Deploy elastic-agent with cert?

Elastic Stack Elasticsearch
1

I'm trying to deploy the agent but my kibana instance requires a certificate which won't let me connect to it. Is there a way to give it a certificate or another way around this?

fail to enroll: fail to execute request to Kibana: Post "https://elk.companyname.net:5601/api/ingest_manager/fleet/agents/enroll?": x509: certificate signed by unknown authority
2

Good question for which I don't have the answer. But some random thoughts which popup:

  • Is this on a Linux or Windows system?
  • Is your CA certificate in the certificate store of your os?

Grtz

Willem

3

Hi @elk6 Have a look at [Ingest management] Use insecure elasticsearch output managed in fleet mode for elastic agent and the linked issues. Unfortunately it is currently a common issue users hit in 7.9 (see https://discuss.elastic.co/tag/stack-ingest-management) and we are working on solutions. In the link threads you find potential workarounds.

4

It's linux. I just did -i for insecure connection.

5

Hi ruflin, thanks for the response. Loved your live demo!

I was able to connect with with an insecure connection ( I thought the point of all this was to eliminate all the massive headache of certificates). Now my only problem is that I don't see anything in my dataset, even though my agent is live, shows no errors, and is set to collect system and apache intergrations.

6

Would be great if we would have solve all the certificate issue. We kind of have when you use our Elastic Cloud as there all the certificates are known. If you run it on your own, you will still have to deal with all the certificate stuff.

Can you check the filebeat logs under data on the agent side if you see any errors in there? We don't bubble up these connections in a good way yet :frowning:

7

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.