Initial installation and setup of the server and agents was successful. I was troubleshooting some issues with the APM Agents not sending data to the server and broke all Fleet and agents. I attempt to undo what I had done, but it was too late. I'm back to a point where I have a Fleet server running and I have two agents deployed. The Fleet server and another server. Agents show healthy, running, no errors in the logs on the hosts, but I am not seeing any logs in the data streams. Currently, the Fleet server is on the same server as Elasticsearch and Kibana. I am using the Windows Certificate Authority to create PEM Certificates. So the CA is the same between Elasticsearch and the Fleet Server. I've been in loops on the documentation. The other question I have with the SSL Certificates. Do I really need a different certificate for each service if they are all on the same host but using different ports? I see there's a note in the Fleet documentation that states the Fleet CA must be different from the Elasticsearch CA which makes zero sense in a production setup.
Fleet.yml file
agent:
id: 4a40170d-a143-4f2d-882f-20abe0500604
monitoring.http:
enabled: false
host: ""
port: 6791
fleet:
enabled: true
access_api_key: VnFSYzRYd0JuY3g5alc2Y0FHWmE6VjZpVmwwYzZUN1NSTGtzNm9jOWNfUQ==
protocol: https
host: elasticstack.mydomain.com:8220
ssl:
verification_mode: "certificate"
certificate_authorities:
- D:\Elasticsearch\config\ca-root.cer
renegotiation: never
timeout: 10m0s
proxy_disable: true
reporting:
threshold: 10000
check_frequency_sec: 30
agent:
id: ""
server:
policy:
id: 905a39e0-377b-11ec-b508-fffe5009835f
output:
elasticsearch:
protocol: https
hosts:
- elasticstack.mydomain.com:9200
service_token: AAEAAWVsYXN0aWMvZmxlZXQtc2Vyd...
ssl:
verification_mode: "certificate"
certificate_authorities:
- D:\Elasticsearch\config\ca-root.cer
renegotiation: never
proxy_disable: false
proxy_headers: {}
host: 0.0.0.0
port: 8220
ssl:
verification_mode: "certificate"
certificate: D:\Elasticsearch\config\kibana-server.cer
key: D:\Elasticsearch\config\kibana-server.key
renegotiation: never