NathanLau
(Nathan)
February 6, 2023, 3:56am
1
Hi All ,
When installed Fleet server with quick start.
the fleet server cannot receive any data themselves , same as system.
install command :
sudo ./elastic-agent install \
--fleet-server-es=https://172.16.**.**:9200 \
--fleet-server-service-token=*****
--fleet-server-policy=fleet-server-policy \
--fleet-server-es-ca-trusted-fingerprint=*****
Please help. Thanks.
Hi @NathanLau ,
Could you share the command used to enroll the fleet server and some logs of the elastic agent?
It would be very helpful to understand what's going on in your config.
Thanks,
Cristina
NathanLau
(Nathan)
February 9, 2023, 6:55am
3
Hi Cristina ,
Here is install code.
sudo ./elastic-agent install \
--fleet-server-es=https://172.16.**.**:9200 \
--fleet-server-service-token=AAEAAWVsYXN0aWMvZmxlZX**********************************dIRVZUUk9aWEIzeFJGa0NvZw \
--fleet-server-policy=fleet-server-policy \
--fleet-server-es-ca-trusted-fingerprint=2ed3b3fa33079a7446******************************
Because I am using docker to build it , I think the yml file point to my docker ip address (172.18.0.2:9200) but it's may fault.
What should I do ? edit the yml file to point the correct ip address?
Hi Nathan,
--fleet-server-es
should point to the Elasticsearch URL and should also be configured in Fleet Settings
tab.
Under Outputs
, click on Add output
and select a new ES output, the host URL should be the same passed that is then passed to the enroll command:
By looking at the provided logs it seems that the fleet server is not able to reach Elasticsearch, so you can check if you can reach it with this command:
curl -k -u USERNAME:PASSWORD ELASTICSEARCH_HOST:9200
Could you check again your configuration, check that you can reach ES and then try again?
Thanks,
Cristina
NathanLau
(Nathan)
February 10, 2023, 11:03am
6
Hi @Cristina_Amico ,
I already direct change the ip address from docker IP to my VM.
Thanks. it's work. But in your way , it's cannot set it to default Agent.
system
(system)
Closed
March 10, 2023, 11:04am
7
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.