Hi,
since updating Elastic to 8.4 (coming from 8.3), I'm unable to rollout elastic-agent for windows to one client. I've checked the token, it's valid and I'm able to rollout elastic-agent to other clients with this token. Verbose logging during install isn't so much helpful:
Elastic Agent will be installed at C:\Program Files\Elastic\Agent and will run as a service. Do you want to continue? [Y/n]:
{"log.level":"info","@timestamp":"2022-08-30T16:12:59.018+0200","log.origin":{"file.name":"cmd/enroll_cmd.go","file.line":471},"message":"Starting enrollment to URL: https://internal-Fleetserver-URL:8220/","ecs.version":"1.6.0"}
Error: fail to enroll: fail to execute request to fleet-server: Forbidden
For help, please see our troubleshooting guide at Troubleshoot common problems | Fleet and Elastic Agent Guide [8.4] | Elastic
Error: enroll command failed with exit code: 1
I'm wondering about the forbidden .... anyone has an idea?
Kind regards,
Andreas