elastic search, agent enrollment failure

Question

I am trying to enroll agent onto my fleet server, the server is live but whenever I try to connect my agent it doesn't work.

• I keep encountering the same error:

   {"log.level":"warn","@timestamp":"2023-06-06T19:28:55.258+0100","log.logger": "tls","log.origin": {"file.name":"tlscommon/tls_config.go","file.line":104},"message": "SSL/TLS verifications disabled.","ecs.version":"1.6.0"} {"log.level":"info","@timestamp":"2023-06-06T19:28:55.564+0100","log.origin": {"file.name":"cmd/enroll_cmd.go","file.line":478},"message":"Starting enrollment to URL: https://10.0.2.15:443/","ecs.version":"1.6.0"} {"log.level":"warn","@timestamp":"2023-06-06T19:28:55.790+0100","log.logger":"tls", "log.origin":{"file.name":"tlscommon/tls_config.go","file.line":104},"message": "SSL/TLS verifications disabled.","ecs.version":"1.6.0"} Error: fail to enroll: fail to execute request to fleet-server: dial tcp 10.0.2.15:443: connectex: No connection could be made because the target machine actively refused it. For help, please see our troubleshooting guide at https://www.elastic.co/guide/en/fleet/8.8/fleet-troubleshooting.html Error: enroll command failed with exit code: 1

I have tried to run the same commands with --insecure and as a admin but it doesn't work, I am running both the fleet server (kali purple) and the agent(Windows) on VMs.

Answer 1

Tldr;

By default the fleet-server expose the port 8220 , you may want to try the following ip:

• https://10.0.2.15:8220