Elastic-agent 8.17.7: logs are not being harvested from .log files on Windows host

[stephenb (Stephen Brown)]

@kiedis

However, my Elastic Agent should send data to the Remote Elasticsearch output (Elastic Agent is running on Windows host and Elasticsearch on Linux host).

OK So I know this sounds confusing.... but it is NOT a Remote Elastic Search Cluster... that is for something different .... so that is not the right path.

Just go into the Default Output and Edit it and try putting in the correct URL to the elasticsearch host... you should not need to generate a new token etc...

Try putting in
https://192.168.1.113:9200

I also notice that is say http not https

Then try to redeploy the Agent.... if you are using self signed certs you will still need to use --insecure

@kiedis

• Elasticsearch and Kibana are running on Linux host 192.168.1.113
• Elastic Agent is running on Windows host 192.168.1.111

So when you first installed fleet most likely in the install command you used localhost for the Elasticsearch endpoint ... that is where it got it from...

Instead you should have use the actual hostname / or IP.