ELK 8.15 启用Fleet Server和安装Agent_agent

注意,这里的URL, 使用端口8220,不是443

ELK 8.15 启用Fleet Server和安装Agent_fleet server_02

ELK 8.15 启用Fleet Server和安装Agent_elk_03

ELK 8.15 启用Fleet Server和安装Agent_agent_04

ELK 8.15 启用Fleet Server和安装Agent_agent_05

curl -L -O https://artifacts.elastic.co/downloads/beats/elastic-agent/elastic-agent-8.15.1-linux-x86_64.tar.gz

tar xzvf elastic-agent-8.15.1-linux-x86_64.tar.gz

cd elastic-agent-8.15.1-linux-x86_64

可以将如下这一段存为一个sh文件,方便操作

sudo ./elastic-agent install \

 --fleet-server-es=https://192.168.1.100:9200 \

 --fleet-server-service-token=xxxxxxxxxxxxxxxxx \

 --fleet-server-policy=fleet-server-policy \

 --fleet-server-es-ca-trusted-fingerprint=xxxxxxxxxxx \

 --fleet-server-port=8220

ELK 8.15 启用Fleet Server和安装Agent_agent_06

完成后即可看到Fleet Server

ELK 8.15 启用Fleet Server和安装Agent_fleet server_07


接着尝试安装Agent,注意Agent不要跟Fleet server同一部机器,不然会搞乱配置,这里我使用一部windows机器来安装Agent

ELK 8.15 启用Fleet Server和安装Agent_agent_08

ELK 8.15 启用Fleet Server和安装Agent_elastic_09

在Windows中,使用powershell执行如下命令

$ProgressPreference = 'SilentlyContinue' (这个会报错,忽略即可)

Invoke-WebRequest -Uri https://artifacts.elastic.co/downloads/beats/elastic-agent/elastic-agent-8.15.1-windows-x86_64.zip -OutFile elastic-agent-8.15.1-windows-x86_64.zip

Expand-Archive .\elastic-agent-8.15.1-windows-x86_64.zip -DestinationPath .

cd elastic-agent-8.15.1-windows-x86_64

.\elastic-agent.exe install --url=https://192.168.1.100:8220 --enrollment-token=xxxxxxxx

注意,上面这条命令,需要添加 --insecure 参数,不然会报错:certificate signed by unknown authority,如下图

ELK 8.15 启用Fleet Server和安装Agent_fleet server_10

正确命令:.\elastic-agent.exe install --url=https://192.168.1.100:8220 --insecure --enrollment-token=xxxxxxX

ELK 8.15 启用Fleet Server和安装Agent_elastic_11

回到Fleet页面,即可看到Agent

ELK 8.15 启用Fleet Server和安装Agent_fleet server_12


Windows Agent安装遇到一种情况,命令忘记加入--insecure 参数,导致再安装时,提示文件和服务已存在,此时需要将2者删除再安装,文件简单,删除即可:C:\Program Files\Elastic Agent\

服务就比较麻烦,属于安装未成功的卡死状态,无法删除服务,需要到注册表中清除 HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services

然后重启

ELK 8.15 启用Fleet Server和安装Agent_elk_13