Elastic Fleet: Alert on Agent Status

As our company's Elastic Administrator, I would like to be notified when Elastic Agents in Fleet go offline. However, I don't see any way to configure this. Is there a way? Is Agent Status saved in an index somewhere that it can be queried?

Hi @DougR , thanks for posting. Unforutanetly I think there is not such functionality in Kibana. I found this feature request by @Jeff_Vestal

You can create rules based on your agent writes (like the System integration writing at the logs-* data stream with data_stream.dataset: elastic_agent) but I concur that is not ideal.

Example of a single agent writing data in the logs-* data view, filtering to show activity from the agent itself, filebeat and metricbeat

1 Like

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.