# Elastic Agent

**URL:** https://discuss.elastic.co/c/elastic-stack/elastic-agent/91.md?page=46

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 47

---

## [Fortinet integration not parsing all data](https://discuss.elastic.co/t/fortinet-integration-not-parsing-all-data/317369)

<div class="topic-metadata">

**Author:** [@sirineb](https://discuss.elastic.co/u/sirineb)\
**Replies:** 0\
**Last updated:** [October 25, 2022, 6:44am UTC](https://discuss.elastic.co/t/fortinet-integration-not-parsing-all-data/317369 "2022-10-25T06:44:37Z")

</div>

Hi, I posted a topic in the category Elastic Stack Beats as it was advised to do with issues regarding the Elastic Agent. But I am struggling having an answer, so I paste here, in the category Elastic Stack Elastic Agen…

---

## [Can we delay output to Elasticsearch in batch?](https://discuss.elastic.co/t/can-we-delay-output-to-elasticsearch-in-batch/317137)

<div class="topic-metadata">

**Author:** [@quentin.legraverend](https://discuss.elastic.co/u/quentin.legraverend)\
**Replies:** 3\
**Last updated:** [October 24, 2022, 7:46pm UTC](https://discuss.elastic.co/t/can-we-delay-output-to-elasticsearch-in-batch/317137 "2022-10-24T19:46:20Z")

</div>

Hello, I have an Elastic stack self-managed in the cloud with a Fleet Server on it. I have a second environment on-premise with a really limited bandwidth and I want to have some Elastic Agents here also. My first ide…

---

## [Is there an easy way to change the Lifecycle Policy of a Fleet managed data stream?](https://discuss.elastic.co/t/is-there-an-easy-way-to-change-the-lifecycle-policy-of-a-fleet-managed-data-stream/316941)

<div class="topic-metadata">

**Author:** [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\
**Replies:** 2\
**Last updated:** [October 24, 2022, 4:09pm UTC](https://discuss.elastic.co/t/is-there-an-easy-way-to-change-the-lifecycle-policy-of-a-fleet-managed-data-stream/316941 "2022-10-24T16:09:18Z")

</div>

Hello, I'm starting to use the Fleet Server and the Elastic Agent to be able to use some integrations and because of that I'm also using data streams for the first time. I have a fleet server and one agent running wher…

---

## [Can't deploy fleet server : "Remote server is not ready to accept connections..."](https://discuss.elastic.co/t/cant-deploy-fleet-server-remote-server-is-not-ready-to-accept-connections/316912)

<div class="topic-metadata">

**Author:** [@Mouc](https://discuss.elastic.co/u/Mouc)\
**Replies:** 1\
**Last updated:** [October 21, 2022, 9:46am UTC](https://discuss.elastic.co/t/cant-deploy-fleet-server-remote-server-is-not-ready-to-accept-connections/316912 "2022-10-21T09:46:40Z")

</div>

Hello, I am currently trying to deploy a fleet server but I am having a problem at the enrollment step, the self signed certificate is generated for Fleet server, then enrollment is starting to the URL i specified for h…

---

## [Changing the SSL certificate fleet server uses](https://discuss.elastic.co/t/changing-the-ssl-certificate-fleet-server-uses/315902)

<div class="topic-metadata">

**Author:** [@twilson](https://discuss.elastic.co/u/twilson)\
**Replies:** 4\
**Last updated:** [October 20, 2022, 5:40pm UTC](https://discuss.elastic.co/t/changing-the-ssl-certificate-fleet-server-uses/315902 "2022-10-20T17:40:47Z")

</div>

Is there a way to specify a new certificate that the fleet server will use for communication over port 8220 other than re-enrolling the agent? This is the certificate that is specified in the --fleet-server-cert and --f…

---

## [Prometheus module remote\_write metricset](https://discuss.elastic.co/t/prometheus-module-remote-write-metricset/317114)

<div class="topic-metadata">

**Author:** [@ChristianOelsner](https://discuss.elastic.co/u/ChristianOelsner)\
**Replies:** 0\
**Last updated:** [October 20, 2022, 1:02pm UTC](https://discuss.elastic.co/t/prometheus-module-remote-write-metricset/317114 "2022-10-20T13:02:24Z")

</div>

Hello, We are scraping metrics from some 30+ Kafka clusters running in Confluent Cloud. We are scraping the metrics api using prometheus. Prometheus is configured to remote\_write to an elastic agent running among othe…

---

## [Run same script in multiple environments](https://discuss.elastic.co/t/run-same-script-in-multiple-environments/316937)

<div class="topic-metadata">

**Author:** [@Kris\_MacKay](https://discuss.elastic.co/u/Kris_MacKay)\
**Replies:** 1\
**Last updated:** [October 20, 2022, 12:34pm UTC](https://discuss.elastic.co/t/run-same-script-in-multiple-environments/316937 "2022-10-20T12:34:26Z")

</div>

I'd like to reuse the same script for different environments. The opening URL is dependent on passed in parameter. For each Fleet agent policy, I'd like the passed in parameter to apply to just that script, but not shar…

---

## [Is it possible to add multiple outputs for elastic agents?](https://discuss.elastic.co/t/is-it-possible-to-add-multiple-outputs-for-elastic-agents/316891)

<div class="topic-metadata">

**Author:** [@shi](https://discuss.elastic.co/u/shi)\
**Replies:** 5\
**Last updated:** [October 20, 2022, 4:20am UTC](https://discuss.elastic.co/t/is-it-possible-to-add-multiple-outputs-for-elastic-agents/316891 "2022-10-20T04:20:29Z")

</div>

We have 3 elasticsearch nodes and a client node. node 1, node 2, node 3 The current output of elastic agent is node 1. If the node 1 goes down is there a way for elastic agent to automatically sent its output to node 2…

---

## [Alert for Elastic-Agent Offline](https://discuss.elastic.co/t/alert-for-elastic-agent-offline/317058)

<div class="topic-metadata">

**Author:** [@perea870724](https://discuss.elastic.co/u/perea870724)\
**Replies:** 0\
**Last updated:** [October 19, 2022, 11:34pm UTC](https://discuss.elastic.co/t/alert-for-elastic-agent-offline/317058 "2022-10-19T23:34:26Z")

</div>

Hello, Friends, does anyone know how it is possible to send an alert when an elastic-agent goes down?

---

## [Elasticsearch with nmap](https://discuss.elastic.co/t/elasticsearch-with-nmap/316998)

<div class="topic-metadata">

**Author:** [@VitorBarroso](https://discuss.elastic.co/u/VitorBarroso)\
**Replies:** 1\
**Last updated:** [October 19, 2022, 9:47pm UTC](https://discuss.elastic.co/t/elasticsearch-with-nmap/316998 "2022-10-19T21:47:51Z")

</div>

Hello, Can my elasticsearch works like nmap, for example, when i add a machine on elasticsearch, the elasticsearch detect the vulnerabilies(cve) for this machine and add on a dashboard?

---

## [Different time in copied index and pipeline](https://discuss.elastic.co/t/different-time-in-copied-index-and-pipeline/316980)

<div class="topic-metadata">

**Author:** [@hermlam](https://discuss.elastic.co/u/hermlam)\
**Replies:** 0\
**Last updated:** [October 19, 2022, 10:02am UTC](https://discuss.elastic.co/t/different-time-in-copied-index-and-pipeline/316980 "2022-10-19T10:02:25Z")

</div>

I have something strange with timezones. From my raspberry Pi I am sending some specific information (temperature) to Sylog (separate Syslog Server). Same format as normal syslog: In my Syslog server I am splitting the…

---

## [Nested Json](https://discuss.elastic.co/t/nested-json/316939)

<div class="topic-metadata">

**Author:** [@Rdonaldson](https://discuss.elastic.co/u/Rdonaldson)\
**Replies:** 0\
**Last updated:** [October 18, 2022, 10:56pm UTC](https://discuss.elastic.co/t/nested-json/316939 "2022-10-18T22:56:28Z")

</div>

New to ES and Json. Working on building queries to extract product logging events. Could you point me in the direction/search terms/pointers so I can learn how to parse out/select data fields that are within a nested J…

---

## [Fleet Integrations in dockerized services](https://discuss.elastic.co/t/fleet-integrations-in-dockerized-services/316926)

<div class="topic-metadata">

**Author:** [@Gustavo\_Llermaly](https://discuss.elastic.co/u/Gustavo_Llermaly)\
**Replies:** 0\
**Last updated:** [October 18, 2022, 5:53pm UTC](https://discuss.elastic.co/t/fleet-integrations-in-dockerized-services/316926 "2022-10-18T17:53:39Z")

</div>

Hello, I'm trying to get som Traefik logs from a docker container. With regular filebeat I can configure the autodiscover option to make it work, but not sure how to do this with Fleet. I could only find this: docker…

---

## [Elastic-agent disappeared](https://discuss.elastic.co/t/elastic-agent-disappeared/316846)

<div class="topic-metadata">

**Author:** [@gx\_zhao](https://discuss.elastic.co/u/gx_zhao)\
**Replies:** 0\
**Last updated:** [October 18, 2022, 6:43am UTC](https://discuss.elastic.co/t/elastic-agent-disappeared/316846 "2022-10-18T06:43:59Z")

</div>

I'm using elk 8.4.3, and deploy by eck 2.4.0. My fleet server and agents always disappeared about 10 days after enrollment. I suspect it is because I changed some Index Lifecycle Policy, like 'logs' or 'metrics', by adde…

---

## [Elastic Agent / Endpoint no longer can connect to fleet server](https://discuss.elastic.co/t/elastic-agent-endpoint-no-longer-can-connect-to-fleet-server/316702)

<div class="topic-metadata">

**Author:** [@Ting\_sf](https://discuss.elastic.co/u/Ting_sf)\
**Replies:** 1\
**Last updated:** [October 17, 2022, 8:07pm UTC](https://discuss.elastic.co/t/elastic-agent-endpoint-no-longer-can-connect-to-fleet-server/316702 "2022-10-17T20:07:44Z")

</div>

I had elastic agent / end point installed on about 10 computers, they were working for pass months, I just noted today that all pcs are showing offline status, and I check logs, all show following error: \[elastic\_agent\]…

---

## [Elastic agent elastic-agent-control.sock does not exist](https://discuss.elastic.co/t/elastic-agent-elastic-agent-control-sock-does-not-exist/316619)

<div class="topic-metadata">

**Author:** [@stoza](https://discuss.elastic.co/u/stoza)\
**Replies:** 2\
**Last updated:** [October 17, 2022, 7:23am UTC](https://discuss.elastic.co/t/elastic-agent-elastic-agent-control-sock-does-not-exist/316619 "2022-10-17T07:23:40Z")

</div>

Hi Everyone, I'm trying to install an elastic agent and to enroll it with fleet. The enrollment is working, I can see the agent on my fleet server but after few seconds it goes into the unhealthy state. when I run ela…

---

## [No Activity From Agent - Agent Renamed](https://discuss.elastic.co/t/no-activity-from-agent-agent-renamed/315492)

<div class="topic-metadata">

**Author:** [@Marko\_Todoric](https://discuss.elastic.co/u/Marko_Todoric)\
**Replies:** 1\
**Last updated:** [October 15, 2022, 9:58pm UTC](https://discuss.elastic.co/t/no-activity-from-agent-agent-renamed/315492 "2022-10-15T21:58:18Z")

</div>

Hello everyone, I have this glitch with Kibana where i added an agent to fleet , then figured i need to rename it so i renamed the host. Rename was successful, howerver I'm getting alerts " No Activity From Agent" whole…

---

## [Elastic Agent "Unhealthy" - Error while dialing open \\\\\\\\.\\\\pipe\\\\elastic-agent-system: Access Denied](https://discuss.elastic.co/t/elastic-agent-unhealthy-error-while-dialing-open-pipe-elastic-agent-system-access-denied/316617)

<div class="topic-metadata">

**Author:** [@Doriane.R](https://discuss.elastic.co/u/Doriane.R)\
**Replies:** 0\
**Last updated:** [October 14, 2022, 9:36am UTC](https://discuss.elastic.co/t/elastic-agent-unhealthy-error-while-dialing-open-pipe-elastic-agent-system-access-denied/316617 "2022-10-14T09:36:01Z")

</div>

Hi, I am new to ELK and I have an issue with my Elastic Agents on my Windows servers. I am working with : Elasticsearch / Kibana version 8.4.2 Elastic-Agent version 8.4.2 I have successfully enroll my Fleet Server (…

---

## [Export Elastic Agent policies](https://discuss.elastic.co/t/export-elastic-agent-policies/316608)

<div class="topic-metadata">

**Author:** [@sirineb](https://discuss.elastic.co/u/sirineb)\
**Replies:** 0\
**Last updated:** [October 14, 2022, 8:32am UTC](https://discuss.elastic.co/t/export-elastic-agent-policies/316608 "2022-10-14T08:32:20Z")

</div>

Hi everyone, I am currently thinking about moving my ELK (8.3 on premises) to Docker containers, so I'd like to know if it is possible to export my Fleet agent policies and import them afterwards (with PUT in the API fo…

---

## [Using Elastic Agent integration with different pipelines](https://discuss.elastic.co/t/using-elastic-agent-integration-with-different-pipelines/316529)

<div class="topic-metadata">

**Author:** [@djkprojects](https://discuss.elastic.co/u/djkprojects)\
**Replies:** 1\
**Last updated:** [October 14, 2022, 6:13am UTC](https://discuss.elastic.co/t/using-elastic-agent-integration-with-different-pipelines/316529 "2022-10-14T06:13:13Z")

</div>

Hello, We are looking into switching over from Beats to Elastic Agent and came across an issue with not being able to define different ingest pipelines when using Custom Logs integrations e.g.: we have two different …

---

## [Check monitored host available updates](https://discuss.elastic.co/t/check-monitored-host-available-updates/316584)

<div class="topic-metadata">

**Author:** [@gbeltramelli](https://discuss.elastic.co/u/gbeltramelli)\
**Replies:** 0\
**Last updated:** [October 13, 2022, 10:14pm UTC](https://discuss.elastic.co/t/check-monitored-host-available-updates/316584 "2022-10-13T22:14:07Z")

</div>

Hi community! I wonder if there is any way to monitor the pending updates of the OS that have elastic-agent installed? wright now we are doinig it with Nagios but we are migrating the entire monitoring solution to elast…

---

## [Fleet - IIS integration](https://discuss.elastic.co/t/fleet-iis-integration/315357)

<div class="topic-metadata">

**Author:** [@tazemeta](https://discuss.elastic.co/u/tazemeta)\
**Replies:** 2\
**Last updated:** [October 13, 2022, 7:56am UTC](https://discuss.elastic.co/t/fleet-iis-integration/315357 "2022-10-13T07:56:02Z")

</div>

Hello there, i have fleet server and iis integration on my elk stack. Elastic agent on the iis server ships "../Logfiles/..log" files to elasticsearch but it sends all log files on that folder(est. there are 2 years log…

---

## [Does a Fleet server need to be its own machine?](https://discuss.elastic.co/t/does-a-fleet-server-need-to-be-its-own-machine/315904)

<div class="topic-metadata">

**Author:** [@Tucker\_Green](https://discuss.elastic.co/u/Tucker_Green)\
**Replies:** 1\
**Last updated:** [October 13, 2022, 3:49am UTC](https://discuss.elastic.co/t/does-a-fleet-server-need-to-be-its-own-machine/315904 "2022-10-13T03:49:10Z")

</div>

Hey guys, I am trying to get the stack up and running, but I am having some trouble with Fleet. My first question is.. does Fleet need to be installed on its own VM, or can it be installed on the same one as elasticsearc…

---

## [How can I collect Palo Alto firewall metrics (CPU, RAM, Disk usage)](https://discuss.elastic.co/t/how-can-i-collect-palo-alto-firewall-metrics-cpu-ram-disk-usage/316097)

<div class="topic-metadata">

**Author:** [@shortone](https://discuss.elastic.co/u/shortone)\
**Replies:** 1\
**Last updated:** [October 12, 2022, 6:52pm UTC](https://discuss.elastic.co/t/how-can-i-collect-palo-alto-firewall-metrics-cpu-ram-disk-usage/316097 "2022-10-12T18:52:42Z")

</div>

Hello! I've recently setup the elastic agent on an intermediate host, I have syslog forwarding from our palo alto firewall to this host which is then shipping to elasticsearch and the palo alto integration seems to be w…

---

## [Elastic agent behind NAT](https://discuss.elastic.co/t/elastic-agent-behind-nat/316424)

<div class="topic-metadata">

**Author:** [@krzychohoho](https://discuss.elastic.co/u/krzychohoho)\
**Replies:** 1\
**Last updated:** [October 12, 2022, 10:05am UTC](https://discuss.elastic.co/t/elastic-agent-behind-nat/316424 "2022-10-12T10:05:45Z")

</div>

Hi, I came across some issues while trying to install elastic-agent. The case is I have a fleet server with elastic and kibana on local machine with local IP adres. The problem is that i need to deploy elastic agent on a…

---

## [Elastic-agent communication error](https://discuss.elastic.co/t/elastic-agent-communication-error/316418)

<div class="topic-metadata">

**Author:** [@Mohsin\_Ashraf](https://discuss.elastic.co/u/Mohsin_Ashraf)\
**Replies:** 0\
**Last updated:** [October 12, 2022, 8:18am UTC](https://discuss.elastic.co/t/elastic-agent-communication-error/316418 "2022-10-12T08:18:54Z")

</div>

hi, When I tried to enrol elastic-agent, it was successfully enrolled but after a few time, it give me this error I tried to resolve this but was not able to resolve this error. if anyone has a solution to this please h…

---

## [Enrolling fleet using FQDN certificates](https://discuss.elastic.co/t/enrolling-fleet-using-fqdn-certificates/316328)

<div class="topic-metadata">

**Author:** [@krzychohoho](https://discuss.elastic.co/u/krzychohoho)\
**Replies:** 2\
**Last updated:** [October 12, 2022, 7:35am UTC](https://discuss.elastic.co/t/enrolling-fleet-using-fqdn-certificates/316328 "2022-10-12T07:35:15Z")

</div>

Hi, I came across some issues during installation of fleet server. First of all i need the server to run on FQDn rather than on IP adress. So I started with generating certificates using dns instead of IP. The command …

---

## [Fleet enroll error unknown resource](https://discuss.elastic.co/t/fleet-enroll-error-unknown-resource/316402)

<div class="topic-metadata">

**Author:** [@Alexej\_Gerstmaier](https://discuss.elastic.co/u/Alexej_Gerstmaier)\
**Replies:** 0\
**Last updated:** [October 12, 2022, 6:59am UTC](https://discuss.elastic.co/t/fleet-enroll-error-unknown-resource/316402 "2022-10-12T06:59:51Z")

</div>

I have the same problem as this guy: Elastic-agent install: Unknown resource

---

## [Install Elastic Agent on Windows from a read-only smb share](https://discuss.elastic.co/t/install-elastic-agent-on-windows-from-a-read-only-smb-share/316287)

<div class="topic-metadata">

**Author:** [@moschur](https://discuss.elastic.co/u/moschur)\
**Replies:** 0\
**Last updated:** [October 11, 2022, 8:35am UTC](https://discuss.elastic.co/t/install-elastic-agent-on-windows-from-a-read-only-smb-share/316287 "2022-10-11T08:35:34Z")

</div>

Hello! we are trying to install Elastic Agent (fleet-managed) on Windows using our software distribution tool. For this, we place the installation files on a read-only smb share. During installation, this share is mount…

---

## [How to reset the kibana fleet settings](https://discuss.elastic.co/t/how-to-reset-the-kibana-fleet-settings/316056)

<div class="topic-metadata">

**Author:** [@lordcosmos1978](https://discuss.elastic.co/u/lordcosmos1978)\
**Replies:** 0\
**Last updated:** [October 7, 2022, 9:47am UTC](https://discuss.elastic.co/t/how-to-reset-the-kibana-fleet-settings/316056 "2022-10-07T09:47:17Z")

</div>

Somehow I messed up the fleet setup. I am now unable to start the rollout of a new fleet server. Is there a way ( perhaps deleting the fleet indexes but it wont allow me ) to get back at the first step where you get the…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elastic-agent/91.md?page=45)

[Next page](https://discuss.elastic.co/c/elastic-stack/elastic-agent/91.md?page=47)
