Installation layout
Elastic Agent files are installed in the following locations.
/Library/Elastic/Agent/*- Elastic Agent program files
/Library/Elastic/Agent/elastic-agent.yml- Main Elastic Agent configuration
/Library/Elastic/Agent/fleet.enc- Main Elastic Agent Fleet encrypted configuration
/Library/Elastic/Agent/data/elastic-agent-*/logs/elastic-agent.ndjson- Log files for Elastic Agent and Beats shippers 1
/usr/bin/elastic-agent- Shell wrapper installed into PATH
You can install Elastic Agent in a custom base path other than /Library. When installing Elastic Agent with the ./elastic-agent install command, use the --base-path CLI option to specify the custom base path.
/opt/Elastic/Agent/*- Elastic Agent program files
/opt/Elastic/Agent/elastic-agent.yml- Main Elastic Agent configuration
/opt/Elastic/Agent/fleet.enc- Main Elastic Agent Fleet encrypted configuration
/opt/Elastic/Agent/data/elastic-agent-*/logs/elastic-agent.ndjson- Log files for Elastic Agent and Beats shippers 1
/usr/bin/elastic-agent- Shell wrapper installed into PATH
You can install Elastic Agent in a custom base path other than /opt. When installing Elastic Agent with the ./elastic-agent install command, use the --base-path CLI option to specify the custom base path.
C:\Program Files\Elastic\Agent*- Elastic Agent program files
C:\Program Files\Elastic\Agent\elastic-agent.yml- Main Elastic Agent configuration
C:\Program Files\Elastic\Agent\fleet.enc- Main Elastic Agent Fleet encrypted configuration
C:\Program Files\Elastic\Agent\data\elastic-agent-*\logs\elastic-agent.ndjson- Log files for Elastic Agent and Beats shippers 1
You can install Elastic Agent in a custom base path other than C:\Program Files. When installing Elastic Agent with the .\elastic-agent.exe install command, use the --base-path CLI option to specify the custom base path.
/usr/share/elastic-agent/*- Elastic Agent program files
/etc/elastic-agent/elastic-agent.yml- Main Elastic Agent configuration
/etc/elastic-agent/fleet.enc- Main Elastic Agent Fleet encrypted configuration
/var/lib/elastic-agent/data/elastic-agent-*/logs/elastic-agent.ndjson- Log files for Elastic Agent and Beats shippers 1
/usr/bin/elastic-agent- Shell wrapper installed into PATH
/usr/share/elastic-agent/*- Elastic Agent program files
/etc/elastic-agent/elastic-agent.yml- Main Elastic Agent configuration
/etc/elastic-agent/fleet.enc- Main Elastic Agent Fleet encrypted configuration
/var/lib/elastic-agent/data/elastic-agent-*/logs/elastic-agent.ndjson- Log files for Elastic Agent and Beats shippers 1
/usr/bin/elastic-agent- Shell wrapper installed into PATH
1 Logs file names end with a date (YYYYMMDD) and optional number: elastic-agent-YYYYMMDD.ndjson, elastic-agent-YYYYMMDD-1.ndjson, and so on as new files are created during rotation.