Counting agents in Dasboard

[juancamiloll]

Hello everyone,

I have a question, when I enter in the administration part in the “Fleet” option I get the list of agents and their status, in total it tells me that I have X amount of agents.

I was asked to create a dashboard with a counter and list of all the agents but I am finding that the amount the counter shows me is different from the amount the “fleet” shows me.

I am using the field called “agent.name” from the index “.ds-logs-system.system-default-2025.01.xx-xxxxxx”

Does anyone know the reason why the quantities are different?

[leandrojmp (Leandro Pereira)]

Does all agents have the system integration?

Are all agents sending data without any problem?

On the Fleet page it doesn't check if there is any data for the agent or not.

[juancamiloll]

@leandrojmp

Is this the cause?

[leandrojmp (Leandro Pereira)]

No, this is the log for the agent itself.

The logs-system.system-default is the data stream for the System integration.

How many agent policies do you have? Does all policies have the System integration? Are you using different namespaces?

[juancamiloll]

@leandrojmp

You are right I have a policy that does not have the integration called “System”.