Fleet Server setup failure

[jyoung2025]

We are trying to setup the fleet server and when we go to install the agent, we get an "enroll command failure for unknown reason: exit status 1". Any idea how to fix it? We are setting up the fleet server up on the same machine as the LME.

[cbaxley]

Fleet server should already be installed if you ran the two ansible scripts.

[jyoung2025]

Fleet server should already be installed if you ran the two ansible scripts.

where could I go to check that because we ran both scripts but when we are on the website to start settings things up, it tells us we need to setup a fleet server?

[aarz-snl]

Can you clarify what step you're doing here?

Are you installing the fleet server or are you installing an agent on an endpoint.

You shouldn't have to be manually installing the fleet server.

If you run:

sudo -i podman ps and the elastic agent named lme-fleet-server is up then its already running. If its not you need to try and perform a reboot / reinstall.

From what I'm seeing it sounds like your post-install playbook wasn't successful

[aarz-snl]

What I would recommend is blow away this vm.. and try the install again.

run the following on a fresh machine:

sudo apt update && sudo apt upgrade -y

sudo apt install curl jq unzip -y

curl -s https://api.github.com/repos/cisagov/LME/releases/latest | jq -r '.assets[0].browser_download_url' | xargs -I {} sh -c 'curl -L -O {} && unzip -d ~/LME $(basename {})'

hostname -I | awk '{print $1}'

note this ip

cd ~/LME 

cp ./config/example.env ./config/lme-environment.env

edit ./config/lme-environment.env with the editor of your choice... ie.

nano ./config/lme-environment.env

Change IPVAR to equal that ip address. Change nothing else.

install ansible

sudo apt update && sudo apt install -y ansible

run first playbook

ansible-playbook ./ansible/install_lme_local.yml

Wait about 10 minutes for this after its done. Use the following commands to verify everything is up:

sudo -i podman ps

Once everything has been running for about 5+ minutes move on to post install

ansible-playbook ./ansible/post_install_local.yml