# No data/log from elastic agent on Security onion

**URL:** <https://discuss.elastic.co/t/no-data-log-from-elastic-agent-on-security-onion/386140>\
**Category:** Elastic Agent\
**Created:** [May 3, 2026, 9:27pm UTC](https://discuss.elastic.co/t/no-data-log-from-elastic-agent-on-security-onion/386140 "2026-05-03T21:27:40Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Mojamed\_Pika\_SANOGO](https://avatars.discourse-cdn.com/v4/letter/m/c77e96/32.png) [@Mojamed\_Pika\_SANOGO](https://discuss.elastic.co/u/Mojamed_Pika_SANOGO)\
**Post date:** [May 3, 2026, 9:27pm UTC](https://discuss.elastic.co/t/no-data-log-from-elastic-agent-on-security-onion/386140/1 "2026-05-03T21:27:40Z")

</div>

Hi, I need help. I installed Elastic Agent on Windows machines for monitoring on Security Onion. I chose the distributed mode. Although the agents appear in Fleet and are in a healthy state, and I've integrated Elastic Defend, Windows, etc., no logs are being sent. What should I do?

---

<div class="post-metadata">

**Author:** ![juancamiloll](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/juancamiloll/32/110326_2.png) [@juancamiloll](https://discuss.elastic.co/u/juancamiloll)\
**Post date:** [May 6, 2026, 12:44pm UTC](https://discuss.elastic.co/t/no-data-log-from-elastic-agent-on-security-onion/386140/2 "2026-05-06T12:44:45Z")

</div>

> [@Mojamed\_Pika\_SANOGO](#):
>
> Hi, I need help. I installed Elastic Agent on Windows machines for monitoring on Security Onion. I chose the distributed mode. Although the agents appear in Fleet and are in a healthy state, and I've integrated Elastic Defend, Windows, etc., no logs are being sent. What should I do?

I have the Elastic AI Assistant installed. I see that no one has been able to help you yet, so I’m sharing the response I received when I asked your question. I hope it helps.

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/2/2/225cc3238d0a80ad7182eeb5eb4709c4db6599bf.png)

---

<div class="post-metadata">

**Author:** ![Mojamed\_Pika\_SANOGO](https://avatars.discourse-cdn.com/v4/letter/m/c77e96/32.png) [@Mojamed\_Pika\_SANOGO](https://discuss.elastic.co/u/Mojamed_Pika_SANOGO)\
**Post date:** [May 6, 2026, 1:21pm UTC](https://discuss.elastic.co/t/no-data-log-from-elastic-agent-on-security-onion/386140/3 "2026-05-06T13:21:37Z")

</div>

Got it,

I'll give it a try.

Thank you

---

<div class="post-metadata">

**Author:** ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)\
**Post date:** [May 6, 2026, 7:56pm UTC](https://discuss.elastic.co/t/no-data-log-from-elastic-agent-on-security-onion/386140/4 "2026-05-06T19:56:06Z")

</div>

@juancamiloll Thanks for using the Elastic AI Assistant to help out... we appreciate you being clear about where the information came from.

Hopefully this helps @Mojamed_Pika_SANOGO a bit.

However, We do pride ourselves on responding from a position of experience/expertise so we try to resist just generic Agentic Responses at this time.

---

<div class="post-metadata">

**Author:** ![juancamiloll](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/juancamiloll/32/110326_2.png) [@juancamiloll](https://discuss.elastic.co/u/juancamiloll)\
**Post date:** [May 6, 2026, 7:58pm UTC](https://discuss.elastic.co/t/no-data-log-from-elastic-agent-on-security-onion/386140/5 "2026-05-06T19:58:07Z")

</div>

Understood