# cURL does not download the Elastic Agent, only on one of our sites in Amsterdam (otherwise cURL works fine) **URL:** \ **Category:** Elastic Agent\ **Created:** [June 25, 2023, 1:03pm UTC](https://discuss.elastic.co/t/curl-does-not-download-the-elastic-agent-only-on-one-of-our-sites-in-amsterdam-otherwise-curl-works-fine/336837 "2023-06-25T13:03:48Z")\ **Posts on this page:** 11\ **Page:** 1
**Author:** ![SedonD](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/sedond/32/122686_2.png) [@SedonD](https://discuss.elastic.co/u/SedonD)\ **Post date:** [June 25, 2023, 1:03pm UTC](https://discuss.elastic.co/t/curl-does-not-download-the-elastic-agent-only-on-one-of-our-sites-in-amsterdam-otherwise-curl-works-fine/336837/1 "2023-06-25T13:03:48Z")
Hi there, Has anyone ever encountered this issue, if so we would appreciate some guidance? ![2023-06-25_14h03_14](https://us1.discourse-cdn.com/elastic/original/3X/b/6/b60f98790983696d4e5cc2ebcec2622733e75568.png) Thanks in advance, Br, SedonD ++++edit: What I have seen so far....(**something like this)** > and/or > [@Not able to download track](https://discuss.elastic.co/t/not-able-to-download-track/305712/5): > > Hi Amit, you're welcome! ---
**Author:** ![SedonD](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/sedond/32/122686_2.png) [@SedonD](https://discuss.elastic.co/u/SedonD)\ **Post date:** [June 25, 2023, 4:54pm UTC](https://discuss.elastic.co/t/curl-does-not-download-the-elastic-agent-only-on-one-of-our-sites-in-amsterdam-otherwise-curl-works-fine/336837/2 "2023-06-25T16:54:19Z")
Sorry, I read it here so here it is in text: > [@Connectivity issues to Elasticsearch via tcp\\9200](https://discuss.elastic.co/t/connectivity-issues-to-elasticsearch-via-tcp-9200/191900/11): > > Ok Add again the line that I told before (discovery.seed\_hosts: ["x.x.x.x"]) dont forget the "" and restart the elasticsearch service. Then check the logs again. ```auto type or paste code here root@eu2:~# curl -O https://artifacts.elastic.co/downloads/beats/elastic-agent/elastic-agent-8.8.1-linux-x86_64.tar.gz % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 100 364 100 364 0 0 1612 0 --:--:-- --:--:-- --:--:-- 1617 root@eu2:~# curl -I http://benchmarks.elasticsearch.org.s3.amazonaws.com/corpora/geopoint/documents.json.bz2 HTTP/1.1 200 OK x-amz-id-2: +9Z3gSfuGsO3x7UiZkZN0No4NoJRVdCwWoka2TNms7ji9b1nMA35WxyvQ7KXeSvrK336iHFoUSloqd1olyMkdfo3lDKhXN4wHNBmOKlgzCU= x-amz-request-id: P1EX75CVFG42NAJ8 Date: Sun, 25 Jun 2023 12:36:02 GMT Last-Modified: Mon, 06 Apr 2020 12:45:46 GMT ETag: "89af2e68151caf319ae4e1b3e821bcdc-61" x-amz-server-side-encryption: AES256 x-amz-version-id: Naom.wGhv.aOMQcQ.V6N9P7rvzxKuq40 Accept-Ranges: bytes Content-Type: application/json Server: AmazonS3 Content-Length: 505542241 root@eu2:~# curl -I https://artifacts.elastic.co/downloads/beats/elastic-agent/elastic-agent-8.8.1-linux-x86_64.tar.gz HTTP/2 403 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 root@eu2:~# curl -L -O -I https://artifacts.elastic.co/downloads/beats/elastic-agent/elastic-agent-8.8.1-linux-x86_64.tar.gz % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0 root@eu2:~# curl -L -O https://dev.mysql.com/get/Downloads/MySQL-5.7/mysql-5.7.16-osx10.11-x86_64.dmg % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0 100 339M 100 339M 0 0 27.6M 0 0:00:12 0:00:12 --:--:-- 27.0M root@eu2:~# curl -L -O -I https://artifacts.elastic.co/downloads/beats/elastic-agent/elastic-agent-8.8.1-linux-x86_64.tar.gz % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0 root@eu2:~# curl -L -O https://artifacts.elastic.co/downloads/beats/elastic-agent/elastic-agent-8.8.1-linux-x86_64.tar.gz % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 100 364 100 364 0 0 1552 0 --:--:-- --:--:-- --:--:-- 1548 ``` ---
**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Post date:** [June 25, 2023, 10:59pm UTC](https://discuss.elastic.co/t/curl-does-not-download-the-elastic-agent-only-on-one-of-our-sites-in-amsterdam-otherwise-curl-works-fine/336837/3 "2023-06-25T22:59:15Z")
Welcome to our community! 😃 You are likely running into [Are you getting 403's when downloading? Please read here first](https://discuss.elastic.co/t/are-you-getting-403s-when-downloading-please-read-here-first/307340), so please add a post there. ---
**Author:** ![SedonD](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/sedond/32/122686_2.png) [@SedonD](https://discuss.elastic.co/u/SedonD)\ **Post date:** [June 26, 2023, 9:33am UTC](https://discuss.elastic.co/t/curl-does-not-download-the-elastic-agent-only-on-one-of-our-sites-in-amsterdam-otherwise-curl-works-fine/336837/4 "2023-06-26T09:33:04Z")
> [@warkolm](#): > > Are you **getting 403**'s when downloading? @warkolm Hi there, I don't get 403 😀, that would be easy, because I would know what's behind it... As you can see on the attachment image and in text section, download size is **364KiB** and as if everything is fine, it exits the cURL from the process.... ergo it says that the content is downloaded At first I didn't even notice what was happening, because it's a 10gig connected server and all downloads are fast and there is no substantial difference between 300-400KiB and 500MiB, when the unpack (tar xzvf) ran with an error and stopped I noticed the fact that I don't have the full - elastic-agent-8.8.1-linux-x86\_64.tar.gz file BTW: As you can see I tested the server and the cURL with an old MySQL 5.7 download, which was 339M and ran without problems, but otherwise I can download everything else with wget and/or cURL, except the Elastic files So the only way I could solve the agent installation was to SCP upload the installer file and run it, because I can't download Elstic stuff from this Amsterdam DC location I don't have this problem in Zurich and Frankfurt on our similar clusters... +++edit: Pls. look what I just did now (Logstash / Kibana): ```auto root@eu2:~# curl -L -O https://artifacts.elastic.co/downloads/logstash/logstash-8.8.1-linux-x86_64.tar.gz % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 100 348 100 348 0 0 726 0 --:--:-- --:--:-- --:--:-- 728 root@eu2:~# curl -L -O https://artifacts.elastic.co/downloads/kibana/kibana-8.8.1-linux-x86_64.tar.gz % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 100 344 100 344 0 0 1168 0 --:--:-- --:--:-- --:--:-- 1166 root@eu2:~# ``` ```auto These are not normal sizes: 348 & 344 ..... always downloads these few hundred kilobytes and exits without an error message (says it is 100% downloaded) ``` ---
**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Post date:** [June 26, 2023, 9:49am UTC](https://discuss.elastic.co/t/curl-does-not-download-the-elastic-agent-only-on-one-of-our-sites-in-amsterdam-otherwise-curl-works-fine/336837/5 "2023-06-26T09:49:19Z")
> [@SedonD](#): > > ```auto > HTTP/2 403 > > ``` That looks like a 403 hence why I mentioned it. Your post and output was a little confusing to be honest as you didn't explain what you were doing and it had references to mysql and another topic on Elasticsearch discovery. Can you run this with a `curl -v -O` and post the output please? ---
**Author:** ![SedonD](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/sedond/32/122686_2.png) [@SedonD](https://discuss.elastic.co/u/SedonD)\ **Post date:** [June 26, 2023, 9:59am UTC](https://discuss.elastic.co/t/curl-does-not-download-the-elastic-agent-only-on-one-of-our-sites-in-amsterdam-otherwise-curl-works-fine/336837/6 "2023-06-26T09:59:30Z")
> [@warkolm](#): > > **another topic on Elasticsearch discovery.** Sorry I sometimes phrase things a bit confusingly...... on this topic users are asked to insert text instead of pictures, and I noticed this too late, so I apologized again I didn't mean to imply anything else by this linked thread, and indeed it is not closely related to the current cURL topic 🙂 Okhay cURL, here is the output: ```auto root@eu2:~# curl -v -O https://artifacts.elastic.co/downloads/beats/elastic-agent/elastic-agent-8.8.1-linux-x86_64.tar.gz % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0* Trying 2600:1901:0:1d7:::443... * Connected to artifacts.elastic.co (2600:1901:0:1d7::) port 443 (#0) * ALPN, offering h2 * ALPN, offering http/1.1 * CAfile: /etc/ssl/certs/ca-certificates.crt * CApath: /etc/ssl/certs * TLSv1.0 (OUT), TLS header, Certificate Status (22): } [5 bytes data] * TLSv1.3 (OUT), TLS handshake, Client hello (1): } [512 bytes data] 0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0* TLSv1.2 (IN), TLS header, Certificate Status (22): { [5 bytes data] * TLSv1.3 (IN), TLS handshake, Server hello (2): { [122 bytes data] * TLSv1.2 (IN), TLS header, Finished (20): { [5 bytes data] * TLSv1.2 (IN), TLS header, Supplemental data (23): { [5 bytes data] * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): { [15 bytes data] * TLSv1.3 (IN), TLS handshake, Certificate (11): { [4658 bytes data] * TLSv1.3 (IN), TLS handshake, CERT verify (15): { [264 bytes data] * TLSv1.3 (IN), TLS handshake, Finished (20): { [52 bytes data] * TLSv1.2 (OUT), TLS header, Finished (20): } [5 bytes data] * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): } [1 bytes data] * TLSv1.2 (OUT), TLS header, Supplemental data (23): } [5 bytes data] * TLSv1.3 (OUT), TLS handshake, Finished (20): } [52 bytes data] * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 * ALPN, server accepted to use h2 * Server certificate: * subject: CN=appsearch.elastic.co * start date: May 8 03:19:58 2023 GMT * expire date: Aug 6 04:13:30 2023 GMT * subjectAltName: host "artifacts.elastic.co" matched cert's "artifacts.elastic.co" * issuer: C=US; O=Google Trust Services LLC; CN=GTS CA 1D4 * SSL certificate verify ok. * Using HTTP2, server supports multiplexing * Connection state changed (HTTP/2 confirmed) * Copying HTTP/2 data in stream buffer to connection buffer after upgrade: len=0 * TLSv1.2 (OUT), TLS header, Supplemental data (23): } [5 bytes data] * TLSv1.2 (OUT), TLS header, Supplemental data (23): } [5 bytes data] * TLSv1.2 (OUT), TLS header, Supplemental data (23): } [5 bytes data] * Using Stream ID: 1 (easy handle 0x55bdd0286560) * TLSv1.2 (OUT), TLS header, Supplemental data (23): } [5 bytes data] > GET /downloads/beats/elastic-agent/elastic-agent-8.8.1-linux-x86_64.tar.gz HTTP/2 > Host: artifacts.elastic.co > user-agent: curl/7.81.0 > accept: */* > * TLSv1.2 (IN), TLS header, Supplemental data (23): { [5 bytes data] * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4): { [267 bytes data] * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4): { [267 bytes data] * old SSL session ID is stale, removing * TLSv1.2 (IN), TLS header, Supplemental data (23): { [5 bytes data] * TLSv1.2 (OUT), TLS header, Supplemental data (23): } [5 bytes data] * TLSv1.2 (IN), TLS header, Supplemental data (23): { [5 bytes data] * TLSv1.2 (IN), TLS header, Supplemental data (23): { [5 bytes data] < HTTP/2 403 < content-type: text/html; charset=UTF-8 < referrer-policy: no-referrer < content-length: 364 < alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 < * TLSv1.2 (IN), TLS header, Supplemental data (23): { [5 bytes data] * TLSv1.2 (IN), TLS header, Supplemental data (23): { [5 bytes data] * TLSv1.2 (OUT), TLS header, Supplemental data (23): } [5 bytes data] 100 364 100 364 0 0 1324 0 --:--:-- --:--:-- --:--:-- 1323 * Connection #0 to host artifacts.elastic.co left intact ``` ---
**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Post date:** [June 26, 2023, 10:11am UTC](https://discuss.elastic.co/t/curl-does-not-download-the-elastic-agent-only-on-one-of-our-sites-in-amsterdam-otherwise-curl-works-fine/336837/7 "2023-06-26T10:11:23Z")
What version of curl are you using, and what OS? ---
**Author:** ![SedonD](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/sedond/32/122686_2.png) [@SedonD](https://discuss.elastic.co/u/SedonD)\ **Post date:** [June 26, 2023, 10:14am UTC](https://discuss.elastic.co/t/curl-does-not-download-the-elastic-agent-only-on-one-of-our-sites-in-amsterdam-otherwise-curl-works-fine/336837/8 "2023-06-26T10:14:09Z")
```auto root@eu2:~# lsb_release -a No LSB modules are available. Distributor ID: Ubuntu Description: Ubuntu 22.04.2 LTS Release: 22.04 Codename: jammy root@eu2:~# curl -V curl 7.81.0 (x86_64-pc-linux-gnu) libcurl/7.81.0 OpenSSL/3.0.2 zlib/1.2.11 brotli/1.0.9 zstd/1.4.8 libidn2/2.3.2 libpsl/0.21.0 (+libidn2/2.3.2) libssh/0.9.6/openssl/zlib nghttp2/1.43.0 librtmp/2.3 OpenLDAP/2.5.14 Release-Date: 2022-01-05 Protocols: dict file ftp ftps gopher gophers http https imap imaps ldap ldaps mqtt pop3 pop3s rtmp rtsp scp sftp smb smbs smtp smtps telnet tftp Features: alt-svc AsynchDNS brotli GSS-API HSTS HTTP2 HTTPS-proxy IDN IPv6 Kerberos Largefile libz NTLM NTLM_WB PSL SPNEGO SSL TLS-SRP UnixSockets zstd ``` ---
**Author:** ![leandrojmp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/32/107231_2.png) [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\ **Post date:** [June 26, 2023, 11:46am UTC](https://discuss.elastic.co/t/curl-does-not-download-the-elastic-agent-only-on-one-of-our-sites-in-amsterdam-otherwise-curl-works-fine/336837/9 "2023-06-26T11:46:35Z")
> [@SedonD](#): > > ```auto > root@eu2:~# curl -I https://artifacts.elastic.co/downloads/beats/elastic-agent/elastic-agent-8.8.1-linux-x86_64.tar.gz > HTTP/2 403 > > ``` And > [@SedonD](#): > > ```auto > < HTTP/2 403 > < content-type: text/html; charset=UTF-8 > > ``` Your curl outputs clearly says that you are getting a `403` error as @warkolm mentioned earlier. The fact that you can download other things doesn't matter, Elastic is blocking some IP Addresses ranges as mentioned and [this post](https://discuss.elastic.co/t/are-you-getting-403s-when-downloading-please-read-here-first/307340). You need to comment on that post and add the IP address your server is using to download. ---
**Author:** ![SedonD](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/sedond/32/122686_2.png) [@SedonD](https://discuss.elastic.co/u/SedonD)\ **Post date:** [June 26, 2023, 12:37pm UTC](https://discuss.elastic.co/t/curl-does-not-download-the-elastic-agent-only-on-one-of-our-sites-in-amsterdam-otherwise-curl-works-fine/336837/10 "2023-06-26T12:37:39Z")
> [@leandrojmp](#): > > clearly says that you are getting a `403` error as @warkolm mentioned earlier. Yuppp, - and thanks @leandrojmp , I've sent to @warkolm our IP address and AS info, - 1 hour before this.... (in PM)) +++edit: @leandrojmp "You need to comment on that post and add the IP address your server is using to download." sorry, but I would not make public our server IPs 😉 ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [July 24, 2023, 12:38pm UTC](https://discuss.elastic.co/t/curl-does-not-download-the-elastic-agent-only-on-one-of-our-sites-in-amsterdam-otherwise-curl-works-fine/336837/11 "2023-07-24T12:38:19Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.