# Issues with Elastic Agent

**URL:** <https://discuss.elastic.co/t/issues-with-elastic-agent/256578>\
**Category:** Beats\
**Tags:** elastic-agent\
**Created:** [November 24, 2020, 9:51pm UTC](https://discuss.elastic.co/t/issues-with-elastic-agent/256578 "2020-11-24T21:51:19Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![abdeslam.mazouz](https://avatars.discourse-cdn.com/v4/letter/a/47e85d/32.png) [@abdeslam.mazouz](https://discuss.elastic.co/u/abdeslam.mazouz)\
**Post date:** [November 24, 2020, 9:51pm UTC](https://discuss.elastic.co/t/issues-with-elastic-agent/256578/1 "2020-11-24T21:51:19Z")

</div>

What do you think about this; Elastic agent shows up in SIEM under administration for some servers but not all. Even if they are suing the same config and managed from Fleet. The agent piece working but the endpoint security is not.

_[_ 3:33 PM _]_

I see this error in the ones who are not working: {"@timestamp":"2020-11-24T21:32:22.5816300Z","agent":{"id":"71ed4dc2-1882-4b99-b91c-02a7788f86e4","type":"endpoint"},"ecs":{"version":"1.5.0"},"log":{"level":"notice","origin":{"file":{"line":65,"name":"BulkQueueConsumer.cpp"}}},"message":"BulkQueueConsumer.cpp:65 Elasticsearch connection is down","process":{"pid":19524,"thread":{"id":21260}}}

---

<div class="post-metadata">

**Author:** ![pierhugues](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/pierhugues/32/48383_2.png) [@pierhugues](https://discuss.elastic.co/u/pierhugues)\
**Post date:** [November 25, 2020, 1:55pm UTC](https://discuss.elastic.co/t/issues-with-elastic-agent/256578/2 "2020-11-25T13:55:55Z")

</div>

From the messages it seems it cannot cannot to ES. Let me ask a few question to narrow down the environment.

What version are you running of the Elastic Agent? And on the problematic host do you see endpoint running?

---

<div class="post-metadata">

**Author:** ![abdeslam.mazouz](https://avatars.discourse-cdn.com/v4/letter/a/47e85d/32.png) [@abdeslam.mazouz](https://discuss.elastic.co/u/abdeslam.mazouz)\
**Post date:** [November 25, 2020, 6:29pm UTC](https://discuss.elastic.co/t/issues-with-elastic-agent/256578/3 "2020-11-25T18:29:40Z")

</div>

Yes. It is strange because I have servers on the same network and they are working just fine. The only difference I see if the OS. I am running version 7.9.3 for agent and Elastic and Kibana.

The Endpoint service is running properly and shows up in fleet. The only place it does not show up in is under Administration under SIEM.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [December 23, 2020, 6:30pm UTC](https://discuss.elastic.co/t/issues-with-elastic-agent/256578/4 "2020-12-23T18:30:03Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.