# Elastic Agent **URL:** https://discuss.elastic.co/c/elastic-stack/elastic-agent/91.md?page=5 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 6 --- ## [Does Elastic offer an WMI Integration?](https://discuss.elastic.co/t/does-elastic-offer-an-wmi-integration/381208)
**Author:** [@erikg](https://discuss.elastic.co/u/erikg)\ **Replies:** 2\ **Last updated:** [August 21, 2025, 5:30pm UTC](https://discuss.elastic.co/t/does-elastic-offer-an-wmi-integration/381208 "2025-08-21T17:30:09Z")
I tried the logstash wmi plugin but it doesn’t work anymore. Perhaps not with newer versions and its not supported by elastic. Seems like there’s not a way to leverage WMI with elastic, unless I am wrong? --- ## [After cluster and fleet upgrade to 8.19.x logging of SYSMON events via elastic agent has stopped](https://discuss.elastic.co/t/after-cluster-and-fleet-upgrade-to-8-19-x-logging-of-sysmon-events-via-elastic-agent-has-stopped/381156)
**Author:** [@EvanL](https://discuss.elastic.co/u/EvanL)\ **Replies:** 1\ **Last updated:** [August 20, 2025, 6:09pm UTC](https://discuss.elastic.co/t/after-cluster-and-fleet-upgrade-to-8-19-x-logging-of-sysmon-events-via-elastic-agent-has-stopped/381156 "2025-08-20T18:09:02Z")
As the topic says, we upgraded both our DEV and PROD clusters to ElasticStack 8.19.2 (DEV) or 8.19.0 (PROD) we notice that on all our Windows hosts that run agent version 8.19.x, the logging of SYSMON is no longer forwar… --- ## [Implementing Elastic Agent on Multiple Endpoints](https://discuss.elastic.co/t/implementing-elastic-agent-on-multiple-endpoints/381163)
**Author:** [@Zhaojing\_Yuan](https://discuss.elastic.co/u/Zhaojing_Yuan)\ **Replies:** 2\ **Last updated:** [August 20, 2025, 12:35pm UTC](https://discuss.elastic.co/t/implementing-elastic-agent-on-multiple-endpoints/381163 "2025-08-20T12:35:04Z")
I’m sorry, I’ve really run out of ideas on how to implement Elastic Agents on multiple endpoints and send the monitoring logs to the Elastic Stack. The architecture of my experimental environment consists of three Ubunt… --- ## [How to Completely Disable Telemetry in Elastic Stack 8.18.4?](https://discuss.elastic.co/t/how-to-completely-disable-telemetry-in-elastic-stack-8-18-4/381102)
**Author:** [@xqaiviwjxzw](https://discuss.elastic.co/u/xqaiviwjxzw)\ **Replies:** 2\ **Last updated:** [August 19, 2025, 7:19am UTC](https://discuss.elastic.co/t/how-to-completely-disable-telemetry-in-elastic-stack-8-18-4/381102 "2025-08-19T07:19:27Z")
For compliance reasons, we must ensure that Kibana, Fleet, Elastic Agent, and other components do not send any telemetry or usage data to external domains. --- ## [Change in aws.cloudwatch\_logs.log\_group Field Behavior in Elastic Agent 8.19](https://discuss.elastic.co/t/change-in-aws-cloudwatch-logs-log-group-field-behavior-in-elastic-agent-8-19/381063)
**Author:** [@vini.melo](https://discuss.elastic.co/u/vini.melo)\ **Replies:** 2\ **Last updated:** [August 18, 2025, 8:39am UTC](https://discuss.elastic.co/t/change-in-aws-cloudwatch-logs-log-group-field-behavior-in-elastic-agent-8-19/381063 "2025-08-18T08:39:26Z")
Impacted Component: Elastic Agent – AWS Integration (CloudWatch Logs) Issue Description: After upgrading the Elastic Agent from version 8.15 to 8.19, we observed a change in how the output field aws.cloudwatch\_logs.log… --- ## [Fleet server Elasticsearch output settings connection errors](https://discuss.elastic.co/t/fleet-server-elasticsearch-output-settings-connection-errors/381005)
**Author:** [@f4n-1nh1b1t10n](https://discuss.elastic.co/u/f4n-1nh1b1t10n)\ **Replies:** 2\ **Last updated:** [August 14, 2025, 1:42pm UTC](https://discuss.elastic.co/t/fleet-server-elasticsearch-output-settings-connection-errors/381005 "2025-08-14T13:42:38Z")
Hello, this is the issue i’m currently pondering over: Situation an agent with fleet server integration, running in a VM, together with other elements of the stack (ES, KIB) agents running on Windows hosts ES is publi… --- ## [Install Elastic Agent as Windows Service - Install in Powershell stops, no reaction](https://discuss.elastic.co/t/install-elastic-agent-as-windows-service-install-in-powershell-stops-no-reaction/381008)
**Author:** [@Elasticisti](https://discuss.elastic.co/u/Elasticisti)\ **Replies:** 0\ **Last updated:** [August 13, 2025, 2:04pm UTC](https://discuss.elastic.co/t/install-elastic-agent-as-windows-service-install-in-powershell-stops-no-reaction/381008 "2025-08-13T14:04:43Z")
Hello, If I install elastic agent on a Windows VM via Powershell, nothing happens. I have downloaded the zip previously and unzipped it before I tried to install it. The cursor blinks, however nothing happen. I thi… --- ## [Need to Ingest Small Log Files in Real-Time ](https://discuss.elastic.co/t/need-to-ingest-small-log-files-in-real-time/380823)
**Author:** [@Nourgr23](https://discuss.elastic.co/u/Nourgr23)\ **Replies:** 3\ **Last updated:** [August 12, 2025, 11:59am UTC](https://discuss.elastic.co/t/need-to-ingest-small-log-files-in-real-time/380823 "2025-08-12T11:59:50Z")
Hello everyone, I am currently working with Elasticsearch v8.17.3 using the Custom Logs (Filestream) integration via Elastic Agent. I have encountered a problem: Filestream only starts ingesting a file when it is lar… --- ## [Elastic agent Windows integration issue](https://discuss.elastic.co/t/elastic-agent-windows-integration-issue/380771)
**Author:** [@f4n-1nh1b1t10n](https://discuss.elastic.co/u/f4n-1nh1b1t10n)\ **Replies:** 2\ **Last updated:** [August 11, 2025, 4:07pm UTC](https://discuss.elastic.co/t/elastic-agent-windows-integration-issue/380771 "2025-08-11T16:07:53Z")
Hello, first post here. Short description of the current environment: kibana and elasticsearch on 1 host (virtualized in a vbox) standalone elastic agent on another host (a windows laptop) with Windows (v3.1.0) & sys… --- ## [Issue for Elastic Observability Engineer Lab 2.1 - Elastic Agent](https://discuss.elastic.co/t/issue-for-elastic-observability-engineer-lab-2-1-elastic-agent/357717)
**Author:** [@ganesh.pawar](https://discuss.elastic.co/u/ganesh.pawar)\ **Replies:** 28\ **Last updated:** [August 11, 2025, 10:17am UTC](https://discuss.elastic.co/t/issue-for-elastic-observability-engineer-lab-2-1-elastic-agent/357717 "2025-08-11T10:17:04Z")
Hi, For Elastic Observability Engineer Lab 2.1 - Elastic Agent , I stuck on the point to connect agent to fleet server. The command I used is //~/elastic-agent-8.8.2-linux-x86\_64$ sudo ./elastic-agent install --//url… --- ## [Barracuda Cloudgen Integration / Agent possibly broken?](https://discuss.elastic.co/t/barracuda-cloudgen-integration-agent-possibly-broken/380785)
**Author:** [@cow\_on\_lsd](https://discuss.elastic.co/u/cow_on_lsd)\ **Replies:** 14\ **Last updated:** [August 8, 2025, 1:13pm UTC](https://discuss.elastic.co/t/barracuda-cloudgen-integration-agent-possibly-broken/380785 "2025-08-08T13:13:06Z")
Good Morning Everyone, I have the following situation: The Barracuda firewall is configured as described here The integration is configured as per default values The agent is enrolled with the right integration polic… --- ## [Errors with filebeat when trying to integrate any windows integration logs with the agent](https://discuss.elastic.co/t/errors-with-filebeat-when-trying-to-integrate-any-windows-integration-logs-with-the-agent/380768)
**Author:** [@v\_i\_x\_x](https://discuss.elastic.co/u/v_i_x_x)\ **Replies:** 26\ **Last updated:** [August 7, 2025, 1:50pm UTC](https://discuss.elastic.co/t/errors-with-filebeat-when-trying-to-integrate-any-windows-integration-logs-with-the-agent/380768 "2025-08-07T13:50:18Z")
Hello everyone, I need some help regarding what's going on I setup my Elasticsearch + fleet server + kibana with a ubuntu machine. I added a windows machine with elastic agent. (Interation ElasticDefend =\> I can see al… --- ## [Get agent event logs via Elastic Agent Integration](https://discuss.elastic.co/t/get-agent-event-logs-via-elastic-agent-integration/372860)
**Author:** [@edemir](https://discuss.elastic.co/u/edemir)\ **Replies:** 8\ **Last updated:** [August 7, 2025, 11:47am UTC](https://discuss.elastic.co/t/get-agent-event-logs-via-elastic-agent-integration/372860 "2025-08-07T11:47:27Z")
After the 8.15.0 update, with the separation of event logs belonging to filebeat and metricbeat, we can no longer monitor the event logs belonging to the agent via Kibana with the Elastic Agent integration. There is only… --- ## [Fortigate Integration - Separation of logs datastream based on a field value](https://discuss.elastic.co/t/fortigate-integration-separation-of-logs-datastream-based-on-a-field-value/380767)
**Author:** [@Knight7](https://discuss.elastic.co/u/Knight7)\ **Replies:** 10\ **Last updated:** [August 6, 2025, 7:10pm UTC](https://discuss.elastic.co/t/fortigate-integration-separation-of-logs-datastream-based-on-a-field-value/380767 "2025-08-06T19:10:38Z")
Hello, We have integrated Fortinet Fortigate Firewall logs to our SIEM ELK using the Elastic Agent integration. We created also a custom ingest pipeline that separates the logs (for example forward) and send them to a d… --- ## [Configuring Permissions and Index in elastic-agent.yml](https://discuss.elastic.co/t/configuring-permissions-and-index-in-elastic-agent-yml/380802)
**Author:** [@Elasticisti](https://discuss.elastic.co/u/Elasticisti)\ **Replies:** 2\ **Last updated:** [August 6, 2025, 1:15pm UTC](https://discuss.elastic.co/t/configuring-permissions-and-index-in-elastic-agent-yml/380802 "2025-08-06T13:15:17Z")
Hello, I have a testagent sending successfully host metrics to ELK. It is however not able to send logs, as well. elastic-agent.yml: id: b77b2ba4-ce32-40ae-8d6c-5595a53134ca revision: 2 outputs: default: type: … --- ## [Need to Ingest Small Log Files in Real-Time ](https://discuss.elastic.co/t/need-to-ingest-small-log-files-in-real-time/380826)
**Author:** [@Nourgr21](https://discuss.elastic.co/u/Nourgr21)\ **Replies:** 1\ **Last updated:** [August 6, 2025, 1:40pm UTC](https://discuss.elastic.co/t/need-to-ingest-small-log-files-in-real-time/380826 "2025-08-06T13:40:57Z")
Hello everyone, I am currently working with Elasticsearch v8.17.3 using the Custom Logs (Filestream) integration via Elastic Agent. I have encountered a problem: Filestream only starts ingesting a file when it is lar… --- ## [AbuseCH integration failing after updating to version 3.2.0](https://discuss.elastic.co/t/abusech-integration-failing-after-updating-to-version-3-2-0/380792)
**Author:** [@EvanL](https://discuss.elastic.co/u/EvanL)\ **Replies:** 1\ **Last updated:** [August 6, 2025, 9:35am UTC](https://discuss.elastic.co/t/abusech-integration-failing-after-updating-to-version-3-2-0/380792 "2025-08-06T09:35:21Z")
Previously running fine on 3.1.0 but since I installed latest version 3.2.0 of the the AbuseCH integration, the agent is "yellow". with following error status: -- cel-default-cel-ti\_abusech-0a8a7b9d-7de6-414a-8ae9-ac77c… --- ## [Failed to create fleet server elastic agent in Ubuntu](https://discuss.elastic.co/t/failed-to-create-fleet-server-elastic-agent-in-ubuntu/380713)
**Author:** [@Adib\_Aulia\_Rahmansya](https://discuss.elastic.co/u/Adib_Aulia_Rahmansya)\ **Replies:** 9\ **Last updated:** [August 6, 2025, 4:01am UTC](https://discuss.elastic.co/t/failed-to-create-fleet-server-elastic-agent-in-ubuntu/380713 "2025-08-06T04:01:12Z")
i have download the .tar.gz elastic agent version 9.1 after extract it, i got error when running the installation sudo ./elastic-agent install \\ --fleet-server-es=https://redacted \\ --fleet-server-service-token=red… --- ## [Barracuda CloudGen Integration - Agent listens on port 5044 but no data in Kibana](https://discuss.elastic.co/t/barracuda-cloudgen-integration-agent-listens-on-port-5044-but-no-data-in-kibana/380668)
**Author:** [@cow\_on\_lsd](https://discuss.elastic.co/u/cow_on_lsd)\ **Replies:** 1\ **Last updated:** [August 4, 2025, 12:37pm UTC](https://discuss.elastic.co/t/barracuda-cloudgen-integration-agent-listens-on-port-5044-but-no-data-in-kibana/380668 "2025-08-04T12:37:52Z")
Hello Everyone, I am in the process of setting up the ELK stack. I have already successfully integrated some windows server machines (through agents), some linux hosts and our switches. I am running the latest version o… --- ## [Microsoft DNS Server integration - remove dot at domainn name's end](https://discuss.elastic.co/t/microsoft-dns-server-integration-remove-dot-at-domainn-names-end/380457)
**Author:** [@Zer0-cyber-web](https://discuss.elastic.co/u/Zer0-cyber-web)\ **Replies:** 8\ **Last updated:** [August 4, 2025, 6:15am UTC](https://discuss.elastic.co/t/microsoft-dns-server-integration-remove-dot-at-domainn-names-end/380457 "2025-08-04T06:15:55Z")
Hi! Could someone point me where to look: in Microsoft DNS Server index, there is a field with requested domain name - dns.question.name. It contains domain name that was requested by client. The only problem is that af… --- ## [Network Packet Capture integration does not show flow logs](https://discuss.elastic.co/t/network-packet-capture-integration-does-not-show-flow-logs/380631)
**Author:** [@ArgoAdvisory](https://discuss.elastic.co/u/ArgoAdvisory)\ **Replies:** 0\ **Last updated:** [July 31, 2025, 12:56pm UTC](https://discuss.elastic.co/t/network-packet-capture-integration-does-not-show-flow-logs/380631 "2025-07-31T12:56:09Z")
Good morning everyone, I'm opening this post because I have a problem: the Network Packet Capture integration isn't sending flow logs. I realize there could be many reasons, or maybe I'm forgetting something trivial. … --- ## [Using Custom Filestream Integration Elastic Agent](https://discuss.elastic.co/t/using-custom-filestream-integration-elastic-agent/380550)
**Author:** [@erikg](https://discuss.elastic.co/u/erikg)\ **Replies:** 0\ **Last updated:** [July 29, 2025, 4:27pm UTC](https://discuss.elastic.co/t/using-custom-filestream-integration-elastic-agent/380550 "2025-07-29T16:27:26Z")
Hello, I have a 1 file, sample.txt file. This file gets overwritten every 15 minutes by a script. I been struggling a bit, how can I ingest this file continously every 15 minutes? I tried "resend on touch" due to the fi… --- ## [Unable to configure Elastic APM on .NET 4.8](https://discuss.elastic.co/t/unable-to-configure-elastic-apm-on-net-4-8/377418)
**Author:** [@rahulsamsung](https://discuss.elastic.co/u/rahulsamsung)\ **Replies:** 9\ **Last updated:** [July 29, 2025, 2:09pm UTC](https://discuss.elastic.co/t/unable-to-configure-elastic-apm-on-net-4-8/377418 "2025-07-29T14:09:11Z")
Dear All, We are trying to setup Elastic APM on one of our application running on the .NET 4.8. And completed the below configuration on the application side. But the service is still not showing on the ELK APM dashboa… --- ## [Elastic Stack Monitoring in a container-only environment](https://discuss.elastic.co/t/elastic-stack-monitoring-in-a-container-only-environment/380537)
**Author:** [@gruens](https://discuss.elastic.co/u/gruens)\ **Replies:** 0\ **Last updated:** [July 29, 2025, 11:55am UTC](https://discuss.elastic.co/t/elastic-stack-monitoring-in-a-container-only-environment/380537 "2025-07-29T11:55:00Z")
Hello, we're currently running an Elasticsearch cluster consisting of 5 nodes, all operating on RHEL 9. Our installation of Elasticsearch is containerized using Podman. So far is everything fine. We now want to care ab… --- ## [Communication to and from elasticagent](https://discuss.elastic.co/t/communication-to-and-from-elasticagent/380382)
**Author:** [@mike123](https://discuss.elastic.co/u/mike123)\ **Replies:** 2\ **Last updated:** [July 23, 2025, 4:49pm UTC](https://discuss.elastic.co/t/communication-to-and-from-elasticagent/380382 "2025-07-23T16:49:59Z")
does elastic agent pull policies changes from fleet or fleet pushes policies to elastic agent? At any point does fleet server initiates communication with elastic agent? If yes how does fleet server authenticate that it… --- ## [Elastic Agent Fortinet Module 12 Hours Delay Log](https://discuss.elastic.co/t/elastic-agent-fortinet-module-12-hours-delay-log/380377)
**Author:** [@adilraad2001](https://discuss.elastic.co/u/adilraad2001)\ **Replies:** 1\ **Last updated:** [July 23, 2025, 3:08pm UTC](https://discuss.elastic.co/t/elastic-agent-fortinet-module-12-hours-delay-log/380377 "2025-07-23T15:08:19Z")
Hello, I've installed the Fleet Server, Elastic Agent, and Fortinet module with TCP (im using fortianalyzer that send logs of all my fortigate) integration in the fleet server machine. But the log from FortiGate to elast… --- ## [Seperate index for windows](https://discuss.elastic.co/t/seperate-index-for-windows/380351)
**Author:** [@GiorgioS13](https://discuss.elastic.co/u/GiorgioS13)\ **Replies:** 1\ **Last updated:** [July 22, 2025, 3:58pm UTC](https://discuss.elastic.co/t/seperate-index-for-windows/380351 "2025-07-22T15:58:57Z")
Hello, I installed the Elastic Agent on a Windows machine using the integration packages. Currently, logs are being sent to the default apm--transaction,auditbeat-,endgame-,filebeat-,logs-,packetbeat-,traces-apm,winlog… --- ## [Trouble Installing Fleet with Self-managed Certificates](https://discuss.elastic.co/t/trouble-installing-fleet-with-self-managed-certificates/380091)
**Author:** [@mohammad\_syaugi](https://discuss.elastic.co/u/mohammad_syaugi)\ **Replies:** 2\ **Last updated:** [July 22, 2025, 7:21am UTC](https://discuss.elastic.co/t/trouble-installing-fleet-with-self-managed-certificates/380091 "2025-07-22T07:21:46Z")
Hello guys, I've been installing fleet with self-managed SSL Certificates following this docs: Configure SSL/TLS for self-managed Fleet Servers | Fleet and Elastic Agent Guide \[8.14\] | Elastic But i find my fleet alway… --- ## [Error after migration Elastic "Fleet Server - Error - failed version compatibility check with elasticsearch: x509: certificate signed by unknown authority"](https://discuss.elastic.co/t/error-after-migration-elastic-fleet-server-error-failed-version-compatibility-check-with-elasticsearch-x509-certificate-signed-by-unknown-authority/380288)
**Author:** [@neofall](https://discuss.elastic.co/u/neofall)\ **Replies:** 2\ **Last updated:** [July 21, 2025, 11:01am UTC](https://discuss.elastic.co/t/error-after-migration-elastic-fleet-server-error-failed-version-compatibility-check-with-elasticsearch-x509-certificate-signed-by-unknown-authority/380288 "2025-07-21T11:01:56Z")
Previously, I encountered an issue related to x509: certificate signed by unknown authority, as discussed in this Elastic forum thread. Currently, I am performing a migration involving a change in the server IP addresses… --- ## [Connection between Elastic Agent (on local machine) and Elasticsearch (on GCP)](https://discuss.elastic.co/t/connection-between-elastic-agent-on-local-machine-and-elasticsearch-on-gcp/380187)
**Author:** [@Nghia\_Vu](https://discuss.elastic.co/u/Nghia_Vu)\ **Replies:** 7\ **Last updated:** [July 19, 2025, 2:25pm UTC](https://discuss.elastic.co/t/connection-between-elastic-agent-on-local-machine-and-elasticsearch-on-gcp/380187 "2025-07-19T14:25:59Z")
I am working on a study project to collect log from many machines. I have 2 VMs on GCP, one is for a Elasticsearch/Kibana server, one is for a fleet server. Both are in the same VPC. I have one Windows Server VM on my lo… [Previous page](https://discuss.elastic.co/c/elastic-stack/elastic-agent/91.md?page=4) [Next page](https://discuss.elastic.co/c/elastic-stack/elastic-agent/91.md?page=6)