# Fleet Managed Elastic Agent - add parameter to filebeat.yml

**URL:** <https://discuss.elastic.co/t/fleet-managed-elastic-agent-add-parameter-to-filebeat-yml/317521>\
**Category:** Logs\
**Created:** [October 26, 2022, 1:10pm UTC](https://discuss.elastic.co/t/fleet-managed-elastic-agent-add-parameter-to-filebeat-yml/317521 "2022-10-26T13:10:50Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![lnx](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/lnx/32/48753_2.png) [@lnx](https://discuss.elastic.co/u/lnx)\
**Post date:** [October 26, 2022, 1:10pm UTC](https://discuss.elastic.co/t/fleet-managed-elastic-agent-add-parameter-to-filebeat-yml/317521/1 "2022-10-26T13:10:50Z")

</div>

I need to set the scan\_frequency config parameter for the Filebeat subprocess of Elastic Agent running on Windows managed by Fleet. I'm using the IIS integration.

I would like to try to reduce CPU usage.

How do I do this?

---

<div class="post-metadata">

**Author:** ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)\
**Post date:** [October 29, 2022, 12:27am UTC](https://discuss.elastic.co/t/fleet-managed-elastic-agent-add-parameter-to-filebeat-yml/317521/2 "2022-10-29T00:27:41Z")

</div>

Which integration?

---

<div class="post-metadata">

**Author:** ![lnx](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/lnx/32/48753_2.png) [@lnx](https://discuss.elastic.co/u/lnx)\
**Post date:** [November 1, 2022, 4:11pm UTC](https://discuss.elastic.co/t/fleet-managed-elastic-agent-add-parameter-to-filebeat-yml/317521/3 "2022-11-01T16:11:52Z")

</div>

Hi Stephen, thanks - I'm using the IIS integration.

---

<div class="post-metadata">

**Author:** ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)\
**Post date:** [November 12, 2022, 7:31pm UTC](https://discuss.elastic.co/t/fleet-managed-elastic-agent-add-parameter-to-filebeat-yml/317521/4 "2022-11-12T19:31:12Z")

</div>

Sorry I meant which of the datasets

Can you show me the equivalent beats integration / data set

#### Collect IIS access and error logs (input: log)

If you are talking about

##### [scan\_frequency](https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-input-log.html#filebeat-input-log-scan-frequency)

> How often Filebeat checks for new files in the paths that are specified for harvesting. For example, if you specify a glob like `/var/log/*`, the directory is scanned for files using the frequency specified by `scan_frequency`. Specify 1s to scan the directory as frequently as possible without causing Filebeat to scan too frequently. We do not recommend to set this value `<1s`.
> 
> If you require log lines to be sent in near real time do not use a very low `scan_frequency` but adjust `close_inactive` so the file handler stays open and constantly polls your files.
> 
> The default setting is 10s.

I an not sure that you can set that today with fleet managed agent ... '  
You could try to "hack it in" in the processors settings but pretty sure that will _not_ work

 ![Screen Shot 2022-11-12 at 11.29.30 AM](https://us1.discourse-cdn.com/elastic/original/3X/5/8/58f8c94e7fdeefe3f2b4774b455cbf21d2581a64.png)

If it is really important you may need to use Stand Alone Agent...

Also I am just now looking at 8.5 where there is the **new experimental** [Fleet API](https://www.elastic.co/guide/en/fleet/current/fleet-api-docs.html) perhaps through that.

#### Collect IIS application\_pool, webserver and website metrics

You can change the collection interval for this right in the UI.

 ![Screen Shot 2022-11-12 at 11.23.49 AM](https://us1.discourse-cdn.com/elastic/original/3X/6/c/6c016b2f3093c57747041f076485257dd83a9e15.png)

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [December 10, 2022, 7:32pm UTC](https://discuss.elastic.co/t/fleet-managed-elastic-agent-add-parameter-to-filebeat-yml/317521/5 "2022-12-10T19:32:08Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
