Installing a Fleet-managed Elastic Agent adds a Linux host to Kibana Fleet so the host can receive an agent policy, collect telemetry, and report health back to the Elastic deployment. Use this path when Fleet Server is already reachable and the host should be managed from Kibana instead of a local standalone YAML file.
Fleet generates the install command from the selected agent policy and enrollment token. On Linux tar installations, the command installs the agent under /opt/Elastic/Agent, creates the elastic-agent service, and writes Fleet connection state into /opt/Elastic/Agent/fleet.enc.
Only one Elastic Agent can be installed on a host. Treat the enrollment token like a credential, add a CA file when Fleet Server uses a private certificate, and confirm both local status and the Fleet Agents table before using the host for policy rollout or integration testing.
Use a dedicated policy when a host group needs different integrations, rollout timing, or namespace settings.
Related: How to create an Elastic Agent policy in Fleet
Enrollment tokens allow new agents to join the selected policy. Store them in a secure shell variable, secret manager, or deployment tool instead of chat, tickets, or shared notes.
$ curl -L -O https://artifacts.elastic.co/downloads/beats/elastic-agent/elastic-agent-9.4.2-linux-x86_64.tar.gz
Fleet may show a different version, platform, or architecture for another host.
$ tar xzvf elastic-agent-9.4.2-linux-x86_64.tar.gz elastic-agent-9.4.2-linux-x86_64/ elastic-agent-9.4.2-linux-x86_64/elastic-agent ##### snipped #####
$ cd elastic-agent-9.4.2-linux-x86_64
$ sudo ./elastic-agent install --url=https://fleet.example.net:8220 --enrollment-token=AAEAAWVsYXN0aWMtZmxlZXQtZW5yb2xsOjEyMzQ1Njc4OTBhYmNkZWY= Elastic Agent will be installed at /opt/Elastic/Agent and will run as a service. Do you want to continue? [Y/n]: y Elastic Agent has been successfully installed.
Add --certificate-authorities=/path/to/ca.crt when Fleet Server uses a private CA. Use --non-interactive only after the command has been tested for unattended deployment.
$ systemctl status elastic-agent
● elastic-agent.service - Elastic Agent
Loaded: loaded (/etc/systemd/system/elastic-agent.service; enabled; preset: enabled)
Active: active (running) since Thu 2026-06-18 04:30:00 UTC; 1min ago
##### snipped #####
$ elastic-agent status ┌─ fleet │ └─ status: (HEALTHY) Connected └─ elastic-agent └─ status: (HEALTHY) Running
The default human output is short when the agent is healthy. Use elastic-agent status --output full when a component or unit needs detail.
Fleet can take about a minute to show a newly enrolled host after installation.
A policy with the System integration should begin collecting host logs and metrics after the agent checks in.
Related: How to add the System integration to an Elastic Agent policy
Related: How to monitor Elastic Agent health in Fleet
$ cd ..
$ rm -r elastic-agent-9.4.2-linux-x86_64 elastic-agent-9.4.2-linux-x86_64.tar.gz
This cleanup removes only the extracted installer and archive. The installed service remains under /opt/Elastic/Agent.