# Elastic Agent and/or Filebeat

**URL:** <https://discuss.elastic.co/t/elastic-agent-and-or-filebeat/270967>\
**Category:** Beats\
**Tags:** filebeat, elastic-agent\
**Created:** [April 22, 2021, 1:42pm UTC](https://discuss.elastic.co/t/elastic-agent-and-or-filebeat/270967 "2021-04-22T13:42:30Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![insurin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/insurin/32/81969_2.png) [@insurin](https://discuss.elastic.co/u/insurin)\
**Post date:** [April 22, 2021, 1:42pm UTC](https://discuss.elastic.co/t/elastic-agent-and-or-filebeat/270967/1 "2021-04-22T13:42:30Z")

</div>

HI all. I have followed this guide [ELK-SIEM/Deployment-Guide at main · watsoninfosec/ELK-SIEM · GitHub](https://github.com/watsoninfosec/ELK-SIEM/tree/main/Deployment-Guide) This installs ElasticSearch, Kibana, Logstash and Filebeat on Ubuntu. I have 3 Windows Servers showing as healthy. ELK version is 7.12

To enroll my Windows servers, I click on Fleet/Add Agent/Enroll in Fleet. I then download the Elastic Agent to Windows Server and copy the syntax into Powershell on the Windows server. This install the elastic agent.

If my policy includes the IIS integration do I still need to unzip Filebeats and configure the filebeat.yml?

So far, I can get my agents showing as healthy etc but if I want IIS stats do I need to manually install/configure filebeats too?

---

<div class="post-metadata">

**Author:** ![Marius\_Iversen](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/marius_iversen/32/68988_2.png) [@Marius\_Iversen](https://discuss.elastic.co/u/Marius_Iversen)\
**Post date:** [April 27, 2021, 11:57am UTC](https://discuss.elastic.co/t/elastic-agent-and-or-filebeat/270967/2 "2021-04-27T11:57:28Z")

</div>

Elastic agent is there to do all the configurations and such for you 🙂

That means that now and in the future, you only need to install Elastic Agent, configure the policies and the rest is taken care of.

Elastic Agent is currently in Beta though, so some filebeat functionality or modules might not be available yet. If you can see them in the integrations list when you create/modify a policy then it is available to be used for Agent.

The free Elastic Endpoint for example also uses Elastic Agent, so the setup is quite similar: [Configure and install Elastic Endpoint integration | Elastic Security Solution [7.12] | Elastic](https://www.elastic.co/guide/en/security/current/install-endpoint.html)

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [May 25, 2021, 11:58am UTC](https://discuss.elastic.co/t/elastic-agent-and-or-filebeat/270967/3 "2021-05-25T11:58:26Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.