No alert in security detection dashboards after malware attack

Nick_Berlin · December 16, 2020, 8:46pm

I'm not sure if C:\Program Files\Elastic\Agent\ca.crt is the same certificate authority that is generated by the elasticsearch instance. Can you confirm that?

The ElasticEndpoint makes a direct connection to elasticsearch and according to the logs above it's failing to do so because it cannot find the proper certificate authority in the host's trusted root certificates.

Please ensure the certificate authority from elasticsearch is installed and that ElasticEndpoint service be stopped and started after doing so.

Here's a link to steps I used to get a Windows 10 ElasticEndpoint connected to elasticsearch.

Sure hope this helps.

Topic		Replies	Views
[Solved problem] Endpoint security can not detect malware Endpoint Security elastic-stack-security	4	227	June 11, 2024
Endpoint Security Not Working Endpoint Security	4	1153	June 29, 2022
Endpoint Security agents online but not sending any logs Elastic Security	2	570	November 4, 2022
Elastic Endpoint cannot send alerts to kibana Endpoint Security	2	551	October 18, 2022
Endpoint Security help Endpoint Security elastic-stack-security	7	628	June 23, 2022

No alert in security detection dashboards after malware attack

Related topics