fleet.asciidoc

Centrally manage {agent}s in {fleet}

Manage {agent}s in {fleet}

The {fleet} app in {kib} supports both {agent} infrastructure management and agent policy management. You can use {fleet} to:

• Manage {agent} binaries and specify settings installed on the host that determine whether the {agent} is enrolled in {fleet}, what version of the agent is running, and which agent policy is used.

• Manage agent policies that specify agent configuration settings, which integrations are running, whether agent monitoring is turned on, input settings, and so on.

Advanced users who don’t want to use {fleet} for central management can use an external infrastructure management solution and install {agent} in standalone mode instead.

Important

{fleet} currently requires a {kib} user with All privileges on {fleet} and {integrations}. Since many Integrations assets are shared across spaces, users need the {kib} privileges in all spaces. Refer to [fleet-roles-and-privileges] to learn how to create a user role with the required privileges to access {fleet} and {integrations}.

To learn how to add {agent}s to {fleet}, refer to [install-fleet-managed-elastic-agent].

To use {fleet} go to Management > {fleet} in {kib}. The following table describes the main management actions you can perform in {fleet}:

Component	Management actions
[fleet-settings]	Configure global settings available to all {agent}s managed by {fleet}, including {fleet-server} hosts and output settings.
[manage-agents]	Enroll, unenroll, upgrade, add tags, and view {agent} status and logs.
[agent-policy]	Create and edit agent policies and add integrations to them.
[fleet-enrollment-tokens]	Create and revoke enrollment tokens.
{security-guide}/agent-tamper-protection.html[Uninstall tokens]	({elastic-defend} integration only) Access tokens to allow uninstalling {agent} from endpoints with Agent tamper protection enabled.
[data-streams]	View data streams and navigate to dashboards to analyze your data.