When creating a fleet server, the fleet server ran in docker is ran as non root making some integrations non working

[cybjonah]

When running a fleet server for a distributed setup installed via the ISO, the docker container hosts fleet server. This causes some integrations like elastic defend not to be able to get ran, since the docker container is running that fleet server with the unprivileged tag.

[reyesj2]

This looks like you installed the elastic agent on your endpoint without using administrator privileges. Some integrations like defend need those admin privileges. Reinstall the agent using sudo or administrator privileges

[cybjonah]

Incorrect I ran it as root, I even made sure of it and did a reinstall.

[reyesj2]

Maybe I am misunderstanding. Are you trying to run elastic defend on an endpoint like a windows host or the Security Onion fleet server?