Duplicate fleet server agents being created, safe for removal? #16043
Answered
by
reyesj2
HaydenB0101
asked this question in
3.0
Version3.1.0 Installation MethodSecurity Onion ISO image Descriptionconfiguration Installation TypeDistributed Locationon-prem with Internet access Hardware SpecsExceeds minimum requirements CPU4 RAM16 Storage for /200 Storage for /nsm400 Network Traffic Collectiontap Network Traffic Speedsmore than 10Gbps StatusYes, all services on all nodes are running OK Salt StatusNo, there are no failures LogsNo, there are no additional clues DetailMy elastic fleet shows multiple duplicate fleet servers in the fleet page. I added a search node yesterday and added a sensor node today. I am wondering if it is safe to remove the duplicate agents, and I am also wondering why it is recreating multiple agents for the fleet server. Guidelines
|
Answered by
reyesj2
Jul 8, 2026
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment

Hello! Created an issue for this #16051
Yes, it is safe to delete the duplicate 'FleetServer-siem-manager2' agents