# \#fleet **URL:** https://discuss.elastic.co/tag/fleet/25.md [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) --- ## [AWS integration 7.1 fleet agent bug or UI glitch](https://discuss.elastic.co/t/aws-integration-7-1-fleet-agent-bug-or-ui-glitch/388899)
**Author:** [@stanley783](https://discuss.elastic.co/u/stanley783)\ **Replies:** 10\ **Last updated:** [July 30, 2026, 3:01pm UTC](https://discuss.elastic.co/t/aws-integration-7-1-fleet-agent-bug-or-ui-glitch/388899 "2026-07-30T15:01:48Z")
Recently upgraded ELK cluster from 9.3.2 to 9.4.4. On older version had AWS integration of version 6.20, on new cluster upgraded it to 7.1 latest. Prior to upgrade, we had 1 Elastic agent with this integration 6.2 (agent… --- ## [Deploying an External Fleet Server with an ECK-Managed Elastic Stack](https://discuss.elastic.co/t/deploying-an-external-fleet-server-with-an-eck-managed-elastic-stack/388380)
**Author:** [@Zaryab\_Shaikh](https://discuss.elastic.co/u/Zaryab_Shaikh)\ **Replies:** 0\ **Last updated:** [July 16, 2026, 1:42pm UTC](https://discuss.elastic.co/t/deploying-an-external-fleet-server-with-an-eck-managed-elastic-stack/388380 "2026-07-16T13:42:22Z")
Hi everyone, I hope you're doing well. I have an Elastic Stack deployment running on Kubernetes using the ECK Operator. Elasticsearch, Kibana, and Fleet Server are all deployed successfully and working as expected with… --- ## [Cloudwatch Integration State File Conflict](https://discuss.elastic.co/t/cloudwatch-integration-state-file-conflict/386904)
**Author:** [@andreaskapfer](https://discuss.elastic.co/u/andreaskapfer)\ **Replies:** 0\ **Last updated:** [June 19, 2026, 1:38pm UTC](https://discuss.elastic.co/t/cloudwatch-integration-state-file-conflict/386904 "2026-06-19T13:38:26Z")
Hello, we have registered an agent running on AWS ECS to collect our Kubernetes logs from AWS Cloudwatch. We are using start\_position: lastSync and a persistent AWS EFS volume for the agent's state. We are fetching two… --- ## [Unable to create private location](https://discuss.elastic.co/t/unable-to-create-private-location/386864)
**Author:** [@umesh2020](https://discuss.elastic.co/u/umesh2020)\ **Replies:** 2\ **Last updated:** [June 16, 2026, 10:09am UTC](https://discuss.elastic.co/t/unable-to-create-private-location/386864 "2026-06-16T10:09:02Z")
Invalid spaces. Private location spaces \[default\] must be fully contained within agent policy 532963e5-1c04-4475-b0a3-0d807c6a12e7 spaces \[\]. GET kbn:/api/fleet/agent\_policies/532963e5-1c04-4475-b0a3-0d807c6a12e7 { "… --- ## [Collect Kubernetes audit logs from local files only if node label exists via fleet](https://discuss.elastic.co/t/collect-kubernetes-audit-logs-from-local-files-only-if-node-label-exists-via-fleet/386344)
**Author:** [@AndrewDatTeranet](https://discuss.elastic.co/u/AndrewDatTeranet)\ **Replies:** 0\ **Last updated:** [May 14, 2026, 6:10pm UTC](https://discuss.elastic.co/t/collect-kubernetes-audit-logs-from-local-files-only-if-node-label-exists-via-fleet/386344 "2026-05-14T18:10:16Z")
While trying to set up the "Collect Kubernetes audit logs from local files" with the Kubernetes integration in fleet, I was trying to add a condition to only collect logs if the node label kubernetes.labels.node-role\_kub… --- ## [Best practices for dashboards and rules](https://discuss.elastic.co/t/best-practices-for-dashboards-and-rules/386316)
**Author:** [@PatreKerier](https://discuss.elastic.co/u/PatreKerier)\ **Replies:** 0\ **Last updated:** [May 13, 2026, 6:42am UTC](https://discuss.elastic.co/t/best-practices-for-dashboards-and-rules/386316 "2026-05-13T06:42:46Z")
Good afternoon, colleagues! If it's not too much trouble, could you please share your ready-made correlation rules and dashboards that are really useful to you in practice. According to Best Practice. I will be very gra… --- ## [Can i use the same fleet server policy to enroll two fleet servers for HA?](https://discuss.elastic.co/t/can-i-use-the-same-fleet-server-policy-to-enroll-two-fleet-servers-for-ha/386106)
**Author:** [@Mansi\_Sharma1](https://discuss.elastic.co/u/Mansi_Sharma1)\ **Replies:** 1\ **Last updated:** [April 30, 2026, 9:32pm UTC](https://discuss.elastic.co/t/can-i-use-the-same-fleet-server-policy-to-enroll-two-fleet-servers-for-ha/386106 "2026-04-30T21:32:43Z")
Hello, I have two VMs where i want to setup my fleet servers. VM1 as Fleet1 and VM2 as Fleet2 I have a Load Balancer for that too. i am wondering if i can use the only one fleet server policy for enrolling both of th… --- ## [Data from server is not flowing from elastic agent to elastic](https://discuss.elastic.co/t/data-from-server-is-not-flowing-from-elastic-agent-to-elastic/385333)
**Author:** [@sathish12](https://discuss.elastic.co/u/sathish12)\ **Replies:** 5\ **Last updated:** [April 28, 2026, 2:16pm UTC](https://discuss.elastic.co/t/data-from-server-is-not-flowing-from-elastic-agent-to-elastic/385333 "2026-04-28T14:16:46Z")
I have installed fleet server in one machine and server agent to collect logs and metrics in one web server. for the both the agents I have created respective default policies and integration. For web server, I have prov… --- ## [Elastic - ESET AV integration](https://discuss.elastic.co/t/elastic-eset-av-integration/385971)
**Author:** [@PatreKerier](https://discuss.elastic.co/u/PatreKerier)\ **Replies:** 2\ **Last updated:** [April 22, 2026, 12:25pm UTC](https://discuss.elastic.co/t/elastic-eset-av-integration/385971 "2026-04-22T12:25:04Z")
Good afternoon! Please tell me if anyone has configured the integration of ESET AntiVirus with ELASTIC. I deployed a Linux-based syslog server, specified the address and port 514 or 6514 in ESET, but there are no logs, … --- ## [Netflow Fleet integration problem](https://discuss.elastic.co/t/netflow-fleet-integration-problem/385965)
**Author:** [@BenoitSERRA](https://discuss.elastic.co/u/BenoitSERRA)\ **Replies:** 0\ **Last updated:** [April 20, 2026, 3:34pm UTC](https://discuss.elastic.co/t/netflow-fleet-integration-problem/385965 "2026-04-20T15:34:47Z")
Hi all, Not sure if the category is the right one here, but here goes. I've deployed an ELK stack on a server of mine and deployed Fleet and several agents. I've deployed Fleet's Netflow integration and set up my OPNse… --- ## [Docker logs integration with Fleet to a datastream - my experience](https://discuss.elastic.co/t/docker-logs-integration-with-fleet-to-a-datastream-my-experience/385549)
**Author:** [@dot-mike](https://discuss.elastic.co/u/dot-mike)\ **Replies:** 0\ **Last updated:** [March 20, 2026, 4:43pm UTC](https://discuss.elastic.co/t/docker-logs-integration-with-fleet-to-a-datastream-my-experience/385549 "2026-03-20T16:43:07Z")
Hi community, I'm sharing my experience here for ingesting docker logs with fleet agent-setup. My goal is to ingest docker logs for a specific application running on on-premises on a specific system to a custom datastre… --- ## [Elastic Agent to Logstash](https://discuss.elastic.co/t/elastic-agent-to-logstash/385314)
**Author:** [@arav](https://discuss.elastic.co/u/arav)\ **Replies:** 3\ **Last updated:** [March 3, 2026, 1:14pm UTC](https://discuss.elastic.co/t/elastic-agent-to-logstash/385314 "2026-03-03T13:14:30Z")
I cant send the elastic agent to logstash I have the logstash listed in Fleet → Settings While creating a policy, while selecting output for integration, the logstash option is available but not clickable --- ## [Fleet isn't loading](https://discuss.elastic.co/t/fleet-isnt-loading/384946)
**Author:** [@YousefNein](https://discuss.elastic.co/u/YousefNein)\ **Replies:** 2\ **Last updated:** [February 19, 2026, 2:59pm UTC](https://discuss.elastic.co/t/fleet-isnt-loading/384946 "2026-02-19T14:59:34Z")
Fleet takes too much time to load It worked when we opened the internet access to the machine, so we have made a firewall rule to go to elastic.co However, the problem still resides What should I look for or how… --- ## [ECK Fleet Server setup confusion and failure](https://discuss.elastic.co/t/eck-fleet-server-setup-confusion-and-failure/384857)
**Author:** [@gueguet57](https://discuss.elastic.co/u/gueguet57)\ **Replies:** 1\ **Last updated:** [February 3, 2026, 10:36am UTC](https://discuss.elastic.co/t/eck-fleet-server-setup-confusion-and-failure/384857 "2026-02-03T10:36:57Z")
Hi, I have an existing ECK stack (ES + Kibana) running fine. I’m now trying to add Fleet Server and configure Kibana accordingly, but I’m a bit confused. I’m following: https://www.elastic.co/docs/deploy-manage/depl… --- ## [See Fleet Policies and Agents across all Spaces](https://discuss.elastic.co/t/see-fleet-policies-and-agents-across-all-spaces/384806)
**Author:** [@cconard.kcsr](https://discuss.elastic.co/u/cconard.kcsr)\ **Replies:** 0\ **Last updated:** [January 29, 2026, 6:12pm UTC](https://discuss.elastic.co/t/see-fleet-policies-and-agents-across-all-spaces/384806 "2026-01-29T18:12:23Z")
We have a number of Kibana Spaces defined for our users, including Fleet Agents defined by Spaces. This is great functionality to allow our users some access to their agents. However, as general admins and SMEs (Subject … --- ## [Best practice for enriching logs with environment names](https://discuss.elastic.co/t/best-practice-for-enriching-logs-with-environment-names/384655)
**Author:** [@curiousdba](https://discuss.elastic.co/u/curiousdba)\ **Replies:** 4\ **Last updated:** [January 22, 2026, 3:46pm UTC](https://discuss.elastic.co/t/best-practice-for-enriching-logs-with-environment-names/384655 "2026-01-22T15:46:54Z")
I want to enrich logs by adding service information (Environment specifically). Add a service name to logs seems like what I want. But none of the options seem ideal. Ideally I would have an agent policy for (say) the … --- ## [Elastic Agent vs Logstash with Filebeat](https://discuss.elastic.co/t/elastic-agent-vs-logstash-with-filebeat/384556)
**Author:** [@marian.veverka](https://discuss.elastic.co/u/marian.veverka)\ **Replies:** 5\ **Last updated:** [January 17, 2026, 5:10pm UTC](https://discuss.elastic.co/t/elastic-agent-vs-logstash-with-filebeat/384556 "2026-01-17T17:10:53Z")
Hello, I have a server running several Docker containers (including, for example, Keycloak). I want to send logs from these Docker containers to Elasticsearch. Currently, for one Docker container I'm using a separate D… --- ## [Can not modify my fleet server and agent configuration on ECK](https://discuss.elastic.co/t/can-not-modify-my-fleet-server-and-agent-configuration-on-eck/384265)
**Author:** [@NiceAgent](https://discuss.elastic.co/u/NiceAgent)\ **Replies:** 12\ **Last updated:** [December 30, 2025, 3:42am UTC](https://discuss.elastic.co/t/can-not-modify-my-fleet-server-and-agent-configuration-on-eck/384265 "2025-12-30T03:42:12Z")
I deployed eck-operator on my microk8s system. Then I used eck-operator to deploy Elasticsearch and Kibana. Next, I wanted to deploy Fleet and its agent. I added the configuration to Kibana (as shown in Figure 1). A… --- ## [Agents not "upgradeable"](https://discuss.elastic.co/t/agents-not-upgradeable/383437)
**Author:** [@Balu](https://discuss.elastic.co/u/Balu)\ **Replies:** 7\ **Last updated:** [December 24, 2025, 5:52pm UTC](https://discuss.elastic.co/t/agents-not-upgradeable/383437 "2025-12-24T17:52:19Z")
Hello I have updated my cluster to 8.19.7, then upgraded Kibana to 8.19.7 (including a reboot) and manually updated the fleet servers to 8.19.7, because they were not shown as "upgradeable". Now two days later, still n… --- ## [Upgrade agent on Fleet server](https://discuss.elastic.co/t/upgrade-agent-on-fleet-server/383902)
**Author:** [@kernelpanic](https://discuss.elastic.co/u/kernelpanic)\ **Replies:** 1\ **Last updated:** [December 5, 2025, 6:55pm UTC](https://discuss.elastic.co/t/upgrade-agent-on-fleet-server/383902 "2025-12-05T18:55:19Z")
Hello, I’ve successfully updated most of the Elasticsearch stack to the latest version 9.2.2 I’m having difficulty understanding how I upgrade the agent on the Fleet server; I can’t update the agent from the Fleet secti… --- ## [Confused by --fleet-server-es-cert\* flags](https://discuss.elastic.co/t/confused-by-fleet-server-es-cert-flags/383546)
**Author:** [@learningelastic](https://discuss.elastic.co/u/learningelastic)\ **Replies:** 3\ **Last updated:** [November 20, 2025, 3:48pm UTC](https://discuss.elastic.co/t/confused-by-fleet-server-es-cert-flags/383546 "2025-11-20T15:48:10Z")
So can someone clarify for me how these flags are used: --fleet-server-es-cert\*, --fleet-server-es-ca, --fleet-server-client-auth ? For example, let’s say I ran this command on my linux server 192.168.0.2 to turn it int… --- ## [Issue enrolling into fleet](https://discuss.elastic.co/t/issue-enrolling-into-fleet/383470)
**Author:** [@f4n-1nh1b1t10n](https://discuss.elastic.co/u/f4n-1nh1b1t10n)\ **Replies:** 16\ **Last updated:** [November 19, 2025, 4:26pm UTC](https://discuss.elastic.co/t/issue-enrolling-into-fleet/383470 "2025-11-19T16:26:58Z")
Hello, I seem to stumble on the issue of enrolling my agent securely into fleet. i’ve tried the FAQ where they suggest to install the agent first, and then enroll it into fleet (upgrading the agent to a fleet server wi… --- ## [Where is fleet-server CA?](https://discuss.elastic.co/t/where-is-fleet-server-ca/383491)
**Author:** [@Blason](https://discuss.elastic.co/u/Blason)\ **Replies:** 1\ **Last updated:** [November 17, 2025, 5:55pm UTC](https://discuss.elastic.co/t/where-is-fleet-server-ca/383491 "2025-11-17T17:55:42Z")
Hello, I am bit confused about fleet-server ca file? where is that stored? I mean I installed the elasticstack and then installed the fleet server on same server. Generated certificate using instances.yml instances: … --- ## [Fleet policy settings "Agent logging to files" & "Agent log level" does not work](https://discuss.elastic.co/t/fleet-policy-settings-agent-logging-to-files-agent-log-level-does-not-work/382982)
**Author:** [@SamehSaeed](https://discuss.elastic.co/u/SamehSaeed)\ **Replies:** 2\ **Last updated:** [October 30, 2025, 7:26am UTC](https://discuss.elastic.co/t/fleet-policy-settings-agent-logging-to-files-agent-log-level-does-not-work/382982 "2025-10-30T07:26:51Z")
Hello, I’m replacing Metricbeats with Elastic-Agent on multiple servers so i can manage them through UI, but I noticed that some options are not working like "Agent logging to files" & "Agent log level", you have to di… --- ## [Integrating fortigate firewall to elastic](https://discuss.elastic.co/t/integrating-fortigate-firewall-to-elastic/382949)
**Author:** [@phumlani](https://discuss.elastic.co/u/phumlani)\ **Replies:** 2\ **Last updated:** [October 28, 2025, 8:49pm UTC](https://discuss.elastic.co/t/integrating-fortigate-firewall-to-elastic/382949 "2025-10-28T20:49:52Z")
I am required to pull logs from the firewall(fortigate), and Office365. I have registered the application on microsoft AZURE for office365 and assigned permissions(Office365 management API(ActivityFeed.Read, ActivityFeed… --- ## [Elastic Agent offline caching of events](https://discuss.elastic.co/t/elastic-agent-offline-caching-of-events/382925)
**Author:** [@craigothy](https://discuss.elastic.co/u/craigothy)\ **Replies:** 6\ **Last updated:** [October 23, 2025, 7:03pm UTC](https://discuss.elastic.co/t/elastic-agent-offline-caching-of-events/382925 "2025-10-23T19:03:31Z")
If we have a fleet agent installed and then that agent goes offline with no “line of sight” to the elasticsearch/fleet server, how are events handled that are captured through integrations. Say you had an ubuntu host wit… --- ## [504 ERROR when using utf-16le](https://discuss.elastic.co/t/504-error-when-using-utf-16le/382745)
**Author:** [@SIEMdeJong](https://discuss.elastic.co/u/SIEMdeJong)\ **Replies:** 0\ **Last updated:** [October 15, 2025, 12:51pm UTC](https://discuss.elastic.co/t/504-error-when-using-utf-16le/382745 "2025-10-15T12:51:10Z")
Hello, We use Elastic 9.1.4. We want to monitor deadlocks in Elastic. The method that consistently works for us is to enable DBCC TRACEON(1222, -1); on MSSQL. This causes the deadlocks to be written to the ERRORLOG. A… --- ## [Running Fleet Server on localhost](https://discuss.elastic.co/t/running-fleet-server-on-localhost/382174)
**Author:** [@primote](https://discuss.elastic.co/u/primote)\ **Replies:** 1\ **Last updated:** [September 24, 2025, 9:36am UTC](https://discuss.elastic.co/t/running-fleet-server-on-localhost/382174 "2025-09-24T09:36:02Z")
Is it possible to run a Fleet Server on the same host as Elastic and Kibana? I\`m using basic Elasticsearch and Kibana on my VM and I would like to setup Fleet and Agents for use with Elastic Security How can i configur… --- ## [How to add AWS integration via Kibana CR?](https://discuss.elastic.co/t/how-to-add-aws-integration-via-kibana-cr/358505)
**Author:** [@Denis\_Pudov](https://discuss.elastic.co/u/Denis_Pudov)\ **Replies:** 3\ **Last updated:** [September 15, 2025, 11:50am UTC](https://discuss.elastic.co/t/how-to-add-aws-integration-via-kibana-cr/358505 "2025-09-15T11:50:42Z")
Hello. I tried to configure Kibana custom resource with xpack.fleet.agentPolicies to add aws integration without success. I have read many documentation and done a lot of experiments and looks that there is no support f… --- ## [Unable to initialize fleet](https://discuss.elastic.co/t/unable-to-initialize-fleet/381838)
**Author:** [@Thom.cr](https://discuss.elastic.co/u/Thom.cr)\ **Replies:** 2\ **Last updated:** [September 10, 2025, 2:24pm UTC](https://discuss.elastic.co/t/unable-to-initialize-fleet/381838 "2025-09-10T14:24:33Z")
Hi, i just installed kibana and elasticsearch (last stable version) but everytime i try to go to fleet i get an error : Thanks for your help [Next page](https://discuss.elastic.co/tag/fleet/25.md?match_all_tags=true&page=1&tags%5B%5D=fleet)