Hello everyone, I need some help regarding what's going on I setup my Elasticsearch + fleet server + kibana with a ubuntu machine. I added a windows machine with elastic agent. (Interation ElasticDefend => I can see all logs) Now when i try to "windows" or "system" integration to the agent. I don…

Ok this bug goes a ways back... and it is in the agent libraries not the integration I am running Agent 8.17.5 and it is working... So you could uninstall the agent and try that version.... Then Upgrade the agent when the fix comes out...

Errors with filebeat when trying to integrate any windows integration logs with the agent

Elastic Stack Elastic Agent

f4n-1nh1b1t10n August 5, 2025, 9:01pm 2

i believe i have the exact same issue.
Noticed this too late, i created a thread here Elastic agent Windows integration issue - Elastic Stack / Elastic Agent - Discuss the Elastic Stack

Topic		Replies	Views
Elastic Agent System integration not collecting Windows Event Log Beats docker , fleet	2	3431	January 13, 2023
Elastic agent Windows integration issue Elastic Agent winlogbeat , integrations	2	90	August 11, 2025
Elastic Agent Custom Windows Event Logs Beats winlogbeat	5	4257	June 15, 2022
Winlogbeat Fatal Error 8.7.0+ name already used Beats winlogbeat	13	1593	August 4, 2023
Action [indices:admin/auto_create] is unauthorized for API key id [####] of user [elastic/fleet-server] on indices [metricbeat-7.14.1-2021.09.08], this action is granted by the index privileges [auto_configure,create_index,manage,all] Beats fleet	30	8770	October 8, 2021

Errors with filebeat when trying to integrate any windows integration logs with the agent

Related topics