# Do we have to install new agent for every new host for Fleet **URL:** \ **Category:** Elastic Agent\ **Tags:** elastic-stack-monitoring, fleet\ **Created:** [November 10, 2023, 8:02am UTC](https://discuss.elastic.co/t/do-we-have-to-install-new-agent-for-every-new-host-for-fleet/346846 "2023-11-10T08:02:29Z")\ **Posts on this page:** 4\ **Page:** 1
**Author:** ![Umang\_Pachaury](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/umang_pachaury/32/113523_2.png) [@Umang\_Pachaury](https://discuss.elastic.co/u/Umang_Pachaury)\ **Post date:** [November 10, 2023, 8:02am UTC](https://discuss.elastic.co/t/do-we-have-to-install-new-agent-for-every-new-host-for-fleet/346846/1 "2023-11-10T08:02:29Z")
I was currently exploring regarding elasticsearch fleet and I set up a basic fleet server and a enrolled an elastic-agent on one machine, for example, "machine-A" with a agent policy: "p1", Agent policy p1 is configured with one integration "system". I was able to collect it's logs on configured output. Our requirement is to use integration for Barracauda Firewall. Fleet provides integration for this. My query is that in order to configure this, do I need to setup a separate agent on a separate machine and add provide a policy which includes Barracauda integration or I can use the current machine-A where already one elastic agent is running and update its policy to add Barracauda integration ? While configuring Barracauda Firewall integration, it asks for certain parameters like ip, port etc.. details, so do I need to add Barracauda machine details there ? ---
**Author:** ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)\ **Post date:** [November 10, 2023, 3:03pm UTC](https://discuss.elastic.co/t/do-we-have-to-install-new-agent-for-every-new-host-for-fleet/346846/2 "2023-11-10T15:03:06Z")
A policy can have 1 to Many integrations. 1 Fleet to 1 to Many Agents 1 Agent to 1 policy 1 Policy to 1 to Many Integrations ---
**Author:** ![leandrojmp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/32/107231_2.png) [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\ **Post date:** [November 10, 2023, 3:34pm UTC](https://discuss.elastic.co/t/do-we-have-to-install-new-agent-for-every-new-host-for-fleet/346846/3 "2023-11-10T15:34:42Z")
> [@Umang\_Pachaury](#): > > While configuring Barracauda Firewall integration, it asks for certain parameters like ip, port etc.. details, so do I need to add Barracauda machine details there ? No, this integration as many other integrations like Fortigate, Palo Alto, Cisco etc, will act as a Syslog server, it will **listen** for events on TCP or UDP, so the IP and Port here are the IP and Port that the Agent will _bind_ itself to listen for events. Normally you choose a port and set the IP as `0.0.0.0` to bind to all available IPs on the host. Then on your Firewall you will configure it to send logs to this IP and Port as you were configuring it to send logs to a Syslog server. Unfortunatelly the documentation for a lot of integrations is not good and lack explanation of what you need to configure and why. > [@Umang\_Pachaury](#): > > My query is that in order to configure this, do I need to setup a separate agent on a separate machine and add provide a policy which includes Barracauda integration or I can use the current machine-A where already one elastic agent is running and update its policy to add Barracauda integration ? In this case I would set up a completely different agent for integrations that **listen** or **pool** for data like the Barracuda and other network devices, or integrations that query SaaS APIs. For example if you add the Barracuda integration on the same policy where you have the system integration to collect logs from some server, and then you want to add 10 more servers, you will have 10 servers also running the Barracuda integration listening to events, but your Firewall is configured to send logs for just one of them. The best approach is to have different policies for integrations that can be applied to multiple machines and integrations that receives logs from network devices or query API endpoints. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [December 8, 2023, 3:35pm UTC](https://discuss.elastic.co/t/do-we-have-to-install-new-agent-for-every-new-host-for-fleet/346846/4 "2023-12-08T15:35:01Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.