Hi All, I'm a bit green in the Elastic world so please bear with me. I have Fleet agents deployed to our Windows hosts, however I am having issues when Either "Collect Windows perfmon and service metrics" in the Windows Integration or "Collect Metrics from System instances" is turned on. Having e…

[image] hamiland: system.yml system.yml this here is the problem. we have a hook for metric beat installation and it was for some reason skipped or unsuccessful. please rename system.yml to system.yml.disabled to mitigate the issue. I will go through your logs to see if something is off ther…

Action [indices:admin/auto_create] is unauthorized for API key id [####] of user [elastic/fleet-server] on indices [metricbeat-7.14.1-2021.09.08], this action is granted by the index privileges [auto_configure,create_index,manage,all]

Elastic Stack Beats

blaker (Blake Rouse) September 8, 2021, 6:23pm 2

@ruflin Any ideas here? Elastic Agent should not be using the metricbeat-* index at all.

How to change permissions for fleet-managed Elastic Agents? [security_exception]

Topic		Replies	Views
Fleet-server is unauthorized on indice Elastic Agent	4	512	July 11, 2023
Metricbeat:action [indices:admin/auto_create] is unauthorized for user [metricbeat] with effective roles [ES_metricbeat] on indices [metricbeat-8.6.2], this action is granted by the index privileges Elasticsearch	1	279	April 24, 2023
Elastic agent (metricbeat logs): Cannot index event publisher.Event Beats fleet , metricbeat , elastic-agent	12	4676	October 4, 2021
Fleet API account missing security settings Elasticsearch fleet	3	348	March 28, 2023
AWS fleet integration fails with API key error on ingest Logs fleet	11	1026	July 6, 2022

Action [indices:admin/auto_create] is unauthorized for API key id [####] of user [elastic/fleet-server] on indices [metricbeat-7.14.1-2021.09.08], this action is granted by the index privileges [auto_configure,create_index,manage,all]

Related Topics