Hello, if I add both integrations (system and windows) in Fleet, for the same policy, will there be duplication of logs? Here;s what System collects: [image] Here's what Windows integration collects: [image] Is Sysmon included in System? Also, is there overlaps in what both integrations do an…

I think these collect different logs, have a look at the documentation: System | Elastic docs Collect system logs and metrics from your servers with Elastic Agent. Windows | Elastic docs Collect logs and metrics from Windows OS and services with…

System integration VS Windows Integration

Elastic Stack Elasticsearch

Julia_Bardi (Júlia Bárdi) November 22, 2022, 10:02am 2

I think these collect different logs, have a look at the documentation:

Topic		Replies	Views
Using Windows integration with policy that is applied to both Windows and Linux hosts Elastic Agent integrations	1	489	October 21, 2024
Elastic Agent vs System integration Elastic Agent elastic-stack-monitoring , fleet , filebeat , metricbeat	1	175	January 28, 2025
Integration Differences - Fleet Policies Endpoint Security integrations	3	728	February 17, 2022
Windows Elastic Agent System Integration not pulling Security or Application events Elastic Security elastic-stack-security , fleet , integrations	4	1305	March 23, 2022
Do not recieve sysmon log from the Windows Integration in elastic agent Endpoint Security	8	2581	December 6, 2021

System integration VS Windows Integration

Related topics