# Vision One Integration Policy - Agent

**URL:** <https://discuss.elastic.co/t/vision-one-integration-policy-agent/384720>\
**Category:** Elastic Agent\
**Created:** [January 23, 2026, 4:06pm UTC](https://discuss.elastic.co/t/vision-one-integration-policy-agent/384720 "2026-01-23T16:06:36Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![juancamiloll](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/juancamiloll/32/110326_2.png) [@juancamiloll](https://discuss.elastic.co/u/juancamiloll)\
**Post date:** [January 23, 2026, 4:06pm UTC](https://discuss.elastic.co/t/vision-one-integration-policy-agent/384720/1 "2026-01-23T16:06:36Z")

</div>

Hello everyone,

I have a question. I would appreciate it if you could help me and explain it to me, as I am confused.

I need the Trend Micro Vision One logs.

I have already added the integration.

The Vision One admin has already given me the API key.

I have already entered the URL and API key required for the integration.

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/4/b/4ba9e1d8b0ad53512cc32b95c9ebf951824ef787.png)

My question arises at this point. I understand that policies group agents together, but I don't know which policy to apply if the Trend Micro Vision One console has no way of installing an agent.

I can go to “Fleet” and create a policy called “VisionOne,” but it will still ask me to add an agent that is obviously associated with a host.

Thank you in advance for clarifying my question.

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/5/1/5192d8fc167bc9f7fdcf6b3957cc389551d7303c.png)

---

<div class="post-metadata">

**Author:** ![leandrojmp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/32/107231_2.png) [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\
**Post date:** [January 23, 2026, 5:00pm UTC](https://discuss.elastic.co/t/vision-one-integration-policy-agent/384720/2 "2026-01-23T17:00:51Z")

</div>

> [@juancamiloll](#):
>
> I can go to “Fleet” and create a policy called “VisionOne,” but it will still ask me to add an agent that is obviously associated with a host.

Yes, you need an Agent running on a host you manage to run the request.

You would need to have a policy with a single agent that it's function is to collect logs from API endpoints.

If you add this to a policy with more than one agent, you will duplicate the data, so you need to create a dedicated policy to those kind of integrations and add a single agent on your infrastructure.