Fleet hosts settings

Elastic Stack Elastic Agent
1

Hello,

I am running elk in a self managed environment and my question concerns the following fleet setting:
xpack.fleet.agents.elasticsearch.hosts

This parameter is described in documentation as:
"Hostnames used by Elastic Agent for accessing Elasticsearch."

Does it mean that each hostname in the list is a hostname that points to the same Elasticsearch? Or does it mean that each hostname in the list points to a different Elasticsearch.

I have only one Elasticsearch node and it has:

  • a public hostname used by elastic-agent that run in other networks as my cluster
  • an internal hostname that is used by fleet-server elastic-agent to access it

So I configured my kibana.yml as such:

xpack.fleet.agents.elasticsearch.hosts:
  - public_hostname
  - intern_hostname

Is it the right way do go?

I have the same question with xpack.fleet.agents.fleet_server.hosts

2

The *.hosts config options define the nodes in a cluster the agent could connect to.
It will try each one until it finds one it can connect to.
So in your case you probably should only have your public hostname in there.

The same goes for the fleet_servers. You would enter all fleet-hosts (including port) that you have and the agent will try all of them until it finds one it can connect to.

I belive there is also a random selection at work, so the agent doesn't always start its connection tries from the top of the listed hosts.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.