Elastic Fleet: Alert on Agent Status

Hi @DougR , thanks for posting. Unforutanetly I think there is not such functionality in Kibana. I found this feature request by @Jeff_Vestal

You can create rules based on your agent writes (like the System integration writing at the logs-* data stream with data_stream.dataset: elastic_agent) but I concur that is not ideal.

Example of a single agent writing data in the logs-* data view, filtering to show activity from the agent itself, filebeat and metricbeat

1 Like