Upgrade fleet server to 7.16.2 - failing

Elastic Security Endpoint Security
1

We have been running fleet for a couple of months, starting with a stack running 7.15.0. We have upgraded our stack (including Kibana) to 7.16.2, and now want to upgrade our elastic-agents.
On the fleet console, our agents are showing as "Upgrade available" but the fleet server is not. If we try to upgrade a remote agent, it says its going to upgrade to 7.16.2, but the upgrade agent never reconnects to the fleet server.
If I try and upgrade the fleet server from the UI, it says its going to upgrade to 7.16.2, but then fails, with the really helpful error message that says upgrade failed.
Is there some special sauce, or magic incantation required before I can upgrade a fleet server, and then the remote agents?

Thanks

Ross

2

Hi Ross,

Sorry to hear you're having trouble. Just want to note that the remote upgrade feature is still in beta so we still have some improvements to make (like better error messages), but in general it should work.

You will need to upgrade Fleet Server before upgrading the other Agents. One thing I'd suggest is turn on verbose Agent logging on the Agent that is running Fleet Server, and then attempting the upgrade again. Then you should be able to see more detailed information about why the upgrade may be failing in the Agent logs for your Fleet Server agent. You can do this by changing the log level drop down in the bottom right corner of the Agent detail view:

Screen Shot 2022-01-20 at 11.48.39
Screen Shot 2022-01-20 at 11.48.392468×1808 496 KB

Feel free to post whatever you logs you're getting during the upgrade failure and we'll try to help as we can.

3

Thanks for the response. After trying to upgrade with debug turned on, this is the first line of the log, and it says it all....

2022-01-21T09:03:23.374+1300 DEBUG upgrade/rollback.go:103 agent is not upgradable, not starting watcher
This is the UI view:

image
image1298×221 57.5 KB

EA1
EA1985×289 47.6 KB

4

Thanks for posting the error message. Depending on how the Agent is installed, it may not eligible for remote upgrades. See the docs for more information, but in general, remote upgrades are not supported for Agents that are installed via DEB or RPM packages, or Docker containers since those are managed externally.

If you'd like to be able remote upgrade an Agent, we recommend installing via our binary tar.gz distributable directly.

5

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.