# Failed to connect to backoff(elasticsearch

**URL:** <https://discuss.elastic.co/t/failed-to-connect-to-backoff-elasticsearch/273424>\
**Category:** Endpoint Security\
**Tags:** fleet\
**Created:** [May 19, 2021, 2:53pm UTC](https://discuss.elastic.co/t/failed-to-connect-to-backoff-elasticsearch/273424 "2021-05-19T14:53:52Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![noraben](https://avatars.discourse-cdn.com/v4/letter/n/cdc98d/32.png) [@noraben](https://discuss.elastic.co/u/noraben)\
**Post date:** [May 19, 2021, 2:53pm UTC](https://discuss.elastic.co/t/failed-to-connect-to-backoff-elasticsearch/273424/1 "2021-05-19T14:53:52Z")

</div>

Hello, I have some issues with agents enrollement.  
My agents are enrolled using a policy with Endpoint integration. The issue is that these agents display no logs message, and do not appear in Administration tab (a stuck message is displayed : _`Endpoints are enrolling. View agents to track progress`_).  
By investigating, I've found in filebeat logs file, the following message _**`Failed to connect to backoff(elasticsearch(https://XXX.eastus2.azure.elastic-cloud.com:443)) : 403 Forbidden`**_.  
Pinging the address ([XXX.eastus2.azure.elastic-cloud.com](http://XXX.eastus2.azure.elastic-cloud.com)) shows nothing more than _ **`Waiting period for the application exceeded`** _.  
How can I solve this issue ?  
Best,  
Nora

---

<div class="post-metadata">

**Author:** ![probson](https://avatars.discourse-cdn.com/v4/letter/p/e47c2d/32.png) [@probson](https://discuss.elastic.co/u/probson)\
**Post date:** [May 21, 2021, 10:06am UTC](https://discuss.elastic.co/t/failed-to-connect-to-backoff-elasticsearch/273424/2 "2021-05-21T10:06:05Z")

</div>

Do you have the filters setup in the elastic cloud to only allow access from specific IPs?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [June 18, 2021, 10:06am UTC](https://discuss.elastic.co/t/failed-to-connect-to-backoff-elasticsearch/273424/3 "2021-06-18T10:06:48Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.