# Elastic Agent **URL:** https://discuss.elastic.co/c/elastic-stack/elastic-agent/91.md?page=40 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 41 --- ## [How to parse csv via Elastic Agent?](https://discuss.elastic.co/t/how-to-parse-csv-via-elastic-agent/324121)
**Author:** [@test\_qweqwe](https://discuss.elastic.co/u/test_qweqwe)\ **Replies:** 16\ **Last updated:** [February 14, 2023, 9:05pm UTC](https://discuss.elastic.co/t/how-to-parse-csv-via-elastic-agent/324121 "2023-02-14T21:05:22Z")
Hi! I want to collects csv logs and if I understand correct, I need to add new integration based on "Custom Logs"? I'm not sure how to do it. I have this config for logstash under conf.d folder and everything work fin… --- ## [No data streams and logs under fleet server](https://discuss.elastic.co/t/no-data-streams-and-logs-under-fleet-server/325493)
**Author:** [@Leonardo\_Henrique](https://discuss.elastic.co/u/Leonardo_Henrique)\ **Replies:** 0\ **Last updated:** [February 14, 2023, 3:21pm UTC](https://discuss.elastic.co/t/no-data-streams-and-logs-under-fleet-server/325493 "2023-02-14T15:21:35Z")
Hey everyone. I have configured fleet server but I can not see any log messages or data streams in the Kibana UI. Elasticsearch nodes are configured with SSL (with elasticsearch-certutil) and fleet-server is using the … --- ## [Enroll elastic agent on machine that doesn't directly reach the Elastic Cloud instance](https://discuss.elastic.co/t/enroll-elastic-agent-on-machine-that-doesnt-directly-reach-the-elastic-cloud-instance/324405)
**Author:** [@gab](https://discuss.elastic.co/u/gab)\ **Replies:** 1\ **Last updated:** [February 13, 2023, 3:03pm UTC](https://discuss.elastic.co/t/enroll-elastic-agent-on-machine-that-doesnt-directly-reach-the-elastic-cloud-instance/324405 "2023-02-13T15:03:23Z")
Hi. I have an Elastic Cloud 8.4 instance and I have to install an elastic-agent on a protected machine A that doesn't directly reach the internet but reaches another machine B that does. So I have something like: A -\> B… --- ## [APM through fleet deployment not starting correctly](https://discuss.elastic.co/t/apm-through-fleet-deployment-not-starting-correctly/323451)
**Author:** [@bigdamhero](https://discuss.elastic.co/u/bigdamhero)\ **Replies:** 1\ **Last updated:** [February 13, 2023, 2:51pm UTC](https://discuss.elastic.co/t/apm-through-fleet-deployment-not-starting-correctly/323451 "2023-02-13T14:51:42Z")
I tried checking the github but I am not finding anything like this. Where is the config stored for the APM Server when its deployed via policy through fleet? I think if I could look at that I might be able to determi… --- ## [Elastic Agent capability over logstash](https://discuss.elastic.co/t/elastic-agent-capability-over-logstash/325364)
**Author:** [@ranju](https://discuss.elastic.co/u/ranju)\ **Replies:** 0\ **Last updated:** [February 13, 2023, 7:59am UTC](https://discuss.elastic.co/t/elastic-agent-capability-over-logstash/325364 "2023-02-13T07:59:31Z")
Hi Team Currently, we are using Logstash to process our logs from Kafka and filebeat sources. We Observed some capability of the beat agent to send the logs to the Elasticsearch directly. In Logstash we are mainly foc… --- ## [Error split was expecting field to be an array](https://discuss.elastic.co/t/error-split-was-expecting-field-to-be-an-array/325285)
**Author:** [@fabien9402](https://discuss.elastic.co/u/fabien9402)\ **Replies:** 0\ **Last updated:** [February 10, 2023, 5:09pm UTC](https://discuss.elastic.co/t/error-split-was-expecting-field-to-be-an-array/325285 "2023-02-10T17:09:45Z")
Hello, We have an error in one of our elastic-agent. This returns the error below: Feb 7, 2023 15:01:20.773 elastic\_agent.filebeat \[elastic\_agent.filebeat\]\[error\] error processing response: split was expecting field t… --- ## [Elastic-agent error ResourceExhausted desc = grpc: received message larger than max](https://discuss.elastic.co/t/elastic-agent-error-resourceexhausted-desc-grpc-received-message-larger-than-max/325256)
**Author:** [@fabien9402](https://discuss.elastic.co/u/fabien9402)\ **Replies:** 0\ **Last updated:** [February 10, 2023, 11:46am UTC](https://discuss.elastic.co/t/elastic-agent-error-resourceexhausted-desc-grpc-received-message-larger-than-max/325256 "2023-02-10T11:46:58Z")
We have an error in one of our elastic-agent. This returns the error below: 12:17:47.199 elastic\_agent.filebeat \[elastic\_agent.filebeat\]\[error\] elastic-agent-client got error: rpc error: code = ResourceExhausted desc =… --- ## [Adding Memcached integration turns agent unhealthy](https://discuss.elastic.co/t/adding-memcached-integration-turns-agent-unhealthy/325254)
**Author:** [@rrodrigues](https://discuss.elastic.co/u/rrodrigues)\ **Replies:** 0\ **Last updated:** [February 10, 2023, 11:39am UTC](https://discuss.elastic.co/t/adding-memcached-integration-turns-agent-unhealthy/325254 "2023-02-10T11:39:29Z")
When I add the Memcached Elastic Agent integration to a Fleet-managed agent it goes unhealthy. I believe this issue is similar to this one reported on Nginx/Kafka integration. Elastic Cloud/Elastic Agent: 8.6.1 Memcach… --- ## [Fleet Server No Data Stream](https://discuss.elastic.co/t/fleet-server-no-data-stream/324753)
**Author:** [@NathanLau](https://discuss.elastic.co/u/NathanLau)\ **Replies:** 5\ **Last updated:** [February 10, 2023, 11:03am UTC](https://discuss.elastic.co/t/fleet-server-no-data-stream/324753 "2023-02-10T11:03:55Z")
Hi All , When installed Fleet server with quick start. the fleet server cannot receive any data themselves , same as system. install command : sudo ./elastic-agent install \\ --fleet-server-es=https://172.16.\*\*.\*\*:9… --- ## [Elastic agent packet beat integration crash windows](https://discuss.elastic.co/t/elastic-agent-packet-beat-integration-crash-windows/325169)
**Author:** [@lordtmk](https://discuss.elastic.co/u/lordtmk)\ **Replies:** 0\ **Last updated:** [February 9, 2023, 4:02pm UTC](https://discuss.elastic.co/t/elastic-agent-packet-beat-integration-crash-windows/325169 "2023-02-09T16:02:54Z")
Hello, I tried to add Packet Capture Integration to a Windows Elastic Agent but packetbeat keeps crashing and dont send no logs. I'm in self managed mode with dedicated fleet server. Every other beat or integration wor… --- ## [Microsoft SQL Server Password](https://discuss.elastic.co/t/microsoft-sql-server-password/324786)
**Author:** [@djkprojects](https://discuss.elastic.co/u/djkprojects)\ **Replies:** 1\ **Last updated:** [February 9, 2023, 10:18am UTC](https://discuss.elastic.co/t/microsoft-sql-server-password/324786 "2023-02-09T10:18:47Z")
Hello, We are trying to utilize the Microsoft SQL Server integration in Fleet but having an issue when specifying the password which contains special characters such as }, ?, @ etc. but getting a parsing error: could … --- ## [Install elastic agent on unmanaged AWS cluster to Secured Elastic cloud fleet](https://discuss.elastic.co/t/install-elastic-agent-on-unmanaged-aws-cluster-to-secured-elastic-cloud-fleet/325011)
**Author:** [@venkatkumar229](https://discuss.elastic.co/u/venkatkumar229)\ **Replies:** 0\ **Last updated:** [February 8, 2023, 11:42am UTC](https://discuss.elastic.co/t/install-elastic-agent-on-unmanaged-aws-cluster-to-secured-elastic-cloud-fleet/325011 "2023-02-08T11:42:00Z")
Hi Team, We are having a Elastic cloud secured cluster and we are trying to install an elastic agent on a unmanaged AWS cluster to send data to Elasticsearch. So we have crated a private link and added the same in our E… --- ## [Zombie process continuous generated by elastic-agent](https://discuss.elastic.co/t/zombie-process-continuous-generated-by-elastic-agent/324966)
**Author:** [@Xu\_Danny](https://discuss.elastic.co/u/Xu_Danny)\ **Replies:** 0\ **Last updated:** [February 8, 2023, 5:17am UTC](https://discuss.elastic.co/t/zombie-process-continuous-generated-by-elastic-agent/324966 "2023-02-08T05:17:12Z")
found zombie process which parent process is elastic-agent, after kill elastic-agent for a while, it automatically start and generate new zombie child process. root@cdh1:~# ps -A -ostat,ppid,pid,cmd|grep elastic-agent S… --- ## [Adding Custom processors with Elastic-Agent](https://discuss.elastic.co/t/adding-custom-processors-with-elastic-agent/324958)
**Author:** [@Blason](https://discuss.elastic.co/u/Blason)\ **Replies:** 3\ **Last updated:** [February 8, 2023, 3:47am UTC](https://discuss.elastic.co/t/adding-custom-processors-with-elastic-agent/324958 "2023-02-08T03:47:20Z")
Hi, I wrote a custom parser with dissect processor for collecting fail2ban-logs. Those are working fine for the servers where logs are being collected using filebeat however I am not sure how do I add those with where I… --- ## [Get logs from an application via elastic agent using stdout](https://discuss.elastic.co/t/get-logs-from-an-application-via-elastic-agent-using-stdout/324897)
**Author:** [@Bhrugu\_Sharma](https://discuss.elastic.co/u/Bhrugu_Sharma)\ **Replies:** 0\ **Last updated:** [February 7, 2023, 12:45pm UTC](https://discuss.elastic.co/t/get-logs-from-an-application-via-elastic-agent-using-stdout/324897 "2023-02-07T12:45:13Z")
I have a sample application which generates sample logs Sample log line 1 Sample log line 2 this application is running in a sperate namespace as compared to the elastic agent which is not an issue as the agent is a… --- ## [Fleet hosts settings](https://discuss.elastic.co/t/fleet-hosts-settings/324821)
**Author:** [@adrien\_moreau](https://discuss.elastic.co/u/adrien_moreau)\ **Replies:** 1\ **Last updated:** [February 7, 2023, 7:20am UTC](https://discuss.elastic.co/t/fleet-hosts-settings/324821 "2023-02-07T07:20:18Z")
Hello, I am running elk in a self managed environment and my question concerns the following fleet setting: xpack.fleet.agents.elasticsearch.hosts This parameter is described in documentation as: "Hostnames used by E… --- ## [How to perform GeoDistanceSort on a nested field using ES-8.5.3 JavaClient](https://discuss.elastic.co/t/how-to-perform-geodistancesort-on-a-nested-field-using-es-8-5-3-javaclient/324861)
**Author:** [@Abhishek\_Chaurasia](https://discuss.elastic.co/u/Abhishek_Chaurasia)\ **Replies:** 0\ **Last updated:** [February 7, 2023, 6:44am UTC](https://discuss.elastic.co/t/how-to-perform-geodistancesort-on-a-nested-field-using-es-8-5-3-javaclient/324861 "2023-02-07T06:44:09Z")
We are using ElasticsearchClient instance to build our query and communicate with elasticsearch hosted on elastic-cloud version 8.5.3. We could not find any information on how to inject nested path while creating GeoDis… --- ## [How does elastic agent have it's debug logging turn on without anyone turning it on?](https://discuss.elastic.co/t/how-does-elastic-agent-have-its-debug-logging-turn-on-without-anyone-turning-it-on/324831)
**Author:** [@jerrac](https://discuss.elastic.co/u/jerrac)\ **Replies:** 0\ **Last updated:** [February 6, 2023, 8:24pm UTC](https://discuss.elastic.co/t/how-does-elastic-agent-have-its-debug-logging-turn-on-without-anyone-turning-it-on/324831 "2023-02-06T20:24:25Z")
Ok, so, I'm not even sure how to search on this one. Right around midnight 1/28-1/29, my fleet server agent had it's debug logging turned on. That server went from 50 docs/min to 60,000 docs/min. Didn't figure it out u… --- ## [Macos install elastic agent 8.6.1 unhealthy](https://discuss.elastic.co/t/macos-install-elastic-agent-8-6-1-unhealthy/324782)
**Author:** [@xqaiviwjxzw](https://discuss.elastic.co/u/xqaiviwjxzw)\ **Replies:** 0\ **Last updated:** [February 6, 2023, 10:10am UTC](https://discuss.elastic.co/t/macos-install-elastic-agent-8-6-1-unhealthy/324782 "2023-02-06T10:10:44Z")
I'm installing elastic agent 8.6.1 and the backend says unhealthy，What can be done about it? Checking the status shows the following error： elastic-agent-8.6.1-darwin-x86\_64 % sudo /Library/Elastic/Agent/elastic-age… --- ## [【Macos】elastic agent 8.5.2 and 8.5.3 install unhealthy](https://discuss.elastic.co/t/macos-elastic-agent-8-5-2-and-8-5-3-install-unhealthy/324596)
**Author:** [@xqaiviwjxzw](https://discuss.elastic.co/u/xqaiviwjxzw)\ **Replies:** 2\ **Last updated:** [February 6, 2023, 10:02am UTC](https://discuss.elastic.co/t/macos-elastic-agent-8-5-2-and-8-5-3-install-unhealthy/324596 "2023-02-06T10:02:11Z")
hello, I am trying to install elastic agent 8.5.2 and 8.5.3 in macos and I get the following error, what can I do to solve it? Status: FAILED Message: app endpoint-security--8.5.3-03e0f317: failed to start connection cr… --- ## [How to Differentiate Elastic Agent with same hostname](https://discuss.elastic.co/t/how-to-differentiate-elastic-agent-with-same-hostname/324763)
**Author:** [@OmFJ](https://discuss.elastic.co/u/OmFJ)\ **Replies:** 0\ **Last updated:** [February 6, 2023, 8:01am UTC](https://discuss.elastic.co/t/how-to-differentiate-elastic-agent-with-same-hostname/324763 "2023-02-06T08:01:15Z")
Hi Everyone, I have multiple CentOS 7 running on VM. What i am trying to do is to monitor processes or services within each host. the problem is that all my host has default hostname. i already placed tags in fleet menu… --- ## [It is possible to change the bulk\_max\_size and workers on a fleet managed agent?](https://discuss.elastic.co/t/it-is-possible-to-change-the-bulk-max-size-and-workers-on-a-fleet-managed-agent/324380)
**Author:** [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\ **Replies:** 4\ **Last updated:** [February 3, 2023, 3:50pm UTC](https://discuss.elastic.co/t/it-is-possible-to-change-the-bulk-max-size-and-workers-on-a-fleet-managed-agent/324380 "2023-02-03T15:50:33Z")
Hello, I'm using Elastic Agent with the AWS Cloudwatch integration to consume some logs, the volume of logs are pretty high and I'm trying to improve the performance of the Elastic Agent. Filebeat per default uses just… --- ## [Fleet server data stream is not populating data](https://discuss.elastic.co/t/fleet-server-data-stream-is-not-populating-data/324554)
**Author:** [@Kosala\_Randika\_Paran](https://discuss.elastic.co/u/Kosala_Randika_Paran)\ **Replies:** 0\ **Last updated:** [February 2, 2023, 1:49pm UTC](https://discuss.elastic.co/t/fleet-server-data-stream-is-not-populating-data/324554 "2023-02-02T13:49:43Z")
Hi, We have configured fleet server and enrolled elastic agents to that but we can not see any data in Data Stream tab, anyone has an idea what was the issue? --- ## [Can not install fleet server's elastic agent in Logstash server](https://discuss.elastic.co/t/can-not-install-fleet-servers-elastic-agent-in-logstash-server/324409)
**Author:** [@Kosala\_Randika\_Paran](https://discuss.elastic.co/u/Kosala_Randika_Paran)\ **Replies:** 0\ **Last updated:** [February 1, 2023, 10:30am UTC](https://discuss.elastic.co/t/can-not-install-fleet-servers-elastic-agent-in-logstash-server/324409 "2023-02-01T10:30:51Z")
Hi, I am trying to install fleet server's elastic agent in logstash server, but once I installed it given following error. any support on this? --- ## [Azure Event Hub Explanation](https://discuss.elastic.co/t/azure-event-hub-explanation/324373)
**Author:** [@gabrieligbastos](https://discuss.elastic.co/u/gabrieligbastos)\ **Replies:** 2\ **Last updated:** [February 1, 2023, 2:37am UTC](https://discuss.elastic.co/t/azure-event-hub-explanation/324373 "2023-02-01T02:37:23Z")
Hello, Im new to ELK Stack, and Im trying to increase observability with it. Im here have some doubts that I could not find a answer in other topics, probably because my problem is just too newbie! :slight\_smile: I dep… --- ## [Getting "event\_agent\_id\_status auth\_metadata\_missing" error while sending logs from standalone elasticagent](https://discuss.elastic.co/t/getting-event-agent-id-status-auth-metadata-missing-error-while-sending-logs-from-standalone-elasticagent/324378)
**Author:** [@Bhrugu\_Sharma](https://discuss.elastic.co/u/Bhrugu_Sharma)\ **Replies:** 0\ **Last updated:** [February 1, 2023, 2:06am UTC](https://discuss.elastic.co/t/getting-event-agent-id-status-auth-metadata-missing-error-while-sending-logs-from-standalone-elasticagent/324378 "2023-02-01T02:06:18Z")
I am trying to send the logs from my AKS cluster into Elasticsearch the log that I am getting is "event.agent\_id\_status auth\_metadata\_missing" in my kibana even after all the volume mounts are done correctly here's my … --- ## [Operation install messages package registry](https://discuss.elastic.co/t/operation-install-messages-package-registry/323928)
**Author:** [@Tiharqa](https://discuss.elastic.co/u/Tiharqa)\ **Replies:** 0\ **Last updated:** [January 25, 2023, 2:18pm UTC](https://discuss.elastic.co/t/operation-install-messages-package-registry/323928 "2023-01-25T14:18:07Z")
Following the airgapped documentation attempted to create my own package registery and copied all the files to the repo http server accessible by elasticand kibana. I attempted to upgrade the agetns however I didnt see … --- ## [Change Log Levels for Standalone Elastic Agent](https://discuss.elastic.co/t/change-log-levels-for-standalone-elastic-agent/324243)
**Author:** [@DougR](https://discuss.elastic.co/u/DougR)\ **Replies:** 0\ **Last updated:** [January 30, 2023, 3:27pm UTC](https://discuss.elastic.co/t/change-log-levels-for-standalone-elastic-agent/324243 "2023-01-30T15:27:23Z")
I am deploying Elastic Agent to my Kubernetes cluster as a standalone agent. Default log level is info. I would like to change the log level for the agent and ALL beats to warning. I've updated my agent.yml to: agent.lo… --- ## [How to delete revoked Fleet enrolment tokens](https://discuss.elastic.co/t/how-to-delete-revoked-fleet-enrolment-tokens/324026)
**Author:** [@djkprojects](https://discuss.elastic.co/u/djkprojects)\ **Replies:** 4\ **Last updated:** [January 30, 2023, 11:11am UTC](https://discuss.elastic.co/t/how-to-delete-revoked-fleet-enrolment-tokens/324026 "2023-01-30T11:11:39Z")
Hi, Is there a way to delete revoked Fleet enrolment tokens? Thank you --- ## [Elastic Agent "chown" issues on Mac](https://discuss.elastic.co/t/elastic-agent-chown-issues-on-mac/321337)
**Author:** [@kshort](https://discuss.elastic.co/u/kshort)\ **Replies:** 7\ **Last updated:** [January 27, 2023, 4:33pm UTC](https://discuss.elastic.co/t/elastic-agent-chown-issues-on-mac/321337 "2023-01-27T16:33:24Z")
I have an issue when adding the elastic-agent on a Mac. I am following the "Install Elastic Agent on your host" instructions provided for Mac by my agent policy. When starting URL enrollment I get the error: "Error: fai… [Previous page](https://discuss.elastic.co/c/elastic-stack/elastic-agent/91.md?page=39) [Next page](https://discuss.elastic.co/c/elastic-stack/elastic-agent/91.md?page=41)