Is it possible to create an alert in case an Elastic Agent goes offline?

[stephenb (Stephen Brown)]

If you collect system metrics you can just create a metric alert and there's an option to be alerted when it stop sending data.

But seems like there should be an easier way.

I also saw this

Elastic Fleet: Alert on Agent Status

Hi @DougR , thanks for posting. Unforutanetly I think there is not such functionality in Kibana. I found this feature request by @Jeff_Vestal You can create rules based on your agent writes (like the System integration writing at the logs-* data stream with data_stream.dataset: elastic_agent) but I concur that is not ideal. Example of a single agent writing data in the logs-* data view, filtering to show activity from the agent itself, filebeat and metricbeat [image]