elastic / elastic/elastic-agent

[Bug] When migrating an elastic agent from one fleet server to another the Endpoint Security still sent logs to the old one

Open
#140 3 comments 0 reactions 0 assignees View on GitHub
Team:Elastic-Agent-Control-Plane
Dominant language
Go
Stars
275
Forks
264
Avg merge
1d 20h
Merged PRs (30d)
298

Description

While testing elastic Agent I had a host connected to one Fleet server in a policy that had Endpoint Security as an integration. I then used the `elastic-agent enroll` command to enroll the agent with a different Fleet server, this time with a policy that only included the OSQuery integration. After migrating to the new Fleet server the Elastic Agent reported that only the OSQuery integration was installed, but Endpoint Security was still installed and sending events to the old Fleet server.

Elastic Agent 7.15.1
MacOS VM running Mac OS 12.0.1. The VM was running OS 10.15.1 when the original agent was installed but it was upgraded to OS 12.0.1 after migrating it to the new fleet server.

Slack Conversation about this: https://elastic.slack.com/archives/C01QQ449KE1/p1635253469053200

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.