Elastic Agent : Rename agent names or add a field to differentiate them

Elastic Stack Elastic Agent
1

Hello,

I'd like to deploy several agents on client servers, in fleet mode. The problem is that the agent name comes from the host machine name, and these names are often unknown to our teams. Of course, it's impossible to change the machine names.

Is it possible to give an agent a name each time it is deployed?
Or add a hard-coded field directly to its .yml file? But this might not be used if I use a Policy?

Thx for your answers.

2

For those of you who need help, the only solution I've found is to use Tags to differentiate between agents.

3

You can use a simple ingest pipeline or use lookups/enrich to replace agent.name.

For example you could create a table of agent.id to ideal name and then use an ingest pipeline to do the replacement

1 Like
4

I haven't thought about enrichment, but it sounds like a good idea. But I don't know the agent's id in advance. I'll look into it, thanks