elastic search, agent enrollment failure

Question

I am trying to enroll agent onto my fleet server, the server is live but whenever I try to connect my agent it doesn't work.

• I keep encountering the same error:

  {"log.level":"warn","@timestamp":"2023-06-06T19:28:55.258+0100","log.logger":
  "tls","log.origin": {"file.name":"tlscommon/tls_config.go","file.line":104},"message":
  "SSL/TLS verifications disabled.","ecs.version":"1.6.0"} 
  {"log.level":"info","@timestamp":"2023-06-06T19:28:55.564+0100","log.origin":
  {"file.name":"cmd/enroll_cmd.go","file.line":478},"message":"Starting enrollment to 
  URL: https://10.0.2.15:443/","ecs.version":"1.6.0"}
  {"log.level":"warn","@timestamp":"2023-06-06T19:28:55.790+0100","log.logger":"tls",
  "log.origin":{"file.name":"tlscommon/tls_config.go","file.line":104},"message":
  "SSL/TLS verifications disabled.","ecs.version":"1.6.0"}
  Error: fail to enroll: fail to execute request to fleet-server: dial tcp 10.0.2.15:443: 
  connectex: No connection could be made because the target machine actively refused it.
  For help, please see our troubleshooting guide at https://www.elastic.co/guide/en/fleet/8.8/fleet-troubleshooting.html
  Error: enroll command failed with exit code: 1
  

I have tried to run the same commands with --insecure and as a admin but it doesn't work, I am running both the fleet server (kali purple) and the agent(Windows) on VMs.

Answer 1

Tldr;

By default the fleet-server expose the port 8220, you may want to try the following ip:

• https://10.0.2.15:8220