# Console enroll failing

**URL:** <https://discourse.crowdsec.net/t/console-enroll-failing/2343>\
**Category:** crowdsec\
**Created:** [February 7, 2025, 2:02am UTC](https://discourse.crowdsec.net/t/console-enroll-failing/2343 "2025-02-07T02:02:55Z")\
**Posts on this page:** 9\
**Page:** 1

<div class="post-metadata">

**Author:** ![aaronhensley249\_1234](https://avatars.discourse-cdn.com/v4/letter/a/4da419/32.png) [@aaronhensley249\_1234](https://discourse.crowdsec.net/u/aaronhensley249_1234)\
**Post date:** [February 7, 2025, 2:02am UTC](https://discourse.crowdsec.net/t/console-enroll-failing/2343/1 "2025-02-07T02:02:55Z")

</div>

I am setting up my first windows firewall engine and when i use the console enroll command i get the follow ing error.

level=fatal msg=“accepts 1 arg(s), received 0”

I am running as powershell admin, not sure what to do. First time user

---

<div class="post-metadata">

**Author:** ![iiAmLoz](https://dub1.discourse-cdn.com/flex013/user_avatar/discourse.crowdsec.net/iiamloz/32/386_2.png) [@iiAmLoz](https://discourse.crowdsec.net/u/iiAmLoz)\
**Post date:** [February 7, 2025, 9:18am UTC](https://discourse.crowdsec.net/t/console-enroll-failing/2343/2 "2025-02-07T09:18:31Z")

</div>

So you are running:

```auto
cscli.exe console enroll <id>

```

if so can you provide `cscli.exe version`

---

<div class="post-metadata">

**Author:** ![aaronhensley249\_1234](https://avatars.discourse-cdn.com/v4/letter/a/4da419/32.png) [@aaronhensley249\_1234](https://discourse.crowdsec.net/u/aaronhensley249_1234)\
**Post date:** [February 7, 2025, 1:14pm UTC](https://discourse.crowdsec.net/t/console-enroll-failing/2343/3 "2025-02-07T13:14:04Z")

</div>

So i was able to enroll the engine but now no logs are being parsed. it look like the log files cannot be found. below are the messages from the crowsec log.

time=“2025-02-07T21:45:38+09:00” level=info msg=“loading acquisition file : C:\ProgramData\CrowdSec\config\acquis.yaml”  
time=“2025-02-07T21:45:38+09:00” level=warning msg=“No matching files for pattern C:\Windows\System32\LogFiles\Firewall\_.log" type=file  
time=“2025-02-07T21:45:38+09:00” level=warning msg="No matching files for pattern C:\inetpub\logs\LogFiles\_\*.log” type=file

---

<div class="post-metadata">

**Author:** ![aaronhensley249\_1234](https://avatars.discourse-cdn.com/v4/letter/a/4da419/32.png) [@aaronhensley249\_1234](https://discourse.crowdsec.net/u/aaronhensley249_1234)\
**Post date:** [February 7, 2025, 1:28pm UTC](https://discourse.crowdsec.net/t/console-enroll-failing/2343/4 "2025-02-07T13:28:36Z")

</div>

PS C:\Users\vpira\> cscli version  
version: v1.6.4-fb733ee4  
Codename: alphaga  
BuildDate: 2024-11-20\_11:23:05  
GoVersion: 1.23.3  
Platform: windows  
libre2: WebAssembly  
User-Agent: crowdsec/v1.6.4-fb733ee4-windows  
Constraint\_parser: \>= 1.0, \<= 3.0  
Constraint\_scenario: \>= 1.0, \<= 3.0  
Constraint\_api: v1  
Constraint\_acquis: \>= 1.0, \< 2.0  
Built-in optional components: cscli\_setup, datasource\_appsec, datasource\_cloudwatch, datasource\_docker, datasource\_file, datasource\_http, datasource\_journalctl, datasource\_k8s-audit, datasource\_kafka, datasource\_kinesis, datasource\_loki, datasource\_s3, datasource\_syslog, datasource\_wineventlog

---

<div class="post-metadata">

**Author:** ![jkern01](https://dub1.discourse-cdn.com/flex013/user_avatar/discourse.crowdsec.net/jkern01/32/1160_2.png) [@jkern01](https://discourse.crowdsec.net/u/jkern01)\
**Post date:** [March 6, 2025, 12:14pm UTC](https://discourse.crowdsec.net/t/console-enroll-failing/2343/5 "2025-03-06T12:14:37Z")

</div>

I also had this same problem when installing all Windows stations. On Linux stations it ran correctly. How can I solve this? Why does this problem happen?

---

<div class="post-metadata">

**Author:** ![iiAmLoz](https://dub1.discourse-cdn.com/flex013/user_avatar/discourse.crowdsec.net/iiamloz/32/386_2.png) [@iiAmLoz](https://discourse.crowdsec.net/u/iiAmLoz)\
**Post date:** [March 6, 2025, 12:16pm UTC](https://discourse.crowdsec.net/t/console-enroll-failing/2343/6 "2025-03-06T12:16:23Z")

</div>

Can you provide additional context like logs for example?

we cant seem to replicate the issue with enrollment on the latest version so please ensure you are on the latest install.

---

<div class="post-metadata">

**Author:** ![jkern01](https://dub1.discourse-cdn.com/flex013/user_avatar/discourse.crowdsec.net/jkern01/32/1160_2.png) [@jkern01](https://discourse.crowdsec.net/u/jkern01)\
**Post date:** [March 6, 2025, 1:20pm UTC](https://discourse.crowdsec.net/t/console-enroll-failing/2343/7 "2025-03-06T13:20:44Z")

</div>

Yes, I don’t know of any other fonts to download, only the font from the website that I downloaded today.

---

<div class="post-metadata">

**Author:** ![jkern01](https://dub1.discourse-cdn.com/flex013/user_avatar/discourse.crowdsec.net/jkern01/32/1160_2.png) [@jkern01](https://discourse.crowdsec.net/u/jkern01)\
**Post date:** [March 6, 2025, 1:27pm UTC](https://discourse.crowdsec.net/t/console-enroll-failing/2343/8 "2025-03-06T13:27:05Z")

</div>

time=“2025-03-06T06:29:27-03:00” level=error msg=“error while performing request: dial tcp: lookup [api.crowdsec.net](http://api.crowdsec.net) on [::1]:53: read udp [::1]:54961-\>[::1]:53: i/o timeout; 4 retries left”  
time=“2025-03-06T06:29:27-03:00” level=info msg=“retrying in 29 seconds (attempt 2 of 5)”  
time=“2025-03-06T06:29:59-03:00” level=info msg=“Sent 1 usage metrics”  
time=“2025-03-06T06:30:00-03:00” level=info msg=“capi/community-blocklist : 0 explicit deletions”  
time=“2025-03-06T06:30:03-03:00” level=info msg=“crowdsecurity/community-blocklist : added 3000 entries, deleted 2873 entries (alert:28)”  
time=“2025-03-06T06:52:16-03:00” level=info msg=“Sent 1 usage metrics”  
time=“2025-03-06T06:59:59-03:00” level=info msg=“capi metrics: sending”  
time=“2025-03-06T07:23:50-03:00” level=error msg=“unable to send usage metrics: Post "[https://api.crowdsec.net/v3/usage-metrics\](https://api.crowdsec.net/v3/usage-metrics%5C)”: performing jwt auth: net/http: TLS handshake timeout"  
time=“2025-03-06T07:30:00-03:00” level=info msg=“capi metrics: sending”  
time=“2025-03-06T07:52:16-03:00” level=info msg=“Sent 2 usage metrics”  
time=“2025-03-06T08:00:11-03:00” level=info msg=“capi metrics: sending”  
time=“2025-03-06T08:22:20-03:00” level=info msg=“Sent 1 usage metrics”  
time=“2025-03-06T08:29:06-03:00” level=info msg=“Starting community-blocklist update”  
time=“2025-03-06T08:29:08-03:00” level=info msg=“capi/community-blocklist : 0 explicit deletions”  
time=“2025-03-06T08:29:11-03:00” level=info msg=“crowdsecurity/community-blocklist : added 3000 entries, deleted 2865 entries (alert:29)”  
time=“2025-03-06T08:30:12-03:00” level=info msg=“capi metrics: sending”  
time=“2025-03-06T08:52:16-03:00” level=info msg=“Sent 1 usage metrics”  
time=“2025-03-06T09:00:12-03:00” level=info msg=“capi metrics: sending”  
time=“2025-03-06T09:22:16-03:00” level=info msg=“Sent 1 usage metrics”  
time=“2025-03-06T09:30:13-03:00” level=info msg=“capi metrics: sending”  
time=“2025-03-06T09:52:18-03:00” level=info msg=“Sent 1 usage metrics”  
time=“2025-03-06T10:00:14-03:00” level=info msg=“capi metrics: sending”  
time=“2025-03-06T10:22:19-03:00” level=info msg=“Sent 1 usage metrics”

---

<div class="post-metadata">

**Author:** ![iiAmLoz](https://dub1.discourse-cdn.com/flex013/user_avatar/discourse.crowdsec.net/iiamloz/32/386_2.png) [@iiAmLoz](https://discourse.crowdsec.net/u/iiAmLoz)\
**Post date:** [March 6, 2025, 1:56pm UTC](https://discourse.crowdsec.net/t/console-enroll-failing/2343/9 "2025-03-06T13:56:03Z")

</div>

> [@jkern01](#):
>
> time=“2025-03-06T06:29:27-03:00” level=error msg=“error while performing request: dial tcp: lookup [api.crowdsec.net](http://api.crowdsec.net) on [::1]:53: read udp [::1]:54961-\>[::1]:53: i/o timeout; 4 retries left”

This is a problem with the machine DNS, that it seems to be timing out

> [@jkern01](#):
>
> time=“2025-03-06T07:23:50-03:00” level=error msg=“unable to send usage metrics: Post “[[https://api.crowdsec.net/v3/usage-metrics\](https://api.crowdsec.net/v3/usage-metrics%5C)]([https://api.crowdsec.net/v3/usage-metrics\](https://api.crowdsec.net/v3/usage-metrics%5C))”: performing jwt auth: net/http: TLS handshake timeout”

Same again the machine is timing out when trying to do the TLS handshake, if you machine is behind a corporate proxy or something doing TLS inspection this may happen as it adds some overhead to the request timings.