# Elastic Agent outputs to localhost?

**URL:** <https://discuss.elastic.co/t/elastic-agent-outputs-to-localhost/314341>\
**Category:** Elastic Agent\
**Created:** [September 13, 2022, 10:00pm UTC](https://discuss.elastic.co/t/elastic-agent-outputs-to-localhost/314341 "2022-09-13T22:00:04Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![simpleman](https://avatars.discourse-cdn.com/v4/letter/s/ee7513/32.png) [@simpleman](https://discuss.elastic.co/u/simpleman)\
**Post date:** [September 13, 2022, 10:00pm UTC](https://discuss.elastic.co/t/elastic-agent-outputs-to-localhost/314341/1 "2022-09-13T22:00:05Z")

</div>

I have gone the path of install Fleet Server and Agents in my lab server. My setup is:

1. Windows Server 2016 with Symantec Endpoint Protection installed
2. A Linux VM at 192.168.1.10 running ELK stack properly
3. A Linux VM at 192.168.1.12 as a Fleet server running properly.

I want to capture the Symantec logs. I have installed Elastic Agent on my Windows Server machine with the -f and --insecure flags. My agent appears just fine in my ELK but no log files reach my Elasticsearch. Inspecting my Agent with `elastic-agent inspect` I get:

```auto
outputs:
  default:
    api_key: o6vROIMBjmPULt7K0k96:LMrf5Y7LQ8S05pTb5GG1aw
    hosts:
    - http://localhost:9200
    type: elasticsearch
revision: 8

```

I suspect that the agent is trying to push logs to localhost and not to 192.168.1.10 as it should be.  
Any help?

---

<div class="post-metadata">

**Author:** ![simpleman](https://avatars.discourse-cdn.com/v4/letter/s/ee7513/32.png) [@simpleman](https://discuss.elastic.co/u/simpleman)\
**Post date:** [September 14, 2022, 7:59pm UTC](https://discuss.elastic.co/t/elastic-agent-outputs-to-localhost/314341/2 "2022-09-14T19:59:51Z")

</div>

My bad. I didn't see I could set the output host from inside Kibana.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [October 12, 2022, 8:00pm UTC](https://discuss.elastic.co/t/elastic-agent-outputs-to-localhost/314341/3 "2022-10-12T20:00:40Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.