# Elastic Agent

**URL:** https://discuss.elastic.co/c/elastic-stack/elastic-agent/91.md?page=49

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 50

---

## [Elastic agent - nginx integration: Not respecting Hosts setting](https://discuss.elastic.co/t/elastic-agent-nginx-integration-not-respecting-hosts-setting/313250)

<div class="topic-metadata">

**Author:** [@mzurborg](https://discuss.elastic.co/u/mzurborg)\
**Replies:** 0\
**Last updated:** [August 30, 2022, 11:36am UTC](https://discuss.elastic.co/t/elastic-agent-nginx-integration-not-respecting-hosts-setting/313250 "2022-08-30T11:36:28Z")

</div>

The Elastic integration "NGINX" for elastic agent, when deployed over fleet does not fully respect the "Hosts" setting for the integration even though the tooltip says "The following settings are applicable to all inputs…

---

## [Question regarding updates for Elastic Agents managed by Fleet](https://discuss.elastic.co/t/question-regarding-updates-for-elastic-agents-managed-by-fleet/313164)

<div class="topic-metadata">

**Author:** [@hugo.barbosa](https://discuss.elastic.co/u/hugo.barbosa)\
**Replies:** 3\
**Last updated:** [August 30, 2022, 7:54am UTC](https://discuss.elastic.co/t/question-regarding-updates-for-elastic-agents-managed-by-fleet/313164 "2022-08-30T07:54:33Z")

</div>

Dear all We have a few locations managed by Fleet with the use of Agent Policies. In the fleets section, I can see the status of the agents, its version and also if there is a newer version available. I see currently …

---

## [Elastic agent filebeat processors' decode\_json\_fields error](https://discuss.elastic.co/t/elastic-agent-filebeat-processors-decode-json-fields-error/313220)

<div class="topic-metadata">

**Author:** [@shshsh](https://discuss.elastic.co/u/shshsh)\
**Replies:** 0\
**Last updated:** [August 30, 2022, 7:06am UTC](https://discuss.elastic.co/t/elastic-agent-filebeat-processors-decode-json-fields-error/313220 "2022-08-30T07:06:37Z")

</div>

Hi, I am testing out elasticsearch logging via agent enrolled in fleet custom logs integration with logpath /var/lib/docker/containers//-json.log testing out k8s container logs with similar setup setup that functioned …

---

## [Wrong host system info from containerized Elastic Agent](https://discuss.elastic.co/t/wrong-host-system-info-from-containerized-elastic-agent/313190)

<div class="topic-metadata">

**Author:** [@woodywoodsta](https://discuss.elastic.co/u/woodywoodsta)\
**Replies:** 0\
**Last updated:** [August 29, 2022, 5:32pm UTC](https://discuss.elastic.co/t/wrong-host-system-info-from-containerized-elastic-agent/313190 "2022-08-29T17:32:46Z")

</div>

I've got a fleet-managed elastic agent which is deployed in my k8s cluster as a Daemonset (as orchestrated by the ECK operator, resource type Agent) and it has a policy which includes the system integration. It's reporti…

---

## [Elastic agent - syslog cisco FTD](https://discuss.elastic.co/t/elastic-agent-syslog-cisco-ftd/313177)

<div class="topic-metadata">

**Author:** [@splitmessage88](https://discuss.elastic.co/u/splitmessage88)\
**Replies:** 0\
**Last updated:** [August 29, 2022, 2:58pm UTC](https://discuss.elastic.co/t/elastic-agent-syslog-cisco-ftd/313177 "2022-08-29T14:58:17Z")

</div>

Hello, I saw this discussion Syslog to ECK - Elastic Orchestration / Elastic Cloud on Kubernetes (ECK) - Discuss the Elastic Stack and I want to know if there is any progress in this case? The examples in your documenta…

---

## [Error installing fleetserver 7.17.5](https://discuss.elastic.co/t/error-installing-fleetserver-7-17-5/313021)

<div class="topic-metadata">

**Author:** [@adrian.cunnelly](https://discuss.elastic.co/u/adrian.cunnelly)\
**Replies:** 2\
**Last updated:** [August 29, 2022, 7:38am UTC](https://discuss.elastic.co/t/error-installing-fleetserver-7-17-5/313021 "2022-08-29T07:38:28Z")

</div>

Installing fleet server on Ubuntu 20.04 fails with: Error: fail to enroll: fail to execute request to fleet-server: status code: 400, fleet-server returned an error: BadRequest The command i'm issuing is: ./elastic-ag…

---

## [Fleet Server - Error - x509: certificate signed by unknown authority](https://discuss.elastic.co/t/fleet-server-error-x509-certificate-signed-by-unknown-authority/312923)

<div class="topic-metadata">

**Author:** [@ethical20](https://discuss.elastic.co/u/ethical20)\
**Replies:** 8\
**Last updated:** [August 29, 2022, 8:27am UTC](https://discuss.elastic.co/t/fleet-server-error-x509-certificate-signed-by-unknown-authority/312923 "2022-08-29T08:27:23Z")

</div>

Hi All, Please have some patience with me cause i ll give as much details. I have my ELK stack (elastic, kibana, logstash) on same local server (192.168.0.2) and im trying to install Fleet server on another host (192.1…

---

## [Docker elastic-agent certificate signed by unknown authority](https://discuss.elastic.co/t/docker-elastic-agent-certificate-signed-by-unknown-authority/313024)

<div class="topic-metadata">

**Author:** [@orihomie](https://discuss.elastic.co/u/orihomie)\
**Replies:** 1\
**Last updated:** [August 29, 2022, 6:09am UTC](https://discuss.elastic.co/t/docker-elastic-agent-certificate-signed-by-unknown-authority/313024 "2022-08-29T06:09:57Z")

</div>

Hi. I'm trying to launch elastic-agent in a docker-compose way: elastic-agent: platform: linux/arm64 image: docker.elastic.co/beats/elastic-agent:8.2.3 container\_name: elastic-agent restart: always u…

---

## [Applications unable to connect to APM running under Elastic Agent](https://discuss.elastic.co/t/applications-unable-to-connect-to-apm-running-under-elastic-agent/313026)

<div class="topic-metadata">

**Author:** [@DougR](https://discuss.elastic.co/u/DougR)\
**Replies:** 0\
**Last updated:** [August 26, 2022, 2:39pm UTC](https://discuss.elastic.co/t/applications-unable-to-connect-to-apm-running-under-elastic-agent/313026 "2022-08-26T14:39:01Z")

</div>

I am attempting to migrate my EKS cluster Elastic APM agent from the stand-alone agent to elastic-agent. I'm using a fleet-managed policy with an agent deployed using Elastic Operator, which sends data to the cloud. I'm …

---

## [Logs are not coming from the client when custom logs integration was added](https://discuss.elastic.co/t/logs-are-not-coming-from-the-client-when-custom-logs-integration-was-added/313011)

<div class="topic-metadata">

**Author:** [@shi](https://discuss.elastic.co/u/shi)\
**Replies:** 1\
**Last updated:** [August 26, 2022, 11:23am UTC](https://discuss.elastic.co/t/logs-are-not-coming-from-the-client-when-custom-logs-integration-was-added/313011 "2022-08-26T11:23:34Z")

</div>

I was trying to use custom logs to ingest log files of tomcat9 from a client system. \*The client system is using the policy Agent policy 1 \*The client system is also running apache2. Apache httpd server integration (in…

---

## [I need help using elastic agent to collect and transform logs](https://discuss.elastic.co/t/i-need-help-using-elastic-agent-to-collect-and-transform-logs/312981)

<div class="topic-metadata">

**Author:** [@shshsh](https://discuss.elastic.co/u/shshsh)\
**Replies:** 0\
**Last updated:** [August 26, 2022, 3:04am UTC](https://discuss.elastic.co/t/i-need-help-using-elastic-agent-to-collect-and-transform-logs/312981 "2022-08-26T03:04:15Z")

</div>

Hi, Im new to elasticsearch and its agents, and I'm having trouble understanding how to use the agents properly, especially ever since its trying to replace the beats family. I'm trying to use elastic agents managed by…

---

## [Unable to upgrade from elastic-agent 8.3.3 to 8.4.0, or install 8.4.0 cleanly](https://discuss.elastic.co/t/unable-to-upgrade-from-elastic-agent-8-3-3-to-8-4-0-or-install-8-4-0-cleanly/312928)

<div class="topic-metadata">

**Author:** [@Curtis\_Ruck](https://discuss.elastic.co/u/Curtis_Ruck)\
**Replies:** 0\
**Last updated:** [August 25, 2022, 1:57pm UTC](https://discuss.elastic.co/t/unable-to-upgrade-from-elastic-agent-8-3-3-to-8-4-0-or-install-8-4-0-cleanly/312928 "2022-08-25T13:57:22Z")

</div>

On Ubuntu 22.04.1, system had Elastic Agent 8.3.3 installed, doing daily apt upgrade -y and the 8.4.0 upgrade fails. Removing elastic-agent and reinstalling also fails. It fails during package configuration running ela…

---

## [Unable to install Elastic Agent 7.17.5 (Windows)](https://discuss.elastic.co/t/unable-to-install-elastic-agent-7-17-5-windows/311284)

<div class="topic-metadata">

**Author:** [@sirineb](https://discuss.elastic.co/u/sirineb)\
**Replies:** 2\
**Last updated:** [August 25, 2022, 12:19pm UTC](https://discuss.elastic.co/t/unable-to-install-elastic-agent-7-17-5-windows/311284 "2022-08-25T12:19:35Z")

</div>

Hi everyone, I have an issue trying to enroll elastic agent 7.17.5 in Windows. (My fleet server is 7.17.5 too) The first time I installed it, it worked perfectly but due to a storage issue on the machine that hosts ELK,…

---

## [Elastic-agent osquery through logstash doesn't work](https://discuss.elastic.co/t/elastic-agent-osquery-through-logstash-doesnt-work/312783)

<div class="topic-metadata">

**Author:** [@heikis](https://discuss.elastic.co/u/heikis)\
**Replies:** 3\
**Last updated:** [August 25, 2022, 10:31am UTC](https://discuss.elastic.co/t/elastic-agent-osquery-through-logstash-doesnt-work/312783 "2022-08-25T10:31:05Z")

</div>

Hello. We are managing Elastic Agents in Fleet. Entire Elastic Stack is on version 8.3.3. We have problems doing osqueries in Kibana- the query seems to be successful but we get no results and no indexes are created: "…

---

## [Is the MACOS AARCH64 installation package for the MACOS m1 chip system?](https://discuss.elastic.co/t/is-the-macos-aarch64-installation-package-for-the-macos-m1-chip-system/312862)

<div class="topic-metadata">

**Author:** [@xqaiviwjxzw](https://discuss.elastic.co/u/xqaiviwjxzw)\
**Replies:** 0\
**Last updated:** [August 25, 2022, 2:02am UTC](https://discuss.elastic.co/t/is-the-macos-aarch64-installation-package-for-the-macos-m1-chip-system/312862 "2022-08-25T02:02:16Z")

</div>

Is the MACOS AARCH64 installation package for the MACOS m1 chip system? MACOS AARCH64

---

## [Request: Barracuda Essentials Integration](https://discuss.elastic.co/t/request-barracuda-essentials-integration/312828)

<div class="topic-metadata">

**Author:** [@6igwig](https://discuss.elastic.co/u/6igwig)\
**Replies:** 0\
**Last updated:** [August 24, 2022, 3:55pm UTC](https://discuss.elastic.co/t/request-barracuda-essentials-integration/312828 "2022-08-24T15:55:39Z")

</div>

I would like to have an elastic agent integration that helps bring in Barracuda Essential's message log and if possible the audit log as well.

---

## [Barracuda RMM Integration](https://discuss.elastic.co/t/barracuda-rmm-integration/312826)

<div class="topic-metadata">

**Author:** [@6igwig](https://discuss.elastic.co/u/6igwig)\
**Replies:** 0\
**Last updated:** [August 24, 2022, 3:49pm UTC](https://discuss.elastic.co/t/barracuda-rmm-integration/312826 "2022-08-24T15:49:32Z")

</div>

I would like to use an elastic agent integration to connect to Barracuda RMM's data layer.

---

## [Fleet Server Config via Kibana yaml file](https://discuss.elastic.co/t/fleet-server-config-via-kibana-yaml-file/312821)

<div class="topic-metadata">

**Author:** [@DefensiveDepth](https://discuss.elastic.co/u/DefensiveDepth)\
**Replies:** 0\
**Last updated:** [August 24, 2022, 2:50pm UTC](https://discuss.elastic.co/t/fleet-server-config-via-kibana-yaml-file/312821 "2022-08-24T14:50:41Z")

</div>

According to the docs, we can pre-define Fleet Server integrations & policies via the Kibana config file: Use these settings to pre-define integrations and agent policies that you want Fleet to load up by default. Based…

---

## [Exclude namespaces from the kubernetes fleet package](https://discuss.elastic.co/t/exclude-namespaces-from-the-kubernetes-fleet-package/311589)

<div class="topic-metadata">

**Author:** [@joepa37](https://discuss.elastic.co/u/joepa37)\
**Replies:** 0\
**Last updated:** [August 7, 2022, 5:21am UTC](https://discuss.elastic.co/t/exclude-namespaces-from-the-kubernetes-fleet-package/311589 "2022-08-07T05:21:09Z")

</div>

Does anybody know how to exclude namespaces from the kubernetes fleet package. I am using this recipe right now: cloud-on-k8s/fleet-kubernetes-integration.yaml at main · elastic/cloud-on-k8s · GitHub I want to exclude …

---

## [Elastic-agent somehow resolves localhost to my machines dns name. Why? And how do I stop it?](https://discuss.elastic.co/t/elastic-agent-somehow-resolves-localhost-to-my-machines-dns-name-why-and-how-do-i-stop-it/312738)

<div class="topic-metadata">

**Author:** [@jerrac](https://discuss.elastic.co/u/jerrac)\
**Replies:** 0\
**Last updated:** [August 23, 2022, 8:06pm UTC](https://discuss.elastic.co/t/elastic-agent-somehow-resolves-localhost-to-my-machines-dns-name-why-and-how-do-i-stop-it/312738 "2022-08-23T20:06:09Z")

</div>

This one has me mystified. I'm trying to set up a simple dev environment with elastic-agent shipping logs to a single-node Docker instance of Elasticsearch. All on my local machine. But when I try to start up elastic-ag…

---

## [Processors in elastic agent integrations](https://discuss.elastic.co/t/processors-in-elastic-agent-integrations/312692)

<div class="topic-metadata">

**Author:** [@Serhii\_Chebonenko](https://discuss.elastic.co/u/Serhii_Chebonenko)\
**Replies:** 0\
**Last updated:** [August 23, 2022, 10:34am UTC](https://discuss.elastic.co/t/processors-in-elastic-agent-integrations/312692 "2022-08-23T10:34:51Z")

</div>

Hi Everyone. I'm trying to add a field (user\_principal\_name) with processors to have common point of reference while searching different indexes (ftd, ad logs, azure logs etc.) I tried adding this processor to cisco ft…

---

## [Elastic Agent 8.3.3 - Endpoint Security Integration not found inside host](https://discuss.elastic.co/t/elastic-agent-8-3-3-endpoint-security-integration-not-found-inside-host/312419)

<div class="topic-metadata">

**Author:** [@ZiaulAfiq](https://discuss.elastic.co/u/ZiaulAfiq)\
**Replies:** 0\
**Last updated:** [August 19, 2022, 2:16am UTC](https://discuss.elastic.co/t/elastic-agent-8-3-3-endpoint-security-integration-not-found-inside-host/312419 "2022-08-19T02:16:40Z")

</div>

Hi all! Need some clarification here. I have successfully installed elastic-agent version 8.3.3 into a host but it seems that only endpoint-security have error during running diagnostics test on host. For the host, I…

---

## [Add timezone local to all events with fleet-managed elastic agent](https://discuss.elastic.co/t/add-timezone-local-to-all-events-with-fleet-managed-elastic-agent/312408)

<div class="topic-metadata">

**Author:** [@DougR](https://discuss.elastic.co/u/DougR)\
**Replies:** 0\
**Last updated:** [August 18, 2022, 7:55pm UTC](https://discuss.elastic.co/t/add-timezone-local-to-all-events-with-fleet-managed-elastic-agent/312408 "2022-08-18T19:55:04Z")

</div>

Is there a way to include an add\_locale.format: 'offset' processor by default for all events sent in by a fleet-managed elastic agent? I have a number of custom logs that don't have proper timezone indicators, so my inge…

---

## [Elastic Agent - Tagging](https://discuss.elastic.co/t/elastic-agent-tagging/312348)

<div class="topic-metadata">

**Author:** [@praveen\_raju](https://discuss.elastic.co/u/praveen_raju)\
**Replies:** 0\
**Last updated:** [August 18, 2022, 7:00am UTC](https://discuss.elastic.co/t/elastic-agent-tagging/312348 "2022-08-18T07:00:41Z")

</div>

Hi, We have 3000 virtual machines where we have installed elastic agent and they are sending metrics. Now we want to tag around 500 VM's as PROD so that we can build dashboards only for this prod vm;s. What is the best…

---

## [Do Elastic Agent (integrations) and Logstash have best practices?a](https://discuss.elastic.co/t/do-elastic-agent-integrations-and-logstash-have-best-practices-a/312279)

<div class="topic-metadata">

**Author:** [@GustavoPires](https://discuss.elastic.co/u/GustavoPires)\
**Replies:** 1\
**Last updated:** [August 17, 2022, 12:16pm UTC](https://discuss.elastic.co/t/do-elastic-agent-integrations-and-logstash-have-best-practices-a/312279 "2022-08-17T12:16:21Z")

</div>

Hello, are there any good practices for using Logstash or Elastic Agent (integrations), for example, I have Pfsense Integration for Elastic Agent, at the same time I can send data via Syslog to Logstash. In what situatio…

---

## [Elastic Agent Causing CPU High Utilization](https://discuss.elastic.co/t/elastic-agent-causing-cpu-high-utilization/312217)

<div class="topic-metadata">

**Author:** [@daniel.talbot](https://discuss.elastic.co/u/daniel.talbot)\
**Replies:** 0\
**Last updated:** [August 16, 2022, 7:56pm UTC](https://discuss.elastic.co/t/elastic-agent-causing-cpu-high-utilization/312217 "2022-08-16T19:56:48Z")

</div>

Currently we are running Elastic fleet agent to pick up on all logs as you can see in the picture attached. The problem is on our database nodes we would like to skip it from looking at the postgres process so that it do…

---

## [Fleet agent doesn't work](https://discuss.elastic.co/t/fleet-agent-doesnt-work/312068)

<div class="topic-metadata">

**Author:** [@VitorBarroso](https://discuss.elastic.co/u/VitorBarroso)\
**Replies:** 13\
**Last updated:** [August 16, 2022, 2:55pm UTC](https://discuss.elastic.co/t/fleet-agent-doesnt-work/312068 "2022-08-16T14:55:32Z")

</div>

I can't connect my elastic agent to the fleet server I already solved the syslink problem.

---

## [Fleet Integration Adding Cloud Fields to an Index from Elastic Agent's filebeat.yml](https://discuss.elastic.co/t/fleet-integration-adding-cloud-fields-to-an-index-from-elastic-agents-filebeat-yml/312109)

<div class="topic-metadata">

**Author:** [@othman](https://discuss.elastic.co/u/othman)\
**Replies:** 1\
**Last updated:** [August 15, 2022, 2:29pm UTC](https://discuss.elastic.co/t/fleet-integration-adding-cloud-fields-to-an-index-from-elastic-agents-filebeat-yml/312109 "2022-08-15T14:29:24Z")

</div>

I'm having an issue where some rogue configuration is adding cloud fields to the documents of one my indices. In particular, it looks like there is some add\_cloud\_metadata: ~ processor running somewhere. After much trou…

---

## [Elastic Agent SOMETIMES Opens Ports to Listen for Syslog Traffic (Buggy Behaviour)](https://discuss.elastic.co/t/elastic-agent-sometimes-opens-ports-to-listen-for-syslog-traffic-buggy-behaviour/312046)

<div class="topic-metadata">

**Author:** [@othman](https://discuss.elastic.co/u/othman)\
**Replies:** 1\
**Last updated:** [August 15, 2022, 1:51pm UTC](https://discuss.elastic.co/t/elastic-agent-sometimes-opens-ports-to-listen-for-syslog-traffic-buggy-behaviour/312046 "2022-08-15T13:51:35Z")

</div>

Greetings, I'm having this rather inconsistent behaviour where my elastic agent deployed on my Syslog server sometimes opens ports for incoming traffic and sometimes decides not to. Currently the agent has few integrat…

---

## [Deploy Elastic Agent successful but has no data steams](https://discuss.elastic.co/t/deploy-elastic-agent-successful-but-has-no-data-steams/311955)

<div class="topic-metadata">

**Author:** [@Han\_Cloud\_Strife](https://discuss.elastic.co/u/Han_Cloud_Strife)\
**Replies:** 1\
**Last updated:** [August 14, 2022, 3:00pm UTC](https://discuss.elastic.co/t/deploy-elastic-agent-successful-but-has-no-data-steams/311955 "2022-08-14T15:00:11Z")

</div>

Hi there! I got a problem with Elastic Agent when using ELK on docker. I have two docker-compose files for creating certificate and deploying ELK purpose. I enrolled elastic agent successfull \[1\] however I got bad\_certi…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elastic-agent/91.md?page=48)

[Next page](https://discuss.elastic.co/c/elastic-stack/elastic-agent/91.md?page=50)
