Troubleshooting

Agent unknown 403

The enrollment token is not consumed / expired. TTL is 30 minutes. Issue a new one in the cabinet.

TLS handshake error

  • Check the time on the host: cert validity is ±5min from server time
  • Check the CA bundle: openssl s_client -connect api:8443 -showcerts
  • Pass --ca-bundle path/to/ca.crt if you use a custom CA

Metrics don't appear

curl 'http://localhost:8428/api/v1/series?match=up'

If organization_id is missing — the agent sends without org context. Check unimoni-agent --debug.