Closed Deblintrake09 closed 6 months ago
Unable to retrieve version information from OpenSearch nodes.
There is no connectivity to the indexer nodes. This may be caused by a configuration problem, as there are many errors related to SSL certificates.
This should be investigated by the AMI producers (@wazuh/cicd).
Some errors in this issue are reported in: https://github.com/wazuh/wazuh-packages/issues/2445
I was testing the AMI: ami-0e3aa680272bebe7a and I couldn't replicate the errors. Can you tell us what steps you took to replicate the error?
[root@wazuh-server ~]# journalctl | grep wazuh-dashboard
Sep 12 19:02:12 wazuh-server systemd[1]: Configuration file /etc/systemd/system/wazuh-dashboard.service is marked world-inaccessible. This has no effect as configuration data is accessible via APIs without restrictions. Proceeding anyway.
Sep 12 19:02:25 wazuh-server systemd[1]: Started wazuh-dashboard.
Sep 12 19:04:48 wazuh-server systemd[1]: Configuration file /etc/systemd/system/wazuh-dashboard.service is marked world-inaccessible. This has no effect as configuration data is accessible via APIs without restrictions. Proceeding anyway.
Sep 12 19:04:49 wazuh-server systemd[1]: Configuration file /etc/systemd/system/wazuh-dashboard.service is marked world-inaccessible. This has no effect as configuration data is accessible via APIs without restrictions. Proceeding anyway.
Sep 12 19:04:49 wazuh-server systemd[1]: Stopping wazuh-dashboard...
Sep 12 19:04:50 wazuh-server systemd[1]: Stopped wazuh-dashboard.
Sep 12 19:04:50 wazuh-server systemd[1]: Started wazuh-dashboard.
Sep 12 19:44:30 wazuh-server systemd[1]: Configuration file /etc/systemd/system/wazuh-dashboard.service is marked world-inaccessible. This has no effect as configuration data is accessible via APIs without restrictions. Proceeding anyway.
Sep 12 19:44:31 wazuh-server systemd[1]: Configuration file /etc/systemd/system/wazuh-dashboard.service is marked world-inaccessible. This has no effect as configuration data is accessible via APIs without restrictions. Proceeding anyway.
Sep 12 19:44:32 wazuh-server systemd[1]: Configuration file /etc/systemd/system/wazuh-dashboard.service is marked world-inaccessible. This has no effect as configuration data is accessible via APIs without restrictions. Proceeding anyway.
Sep 12 19:44:32 wazuh-server systemd[1]: Configuration file /etc/systemd/system/wazuh-dashboard.service is marked world-inaccessible. This has no effect as configuration data is accessible via APIs without restrictions. Proceeding anyway.
Sep 12 19:52:31 wazuh-server systemd[1]: Stopping wazuh-dashboard...
Sep 12 19:52:32 wazuh-server systemd[1]: Stopped wazuh-dashboard.
Sep 13 11:21:43 wazuh-server systemd[1]: Configuration file /etc/systemd/system/wazuh-dashboard.service is marked world-inaccessible. This has no effect as configuration data is accessible via APIs without restrictions. Proceeding anyway.
Sep 13 11:21:44 wazuh-server systemd[1]: Started wazuh-dashboard.
Sep 13 12:11:34 wazuh-server systemd[1]: Configuration file /etc/systemd/system/wazuh-dashboard.service is marked world-inaccessible. This has no effect as configuration data is accessible via APIs without restrictions. Proceeding anyway.
[root@wazuh-server ~]# systemctl status wazuh-dashboard.service -l
● wazuh-dashboard.service - wazuh-dashboard
Loaded: loaded (/etc/systemd/system/wazuh-dashboard.service; enabled; vendor preset: disabled)
Active: active (running) since Wed 2023-09-13 11:21:44 UTC; 2h 37min ago
Main PID: 2715 (node)
CGroup: /system.slice/wazuh-dashboard.service
└─2715 /usr/share/wazuh-dashboard/node/bin/node --no-warnings --max-http-header-size=65536 --unhandled-rejections=warn /usr/share/wazuh-dashboard/src/cli/dist -c /etc/wazuh-dashboard/opensearch_dashboards.yml
Sep 13 12:32:05 wazuh-server opensearch-dashboards[2715]: {"type":"response","@timestamp":"2023-09-13T12:32:05Z","tags":[],"pid":2715,"method":"get","statusCode":200,"req":{"url":"/hosts/apis","method":"get","headers":{"host":"172.31.46.154","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/116.0","accept":"application/json, text/plain, */*","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate, br","osd-xsrf":"kibana","pattern":"wazuh-alerts-*","id":"default","connection":"keep-alive","referer":"https://172.31.46.154/app/wazuh","sec-fetch-dest":"empty","sec-fetch-mode":"cors","sec-fetch-site":"same-origin"},"remoteAddress":"10.10.0.159","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/116.0","referer":"https://172.31.46.154/app/wazuh"},"res":{"statusCode":200,"responseTime":8,"contentLength":9},"message":"GET /hosts/apis 200 8ms - 9.0B"}
Sep 13 12:32:05 wazuh-server opensearch-dashboards[2715]: {"type":"response","@timestamp":"2023-09-13T12:32:05Z","tags":[],"pid":2715,"method":"get","statusCode":200,"req":{"url":"/utils/configuration","method":"get","headers":{"host":"172.31.46.154","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/116.0","accept":"application/json, text/plain, */*","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate, br","osd-xsrf":"kibana","pattern":"wazuh-alerts-*","id":"default","connection":"keep-alive","referer":"https://172.31.46.154/app/wazuh","sec-fetch-dest":"empty","sec-fetch-mode":"cors","sec-fetch-site":"same-origin"},"remoteAddress":"10.10.0.159","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/116.0","referer":"https://172.31.46.154/app/wazuh"},"res":{"statusCode":200,"responseTime":8,"contentLength":9},"message":"GET /utils/configuration 200 8ms - 9.0B"}
Sep 13 12:32:05 wazuh-server opensearch-dashboards[2715]: {"type":"response","@timestamp":"2023-09-13T12:32:05Z","tags":[],"pid":2715,"method":"post","statusCode":200,"req":{"url":"/api/request","method":"post","headers":{"host":"172.31.46.154","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/116.0","accept":"application/json, text/plain, */*","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate, br","content-type":"application/json","osd-xsrf":"kibana","content-length":"52","origin":"https://172.31.46.154","connection":"keep-alive","referer":"https://172.31.46.154/app/wazuh","sec-fetch-dest":"empty","sec-fetch-mode":"cors","sec-fetch-site":"same-origin"},"remoteAddress":"10.10.0.159","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/116.0","referer":"https://172.31.46.154/app/wazuh"},"res":{"statusCode":200,"responseTime":17,"contentLength":9},"message":"POST /api/request 200 17ms - 9.0B"}
Sep 13 12:32:05 wazuh-server opensearch-dashboards[2715]: {"type":"response","@timestamp":"2023-09-13T12:32:05Z","tags":[],"pid":2715,"method":"post","statusCode":200,"req":{"url":"/api/request","method":"post","headers":{"host":"172.31.46.154","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/116.0","accept":"application/json, text/plain, */*","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate, br","content-type":"application/json","osd-xsrf":"kibana","content-length":"73","origin":"https://172.31.46.154","connection":"keep-alive","referer":"https://172.31.46.154/app/wazuh","sec-fetch-dest":"empty","sec-fetch-mode":"cors","sec-fetch-site":"same-origin"},"remoteAddress":"10.10.0.159","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/116.0","referer":"https://172.31.46.154/app/wazuh"},"res":{"statusCode":200,"responseTime":22,"contentLength":9},"message":"POST /api/request 200 22ms - 9.0B"}
Sep 13 12:32:05 wazuh-server opensearch-dashboards[2715]: {"type":"response","@timestamp":"2023-09-13T12:32:05Z","tags":[],"pid":2715,"method":"post","statusCode":200,"req":{"url":"/api/request","method":"post","headers":{"host":"172.31.46.154","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/116.0","accept":"application/json, text/plain, */*","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate, br","content-type":"application/json","osd-xsrf":"kibana","content-length":"66","origin":"https://172.31.46.154","connection":"keep-alive","referer":"https://172.31.46.154/app/wazuh","sec-fetch-dest":"empty","sec-fetch-mode":"cors","sec-fetch-site":"same-origin"},"remoteAddress":"10.10.0.159","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/116.0","referer":"https://172.31.46.154/app/wazuh"},"res":{"statusCode":200,"responseTime":22,"contentLength":9},"message":"POST /api/request 200 22ms - 9.0B"}
Sep 13 12:32:06 wazuh-server opensearch-dashboards[2715]: {"type":"response","@timestamp":"2023-09-13T12:32:06Z","tags":[],"pid":2715,"method":"post","statusCode":200,"req":{"url":"/api/request","method":"post","headers":{"host":"172.31.46.154","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/116.0","accept":"application/json, text/plain, */*","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate, br","content-type":"application/json","osd-xsrf":"kibana","content-length":"70","origin":"https://172.31.46.154","connection":"keep-alive","referer":"https://172.31.46.154/app/wazuh","sec-fetch-dest":"empty","sec-fetch-mode":"cors","sec-fetch-site":"same-origin"},"remoteAddress":"10.10.0.159","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/116.0","referer":"https://172.31.46.154/app/wazuh"},"res":{"statusCode":200,"responseTime":19,"contentLength":9},"message":"POST /api/request 200 19ms - 9.0B"}
Sep 13 12:32:06 wazuh-server opensearch-dashboards[2715]: {"type":"response","@timestamp":"2023-09-13T12:32:06Z","tags":[],"pid":2715,"method":"post","statusCode":200,"req":{"url":"/api/request","method":"post","headers":{"host":"172.31.46.154","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/116.0","accept":"application/json, text/plain, */*","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate, br","content-type":"application/json","osd-xsrf":"kibana","content-length":"66","origin":"https://172.31.46.154","connection":"keep-alive","referer":"https://172.31.46.154/app/wazuh","sec-fetch-dest":"empty","sec-fetch-mode":"cors","sec-fetch-site":"same-origin"},"remoteAddress":"10.10.0.159","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/116.0","referer":"https://172.31.46.154/app/wazuh"},"res":{"statusCode":200,"responseTime":22,"contentLength":9},"message":"POST /api/request 200 22ms - 9.0B"}
Sep 13 12:32:06 wazuh-server opensearch-dashboards[2715]: {"type":"response","@timestamp":"2023-09-13T12:32:06Z","tags":[],"pid":2715,"method":"post","statusCode":200,"req":{"url":"/api/request","method":"post","headers":{"host":"172.31.46.154","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/116.0","accept":"application/json, text/plain, */*","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate, br","content-type":"application/json","osd-xsrf":"kibana","content-length":"88","origin":"https://172.31.46.154","connection":"keep-alive","referer":"https://172.31.46.154/app/wazuh","sec-fetch-dest":"empty","sec-fetch-mode":"cors","sec-fetch-site":"same-origin"},"remoteAddress":"10.10.0.159","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/116.0","referer":"https://172.31.46.154/app/wazuh"},"res":{"statusCode":200,"responseTime":20,"contentLength":9},"message":"POST /api/request 200 20ms - 9.0B"}
Sep 13 12:32:07 wazuh-server opensearch-dashboards[2715]: {"type":"response","@timestamp":"2023-09-13T12:32:07Z","tags":[],"pid":2715,"method":"post","statusCode":200,"req":{"url":"/api/request","method":"post","headers":{"host":"172.31.46.154","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/116.0","accept":"application/json, text/plain, */*","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate, br","content-type":"application/json","osd-xsrf":"kibana","content-length":"79","origin":"https://172.31.46.154","connection":"keep-alive","referer":"https://172.31.46.154/app/wazuh","sec-fetch-dest":"empty","sec-fetch-mode":"cors","sec-fetch-site":"same-origin"},"remoteAddress":"10.10.0.159","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/116.0","referer":"https://172.31.46.154/app/wazuh"},"res":{"statusCode":200,"responseTime":20,"contentLength":9},"message":"POST /api/request 200 20ms - 9.0B"}
Sep 13 12:32:07 wazuh-server opensearch-dashboards[2715]: {"type":"response","@timestamp":"2023-09-13T12:32:07Z","tags":[],"pid":2715,"method":"post","statusCode":200,"req":{"url":"/api/request","method":"post","headers":{"host":"172.31.46.154","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/116.0","accept":"application/json, text/plain, */*","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate, br","content-type":"application/json","osd-xsrf":"kibana","content-length":"58","origin":"https://172.31.46.154","connection":"keep-alive","referer":"https://172.31.46.154/app/wazuh","sec-fetch-dest":"empty","sec-fetch-mode":"cors","sec-fetch-site":"same-origin"},"remoteAddress":"10.10.0.159","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/116.0","referer":"https://172.31.46.154/app/wazuh"},"res":{"statusCode":200,"responseTime":22,"contentLength":9},"message":"POST /api/request 200 22ms - 9.0B"}
[root@wazuh-server ~]# journalctl | grep wazuh-indexer
Sep 12 19:02:12 wazuh-server systemd[1]: Configuration file /usr/lib/systemd/system/wazuh-indexer.service is marked world-inaccessible. This has no effect as configuration data is accessible via APIs without restrictions. Proceeding anyway.
Sep 12 19:03:11 wazuh-server systemd-entrypoint[3208]: WARNING: System::setSecurityManager has been called by org.opensearch.bootstrap.OpenSearch (file:/usr/share/wazuh-indexer/lib/opensearch-2.8.0.jar)
Sep 12 19:03:19 wazuh-server systemd-entrypoint[3208]: WARNING: System::setSecurityManager has been called by org.opensearch.bootstrap.Security (file:/usr/share/wazuh-indexer/lib/opensearch-2.8.0.jar)
Sep 12 19:03:19 wazuh-server systemd-entrypoint[3208]: 2023-09-12 19:03:19,223 main ERROR Could not define attribute view on path "/var/log/wazuh-indexer/wazuh-cluster_server.json" got access denied ("java.lang.RuntimePermission" "accessUserInformation") java.security.AccessControlException: access denied ("java.lang.RuntimePermission" "accessUserInformation")
Sep 12 19:03:19 wazuh-server systemd-entrypoint[3208]: 2023-09-12 19:03:19,230 main ERROR Could not define attribute view on path "/var/log/wazuh-indexer/wazuh-cluster.log" got access denied ("java.lang.RuntimePermission" "accessUserInformation") java.security.AccessControlException: access denied ("java.lang.RuntimePermission" "accessUserInformation")
Sep 12 19:04:48 wazuh-server systemd[1]: Configuration file /usr/lib/systemd/system/wazuh-indexer.service is marked world-inaccessible. This has no effect as configuration data is accessible via APIs without restrictions. Proceeding anyway.
Sep 12 19:04:49 wazuh-server systemd[1]: Configuration file /usr/lib/systemd/system/wazuh-indexer.service is marked world-inaccessible. This has no effect as configuration data is accessible via APIs without restrictions. Proceeding anyway.
Sep 12 19:44:30 wazuh-server systemd[1]: Configuration file /usr/lib/systemd/system/wazuh-indexer-performance-analyzer.service is marked world-inaccessible. This has no effect as configuration data is accessible via APIs without restrictions. Proceeding anyway.
Sep 12 19:44:31 wazuh-server systemd[1]: Configuration file /usr/lib/systemd/system/wazuh-indexer.service is marked world-inaccessible. This has no effect as configuration data is accessible via APIs without restrictions. Proceeding anyway.
Sep 12 19:44:31 wazuh-server systemd[1]: Configuration file /usr/lib/systemd/system/wazuh-indexer-performance-analyzer.service is marked world-inaccessible. This has no effect as configuration data is accessible via APIs without restrictions. Proceeding anyway.
Sep 12 19:44:31 wazuh-server systemd[1]: Configuration file /usr/lib/systemd/system/wazuh-indexer.service is marked world-inaccessible. This has no effect as configuration data is accessible via APIs without restrictions. Proceeding anyway.
Sep 12 19:44:32 wazuh-server systemd[1]: Configuration file /usr/lib/systemd/system/wazuh-indexer-performance-analyzer.service is marked world-inaccessible. This has no effect as configuration data is accessible via APIs without restrictions. Proceeding anyway.
Sep 12 19:44:32 wazuh-server systemd[1]: Configuration file /usr/lib/systemd/system/wazuh-indexer.service is marked world-inaccessible. This has no effect as configuration data is accessible via APIs without restrictions. Proceeding anyway.
Sep 13 11:21:43 wazuh-server systemd[1]: Configuration file /usr/lib/systemd/system/wazuh-indexer.service is marked world-inaccessible. This has no effect as configuration data is accessible via APIs without restrictions. Proceeding anyway.
Sep 13 11:21:52 wazuh-server systemd-entrypoint[3208]: WARNING: System::setSecurityManager has been called by org.opensearch.bootstrap.OpenSearch (file:/usr/share/wazuh-indexer/lib/opensearch-2.8.0.jar)
Sep 13 11:21:54 wazuh-server systemd-entrypoint[3208]: WARNING: System::setSecurityManager has been called by org.opensearch.bootstrap.Security (file:/usr/share/wazuh-indexer/lib/opensearch-2.8.0.jar)
Sep 13 11:21:54 wazuh-server systemd-entrypoint[3208]: 2023-09-13 11:21:54,477 main ERROR Could not define attribute view on path "/var/log/wazuh-indexer/wazuh-cluster_server.json" got access denied ("java.lang.RuntimePermission" "accessUserInformation") java.security.AccessControlException: access denied ("java.lang.RuntimePermission" "accessUserInformation")
Sep 13 11:21:54 wazuh-server systemd-entrypoint[3208]: 2023-09-13 11:21:54,498 main ERROR Could not define attribute view on path "/var/log/wazuh-indexer/wazuh-cluster.log" got access denied ("java.lang.RuntimePermission" "accessUserInformation") java.security.AccessControlException: access denied ("java.lang.RuntimePermission" "accessUserInformation")
I have created a new instance with the AMI (ami-0e3aa680272bebe7a) and I cannot reproduce the error, I have registered 7 different agents, I have navigated through different parts of the Wazuh dashboard interface and I cannot obtain the logs mentioned in the issue, I would need you to expand on how the actions were carried out. tests to try to replicate them:
[root@wazuh-server ~]# journalctl | grep wazuh-indexer
Sep 14 13:58:51 wazuh-server systemd[1]: Configuration file /usr/lib/systemd/system/wazuh-indexer.service is marked world-inaccessible. This has no effect as configuration data is accessible via APIs without restrictions. Proceeding anyway.
Sep 14 13:59:49 wazuh-server systemd-entrypoint[3216]: WARNING: System::setSecurityManager has been called by org.opensearch.bootstrap.OpenSearch (file:/usr/share/wazuh-indexer/lib/opensearch-2.8.0.jar)
Sep 14 14:00:06 wazuh-server systemd-entrypoint[3216]: WARNING: System::setSecurityManager has been called by org.opensearch.bootstrap.Security (file:/usr/share/wazuh-indexer/lib/opensearch-2.8.0.jar)
Sep 14 14:00:06 wazuh-server systemd-entrypoint[3216]: 2023-09-14 14:00:06,269 main ERROR Could not define attribute view on path "/var/log/wazuh-indexer/wazuh-cluster_server.json" got access denied ("java.lang.RuntimePermission" "accessUserInformation") java.security.AccessControlException: access denied ("java.lang.RuntimePermission" "accessUserInformation")
Sep 14 14:00:06 wazuh-server systemd-entrypoint[3216]: 2023-09-14 14:00:06,276 main ERROR Could not define attribute view on path "/var/log/wazuh-indexer/wazuh-cluster.log" got access denied ("java.lang.RuntimePermission" "accessUserInformation") java.security.AccessControlException: access denied ("java.lang.RuntimePermission" "accessUserInformation")
Sep 14 14:01:26 wazuh-server systemd[1]: Configuration file /usr/lib/systemd/system/wazuh-indexer.service is marked world-inaccessible. This has no effect as configuration data is accessible via APIs without restrictions. Proceeding anyway.
Sep 14 14:01:27 wazuh-server systemd[1]: Configuration file /usr/lib/systemd/system/wazuh-indexer.service is marked world-inaccessible. This has no effect as configuration data is accessible via APIs without restrictions. Proceeding anyway.
[root@wazuh-server ~]# journalctl | grep wazuh-dashboard
Sep 14 13:58:51 wazuh-server systemd[1]: Configuration file /etc/systemd/system/wazuh-dashboard.service is marked world-inaccessible. This has no effect as configuration data is accessible via APIs without restrictions. Proceeding anyway.
Sep 14 13:59:04 wazuh-server systemd[1]: Started wazuh-dashboard.
Sep 14 14:01:26 wazuh-server systemd[1]: Configuration file /etc/systemd/system/wazuh-dashboard.service is marked world-inaccessible. This has no effect as configuration data is accessible via APIs without restrictions. Proceeding anyway.
Sep 14 14:01:27 wazuh-server systemd[1]: Configuration file /etc/systemd/system/wazuh-dashboard.service is marked world-inaccessible. This has no effect as configuration data is accessible via APIs without restrictions. Proceeding anyway.
Sep 14 14:01:27 wazuh-server systemd[1]: Stopping wazuh-dashboard...
Sep 14 14:01:28 wazuh-server systemd[1]: Stopped wazuh-dashboard.
Sep 14 14:01:28 wazuh-server systemd[1]: Started wazuh-dashboard.
[root@wazuh-server ~]# ip add
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 9001 qdisc mq state UP group default qlen 1000
link/ether 0e:fe:7f:b7:01:b9 brd ff:ff:ff:ff:ff:ff
inet 172.31.34.210/20 brd 172.31.47.255 scope global dynamic eth0
valid_lft 2695sec preferred_lft 2695sec
inet6 fe80::cfe:7fff:feb7:1b9/64 scope link
valid_lft forever preferred_lft forever
@Deblintrake09 Was the Wazuh stack working correctly despite these errors?
@c-bordon The AMI behaved correctly. As it can be seen in the referenced issue in the original comment. This only was present on the AMI but not on the OVA, so we did not replicate it on our end.
We are reopening this issue since these logs have appeared again in the OVA and AMI in 4.8.0 RC 1, in https://github.com/wazuh/wazuh/issues/23261.
I tried to reproduce the errors presented in the issue but did not get them.
I got other errors and warnings, which I uploaded to the Wazuh indexer team in this issue, but they were all known errors which have already been fixed in future releases.
I ask if you can provide more information regarding the steps and tools you have used to obtain the errors.
Describe the bug
While doing testing on the
AMI
for Release 4.6.0 - Alpha 1, the logs for Wazuh Dashboard presented an unexpected error log:This log was not found when launching OVA instances. Further research is needed on this error:
LOGS: