Cerulean Agent Repair Guide

When to Use This Guide

Use this guide if any of the following conditions apply to your device:

• You are experiencing issues with Elastic Agent or Elastic Endpoint services.
• A device has not checked in within the last 15 minutes and is confirmed to be online.

Repair Steps

1. Download the Cerulean Agent Installer.
   1. Log in to the AgileBlue Portal and navigate to Management → Agent.
   2. Download the installer that matches your operating system and installation method.
   Important: Overwrite any existing installer and ensure the file is named windows_installer3.exe (Windows only)
   
   
2. Locate your API Key
   1. In the AgileBlue Portal, go to Management → Settings.
   2. Select Alert Playbook.
   3. Copy your API key listed under the Alert Communication Protocol section.
   
   
3. Run the Repair Command.
   1. Open a terminal (or PowerShell on Windows) and run the command that matches your operating system. Replace YOURAPIKEYHERE with the API key obtained in Step 2.
      

       

      Windows

      • Command Prompt

      • windows_installer3.exe repair -a YOURAPIKEYHERE -u https://agentapi.agileblue.com

         

      • Powershell

      • ./windows_installer3.exe repair -a YOURAPIKEYHERE -u https://agentapi.agileblue.com

         

      • Command Prompt - with Syslog

      • windows_installer3.exe repair -a YOURAPIKEYHERE -u https://agentapi.agileblue.com -s

         

      • Powershell - with Syslog

      • ./windows_installer3.exe repair -a YOURAPIKEYHERE -u https://agentapi.agileblue.com -s

         

      Linux

      • Standard

      • sudo ./linux_installer3 repair -a YOURAPIKEYHERE -u https://agentapi.agileblue.com

         

      • Syslog

      • sudo ./linux_installer3 repair -a YOURAPIKEYHERE -u https://agentapi.agileblue.com -s

         

      Mac

      • Standard (Intel)

      • sudo ./mac_installer3 repair -a YOURAPIKEYHERE -u https://agentapi.agileblue.com

         

      • Intel - with Syslog

      • sudo ./mac_installer3 repair -a YOURAPIKEYHERE -u https://agentapi.agileblue.com -s

         

      • Apple Silicon (ARM)

      • sudo ./mac_arm_installer3 repair -a YOURAPIKEYHERE -u https://agentapi.agileblue.com

         

      • Apple Silicon - with Syslog

      • sudo ./mac_arm_installer3 repair -a YOURAPIKEYHERE -u https://agentapi.agileblue.com -s

4. Verify the Repair

   1. After the repair completes, confirm the device is checking in again by navigating to Analytics → Data Sources in the AgileBlue Portal. The device should appear with a recent check-in timestamp.

NOTE: If the device does not appear within 5–10 minutes after running the repair, please contact AgileBlue Support for further assistance.

Questions? Contact AgileBlue Support. 

Email: support@agileblue.com 
Phone: (216) 606-9400🚨