√Fleet managed Elastic Agent listens on port 6791 by default with not activating http endpoint monitoring

Elastic Stack Beats
1

Hi there,

we have experienced an odd behaviour with http endpoint monitoring which defaults to port 6791.

We manage our agents via fleet and we haven't activated the http endpoint monitoring. Nevertheless, the agent is listening on the port. When activating it in the fleet and explicitly use a different port, the agent doesn't listen on 6791 anymore.

We assumed that not activating the http endpoint monitoring the agent won't activate that feature. We encountered this problem because of a port collision with our backup solution.

Is this a bug? Should we report it?

2

Sorry to hear you're running into this.

There is an open bug here that looks like this issue -- it has some activity as of last week

By default it should be listening only on localhost so it should not be accessible over the network