Installation layoutedit
Elastic Agent files are installed in the following locations. You cannot override these installation paths because they are required for upgrades.
-
/Library/Elastic/Agent/* - Elastic Agent program files
-
/Library/Elastic/Agent/elastic-agent.yml - Main Elastic Agent configuration
-
/Library/Elastic/Agent/fleet.yml - Main Elastic Agent Fleet configuration
-
/Library/Elastic/Agent/data/elastic-agent-*/logs/elastic-agent-json.log - Log files for Elastic Agent[1]
-
/Library/Elastic/Agent/data/elastic-agent-*/logs/default/*-json.log - Log files for Beats shippers[1]
-
/usr/bin/elastic-agent - Shell wrapper installed into PATH
-
/opt/Elastic/Agent/* - Elastic Agent program files
-
/opt/Elastic/Agent/elastic-agent.yml - Main Elastic Agent configuration
-
/opt/Elastic/Agent/fleet.yml - Main Elastic Agent Fleet configuration
-
/opt/Elastic/Agent/data/elastic-agent-*/logs/elastic-agent-json.log - Log files for Elastic Agent[1]
-
/opt/Elastic/Agent/data/elastic-agent-*/logs/default/*-json.log - Log files for Beats shippers
-
/usr/bin/elastic-agent - Shell wrapper installed into PATH
-
C:\Program Files\Elastic\Agent* - Elastic Agent program files
-
C:\Program Files\Elastic\Agent\elastic-agent.yml - Main Elastic Agent configuration
-
C:\Program Files\Elastic\Agent\fleet.yml - Main Elastic Agent Fleet configuration
-
C:\Program Files\Elastic\Agent\data\elastic-agent-*\logs\elastic-agent-json.log - Log files for Elastic Agent[1]
-
C:\Program Files\Elastic\Agent\data\elastic-agent-*\logs\default\*-json.log* - Log files for Beats shippers
-
/usr/share/elastic-agent/* - Elastic Agent program files
-
/etc/elastic-agent/elastic-agent.yml - Main Elastic Agent configuration
-
/etc/elastic-agent/fleet.yml - Main Elastic Agent Fleet configuration
-
/var/lib/elastic-agent/data/elastic-agent-*/logs/elastic-agent-json.log - Log files for Elastic Agent[1]
-
/var/lib/elastic-agent/data/elastic-agent-*/logs/default/*-json.log* - Log files for Beats shippers
-
/usr/bin/elastic-agent - Shell wrapper installed into PATH
-
/usr/share/elastic-agent/* - Elastic Agent program files
-
/etc/elastic-agent/elastic-agent.yml - Main Elastic Agent configuration
-
/etc/elastic-agent/fleet.yml - Main Elastic Agent Fleet configuration
-
/var/lib/elastic-agent/data/elastic-agent-*/logs/elastic-agent-json.log - Log files for Elastic Agent[1]
-
/var/lib/elastic-agent/data/elastic-agent-*/logs/default/*-json.log* - Log files for Beats shippers
-
/usr/bin/elastic-agent - Shell wrapper installed into PATH
[1] Logs file names end with a date and optional number: log-date.ndjson, log-date-1.ndjson, and so on as new files are created during rotation.