry from a .NET Application Getting the basic ELK setup … --- ## [Collecting logs via VMware vSphere integration](https://discuss.elastic.co/t/collecting-logs-via-vmware-vsphere-integration/327165)
**Author:** [@tumbl3w33d](https://discuss.elastic.co/u/tumbl3w33d)\ **Replies:** 0\ **Last updated:** [March 7, 2023, 10:38am UTC](https://discuss.elastic.co/t/collecting-logs-via-vmware-vsphere-integration/327165 "2023-03-07T10:38:28Z")
Disclaimer: I don't know much about VMware, so I'd be glad if you enlighten me when necessary. Hello, I am trying to understand how to use this agent integration to collect logs and metrics from a vSphere setup. Metric… --- ## [Auditbeat vs elastic endpoint for collecting endpoint data](https://discuss.elastic.co/t/auditbeat-vs-elastic-endpoint-for-collecting-endpoint-data/327410)
**Author:** [@lusynda](https://discuss.elastic.co/u/lusynda)\ **Replies:** 0\ **Last updated:** [March 10, 2023, 4:34am UTC](https://discuss.elastic.co/t/auditbeat-vs-elastic-endpoint-for-collecting-endpoint-data/327410 "2023-03-10T04:34:40Z")
Hi all, My elastic cluster is currently using both auditbeat and elastic endpoint to collect data from the endpoint server but due to limited space in the data node i have to cut off 1 type. I want to ask if which one … --- ## [Elastic Agent Kubernetes Integration Logs Moniotring](https://discuss.elastic.co/t/elastic-agent-kubernetes-integration-logs-moniotring/327881)
**Author:** [@Savva\_Morozov](https://discuss.elastic.co/u/Savva_Morozov)\ **Replies:** 0\ **Last updated:** [March 16, 2023, 8:40pm UTC](https://discuss.elastic.co/t/elastic-agent-kubernetes-integration-logs-moniotring/327881 "2023-03-16T20:40:19Z")
Hello! I am using Elastic Agent on Kubernetes and I am using Kubernetes integration to capture the logs, but I would like to capture logs only from our applications and filter out the logs of Kubernetes components. I sa… --- ## [SSL certificate - x509: certificate signed by unknown authority (Solved)](https://discuss.elastic.co/t/ssl-certificate-x509-certificate-signed-by-unknown-authority-solved/328011)
**Author:** [@Nicolas\_Pelletier](https://discuss.elastic.co/u/Nicolas_Pelletier)\ **Replies:** 0\ **Last updated:** [March 19, 2023, 8:15am UTC](https://discuss.elastic.co/t/ssl-certificate-x509-certificate-signed-by-unknown-authority-solved/328011 "2023-03-19T08:15:24Z")
I've deployed a standalone elastic-agent on my host machine where ELK is running. I've add the MISP integration policy to this standalone agent with https://localhost as MISP url variable. It's self signed certificate. … --- ## [Elastic agent install error: already installed at: /opt/Elastic/Agent](https://discuss.elastic.co/t/elastic-agent-install-error-already-installed-at-opt-elastic-agent/327926)
**Author:** [@Nicolas\_Pelletier](https://discuss.elastic.co/u/Nicolas_Pelletier)\ **Replies:** 4\ **Last updated:** [March 18, 2023, 4:32pm UTC](https://discuss.elastic.co/t/elastic-agent-install-error-already-installed-at-opt-elastic-agent/327926 "2023-03-18T16:32:36Z")
Hello, I'm trying to enroll an agent on a healthy fleet server which is also an agent (what i've understood). I'm following the step by step guide from kibana interface in integration panel (see the image below) I'… --- ## [Policy inheritance](https://discuss.elastic.co/t/policy-inheritance/326223)
**Author:** [@indyg](https://discuss.elastic.co/u/indyg)\ **Replies:** 5\ **Last updated:** [March 18, 2023, 12:39pm UTC](https://discuss.elastic.co/t/policy-inheritance/326223 "2023-03-18T12:39:07Z")
As we're rolling out Fleet to our servers, one question I had around agent policies used by the agents was if it's possible for a policy to inherit the integrations of another like a parent-child relationship? For examp… --- ## [Containerized Fleet Server failing](https://discuss.elastic.co/t/containerized-fleet-server-failing/327875)
**Author:** [@Matt\_Johnston](https://discuss.elastic.co/u/Matt_Johnston)\ **Replies:** 2\ **Last updated:** [March 17, 2023, 12:53pm UTC](https://discuss.elastic.co/t/containerized-fleet-server-failing/327875 "2023-03-17T12:53:03Z")
Hello. I am trying to run a containerized fleet server. I am running a docker container pulled using this command: docker pull docker.elastic.co/beats/elastic-agent:8.6.2 But when I run the container I get a number of … --- ## [Fleet Policy Revision - View revision history](https://discuss.elastic.co/t/fleet-policy-revision-view-revision-history/327791)
**Author:** [@abusiddique](https://discuss.elastic.co/u/abusiddique)\ **Replies:** 0\ **Last updated:** [March 15, 2023, 11:41pm UTC](https://discuss.elastic.co/t/fleet-policy-revision-view-revision-history/327791 "2023-03-15T23:41:20Z")
Hi I want to check who changed/ modified fleet integration policy, As we can see revision for all changes but am not able to find history for each change Can someone help me how to check revision logs with user and mod… --- ## [Deploy Fleet server using API](https://discuss.elastic.co/t/deploy-fleet-server-using-api/326951)
**Author:** [@krzychohoho](https://discuss.elastic.co/u/krzychohoho)\ **Replies:** 9\ **Last updated:** [March 15, 2023, 3:55pm UTC](https://discuss.elastic.co/t/deploy-fleet-server-using-api/326951 "2023-03-15T15:55:56Z")
Hi, I am trying to create fully automated script for SIEM deployment. There is one issue. I am not able to install fleet server. I want it to be fully automated no UI interaction. So first i need to create policy using … --- ## [X509: certificate signed by unknown authority](https://discuss.elastic.co/t/x509-certificate-signed-by-unknown-authority/327572)
**Author:** [@AbbysS](https://discuss.elastic.co/u/AbbysS)\ **Replies:** 8\ **Last updated:** [March 14, 2023, 1:48pm UTC](https://discuss.elastic.co/t/x509-certificate-signed-by-unknown-authority/327572 "2023-03-14T13:48:51Z")
Hi everyone, I'm new on the forum. I'm little confuse, i try to learn many tutorials on fleet server / agent but i don't know how i can create my own certificate to deploy in production. I try to learn the ELK tutoria… --- ## [Disabling an integration in fleet](https://discuss.elastic.co/t/disabling-an-integration-in-fleet/327600)
**Author:** [@marcoderama](https://discuss.elastic.co/u/marcoderama)\ **Replies:** 0\ **Last updated:** [March 13, 2023, 10:00pm UTC](https://discuss.elastic.co/t/disabling-an-integration-in-fleet/327600 "2023-03-13T22:00:58Z")
I'm testing various agent policy incantations within fleet so I have a bunch of them now. As such, I have more going on at once than I'd like. It would be useful if I could mark an agent policy as "disabled" within fle… --- ## [Asa integration in elastic agent](https://discuss.elastic.co/t/asa-integration-in-elastic-agent/327163)
**Author:** [@bex](https://discuss.elastic.co/u/bex)\ **Replies:** 7\ **Last updated:** [March 13, 2023, 12:54pm UTC](https://discuss.elastic.co/t/asa-integration-in-elastic-agent/327163 "2023-03-13T12:54:33Z")
Can anyone please advise with "Asa" integration in elastic agent? As we know, there are 2 ways: I am sending logs of ASA(192.168.110.1) by syslog udp to logstash(192.168.110.243). When checking by tcpdump, I see that… --- ## [What AWS config file settings are honored?](https://discuss.elastic.co/t/what-aws-config-file-settings-are-honored/327490)
**Author:** [@marcoderama](https://discuss.elastic.co/u/marcoderama)\ **Replies:** 0\ **Last updated:** [March 11, 2023, 9:39pm UTC](https://discuss.elastic.co/t/what-aws-config-file-settings-are-honored/327490 "2023-03-11T21:39:24Z")
\[Elastic noob warning!\] Fundamentally, I'm trying to figure out how to automatically update temporary credentials for the Elastic AWS integration. I'm trying to configure my AWS Elastic Agent integration to use a shar… --- ## [Elastic Agent with custom log integration](https://discuss.elastic.co/t/elastic-agent-with-custom-log-integration/327341)
**Author:** [@eleong](https://discuss.elastic.co/u/eleong)\ **Replies:** 10\ **Last updated:** [March 10, 2023, 7:53am UTC](https://discuss.elastic.co/t/elastic-agent-with-custom-log-integration/327341 "2023-03-10T07:53:37Z")
Hi, Ran into issue which is quite puzzling. Referred to the official docs and some topics in this forum but it did not help. I am trying to ingest custom logs via integration within elastic agent. Everything is working… --- ## [Elastic-agent updates](https://discuss.elastic.co/t/elastic-agent-updates/327382)
**Author:** [@stobbe](https://discuss.elastic.co/u/stobbe)\ **Replies:** 0\ **Last updated:** [March 9, 2023, 5:00pm UTC](https://discuss.elastic.co/t/elastic-agent-updates/327382 "2023-03-09T17:00:14Z")
Hello, If I understand correctly, if you update an agent to a new version, the software (binaries) have to be downloaded from a repository. The extra "plugins" are available from kibana Simple question, why not use Ki… --- ## [\[ES 8.6.1 & 8.6.2\] Fleet's "Custom Logs" integration stops sending logs with "failed to publish events: temporary bulk send failure" message](https://discuss.elastic.co/t/es-8-6-1-8-6-2-fleets-custom-logs-integration-stops-sending-logs-with-failed-to-publish-events-temporary-bulk-send-failure-message/327293)
**Author:** [@BorisNaguet](https://discuss.elastic.co/u/BorisNaguet)\ **Replies:** 0\ **Last updated:** [March 8, 2023, 5:08pm UTC](https://discuss.elastic.co/t/es-8-6-1-8-6-2-fleets-custom-logs-integration-stops-sending-logs-with-failed-to-publish-events-temporary-bulk-send-failure-message/327293 "2023-03-08T17:08:35Z")
Hello, I'm new to Elastic, so it's possible that I configured something wrong... Also, please be precise on where/how to find things if you ask for more info. Base installationI installed a fresh Elastic recently: 8… --- ## [Not able to send add logstash output in Elastic Agent setup](https://discuss.elastic.co/t/not-able-to-send-add-logstash-output-in-elastic-agent-setup/326726)
**Author:** [@sanju1323](https://discuss.elastic.co/u/sanju1323)\ **Replies:** 7\ **Last updated:** [March 9, 2023, 12:46pm UTC](https://discuss.elastic.co/t/not-able-to-send-add-logstash-output-in-elastic-agent-setup/326726 "2023-03-09T12:46:44Z")
I have created Fleet output as Logstash but while assigning the output to the agent, I'm getting only Elasticsearch output (default). But I want to send the data from Elastic Agent to Logstash. I have followed this link… --- ## [Enrollment in Fleet works but agent don't receive its configuration](https://discuss.elastic.co/t/enrollment-in-fleet-works-but-agent-dont-receive-its-configuration/325636)
**Author:** [@litronics](https://discuss.elastic.co/u/litronics)\ **Replies:** 2\ **Last updated:** [March 8, 2023, 9:13pm UTC](https://discuss.elastic.co/t/enrollment-in-fleet-works-but-agent-dont-receive-its-configuration/325636 "2023-03-08T21:13:29Z")
:frowning: am running a fresh docker based instance of elasticsearch, kibana and fleet-server (all in separate containers). Now I am starting a fresh elastic-agent container which enrolls in fleet just fine but don't re… --- ## [What is the best method to backup Fleet policies](https://discuss.elastic.co/t/what-is-the-best-method-to-backup-fleet-policies/327265)
**Author:** [@Patryk\_Ostrowski](https://discuss.elastic.co/u/Patryk_Ostrowski)\ **Replies:** 0\ **Last updated:** [March 8, 2023, 10:55am UTC](https://discuss.elastic.co/t/what-is-the-best-method-to-backup-fleet-policies/327265 "2023-03-08T10:55:51Z")
Hello, In the event of server failures, I have snapshots to recover data. But how can I recover fleet server integration configurations, installed agents and their policies? --- ## [Unable to select a different output in my agent policy](https://discuss.elastic.co/t/unable-to-select-a-different-output-in-my-agent-policy/326955)
**Author:** [@Lamine](https://discuss.elastic.co/u/Lamine)\ **Replies:** 1\ **Last updated:** [March 7, 2023, 9:42am UTC](https://discuss.elastic.co/t/unable-to-select-a-different-output-in-my-agent-policy/326955 "2023-03-07T09:42:19Z")
Hello everyone, I am trying to configure two different outputs for my agents, but when i try to create the agent policy, I am unable to select a different output. Does anyone know the reason? Thank you --- ## [Elastic Docker Integration - not collecting logs](https://discuss.elastic.co/t/elastic-docker-integration-not-collecting-logs/326947)
**Author:** [@sc1215](https://discuss.elastic.co/u/sc1215)\ **Replies:** 4\ **Last updated:** [March 6, 2023, 3:01pm UTC](https://discuss.elastic.co/t/elastic-docker-integration-not-collecting-logs/326947 "2023-03-06T15:01:20Z")
I had been using the 'System' integration agent to consume my docker logs which are saved in the path: /var/lib/docker/containers/\*/\*-json.log This has been working, but unfortunately, it was splitting up log lines whic… --- ## [Fleet Cloud Integrations on multiple agents](https://discuss.elastic.co/t/fleet-cloud-integrations-on-multiple-agents/326940)
**Author:** [@Derick\_Jansen](https://discuss.elastic.co/u/Derick_Jansen)\ **Replies:** 2\ **Last updated:** [March 5, 2023, 10:33am UTC](https://discuss.elastic.co/t/fleet-cloud-integrations-on-multiple-agents/326940 "2023-03-05T10:33:25Z")
Hi all. How does cloud integration work if you apply them to multiples agents. For example if I have two servers (for redundancy) dedicated to collecting logs from let's say Cloudflare (log pull) If I have both serve… --- ## [Question about develop an integration for XML input via TCP](https://discuss.elastic.co/t/question-about-develop-an-integration-for-xml-input-via-tcp/326670)
**Author:** [@Sebastian\_Huettersen](https://discuss.elastic.co/u/Sebastian_Huettersen)\ **Replies:** 1\ **Last updated:** [March 3, 2023, 7:52am UTC](https://discuss.elastic.co/t/question-about-develop-an-integration-for-xml-input-via-tcp/326670 "2023-03-03T07:52:44Z")
I am currently trying to develop an integration that takes reports from an appliance and then indexes them in elastic. The appliance sends these XML reports via TCP. Currently, I have the problem that I can't get the d… --- ## [Elastic Agent, specifying number of shards and ILM policy](https://discuss.elastic.co/t/elastic-agent-specifying-number-of-shards-and-ilm-policy/326945)
**Author:** [@Mirko\_Katunar](https://discuss.elastic.co/u/Mirko_Katunar)\ **Replies:** 3\ **Last updated:** [March 3, 2023, 3:06pm UTC](https://discuss.elastic.co/t/elastic-agent-specifying-number-of-shards-and-ilm-policy/326945 "2023-03-03T15:06:52Z")
Hello! I was wondering if someone can tell me where can I specify number of shards and ILM policy for specific data stream while using Elastic Agents. For example the default sys log data streams all use "Logs" as a de… [Previous page](https://discuss.elastic.co/c/elastic-stack/elastic-agent/91.md?page=37) [Next page](https://discuss.elastic.co/c/elastic-stack/elastic-agent/91.md?page=39)