2020-06-10 14:51:43 +02:00
|
|
|
[role="xpack"]
|
2020-10-07 19:03:56 +02:00
|
|
|
[[fleet-settings-kb]]
|
|
|
|
=== {fleet} settings in {kib}
|
2020-06-10 14:51:43 +02:00
|
|
|
++++
|
2020-10-07 19:03:56 +02:00
|
|
|
<titleabbrev>{fleet} settings</titleabbrev>
|
2020-06-10 14:51:43 +02:00
|
|
|
++++
|
|
|
|
|
2021-07-26 18:11:38 +02:00
|
|
|
[NOTE]
|
|
|
|
====
|
|
|
|
In {ecloud}, {fleet} flags are already configured.
|
|
|
|
====
|
|
|
|
|
2020-10-06 17:58:09 +02:00
|
|
|
You can configure `xpack.fleet` settings in your `kibana.yml`.
|
2020-10-07 19:03:56 +02:00
|
|
|
By default, {fleet} is enabled. To use {fleet}, you also need to configure {kib} and {es} hosts.
|
2020-06-19 00:44:29 +02:00
|
|
|
|
2020-12-17 21:23:16 +01:00
|
|
|
See the {fleet-guide}/index.html[{fleet}] docs for more information.
|
2020-06-10 14:51:43 +02:00
|
|
|
|
2020-10-07 19:03:56 +02:00
|
|
|
[[general-fleet-settings-kb]]
|
|
|
|
==== General {fleet} settings
|
2020-06-10 14:51:43 +02:00
|
|
|
|
|
|
|
[cols="2*<"]
|
|
|
|
|===
|
2020-10-06 17:58:09 +02:00
|
|
|
| `xpack.fleet.agents.enabled` {ess-icon}
|
2020-06-10 14:51:43 +02:00
|
|
|
| Set to `true` (default) to enable {fleet}.
|
|
|
|
|===
|
|
|
|
|
2020-10-07 19:03:56 +02:00
|
|
|
[[fleet-data-visualizer-settings]]
|
2020-06-10 14:51:43 +02:00
|
|
|
|
|
|
|
==== {package-manager} settings
|
|
|
|
|
|
|
|
[cols="2*<"]
|
|
|
|
|===
|
2020-10-06 17:58:09 +02:00
|
|
|
| `xpack.fleet.registryUrl`
|
2021-07-26 18:11:38 +02:00
|
|
|
| The address to use to reach the {package-manager} registry.
|
|
|
|
| `xpack.fleet.registryProxyUrl`
|
|
|
|
| The proxy address to use to reach the {package-manager} registry.
|
|
|
|
|
2020-06-10 14:51:43 +02:00
|
|
|
|===
|
|
|
|
|
|
|
|
==== {fleet} settings
|
|
|
|
|
|
|
|
[cols="2*<"]
|
|
|
|
|===
|
2021-04-20 20:43:29 +02:00
|
|
|
| `xpack.fleet.agents.fleet_server.hosts`
|
|
|
|
| Hostnames used by {agent} for accessing {fleet-server}.
|
2021-06-03 18:57:21 +02:00
|
|
|
| `xpack.fleet.agents.elasticsearch.hosts`
|
|
|
|
| Hostnames used by {agent} for accessing {es}.
|
2021-07-26 18:11:38 +02:00
|
|
|
| `xpack.fleet.agents.elasticsearch.ca_sha256`
|
|
|
|
| Hash pin used for certificate verification. The pin is a base64-encoded
|
|
|
|
string of the SHA-256 fingerprint.
|
2020-06-10 14:51:43 +02:00
|
|
|
|===
|
|
|
|
|
2021-07-26 18:11:38 +02:00
|
|
|
|
|
|
|
==== Preconfiguration settings (for advanced use cases)
|
|
|
|
|
|
|
|
Use these settings to pre-define integrations and agent policies that you
|
|
|
|
want {fleet} to load up by default.
|
|
|
|
|
|
|
|
[cols="2*<a"]
|
|
|
|
|===
|
|
|
|
|
|
|
|
| `xpack.fleet.packages`
|
|
|
|
| List of integrations that are installed when the {fleet} app starts
|
|
|
|
up for the first time. Required properties are:
|
|
|
|
|
|
|
|
`name`:: Name of the integration from the package registry.
|
|
|
|
`version`:: Either an exact semantic version, or the keyword `latest` to fetch
|
|
|
|
the latest integration version.
|
|
|
|
|
|
|
|
| `xpack.fleet.agentPolicies`
|
|
|
|
| List of agent policies that are configured when the {fleet} app starts.
|
|
|
|
Required properties are:
|
|
|
|
|
|
|
|
`id`:: Unique ID for this policy. The ID may be a number or string.
|
|
|
|
`name`:: Policy name.
|
|
|
|
|
|
|
|
Optional properties are:
|
|
|
|
|
|
|
|
`description`:: Text description of this policy.
|
|
|
|
`namespace`:: String identifying this policy's namespace.
|
|
|
|
`monitoring_enabled`:: List of keywords that specify the monitoring data to collect.
|
|
|
|
Valid values include `['logs']`, `['metrics']`, and `['logs', 'metrics']`.
|
|
|
|
`is_managed`:: If `true`, this policy is editable by the user and can only
|
|
|
|
be changed by updating the {kib} config.
|
|
|
|
`is_default`:: If `true`, this policy is the default agent policy.
|
|
|
|
`is_default_fleet_server`:: If `true`, this policy is the default {fleet-server} agent policy.
|
2021-09-21 19:52:21 +02:00
|
|
|
`data_output_id`:: ID of the output to send data (Need to be identical to `monitoring_output_id`)
|
|
|
|
`monitoring_output_id`:: ID of the output to send monitoring data. (Need to be identical to `data_output_id`)
|
2021-07-26 18:11:38 +02:00
|
|
|
`package_policies`:: List of integration policies to add to this policy.
|
|
|
|
`name`::: (required) Name of the integration policy.
|
|
|
|
`package`::: (required) Integration that this policy configures
|
|
|
|
`name`:::: Name of the integration associated with this policy.
|
|
|
|
`description`::: Text string describing this integration policy.
|
|
|
|
`namespace`::: String identifying this policy's namespace.
|
|
|
|
`inputs`::: Array that overrides any default input settings for this
|
|
|
|
integration. Follows the same schema as integration inputs, with the
|
|
|
|
exception that any object in `vars` can be passed `frozen: true` in order to
|
|
|
|
prevent that specific `var` from being edited by the user.
|
2021-09-21 19:52:21 +02:00
|
|
|
|
|
|
|
| `xpack.fleet.outputs`
|
2021-10-07 20:30:32 +02:00
|
|
|
| List of outputs that are configured when the {fleet} app starts.
|
2021-09-21 19:52:21 +02:00
|
|
|
Required properties are:
|
|
|
|
|
|
|
|
`id`:: Unique ID for this output. The ID should be a string.
|
|
|
|
`name`:: Output name.
|
|
|
|
`type`:: Type of Output. Currently we only support "elasticsearch".
|
|
|
|
`hosts`:: Array that contains the list of host for that output.
|
|
|
|
`config`:: Extra config for that output.
|
|
|
|
|
|
|
|
Optional properties are:
|
|
|
|
|
|
|
|
`is_default`:: If `true`, this output is the default output.
|
2021-07-26 18:11:38 +02:00
|
|
|
|===
|
|
|
|
|
|
|
|
Example configuration:
|
|
|
|
|
|
|
|
[source,yaml]
|
|
|
|
----
|
|
|
|
xpack.fleet.packages:
|
|
|
|
- name: apache
|
|
|
|
version: 0.5.0
|
|
|
|
|
|
|
|
xpack.fleet.agentPolicies:
|
|
|
|
- name: Preconfigured Policy
|
|
|
|
id: 1
|
|
|
|
namespace: test
|
|
|
|
package_policies:
|
|
|
|
- package:
|
|
|
|
name: system
|
|
|
|
name: System Integration
|
|
|
|
inputs:
|
|
|
|
- type: system/metrics
|
|
|
|
enabled: true
|
|
|
|
vars:
|
|
|
|
- name: system.hostfs
|
|
|
|
value: home/test
|
|
|
|
streams:
|
|
|
|
- data_stream:
|
|
|
|
dataset: system.core
|
|
|
|
enabled: true
|
|
|
|
vars:
|
|
|
|
- name: period
|
|
|
|
value: 20s
|
|
|
|
- type: winlog
|
|
|
|
enabled: false
|
|
|
|
----
|