# Elastic Agent **URL:** https://discuss.elastic.co/c/elastic-stack/elastic-agent/91.md?page=7 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 8 --- ## [Shell built-in commands not captured via Auditd Manager](https://discuss.elastic.co/t/shell-built-in-commands-not-captured-via-auditd-manager/378264)
**Author:** [@saretawa5](https://discuss.elastic.co/u/saretawa5)\ **Replies:** 4\ **Last updated:** [May 22, 2025, 12:17pm UTC](https://discuss.elastic.co/t/shell-built-in-commands-not-captured-via-auditd-manager/378264 "2025-05-22T12:17:53Z")
Hello, I have both required integrations installed — Auditd Manager and Elastic Defend (Data Collection mode) — and I'm using them to support rules like "Tampering of Shell Command-Line History." For Auditd Manager: I… --- ## [Elastic Agent and Logstash SQL plugin](https://discuss.elastic.co/t/elastic-agent-and-logstash-sql-plugin/378335)
**Author:** [@tapiojaa](https://discuss.elastic.co/u/tapiojaa)\ **Replies:** 2\ **Last updated:** [May 22, 2025, 10:11am UTC](https://discuss.elastic.co/t/elastic-agent-and-logstash-sql-plugin/378335 "2025-05-22T10:11:39Z")
We're using Fleet managed Elastic Agents and appropriate integrations to collect logs from various environments and that is working great. We have however quite a few environments where logging is collected from MS-SQL t… --- ## [Missing "Service Group" Integration in Citrix ADC with Elastic](https://discuss.elastic.co/t/missing-service-group-integration-in-citrix-adc-with-elastic/377234)
**Author:** [@ghyslaindetry](https://discuss.elastic.co/u/ghyslaindetry)\ **Replies:** 1\ **Last updated:** [May 21, 2025, 11:09pm UTC](https://discuss.elastic.co/t/missing-service-group-integration-in-citrix-adc-with-elastic/377234 "2025-05-21T23:09:32Z")
Hello Elastic Community, I am currently using Citrix ADC and have integrated it with Elastic to monitor various metrics and logs. While the integration works well for interfaces, virtual servers (lbvserver), services, s… --- ## [Stack Monitoring with Fleet agent and Elasticsearch docker containers](https://discuss.elastic.co/t/stack-monitoring-with-fleet-agent-and-elasticsearch-docker-containers/378360)
**Author:** [@JumboAg](https://discuss.elastic.co/u/JumboAg)\ **Replies:** 0\ **Last updated:** [May 20, 2025, 11:26pm UTC](https://discuss.elastic.co/t/stack-monitoring-with-fleet-agent-and-elasticsearch-docker-containers/378360 "2025-05-20T23:26:48Z")
I'm running a multi node elasticsearch cluster in docker containers. Is there a way to setup the elasticsearch fleet integration to monitor elasticsearch logs when elasticsearch is running in a docker container? The in… --- ## [Oracle Integration Not Sending .aud logs to Elastic](https://discuss.elastic.co/t/oracle-integration-not-sending-aud-logs-to-elastic/378102)
**Author:** [@rklee](https://discuss.elastic.co/u/rklee)\ **Replies:** 2\ **Last updated:** [May 16, 2025, 2:48pm UTC](https://discuss.elastic.co/t/oracle-integration-not-sending-aud-logs-to-elastic/378102 "2025-05-16T14:48:12Z")
In the oracle integration policy, I added the path where the oracle audit logs are located. But I am not receiving any of the logs. Any ideas? My Systems integrations logs are sending just fine. --- ## [Office 365 Integration Issue](https://discuss.elastic.co/t/office-365-integration-issue/378103)
**Author:** [@erikg](https://discuss.elastic.co/u/erikg)\ **Replies:** 5\ **Last updated:** [May 15, 2025, 2:49pm UTC](https://discuss.elastic.co/t/office-365-integration-issue/378103 "2025-05-15T14:49:35Z")
Hello, Anyone experiencing similar issues with the Office 365 integration? It was working fine for months and then it error out today --- ## [Elastic-agent ingest interval](https://discuss.elastic.co/t/elastic-agent-ingest-interval/357921)
**Author:** [@nml1988](https://discuss.elastic.co/u/nml1988)\ **Replies:** 2\ **Last updated:** [May 14, 2025, 8:42pm UTC](https://discuss.elastic.co/t/elastic-agent-ingest-interval/357921 "2025-05-14T20:42:46Z")
Hi people! I need your help with a requirement. I installed an elastic-agent 8.11.4 on a windows server to read and send data from .csv files by integrating fleet 'custom logs'. The agent was installed by default. Cu… --- ## [Ingesting Prometheus data via remote\_write with Elastic Agent (EKS)](https://discuss.elastic.co/t/ingesting-prometheus-data-via-remote-write-with-elastic-agent-eks/377969)
**Author:** [@trudesea](https://discuss.elastic.co/u/trudesea)\ **Replies:** 8\ **Last updated:** [May 14, 2025, 5:28pm UTC](https://discuss.elastic.co/t/ingesting-prometheus-data-via-remote-write-with-elastic-agent-eks/377969 "2025-05-14T17:28:23Z")
So I have a EKS cluster using the Prometheus helm chart. I've followed this doc: But this documentation is well, atrocious. I assume the Host in the provided screenshot is the Prometheus server that is configured … --- ## [Oldest Version of Elastic Agent compatible with Elasticsearch 9.0?](https://discuss.elastic.co/t/oldest-version-of-elastic-agent-compatible-with-elasticsearch-9-0/378099)
**Author:** [@DougR](https://discuss.elastic.co/u/DougR)\ **Replies:** 5\ **Last updated:** [May 14, 2025, 4:16pm UTC](https://discuss.elastic.co/t/oldest-version-of-elastic-agent-compatible-with-elasticsearch-9-0/378099 "2025-05-14T16:16:20Z")
What is the oldest version of Elastic Agent which can be used with Elasticsearch 9.x? The compatibility matrix doesn't show any 8.x compatibility and I have a few agents on AWS hosts that are currently pinned to 8.4.x an… --- ## [Sql/metrics input in Elastic Agent not returning data (v8.14.3, PostgreSQL 17.2)](https://discuss.elastic.co/t/sql-metrics-input-in-elastic-agent-not-returning-data-v8-14-3-postgresql-17-2/378128)
**Author:** [@Linuxguru](https://discuss.elastic.co/u/Linuxguru)\ **Replies:** 0\ **Last updated:** [May 14, 2025, 10:12am UTC](https://discuss.elastic.co/t/sql-metrics-input-in-elastic-agent-not-returning-data-v8-14-3-postgresql-17-2/378128 "2025-05-14T10:12:29Z")
Hi, I'm using Elastic Agent in standalone mode (without Fleet) on RHEL 9, version 8.14.3. I aim to collect the max\_connections value from pg\_settings in PostgreSQL 17.2 and correlate it with the number of active connect… --- ## [Status: (FAILED) could not start output: failed to reload output: open : no such file or directory reading \ accessing 'elasticsearch'](https://discuss.elastic.co/t/status-failed-could-not-start-output-failed-to-reload-output-open-no-such-file-or-directory-reading-nil-accessing-elasticsearch/377950)
**Author:** [@neofall](https://discuss.elastic.co/u/neofall)\ **Replies:** 8\ **Last updated:** [May 14, 2025, 2:56am UTC](https://discuss.elastic.co/t/status-failed-could-not-start-output-failed-to-reload-output-open-no-such-file-or-directory-reading-nil-accessing-elasticsearch/377950 "2025-05-14T02:56:11Z")
I have strangers error from my fleet server is Unhealthy and then I check the the elastic-agent status : Before that I've problem with x509 unknown authority error but it disappeared in elastic agent logs because I'm… --- ## [NATS Integration with an Elastic Agent Container](https://discuss.elastic.co/t/nats-integration-with-an-elastic-agent-container/378092)
**Author:** [@wpm](https://discuss.elastic.co/u/wpm)\ **Replies:** 0\ **Last updated:** [May 13, 2025, 3:40pm UTC](https://discuss.elastic.co/t/nats-integration-with-an-elastic-agent-container/378092 "2025-05-13T15:40:20Z")
I want to log all the NATS messages handled by a NATS server to a Elasticsearch instance. I want to do it in the following manner: Using serverless cloud instances of Elasticsearch and Kibana Using Elastic Agent and Fl… --- ## ["no external input files" when trying to run the nginx elastic agent tutorial](https://discuss.elastic.co/t/no-external-input-files-when-trying-to-run-the-nginx-elastic-agent-tutorial/378066)
**Author:** [@wpm](https://discuss.elastic.co/u/wpm)\ **Replies:** 0\ **Last updated:** [May 12, 2025, 10:38pm UTC](https://discuss.elastic.co/t/no-external-input-files-when-trying-to-run-the-nginx-elastic-agent-tutorial/378066 "2025-05-12T22:38:12Z")
I am following Example: Use standalone Elastic Agent with Elastic Cloud Serverless to monitor nginx. I am stuck at Step 6: Configure standalone Elastic Agent. I have created an API key, an Elastic Agent policy, and adde… --- ## [Elastic Integration - Custom HTTP API](https://discuss.elastic.co/t/elastic-integration-custom-http-api/378056)
**Author:** [@erikg](https://discuss.elastic.co/u/erikg)\ **Replies:** 2\ **Last updated:** [May 12, 2025, 6:52pm UTC](https://discuss.elastic.co/t/elastic-integration-custom-http-api/378056 "2025-05-12T18:52:59Z")
Hello, I am not sure why Custom API is not working: There's no logs, it seems like its not attempting to run? Custom API integration vv1.22.0 Elasticsearch v8.18.0 Elastic Agent v8.16.3 --- ## [Kubertnetes Integration with package policy on ECK](https://discuss.elastic.co/t/kubertnetes-integration-with-package-policy-on-eck/378027)
**Author:** [@Elle\_K](https://discuss.elastic.co/u/Elle_K)\ **Replies:** 0\ **Last updated:** [May 12, 2025, 8:51am UTC](https://discuss.elastic.co/t/kubertnetes-integration-with-package-policy-on-eck/378027 "2025-05-12T08:51:13Z")
I am trying to use the Kubernetes Integration and deploy it to an agent for my ECK cluster. I have included my yml file below. I also included a snippet of output from the Dev tools command GET kbn:/api/fleet/package\_po… --- ## [Fleet Server preventing Elasticsearch node shutdown due to persistent HTTP connections](https://discuss.elastic.co/t/fleet-server-preventing-elasticsearch-node-shutdown-due-to-persistent-http-connections/376934)
**Author:** [@ceekay](https://discuss.elastic.co/u/ceekay)\ **Replies:** 4\ **Last updated:** [May 9, 2025, 1:02am UTC](https://discuss.elastic.co/t/fleet-server-preventing-elasticsearch-node-shutdown-due-to-persistent-http-connections/376934 "2025-05-09T01:02:03Z")
I'm encountering a reproducible issue where Fleet Server maintains persistent connections to Elasticsearch nodes in a way that prevents the nodes from shutting down cleanly. This causes 2–3 minute hangs during shutdown, … --- ## [Kubernetes Integration - DNS Issue](https://discuss.elastic.co/t/kubernetes-integration-dns-issue/376772)
**Author:** [@erikg](https://discuss.elastic.co/u/erikg)\ **Replies:** 2\ **Last updated:** [April 4, 2025, 3:51am UTC](https://discuss.elastic.co/t/kubernetes-integration-dns-issue/376772 "2025-04-04T03:51:30Z")
Hello, I noticed part of the K8S integration is grabbing from: https://${env.NODE\_NAME}:10250 The issue is that this is dependent on DNS Resolution and leads to errors: \> error making http request: Get "https://\ **Author:** [@Knight7](https://discuss.elastic.co/u/Knight7)\ **Replies:** 4\ **Last updated:** [May 8, 2025, 5:27pm UTC](https://discuss.elastic.co/t/esxi-logs-integration-request/377946 "2025-05-08T17:27:27Z") Hello, It would be nice if there is a custom integration for the Vmware ESXI logs. --- ## [Elastic Search Unrestricted Information Disclosure Vulnerability "version 7.16.2"](https://discuss.elastic.co/t/elastic-search-unrestricted-information-disclosure-vulnerability-version-7-16-2/377920)
**Author:** [@AhmedHassan](https://discuss.elastic.co/u/AhmedHassan)\ **Replies:** 1\ **Last updated:** [May 8, 2025, 4:24am UTC](https://discuss.elastic.co/t/elastic-search-unrestricted-information-disclosure-vulnerability-version-7-16-2/377920 "2025-05-08T04:24:32Z")
We are using Elasticsearch version 7.16.2 and is coming out with the finding "Elasticsearch Unrestricted Information Disclosure Vulnerability". For reference Report URL :Elasticsearch Unrestricted Access Information Dis… --- ## [Fleet server host setting going back to default](https://discuss.elastic.co/t/fleet-server-host-setting-going-back-to-default/377880)
**Author:** [@beginthread](https://discuss.elastic.co/u/beginthread)\ **Replies:** 3\ **Last updated:** [May 8, 2025, 1:03am UTC](https://discuss.elastic.co/t/fleet-server-host-setting-going-back-to-default/377880 "2025-05-08T01:03:30Z")
Hi team! In the fleet setting, I add an HTTPS Fleet server hosts and set it as the Default one. After a couple of minutes, it goes back to the http default one that was there. The only workaround is to change it direc… --- ## [Unable to manage high load using elastic-agent.yml](https://discuss.elastic.co/t/unable-to-manage-high-load-using-elastic-agent-yml/377874)
**Author:** [@ErGeek](https://discuss.elastic.co/u/ErGeek)\ **Replies:** 3\ **Last updated:** [May 7, 2025, 12:39pm UTC](https://discuss.elastic.co/t/unable-to-manage-high-load-using-elastic-agent-yml/377874 "2025-05-07T12:39:23Z")
Hi All, We are collecting logs from the ForgeRock API using Elastic Agent, which forwards the logs to Kafka. From there, the logs are processed by Logstash. We are noticing a delay in log ingestion starting from the El… --- ## [NRE on ElasticsearchClient](https://discuss.elastic.co/t/nre-on-elasticsearchclient/377820)
**Author:** [@ecrocombe](https://discuss.elastic.co/u/ecrocombe)\ **Replies:** 1\ **Last updated:** [May 6, 2025, 5:53am UTC](https://discuss.elastic.co/t/nre-on-elasticsearchclient/377820 "2025-05-06T05:53:27Z")
Im having a hard time connecting to elasticsearch form my dotnet 9 application. System.NullReferenceException: Object reference not set to an instance of an object. at Elastic.Transport.DistributedTransport\`1.Request… --- ## [Not getting log from custom path](https://discuss.elastic.co/t/not-getting-log-from-custom-path/377829)
**Author:** [@conandor](https://discuss.elastic.co/u/conandor)\ **Replies:** 1\ **Last updated:** [May 6, 2025, 3:34am UTC](https://discuss.elastic.co/t/not-getting-log-from-custom-path/377829 "2025-05-06T03:34:37Z")
I have elastic agent in fleet mode. I have docker application generate log at /log/mytest.log. I configured custom log to point to the path. All seem good but not getting log from the path. Did I missing anything? I conf… --- ## [Impossible to uninstall Elastic Endpoint](https://discuss.elastic.co/t/impossible-to-uninstall-elastic-endpoint/351717)
**Author:** [@BlueNick](https://discuss.elastic.co/u/BlueNick)\ **Replies:** 25\ **Last updated:** [April 30, 2025, 2:11pm UTC](https://discuss.elastic.co/t/impossible-to-uninstall-elastic-endpoint/351717 "2025-04-30T14:11:14Z")
Hello, I've uninstalled the elastic agent on a windows machine successfully, the uninstall command runs successfully but, the Elastic Endpoint Folder is still present. I've tried to delete manually the folder with an … --- ## [I want to integrate Bitdefender into Elastic](https://discuss.elastic.co/t/i-want-to-integrate-bitdefender-into-elastic/375010)
**Author:** [@RuthGl](https://discuss.elastic.co/u/RuthGl)\ **Replies:** 15\ **Last updated:** [April 30, 2025, 9:19am UTC](https://discuss.elastic.co/t/i-want-to-integrate-bitdefender-into-elastic/375010 "2025-04-30T09:19:08Z")
Hello, I am trying to integrate Bitdefender. I am using versiion 8.16.1. I have generated the API key and added the Bitdefender integration to the Fleet Server policy with the required details according to the parameter… --- ## [Fleet Elastic Agent enrolled but no logs are being sent](https://discuss.elastic.co/t/fleet-elastic-agent-enrolled-but-no-logs-are-being-sent/376516)
**Author:** [@francesco.amato](https://discuss.elastic.co/u/francesco.amato)\ **Replies:** 1\ **Last updated:** [April 30, 2025, 7:11am UTC](https://discuss.elastic.co/t/fleet-elastic-agent-enrolled-but-no-logs-are-being-sent/376516 "2025-04-30T07:11:25Z")
Hi, I have a problem with one of my agent I installed the agent from Kibana Fleet page as I did with all my other agents but this one doesn't send any logs I have two integration activated: system custom udp logs T… --- ## [Shards metrics of Elastic agent (integration Elasticsearch) randomly written in Elasticsearch](https://discuss.elastic.co/t/shards-metrics-of-elastic-agent-integration-elasticsearch-randomly-written-in-elasticsearch/377627)
**Author:** [@dogost](https://discuss.elastic.co/u/dogost)\ **Replies:** 0\ **Last updated:** [April 29, 2025, 2:16pm UTC](https://discuss.elastic.co/t/shards-metrics-of-elastic-agent-integration-elasticsearch-randomly-written-in-elasticsearch/377627 "2025-04-29T14:16:02Z")
Hello, We are currently using Elastic Agent with the integration Elasticsearch, everything works as expected except the Shard metrics which seems to be written randomly into the cluster. We are using ES 8.17.3 with Ela… --- ## [Gitlab Integration Issue on Fleet Server](https://discuss.elastic.co/t/gitlab-integration-issue-on-fleet-server/377242)
**Author:** [@Lorenzo\_Z02](https://discuss.elastic.co/u/Lorenzo_Z02)\ **Replies:** 4\ **Last updated:** [April 29, 2025, 1:42pm UTC](https://discuss.elastic.co/t/gitlab-integration-issue-on-fleet-server/377242 "2025-04-29T13:42:26Z")
Dear all, I'm currently testing for sending the gitlab logs/metrics with the integration via Fleet Server on the Kibana Dashboard. As you can see on the screenshots , the agents results "HEALTHY", But I'dont know where… --- ## [Elastic agent replace logstash](https://discuss.elastic.co/t/elastic-agent-replace-logstash/375111)
**Author:** [@michael005](https://discuss.elastic.co/u/michael005)\ **Replies:** 14\ **Last updated:** [April 28, 2025, 7:05pm UTC](https://discuss.elastic.co/t/elastic-agent-replace-logstash/375111 "2025-04-28T19:05:11Z")
Hello, I've searched the forum and the elastic site, but haven't quite found what I'm looking for. I'm trying to get a better understanding of elastic agents to setup my test environment appropriately. I want to use mu… --- ## [Integration Development - CEL State Tracking Questions](https://discuss.elastic.co/t/integration-development-cel-state-tracking-questions/377528)
**Author:** [@logalicious](https://discuss.elastic.co/u/logalicious)\ **Replies:** 1\ **Last updated:** [April 27, 2025, 9:49pm UTC](https://discuss.elastic.co/t/integration-development-cel-state-tracking-questions/377528 "2025-04-27T21:49:33Z")
Hello, I have a question about tracking state in CEL programs. Why do I need to publish my state values at the end of my program or wrap the program with state.with() to reuse values defined in my state? State.with() E… [Previous page](https://discuss.elastic.co/c/elastic-stack/elastic-agent/91.md?page=6) [Next page](https://discuss.elastic.co/c/elastic-stack/elastic-agent/91.md?page=8)