FireEye Agent Stopped and will not restart.

Index

Issue

Configuration File invalid when trying the upgrade/reinstall, agent stpped and will not start and

PS C:\Program Files (x86)\FireEye\xagt> .\xagt.exe –cfg-export ‘C:\Install\export.cfg’ Error: 65548

Resolution

Need to rename C:\ProgramData\FireEye\xagt

Move-Item "C:\ProgramData\FireEye\xagt" "xagt.old"

Then run (This will error with Error 1738) but it will re-create the xagt folder

& "C:\Program Files (x86)\FireEye\xagt\xagt.exe" --cfg-export 'C:\Install\Export.cfg'

Then import the config from the installation media or from an exported working configuration from another server.

& "C:\Program Files (x86)\FireEye\xagt\xagt.exe" --cfg-import 'C:\Install\GoodConfig.cfg'

OR

& "C:\Program Files (x86)\FireEye\xagt\xagt.exe" --cfg-import 'C:\Install\agent_config.json'