Failed to connect to backoff(elasticsearch

Elastic Security Endpoint Security
1

Hello, I have some issues with agents enrollement.
My agents are enrolled using a policy with Endpoint integration. The issue is that these agents display no logs message, and do not appear in Administration tab (a stuck message is displayed : Endpoints are enrolling. View agents to track progress).
By investigating, I've found in filebeat logs file, the following message Failed to connect to backoff(elasticsearch(https://XXX.eastus2.azure.elastic-cloud.com:443)) : 403 Forbidden.
Pinging the address (XXX.eastus2.azure.elastic-cloud.com) shows nothing more than Waiting period for the application exceeded.
How can I solve this issue ?
Best,
Nora

2

Do you have the filters setup in the elastic cloud to only allow access from specific IPs?

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.