# Elastic Agent **URL:** https://discuss.elastic.co/c/elastic-stack/elastic-agent/91.md?page=48 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 49 --- ## [Fleet Server is not Healthy](https://discuss.elastic.co/t/fleet-server-is-not-healthy/314359)
**Author:** [@xqaiviwjxzw](https://discuss.elastic.co/u/xqaiviwjxzw)\ **Replies:** 0\ **Last updated:** [September 14, 2022, 3:37am UTC](https://discuss.elastic.co/t/fleet-server-is-not-healthy/314359 "2022-09-14T03:37:19Z")
After I upgraded from 8.3.2 to 8.4.1, my fleet shows Fleet Server is not Healthy, but agent is healthy, how do I need to deal with this problem? --- ## [Elastic-Agent - failed to dispatch actions, error: could not parse the configuration from the policy: duplicate key accessing 'ssl.certificate\_authorities'](https://discuss.elastic.co/t/elastic-agent-failed-to-dispatch-actions-error-could-not-parse-the-configuration-from-the-policy-duplicate-key-accessing-ssl-certificate-authorities/314333)
**Author:** [@el-jefe3](https://discuss.elastic.co/u/el-jefe3)\ **Replies:** 0\ **Last updated:** [September 13, 2022, 7:18pm UTC](https://discuss.elastic.co/t/elastic-agent-failed-to-dispatch-actions-error-could-not-parse-the-configuration-from-the-policy-duplicate-key-accessing-ssl-certificate-authorities/314333 "2022-09-13T19:18:06Z")
Hi, I have recently added Fleet Server to my stack, but I am having problems with my SSL Certificates (\*Wild Card Certs). I have been able to successfully to integrate new certificates for both Transport and HTTP, but I … --- ## [Not able to deploy Fleet-managed elastic agent on k8s (quickstart template)](https://discuss.elastic.co/t/not-able-to-deploy-fleet-managed-elastic-agent-on-k8s-quickstart-template/314304)
**Author:** [@Asaf\_balink](https://discuss.elastic.co/u/Asaf_balink)\ **Replies:** 0\ **Last updated:** [September 13, 2022, 2:19pm UTC](https://discuss.elastic.co/t/not-able-to-deploy-fleet-managed-elastic-agent-on-k8s-quickstart-template/314304 "2022-09-13T14:19:59Z")
Hey, I'm trying to deploy Fleet Server and Elastic Agent on Kubernetes using the quickstart manual: Since I've deployed my stack under a different namespace, all I did was changing the namespace on the provided manife… --- ## [Apache HTTP Server Assets](https://discuss.elastic.co/t/apache-http-server-assets/314091)
**Author:** [@6igwig](https://discuss.elastic.co/u/6igwig)\ **Replies:** 2\ **Last updated:** [September 13, 2022, 12:49pm UTC](https://discuss.elastic.co/t/apache-http-server-assets/314091 "2022-09-13T12:49:02Z")
I installed the assets for the Apache HTTP Server integration and everything showed up in kibana except for the Anomaly detection jobs. I have tried reinstalling all the assets to no avail. How do I install the ML jobs f… --- ## [Heartbeat auto discover not working](https://discuss.elastic.co/t/heartbeat-auto-discover-not-working/314136)
**Author:** [@sanjaychahar](https://discuss.elastic.co/u/sanjaychahar)\ **Replies:** 0\ **Last updated:** [September 11, 2022, 10:45am UTC](https://discuss.elastic.co/t/heartbeat-auto-discover-not-working/314136 "2022-09-11T10:45:46Z")
Hello everyone I have recently deploy heartbeat 7.16.3 in my k8s cluster and after deployment I am not able see heartbeat.autodiscover config inside pod config yaml but its there in my deployment yaml file. Can you ple… --- ## [Install Fleet Server on same machine as Elasticstack](https://discuss.elastic.co/t/install-fleet-server-on-same-machine-as-elasticstack/314094)
**Author:** [@Hardik\_Sanghavi](https://discuss.elastic.co/u/Hardik_Sanghavi)\ **Replies:** 0\ **Last updated:** [September 9, 2022, 8:49pm UTC](https://discuss.elastic.co/t/install-fleet-server-on-same-machine-as-elasticstack/314094 "2022-09-09T20:49:25Z")
I have installed Elasticsearch 8.1.3 and Kibana on an Ubuntu machine and has been running for a while. I wanted to add Fleet Server to the same machine but when I follow the steps here, it says elastic agent is already … --- ## [Health agent but no data sent to fleet server / elasticsearch?](https://discuss.elastic.co/t/health-agent-but-no-data-sent-to-fleet-server-elasticsearch/313559)
**Author:** [@smm](https://discuss.elastic.co/u/smm)\ **Replies:** 1\ **Last updated:** [September 9, 2022, 3:56am UTC](https://discuss.elastic.co/t/health-agent-but-no-data-sent-to-fleet-server-elasticsearch/313559 "2022-09-09T03:56:07Z")
Hi there, I am running an all-in-one node with elasticsearch, kibana, logstash all 7.17.4 and fleet running. I have 2 agents. One on the this all-in-one node. The other installes to a second, empy ubuntu VM - just to co… --- ## [Fleet Server not respecting custom port config](https://discuss.elastic.co/t/fleet-server-not-respecting-custom-port-config/313590)
**Author:** [@bfarren240](https://discuss.elastic.co/u/bfarren240)\ **Replies:** 4\ **Last updated:** [September 9, 2022, 1:00am UTC](https://discuss.elastic.co/t/fleet-server-not-respecting-custom-port-config/313590 "2022-09-09T01:00:00Z")
Upgraded ES and Kibana from 8.1.2 -\> 8.4.1. Un-enrolled my fleet server, and deployed a new fleet server agent with the following (newly created in 8.4.1) config: However, the elastic agent does not respect the … --- ## [Add Elastic Agent tags to log events](https://discuss.elastic.co/t/add-elastic-agent-tags-to-log-events/312737)
**Author:** [@DougR](https://discuss.elastic.co/u/DougR)\ **Replies:** 7\ **Last updated:** [September 8, 2022, 7:58pm UTC](https://discuss.elastic.co/t/add-elastic-agent-tags-to-log-events/312737 "2022-09-08T19:58:53Z")
Is there a way to append the Elastic Agent tags to the event, or at least to log events? My use case is that I designate agents by application environment (e.g., dev/qa/stage/prod), and would like that tag to be availabl… --- ## [I am looking to add some custom data to the date sent using Elastic Agents](https://discuss.elastic.co/t/i-am-looking-to-add-some-custom-data-to-the-date-sent-using-elastic-agents/313995)
**Author:** [@Garry](https://discuss.elastic.co/u/Garry)\ **Replies:** 0\ **Last updated:** [September 8, 2022, 12:59pm UTC](https://discuss.elastic.co/t/i-am-looking-to-add-some-custom-data-to-the-date-sent-using-elastic-agents/313995 "2022-09-08T12:59:36Z")
Hi, I am am looking to add some custom data through the integrations used by elastic agents. For example, when I manually use metricbeat I can send through static custom fields using processors: add\_host\_metadata: ~ a… --- ## [ElasticSearch IIS time-taken Field is Missing](https://discuss.elastic.co/t/elasticsearch-iis-time-taken-field-is-missing/313118)
**Author:** [@eagles40cnuh](https://discuss.elastic.co/u/eagles40cnuh)\ **Replies:** 2\ **Last updated:** [September 8, 2022, 10:50am UTC](https://discuss.elastic.co/t/elasticsearch-iis-time-taken-field-is-missing/313118 "2022-09-08T10:50:58Z")
My ELK Version 8.3 (Elasticsearch, Kibana, ElasticAgent, Beats....) ElasticAgent installed my Server Host (Complete) ALL IIS LogField Enabled Data collection was successful But.... Just 1 Field(Time-Taken) do… --- ## [Does Elastic Agent supports Kafka as an Input?](https://discuss.elastic.co/t/does-elastic-agent-supports-kafka-as-an-input/312290)
**Author:** [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\ **Replies:** 1\ **Last updated:** [September 7, 2022, 10:15pm UTC](https://discuss.elastic.co/t/does-elastic-agent-supports-kafka-as-an-input/312290 "2022-09-07T22:15:45Z")
Hello, We are thinking in migrate some of our ingestion from Logstash to the integrations of Elastic Agent, but while researching the documentation of the Elastic Agent we were not able to find anything about using Kafk… --- ## [Fleet Server - Duplicate key](https://discuss.elastic.co/t/fleet-server-duplicate-key/313896)
**Author:** [@el-jefe3](https://discuss.elastic.co/u/el-jefe3)\ **Replies:** 0\ **Last updated:** [September 7, 2022, 2:31pm UTC](https://discuss.elastic.co/t/fleet-server-duplicate-key/313896 "2022-09-07T14:31:09Z")
Hello everyone, I recently configured Fleet Server on my stack. During the configuration I selected Production and entered my keys (Wildcard Certificates). These are the same ones I used for transport and have obvious… --- ## [Add profile option for fleet server host URL in fleet server settings](https://discuss.elastic.co/t/add-profile-option-for-fleet-server-host-url-in-fleet-server-settings/313874)
**Author:** [@frederikvandeputte](https://discuss.elastic.co/u/frederikvandeputte)\ **Replies:** 0\ **Last updated:** [September 7, 2022, 10:47am UTC](https://discuss.elastic.co/t/add-profile-option-for-fleet-server-host-url-in-fleet-server-settings/313874 "2022-09-07T10:47:59Z")
Alike to the outputs profiles for Elasticsearch/Logstash and the Agent Binary Download that you now can specify in Agent policy settings, it would be very useful to also be able to do that for the Fleet server hosts part… --- ## [Elastic-agent cloudflare logpull and problem with using processors for filter events](https://discuss.elastic.co/t/elastic-agent-cloudflare-logpull-and-problem-with-using-processors-for-filter-events/312069)
**Author:** [@slast](https://discuss.elastic.co/u/slast)\ **Replies:** 1\ **Last updated:** [August 15, 2022, 10:43am UTC](https://discuss.elastic.co/t/elastic-agent-cloudflare-logpull-and-problem-with-using-processors-for-filter-events/312069 "2022-08-15T10:43:46Z")
Hi Everyone I have a problem with elastic-agent( ver 7.17.4) that we are using to collect logs from cloudflare. I want to drop some events by using processors in "Edit Cloudflare integration" - but nothing is work. … --- ## [Squid Logs Integration (Technical preview) ignores custom DNS processor when added under the integration's advanced configuration section](https://discuss.elastic.co/t/squid-logs-integration-technical-preview-ignores-custom-dns-processor-when-added-under-the-integrations-advanced-configuration-section/313853)
**Author:** [@ipaq](https://discuss.elastic.co/u/ipaq)\ **Replies:** 0\ **Last updated:** [September 7, 2022, 7:16am UTC](https://discuss.elastic.co/t/squid-logs-integration-technical-preview-ignores-custom-dns-processor-when-added-under-the-integrations-advanced-configuration-section/313853 "2022-09-07T07:16:47Z")
Hi elastic community, I've been discussing this issue with support for a little while however they've advised this may be a bug that could need looking into so I've been referred here. We have some routers running both… --- ## [Endpoint Security integration and index naming (.logs-endpoint.action.responses)](https://discuss.elastic.co/t/endpoint-security-integration-and-index-naming-logs-endpoint-action-responses/313744)
**Author:** [@ivo.raisr](https://discuss.elastic.co/u/ivo.raisr)\ **Replies:** 1\ **Last updated:** [September 6, 2022, 9:33am UTC](https://discuss.elastic.co/t/endpoint-security-integration-and-index-naming-logs-endpoint-action-responses/313744 "2022-09-06T09:33:59Z")
"Endpoint and Cloud Security" integration for Elastic Agent mentions in the documentation (for Elastic 8.4.1) that ...The log type of documents are stored in the logs-endpoint.\* indices. ... However this is not entirel… --- ## [Error: fail to communicate with updated API client hosts](https://discuss.elastic.co/t/error-fail-to-communicate-with-updated-api-client-hosts/313525)
**Author:** [@ethical20](https://discuss.elastic.co/u/ethical20)\ **Replies:** 2\ **Last updated:** [September 6, 2022, 6:37am UTC](https://discuss.elastic.co/t/error-fail-to-communicate-with-updated-api-client-hosts/313525 "2022-09-06T06:37:41Z")
Hi All, I have a self managed fleet server with one local machine connecting perfectly and i can see logs. I've installed a new remote cloud machine, the installation was successful but I can't see logs coming. Checki… --- ## [Crowdstrike Integration with Elastic Agent](https://discuss.elastic.co/t/crowdstrike-integration-with-elastic-agent/312332)
**Author:** [@mancharagopan](https://discuss.elastic.co/u/mancharagopan)\ **Replies:** 1\ **Last updated:** [September 6, 2022, 4:44am UTC](https://discuss.elastic.co/t/crowdstrike-integration-with-elastic-agent/312332 "2022-09-06T04:44:11Z")
I am planning to integrate Crowdstrike with Elastic stack using elastic agent. I have installed Elasticsearch and Kibana 8.3 successfully with security enabled. This is my first time working with elastic agent. Can someb… --- ## [Cloudflare integration not working](https://discuss.elastic.co/t/cloudflare-integration-not-working/312631)
**Author:** [@Guncixx](https://discuss.elastic.co/u/Guncixx)\ **Replies:** 1\ **Last updated:** [September 6, 2022, 2:00am UTC](https://discuss.elastic.co/t/cloudflare-integration-not-working/312631 "2022-09-06T02:00:39Z")
I have set up cloudflare integration already some time time ago, at first it was working without any issue but after recent version updates it's not getting either audit or logpull logs. I have configured everything acco… --- ## [Event correlation rule for new user creation](https://discuss.elastic.co/t/event-correlation-rule-for-new-user-creation/313690)
**Author:** [@realtech2338](https://discuss.elastic.co/u/realtech2338)\ **Replies:** 0\ **Last updated:** [September 5, 2022, 1:39pm UTC](https://discuss.elastic.co/t/event-correlation-rule-for-new-user-creation/313690 "2022-09-05T13:39:26Z")
Hi Team, I am trying create a new correlation rule for a series of evenid's . I have replicated the scenario in my lab. When a threat actor creates a new account by copying existing admin account and assiging new name e… --- ## [Elastic Agent already installed but not reporting to server](https://discuss.elastic.co/t/elastic-agent-already-installed-but-not-reporting-to-server/313503)
**Author:** [@Ashish10195](https://discuss.elastic.co/u/Ashish10195)\ **Replies:** 0\ **Last updated:** [September 2, 2022, 6:20am UTC](https://discuss.elastic.co/t/elastic-agent-already-installed-but-not-reporting-to-server/313503 "2022-09-02T06:20:07Z")
We have some servers in same environment with same Elastic Agent but not reporting to server .some are showing in Offline state and some are not showing anywhere .if we reinstall the Agent all the server will start showi… --- ## [Elastic agent - Google Cloud metrics integration](https://discuss.elastic.co/t/elastic-agent-google-cloud-metrics-integration/313450)
**Author:** [@Chris\_Pinto](https://discuss.elastic.co/u/Chris_Pinto)\ **Replies:** 4\ **Last updated:** [September 1, 2022, 5:31pm UTC](https://discuss.elastic.co/t/elastic-agent-google-cloud-metrics-integration/313450 "2022-09-01T17:31:49Z")
Request integrations for the Google cloud metrics using Elastic Agent --- ## [Shutting down Elastic Agent and sending last events](https://discuss.elastic.co/t/shutting-down-elastic-agent-and-sending-last-events/313347)
**Author:** [@smm](https://discuss.elastic.co/u/smm)\ **Replies:** 2\ **Last updated:** [September 1, 2022, 1:21pm UTC](https://discuss.elastic.co/t/shutting-down-elastic-agent-and-sending-last-events/313347 "2022-09-01T13:21:45Z")
Hi There, in a fresh / one node vm 7.17.4 with elasticsearch / Kibana / Logstash running I went to Fleet-\>agent to try for the first time this new tech. I go step by step with what is written here Add a Fleet Server | … --- ## [Crowdstrike Fleet Integration Ingest Pipeline Modifies Agent Fields](https://discuss.elastic.co/t/crowdstrike-fleet-integration-ingest-pipeline-modifies-agent-fields/313368)
**Author:** [@BrianD](https://discuss.elastic.co/u/BrianD)\ **Replies:** 0\ **Last updated:** [August 31, 2022, 2:37pm UTC](https://discuss.elastic.co/t/crowdstrike-fleet-integration-ingest-pipeline-modifies-agent-fields/313368 "2022-08-31T14:37:15Z")
From my understanding, the 'agent' field holds information about the filebeat agent used to pull in data from the Fleet integration. However, the Crowdstrike integration makes several changes to the 'agent.type' and 'age… --- ## [Large number of entries in \`host.ip\` of almost all logs from Elastic Agent](https://discuss.elastic.co/t/large-number-of-entries-in-host-ip-of-almost-all-logs-from-elastic-agent/313359)
**Author:** [@woodywoodsta](https://discuss.elastic.co/u/woodywoodsta)\ **Replies:** 0\ **Last updated:** [August 31, 2022, 12:39pm UTC](https://discuss.elastic.co/t/large-number-of-entries-in-host-ip-of-almost-all-logs-from-elastic-agent/313359 "2022-08-31T12:39:30Z")
I have an ECK managed Elastic Agent shipping logs to ES. In logs and metrics documents, the host.ip field has a large list of duplicate IPV6 addresses. An example: \[\, … --- ## [Elastic Agent Synthetics integration - How to separate hosts in icmp monitor](https://discuss.elastic.co/t/elastic-agent-synthetics-integration-how-to-separate-hosts-in-icmp-monitor/313354)
**Author:** [@norgro2601](https://discuss.elastic.co/u/norgro2601)\ **Replies:** 0\ **Last updated:** [August 31, 2022, 12:07pm UTC](https://discuss.elastic.co/t/elastic-agent-synthetics-integration-how-to-separate-hosts-in-icmp-monitor/313354 "2022-08-31T12:07:10Z")
Hi, we want to start using the Synthetics integration to replace Heartbeats, but I'm not sure how to handle icmp monitors for different hosts in a single agent policy. When I setup the integration in the policy with ho… --- ## [Unable to rollout Elastic-Agent (Windows) to fleet](https://discuss.elastic.co/t/unable-to-rollout-elastic-agent-windows-to-fleet/313315)
**Author:** [@nlstbv-winter](https://discuss.elastic.co/u/nlstbv-winter)\ **Replies:** 0\ **Last updated:** [August 31, 2022, 6:34am UTC](https://discuss.elastic.co/t/unable-to-rollout-elastic-agent-windows-to-fleet/313315 "2022-08-31T06:34:13Z")
Hi, since updating Elastic to 8.4 (coming from 8.3), I'm unable to rollout elastic-agent for windows to one client. I've checked the token, it's valid and I'm able to rollout elastic-agent to other clients with this tok… --- ## [Making Docker container logs go through the right beats module for processing?](https://discuss.elastic.co/t/making-docker-container-logs-go-through-the-right-beats-module-for-processing/312126)
**Author:** [@jerrac](https://discuss.elastic.co/u/jerrac)\ **Replies:** 10\ **Last updated:** [August 30, 2022, 5:15pm UTC](https://discuss.elastic.co/t/making-docker-container-logs-go-through-the-right-beats-module-for-processing/312126 "2022-08-30T17:15:29Z")
I've successfully configured Elastic Agent to grab my Docker container logs and send them to an ingest pipeline for processing. I'm using the JSON parser to get my fields and timestamp set up. But now I'm stuck on how t… --- ## [Elastic Cisco Duo Integration](https://discuss.elastic.co/t/elastic-cisco-duo-integration/312703)
**Author:** [@suraj.srinivasa](https://discuss.elastic.co/u/suraj.srinivasa)\ **Replies:** 4\ **Last updated:** [August 30, 2022, 1:28pm UTC](https://discuss.elastic.co/t/elastic-cisco-duo-integration/312703 "2022-08-30T13:28:36Z")
Hi, I am trying to fetch Cisco Duo logs with the elastic agent integration. The Duo setup in my organization is a managed service by a vendor, so I have received the Integration Key, api hostname and secret key and conf… [Previous page](https://discuss.elastic.co/c/elastic-stack/elastic-agent/91.md?page=47) [Next page](https://discuss.elastic.co/c/elastic-stack/elastic-agent/91.md?page=49)