Data from server is not flowing from elastic agent to elastic

Elastic Stack Elastic Agent
1

I have installed fleet server in one machine and server agent to collect logs and metrics in one web server. for the both the agents I have created respective default policies and integration. For web server, I have provided system, windows, and custom logs(deprecated). I could see the agent is found from fleet they both are connected and agents are running perfectly fine. However, I do not see the data in the elastic which is coming from agent

2

Hello @sathish12

The elastic-agent logs will help to understand on the webserver as to why the data is not sent to Elastic. Also can check the output settings on the Fleet to see if it is configured correctly but the logs is the place we should check first if the elastic-agent is up.

Thanks!!

3

I see the below error in the elastic-agent logs:

`

> {"log.level":"error","@timestamp":"2026-03-10T04:34:18.153Z","message":"failed to publish events: 500 Internal Server Error: {\"error\":{\"root_cause\":[{\"type\":\"illegal_state_exception\",\"reason\":\"There are no ingest nodes in this cluster, unable to forward request to an ingest node.\"}],\"type\":\"illegal_state_exception\",\"reason\":\"There are no ingest nodes in this cluster, unable to forward request to an ingest node.\"},\"status\":500}","component":{"binary":"filebeat","dataset":"elastic_agent.filebeat","id":"winlog-default","type":"winlog"},"log":{"source":"winlog-default"},"log.logger":"publisher_pipeline_output","log.origin":{"file.line":174,"file.name":"pipeline/client_worker.go","function":"github.com/elastic/beats/v7/libbeat/publisher/pipeline.(*netClientWorker).publishBatch"},"service.name":"filebeat","ecs.version":"1.6.0","ecs.version":"1.6.0"}

`

4

How have you configured your cluster?

Do you not have any nodes able to work as ingest nodes in it?

5

Run this command in Kibana Dev Tools and share the result.

GET _cat/nodes?v&h=name,version,role&s=role

As Christian asked, share how you configured your cluster as well.

From your error log your cluster is missing ingest nodes, this is a requirement to use Elastic Agent.