Hello,
I tried to install a fleet server using the Kibana UI and copying the command to the CentOS Server. But after the successful enrollment the fleet server seems to stop itself for some reason and Kibana still "Waits for Fleet Server to connect".
Enroll Log:
[root@pfleet ~]# sudo elastic-agent enroll --fleet-server-es=https://10.20.1.6:9200 --fleet-server-service-token=AAEAAWVsYXN0aWMvZmxlZXQtc2VydmVyL3Rva2VuLTE2NDk1MDk4MzMzNDg6RzgwbFN6ejhSVjJZZ2NQalRCajRLUQ --fleet-server-policy=5fe7bce0-b806-11ec-b460-779741d07fee --fleet-server-es-ca-trusted-fingerprint=809ef51507f1c26f788ff340009610b2adc92449dc11ef2bbbbaf96dd592d724 --fleet-server-insecure-http
This will replace your current settings. Do you want to continue? [Y/n]:Y
{"log.level":"info","@timestamp":"2022-04-09T15:12:11.219+0200","log.origin":{"file.name":"cmd/enroll_cmd.go","file.line":572},"message":"Spawning Elastic Agent daemon as a subprocess to complete bootstrap process.","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-04-09T15:12:11.350+0200","log.origin":{"file.name":"application/application.go","file.line":68},"message":"Detecting execution mode","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-04-09T15:12:11.350+0200","log.origin":{"file.name":"application/application.go","file.line":88},"message":"Agent is in Fleet Server bootstrap mode","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-04-09T15:12:11.423+0200","log.logger":"api","log.origin":{"file.name":"api/server.go","file.line":62},"message":"Starting stats endpoint","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-04-09T15:12:11.423+0200","log.origin":{"file.name":"application/fleet_server_bootstrap.go","file.line":131},"message":"Agent is starting","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-04-09T15:12:11.423+0200","log.logger":"api","log.origin":{"file.name":"api/server.go","file.line":64},"message":"Metrics endpoint listening on: /var/lib/elastic-agent/data/tmp/elastic-agent.sock (configured: unix:///var/lib/elastic-agent/data/tmp/elastic-agent.sock)","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-04-09T15:12:11.425+0200","log.origin":{"file.name":"application/fleet_server_bootstrap.go","file.line":141},"message":"Agent is stopped","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-04-09T15:12:11.426+0200","log.origin":{"file.name":"stateresolver/stateresolver.go","file.line":48},"message":"New State ID is an2w3Qx0","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-04-09T15:12:11.426+0200","log.origin":{"file.name":"stateresolver/stateresolver.go","file.line":49},"message":"Converging state requires execution of 1 step(s)","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-04-09T15:12:11.468+0200","log.origin":{"file.name":"operation/operator.go","file.line":284},"message":"operation 'operation-install' skipped for fleet-server.8.1.2","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-04-09T15:12:11.575+0200","log.origin":{"file.name":"log/reporter.go","file.line":40},"message":"2022-04-09T15:12:11+02:00 - message: Application: fleet-server--8.1.2[]: State changed to STARTING: Starting - type: 'STATE' - sub_type: 'STARTING'","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-04-09T15:12:11.578+0200","log.origin":{"file.name":"stateresolver/stateresolver.go","file.line":66},"message":"Updating internal state","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-04-09T15:12:12.220+0200","log.origin":{"file.name":"cmd/enroll_cmd.go","file.line":777},"message":"Fleet Server - Starting","ecs.version":"1.6.0"}
{"log.level":"warn","@timestamp":"2022-04-09T15:12:13.096+0200","log.origin":{"file.name":"status/reporter.go","file.line":236},"message":"Elastic Agent status changed to: 'degraded'","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-04-09T15:12:13.096+0200","log.origin":{"file.name":"log/reporter.go","file.line":40},"message":"2022-04-09T15:12:13+02:00 - message: Application: fleet-server--8.1.2[]: State changed to DEGRADED: Running on policy with Fleet Server integration: 5fe7bce0-b806-11ec-b460-779741d07fee; missing config fleet.agent.id (expected during bootstrap process) - type: 'STATE' - sub_type: 'RUNNING'","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-04-09T15:12:14.222+0200","log.origin":{"file.name":"cmd/enroll_cmd.go","file.line":758},"message":"Fleet Server - Running on policy with Fleet Server integration: 5fe7bce0-b806-11ec-b460-779741d07fee; missing config fleet.agent.id (expected during bootstrap process)","ecs.version":"1.6.0"}
{"log.level":"warn","@timestamp":"2022-04-09T15:12:14.222+0200","log.logger":"tls","log.origin":{"file.name":"tlscommon/tls_config.go","file.line":105},"message":"SSL/TLS verifications disabled.","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-04-09T15:12:15.078+0200","log.origin":{"file.name":"cmd/enroll_cmd.go","file.line":455},"message":"Starting enrollment to URL: http://localhost:8220/","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-04-09T15:12:15.843+0200","log.origin":{"file.name":"cmd/enroll_cmd.go","file.line":259},"message":"Elastic Agent has been enrolled; start Elastic Agent","ecs.version":"1.6.0"}
Successfully enrolled the Elastic Agent.
{"log.level":"info","@timestamp":"2022-04-09T15:12:15.843+0200","log.origin":{"file.name":"cmd/run.go","file.line":185},"message":"Shutting down Elastic Agent and sending last events...","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-04-09T15:12:15.843+0200","log.origin":{"file.name":"operation/operator.go","file.line":216},"message":"waiting for installer of pipeline 'default' to finish","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-04-09T15:12:15.843+0200","log.origin":{"file.name":"process/app.go","file.line":176},"message":"Signaling application to stop because of shutdown: fleet-server--8.1.2","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-04-09T15:12:17.344+0200","log.origin":{"file.name":"status/reporter.go","file.line":236},"message":"Elastic Agent status changed to: 'online'","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-04-09T15:12:17.344+0200","log.origin":{"file.name":"cmd/run.go","file.line":193},"message":"Shutting down completed.","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-04-09T15:12:17.344+0200","log.origin":{"file.name":"log/reporter.go","file.line":40},"message":"2022-04-09T15:12:17+02:00 - message: Application: fleet-server--8.1.2[]: State changed to STOPPED: Stopped - type: 'STATE' - sub_type: 'STOPPED'","ecs.version":"1.6.0"}
{"log.level":"info","@timestamp":"2022-04-09T15:12:17.344+0200","log.logger":"api","log.origin":{"file.name":"api/server.go","file.line":66},"message":"Stats endpoint (/var/lib/elastic-agent/data/tmp/elastic-agent.sock) finished: accept unix /var/lib/elastic-agent/data/tmp/elastic-agent.sock: use of closed network connection","ecs.version":"1.6.0"}
I installed using yum install elastic-agent-8.1.2-x86_64.rpm first.
ELK version(s): Everything on 8.1.2
I checked and Elasticsearch and Kibana are working fine.
Can someone help me?