# Elastic Agent 7.9.1 doesn´t send data on Windows **URL:** \ **Category:** Elasticsearch\ **Tags:** elastic-agent\ **Created:** [September 11, 2020, 7:09am UTC](https://discuss.elastic.co/t/elastic-agent-7-9-1-doesn-t-send-data-on-windows/248273 "2020-09-11T07:09:32Z")\ **Posts on this page:** 16\ **Page:** 1
**Author:** ![hofrichterovak](https://avatars.discourse-cdn.com/v4/letter/h/ba9def/32.png) [@hofrichterovak](https://discuss.elastic.co/u/hofrichterovak)\ **Post date:** [September 11, 2020, 7:09am UTC](https://discuss.elastic.co/t/elastic-agent-7-9-1-doesn-t-send-data-on-windows/248273/1 "2020-09-11T07:09:32Z")
Hello, I have problem with Elastic Agent 7.9.1 on Windows. Agent doesn´t generate any data. I don´t see generated dataset on tab Datasets in Kibana. GET metrics-_/\_search; GET logs-_/\_search is without data too. At the beginning I had problem with starting Elastic Agent ([https://github.com/elastic/beats/issues/20404](https://github.com/elastic/beats/issues/20404)). I needed to restart computer to start Elastic Agent service. I started it this way: 1. ./install-service-elastic-agent.ps1 2. I opened app Services, there was newly added 'elastic-agent'. Status of 'elastic-agent' was Stopped. When I started service here manually, it generated error. 3. I restarted computer 4. I opened app Services. Status of 'elastic-agent' was Running 5. I enrolled agent '.\elastic-agent enroll [http://localhost:5601](http://localhost:5601) xxxxxxxxxxxxxxxx --insecure' 6. ./install-service-elastic-agent.ps1 7. I had active agent in Kibana Fleet On Linux agent works. Thank you, Katerina ---
**Author:** ![ruflin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ruflin/32/3116_2.png) [@ruflin](https://discuss.elastic.co/u/ruflin)\ **Post date:** [September 15, 2020, 11:04am UTC](https://discuss.elastic.co/t/elastic-agent-7-9-1-doesn-t-send-data-on-windows/248273/2 "2020-09-15T11:04:30Z")
Could you check the logs in the `./data/` directory to see if it contains any errors? ---
**Author:** ![hofrichterovak](https://avatars.discourse-cdn.com/v4/letter/h/ba9def/32.png) [@hofrichterovak](https://discuss.elastic.co/u/hofrichterovak)\ **Post date:** [September 16, 2020, 10:02am UTC](https://discuss.elastic.co/t/elastic-agent-7-9-1-doesn-t-send-data-on-windows/248273/3 "2020-09-16T10:02:57Z")
Hello, In ./data I see this error: ```auto {"log.level":"info","@timestamp":"2020-09-16T11:01:43.997+0200","log.origin":{"file.name":"log/reporter.go","file.line":40},"message":"2020-09-16T11:01:43+02:00: type: 'STATE': sub_type: 'RUNNING' message: Application: endpoint-security--7.9.1[019dd1bb-921d-4f22-813f-df9803c84529]: State changed to DEGRADED: Missed last check-in","ecs.version":"1.5.0"} {"log.level":"info","@timestamp":"2020-09-16T11:01:52.344+0200","log.origin":{"file.name":"log/reporter.go","file.line":40},"message":"2020-09-16T11:01:52+02:00: type: 'STATE': sub_type: 'RUNNING' message: Application: endpoint-security--7.9.1[019dd1bb-921d-4f22-813f-df9803c84529]: State changed to RUNNING: ","ecs.version":"1.5.0"} {"log.level":"debug","@timestamp":"2020-09-16T11:06:52.721+0200","log.origin":{"file.name":"kibana/client.go","file.line":170},"message":"Request method: POST, path: /api/ingest_manager/fleet/agents/019dd1bb-921d-4f22-813f-df9803c84529/checkin","ecs.version":"1.5.0"} {"log.level":"error","@timestamp":"2020-09-16T11:06:56.727+0200","log.origin":{"file.name":"application/fleet_gateway.go","file.line":176},"message":"Could not communicate with Checking API will retry, error: fail to checkin to fleet: Post \"http://localhost:5601/api/ingest_manager/fleet/agents/019dd1bb-921d-4f22-813f-df9803c84529/checkin?\": dial tcp 127.0.0.1:5601: connectex: No connection could be made because the target machine actively refused it.","ecs.version":"1.5.0"} {"log.level":"debug","@timestamp":"2020-09-16T11:16:13.880+0200","log.origin":{"file.name":"kibana/client.go","file.line":170},"message":"Request method: POST, path: /api/ingest_manager/fleet/agents/019dd1bb-921d-4f22-813f-df9803c84529/checkin","ecs.version":"1.5.0"} {"log.level":"error","@timestamp":"2020-09-16T11:16:17.886+0200","log.origin":{"file.name":"application/fleet_gateway.go","file.line":176},"message":"Could not communicate with Checking API will retry, error: fail to checkin to fleet: Post \"http://localhost:5601/api/ingest_manager/fleet/agents/019dd1bb-921d-4f22-813f-df9803c84529/checkin?\": dial tcp [::1]:5601: connectex: No connection could be made because the target machine actively refused it.","ecs.version":"1.5.0"} {"log.level":"debug","@timestamp":"2020-09-16T11:25:47.176+0200","log.origin":{"file.name":"kibana/client.go","file.line":170},"message":"Request method: POST, path: /api/ingest_manager/fleet/agents/019dd1bb-921d-4f22-813f-df9803c84529/checkin","ecs.version":"1.5.0"} {"log.level":"error","@timestamp":"2020-09-16T11:25:51.179+0200","log.origin":{"file.name":"application/fleet_gateway.go","file.line":176},"message":"Could not communicate with Checking API will retry, error: fail to checkin to fleet: Post \"http://localhost:5601/api/ingest_manager/fleet/agents/019dd1bb-921d-4f22-813f-df9803c84529/checkin?\": dial tcp [::1]:5601: connectex: No connection could be made because the target machine actively refused it.","ecs.version":"1.5.0"} {"log.level":"debug","@timestamp":"2020-09-16T11:33:10.783+0200","log.origin":{"file.name":"kibana/client.go","file.line":170},"message":"Request method: POST, path: /api/ingest_manager/fleet/agents/019dd1bb-921d-4f22-813f-df9803c84529/checkin","ecs.version":"1.5.0"} {"log.level":"error","@timestamp":"2020-09-16T11:33:14.787+0200","log.origin":{"file.name":"application/fleet_gateway.go","file.line":176},"message":"Could not communicate with Checking API will retry, error: fail to checkin to fleet: Post \"http://localhost:5601/api/ingest_manager/fleet/agents/019dd1bb-921d-4f22-813f-df9803c84529/checkin?\": dial tcp 127.0.0.1:5601: connectex: No connection could be made because the target machine actively refused it.","ecs.version":"1.5.0"} {"log.level":"debug","@timestamp":"2020-09-16T11:39:15.091+0200","log.origin":{"file.name":"kibana/client.go","file.line":170},"message":"Request method: POST, path: /api/ingest_manager/fleet/agents/019dd1bb-921d-4f22-813f-df9803c84529/checkin","ecs.version":"1.5.0"} {"log.level":"error","@timestamp":"2020-09-16T11:39:19.095+0200","log.origin":{"file.name":"application/fleet_gateway.go","file.line":176},"message":"Could not communicate with Checking API will retry, error: fail to checkin to fleet: Post \"http://localhost:5601/api/ingest_manager/fleet/agents/019dd1bb-921d-4f22-813f-df9803c84529/checkin?\": dial tcp 127.0.0.1:5601: connectex: No connection could be made because the target machine actively refused it.","ecs.version":"1.5.0"} {"log.level":"info","@timestamp":"2020-09-16T11:42:09.355+0200","log.origin":{"file.name":"log/reporter.go","file.line":40},"message":"2020-09-16T11:42:09+02:00: type: 'STATE': sub_type: 'RUNNING' message: Application: endpoint-security--7.9.1[019dd1bb-921d-4f22-813f-df9803c84529]: State changed to DEGRADED: Missed last check-in","ecs.version":"1.5.0"} {"log.level":"info","@timestamp":"2020-09-16T11:42:15.358+0200","log.origin":{"file.name":"log/reporter.go","file.line":40},"message":"2020-09-16T11:42:15+02:00: type: 'STATE': sub_type: 'RUNNING' message: Application: endpoint-security--7.9.1[019dd1bb-921d-4f22-813f-df9803c84529]: State changed to RUNNING: ","ecs.version":"1.5.0"} {"log.level":"debug","@timestamp":"2020-09-16T11:44:57.708+0200","log.origin":{"file.name":"kibana/client.go","file.line":170},"message":"Request method: POST, path: /api/ingest_manager/fleet/agents/019dd1bb-921d-4f22-813f-df9803c84529/checkin","ecs.version":"1.5.0"} {"log.level":"error","@timestamp":"2020-09-16T11:45:01.712+0200","log.origin":{"file.name":"application/fleet_gateway.go","file.line":176},"message":"Could not communicate with Checking API will retry, error: fail to checkin to fleet: Post \"http://localhost:5601/api/ingest_manager/fleet/agents/019dd1bb-921d-4f22-813f-df9803c84529/checkin?\": dial tcp [::1]:5601: connectex: No connection could be made because the target machine actively refused it.","ecs.version":"1.5.0"} {"log.level":"debug","@timestamp":"2020-09-16T11:52:09.309+0200","log.origin":{"file.name":"kibana/client.go","file.line":170},"message":"Request method: POST, path: /api/ingest_manager/fleet/agents/019dd1bb-921d-4f22-813f-df9803c84529/checkin","ecs.version":"1.5.0"} {"log.level":"error","@timestamp":"2020-09-16T11:52:13.313+0200","log.origin":{"file.name":"application/fleet_gateway.go","file.line":176},"message":"Could not communicate with Checking API will retry, error: fail to checkin to fleet: Post \"http://localhost:5601/api/ingest_manager/fleet/agents/019dd1bb-921d-4f22-813f-df9803c84529/checkin?\": dial tcp [::1]:5601: connectex: No connection could be made because the target machine actively refused it.","ecs.version":"1.5.0"} ``` Thank you, Katerina ---
**Author:** ![ruflin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ruflin/32/3116_2.png) [@ruflin](https://discuss.elastic.co/u/ruflin)\ **Post date:** [September 16, 2020, 12:00pm UTC](https://discuss.elastic.co/t/elastic-agent-7-9-1-doesn-t-send-data-on-windows/248273/4 "2020-09-16T12:00:59Z")
This is strange as the enrollment worked. Any chance you could share what is shown in the Kibana / Elasticsearch logs? I would expect some logs also there on why it is "actively refused". ---
**Author:** ![ruflin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ruflin/32/3116_2.png) [@ruflin](https://discuss.elastic.co/u/ruflin)\ **Post date:** [September 16, 2020, 2:20pm UTC](https://discuss.elastic.co/t/elastic-agent-7-9-1-doesn-t-send-data-on-windows/248273/5 "2020-09-16T14:20:12Z")
To double check, is your Kibana instance running on localhost:5601? ---
**Author:** ![hofrichterovak](https://avatars.discourse-cdn.com/v4/letter/h/ba9def/32.png) [@hofrichterovak](https://discuss.elastic.co/u/hofrichterovak)\ **Post date:** [September 17, 2020, 8:14am UTC](https://discuss.elastic.co/t/elastic-agent-7-9-1-doesn-t-send-data-on-windows/248273/6 "2020-09-17T08:14:33Z")
Hello, yes, Kibana is running on localhost:5601. Elasticsearch, Kibana´s logs look fine. I don´t see there errors. K. ---
**Author:** ![ruflin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ruflin/32/3116_2.png) [@ruflin](https://discuss.elastic.co/u/ruflin)\ **Post date:** [September 18, 2020, 6:40am UTC](https://discuss.elastic.co/t/elastic-agent-7-9-1-doesn-t-send-data-on-windows/248273/7 "2020-09-18T06:40:06Z")
@Michal_Pristas Could you chime in here? I wonder in which case KB returns the error above? Permissions? ---
**Author:** ![Michal\_Pristas](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/michal_pristas/32/46639_2.png) [@Michal\_Pristas](https://discuss.elastic.co/u/Michal_Pristas)\ **Post date:** [September 18, 2020, 7:17am UTC](https://discuss.elastic.co/t/elastic-agent-7-9-1-doesn-t-send-data-on-windows/248273/8 "2020-09-18T07:17:38Z")
this is a network exception happening when agent tries to connect to a machine where nothing is listening on the port. maybe kibana was not initialized just yet? just guessing. for me it looks like this. is there some kind of firewall this might be also the case ---
**Author:** ![windkill](https://avatars.discourse-cdn.com/v4/letter/w/d6d6ee/32.png) [@windkill](https://discuss.elastic.co/u/windkill)\ **Post date:** [September 21, 2020, 9:43am UTC](https://discuss.elastic.co/t/elastic-agent-7-9-1-doesn-t-send-data-on-windows/248273/9 "2020-09-21T09:43:02Z")
Same problem, U resovled it? ---
**Author:** ![windkill](https://avatars.discourse-cdn.com/v4/letter/w/d6d6ee/32.png) [@windkill](https://discuss.elastic.co/u/windkill)\ **Post date:** [September 21, 2020, 9:59am UTC](https://discuss.elastic.co/t/elastic-agent-7-9-1-doesn-t-send-data-on-windows/248273/10 "2020-09-21T09:59:45Z")
@ruflin @Michal_Pristas Maybe Same problem. I check network connect，it looks fine. ![image](https://us1.discourse-cdn.com/elastic/original/3X/8/e/8e8c6448121abfdea78fa663461a14a4b2134285.png) ![image](https://us1.discourse-cdn.com/elastic/original/3X/5/5/556b2b5dd96cc3cb85531052d2bbdffd4376a77f.png) My windows agent log ![image](https://us1.discourse-cdn.com/elastic/original/3X/2/c/2cc9105c4d54728ad4bf5face00935f40521fc83.png) ![image](https://us1.discourse-cdn.com/elastic/original/3X/8/2/82e7d38c9ec109b5f108425194b0cee9d50c8d26.png) I also see logs in Elastic-Agent\data\logs\default ![image](https://us1.discourse-cdn.com/elastic/original/3X/f/1/f165ce75d67a8568f9adfce794634ec08b9e87c4.png) ---
**Author:** ![Michal\_Pristas](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/michal_pristas/32/46639_2.png) [@Michal\_Pristas](https://discuss.elastic.co/u/Michal_Pristas)\ **Post date:** [September 21, 2020, 11:16am UTC](https://discuss.elastic.co/t/elastic-agent-7-9-1-doesn-t-send-data-on-windows/248273/11 "2020-09-21T11:16:40Z")
it looks like agent is ok connecting to fleet (kibana) (which was not possible with the original post) but beats has some issues with ES connection. i will try to setup win machine with this stack to play with it a bit ---
**Author:** ![hofrichterovak](https://avatars.discourse-cdn.com/v4/letter/h/ba9def/32.png) [@hofrichterovak](https://discuss.elastic.co/u/hofrichterovak)\ **Post date:** [September 21, 2020, 4:45pm UTC](https://discuss.elastic.co/t/elastic-agent-7-9-1-doesn-t-send-data-on-windows/248273/12 "2020-09-21T16:45:56Z")
Hello, Problems still persist. Kibana is started and the firewall is completely turned off. ---
**Author:** ![windkill](https://avatars.discourse-cdn.com/v4/letter/w/d6d6ee/32.png) [@windkill](https://discuss.elastic.co/u/windkill)\ **Post date:** [September 22, 2020, 1:49am UTC](https://discuss.elastic.co/t/elastic-agent-7-9-1-doesn-t-send-data-on-windows/248273/13 "2020-09-22T01:49:38Z")
Thanks for your help. En... I just made a mistake, I used wrong elasticsearch.yml which is backup-older, and "# network.host: 0.0.0.0" is inside..... After I reconfigure elasticsearch.yml, Ingest Manager works fine. ![image](https://us1.discourse-cdn.com/elastic/original/3X/c/5/c5621dd7ddc9f9d3c027a38ac5fba13170cf4db5.png) @hofrichterovak I think we have different problems, but my mistake maybe it will help you。 I suggest you check your configuration file again. ---
**Author:** ![Michal\_Pristas](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/michal_pristas/32/46639_2.png) [@Michal\_Pristas](https://discuss.elastic.co/u/Michal_Pristas)\ **Post date:** [September 22, 2020, 10:32am UTC](https://discuss.elastic.co/t/elastic-agent-7-9-1-doesn-t-send-data-on-windows/248273/14 "2020-09-22T10:32:31Z")
also we;ve seen some issues if metricbeat/filebeat was present before. was this fresh install @hofrichterovak ---
**Author:** ![hofrichterovak](https://avatars.discourse-cdn.com/v4/letter/h/ba9def/32.png) [@hofrichterovak](https://discuss.elastic.co/u/hofrichterovak)\ **Post date:** [September 22, 2020, 11:32am UTC](https://discuss.elastic.co/t/elastic-agent-7-9-1-doesn-t-send-data-on-windows/248273/15 "2020-09-22T11:32:03Z")
Hello, yes. First I had installed elasticsearch, filebeat, and then I finally added the Elastic Agent ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [October 20, 2020, 11:32am UTC](https://discuss.elastic.co/t/elastic-agent-7-9-1-doesn-t-send-data-on-windows/248273/16 "2020-10-20T11:32:10Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.