# Elastic Agent **URL:** https://discuss.elastic.co/c/elastic-stack/elastic-agent/91.md?page=47 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 48 --- ## [Sending logs to a previously created index using Custom Logs integration](https://discuss.elastic.co/t/sending-logs-to-a-previously-created-index-using-custom-logs-integration/315948)
**Author:** [@RP5](https://discuss.elastic.co/u/RP5)\ **Replies:** 0\ **Last updated:** [October 6, 2022, 9:24am UTC](https://discuss.elastic.co/t/sending-logs-to-a-previously-created-index-using-custom-logs-integration/315948 "2022-10-06T09:24:10Z")
I was using filebeat to send data to an index that I had created. (say indextest) Can I send data to the above index (indextest) using Elastic Agent Custom Logs Integration? Thank you --- ## [Is it possible to install multiple Fleet Servers?](https://discuss.elastic.co/t/is-it-possible-to-install-multiple-fleet-servers/315744)
**Author:** [@sirineb](https://discuss.elastic.co/u/sirineb)\ **Replies:** 4\ **Last updated:** [October 6, 2022, 7:15am UTC](https://discuss.elastic.co/t/is-it-possible-to-install-multiple-fleet-servers/315744 "2022-10-06T07:15:03Z")
Hi everyone, I was wondering, is it possible to install multiple Fleet Servers connected to the same ES ? I explain myself, I already have a Fleet Server installed but there might be a lot more Elastic agents than now … --- ## [What does the host refer to when configuring APM integration?](https://discuss.elastic.co/t/what-does-the-host-refer-to-when-configuring-apm-integration/315922)
**Author:** [@pedroaugusto](https://discuss.elastic.co/u/pedroaugusto)\ **Replies:** 0\ **Last updated:** [October 6, 2022, 12:29am UTC](https://discuss.elastic.co/t/what-does-the-host-refer-to-when-configuring-apm-integration/315922 "2022-10-06T00:29:09Z")
Hello! I'm configuring the APM Integration and I have a question. In General -\> Server Configuration. What's the host? Is Kibana's host? Or Elastic's host? Or APM Server's host? Or the host of the application that A… --- ## [Different ILM-Policies for "some" Elastic Agents](https://discuss.elastic.co/t/different-ilm-policies-for-some-elastic-agents/315348)
**Author:** [@BoKu](https://discuss.elastic.co/u/BoKu)\ **Replies:** 0\ **Last updated:** [September 28, 2022, 9:55am UTC](https://discuss.elastic.co/t/different-ilm-policies-for-some-elastic-agents/315348 "2022-09-28T09:55:32Z")
Hello there, let's say i do have an Department Networking. Their servers get an elastic-agent, like every other non-networking server, but this Department wants to delete their logs after less days then any other depart… --- ## [Monitor specific AWS Cloudwatch log\_stream](https://discuss.elastic.co/t/monitor-specific-aws-cloudwatch-log-stream/315395)
**Author:** [@DougR](https://discuss.elastic.co/u/DougR)\ **Replies:** 0\ **Last updated:** [September 28, 2022, 5:35pm UTC](https://discuss.elastic.co/t/monitor-specific-aws-cloudwatch-log-stream/315395 "2022-09-28T17:35:19Z")
I'm using a Fleet-managed Elastic Agent with the AWS Custom Log integration to monitor logs from Cloudwatch. My configuration in Fleet generates the following in the policy: - id: aws-cloudwatch-aws\_logs-334607ab-b4fe-4… --- ## [Log events not being recognized as separate events in Microsoft SQL Server Integration](https://discuss.elastic.co/t/log-events-not-being-recognized-as-separate-events-in-microsoft-sql-server-integration/315707)
**Author:** [@DougR](https://discuss.elastic.co/u/DougR)\ **Replies:** 0\ **Last updated:** [October 3, 2022, 5:08pm UTC](https://discuss.elastic.co/t/log-events-not-being-recognized-as-separate-events-in-microsoft-sql-server-integration/315707 "2022-10-03T17:08:19Z")
I am using the Microsoft SQL Server Integration, v1.4.0 with a fleet-managed policy running on Elastic Agent 8.4.2. I am noticing two things. First, even with "Preserve original event" set to false, the SQL Server error … --- ## [Prevent logs data loss using Cloudflare integration powered by Elastic Agent](https://discuss.elastic.co/t/prevent-logs-data-loss-using-cloudflare-integration-powered-by-elastic-agent/313562)
**Author:** [@yago82](https://discuss.elastic.co/u/yago82)\ **Replies:** 7\ **Last updated:** [October 3, 2022, 10:58am UTC](https://discuss.elastic.co/t/prevent-logs-data-loss-using-cloudflare-integration-powered-by-elastic-agent/313562 "2022-10-03T10:58:52Z")
Using the CludFlare integration, in case of Elastic failure, will the logs that have been sent to elastic be lost? Or there will be queues (or something similar) from which Elastic will restart once it is reset. Or alt… --- ## [Elastic agent install failing](https://discuss.elastic.co/t/elastic-agent-install-failing/315501)
**Author:** [@Cyrax002](https://discuss.elastic.co/u/Cyrax002)\ **Replies:** 1\ **Last updated:** [September 30, 2022, 5:10pm UTC](https://discuss.elastic.co/t/elastic-agent-install-failing/315501 "2022-09-30T17:10:46Z")
When installing elastic agent on one host I am receiving the following error message: panic: EvalSymlinks: too many links goroutine 1 \[running\]: github.com/elastic/elastic-agent/internal/pkg/agent/application/paths.ret… --- ## [Cloudflare integration doesn't work (LogPull)](https://discuss.elastic.co/t/cloudflare-integration-doesnt-work-logpull/315538)
**Author:** [@yago82](https://discuss.elastic.co/u/yago82)\ **Replies:** 0\ **Last updated:** [September 30, 2022, 9:48am UTC](https://discuss.elastic.co/t/cloudflare-integration-doesnt-work-logpull/315538 "2022-09-30T09:48:01Z")
HI to all, I'm try to set up cloudflare integration, it seems all ok (agent,policy,integration) but it's not getting logpull logs. I have configured everything according to the documentation and after I save integration… --- ## [Enrolling Fleet server](https://discuss.elastic.co/t/enrolling-fleet-server/315278)
**Author:** [@BenjaminD](https://discuss.elastic.co/u/BenjaminD)\ **Replies:** 3\ **Last updated:** [September 30, 2022, 9:24am UTC](https://discuss.elastic.co/t/enrolling-fleet-server/315278 "2022-09-30T09:24:55Z")
Hello ! We are having trouble to enroll fleet server on our host. We are working with : Windows Server 2019 Standard Elasticsearch / Kibana / Elastic-Agent version 8.4.2 (same issue with 8.4.1) We try to enroll Fleet… --- ## [Seperate fleet management cluster - integrations, management,](https://discuss.elastic.co/t/seperate-fleet-management-cluster-integrations-management/315507)
**Author:** [@vbohata](https://discuss.elastic.co/u/vbohata)\ **Replies:** 0\ **Last updated:** [September 30, 2022, 12:41am UTC](https://discuss.elastic.co/t/seperate-fleet-management-cluster-integrations-management/315507 "2022-09-30T00:41:10Z")
I checked the documentation and using the logstash outputs it is not possible to use separate fleet managed agents with logstash output to different clusters. But what about the integrations? Lets imagine for big deplo… --- ## [Custom Pipeline with Elastic Agent AWS EC2 Cloudwatch Log integration](https://discuss.elastic.co/t/custom-pipeline-with-elastic-agent-aws-ec2-cloudwatch-log-integration/315031)
**Author:** [@DougR](https://discuss.elastic.co/u/DougR)\ **Replies:** 2\ **Last updated:** [September 28, 2022, 4:00pm UTC](https://discuss.elastic.co/t/custom-pipeline-with-elastic-agent-aws-ec2-cloudwatch-log-integration/315031 "2022-09-28T16:00:13Z")
I'm trying to migrate some Cloudwatch logs currently being captured by Functionbeat to a fleet-managed Elastic Agent integration (AWS EC2 Cloudwatch). The logs are being captured, as expected. However, I am getting a gro… --- ## [Add fleet server self signed certificate error](https://discuss.elastic.co/t/add-fleet-server-self-signed-certificate-error/315187)
**Author:** [@david-a76](https://discuss.elastic.co/u/david-a76)\ **Replies:** 2\ **Last updated:** [September 28, 2022, 12:17pm UTC](https://discuss.elastic.co/t/add-fleet-server-self-signed-certificate-error/315187 "2022-09-28T12:17:39Z")
I'm trying to install Fleet with Kabana's Quick Start Wizard. When I run the installer: ./elastic-agent install --fleet-server-es=https://192.168.80.10:9200 --fleet-server-service-token=AAE....MQQ --fleet-server-policy… --- ## [Dissect\_parsing\_error for Apache Tomcat Integration](https://discuss.elastic.co/t/dissect-parsing-error-for-apache-tomcat-integration/315330)
**Author:** [@Marko\_Todoric](https://discuss.elastic.co/u/Marko_Todoric)\ **Replies:** 0\ **Last updated:** [September 28, 2022, 7:36am UTC](https://discuss.elastic.co/t/dissect-parsing-error-for-apache-tomcat-integration/315330 "2022-09-28T07:36:13Z")
Hello everyone, I'm running 3 node Elasticsearch Cluster with ES Version 8.3.3. Elastic Agent is running with same version on Ubuntu 18.04.6 and trying to collect logs from Apache Tomcat 8.5.24 by reading catalina.out … --- ## [Agent returns access denied](https://discuss.elastic.co/t/agent-returns-access-denied/315310)
**Author:** [@simpleman](https://discuss.elastic.co/u/simpleman)\ **Replies:** 0\ **Last updated:** [September 27, 2022, 8:21pm UTC](https://discuss.elastic.co/t/agent-returns-access-denied/315310 "2022-09-27T20:21:34Z")
We have an air gapped network. We use Symantec Endpoint Security. We have successfully installed ELK 8.4.1 on VM. On the same VM we have the fleet server running. The registry is running on docker in another VM. I try to… --- ## [Duplicate data from filebeat (input type: log)](https://discuss.elastic.co/t/duplicate-data-from-filebeat-input-type-log/315221)
**Author:** [@sathishpal](https://discuss.elastic.co/u/sathishpal)\ **Replies:** 0\ **Last updated:** [September 26, 2022, 11:27pm UTC](https://discuss.elastic.co/t/duplicate-data-from-filebeat-input-type-log/315221 "2022-09-26T23:27:23Z")
Hi All, Duplicate data is sent from Filebeat. When I start the elastic agent, I can see two filebeat processes running. If I Kill the first one it auto restarts and the second one disappears when I kill it twice. Once … --- ## [Where do I find Custom Filestream Log integration?](https://discuss.elastic.co/t/where-do-i-find-custom-filestream-log-integration/315142)
**Author:** [@Geoff\_Rob](https://discuss.elastic.co/u/Geoff_Rob)\ **Replies:** 0\ **Last updated:** [September 26, 2022, 8:18am UTC](https://discuss.elastic.co/t/where-do-i-find-custom-filestream-log-integration/315142 "2022-09-26T08:18:23Z")
Hi, I'm trying to find out where to get " Custom Filestream Log integration" ? I see it in the Github repo, in the main branch, merged in several month ago: integrations/packages/filestream at main · elastic/integratio… --- ## [Elastic Agent configuration for creating new index based on kubernetes namespace](https://discuss.elastic.co/t/elastic-agent-configuration-for-creating-new-index-based-on-kubernetes-namespace/314886)
**Author:** [@umesh2020](https://discuss.elastic.co/u/umesh2020)\ **Replies:** 4\ **Last updated:** [September 22, 2022, 1:57pm UTC](https://discuss.elastic.co/t/elastic-agent-configuration-for-creating-new-index-based-on-kubernetes-namespace/314886 "2022-09-22T13:57:22Z")
Hi In filebeat configuration, I could use the following config to create a separate index per kubernetes namespace. output.elasticsearch: indices: - index: '%{\[kubernetes.namespace\]}-%{\[agent.version\]… --- ## [Elastic-Agent Upgrade missing Version number in Source URI when setting custom Repository](https://discuss.elastic.co/t/elastic-agent-upgrade-missing-version-number-in-source-uri-when-setting-custom-repository/314865)
**Author:** [@matled](https://discuss.elastic.co/u/matled)\ **Replies:** 0\ **Last updated:** [September 21, 2022, 12:19pm UTC](https://discuss.elastic.co/t/elastic-agent-upgrade-missing-version-number-in-source-uri-when-setting-custom-repository/314865 "2022-09-21T12:19:21Z")
Elastic-Stack 8.4.2 Elastic-Agent 8.4.1 -\> Elastic Agent 8.4.2 Upgrade Windows Server 2016 We've encountered an issue with the upgrade of the elastic-agents to the newest version. Looking into the log message from fle… --- ## [Qradar logs to elasticsearch](https://discuss.elastic.co/t/qradar-logs-to-elasticsearch/314853)
**Author:** [@Arslonbek\_Toshev](https://discuss.elastic.co/u/Arslonbek_Toshev)\ **Replies:** 0\ **Last updated:** [September 21, 2022, 10:13am UTC](https://discuss.elastic.co/t/qradar-logs-to-elasticsearch/314853 "2022-09-21T10:13:21Z")
We have couple Sophos FWs sending logs to Qradar SIEM which we plan to extend to Elastic for threat hunting (Log Forwarding from Qradar to Elastic). In Integrations I choose Sophos. but logs don't parse correctly. the pr… --- ## [Elasticsearch Integration - unavailable?](https://discuss.elastic.co/t/elasticsearch-integration-unavailable/314315)
**Author:** [@Jack\_Judge2](https://discuss.elastic.co/u/Jack_Judge2)\ **Replies:** 9\ **Last updated:** [September 20, 2022, 11:34pm UTC](https://discuss.elastic.co/t/elasticsearch-integration-unavailable/314315 "2022-09-20T23:34:23Z")
Hi, I'm building a monitoring cluster built on an 8.1.1 stack and I noticed that the Elasticsearch integration for Agent isn't available but it is available on an older 7.17 stack. Elasticsearch integration docs This … --- ## [Help - elastic integration](https://discuss.elastic.co/t/help-elastic-integration/314804)
**Author:** [@aperkins](https://discuss.elastic.co/u/aperkins)\ **Replies:** 1\ **Last updated:** [September 20, 2022, 7:15pm UTC](https://discuss.elastic.co/t/help-elastic-integration/314804 "2022-09-20T19:15:56Z")
Hope I'm in the right place - yesterday I fumbled through installing the elastic stack, setup an agent, a fleet server (all on the same server) So far installed - Elasticsearch, Logstash, Kibana, Metricsbeat. I've got i… --- ## [Fleetserver installation](https://discuss.elastic.co/t/fleetserver-installation/314719)
**Author:** [@ttyser](https://discuss.elastic.co/u/ttyser)\ **Replies:** 0\ **Last updated:** [September 19, 2022, 6:17pm UTC](https://discuss.elastic.co/t/fleetserver-installation/314719 "2022-09-19T18:17:05Z")
Hello, After spending hours trying different types of configurations and running in circles through all the documentation I will try to find help here. The following setup is done completely on Proxmox. It should help … --- ## [Elastic Agent \`kubernetes\_leaderelection.leader\` condition with integration](https://discuss.elastic.co/t/elastic-agent-kubernetes-leaderelection-leader-condition-with-integration/314714)
**Author:** [@DougR](https://discuss.elastic.co/u/DougR)\ **Replies:** 0\ **Last updated:** [September 19, 2022, 4:51pm UTC](https://discuss.elastic.co/t/elastic-agent-kubernetes-leaderelection-leader-condition-with-integration/314714 "2022-09-19T16:51:58Z")
I'm using ECK to configure a fleet-managed Elastic Agent deployment to monitor some items via API. I would like to have two replicas for failover purposes, but have the various integrations (e.g., Github) run only on a s… --- ## [\[Kubernetes Integration\] Custom ingest pipeline for subset of k8s cluster's container's logs](https://discuss.elastic.co/t/kubernetes-integration-custom-ingest-pipeline-for-subset-of-k8s-clusters-containers-logs/314601)
**Author:** [@woodywoodsta](https://discuss.elastic.co/u/woodywoodsta)\ **Replies:** 2\ **Last updated:** [September 17, 2022, 12:44pm UTC](https://discuss.elastic.co/t/kubernetes-integration-custom-ingest-pipeline-for-subset-of-k8s-clusters-containers-logs/314601 "2022-09-17T12:44:50Z")
I'm using the Kubernetes Integration managed via fleet to collect container logs from my k8s cluster. At the moment, logs from all containers are passed through the same pipeline by means of the integration. I have a ne… --- ## [Elastic Agent Tomcat Integration Error](https://discuss.elastic.co/t/elastic-agent-tomcat-integration-error/314579)
**Author:** [@DougR](https://discuss.elastic.co/u/DougR)\ **Replies:** 0\ **Last updated:** [September 16, 2022, 1:53pm UTC](https://discuss.elastic.co/t/elastic-agent-tomcat-integration-error/314579 "2022-09-16T13:53:40Z")
What versions of Tomcat are supported by the Elastic Agent Tomcat integration? I have an instance which runs an older version of Tomcat (8.5), and I get dissect\_parsing\_error in my events, which are pushed to Elasticsear… --- ## [Elastic Agent Windows Deployment Symlink Issue 8.4.1](https://discuss.elastic.co/t/elastic-agent-windows-deployment-symlink-issue-8-4-1/314462)
**Author:** [@Ad3t0](https://discuss.elastic.co/u/Ad3t0)\ **Replies:** 1\ **Last updated:** [September 15, 2022, 4:19am UTC](https://discuss.elastic.co/t/elastic-agent-windows-deployment-symlink-issue-8-4-1/314462 "2022-09-15T04:19:59Z")
Hello, When attempting to deploy the Elastic agent via Windows Server GPO I receive the error "Error: symlink C:\\Program Files\\Elastic\\Agent\\data\\elastic-agent-8d7885\\elastic-agent .exe C:\\Program Files\\Elastic\\Agent\\… --- ## [Elastic Agent outputs to localhost?](https://discuss.elastic.co/t/elastic-agent-outputs-to-localhost/314341)
**Author:** [@simpleman](https://discuss.elastic.co/u/simpleman)\ **Replies:** 1\ **Last updated:** [September 14, 2022, 7:59pm UTC](https://discuss.elastic.co/t/elastic-agent-outputs-to-localhost/314341 "2022-09-14T19:59:51Z")
I have gone the path of install Fleet Server and Agents in my lab server. My setup is: Windows Server 2016 with Symantec Endpoint Protection installed A Linux VM at 192.168.1.10 running ELK stack properly A Linux VM at… --- ## [Graphite Input Logstash](https://discuss.elastic.co/t/graphite-input-logstash/314457)
**Author:** [@elrozario](https://discuss.elastic.co/u/elrozario)\ **Replies:** 0\ **Last updated:** [September 14, 2022, 7:27pm UTC](https://discuss.elastic.co/t/graphite-input-logstash/314457 "2022-09-14T19:27:30Z")
Hello, I am very new to ELK and trying to ingest data from Graphite but its not working. Here is my logstash pipeline: graphite { host =\> "\*\*\*\*" port =\> "\*\*\*\*" mode =\> "client" … --- ## [Cisco Duo Integration not working](https://discuss.elastic.co/t/cisco-duo-integration-not-working/314454)
**Author:** [@jpayne](https://discuss.elastic.co/u/jpayne)\ **Replies:** 0\ **Last updated:** [September 14, 2022, 7:18pm UTC](https://discuss.elastic.co/t/cisco-duo-integration-not-working/314454 "2022-09-14T19:18:25Z")
Continuing the discussion from Cisco Duo Integration not working: I am on an elastic 8.4.1 stack with Duo D249.8. I installed the duo integration and I do see logs showing up: but all of the dashboards just show emp… [Previous page](https://discuss.elastic.co/c/elastic-stack/elastic-agent/91.md?page=46) [Next page](https://discuss.elastic.co/c/elastic-stack/elastic-agent/91.md?page=48)