OS
lsb_release -a
No LSB modules are available.
Distributor ID: Ubuntu
Description: Ubuntu 22.04 LTS
Release: 22.04
Codename: jammy
install Elastic
wget -qO - https://artifacts.elastic.co/GPG-KEY-elasticsearch | sudo gpg --dearmor -o /usr/share/keyrings/elasticsearch-keyring.gpg
sudo apt-get install apt-transport-https
echo "deb [signed-by=/usr/share/keyrings/elasticsearch-keyring.gpg] https://artifacts.elastic.co/packages/8.x/apt stable main" | sudo tee /etc/apt/sources.list.d/elastic-8.x.list
sudo apt-get update && sudo apt-get install elasticsearch
elasticsearch.yml
network.host: 0.0.0.0
xpack.security.authc.api_key.enabled: true
systemctl restart elasticsearch
install Kibana
sudo apt-get update && sudo apt-get install kibana
kibana.yml
server.host: "0.0.0.0"
sudo systemctl start kibana
Fleet Server
install server on this host (124.222.18.X)
sudo ./elastic-agent install \
--fleet-server-es=https://10.0.12.12:9200 \
--fleet-server-service-token=AAEAAWVsYXN0aWMvZmxlZXQtc2VydmVyL3Rva2VuLTE3MDMzMjUzOTMyNjE6b05TMFBjYTVTRTZ3UjZpN1FiN2N2UQ \
--fleet-server-policy=fleet-server-policy \
--fleet-server-es-ca-trusted-fingerprint=00c7a760b4ed7747ca7b64e122b2f6ffd230118ccb6981c26121edd3337af0eb \
--fleet-server-port=8220
---> Elastic Agent has been successfully installed.
Install the agent on my own personal computer(Mac)
sudo ./elastic-agent install --url=https://124.222.18.X:8220 --enrollment-token=aXBraWxvd0JXbk5WVXlibi1DQXM6R1dRWTlUazZSclNybGQ2S0RWdF9qUQ== --insecure
--> Elastic Agent has been successfully installed.
Elasticsearch did not receive data:
still not work: