# Lab 2.1 - Elastic Agent - Adding Nginx Integration/Agent fail

**URL:** <https://discuss.elastic.co/t/lab-2-1-elastic-agent-adding-nginx-integration-agent-fail/380490>\
**Category:** Elastic Training\
**Created:** [July 28, 2025, 9:49am UTC](https://discuss.elastic.co/t/lab-2-1-elastic-agent-adding-nginx-integration-agent-fail/380490 "2025-07-28T09:49:18Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![fabio.iovine](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/fabio.iovine/32/144319_2.png) [@fabio.iovine](https://discuss.elastic.co/u/fabio.iovine)\
**Post date:** [July 28, 2025, 9:49am UTC](https://discuss.elastic.co/t/lab-2-1-elastic-agent-adding-nginx-integration-agent-fail/380490/1 "2025-07-28T09:49:18Z")

</div>

Course: Elastic Observability

Hi there,  
in Lab 2.1 I've been asked to add Nginx integration and Elastic Agent to Kibana.  
Integration is OK but when I try to add the agent first I've been asked to add a fleet server - I said Y - and then the install process goes on till it reaches the point where it says:  
_Elastic Agent will be installed at /opt/Elastic/Agent and will run as a service. Do you want to continue? [Y/n]:Y_  
_{"log.level":"info","@timestamp":"2025-07-28T09:34:04.929Z","log.origin":{"file.name":"cmd/enroll\_cmd.go","file.line":410},"message":"Generating self-signed certificate for Fleet Server","ecs.version":"1.6.0"}_  
_{"log.level":"info","@timestamp":"2025-07-28T09:34:07.759Z","log.origin":{"file.name":"cmd/enroll\_cmd.go","file.line":806},"message":"Fleet Server - Error - listen tcp 0.0.0.0:8220: bind: address already in use","ecs.version":"1.6.0"}_  
_Error: fleet-server failed: context canceled_  
_For help, please see our troubleshooting guide at [Troubleshoot common problems | Fleet and Elastic Agent Guide [8.8] | Elastic](https://www.elastic.co/guide/en/fleet/8.8/fleet-troubleshooting.html)_  
\*_Error: enroll command failed with exit code: 1_

Did I do something wrong?

Thanks.  
Fabio

---

<div class="post-metadata">

**Author:** ![Tortoise](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tortoise/32/147587_2.png) [@Tortoise](https://discuss.elastic.co/u/Tortoise)\
**Post date:** [July 28, 2025, 10:10am UTC](https://discuss.elastic.co/t/lab-2-1-elastic-agent-adding-nginx-integration-agent-fail/380490/2 "2025-07-28T10:10:13Z")

</div>

Hello @fabio.iovine

From the error "_{"file.name":"cmd/enroll\_cmd.go","file.line":806},"message":"Fleet Server - Error - listen tcp 0.0.0.0:8220: bind: address already in use","ecs.version":"1.6.0"}_  
_Error: fleet-server failed: context canceled_" it seems the port is in use, could you please check what is the process which is using the port :

`sudo lsof -i :8220`

If it is related to elastic-agent process of older installation maybe as you have already uninstalled the older agent, you can kill the process :

`sudo kill -9 <PID>`

Now try to install the agent again & see if you still receive the error.

Thanks!!

---

<div class="post-metadata">

**Author:** ![fabio.iovine](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/fabio.iovine/32/144319_2.png) [@fabio.iovine](https://discuss.elastic.co/u/fabio.iovine)\
**Post date:** [July 28, 2025, 10:15am UTC](https://discuss.elastic.co/t/lab-2-1-elastic-agent-adding-nginx-integration-agent-fail/380490/3 "2025-07-28T10:15:07Z")

</div>

Hi, if I try "sudo lsof" system asks for Elastic pwd - I have JcRZwmwBPduguAuv from previous lab but it seems system doesn't like it...  
IfI try to run lsof with no sudo i have no output...

---

<div class="post-metadata">

**Author:** ![Tortoise](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tortoise/32/147587_2.png) [@Tortoise](https://discuss.elastic.co/u/Tortoise)\
**Post date:** [July 28, 2025, 10:17am UTC](https://discuss.elastic.co/t/lab-2-1-elastic-agent-adding-nginx-integration-agent-fail/380490/4 "2025-07-28T10:17:23Z")

</div>

Hello @fabio.iovine

Check this post & try to run the sudo from that path if it helps :

> [@What is sudo password in the lab environment](https://discuss.elastic.co/t/what-is-sudo-password-in-the-lab-environment/375035/4):
>
> Hi @Waldemar_Schafer , I'm sorry if I mislead the conversation. Yes, sudo is required and the environment is configured to allow sudo without password for installing and running the agent, but it is restricted to the path provided in lab instructions. What is the path you are running the agent install? That command must be executed from /home/elastic/elastic-agent-8.8.2-linux-x86\_64 directory. Best, Andre

Thanks!!

---

<div class="post-metadata">

**Author:** ![fabio.iovine](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/fabio.iovine/32/144319_2.png) [@fabio.iovine](https://discuss.elastic.co/u/fabio.iovine)\
**Post date:** [July 28, 2025, 10:24am UTC](https://discuss.elastic.co/t/lab-2-1-elastic-agent-adding-nginx-integration-agent-fail/380490/5 "2025-07-28T10:24:24Z")

</div>

tried to run as you said:  
_(elastic) elastic@ip-172-31-38-81:~$ /home/elastic/elastic-agent-8.8.2-linux-x86\_64/sudo lsof -i :8220_  
_-bash: /home/elastic/elastic-agent-8.8.2-linux-x86\_64/sudo: No such file or directory_  
so I went inside /home/elastic/elastic-agent-8.8.2-linux-x86\_64 and run sudo from there:  
_(elastic) elastic@ip-172-31-38-81:~/elastic-agent-8.8.2-linux-x86\_64$ sudo lsof -i :8220_  
_[sudo] password for elastic:_  
same problem: password

---

<div class="post-metadata">

**Author:** ![Tortoise](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tortoise/32/147587_2.png) [@Tortoise](https://discuss.elastic.co/u/Tortoise)\
**Post date:** [July 28, 2025, 10:31am UTC](https://discuss.elastic.co/t/lab-2-1-elastic-agent-adding-nginx-integration-agent-fail/380490/6 "2025-07-28T10:31:04Z")

</div>

Thanks @fabio.iovine

We can also try below commands which do not need root access :

`netstat -tuln | grep :8220`

or

`ss -tuln | grep :8220`

or

> **[Elastic Agent command reference | Fleet and Elastic Agent Guide \[8.18\] | Elastic](https://www.elastic.co/guide/en/fleet/8.18/elastic-agent-cmd-options.html)**

`elastic-agent status`

Thanks!!

---

<div class="post-metadata">

**Author:** ![fabio.iovine](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/fabio.iovine/32/144319_2.png) [@fabio.iovine](https://discuss.elastic.co/u/fabio.iovine)\
**Post date:** [July 28, 2025, 10:35am UTC](https://discuss.elastic.co/t/lab-2-1-elastic-agent-adding-nginx-integration-agent-fail/380490/7 "2025-07-28T10:35:49Z")

</div>

ok, "netstat" is not installed...

_(elastic) elastic@ip-172-31-38-81:~/elastic-agent-8.8.2-linux-x86\_64$ ss -tuln | grep :8220_  
_tcp LISTEN 0 4096 0.0.0.0:8220 0.0.0.0:_ \*  
_tcp LISTEN 0 4096 [::]:8220 [::]:_\*
