# Agents are running properly but no data in Data Stream **URL:** \ **Category:** Beats\ **Tags:** fleet\ **Created:** [January 4, 2021, 5:23pm UTC](https://discuss.elastic.co/t/agents-are-running-properly-but-no-data-in-data-stream/260111 "2021-01-04T17:23:23Z")\ **Posts on this page:** 18\ **Page:** 1
**Author:** ![nomoneynoproblems](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nomoneynoproblems/32/44524_2.png) [@nomoneynoproblems](https://discuss.elastic.co/u/nomoneynoproblems)\ **Post date:** [January 4, 2021, 5:23pm UTC](https://discuss.elastic.co/t/agents-are-running-properly-but-no-data-in-data-stream/260111/1 "2021-01-04T17:23:23Z")
Using Elastic Cloud I'm not seeing any data in the data stream section even though a test "Rails Prod" server is showing "Online". ![image](https://us1.discourse-cdn.com/elastic/original/3X/7/f/7fa81418647d0a160e7c2d7d6e4453ad7dedaa50.png) ![image](https://us1.discourse-cdn.com/elastic/original/3X/7/d/7d0a9e19a5a97c3ea75974f236104faa21bb9f34.png) ![image](https://us1.discourse-cdn.com/elastic/original/3X/8/8/88de0b6ed1f00dc96770a5d26530f4492a055f32.png) ---
**Author:** ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)\ **Post date:** [January 4, 2021, 5:48pm UTC](https://discuss.elastic.co/t/agents-are-running-properly-but-no-data-in-data-stream/260111/2 "2021-01-04T17:48:28Z")
It looks like you created your own policy.... did you include / assign any integrations in the policy? > **[Quick start: Get logs and metrics into the Elastic Stack | Fleet User Guide...](https://www.elastic.co/guide/en/fleet/current/fleet-quick-start.html)** _Back in Fleet, under **Choose an agent policy** , notice that the default policy is selected. The default policy includes a system integration for collecting logs and metrics from the host system._ ---
**Author:** ![nomoneynoproblems](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nomoneynoproblems/32/44524_2.png) [@nomoneynoproblems](https://discuss.elastic.co/u/nomoneynoproblems)\ **Post date:** [January 4, 2021, 6:01pm UTC](https://discuss.elastic.co/t/agents-are-running-properly-but-no-data-in-data-stream/260111/3 "2021-01-04T18:01:28Z")
Hi Stephen, Thank you for taking the time to respond. Yes, the policy has one integration. The default one: ![image](https://us1.discourse-cdn.com/elastic/original/3X/f/d/fd743cce99f46c5bd2155a78c6ecca24e8c24f60.png) ![image](https://us1.discourse-cdn.com/elastic/original/3X/5/b/5b627e4980c682ec9767ca717d01aa5c92c0e6cc.png) which should include general metrics about the Linux system. Thank you! ---
**Author:** ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)\ **Post date:** [January 4, 2021, 6:11pm UTC](https://discuss.elastic.co/t/agents-are-running-properly-but-no-data-in-data-stream/260111/4 "2021-01-04T18:11:17Z")
Hmm, Interesting, could you try the default policy and see what happens? ---
**Author:** ![nomoneynoproblems](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nomoneynoproblems/32/44524_2.png) [@nomoneynoproblems](https://discuss.elastic.co/u/nomoneynoproblems)\ **Post date:** [January 4, 2021, 6:33pm UTC](https://discuss.elastic.co/t/agents-are-running-properly-but-no-data-in-data-stream/260111/6 "2021-01-04T18:33:16Z")
There is no data in Data Streams but there is an error now: ![image](https://us1.discourse-cdn.com/elastic/original/3X/8/9/899a44d6a9e17daef8bf497f95c28ad123933d43.png) ![image](https://us1.discourse-cdn.com/elastic/original/3X/f/e/fee67451bc6407eb6d7e4ec6f420543b20e81ebc.png) ---
**Author:** ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)\ **Post date:** [January 5, 2021, 12:12am UTC](https://discuss.elastic.co/t/agents-are-running-properly-but-no-data-in-data-stream/260111/7 "2021-01-05T00:12:13Z")
Hmm kinda seems like more than one agent perhaps... did you also try to install the original beat like filebeat or metricbeat, they do not co-exist as far as I know. ---
**Author:** ![nomoneynoproblems](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nomoneynoproblems/32/44524_2.png) [@nomoneynoproblems](https://discuss.elastic.co/u/nomoneynoproblems)\ **Post date:** [January 5, 2021, 12:38am UTC](https://discuss.elastic.co/t/agents-are-running-properly-but-no-data-in-data-stream/260111/8 "2021-01-05T00:38:12Z")
Yes, it was originally installed but it is now uninstalled. sudo apt remove filebeat manually deleted the directory the service is now gone which filebeat returns nothing ---
**Author:** ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)\ **Post date:** [January 5, 2021, 12:43am UTC](https://discuss.elastic.co/t/agents-are-running-properly-but-no-data-in-data-stream/260111/9 "2021-01-05T00:43:48Z")
Not sure what the issue is... Are beats process still running by chance? that error seems to indicate more than one agent / beat us running. I would make sure both metricbeat and filebeat fully removed and make sure they are no zombie procceses Then I would uninstall the agent , reinstall and try the default policy. ---
**Author:** ![nomoneynoproblems](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nomoneynoproblems/32/44524_2.png) [@nomoneynoproblems](https://discuss.elastic.co/u/nomoneynoproblems)\ **Post date:** [January 5, 2021, 1:07am UTC](https://discuss.elastic.co/t/agents-are-running-properly-but-no-data-in-data-stream/260111/10 "2021-01-05T01:07:18Z")
I made sure filebeat was gone, remove the elastic agent, reinstalled the elastic agent, rebooted, and still no data, no errors either: ![image](https://us1.discourse-cdn.com/elastic/original/3X/7/d/7d5d1c6eed81974e1974cd99a6a603bb8d3b0158.png) ![image](https://us1.discourse-cdn.com/elastic/original/3X/6/5/6564004a190a4fbe1b82ff9ba7c101b8057f2bdb.png) ---
**Author:** ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)\ **Post date:** [January 5, 2021, 1:16am UTC](https://discuss.elastic.co/t/agents-are-running-properly-but-no-data-in-data-stream/260111/11 "2021-01-05T01:16:45Z")
It would be better if you could paste in that service status instead of a screen shot... I can not see the whole message. (BTW in general screen shots of text / logs / status are discouraged as they can not be searched etc by others looking for the same errors / questions and therefore are less useful never mind that we can not see the entire text) I am going to install and run on an Ubuntu server and see what I get. ... seems odd that there are 2 in filebeats and metricbeat but I can not see the rest of the status messages. Is the Elasticsearch Cluster is it self managed or a hosted cluster? Can you curl the elasticsearch host from that ubuntu host? Have you looked at the actual agent logs? ---
**Author:** ![nomoneynoproblems](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nomoneynoproblems/32/44524_2.png) [@nomoneynoproblems](https://discuss.elastic.co/u/nomoneynoproblems)\ **Post date:** [January 5, 2021, 1:23am UTC](https://discuss.elastic.co/t/agents-are-running-properly-but-no-data-in-data-stream/260111/12 "2021-01-05T01:23:56Z")
Hi, Thanks. I should have pasted the code you're right. Unfortunately I deleted the hosted ElasticSearch deployment and then made a new one so I can't grab any new logs. Good news, I connected the test Rails Prod server to the new deployment and it's working. Something was up with the other deployment it seems. I'm using [Elastic.co](http://Elastic.co) hosting by the way. Thank you. ---
**Author:** ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)\ **Post date:** [January 5, 2021, 1:36am UTC](https://discuss.elastic.co/t/agents-are-running-properly-but-no-data-in-data-stream/260111/13 "2021-01-05T01:36:22Z")
Awesome thanks for letting me know... and thanks for using the [Elastic.co](http://Elastic.co) hosted solution. I am sorry you had challenges setting it up. I am going to test anyway... see if I run into anything. ---
**Author:** ![rsaeks](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rsaeks/32/5068_2.png) [@rsaeks](https://discuss.elastic.co/u/rsaeks)\ **Post date:** [January 14, 2021, 3:53pm UTC](https://discuss.elastic.co/t/agents-are-running-properly-but-no-data-in-data-stream/260111/14 "2021-01-14T15:53:33Z")
Hi all, I'm also working with testing out the fleet component (on a self-hosted 7.10.1 stack) , and have three agents reporting back as being online and zero data streams. I used the setup method present in kibana to download the tar, then run with the generated command to include the enrollment token. I'm not seeing anything that looks to stand out, but on the elasticsearch cluster nodes I do see a message like this: ```auto [o.e.h.AbstractHttpServerTransport] [es2] caught exception while handling client http traffic, closing connection Netty4HttpChannel{localAddress=/192.168.40.206:9200, remoteAddress=/192.168.44.51:56212} Caused by: javax.net.ssl.SSLHandshakeException: Received fatal alert: bad_certificate ``` The remote address is one of my test clients with the fleet agent. I also have some metricbeat data coming in from other hosts where I did need to specify ssl.certificate\_authorities, ssl.certificate and. ssl.key Is the same also needed in the fleet config to trust and use the self-created CA in some way? Thanks! ---
**Author:** ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)\ **Post date:** [January 14, 2021, 8:56pm UTC](https://discuss.elastic.co/t/agents-are-running-properly-but-no-data-in-data-stream/260111/15 "2021-01-14T20:56:02Z")
I think you are going to need to use the `--insecure` setting on the command line see [here](https://www.elastic.co/guide/en/fleet/current/elastic-agent-cmd-options.html#_synopsis) ---
**Author:** ![rsaeks](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rsaeks/32/5068_2.png) [@rsaeks](https://discuss.elastic.co/u/rsaeks)\ **Post date:** [January 20, 2021, 9:32pm UTC](https://discuss.elastic.co/t/agents-are-running-properly-but-no-data-in-data-stream/260111/16 "2021-01-20T21:32:47Z")
Thanks for the suggestion. I looked over my past installs and they all had the --insecure flag configured when using the elastic-agent install option. ---
**Author:** ![Stefan\_Coetzer](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stefan_coetzer/32/82922_2.png) [@Stefan\_Coetzer](https://discuss.elastic.co/u/Stefan_Coetzer)\ **Post date:** [January 26, 2021, 1:30pm UTC](https://discuss.elastic.co/t/agents-are-running-properly-but-no-data-in-data-stream/260111/17 "2021-01-26T13:30:48Z")
I'm also experiencing this issue. I created a bunch of policies that are sending data to a namespace (Guessing I create the namespace when defining it on policy creation?) I've assigned policies to users and added custom integrations like Elastic Security and Windows but when I search for data under Data Streams, it's empty, and I can't select any namespaces under the filter dropdown. ---
**Author:** ![Detlef](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/detlef/32/38723_2.png) [@Detlef](https://discuss.elastic.co/u/Detlef)\ **Post date:** [January 26, 2021, 1:35pm UTC](https://discuss.elastic.co/t/agents-are-running-properly-but-no-data-in-data-stream/260111/18 "2021-01-26T13:35:23Z")
Hi All, I have the same problem here. I installed the agent with the following command: **./elastic-agent-7.10.1-linux-x86\_64/elastic-agent install -f --kibana-url=http://dw-vmkibana-00:5601 --enrollment-token=WFJzS0IzY0JzTDc1NndqNk4xaDM6eFpkVno0** **OHlTb0N0T1JBd2Mxd0VuZw== --insecure** I've installed the agent on four different systems. The behavior is always the same. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [February 23, 2021, 3:35pm UTC](https://discuss.elastic.co/t/agents-are-running-properly-but-no-data-in-data-stream/260111/19 "2021-02-23T15:35:44Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.