# Elastic-Agent not providing data-stream

**URL:** <https://discuss.elastic.co/t/elastic-agent-not-providing-data-stream/259433>\
**Category:** Elastic Security\
**Tags:** docker, elastic-agent\
**Created:** [December 22, 2020, 10:28pm UTC](https://discuss.elastic.co/t/elastic-agent-not-providing-data-stream/259433 "2020-12-22T22:28:22Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![cwobuzz](https://avatars.discourse-cdn.com/v4/letter/c/e0b2c6/32.png) [@cwobuzz](https://discuss.elastic.co/u/cwobuzz)\
**Post date:** [December 22, 2020, 10:28pm UTC](https://discuss.elastic.co/t/elastic-agent-not-providing-data-stream/259433/1 "2020-12-22T22:28:22Z")

</div>

I have a docker with xpac enabled. I documented what I did here:  
[https://github.com/cwobuzz/Setting-up-Docker-Elastic-Kibana-Running-Sysmon-And-Agent/blob/master/.README.md](https://github.com/cwobuzz/Setting-up-Docker-Elastic-Kibana-Running-Sysmon-And-Agent/blob/master/.README.md)

I have agent successfully installed. However it will not send data into my elasticsearch. Fleet shows not data. I cannot find any documents on your site on how to fix this.

My command to install the agent is this

```auto
PS C:\Program Files\Elastic-Agent> .\elastic-agent.exe install -f --kibana-url=https://localhost:5601 --enrollment-token=bHRPdUlIWUJSMzJvZjZwSktjbzQ6QUY0SmpvNFZSY1MxMUZCSk82S3ZRQQ== -a \\wsl$\docker-desktop-data\version-pack-data\community\docker\volumes\es_certs\_data\ca\ca.crt -i

```

It returns successful.

My only clue of what could be happening is this:

```auto
{"log.level":"debug","@timestamp":"2020-12-22T15:18:54.462-0700","log.logger":"esclientleg","log.origin":{"file.name":"eslegclient/connection.go","file.line":290},"message":"ES Ping(url=https://localhost:9200)","ecs.version":"1.6.0"}
{"log.level":"debug","@timestamp":"2020-12-22T15:18:54.476-0700","log.logger":"esclientleg","log.origin":{"file.name":"eslegclient/connection.go","file.line":294},"message":"Ping request failed with: Get \"https://localhost:9200\": x509: certificate signed by unknown authority","ecs.version":"1.6.0"}

```

##Please help 🙂

---

<div class="post-metadata">

**Author:** ![ruflin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ruflin/32/3116_2.png) [@ruflin](https://discuss.elastic.co/u/ruflin)\
**Post date:** [December 23, 2020, 10:30am UTC](https://discuss.elastic.co/t/elastic-agent-not-providing-data-stream/259433/2 "2020-12-23T10:30:51Z")

</div>

My guess you are hitting a certificate issue. Can you check the following posts if they provide you with a workaround? [https://discuss.elastic.co/search?q=authority%20tag%3Aelastic-agent](https://discuss.elastic.co/search?q=authority%20tag%3Aelastic-agent) We are working on improving the situation.

---

<div class="post-metadata">

**Author:** ![The1WhoPrtNocks](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/the1whoprtnocks/32/72685_2.png) [@The1WhoPrtNocks](https://discuss.elastic.co/u/The1WhoPrtNocks)\
**Post date:** [March 11, 2021, 5:34pm UTC](https://discuss.elastic.co/t/elastic-agent-not-providing-data-stream/259433/3 "2021-03-11T17:34:19Z")

</div>

Just for others who stumble across this page, I doubt that the intention is to install the agent on the same instance as Kibana + ES , as shown by the localhost enries in the logs above.

In kibana anywhere under the fleet menu you will have settings in the top right. Make sure you set the Kibana and Elasticsearch URLs appropriatly for your set-up.

---

<div class="post-metadata">

**Author:** ![finbarr996](https://avatars.discourse-cdn.com/v4/letter/f/db5fbb/32.png) [@finbarr996](https://discuss.elastic.co/u/finbarr996)\
**Post date:** [March 15, 2021, 10:33am UTC](https://discuss.elastic.co/t/elastic-agent-not-providing-data-stream/259433/4 "2021-03-15T10:33:25Z")

</div>

Hi, I had the same issue, but not in docker.  
It stems from the fact that the workstation agent (as of 7.11.2) igniores the local trusted root certificate store and wants a hard coded path to the ca certificate.

You can see the solution here: [https://discuss.elastic.co/t/elastic-agent-healthy-but-no-data-streams/265699](https://discuss.elastic.co/t/elastic-agent-healthy-but-no-data-streams/265699)

I'd like to post this as a bug - where should I do that?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 4, 2022, 8:20am UTC](https://discuss.elastic.co/t/elastic-agent-not-providing-data-stream/259433/5 "2022-11-04T08:20:18Z")

</div>