# Elastic Agent successfully connect to Fleet Server but Elasticsearch did not receive data! bug

**URL:** <https://discuss.elastic.co/t/elastic-agent-successfully-connect-to-fleet-server-but-elasticsearch-did-not-receive-data-bug/349887>\
**Category:** Elastic Agent\
**Tags:** fleet\
**Created:** [December 24, 2023, 12:42am UTC](https://discuss.elastic.co/t/elastic-agent-successfully-connect-to-fleet-server-but-elasticsearch-did-not-receive-data-bug/349887 "2023-12-24T00:42:42Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![helloworld404](https://avatars.discourse-cdn.com/v4/letter/h/8491ac/32.png) [@helloworld404](https://discuss.elastic.co/u/helloworld404)\
**Post date:** [December 24, 2023, 12:42am UTC](https://discuss.elastic.co/t/elastic-agent-successfully-connect-to-fleet-server-but-elasticsearch-did-not-receive-data-bug/349887/1 "2023-12-24T00:42:43Z")

</div>

## OS

```auto
lsb_release -a
No LSB modules are available.
Distributor ID: Ubuntu
Description: Ubuntu 22.04 LTS
Release: 22.04
Codename: jammy

```

## install Elastic

```auto
wget -qO - https://artifacts.elastic.co/GPG-KEY-elasticsearch | sudo gpg --dearmor -o /usr/share/keyrings/elasticsearch-keyring.gpg
sudo apt-get install apt-transport-https
echo "deb [signed-by=/usr/share/keyrings/elasticsearch-keyring.gpg] https://artifacts.elastic.co/packages/8.x/apt stable main" | sudo tee /etc/apt/sources.list.d/elastic-8.x.list

sudo apt-get update && sudo apt-get install elasticsearch

```

### elasticsearch.yml

```auto
network.host: 0.0.0.0
xpack.security.authc.api_key.enabled: true

```

systemctl restart elasticsearch

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/0/b/0bd5ba079ca35a9a6310255c6ebbc7b2542229e9.jpeg)

## install Kibana

```auto
sudo apt-get update && sudo apt-get install kibana

```

### kibana.yml

```auto
server.host: "0.0.0.0"

```

sudo systemctl start kibana

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/c/2/c2dec08577e6cb9e01ebbb348fec17d8f43189c9.png)  
 ![image](https://us1.discourse-cdn.com/elastic/original/3X/4/4/44338a57c29ce6765b6e3609753b3603c8a57a62.png)

## Fleet Server

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/6/b/6b7c34a849c3c2a3b67e7b6b6f1a5f0698b86a73.png)  
 ![image](https://us1.discourse-cdn.com/elastic/original/3X/b/6/b6cd7c2dd1de7f5d69b56b828abb77dfbcddc0f2.png)

### install server on this host (124.222.18.X)

```auto
sudo ./elastic-agent install \
  --fleet-server-es=https://10.0.12.12:9200 \
  --fleet-server-service-token=AAEAAWVsYXN0aWMvZmxlZXQtc2VydmVyL3Rva2VuLTE3MDMzMjUzOTMyNjE6b05TMFBjYTVTRTZ3UjZpN1FiN2N2UQ \
  --fleet-server-policy=fleet-server-policy \
  --fleet-server-es-ca-trusted-fingerprint=00c7a760b4ed7747ca7b64e122b2f6ffd230118ccb6981c26121edd3337af0eb \
  --fleet-server-port=8220

---> Elastic Agent has been successfully installed.

```

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/a/6/a60707f5fd86c3dd48281b3f8008362f373865f2.png)

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/6/8/684bb0411070632f657be61b3a50e1b24e811684.png)

## Install the agent on my own personal computer(Mac)

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/c/4/c42e3120901a1979d392f6bfa7568ebf57ca6cc5.png)  
 ![image](https://us1.discourse-cdn.com/elastic/original/3X/c/3/c300d6a263741efd65cded251c235a6664e5a5d3.png)

```auto
sudo ./elastic-agent install --url=https://124.222.18.X:8220 --enrollment-token=aXBraWxvd0JXbk5WVXlibi1DQXM6R1dRWTlUazZSclNybGQ2S0RWdF9qUQ== --insecure

--> Elastic Agent has been successfully installed.

```

Elasticsearch did not receive data：

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/4/0/406928d97b33f0bdf658f67aaa69aae8f7ff9ca0.png)  
 ![image](https://us1.discourse-cdn.com/elastic/original/3X/b/6/b6a348d72266464c30ef5756a71614a788a15ea9.png)  
 ![image](https://us1.discourse-cdn.com/elastic/original/3X/4/4/44ee511a0342d0a688b3f4195df0adc7ce9ab37e.png)  
 ![image](https://us1.discourse-cdn.com/elastic/original/3X/0/3/030e4ba86e9e73803bf5c782f52d58271d8d2d79.png)  
 ![image](https://us1.discourse-cdn.com/elastic/original/3X/5/2/529255a534f78f4abbe0348e86d62d817e4df272.png)  
 ![image](https://us1.discourse-cdn.com/elastic/original/3X/7/3/73c2d93b89621386892771cdcae1d0955717c1ae.png)  
 ![image](https://us1.discourse-cdn.com/elastic/original/3X/5/3/53e400e9acb66c5851317b458350f8cc4ce9c365.png)

still not work:

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/9/1/91424b188a4273b43bdcf175150dc48274d2f339.png)

---

<div class="post-metadata">

**Author:** ![MichelLaterman](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/michellaterman/32/110221_2.png) [@MichelLaterman](https://discuss.elastic.co/u/MichelLaterman)\
**Post date:** [December 26, 2023, 4:24pm UTC](https://discuss.elastic.co/t/elastic-agent-successfully-connect-to-fleet-server-but-elasticsearch-did-not-receive-data-bug/349887/2 "2023-12-26T16:24:54Z")

</div>

Can you provide any logs from elastic-agent?

I think this is a certificate issue where the cert that ES generated for itself does not match the IP address that the agent is using, we can confirm this with log messages.  
If that's the case you will need to create a new cert for ES that lists multiple IPs.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [January 23, 2024, 4:25pm UTC](https://discuss.elastic.co/t/elastic-agent-successfully-connect-to-fleet-server-but-elasticsearch-did-not-receive-data-bug/349887/3 "2024-01-23T16:25:24Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.