# Elastic-agent 8.17.7: logs are not being harvested from .log files on Windows host

**URL:** <https://discuss.elastic.co/t/elastic-agent-8-17-7-logs-are-not-being-harvested-from-log-files-on-windows-host/379447>\
**Category:** Elastic Observability\
**Created:** [June 24, 2025, 6:18pm UTC](https://discuss.elastic.co/t/elastic-agent-8-17-7-logs-are-not-being-harvested-from-log-files-on-windows-host/379447 "2025-06-24T18:18:34Z")\
**Posts on this page:** 1\
**Showing post:** 8

<div class="post-metadata">

**Author:** ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)\
**Post date:** [June 30, 2025, 4:59pm UTC](https://discuss.elastic.co/t/elastic-agent-8-17-7-logs-are-not-being-harvested-from-log-files-on-windows-host/379447/8 "2025-06-30T16:59:21Z")

</div>

> [@kiedis](#):
>
> However, my Elastic Agent should send data to the `Remote Elasticsearch` output (Elastic Agent is running on Windows host and Elasticsearch on Linux host).

OK So I know this sounds confusing.... but it is NOT a Remote Elastic Search Cluster... that is for something different .... so that is not the right path.

Just go into the Default Output and Edit it and try putting in the correct URL to the elasticsearch host... you should not need to generate a new token etc...

 ![Screenshot 2025-06-30 at 9.54.22 AM](https://us1.discourse-cdn.com/elastic/original/3X/9/3/9383fba1fd8b09386dc957a17fd68744f81fd0b8.png)

Try putting in  
`https://192.168.1.113:9200`

I also notice that is say `http` not `https`

Then try to redeploy the Agent.... if you are using self signed certs you will still need to use `--insecure`

> [@kiedis](#):
>
> - Elasticsearch and Kibana are running on Linux host 192.168.1.113
> - Elastic Agent is running on Windows host 192.168.1.111

So when you first installed fleet most likely in the install command you used `localhost` for the Elasticsearch endpoint ... that is where it got it from...

Instead you should have use the actual hostname / or IP.

---

_[View the full topic](https://discuss.elastic.co/t/elastic-agent-8-17-7-logs-are-not-being-harvested-from-log-files-on-windows-host/379447)._
