Hi ma'am
By the way, i am doing all this to run synthetic monitoring. currently it is just stuck in Test result PENDING state, even for google.com
actually we are using ssl certificates.
same certificates i used for elastic and kibana, so ideally it should work for elastic-agent-complete too.
now
sudo docker run -d \
--name elastic-agent \
--env FLEET_ENROLL=1 \
--env FLEET_URL=https://elastic-uat.helo.ai:8220 \
--env FLEET_ENROLLMENT_TOKEN=token \
--cap-add=NET_RAW \
--cap-add=SETUID \
--env FLEET_INSECURE=false \
--env FLEET_CA=/usr/share/elastic-agent/certs/helo.ai.crt \
--env KIBANA_FLEET_HOST=https://kibana-uat.helo.ai:5601 \
--env KIBANA_FLEET_USERNAME=elastic \
--env KIBANA_FLEET_PASSWORD=password \
--env ELASTICSEARCH_HOSTS=https://10.40.13.132:9200 \
--env ELASTICSEARCH_SSL_CERTIFICATE_AUTHORITIES=/usr/share/elastic-agent/certs/ca/helo.ai.bundle.crt \
--env ELASTICSEARCH_USERNAME=elastic \
--env ELASTICSEARCH_PASSWORD=password \
--env ELASTICSEARCH_SSL_VERIFICATION_MODE=certificate \
-v ./helo.ai.crt:/usr/share/elastic-agent/certs/helo.ai.crt \
-v ./helo.ai.key:/usr/share/elastic-agent/certs/helo.ai.key \
-v ./helo.ai.crt:/usr/share/elastic-agent/certs/ca/helo.ai.bundle.crt \
--add-host elastic-uat.helo.ai:10.40.13.133 \
--rm docker.elastic.co/elastic-agent/elastic-agent-complete:8.16.3
I am getting error ->
{"log.level":"error","@timestamp":"2025-02-27T09:42:25.217Z","message":"Failed to connect to backoff(elasticsearch(https://10.40.13.132:9200)): Get \"https://10.40.13.132:9200\": x509: certificate signed by unknown authority","component":{"binary":"metricbeat","dataset":"elastic_agent.metricbeat","id":"system/metrics-default","type":"system/metrics"},"log":{"source":"system/metrics-default"},"log.logger":"publisher_pipeline_output","log.origin":{"file.line":148,"file.name":"pipeline/client_worker.go","function":"github.com/elastic/beats/v7/libbeat/publisher/pipeline.(*netClientWorker).run"},"service.name":"metricbeat","ecs.version":"1.6.0","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2025-02-27T09:42:25.217Z","message":"Attempting to reconnect to backoff(elasticsearch(https://10.40.13.132:9200)) with 5 reconnect attempt(s)","component":{"binary":"metricbeat","dataset":"elastic_agent.metricbeat","id":"system/metrics-default","type":"system/metrics"},"log":{"source":"system/metrics-default"},"service.name":"metricbeat","ecs.version":"1.6.0","log.logger":"publisher_pipeline_output","log.origin":{"file.line":139,"file.name":"pipeline/client_worker.go","function":"github.com/elastic/beats/v7/libbeat/publisher/pipeline.(*netClientWorker).run"},"ecs.version":"1.6.0"}
{"log.level":"error","@timestamp":"2025-02-27T09:42:25.229Z","message":"Error dialing x509: certificate signed by unknown authority","component":{"binary":"metricbeat","dataset":"elastic_agent.metricbeat","id":"system/metrics-default","type":"system/metrics"},"log":{"source":"system/metrics-default"},"log.origin":{"file.line":39,"file.name":"transport/logging.go","function":"github.com/elastic/elastic-agent-libs/transport/httpcommon.(*HTTPTransportSettings).RoundTripper.LoggingDialer.func2"},"server.address":"10.40.13.132:9200","ecs.version":"1.6.0","log.logger":"esclientleg","service.name":"metricbeat","network.transport":"tcp","ecs.version":"1.6.0"}
{"log.level":"error","@timestamp":"2025-02-27T09:42:27.246Z","message":"Failed to connect to backoff(elasticsearch(https://10.40.13.132:9200)): Get \"https://10.40.13.132:9200\": x509: certificate signed by unknown authority","component":{"binary":"filebeat","dataset":"elastic_agent.filebeat","id":"filestream-monitoring","type":"filestream"},"log":{"source":"filestream-monitoring"},"log.logger":"publisher_pipeline_output","log.origin":{"file.line":148,"file.name":"pipeline/client_worker.go","function":"github.com/elastic/beats/v7/libbeat/publisher/pipeline.(*netClientWorker).run"},"service.name":"filebeat","ecs.version":"1.6.0","ecs.version":"1.6.0"}
i tried keeping FLEET_INSECURE=true also. still getting same issue.
Thank you in advance.
