Security Onion Elastic Fleet Reset : lead to a new elastic Fleet server with all the policies and configurations deleted

[oxploited19]

Version

2.4.160

Installation Method

Security Onion ISO image

Description

other (please provide detail below)

Installation Type

Distributed

Location

on-prem with Internet access

Hardware Specs

Meets minimum requirements

CPU

5 VCPU

RAM

12GB

Storage for /

280GB

Storage for /nsm

not added any separate same for above

Network Traffic Collection

other (please provide detail below)

Network Traffic Speeds

Less than 1Gbps

Status

Yes, all services on all nodes are running OK

Salt Status

No, there are no failures

Logs

No, there are no additional clues

Detail

I face an error and tried to reset the elastic fleet server using the "so-elastic-fleet-setup" command to reset and reinstall the Fleet server, the reinstallation went out smooth and i have the elastic fleet server up, but it has lost all of its configuration and also all of the agent policies and all the nodes are removed with their policies as well, now can you walk me through how do i get them added back to the elastic fleet server and do i need to now manually create policies and also installation of the agents over the nodes in the Grid.

Guidelines

• I have read the discussion guidelines at Read before posting! #1720 and assert that I have followed the guidelines.

[oxploited19]

[oxploited19]

[cm-ops]

If you want to reset Fleet, try running sudo so-elastic-fleet-reset.

[oxploited19]

I did reset using this command but after the reset was performed the machines has not connected back to the Fleet server and also the endpoint policies are deleted after the reset.

[cm-ops]

so-elastic-fleet-setup or so-elastic-fleet-reset? I don't see a Fleet server in your screenshot. Try and run sudo so-elastic-fleet-reset again if that is what you ran, if there are errors let me know.