ElasticEndpoint authorization is automatically closed in FDA

After installing elastic agent versions 8.4.1 and 8.9.1, I have clicked and checked in FDA to authorize ElasticEndpoint. However, after running on the computer for a period of time, the authorization of ElasticEndpoint is automatically closed. What is the reason for this? Is there any way to avoid this?

Hi @xqaiviwjxzw !

Thanks for reaching out!
Sometimes that UI toggle is not relevant and the settings are overwritten by the MDM config.

Do you see the host reporting as unhealthy in Fleet?
Is this a standalone or MDM deployment?


1.Yes, I'm see the host reporting as unhealthy in Fleet and incomplete log queries.
2.standalone deployment, not using MDM

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.