# Cannot install osquery-manager

**URL:** <https://discuss.elastic.co/t/cannot-install-osquery-manager/281311>\
**Category:** Beats\
**Tags:** elastic-agent, osquery-manager\
**Created:** [August 13, 2021, 7:52am UTC](https://discuss.elastic.co/t/cannot-install-osquery-manager/281311 "2021-08-13T07:52:12Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![cheapsupps](https://avatars.discourse-cdn.com/v4/letter/c/3bc359/32.png) [@cheapsupps](https://discuss.elastic.co/u/cheapsupps)\
**Post date:** [August 13, 2021, 7:52am UTC](https://discuss.elastic.co/t/cannot-install-osquery-manager/281311/1 "2021-08-13T07:52:12Z")

</div>

Hi,  
I have deployed elasticsearch + kibana + package registry in the air-gap environment. However, I am having problem deploying the osquery-manager to my agent. Below is the error at my agent.

```auto
{"log.level":"info","@timestamp":"2021-08-13T07:51:05.308Z","log.origin":{"file.name":"stateresolver/stateresolver.go","file.line":48},"message":"New State ID is fdS9tdhG","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2021-08-13T07:51:05.308Z","log.origin":{"file.name":"stateresolver/stateresolver.go","file.line":49},"message":"Converging state requires execution of 3 step(s)","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2021-08-13T07:51:05.417Z","log.origin":{"file.name":"operation/operator.go","file.line":259},"message":"operation 'operation-install' skipped for filebeat.7.14.0","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2021-08-13T07:51:05.417Z","log.origin":{"file.name":"operation/operator.go","file.line":259},"message":"operation 'operation-start' skipped for filebeat.7.14.0","ecs.version":"1.6.0"}
{"log.level":"warn","@timestamp":"2021-08-13T07:51:15.294Z","log.logger":"transport","log.origin":{"file.name":"transport/tcp.go","file.line":52},"message":"DNS lookup failure \"artifacts.elastic.co\": lookup artifacts.elastic.co: getaddrinfow: This is usually a temporary error during hostname resolution and means that the local server did not receive a response from an authoritative server.","ecs.version":"1.6.0"}
{"log.level":"error","@timestamp":"2021-08-13T07:51:15.294Z","log.origin":{"file.name":"operation/operation_retryable.go","file.line":85},"message":"operation operation-fetch failed, err: 2 errors occurred:\n\t* package 'C:\\Program Files\\Elastic\\Agent\\data\\elastic-agent-e127fc\\downloads\\osquerybeat-7.14.0-windows-x86_64.zip' not found: open C:\\Program Files\\Elastic\\Agent\\data\\elastic-agent-e127fc\\downloads\\osquerybeat-7.14.0-windows-x86_64.zip: The system cannot find the file specified.\n\t* fetching package failed: Get \"https://artifacts.elastic.co/downloads/beats/osquerybeat/osquerybeat-7.14.0-windows-x86_64.zip\": lookup artifacts.elastic.co: getaddrinfow: This is usually a temporary error during hostname resolution and means that the local server did not receive a response from an authoritative server.\n\n","ecs.version":"1.6.0"}
{"log.level":"error","@timestamp":"2021-08-13T07:51:15.294Z","log.origin":{"file.name":"log/reporter.go","file.line":36},"message":"2021-08-13T15:51:15+08:00 - message: Application: osquerybeat--7.14.0[ea3f49e6-88ff-40e0-b8a8-f839ab6e11ff]: State changed to FAILED: 2 errors occurred:\n\t* package 'C:\\Program Files\\Elastic\\Agent\\data\\elastic-agent-e127fc\\downloads\\osquerybeat-7.14.0-windows-x86_64.zip' not found: open C:\\Program Files\\Elastic\\Agent\\data\\elastic-agent-e127fc\\downloads\\osquerybeat-7.14.0-windows-x86_64.zip: The system cannot find the file specified.\n\t* fetching package failed: Get \"https://artifacts.elastic.co/downloads/beats/osquerybeat/osquerybeat-7.14.0-windows-x86_64.zip\": lookup artifacts.elastic.co: getaddrinfow: This is usually a temporary error during hostname resolution and means that the local server did not receive a response from an authoritative server.\n\n - type: 'ERROR' - sub_type: 'FAILED'","ecs.version":"1.6.0"}
{"log.level":"error","@timestamp":"2021-08-13T07:51:15.294Z","log.origin":{"file.name":"fleet/fleet_gateway.go","file.line":180},"message":"failed to dispatch actions, error: operator: failed to execute step sc-run, error: 2 errors occurred:\n\t* package 'C:\\Program Files\\Elastic\\Agent\\data\\elastic-agent-e127fc\\downloads\\osquerybeat-7.14.0-windows-x86_64.zip' not found: open C:\\Program Files\\Elastic\\Agent\\data\\elastic-agent-e127fc\\downloads\\osquerybeat-7.14.0-windows-x86_64.zip: The system cannot find the file specified.\n\t* fetching package failed: Get \"https://artifacts.elastic.co/downloads/beats/osquerybeat/osquerybeat-7.14.0-windows-x86_64.zip\": lookup artifacts.elastic.co: getaddrinfow: This is usually a temporary error during hostname resolution and means that the local server did not receive a response from an authoritative server.\n\n: 2 errors occurred:\n\t* package 'C:\\Program Files\\Elastic\\Agent\\data\\elastic-agent-e127fc\\downloads\\osquerybeat-7.14.0-windows-x86_64.zip' not found: open C:\\Program Files\\Elastic\\Agent\\data\\elastic-agent-e127fc\\downloads\\osquerybeat-7.14.0-windows-x86_64.zip: The system cannot find the file specified.\n\t* fetching package failed: Get \"https://artifacts.elastic.co/downloads/beats/osquerybeat/osquerybeat-7.14.0-windows-x86_64.zip\": lookup artifacts.elastic.co: getaddrinfow: This is usually a temporary error during hostname resolution and means that the local server did not receive a response from an authoritative server.\n\n","ecs.version":"1.6.0"}

```

---

<div class="post-metadata">

**Author:** ![aleksmaus](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/aleksmaus/32/56530_2.png) [@aleksmaus](https://discuss.elastic.co/u/aleksmaus)\
**Post date:** [August 13, 2021, 11:35am UTC](https://discuss.elastic.co/t/cannot-install-osquery-manager/281311/2 "2021-08-13T11:35:13Z")

</div>

Looks like the agent failed to download the osquerybeat from our artifactory, could not resolve the artifactory address:

```auto
The system cannot find the file specified.\n\t* fetching package failed: Get \"https://artifacts.elastic.co/downloads/beats/osquerybeat/osquerybeat-7.14.0-windows-x86_64.zip\": lookup artifacts.elastic.co: getaddrinfow: This is usually a temporary error during hostname resolution and means that the local server did not receive a response from an authoritative server

```

Can you reach the url mentioned in that log from the box where the agent is running?

```auto
https://artifacts.elastic.co/downloads/beats/osquerybeat/osquerybeat-7.14.0-windows-x86_64.zip

```

You can try to download these files manually from other box that can reach the artifactory

```auto
https://artifacts.elastic.co/downloads/beats/osquerybeat/osquerybeat-7.14.0-windows-x86_64.zip
https://artifacts.elastic.co/downloads/beats/osquerybeat/osquerybeat-7.14.0-windows-x86_64.zip.sha512
https://artifacts.elastic.co/downloads/beats/osquerybeat/osquerybeat-7.14.0-windows-x86_64.zip.asc

```

and copy them over to the agents downloads directory

```auto
C:\Program Files\Elastic\Agent\data\elastic-agent-e127fc\downloads\

```

---

<div class="post-metadata">

**Author:** ![ruflin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ruflin/32/3116_2.png) [@ruflin](https://discuss.elastic.co/u/ruflin)\
**Post date:** [August 13, 2021, 11:36am UTC](https://discuss.elastic.co/t/cannot-install-osquery-manager/281311/3 "2021-08-13T11:36:39Z")

</div>

@cheapsupps Could you potentially also open a feature request in [GitHub - elastic/beats: Beats - Lightweight shippers for Elasticsearch & Logstash](https://github.com/elastic/beats) for this? I assume you would like to see a "full/complete" download of the Elastic Agent for your use case?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [September 10, 2021, 1:37pm UTC](https://discuss.elastic.co/t/cannot-install-osquery-manager/281311/4 "2021-09-10T13:37:04Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.