I have recently started to work ELK and my mission is to mainly deploy the stack and use it as a SIEM.
I am using agents for data collection instead of Beats. I have enrolled one agent on a remote machine to send data. I can see the agent is very well enrolled in fleet and its status looks healthy but I am not getting any data.
Anyone knows how to solve this? Thanks
(I have been stuck at this point for one week)
my ELK version is 8.0.1