Endpoint does not show up in Asset management page

[leandrojmp (Leandro Pereira)]

Hello,

I have a deployment on Elastic Cloud for tests and I'm doing a test with Elastic Defend.

I have a policy that has Elastic Defend configured with 1 agent enrolled with healthy status.

But when I go into Assets > Endpoint, I'm being asked to Enroll an Agent.

Going into Assets > Policies, I can see the policie and it says that there is one Endpoint:

But once I click in the policy, it shows that there is 0 agents.

This seems a bug to me, am I missing something?

[leandrojmp (Leandro Pereira)]

Clicking on the policy page, it seems to make a request to the following endpoint:

https://kibana-endpoint/api/fleet/agent_status?policyId=2e2baf43-777d-4583-8d3f-8b4778d80c6a

Where 2e2baf43-777d-4583-8d3f-8b4778d80c6a is the current policy id.

Running the same request in Dev Tools, it returns this:

{
  "results": {
    "online": 0,
    "error": 0,
    "inactive": 0,
    "offline": 0,
    "updating": 0,
    "unenrolled": 0,
    "orphaned": 0,
    "uninstalled": 0,
    "all": 0,
    "active": 0,
    "other": 0,
    "events": 0
  }
}

But, there is an agent on this policy:

[leandrojmp (Leandro Pereira)]

Well, it seems a bug.

While getting information from the agent with GET kbn:/api/fleet/agents/35486eb6-f886-4d2a-9ecd-c82a833968b2 the relevante response is:

{
  "item": {
    "id": "35486eb6-f886-4d2a-9ecd-c82a833968b2",
    "type": "PERMANENT",
    "namespaces": [
      "default"
    ],
    "active": true,
    "enrolled_at": "2026-05-13T01:36:06Z",
    "upgraded_at": "2026-07-03T00:48:04Z",
    "upgrade_started_at": null,
    "upgrade_details": null,
    "access_api_key_id": "37n6Hp4BhFyRaqMrEwWq",
    "policy_id": "2e2baf43-777d-4583-8d3f-8b4778d80c6a#9.4",
    "last_checkin": "2026-07-03T16:26:10Z",
    "last_checkin_status": "online",
    "last_checkin_message": "Running",
    "policy_revision": 30,

The policy id returned is the versioned policy id, in this case 2e2baf43-777d-4583-8d3f-8b4778d80c6a#9.4

The request made by the Kibana UI uses the policy id 2e2baf43-777d-4583-8d3f-8b4778d80c6a without the version, I'm not sure the endpoint used supports wildcard.

If I made the same request using the policy id, I will have the expected information.

This is the request made by the Assets > Endpoints > Policies UI

Adding the versioned policy (escaping the #), I get results:

[leandrojmp (Leandro Pereira)]

Opened 2 issues about this:

[Fleet] Version-specific agent policies may leave agents with outdated policies.

and

[Security Solution] Agents on version-specific policies are not showing up in the Assets > Endpoints page