Try Reinstalling the System Integration Assets...
Please no screen shots of text to hard to see... paste with </>
button
Those logs look like the shutdown what does the startup look like?
Try another Host?
Run the Diagnostics bundle
elastic-agent diagnostics collect
Something unusual is going on...
I know this does not directly help you but I just installed another host in my subnet...
Self Signed cert I needed to use the --insecure
flag.... self signed cert.,
sudo ./elastic-agent install --url=https://fleet.bvader.net:8220 --enrollment-token=TnsadfasdfasdfsadfQMDdBNlk2ZGc6cFl2QXpXbWdTYWFxckZwZlpoX3VoZw== --insecure
Then I got the Check Mark... took about 30 sec.
So your next step is run the diagnostics
elastic-agent diagnostics collect
Then unzip and go into the configs and logs...
I suspect the underlying metricbeat is not connecting with elasticsearch or something like that
looks for the connection logs I suspect it will be failing
metricbeat-20221124-1.ndjson:{"log.level":"info","@timestamp":"2022-11-24T19:19:05.454Z","log.logger":"publisher_pipeline_output","log.origin":{"file.name":"pipeline/client_worker.go","file.line":139},"message":"Connecting to backoff(elasticsearch(https://10.168.0.12:9200))","service.name":"metricbeat","ecs.version":"1.6.0"}
metricbeat-20221124-1.ndjson:{"log.level":"info","@timestamp":"2022-11-24T19:19:05.513Z","log.logger":"publisher_pipeline_output","log.origin":{"file.name":"pipeline/client_worker.go","file.line":147},"message":"Connection to backoff(elasticsearch(https://10.168.0.12:9200)) established","service.name":"metricbeat","ecs.version":"1.6.0"}
You can look at the policies etc... lots of stuff...
from the directory
grep 10.168.0.12 config/*
gotta run good luck...
Something basic going on .. should not be this hard... I will check back later if I can
NOTE: Just found a small bug I think (that is not your issue) The Agent CPU process for the Agent Running Fleet is not properly reported. I am seeing the CPU etc for the new Agent I installed remotely.
This is for the new host I just deployed on
Sorry you are having so much trouble.. it should be easier than this ... for you.