Hi Guys, I noticed that the integration didn't create the indices for network flow. Is this a bug or missed configuration? [Screen Shot 2021-10-01 at 12.53.38 AM] [Screen Shot 2021-10-01 at 1.01.20 AM] {"type":"security_exception","reason":"action [indices:admin/auto_create] is unauthorized for…

Hi @zx8086 First we are not all guys :slight_smile: I repeated this as well ... Curious...Where did you pull that error log line from was? Can you provide your elastic stack version / agent version method of install OS for elastic and where you deployed the agent to?

Curious...Where did you pull that error log line from was? Can you provide your elastic stack version / agent version method of install OS for elastic and where you deployed the agent to? 7.15 Network Traffic from Elastic-Agent Integration From Observability Logs affecting all host Debian (R…

Thanks [image] zx8086: From Observability Logs affecting all host Debian (RPi4) and Darwin (Mac OSX 10.13) deployed by Debian Buster 10 node Ok I guess I meant was that an Elastic Agent log, Kibana log or Elasticsearch log message, no worries we will take a look. EDIT that is a log messag…

@stephenb @andrewkroh From index .ds-logs-network_traffic.dns-default-2021.09.30-000001 [Screen Shot 2021-10-02 at 1.29.52 AM] Also with Network Traffic... TLS (when Enabled) {"type":"mapper_parsing_exception","reason":"failed to parse field [tls.detailed.server_certificate_chain] of type [ke…

I think I found the problem with logs-network_traffic.flow and have opened a fix. [Packetbeat] Fix data stream name for network flows under Agent elastic:master ← andrewkroh:bugfix/pb/network-flow-data-stream-index opened…

Is Network Traffic (Fleet Integration) the new Packetbeat? - Missing Netfow?

Elastic Observability

andrewkroh (Andrew Kroh) October 1, 2021, 3:19pm 2

I saw a similar permissions issue in No Elastic Security Events but Agents status is "green" - #2 by andrewkroh. With that issue, recreating the policy for that agent cleared up the problem.

Topic		Replies	Views
Netflow Fleet integration problem Beats fleet	0	19	April 20, 2026
Elastic Agent Configured By Fleet - Integrations Using MetricBeat - this action is granted by the index privileges error Beats docker , metricbeat	0	306	September 16, 2022
Netflow Problem Elasticsearch	0	425	October 12, 2021
Elastic agent does not send logs Elastic Security fleet	7	2833	August 31, 2021
Fleet-server is unauthorized on indice Elastic Agent	3	683	June 13, 2023

Is Network Traffic (Fleet Integration) the new Packetbeat? - Missing Netfow?

Related topics