# AQUILA EDR Connection Issues - Windows

When Elastic Agent installs Endpoint, they connect locally to share status and updates. If this connection fails, Elastic Agent shows as Unhealthy, and Endpoint won’t work properly.

---

<span style="color: rgb(53, 152, 219);">**How to Check if There's a Problem**</span>

1. <span style="color: rgb(53, 152, 219);">**Check Agent Status**</span>  
    Open PowerShell as Administrator and run:

```c#
& "C:\Program Files\Elastic\Agent\elastic-agent.exe" status
```

[![image.png](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2025-06/scaled-1680-/tBJU2E0EmwzVfnvT-image.png)](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2025-06/tBJU2E0EmwzVfnvT-image.png)

Look for messages like:

- Endpoint has missed check-ins
- localhost:6788 cannot be bound to

2. <span style="color: rgb(53, 152, 219);">**Check Endpoint Settings**</span>  
    Open this file:

```c#
C:\Program Files\Elastic\Endpoint\elastic-endpoint.yaml
```

Find the line that says fleet.agent.id.  
If the value is 00000000-0000-0000-0000-000000000000, the connection failed.

---

<span style="color: rgb(53, 152, 219);">**Check the Logs**</span>

Look for these messages in the Endpoint logs:

- Failed to find connection to validate. Is Agent listening on 127.0.0.1:6788?
- Failed to validate connection. Is Agent running as root/admin?
- Unable to make GRPC connection in deadline(60s)

These show a connection problem between Agent and Endpoint.

---

<span style="color: rgb(53, 152, 219);">**How to Fix It**</span>

1. <span style="color: rgb(53, 152, 219);">**Run Diagnostics**</span>  
    Run this command on PowerShell as Administrator:

```c#
& "C:\Program Files\Elastic\Agent\elastic-endpoint.exe" diagnostics
```

[![image.png](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2025-06/scaled-1680-/2AubRnNDfIX5yOIV-image.png)](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2025-06/2AubRnNDfIX5yOIV-image.png)

Follow this file path to retrieve the Diagnostics Zip file created.

[![image.png](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2025-06/scaled-1680-/CdoIr2jXD7bLcf3Z-image.png)](https://cytechint-docs-bookstack.s3.amazonaws.com/uploads/images/gallery/2025-06/CdoIr2jXD7bLcf3Z-image.png)

This will generate a report with possible causes.

2. <span style="color: rgb(53, 152, 219);">**Check if Ports Are Used by Something Else**</span>  
    Run these:

```c#
netstat -an | findstr :6788
```

```c#
netstat -an | findstr :6789
```

If another program is using these ports, it could block the connection.

3. <span style="color: rgb(53, 152, 219);">**Test if Localhost Works**</span>  
    Run this:

```c#
ping -4 localhost
```

It should respond with 127.0.0.1

*Reference Link: [https://www.elastic.co/guide/en/security/8.18/ts-management.html](https://www.elastic.co/guide/en/security/8.18/ts-management.html)*

*<span class="TextRun SCXW71272603 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW71272603 BCX0">If you need further </span><span class="NormalTextRun SCXW71272603 BCX0">assistance</span><span class="NormalTextRun SCXW71272603 BCX0">, kindly contact our support at </span></span><span style="color: rgb(53, 152, 219);">**<span class="TextRun SCXW71272603 BCX0" data-contrast="none" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW71272603 BCX0">support@cytechint.com</span></span>**</span><span class="TextRun SCXW71272603 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW71272603 BCX0"> for prompt </span><span class="NormalTextRun SCXW71272603 BCX0">assistance</span><span class="NormalTextRun SCXW71272603 BCX0"> and guidance.</span></span><span class="EOP SCXW71272603 BCX0" data-ccp-props="{}"></span>*