# Elastic Agent preventing standby

**URL:** <https://discuss.elastic.co/t/elastic-agent-preventing-standby/371598>\
**Category:** Elastic Security\
**Created:** [December 6, 2024, 11:31am UTC](https://discuss.elastic.co/t/elastic-agent-preventing-standby/371598 "2024-12-06T11:31:39Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![michael-a](https://avatars.discourse-cdn.com/v4/letter/m/c57346/32.png) [@michael-a](https://discuss.elastic.co/u/michael-a)\
**Post date:** [December 6, 2024, 11:31am UTC](https://discuss.elastic.co/t/elastic-agent-preventing-standby/371598/1 "2024-12-06T11:31:39Z")

</div>

We have an issue with Linux (RHEL) klients that won't go into standby, which seem to have started in 8.12, possibly related to presets in Elastic 8.12.

We're on the Basic license if that makes any difference.

---

<div class="post-metadata">

**Author:** ![gabriel.landau](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/gabriel.landau/32/73401_2.png) [@gabriel.landau](https://discuss.elastic.co/u/gabriel.landau)\
**Post date:** [December 6, 2024, 2:03pm UTC](https://discuss.elastic.co/t/elastic-agent-preventing-standby/371598/2 "2024-12-06T14:03:11Z")

</div>

Hi @michael-a. I'm sorry you're having issues with standby.

Can you give us some more information about that Agent? What integrations are enabled in policy?

Would you mind sharing diagnostics from that Agent? I created [this secure upload link](https://upload.elastic.co/u/068c7fa9-3f76-4875-98e0-95cb631e8262) specific to your case.

---

<div class="post-metadata">

**Author:** ![michael-a](https://avatars.discourse-cdn.com/v4/letter/m/c57346/32.png) [@michael-a](https://discuss.elastic.co/u/michael-a)\
**Post date:** [December 9, 2024, 6:13am UTC](https://discuss.elastic.co/t/elastic-agent-preventing-standby/371598/3 "2024-12-09T06:13:27Z")

</div>

Hi Gabriel!

We use 3 integrations - System, Defend and Osquery. I'll generate a diagnostics as soon as I can get my hands on a suitable client, once uploaded I'll post here again.

Thanks // Mike

---

<div class="post-metadata">

**Author:** ![michael-a](https://avatars.discourse-cdn.com/v4/letter/m/c57346/32.png) [@michael-a](https://discuss.elastic.co/u/michael-a)\
**Post date:** [December 11, 2024, 6:58am UTC](https://discuss.elastic.co/t/elastic-agent-preventing-standby/371598/4 "2024-12-11T06:58:49Z")

</div>

Hi.

Diagnostics is now uploaded, using a slightly different policy with 4 integrations (Network packet capture) rather than the 3 mentioned above.

Our Linux team has tweaked permissions for the Elastic Agent to prevent NFS shares to be mounted at boot time (there's another request for that here in Discussions), which apparantly also caused standby to work properly again but as that's more of a workaround than a solution, we're still keen to find out what's causing this issue and would like to see if there's a solution available.

Let me know if there's anything else I can do.

Thanks // Mike

---

<div class="post-metadata">

**Author:** ![gabriel.landau](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/gabriel.landau/32/73401_2.png) [@gabriel.landau](https://discuss.elastic.co/u/gabriel.landau)\
**Post date:** [December 12, 2024, 2:57pm UTC](https://discuss.elastic.co/t/elastic-agent-preventing-standby/371598/5 "2024-12-12T14:57:23Z")

</div>

Thanks. I passed the diagnostics onto the team.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [January 9, 2025, 2:58pm UTC](https://discuss.elastic.co/t/elastic-agent-preventing-standby/371598/6 "2025-01-09T14:58:05Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.