ElasticEndpoint authorization is automatically closed in FDA

Elastic Security Endpoint Security
1

After installing elastic agent versions 8.4.1 and 8.9.1, I have clicked and checked in FDA to authorize ElasticEndpoint. However, after running on the computer for a period of time, the authorization of ElasticEndpoint is automatically closed. What is the reason for this? Is there any way to avoid this?

20231025-132156
20231025-132156924×70 11.4 KB

2

Hi @xqaiviwjxzw !

Thanks for reaching out!
Sometimes that UI toggle is not relevant and the settings are overwritten by the MDM config.

Do you see the host reporting as unhealthy in Fleet?
Is this a standalone or MDM deployment?

Thanks!

3

1.Yes, I'm see the host reporting as unhealthy in Fleet and incomplete log queries.
2.standalone deployment, not using MDM

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.