Installation layout
editInstallation layout
editElastic Agent files are installed in the following locations.
-
/Library/Elastic/Agent/* - Elastic Agent program files
-
/Library/Elastic/Agent/elastic-agent.yml - Main Elastic Agent configuration
-
/Library/Elastic/Agent/fleet.enc - Main Elastic Agent Fleet encrypted configuration
-
/Library/Elastic/Agent/data/elastic-agent-*/logs/elastic-agent.ndjson - Log files for Elastic Agent and Beats shippers [1]
-
/usr/bin/elastic-agent - Shell wrapper installed into PATH
You can install Elastic Agent in a custom base path other than /Library. When installing Elastic Agent with the ./elastic-agent install
command, use the --base-path CLI option to specify the custom base path.
-
/opt/Elastic/Agent/* - Elastic Agent program files
-
/opt/Elastic/Agent/elastic-agent.yml - Main Elastic Agent configuration
-
/opt/Elastic/Agent/fleet.enc - Main Elastic Agent Fleet encrypted configuration
-
/opt/Elastic/Agent/data/elastic-agent-*/logs/elastic-agent.ndjson - Log files for Elastic Agent and Beats shippers [1]
-
/usr/bin/elastic-agent - Shell wrapper installed into PATH
You can install Elastic Agent in a custom base path other than /opt. When installing Elastic Agent with the ./elastic-agent install
command, use the --base-path CLI option to specify the custom base path.
-
C:\Program Files\Elastic\Agent* - Elastic Agent program files
-
C:\Program Files\Elastic\Agent\elastic-agent.yml - Main Elastic Agent configuration
-
C:\Program Files\Elastic\Agent\fleet.enc - Main Elastic Agent Fleet encrypted configuration
-
C:\Program Files\Elastic\Agent\data\elastic-agent-*\logs\elastic-agent.ndjson - Log files for Elastic Agent and Beats shippers [1]
You can install Elastic Agent in a custom base path other than C:\Program Files. When installing Elastic Agent with the .\elastic-agent.exe install
command, use the --base-path CLI option to specify the custom base path.
-
/usr/share/elastic-agent/* - Elastic Agent program files
-
/etc/elastic-agent/elastic-agent.yml - Main Elastic Agent configuration
-
/etc/elastic-agent/fleet.enc - Main Elastic Agent Fleet encrypted configuration
-
/var/lib/elastic-agent/data/elastic-agent-*/logs/elastic-agent.ndjson - Log files for Elastic Agent and Beats shippers [1]
-
/usr/bin/elastic-agent - Shell wrapper installed into PATH
-
/usr/share/elastic-agent/* - Elastic Agent program files
-
/etc/elastic-agent/elastic-agent.yml - Main Elastic Agent configuration
-
/etc/elastic-agent/fleet.enc - Main Elastic Agent Fleet encrypted configuration
-
/var/lib/elastic-agent/data/elastic-agent-*/logs/elastic-agent.ndjson - Log files for Elastic Agent and Beats shippers [1]
-
/usr/bin/elastic-agent - Shell wrapper installed into PATH
[1] Logs file names end with a date (
YYYYMMDD) and optional number: elastic-agent-YYYYMMDD.ndjson, elastic-agent-YYYYMMDD-1.ndjson, and so on as new files are created during rotation.