Skip to main content

Legacy Elastic Installation Guide

Installation Instructions (For reference)

The information below details the previous manual installation process. These instructions are preserved for informational purposes but should not be used for new installations.

If you would like to learn more about the Elastic Agent, see Endpoint Detection & Response.

If you would like to learn more about the install command (or others), you can read more at Elastic Agent command reference | Elastic Docs.

warning

Managing to install the agent without an enrollment token will lead to a broken install state where the agent may be installed but not reporting back. Be sure to use an enrollment token.

Windows Commands​

x86_64​

$ProgressPreference = 'SilentlyContinue'

Invoke-WebRequest -Uri https://artifacts.elastic.co/downloads/beats/elastic-agent/elastic-agent-9.3.4-windows-x86_64.zip -OutFile elastic-agent-9.3.4-windows-x86_64.zip

Expand-Archive -Force .\elastic-agent-9.3.4-windows-x86_64.zip -DestinationPath .

cd elastic-agent-9.3.4-windows-x86_64

.\elastic-agent.exe install --force --url=<URL> --enrollment-token=<TOKEN_HERE> --non-interactive

aarch64​

$ProgressPreference = 'SilentlyContinue'

Invoke-WebRequest -Uri https://artifacts.elastic.co/downloads/beats/elastic-agent/elastic-agent-9.3.4-windows-arm64.zip -OutFile elastic-agent-9.3.4-windows-arm64.zip

Expand-Archive .\elastic-agent-9.3.4-windows-arm64.zip -DestinationPath .

cd elastic-agent-9.3.4-windows-arm64

.\elastic-agent.exe install --url=<URL> --enrollment-token=<TOKEN_HERE> --non-interactive

MSI Package​

$ProgressPreference = 'SilentlyContinue'

Invoke-WebRequest -Uri https://artifacts.elastic.co/downloads/beats/elastic-agent/elastic-agent-9.3.4-windows-x86_64.msi -OutFile elastic-agent-9.3.4-windows-x86_64.msi

cmd /c 'msiexec.exe /i elastic-agent-9.3.4-windows-x86_64.msi INSTALLARGS="--url=<URL> --enrollment-token=<TOKEN_HERE> --force" /q'
Agent Versioning

The OS will not reflect the actual agent version installed if you use the MSI. You can use Axonius to determine what version is installed. Alternatively, you may be able to use elastic-agent.exe version

Mac Commands​

curl -L -O https://artifacts.elastic.co/downloads/beats/elastic-agent/elastic-agent-9.3.4-darwin-x86_64.tar.gz

tar xzvf elastic-agent-9.3.4-darwin-x86_64.tar.gz

cd elastic-agent-9.3.4-darwin-x86_64

sudo ./elastic-agent install --url=<URL> --enrollment-token=<TOKEN_HERE> --non-interactive

Linux Commands​

x86_64 Architecture​

curl -L -O https://artifacts.elastic.co/downloads/beats/elastic-agent/elastic-agent-9.3.4-linux-x86_64.tar.gz

tar xzvf elastic-agent-9.3.4-linux-x86_64.tar.gz

cd elastic-agent-9.3.4-linux-x86_64

sudo ./elastic-agent install --url=<URL> --enrollment-token=<TOKEN_HERE> --non-interactive

aarch64 Architecture​

curl -L -O https://artifacts.elastic.co/downloads/beats/elastic-agent/elastic-agent-9.3.4-linux-arm64.tar.gz

tar xzvf elastic-agent-9.3.4-linux-arm64.tar.gz

cd elastic-agent-9.3.4-linux-arm64

sudo ./elastic-agent install --url=<URL> --enrollment-token=<TOKEN_HERE> --non-interactive