Fleet server does not get installed after a so-elastic-fleet-reset

[mikkelotharholm]

Version

2.4.170

Installation Method

Security Onion ISO image

Description

other (please provide detail below)

Installation Type

Distributed

Location

on-prem with Internet access

Hardware Specs

Exceeds minimum requirements

CPU

8

RAM

16G

Storage for /

64G

Storage for /nsm

128G

Network Traffic Collection

other (please provide detail below)

Network Traffic Speeds

1Gbps to 10Gbps

Status

No, one or more services are failed (please provide detail below)

Salt Status

No, there are no failures

Logs

No, there are no additional clues

Detail

We have the following nodes:
1 manager node
2 search nodes
2 receiver nodes
1 fleet node

When doing a fresh ISO install of the fleet node, everything works perfect, but after a so-elastic-fleet-reset on the manager node, the dedicated fleet server is not being installed as a fleet server. There is no new fleet-server policy being created for the dedicated fleet server.

Agents on all nodes and the fleet server on the manager node is working fine after the so-elastic-fleet-reset.

Do i have to make a clean ISO installation of the dedicated fleet node again?

Guidelines

• I have read the discussion guidelines at Read before posting! #1720 and assert that I have followed the guidelines.

[defensivedepth]

I just updated the wording on the reset script: #15003

"Only the Elastic Fleet instance on the Manager will be reinstalled - dedicated Fleet node config will removed and will need to be reinstalled."