Console not receiving updates from one enrolled machine
One of my agents has stopped updating in the CrowdSec Console for just over 36 hours. The machine was previously working and is still shown as enrolled and healthy, but the console isn’t receiving updates.
Current state:
- Agent + bouncer running fine
- Logs are being parsed and alerts generated
- cscli machines list shows it as enrolled, healthy, and heartbeat recent
- cscli capi status and cscli lapi status both OK
- cscli console status shows alert sharing enabled
- No recent errors in journal or log output related to console/capi/enrolment
So it looks like the agent thinks it’s enrolled and active, but the console isn’t getting or displaying updates.
Haven’t done yet (to avoid breaking state):
- Re-enrol
- Delete or recreate machine
- Reset local state
Could someone advise the next safe step to re-link it without losing data or creating a duplicate entry?
Happy to DM machine ID + workspace details.
Thanks!
3 Replies
Important Information
This post has been marked as resolved. If this is a mistake please press the red button below or type
/unresolve© Created By WhyAydan for CrowdSec ❤️
• Log files:
I’ve checked the CrowdSec service logs for the affected server and there are no recent errors related to console enrolment, CAPI sync or signal forwarding in the last 12 hours. If needed, I can provide a filtered snippet rather than the full log (it's huge), so please let me know which pattern or timeframe you'd like (for example: --since, specific module, or debug-level).
• Guide followed:
This server was originally deployed following the official documentation from the CrowdSec site (LAPI + agent + bouncer) and was successfully enrolled in the console.
• Screenshots:
There are no visible local errors, but I can provide screenshots from the console or local CLI if required (just say what view you'd prefer).
Happy to provide the exact Machine ID and Workspace ID via DM if needed.
Let me know what extra details you’d like next — config snippet, logs with specific filters, debug mode run, or re-enrolment steps.
Resolving Console not receiving updates from one enrolled machine
This has now been resolved. If you think this is a mistake please run
/unresolve