wazuh / wazuh-packages

Wazuh - Tools for packages creation
https://wazuh.com
GNU General Public License v2.0
105 stars 96 forks source link

Unexpected Parse Error "Pause on PRI/Upgrade" in logs #2449

Closed Deblintrake09 closed 6 months ago

Deblintrake09 commented 1 year ago

Describe the bug

While doing testing on the AMI for Release 4.6.0 - Alpha 1, the logs for Wazuh Dashboard presented an unexpected error log:

sep 07 14:39:17 wazuh-server opensearch-dashboards[4460]: {"type":"error","@timestamp":"2023-09-07T14:39:17Z","tags":["connection","client","error"],"pid":4460,"level":"error","error":{"message":"Parse Error: Pause on PRI/Upgrade","name":"Error","stack":"Error: Parse Error: Pause on PRI/Upgrade","code":"HPE_PAUSED_H2_UPGRADE"},"message":"Parse Error: Pause on PRI/Upgrade"}

This log was not found when launching OVA instances. Further research is needed on this error:

LOGS:

sep 08 10:08:11 wazuh-server opensearch-dashboards[4460]: {"type":"error","@timestamp":"2023-09-08T10:08:11Z","tags":["connection","client","error"],"pid":4460,"level":"error","error":{"message":"139802304391104:error:14094418:SSL routines:ssl3_read_bytes:tlsv1 alert unknown ca:../deps/openssl/openssl/ssl/record/rec_layer_s3.c:1565:SSL alert number 48\n","name":"Error","stack":"Error: 139802304391104:error:14094418:SSL routines:ssl3_read_bytes:tlsv1 alert unknown ca:../deps/openssl/openssl/ssl/record/rec_layer_s3.c:1565:SSL alert number 48\n","code":"ERR_SSL_TLSV1_ALERT_UNKNOWN_CA"},"message":"139802304391104:error:14094418:SSL routines:ssl3_read_bytes:tlsv1 alert unknown ca:../deps/openssl/openssl/ssl/record/rec_layer_s3.c:1565:SSL alert number 48\n"}
 sep 08 09:49:53 wazuh-server opensearch-dashboards[4460]: {"type":"error","@timestamp":"2023-09-08T09:49:53Z","tags":["connection","client","error"],"pid":4460,"level":"error","error":{"message":"139802304391104:error:1420918C:SSL routines:tls_early_post_process_client_hello:version too low:../deps/openssl/openssl/ssl/statem/statem_srvr.c:1714:\n","name":"Error","stack":"Error: 139802304391104:error:1420918C:SSL routines:tls_early_post_process_client_hello:version too low:../deps/openssl/openssl/ssl/statem/statem_srvr.c:1714:\n","code":"ERR_SSL_VERSION_TOO_LOW"},"message":"139802304391104:error:1420918C:SSL routines:tls_early_post_process_client_hello:version too low:../deps/openssl/openssl/ssl/statem/statem_srvr.c:1714:\n"}
 sep 08 09:29:36 wazuh-server opensearch-dashboards[4460]: {"type":"error","@timestamp":"2023-09-08T09:29:36Z","tags":["connection","client","error"],"pid":4460,"level":"error","error":{"message":"139802304391104:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:../deps/openssl/openssl/ssl/record/ssl3_record.c:332:\n","name":"Error","stack":"Error: 139802304391104:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:../deps/openssl/openssl/ssl/record/ssl3_record.c:332:\n","code":"ERR_SSL_WRONG_VERSION_NUMBER"},"message":"139802304391104:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:../deps/openssl/openssl/ssl/record/ssl3_record.c:332:\n"}
 sep 08 09:29:35 wazuh-server opensearch-dashboards[4460]: {"type":"error","@timestamp":"2023-09-08T09:29:35Z","tags":["connection","client","error"],"pid":4460,"level":"error","error":{"message":"139802304391104:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:../deps/openssl/openssl/ssl/record/ssl3_record.c:332:\n","name":"Error","stack":"Error: 139802304391104:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:../deps/openssl/openssl/ssl/record/ssl3_record.c:332:\n","code":"ERR_SSL_WRONG_VERSION_NUMBER"},"message":"139802304391104:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:../deps/openssl/openssl/ssl/record/ssl3_record.c:332:\n"}
 sep 08 09:29:35 wazuh-server opensearch-dashboards[4460]: {"type":"error","@timestamp":"2023-09-08T09:29:35Z","tags":["connection","client","error"],"pid":4460,"level":"error","error":{"message":"139802304391104:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:../deps/openssl/openssl/ssl/record/ssl3_record.c:332:\n","name":"Error","stack":"Error: 139802304391104:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:../deps/openssl/openssl/ssl/record/ssl3_record.c:332:\n","code":"ERR_SSL_WRONG_VERSION_NUMBER"},"message":"139802304391104:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:../deps/openssl/openssl/ssl/record/ssl3_record.c:332:\n"}
 sep 08 09:29:35 wazuh-server opensearch-dashboards[4460]: {"type":"error","@timestamp":"2023-09-08T09:29:35Z","tags":["connection","client","error"],"pid":4460,"level":"error","error":{"message":"139802304391104:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:../deps/openssl/openssl/ssl/record/ssl3_record.c:332:\n","name":"Error","stack":"Error: 139802304391104:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:../deps/openssl/openssl/ssl/record/ssl3_record.c:332:\n","code":"ERR_SSL_WRONG_VERSION_NUMBER"},"message":"139802304391104:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:../deps/openssl/openssl/ssl/record/ssl3_record.c:332:\n"}
 sep 08 09:29:35 wazuh-server opensearch-dashboards[4460]: {"type":"error","@timestamp":"2023-09-08T09:29:35Z","tags":["connection","client","error"],"pid":4460,"level":"error","error":{"message":"139802304391104:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:../deps/openssl/openssl/ssl/record/ssl3_record.c:332:\n","name":"Error","stack":"Error: 139802304391104:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:../deps/openssl/openssl/ssl/record/ssl3_record.c:332:\n","code":"ERR_SSL_WRONG_VERSION_NUMBER"},"message":"139802304391104:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:../deps/openssl/openssl/ssl/record/ssl3_record.c:332:\n"}
 sep 08 09:29:35 wazuh-server opensearch-dashboards[4460]: {"type":"error","@timestamp":"2023-09-08T09:29:35Z","tags":["connection","client","error"],"pid":4460,"level":"error","error":{"message":"139802304391104:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:../deps/openssl/openssl/ssl/record/ssl3_record.c:332:\n","name":"Error","stack":"Error: 139802304391104:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:../deps/openssl/openssl/ssl/record/ssl3_record.c:332:\n","code":"ERR_SSL_WRONG_VERSION_NUMBER"},"message":"139802304391104:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:../deps/openssl/openssl/ssl/record/ssl3_record.c:332:\n"}
 sep 08 08:49:18 wazuh-server opensearch-dashboards[4460]: {"type":"error","@timestamp":"2023-09-08T08:49:18Z","tags":["connection","client","error"],"pid":4460,"level":"error","error":{"message":"Parse Error: Pause on PRI/Upgrade","name":"Error","stack":"Error: Parse Error: Pause on PRI/Upgrade","code":"HPE_PAUSED_H2_UPGRADE"},"message":"Parse Error: Pause on PRI/Upgrade"}
 sep 08 08:49:18 wazuh-server opensearch-dashboards[4460]: {"type":"error","@timestamp":"2023-09-08T08:49:18Z","tags":["connection","client","error"],"pid":4460,"level":"error","error":{"message":"Parse Error: Pause on PRI/Upgrade","name":"Error","stack":"Error: Parse Error: Pause on PRI/Upgrade","code":"HPE_PAUSED_H2_UPGRADE"},"message":"Parse Error: Pause on PRI/Upgrade"}
 sep 08 08:49:17 wazuh-server opensearch-dashboards[4460]: {"type":"error","@timestamp":"2023-09-08T08:49:17Z","tags":["connection","client","error"],"pid":4460,"level":"error","error":{"message":"Parse Error: Pause on PRI/Upgrade","name":"Error","stack":"Error: Parse Error: Pause on PRI/Upgrade","code":"HPE_PAUSED_H2_UPGRADE"},"message":"Parse Error: Pause on PRI/Upgrade"}
 sep 08 08:49:17 wazuh-server opensearch-dashboards[4460]: {"type":"error","@timestamp":"2023-09-08T08:49:17Z","tags":["connection","client","error"],"pid":4460,"level":"error","error":{"message":"Parse Error: Pause on PRI/Upgrade","name":"Error","stack":"Error: Parse Error: Pause on PRI/Upgrade","code":"HPE_PAUSED_H2_UPGRADE"},"message":"Parse Error: Pause on PRI/Upgrade"}
 sep 08 08:01:18 wazuh-server opensearch-dashboards[4460]: {"type":"error","@timestamp":"2023-09-08T08:01:18Z","tags":["connection","client","error"],"pid":4460,"level":"error","error":{"message":"Parse Error: Pause on PRI/Upgrade","name":"Error","stack":"Error: Parse Error: Pause on PRI/Upgrade","code":"HPE_PAUSED_H2_UPGRADE"},"message":"Parse Error: Pause on PRI/Upgrade"}
 sep 08 08:01:17 wazuh-server opensearch-dashboards[4460]: {"type":"error","@timestamp":"2023-09-08T08:01:17Z","tags":["connection","client","error"],"pid":4460,"level":"error","error":{"message":"Parse Error: Pause on PRI/Upgrade","name":"Error","stack":"Error: Parse Error: Pause on PRI/Upgrade","code":"HPE_PAUSED_H2_UPGRADE"},"message":"Parse Error: Pause on PRI/Upgrade"}
 sep 08 07:44:59 wazuh-server opensearch-dashboards[4460]: {"type":"error","@timestamp":"2023-09-08T07:44:59Z","tags":["connection","client","error"],"pid":4460,"level":"error","error":{"message":"139802304391104:error:14209102:SSL routines:tls_early_post_process_client_hello:unsupported protocol:../deps/openssl/openssl/ssl/statem/statem_srvr.c:1714:\n","name":"Error","stack":"Error: 139802304391104:error:14209102:SSL routines:tls_early_post_process_client_hello:unsupported protocol:../deps/openssl/openssl/ssl/statem/statem_srvr.c:1714:\n","code":"ERR_SSL_UNSUPPORTED_PROTOCOL"},"message":"139802304391104:error:14209102:SSL routines:tls_early_post_process_client_hello:unsupported protocol:../deps/openssl/openssl/ssl/statem/statem_srvr.c:1714:\n"}
 sep 08 07:44:59 wazuh-server opensearch-dashboards[4460]: {"type":"error","@timestamp":"2023-09-08T07:44:59Z","tags":["connection","client","error"],"pid":4460,"level":"error","error":{"message":"139802304391104:error:14209102:SSL routines:tls_early_post_process_client_hello:unsupported protocol:../deps/openssl/openssl/ssl/statem/statem_srvr.c:1714:\n","name":"Error","stack":"Error: 139802304391104:error:14209102:SSL routines:tls_early_post_process_client_hello:unsupported protocol:../deps/openssl/openssl/ssl/statem/statem_srvr.c:1714:\n","code":"ERR_SSL_UNSUPPORTED_PROTOCOL"},"message":"139802304391104:error:14209102:SSL routines:tls_early_post_process_client_hello:unsupported protocol:../deps/openssl/openssl/ssl/statem/statem_srvr.c:1714:\n"}
 sep 08 07:44:59 wazuh-server opensearch-dashboards[4460]: {"type":"error","@timestamp":"2023-09-08T07:44:59Z","tags":["connection","client","error"],"pid":4460,"level":"error","error":{"message":"139802304391104:error:1420918C:SSL routines:tls_early_post_process_client_hello:version too low:../deps/openssl/openssl/ssl/statem/statem_srvr.c:1714:\n","name":"Error","stack":"Error: 139802304391104:error:1420918C:SSL routines:tls_early_post_process_client_hello:version too low:../deps/openssl/openssl/ssl/statem/statem_srvr.c:1714:\n","code":"ERR_SSL_VERSION_TOO_LOW"},"message":"139802304391104:error:1420918C:SSL routines:tls_early_post_process_client_hello:version too low:../deps/openssl/openssl/ssl/statem/statem_srvr.c:1714:\n"}
 sep 08 06:05:42 wazuh-server opensearch-dashboards[4460]: {"type":"error","@timestamp":"2023-09-08T06:05:42Z","tags":["connection","client","error"],"pid":4460,"level":"error","error":{"message":"Parse Error: Pause on PRI/Upgrade","name":"Error","stack":"Error: Parse Error: Pause on PRI/Upgrade","code":"HPE_PAUSED_H2_UPGRADE"},"message":"Parse Error: Pause on PRI/Upgrade"}
 sep 08 06:05:42 wazuh-server opensearch-dashboards[4460]: {"type":"error","@timestamp":"2023-09-08T06:05:42Z","tags":["connection","client","error"],"pid":4460,"level":"error","error":{"message":"Parse Error: Pause on PRI/Upgrade","name":"Error","stack":"Error: Parse Error: Pause on PRI/Upgrade","code":"HPE_PAUSED_H2_UPGRADE"},"message":"Parse Error: Pause on PRI/Upgrade"}
 sep 08 06:05:41 wazuh-server opensearch-dashboards[4460]: {"type":"error","@timestamp":"2023-09-08T06:05:41Z","tags":["connection","client","error"],"pid":4460,"level":"error","error":{"message":"Parse Error: Pause on PRI/Upgrade","name":"Error","stack":"Error: Parse Error: Pause on PRI/Upgrade","code":"HPE_PAUSED_H2_UPGRADE"},"message":"Parse Error: Pause on PRI/Upgrade"}
 sep 08 06:05:41 wazuh-server opensearch-dashboards[4460]: {"type":"error","@timestamp":"2023-09-08T06:05:41Z","tags":["connection","client","error"],"pid":4460,"level":"error","error":{"message":"Parse Error: Pause on PRI/Upgrade","name":"Error","stack":"Error: Parse Error: Pause on PRI/Upgrade","code":"HPE_PAUSED_H2_UPGRADE"},"message":"Parse Error: Pause on PRI/Upgrade"}
 sep 08 06:02:56 wazuh-server opensearch-dashboards[4460]: {"type":"error","@timestamp":"2023-09-08T06:02:56Z","tags":["connection","client","error"],"pid":4460,"level":"error","error":{"message":"139802304391104:error:141CF06C:SSL routines:tls_parse_ctos_key_share:bad key share:../deps/openssl/openssl/ssl/statem/extensions_srvr.c:698:\n","name":"Error","stack":"Error: 139802304391104:error:141CF06C:SSL routines:tls_parse_ctos_key_share:bad key share:../deps/openssl/openssl/ssl/statem/extensions_srvr.c:698:\n","code":"ERR_SSL_BAD_KEY_SHARE"},"message":"139802304391104:error:141CF06C:SSL routines:tls_parse_ctos_key_share:bad key share:../deps/openssl/openssl/ssl/statem/extensions_srvr.c:698:\n"}
 sep 08 06:02:23 wazuh-server opensearch-dashboards[4460]: {"type":"error","@timestamp":"2023-09-08T06:02:23Z","tags":["connection","client","error"],"pid":4460,"level":"error","error":{"message":"139802304391104:error:142090C1:SSL routines:tls_early_post_process_client_hello:no shared cipher:../deps/openssl/openssl/ssl/statem/statem_srvr.c:1809:\n","name":"Error","stack":"Error: 139802304391104:error:142090C1:SSL routines:tls_early_post_process_client_hello:no shared cipher:../deps/openssl/openssl/ssl/statem/statem_srvr.c:1809:\n","code":"ERR_SSL_NO_SHARED_CIPHER"},"message":"139802304391104:error:142090C1:SSL routines:tls_early_post_process_client_hello:no shared cipher:../deps/openssl/openssl/ssl/statem/statem_srvr.c:1809:\n"}
 sep 08 06:00:43 wazuh-server opensearch-dashboards[4460]: {"type":"error","@timestamp":"2023-09-08T06:00:43Z","tags":["connection","client","error"],"pid":4460,"level":"error","error":{"message":"139802304391104:error:14209102:SSL routines:tls_early_post_process_client_hello:unsupported protocol:../deps/openssl/openssl/ssl/statem/statem_srvr.c:1714:\n","name":"Error","stack":"Error: 139802304391104:error:14209102:SSL routines:tls_early_post_process_client_hello:unsupported protocol:../deps/openssl/openssl/ssl/statem/statem_srvr.c:1714:\n","code":"ERR_SSL_UNSUPPORTED_PROTOCOL"},"message":"139802304391104:error:14209102:SSL routines:tls_early_post_process_client_hello:unsupported protocol:../deps/openssl/openssl/ssl/statem/statem_srvr.c:1714:\n"}
 sep 08 05:59:04 wazuh-server opensearch-dashboards[4460]: {"type":"error","@timestamp":"2023-09-08T05:59:04Z","tags":["connection","client","error"],"pid":4460,"level":"error","error":{"message":"139802304391104:error:1417A0C1:SSL routines:tls_post_process_client_hello:no shared cipher:../deps/openssl/openssl/ssl/statem/statem_srvr.c:2313:\n","name":"Error","stack":"Error: 139802304391104:error:1417A0C1:SSL routines:tls_post_process_client_hello:no shared cipher:../deps/openssl/openssl/ssl/statem/statem_srvr.c:2313:\n","code":"ERR_SSL_NO_SHARED_CIPHER"},"message":"139802304391104:error:1417A0C1:SSL routines:tls_post_process_client_hello:no shared cipher:../deps/openssl/openssl/ssl/statem/statem_srvr.c:2313:\n"}
 sep 08 05:23:19 wazuh-server opensearch-dashboards[4460]: {"type":"error","@timestamp":"2023-09-08T05:23:19Z","tags":["connection","client","error"],"pid":4460,"level":"error","error":{"message":"TLS handshake timeout","name":"Error","stack":"Error: TLS handshake timeout\n    at new NodeError (node:internal/errors:387:5)\n    at TLSSocket._handleTimeout (node:_tls_wrap:903:22)\n    at Object.onceWrapper (node:events:627:28)\n    at TLSSocket.emit (node:events:513:28)\n    at TLSSocket.emit (node:domain:489:12)\n    at TLSSocket.Socket._onTimeout (node:net:550:8)\n    at listOnTimeout (node:internal/timers:559:17)\n    at processTimers (node:internal/timers:502:7)","code":"ERR_TLS_HANDSHAKE_TIMEOUT"},"message":"TLS handshake timeout"}
 sep 08 05:23:03 wazuh-server opensearch-dashboards[4460]: {"type":"error","@timestamp":"2023-09-08T05:23:03Z","tags":["connection","client","error"],"pid":4460,"level":"error","error":{"message":"TLS handshake timeout","name":"Error","stack":"Error: TLS handshake timeout\n    at new NodeError (node:internal/errors:387:5)\n    at TLSSocket._handleTimeout (node:_tls_wrap:903:22)\n    at Object.onceWrapper (node:events:627:28)\n    at TLSSocket.emit (node:events:513:28)\n    at TLSSocket.emit (node:domain:489:12)\n    at TLSSocket.Socket._onTimeout (node:net:550:8)\n    at listOnTimeout (node:internal/timers:559:17)\n    at processTimers (node:internal/timers:502:7)","code":"ERR_TLS_HANDSHAKE_TIMEOUT"},"message":"TLS handshake timeout"}
 sep 08 05:22:49 wazuh-server opensearch-dashboards[4460]: {"type":"error","@timestamp":"2023-09-08T05:22:49Z","tags":["connection","client","error"],"pid":4460,"level":"error","error":{"message":"TLS handshake timeout","name":"Error","stack":"Error: TLS handshake timeout\n    at new NodeError (node:internal/errors:387:5)\n    at TLSSocket._handleTimeout (node:_tls_wrap:903:22)\n    at Object.onceWrapper (node:events:627:28)\n    at TLSSocket.emit (node:events:513:28)\n    at TLSSocket.emit (node:domain:489:12)\n    at TLSSocket.Socket._onTimeout (node:net:550:8)\n    at listOnTimeout (node:internal/timers:559:17)\n    at processTimers (node:internal/timers:502:7)","code":"ERR_TLS_HANDSHAKE_TIMEOUT"},"message":"TLS handshake timeout"}
 sep 08 05:21:27 wazuh-server opensearch-dashboards[4460]: {"type":"error","@timestamp":"2023-09-08T05:21:27Z","tags":["connection","client","error"],"pid":4460,"level":"error","error":{"message":"139802304391104:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:../deps/openssl/openssl/ssl/record/ssl3_record.c:332:\n","name":"Error","stack":"Error: 139802304391104:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:../deps/openssl/openssl/ssl/record/ssl3_record.c:332:\n","code":"ERR_SSL_WRONG_VERSION_NUMBER"},"message":"139802304391104:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:../deps/openssl/openssl/ssl/record/ssl3_record.c:332:\n"}
 sep 08 03:57:11 wazuh-server opensearch-dashboards[4460]: {"type":"error","@timestamp":"2023-09-08T03:57:11Z","tags":["connection","client","error"],"pid":4460,"level":"error","error":{"message":"Parse Error: Pause on PRI/Upgrade","name":"Error","stack":"Error: Parse Error: Pause on PRI/Upgrade","code":"HPE_PAUSED_H2_UPGRADE"},"message":"Parse Error: Pause on PRI/Upgrade"}
 sep 08 03:57:11 wazuh-server opensearch-dashboards[4460]: {"type":"error","@timestamp":"2023-09-08T03:57:11Z","tags":["connection","client","error"],"pid":4460,"level":"error","error":{"message":"Parse Error: Pause on PRI/Upgrade","name":"Error","stack":"Error: Parse Error: Pause on PRI/Upgrade","code":"HPE_PAUSED_H2_UPGRADE"},"message":"Parse Error: Pause on PRI/Upgrade"}
 sep 08 03:57:11 wazuh-server opensearch-dashboards[4460]: {"type":"error","@timestamp":"2023-09-08T03:57:11Z","tags":["connection","client","error"],"pid":4460,"level":"error","error":{"message":"Parse Error: Pause on PRI/Upgrade","name":"Error","stack":"Error: Parse Error: Pause on PRI/Upgrade","code":"HPE_PAUSED_H2_UPGRADE"},"message":"Parse Error: Pause on PRI/Upgrade"}
 sep 08 03:57:11 wazuh-server opensearch-dashboards[4460]: {"type":"error","@timestamp":"2023-09-08T03:57:11Z","tags":["connection","client","error"],"pid":4460,"level":"error","error":{"message":"Parse Error: Pause on PRI/Upgrade","name":"Error","stack":"Error: Parse Error: Pause on PRI/Upgrade","code":"HPE_PAUSED_H2_UPGRADE"},"message":"Parse Error: Pause on PRI/Upgrade"}
 sep 08 03:31:10 wazuh-server opensearch-dashboards[4460]: {"type":"error","@timestamp":"2023-09-08T03:31:10Z","tags":["connection","client","error"],"pid":4460,"level":"error","error":{"message":"139802304391104:error:142090FC:SSL routines:tls_early_post_process_client_hello:unknown protocol:../deps/openssl/openssl/ssl/statem/statem_srvr.c:1689:\n","name":"Error","stack":"Error: 139802304391104:error:142090FC:SSL routines:tls_early_post_process_client_hello:unknown protocol:../deps/openssl/openssl/ssl/statem/statem_srvr.c:1689:\n","code":"ERR_SSL_UNKNOWN_PROTOCOL"},"message":"139802304391104:error:142090FC:SSL routines:tls_early_post_process_client_hello:unknown protocol:../deps/openssl/openssl/ssl/statem/statem_srvr.c:1689:\n"}
 sep 08 03:31:10 wazuh-server opensearch-dashboards[4460]: {"type":"error","@timestamp":"2023-09-08T03:31:10Z","tags":["connection","client","error"],"pid":4460,"level":"error","error":{"message":"139802304391104:error:1420918C:SSL routines:tls_early_post_process_client_hello:version too low:../deps/openssl/openssl/ssl/statem/statem_srvr.c:1714:\n","name":"Error","stack":"Error: 139802304391104:error:1420918C:SSL routines:tls_early_post_process_client_hello:version too low:../deps/openssl/openssl/ssl/statem/statem_srvr.c:1714:\n","code":"ERR_SSL_VERSION_TOO_LOW"},"message":"139802304391104:error:1420918C:SSL routines:tls_early_post_process_client_hello:version too low:../deps/openssl/openssl/ssl/statem/statem_srvr.c:1714:\n"}
 sep 08 03:31:10 wazuh-server opensearch-dashboards[4460]: {"type":"error","@timestamp":"2023-09-08T03:31:10Z","tags":["connection","client","error"],"pid":4460,"level":"error","error":{"message":"139802304391104:error:14209102:SSL routines:tls_early_post_process_client_hello:unsupported protocol:../deps/openssl/openssl/ssl/statem/statem_srvr.c:1714:\n","name":"Error","stack":"Error: 139802304391104:error:14209102:SSL routines:tls_early_post_process_client_hello:unsupported protocol:../deps/openssl/openssl/ssl/statem/statem_srvr.c:1714:\n","code":"ERR_SSL_UNSUPPORTED_PROTOCOL"},"message":"139802304391104:error:14209102:SSL routines:tls_early_post_process_client_hello:unsupported protocol:../deps/openssl/openssl/ssl/statem/statem_srvr.c:1714:\n"}
 sep 08 03:31:10 wazuh-server opensearch-dashboards[4460]: {"type":"error","@timestamp":"2023-09-08T03:31:10Z","tags":["connection","client","error"],"pid":4460,"level":"error","error":{"message":"139802304391104:error:14209102:SSL routines:tls_early_post_process_client_hello:unsupported protocol:../deps/openssl/openssl/ssl/statem/statem_srvr.c:1714:\n","name":"Error","stack":"Error: 139802304391104:error:14209102:SSL routines:tls_early_post_process_client_hello:unsupported protocol:../deps/openssl/openssl/ssl/statem/statem_srvr.c:1714:\n","code":"ERR_SSL_UNSUPPORTED_PROTOCOL"},"message":"139802304391104:error:14209102:SSL routines:tls_early_post_process_client_hello:unsupported protocol:../deps/openssl/openssl/ssl/statem/statem_srvr.c:1714:\n"}
 sep 08 03:31:10 wazuh-server opensearch-dashboards[4460]: {"type":"error","@timestamp":"2023-09-08T03:31:10Z","tags":["connection","client","error"],"pid":4460,"level":"error","error":{"message":"139802304391104:error:1417A0C1:SSL routines:tls_post_process_client_hello:no shared cipher:../deps/openssl/openssl/ssl/statem/statem_srvr.c:2313:\n","name":"Error","stack":"Error: 139802304391104:error:1417A0C1:SSL routines:tls_post_process_client_hello:no shared cipher:../deps/openssl/openssl/ssl/statem/statem_srvr.c:2313:\n","code":"ERR_SSL_NO_SHARED_CIPHER"},"message":"139802304391104:error:1417A0C1:SSL routines:tls_post_process_client_hello:no shared cipher:../deps/openssl/openssl/ssl/statem/statem_srvr.c:2313:\n"}
 sep 08 03:26:01 wazuh-server opensearch-dashboards[4460]: {"type":"error","@timestamp":"2023-09-08T03:26:01Z","tags":["connection","client","error"],"pid":4460,"level":"error","error":{"message":"139802304391104:error:14209102:SSL routines:tls_early_post_process_client_hello:unsupported protocol:../deps/openssl/openssl/ssl/statem/statem_srvr.c:1714:\n","name":"Error","stack":"Error: 139802304391104:error:14209102:SSL routines:tls_early_post_process_client_hello:unsupported protocol:../deps/openssl/openssl/ssl/statem/statem_srvr.c:1714:\n","code":"ERR_SSL_UNSUPPORTED_PROTOCOL"},"message":"139802304391104:error:14209102:SSL routines:tls_early_post_process_client_hello:unsupported protocol:../deps/openssl/openssl/ssl/statem/statem_srvr.c:1714:\n"}
 sep 08 02:52:45 wazuh-server opensearch-dashboards[4460]: {"type":"error","@timestamp":"2023-09-08T02:52:45Z","tags":["connection","client","error"],"pid":4460,"level":"error","error":{"message":"139802304391104:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:../deps/openssl/openssl/ssl/record/ssl3_record.c:332:\n","name":"Error","stack":"Error: 139802304391104:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:../deps/openssl/openssl/ssl/record/ssl3_record.c:332:\n","code":"ERR_SSL_WRONG_VERSION_NUMBER"},"message":"139802304391104:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:../deps/openssl/openssl/ssl/record/ssl3_record.c:332:\n"}
 sep 08 02:52:45 wazuh-server opensearch-dashboards[4460]: {"type":"error","@timestamp":"2023-09-08T02:52:45Z","tags":["connection","client","error"],"pid":4460,"level":"error","error":{"message":"139802304391104:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:../deps/openssl/openssl/ssl/record/ssl3_record.c:332:\n","name":"Error","stack":"Error: 139802304391104:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:../deps/openssl/openssl/ssl/record/ssl3_record.c:332:\n","code":"ERR_SSL_WRONG_VERSION_NUMBER"},"message":"139802304391104:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:../deps/openssl/openssl/ssl/record/ssl3_record.c:332:\n"}
 sep 08 02:52:45 wazuh-server opensearch-dashboards[4460]: {"type":"error","@timestamp":"2023-09-08T02:52:45Z","tags":["connection","client","error"],"pid":4460,"level":"error","error":{"message":"139802304391104:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:../deps/openssl/openssl/ssl/record/ssl3_record.c:332:\n","name":"Error","stack":"Error: 139802304391104:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:../deps/openssl/openssl/ssl/record/ssl3_record.c:332:\n","code":"ERR_SSL_WRONG_VERSION_NUMBER"},"message":"139802304391104:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:../deps/openssl/openssl/ssl/record/ssl3_record.c:332:\n"}
 sep 08 02:52:45 wazuh-server opensearch-dashboards[4460]: {"type":"error","@timestamp":"2023-09-08T02:52:45Z","tags":["connection","client","error"],"pid":4460,"level":"error","error":{"message":"139802304391104:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:../deps/openssl/openssl/ssl/record/ssl3_record.c:332:\n","name":"Error","stack":"Error: 139802304391104:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:../deps/openssl/openssl/ssl/record/ssl3_record.c:332:\n","code":"ERR_SSL_WRONG_VERSION_NUMBER"},"message":"139802304391104:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:../deps/openssl/openssl/ssl/record/ssl3_record.c:332:\n"}
 sep 08 02:52:45 wazuh-server opensearch-dashboards[4460]: {"type":"error","@timestamp":"2023-09-08T02:52:45Z","tags":["connection","client","error"],"pid":4460,"level":"error","error":{"message":"139802304391104:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:../deps/openssl/openssl/ssl/record/ssl3_record.c:332:\n","name":"Error","stack":"Error: 139802304391104:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:../deps/openssl/openssl/ssl/record/ssl3_record.c:332:\n","code":"ERR_SSL_WRONG_VERSION_NUMBER"},"message":"139802304391104:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:../deps/openssl/openssl/ssl/record/ssl3_record.c:332:\n"}
 sep 08 02:52:45 wazuh-server opensearch-dashboards[4460]: {"type":"error","@timestamp":"2023-09-08T02:52:45Z","tags":["connection","client","error"],"pid":4460,"level":"error","error":{"message":"139802304391104:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:../deps/openssl/openssl/ssl/record/ssl3_record.c:332:\n","name":"Error","stack":"Error: 139802304391104:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:../deps/openssl/openssl/ssl/record/ssl3_record.c:332:\n","code":"ERR_SSL_WRONG_VERSION_NUMBER"},"message":"139802304391104:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:../deps/openssl/openssl/ssl/record/ssl3_record.c:332:\n"}
 sep 08 02:47:31 wazuh-server opensearch-dashboards[4460]: {"type":"error","@timestamp":"2023-09-08T02:47:31Z","tags":["connection","client","error"],"pid":4460,"level":"error","error":{"message":"139802304391104:error:1417A0C1:SSL routines:tls_post_process_client_hello:no shared cipher:../deps/openssl/openssl/ssl/statem/statem_srvr.c:2313:\n","name":"Error","stack":"Error: 139802304391104:error:1417A0C1:SSL routines:tls_post_process_client_hello:no shared cipher:../deps/openssl/openssl/ssl/statem/statem_srvr.c:2313:\n","code":"ERR_SSL_NO_SHARED_CIPHER"},"message":"139802304391104:error:1417A0C1:SSL routines:tls_post_process_client_hello:no shared cipher:../deps/openssl/openssl/ssl/statem/statem_srvr.c:2313:\n"}
 sep 08 02:47:31 wazuh-server opensearch-dashboards[4460]: {"type":"error","@timestamp":"2023-09-08T02:47:31Z","tags":["connection","client","error"],"pid":4460,"level":"error","error":{"message":"139802304391104:error:1417A0C1:SSL routines:tls_post_process_client_hello:no shared cipher:../deps/openssl/openssl/ssl/statem/statem_srvr.c:2313:\n","name":"Error","stack":"Error: 139802304391104:error:1417A0C1:SSL routines:tls_post_process_client_hello:no shared cipher:../deps/openssl/openssl/ssl/statem/statem_srvr.c:2313:\n","code":"ERR_SSL_NO_SHARED_CIPHER"},"message":"139802304391104:error:1417A0C1:SSL routines:tls_post_process_client_hello:no shared cipher:../deps/openssl/openssl/ssl/statem/statem_srvr.c:2313:\n"}
 sep 08 02:47:27 wazuh-server opensearch-dashboards[4460]: {"type":"error","@timestamp":"2023-09-08T02:47:27Z","tags":["connection","client","error"],"pid":4460,"level":"error","error":{"message":"139802304391104:error:140940F5:SSL routines:ssl3_read_bytes:unexpected record:../deps/openssl/openssl/ssl/record/rec_layer_s3.c:1725:\n","name":"Error","stack":"Error: 139802304391104:error:140940F5:SSL routines:ssl3_read_bytes:unexpected record:../deps/openssl/openssl/ssl/record/rec_layer_s3.c:1725:\n","code":"ERR_SSL_UNEXPECTED_RECORD"},"message":"139802304391104:error:140940F5:SSL routines:ssl3_read_bytes:unexpected record:../deps/openssl/openssl/ssl/record/rec_layer_s3.c:1725:\n"}
 sep 08 02:47:26 wazuh-server opensearch-dashboards[4460]: {"type":"error","@timestamp":"2023-09-08T02:47:26Z","tags":["connection","client","error"],"pid":4460,"level":"error","error":{"message":"139802304391104:error:14209102:SSL routines:tls_early_post_process_client_hello:unsupported protocol:../deps/openssl/openssl/ssl/statem/statem_srvr.c:1714:\n","name":"Error","stack":"Error: 139802304391104:error:14209102:SSL routines:tls_early_post_process_client_hello:unsupported protocol:../deps/openssl/openssl/ssl/statem/statem_srvr.c:1714:\n","code":"ERR_SSL_UNSUPPORTED_PROTOCOL"},"message":"139802304391104:error:14209102:SSL routines:tls_early_post_process_client_hello:unsupported protocol:../deps/openssl/openssl/ssl/statem/statem_srvr.c:1714:\n"}
 sep 08 02:47:26 wazuh-server opensearch-dashboards[4460]: {"type":"error","@timestamp":"2023-09-08T02:47:26Z","tags":["connection","client","error"],"pid":4460,"level":"error","error":{"message":"139802304391104:error:1420918C:SSL routines:tls_early_post_process_client_hello:version too low:../deps/openssl/openssl/ssl/statem/statem_srvr.c:1714:\n","name":"Error","stack":"Error: 139802304391104:error:1420918C:SSL routines:tls_early_post_process_client_hello:version too low:../deps/openssl/openssl/ssl/statem/statem_srvr.c:1714:\n","code":"ERR_SSL_VERSION_TOO_LOW"},"message":"139802304391104:error:1420918C:SSL routines:tls_early_post_process_client_hello:version too low:../deps/openssl/openssl/ssl/statem/statem_srvr.c:1714:\n"}
 sep 08 02:47:26 wazuh-server opensearch-dashboards[4460]: {"type":"error","@timestamp":"2023-09-08T02:47:26Z","tags":["connection","client","error"],"pid":4460,"level":"error","error":{"message":"139802304391104:error:142090FC:SSL routines:tls_early_post_process_client_hello:unknown protocol:../deps/openssl/openssl/ssl/statem/statem_srvr.c:1689:\n","name":"Error","stack":"Error: 139802304391104:error:142090FC:SSL routines:tls_early_post_process_client_hello:unknown protocol:../deps/openssl/openssl/ssl/statem/statem_srvr.c:1689:\n","code":"ERR_SSL_UNKNOWN_PROTOCOL"},"message":"139802304391104:error:142090FC:SSL routines:tls_early_post_process_client_hello:unknown protocol:../deps/openssl/openssl/ssl/statem/statem_srvr.c:1689:\n"}
 sep 08 02:47:25 wazuh-server opensearch-dashboards[4460]: {"type":"error","@timestamp":"2023-09-08T02:47:25Z","tags":["connection","client","error"],"pid":4460,"level":"error","error":{"message":"139802304391104:error:14209102:SSL routines:tls_early_post_process_client_hello:unsupported protocol:../deps/openssl/openssl/ssl/statem/statem_srvr.c:1714:\n","name":"Error","stack":"Error: 139802304391104:error:14209102:SSL routines:tls_early_post_process_client_hello:unsupported protocol:../deps/openssl/openssl/ssl/statem/statem_srvr.c:1714:\n","code":"ERR_SSL_UNSUPPORTED_PROTOCOL"},"message":"139802304391104:error:14209102:SSL routines:tls_early_post_process_client_hello:unsupported protocol:../deps/openssl/openssl/ssl/statem/statem_srvr.c:1714:\n"}
 sep 08 02:47:25 wazuh-server opensearch-dashboards[4460]: {"type":"error","@timestamp":"2023-09-08T02:47:25Z","tags":["connection","client","error"],"pid":4460,"level":"error","error":{"message":"139802304391104:error:141CF06C:SSL routines:tls_parse_ctos_key_share:bad key share:../deps/openssl/openssl/ssl/statem/extensions_srvr.c:698:\n","name":"Error","stack":"Error: 139802304391104:error:141CF06C:SSL routines:tls_parse_ctos_key_share:bad key share:../deps/openssl/openssl/ssl/statem/extensions_srvr.c:698:\n","code":"ERR_SSL_BAD_KEY_SHARE"},"message":"139802304391104:error:141CF06C:SSL routines:tls_parse_ctos_key_share:bad key share:../deps/openssl/openssl/ssl/statem/extensions_srvr.c:698:\n"}
 sep 08 02:47:25 wazuh-server opensearch-dashboards[4460]: {"type":"error","@timestamp":"2023-09-08T02:47:25Z","tags":["connection","client","error"],"pid":4460,"level":"error","error":{"message":"139802304391104:error:142090C1:SSL routines:tls_early_post_process_client_hello:no shared cipher:../deps/openssl/openssl/ssl/statem/statem_srvr.c:1809:\n","name":"Error","stack":"Error: 139802304391104:error:142090C1:SSL routines:tls_early_post_process_client_hello:no shared cipher:../deps/openssl/openssl/ssl/statem/statem_srvr.c:1809:\n","code":"ERR_SSL_NO_SHARED_CIPHER"},"message":"139802304391104:error:142090C1:SSL routines:tls_early_post_process_client_hello:no shared cipher:../deps/openssl/openssl/ssl/statem/statem_srvr.c:1809:\n"}
 sep 08 02:47:25 wazuh-server opensearch-dashboards[4460]: {"type":"error","@timestamp":"2023-09-08T02:47:25Z","tags":["connection","client","error"],"pid":4460,"level":"error","error":{"message":"139802304391104:error:14209102:SSL routines:tls_early_post_process_client_hello:unsupported protocol:../deps/openssl/openssl/ssl/statem/statem_srvr.c:1714:\n","name":"Error","stack":"Error: 139802304391104:error:14209102:SSL routines:tls_early_post_process_client_hello:unsupported protocol:../deps/openssl/openssl/ssl/statem/statem_srvr.c:1714:\n","code":"ERR_SSL_UNSUPPORTED_PROTOCOL"},"message":"139802304391104:error:14209102:SSL routines:tls_early_post_process_client_hello:unsupported protocol:../deps/openssl/openssl/ssl/statem/statem_srvr.c:1714:\n"}
 sep 08 02:47:25 wazuh-server opensearch-dashboards[4460]: {"type":"error","@timestamp":"2023-09-08T02:47:25Z","tags":["connection","client","error"],"pid":4460,"level":"error","error":{"message":"139802304391104:error:1417A0C1:SSL routines:tls_post_process_client_hello:no shared cipher:../deps/openssl/openssl/ssl/statem/statem_srvr.c:2313:\n","name":"Error","stack":"Error: 139802304391104:error:1417A0C1:SSL routines:tls_post_process_client_hello:no shared cipher:../deps/openssl/openssl/ssl/statem/statem_srvr.c:2313:\n","code":"ERR_SSL_NO_SHARED_CIPHER"},"message":"139802304391104:error:1417A0C1:SSL routines:tls_post_process_client_hello:no shared cipher:../deps/openssl/openssl/ssl/statem/statem_srvr.c:2313:\n"}
 sep 08 02:28:03 wazuh-server opensearch-dashboards[4460]: {"type":"error","@timestamp":"2023-09-08T02:28:03Z","tags":["connection","client","error"],"pid":4460,"level":"error","error":{"message":"139802304391104:error:14209102:SSL routines:tls_early_post_process_client_hello:unsupported protocol:../deps/openssl/openssl/ssl/statem/statem_srvr.c:1714:\n","name":"Error","stack":"Error: 139802304391104:error:14209102:SSL routines:tls_early_post_process_client_hello:unsupported protocol:../deps/openssl/openssl/ssl/statem/statem_srvr.c:1714:\n","code":"ERR_SSL_UNSUPPORTED_PROTOCOL"},"message":"139802304391104:error:14209102:SSL routines:tls_early_post_process_client_hello:unsupported protocol:../deps/openssl/openssl/ssl/statem/statem_srvr.c:1714:\n"}
 sep 08 02:06:52 wazuh-server opensearch-dashboards[4460]: {"type":"error","@timestamp":"2023-09-08T02:06:52Z","tags":["connection","client","error"],"pid":4460,"level":"error","error":{"message":"139802304391104:error:14209102:SSL routines:tls_early_post_process_client_hello:unsupported protocol:../deps/openssl/openssl/ssl/statem/statem_srvr.c:1714:\n","name":"Error","stack":"Error: 139802304391104:error:14209102:SSL routines:tls_early_post_process_client_hello:unsupported protocol:../deps/openssl/openssl/ssl/statem/statem_srvr.c:1714:\n","code":"ERR_SSL_UNSUPPORTED_PROTOCOL"},"message":"139802304391104:error:14209102:SSL routines:tls_early_post_process_client_hello:unsupported protocol:../deps/openssl/openssl/ssl/statem/statem_srvr.c:1714:\n"}
 sep 08 01:50:50 wazuh-server opensearch-dashboards[4460]: {"type":"error","@timestamp":"2023-09-08T01:50:50Z","tags":["connection","client","error"],"pid":4460,"level":"error","error":{"message":"Parse Error: Pause on PRI/Upgrade","name":"Error","stack":"Error: Parse Error: Pause on PRI/Upgrade","code":"HPE_PAUSED_H2_UPGRADE"},"message":"Parse Error: Pause on PRI/Upgrade"}
 sep 08 01:50:50 wazuh-server opensearch-dashboards[4460]: {"type":"error","@timestamp":"2023-09-08T01:50:50Z","tags":["connection","client","error"],"pid":4460,"level":"error","error":{"message":"Parse Error: Pause on PRI/Upgrade","name":"Error","stack":"Error: Parse Error: Pause on PRI/Upgrade","code":"HPE_PAUSED_H2_UPGRADE"},"message":"Parse Error: Pause on PRI/Upgrade"}
 sep 08 01:50:50 wazuh-server opensearch-dashboards[4460]: {"type":"error","@timestamp":"2023-09-08T01:50:50Z","tags":["connection","client","error"],"pid":4460,"level":"error","error":{"message":"Parse Error: Pause on PRI/Upgrade","name":"Error","stack":"Error: Parse Error: Pause on PRI/Upgrade","code":"HPE_PAUSED_H2_UPGRADE"},"message":"Parse Error: Pause on PRI/Upgrade"}
 sep 08 01:19:15 wazuh-server opensearch-dashboards[4460]: {"type":"error","@timestamp":"2023-09-08T01:19:15Z","tags":["connection","client","error"],"pid":4460,"level":"error","error":{"message":"139802304391104:error:14094412:SSL routines:ssl3_read_bytes:sslv3 alert bad certificate:../deps/openssl/openssl/ssl/record/rec_layer_s3.c:1565:SSL alert number 42\n","name":"Error","stack":"Error: 139802304391104:error:14094412:SSL routines:ssl3_read_bytes:sslv3 alert bad certificate:../deps/openssl/openssl/ssl/record/rec_layer_s3.c:1565:SSL alert number 42\n","code":"ERR_SSL_SSLV3_ALERT_BAD_CERTIFICATE"},"message":"139802304391104:error:14094412:SSL routines:ssl3_read_bytes:sslv3 alert bad certificate:../deps/openssl/openssl/ssl/record/rec_layer_s3.c:1565:SSL alert number 42\n"}
 sep 07 23:58:20 wazuh-server opensearch-dashboards[4460]: {"type":"error","@timestamp":"2023-09-07T23:58:20Z","tags":["connection","client","error"],"pid":4460,"level":"error","error":{"message":"139802304391104:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:../deps/openssl/openssl/ssl/record/ssl3_record.c:332:\n","name":"Error","stack":"Error: 139802304391104:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:../deps/openssl/openssl/ssl/record/ssl3_record.c:332:\n","code":"ERR_SSL_WRONG_VERSION_NUMBER"},"message":"139802304391104:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:../deps/openssl/openssl/ssl/record/ssl3_record.c:332:\n"}
 sep 07 21:59:32 wazuh-server opensearch-dashboards[4460]: {"type":"error","@timestamp":"2023-09-07T21:59:32Z","tags":["connection","client","error"],"pid":4460,"level":"error","error":{"message":"Parse Error: Pause on PRI/Upgrade","name":"Error","stack":"Error: Parse Error: Pause on PRI/Upgrade","code":"HPE_PAUSED_H2_UPGRADE"},"message":"Parse Error: Pause on PRI/Upgrade"}
 sep 07 21:59:32 wazuh-server opensearch-dashboards[4460]: {"type":"error","@timestamp":"2023-09-07T21:59:32Z","tags":["connection","client","error"],"pid":4460,"level":"error","error":{"message":"Parse Error: Pause on PRI/Upgrade","name":"Error","stack":"Error: Parse Error: Pause on PRI/Upgrade","code":"HPE_PAUSED_H2_UPGRADE"},"message":"Parse Error: Pause on PRI/Upgrade"}
 sep 07 21:59:31 wazuh-server opensearch-dashboards[4460]: {"type":"error","@timestamp":"2023-09-07T21:59:31Z","tags":["connection","client","error"],"pid":4460,"level":"error","error":{"message":"Parse Error: Pause on PRI/Upgrade","name":"Error","stack":"Error: Parse Error: Pause on PRI/Upgrade","code":"HPE_PAUSED_H2_UPGRADE"},"message":"Parse Error: Pause on PRI/Upgrade"}
 sep 07 21:59:31 wazuh-server opensearch-dashboards[4460]: {"type":"error","@timestamp":"2023-09-07T21:59:31Z","tags":["connection","client","error"],"pid":4460,"level":"error","error":{"message":"Parse Error: Pause on PRI/Upgrade","name":"Error","stack":"Error: Parse Error: Pause on PRI/Upgrade","code":"HPE_PAUSED_H2_UPGRADE"},"message":"Parse Error: Pause on PRI/Upgrade"}
 sep 07 21:40:59 wazuh-server opensearch-dashboards[4460]: {"type":"error","@timestamp":"2023-09-07T21:40:59Z","tags":["connection","client","error"],"pid":4460,"level":"error","error":{"message":"139802304391104:error:141CF06C:SSL routines:tls_parse_ctos_key_share:bad key share:../deps/openssl/openssl/ssl/statem/extensions_srvr.c:698:\n","name":"Error","stack":"Error: 139802304391104:error:141CF06C:SSL routines:tls_parse_ctos_key_share:bad key share:../deps/openssl/openssl/ssl/statem/extensions_srvr.c:698:\n","code":"ERR_SSL_BAD_KEY_SHARE"},"message":"139802304391104:error:141CF06C:SSL routines:tls_parse_ctos_key_share:bad key share:../deps/openssl/openssl/ssl/statem/extensions_srvr.c:698:\n"}
 sep 07 21:40:59 wazuh-server opensearch-dashboards[4460]: {"type":"error","@timestamp":"2023-09-07T21:40:59Z","tags":["connection","client","error"],"pid":4460,"level":"error","error":{"message":"139802304391104:error:142090C1:SSL routines:tls_early_post_process_client_hello:no shared cipher:../deps/openssl/openssl/ssl/statem/statem_srvr.c:1809:\n","name":"Error","stack":"Error: 139802304391104:error:142090C1:SSL routines:tls_early_post_process_client_hello:no shared cipher:../deps/openssl/openssl/ssl/statem/statem_srvr.c:1809:\n","code":"ERR_SSL_NO_SHARED_CIPHER"},"message":"139802304391104:error:142090C1:SSL routines:tls_early_post_process_client_hello:no shared cipher:../deps/openssl/openssl/ssl/statem/statem_srvr.c:1809:\n"}
 sep 07 21:40:57 wazuh-server opensearch-dashboards[4460]: {"type":"error","@timestamp":"2023-09-07T21:40:57Z","tags":["connection","client","error"],"pid":4460,"level":"error","error":{"message":"139802304391104:error:14209102:SSL routines:tls_early_post_process_client_hello:unsupported protocol:../deps/openssl/openssl/ssl/statem/statem_srvr.c:1714:\n","name":"Error","stack":"Error: 139802304391104:error:14209102:SSL routines:tls_early_post_process_client_hello:unsupported protocol:../deps/openssl/openssl/ssl/statem/statem_srvr.c:1714:\n","code":"ERR_SSL_UNSUPPORTED_PROTOCOL"},"message":"139802304391104:error:14209102:SSL routines:tls_early_post_process_client_hello:unsupported protocol:../deps/openssl/openssl/ssl/statem/statem_srvr.c:1714:\n"}
 sep 07 21:40:56 wazuh-server opensearch-dashboards[4460]: {"type":"error","@timestamp":"2023-09-07T21:40:56Z","tags":["connection","client","error"],"pid":4460,"level":"error","error":{"message":"139802304391104:error:1417A0C1:SSL routines:tls_post_process_client_hello:no shared cipher:../deps/openssl/openssl/ssl/statem/statem_srvr.c:2313:\n","name":"Error","stack":"Error: 139802304391104:error:1417A0C1:SSL routines:tls_post_process_client_hello:no shared cipher:../deps/openssl/openssl/ssl/statem/statem_srvr.c:2313:\n","code":"ERR_SSL_NO_SHARED_CIPHER"},"message":"139802304391104:error:1417A0C1:SSL routines:tls_post_process_client_hello:no shared cipher:../deps/openssl/openssl/ssl/statem/statem_srvr.c:2313:\n"}
 sep 07 20:49:18 wazuh-server opensearch-dashboards[4460]: {"type":"error","@timestamp":"2023-09-07T20:49:18Z","tags":["connection","client","error"],"pid":4460,"level":"error","error":{"message":"Parse Error: Pause on PRI/Upgrade","name":"Error","stack":"Error: Parse Error: Pause on PRI/Upgrade","code":"HPE_PAUSED_H2_UPGRADE"},"message":"Parse Error: Pause on PRI/Upgrade"}
 sep 07 20:49:18 wazuh-server opensearch-dashboards[4460]: {"type":"error","@timestamp":"2023-09-07T20:49:18Z","tags":["connection","client","error"],"pid":4460,"level":"error","error":{"message":"Parse Error: Pause on PRI/Upgrade","name":"Error","stack":"Error: Parse Error: Pause on PRI/Upgrade","code":"HPE_PAUSED_H2_UPGRADE"},"message":"Parse Error: Pause on PRI/Upgrade"}
 sep 07 20:49:17 wazuh-server opensearch-dashboards[4460]: {"type":"error","@timestamp":"2023-09-07T20:49:17Z","tags":["connection","client","error"],"pid":4460,"level":"error","error":{"message":"Parse Error: Pause on PRI/Upgrade","name":"Error","stack":"Error: Parse Error: Pause on PRI/Upgrade","code":"HPE_PAUSED_H2_UPGRADE"},"message":"Parse Error: Pause on PRI/Upgrade"}
 sep 07 20:49:17 wazuh-server opensearch-dashboards[4460]: {"type":"error","@timestamp":"2023-09-07T20:49:17Z","tags":["connection","client","error"],"pid":4460,"level":"error","error":{"message":"Parse Error: Pause on PRI/Upgrade","name":"Error","stack":"Error: Parse Error: Pause on PRI/Upgrade","code":"HPE_PAUSED_H2_UPGRADE"},"message":"Parse Error: Pause on PRI/Upgrade"}
 sep 07 18:46:25 wazuh-server opensearch-dashboards[4460]: {"type":"error","@timestamp":"2023-09-07T18:46:25Z","tags":["connection","client","error"],"pid":4460,"level":"error","error":{"message":"139802304391104:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:../deps/openssl/openssl/ssl/record/ssl3_record.c:332:\n","name":"Error","stack":"Error: 139802304391104:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:../deps/openssl/openssl/ssl/record/ssl3_record.c:332:\n","code":"ERR_SSL_WRONG_VERSION_NUMBER"},"message":"139802304391104:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:../deps/openssl/openssl/ssl/record/ssl3_record.c:332:\n"}
 sep 07 17:03:02 wazuh-server opensearch-dashboards[4460]: {"type":"error","@timestamp":"2023-09-07T17:03:02Z","tags":["connection","client","error"],"pid":4460,"level":"error","error":{"message":"139802304391104:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:../deps/openssl/openssl/ssl/record/ssl3_record.c:332:\n","name":"Error","stack":"Error: 139802304391104:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:../deps/openssl/openssl/ssl/record/ssl3_record.c:332:\n","code":"ERR_SSL_WRONG_VERSION_NUMBER"},"message":"139802304391104:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:../deps/openssl/openssl/ssl/record/ssl3_record.c:332:\n"}
 sep 07 17:02:56 wazuh-server opensearch-dashboards[4460]: {"type":"error","@timestamp":"2023-09-07T17:02:56Z","tags":["connection","client","error"],"pid":4460,"level":"error","error":{"message":"139802304391104:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:../deps/openssl/openssl/ssl/record/ssl3_record.c:332:\n","name":"Error","stack":"Error: 139802304391104:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:../deps/openssl/openssl/ssl/record/ssl3_record.c:332:\n","code":"ERR_SSL_WRONG_VERSION_NUMBER"},"message":"139802304391104:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:../deps/openssl/openssl/ssl/record/ssl3_record.c:332:\n"}
 sep 07 17:02:55 wazuh-server opensearch-dashboards[4460]: {"type":"error","@timestamp":"2023-09-07T17:02:55Z","tags":["connection","client","error"],"pid":4460,"level":"error","error":{"message":"139802304391104:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:../deps/openssl/openssl/ssl/record/ssl3_record.c:332:\n","name":"Error","stack":"Error: 139802304391104:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:../deps/openssl/openssl/ssl/record/ssl3_record.c:332:\n","code":"ERR_SSL_WRONG_VERSION_NUMBER"},"message":"139802304391104:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:../deps/openssl/openssl/ssl/record/ssl3_record.c:332:\n"}
 sep 07 17:02:54 wazuh-server opensearch-dashboards[4460]: {"type":"error","@timestamp":"2023-09-07T17:02:54Z","tags":["connection","client","error"],"pid":4460,"level":"error","error":{"message":"139802304391104:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:../deps/openssl/openssl/ssl/record/ssl3_record.c:332:\n","name":"Error","stack":"Error: 139802304391104:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:../deps/openssl/openssl/ssl/record/ssl3_record.c:332:\n","code":"ERR_SSL_WRONG_VERSION_NUMBER"},"message":"139802304391104:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:../deps/openssl/openssl/ssl/record/ssl3_record.c:332:\n"}
 sep 07 17:02:41 wazuh-server opensearch-dashboards[4460]: {"type":"error","@timestamp":"2023-09-07T17:02:41Z","tags":["connection","client","error"],"pid":4460,"level":"error","error":{"message":"139802304391104:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:../deps/openssl/openssl/ssl/record/ssl3_record.c:332:\n","name":"Error","stack":"Error: 139802304391104:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:../deps/openssl/openssl/ssl/record/ssl3_record.c:332:\n","code":"ERR_SSL_WRONG_VERSION_NUMBER"},"message":"139802304391104:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:../deps/openssl/openssl/ssl/record/ssl3_record.c:332:\n"}
 sep 07 17:02:34 wazuh-server opensearch-dashboards[4460]: {"type":"error","@timestamp":"2023-09-07T17:02:34Z","tags":["connection","client","error"],"pid":4460,"level":"error","error":{"message":"139802304391104:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:../deps/openssl/openssl/ssl/record/ssl3_record.c:332:\n","name":"Error","stack":"Error: 139802304391104:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:../deps/openssl/openssl/ssl/record/ssl3_record.c:332:\n","code":"ERR_SSL_WRONG_VERSION_NUMBER"},"message":"139802304391104:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:../deps/openssl/openssl/ssl/record/ssl3_record.c:332:\n"}
 sep 07 17:02:30 wazuh-server opensearch-dashboards[4460]: {"type":"error","@timestamp":"2023-09-07T17:02:30Z","tags":["connection","client","error"],"pid":4460,"level":"error","error":{"message":"139802304391104:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:../deps/openssl/openssl/ssl/record/ssl3_record.c:332:\n","name":"Error","stack":"Error: 139802304391104:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:../deps/openssl/openssl/ssl/record/ssl3_record.c:332:\n","code":"ERR_SSL_WRONG_VERSION_NUMBER"},"message":"139802304391104:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:../deps/openssl/openssl/ssl/record/ssl3_record.c:332:\n"}
 sep 07 17:02:25 wazuh-server opensearch-dashboards[4460]: {"type":"error","@timestamp":"2023-09-07T17:02:25Z","tags":["connection","client","error"],"pid":4460,"level":"error","error":{"message":"139802304391104:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:../deps/openssl/openssl/ssl/record/ssl3_record.c:332:\n","name":"Error","stack":"Error: 139802304391104:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:../deps/openssl/openssl/ssl/record/ssl3_record.c:332:\n","code":"ERR_SSL_WRONG_VERSION_NUMBER"},"message":"139802304391104:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:../deps/openssl/openssl/ssl/record/ssl3_record.c:332:\n"}
 sep 07 16:51:35 wazuh-server opensearch-dashboards[4460]: {"type":"error","@timestamp":"2023-09-07T16:51:35Z","tags":["connection","client","error"],"pid":4460,"level":"error","error":{"message":"139802304391104:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:../deps/openssl/openssl/ssl/record/ssl3_record.c:332:\n","name":"Error","stack":"Error: 139802304391104:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:../deps/openssl/openssl/ssl/record/ssl3_record.c:332:\n","code":"ERR_SSL_WRONG_VERSION_NUMBER"},"message":"139802304391104:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:../deps/openssl/openssl/ssl/record/ssl3_record.c:332:\n"}
 sep 07 15:31:09 wazuh-server opensearch-dashboards[4460]: {"type":"error","@timestamp":"2023-09-07T15:31:09Z","tags":["connection","client","error"],"pid":4460,"level":"error","error":{"message":"139802304391104:error:141CF06C:SSL routines:tls_parse_ctos_key_share:bad key share:../deps/openssl/openssl/ssl/statem/extensions_srvr.c:698:\n","name":"Error","stack":"Error: 139802304391104:error:141CF06C:SSL routines:tls_parse_ctos_key_share:bad key share:../deps/openssl/openssl/ssl/statem/extensions_srvr.c:698:\n","code":"ERR_SSL_BAD_KEY_SHARE"},"message":"139802304391104:error:141CF06C:SSL routines:tls_parse_ctos_key_share:bad key share:../deps/openssl/openssl/ssl/statem/extensions_srvr.c:698:\n"}
 sep 07 15:31:09 wazuh-server opensearch-dashboards[4460]: {"type":"error","@timestamp":"2023-09-07T15:31:09Z","tags":["connection","client","error"],"pid":4460,"level":"error","error":{"message":"139802304391104:error:142090C1:SSL routines:tls_early_post_process_client_hello:no shared cipher:../deps/openssl/openssl/ssl/statem/statem_srvr.c:1809:\n","name":"Error","stack":"Error: 139802304391104:error:142090C1:SSL routines:tls_early_post_process_client_hello:no shared cipher:../deps/openssl/openssl/ssl/statem/statem_srvr.c:1809:\n","code":"ERR_SSL_NO_SHARED_CIPHER"},"message":"139802304391104:error:142090C1:SSL routines:tls_early_post_process_client_hello:no shared cipher:../deps/openssl/openssl/ssl/statem/statem_srvr.c:1809:\n"}
 sep 07 15:31:07 wazuh-server opensearch-dashboards[4460]: {"type":"error","@timestamp":"2023-09-07T15:31:07Z","tags":["connection","client","error"],"pid":4460,"level":"error","error":{"message":"139802304391104:error:14209102:SSL routines:tls_early_post_process_client_hello:unsupported protocol:../deps/openssl/openssl/ssl/statem/statem_srvr.c:1714:\n","name":"Error","stack":"Error: 139802304391104:error:14209102:SSL routines:tls_early_post_process_client_hello:unsupported protocol:../deps/openssl/openssl/ssl/statem/statem_srvr.c:1714:\n","code":"ERR_SSL_UNSUPPORTED_PROTOCOL"},"message":"139802304391104:error:14209102:SSL routines:tls_early_post_process_client_hello:unsupported protocol:../deps/openssl/openssl/ssl/statem/statem_srvr.c:1714:\n"}
 sep 07 15:31:03 wazuh-server opensearch-dashboards[4460]: {"type":"error","@timestamp":"2023-09-07T15:31:03Z","tags":["connection","client","error"],"pid":4460,"level":"error","error":{"message":"139802304391104:error:1417A0C1:SSL routines:tls_post_process_client_hello:no shared cipher:../deps/openssl/openssl/ssl/statem/statem_srvr.c:2313:\n","name":"Error","stack":"Error: 139802304391104:error:1417A0C1:SSL routines:tls_post_process_client_hello:no shared cipher:../deps/openssl/openssl/ssl/statem/statem_srvr.c:2313:\n","code":"ERR_SSL_NO_SHARED_CIPHER"},"message":"139802304391104:error:1417A0C1:SSL routines:tls_post_process_client_hello:no shared cipher:../deps/openssl/openssl/ssl/statem/statem_srvr.c:2313:\n"}
 sep 07 14:39:17 wazuh-server opensearch-dashboards[4460]: {"type":"error","@timestamp":"2023-09-07T14:39:17Z","tags":["connection","client","error"],"pid":4460,"level":"error","error":{"message":"Parse Error: Pause on PRI/Upgrade","name":"Error","stack":"Error: Parse Error: Pause on PRI/Upgrade","code":"HPE_PAUSED_H2_UPGRADE"},"message":"Parse Error: Pause on PRI/Upgrade"}
 sep 07 14:39:17 wazuh-server opensearch-dashboards[4460]: {"type":"error","@timestamp":"2023-09-07T14:39:17Z","tags":["connection","client","error"],"pid":4460,"level":"error","error":{"message":"Parse Error: Pause on PRI/Upgrade","name":"Error","stack":"Error: Parse Error: Pause on PRI/Upgrade","code":"HPE_PAUSED_H2_UPGRADE"},"message":"Parse Error: Pause on PRI/Upgrade"}
 sep 07 14:39:17 wazuh-server opensearch-dashboards[4460]: {"type":"error","@timestamp":"2023-09-07T14:39:17Z","tags":["connection","client","error"],"pid":4460,"level":"error","error":{"message":"Parse Error: Pause on PRI/Upgrade","name":"Error","stack":"Error: Parse Error: Pause on PRI/Upgrade","code":"HPE_PAUSED_H2_UPGRADE"},"message":"Parse Error: Pause on PRI/Upgrade"}
 sep 07 14:39:17 wazuh-server opensearch-dashboards[4460]: {"type":"error","@timestamp":"2023-09-07T14:39:17Z","tags":["connection","client","error"],"pid":4460,"level":"error","error":{"message":"Parse Error: Pause on PRI/Upgrade","name":"Error","stack":"Error: Parse Error: Pause on PRI/Upgrade","code":"HPE_PAUSED_H2_UPGRADE"},"message":"Parse Error: Pause on PRI/Upgrade"}
 sep 07 13:27:54 wazuh-server opensearch-dashboards[4460]: {"type":"log","@timestamp":"2023-09-07T13:27:54Z","tags":["warning","config","deprecation"],"pid":4460,"message":"\"opensearch.requestHeadersWhitelist\" is deprecated and has been replaced by \"opensearch.requestHeadersAllowlist\""}
 sep 07 13:27:33 wazuh-server opensearch-dashboards[1894]: {"type":"log","@timestamp":"2023-09-07T13:27:33Z","tags":["error","opensearch","data"],"pid":1894,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
 sep 07 13:27:30 wazuh-server opensearch-dashboards[1894]: {"type":"log","@timestamp":"2023-09-07T13:27:30Z","tags":["error","opensearch","data"],"pid":1894,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
 sep 07 13:27:28 wazuh-server opensearch-dashboards[1894]: {"type":"log","@timestamp":"2023-09-07T13:27:28Z","tags":["error","opensearch","data"],"pid":1894,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
 sep 07 13:27:25 wazuh-server opensearch-dashboards[1894]: {"type":"log","@timestamp":"2023-09-07T13:27:25Z","tags":["error","savedobjects-service"],"pid":1894,"message":"Unable to retrieve version information from OpenSearch nodes."}
 sep 07 13:27:25 wazuh-server opensearch-dashboards[1894]: {"type":"log","@timestamp":"2023-09-07T13:27:25Z","tags":["error","opensearch","data"],"pid":1894,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
 sep 07 13:27:24 wazuh-server opensearch-dashboards[1894]: {"type":"log","@timestamp":"2023-09-07T13:27:24Z","tags":["warning","config","deprecation"],"pid":1894,"message":"\"opensearch.requestHeadersWhitelist\" is deprecated and has been replaced by \"opensearch.requestHeadersAllowlist\""} 
AlexRuiz7 commented 1 year ago
Unable to retrieve version information from OpenSearch nodes.

There is no connectivity to the indexer nodes. This may be caused by a configuration problem, as there are many errors related to SSL certificates.

This should be investigated by the AMI producers (@wazuh/cicd).

davidcr01 commented 1 year ago

Some errors in this issue are reported in: https://github.com/wazuh/wazuh-packages/issues/2445

c-bordon commented 1 year ago

Update report

I was testing the AMI: ami-0e3aa680272bebe7a and I couldn't replicate the errors. Can you tell us what steps you took to replicate the error?

Screenshot_20230913_105750

[root@wazuh-server ~]# journalctl | grep wazuh-dashboard
Sep 12 19:02:12 wazuh-server systemd[1]: Configuration file /etc/systemd/system/wazuh-dashboard.service is marked world-inaccessible. This has no effect as configuration data is accessible via APIs without restrictions. Proceeding anyway.
Sep 12 19:02:25 wazuh-server systemd[1]: Started wazuh-dashboard.
Sep 12 19:04:48 wazuh-server systemd[1]: Configuration file /etc/systemd/system/wazuh-dashboard.service is marked world-inaccessible. This has no effect as configuration data is accessible via APIs without restrictions. Proceeding anyway.
Sep 12 19:04:49 wazuh-server systemd[1]: Configuration file /etc/systemd/system/wazuh-dashboard.service is marked world-inaccessible. This has no effect as configuration data is accessible via APIs without restrictions. Proceeding anyway.
Sep 12 19:04:49 wazuh-server systemd[1]: Stopping wazuh-dashboard...
Sep 12 19:04:50 wazuh-server systemd[1]: Stopped wazuh-dashboard.
Sep 12 19:04:50 wazuh-server systemd[1]: Started wazuh-dashboard.
Sep 12 19:44:30 wazuh-server systemd[1]: Configuration file /etc/systemd/system/wazuh-dashboard.service is marked world-inaccessible. This has no effect as configuration data is accessible via APIs without restrictions. Proceeding anyway.
Sep 12 19:44:31 wazuh-server systemd[1]: Configuration file /etc/systemd/system/wazuh-dashboard.service is marked world-inaccessible. This has no effect as configuration data is accessible via APIs without restrictions. Proceeding anyway.
Sep 12 19:44:32 wazuh-server systemd[1]: Configuration file /etc/systemd/system/wazuh-dashboard.service is marked world-inaccessible. This has no effect as configuration data is accessible via APIs without restrictions. Proceeding anyway.
Sep 12 19:44:32 wazuh-server systemd[1]: Configuration file /etc/systemd/system/wazuh-dashboard.service is marked world-inaccessible. This has no effect as configuration data is accessible via APIs without restrictions. Proceeding anyway.
Sep 12 19:52:31 wazuh-server systemd[1]: Stopping wazuh-dashboard...
Sep 12 19:52:32 wazuh-server systemd[1]: Stopped wazuh-dashboard.
Sep 13 11:21:43 wazuh-server systemd[1]: Configuration file /etc/systemd/system/wazuh-dashboard.service is marked world-inaccessible. This has no effect as configuration data is accessible via APIs without restrictions. Proceeding anyway.
Sep 13 11:21:44 wazuh-server systemd[1]: Started wazuh-dashboard.
Sep 13 12:11:34 wazuh-server systemd[1]: Configuration file /etc/systemd/system/wazuh-dashboard.service is marked world-inaccessible. This has no effect as configuration data is accessible via APIs without restrictions. Proceeding anyway.
[root@wazuh-server ~]# systemctl status wazuh-dashboard.service -l 
● wazuh-dashboard.service - wazuh-dashboard
   Loaded: loaded (/etc/systemd/system/wazuh-dashboard.service; enabled; vendor preset: disabled)
   Active: active (running) since Wed 2023-09-13 11:21:44 UTC; 2h 37min ago
 Main PID: 2715 (node)
   CGroup: /system.slice/wazuh-dashboard.service
           └─2715 /usr/share/wazuh-dashboard/node/bin/node --no-warnings --max-http-header-size=65536 --unhandled-rejections=warn /usr/share/wazuh-dashboard/src/cli/dist -c /etc/wazuh-dashboard/opensearch_dashboards.yml

Sep 13 12:32:05 wazuh-server opensearch-dashboards[2715]: {"type":"response","@timestamp":"2023-09-13T12:32:05Z","tags":[],"pid":2715,"method":"get","statusCode":200,"req":{"url":"/hosts/apis","method":"get","headers":{"host":"172.31.46.154","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/116.0","accept":"application/json, text/plain, */*","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate, br","osd-xsrf":"kibana","pattern":"wazuh-alerts-*","id":"default","connection":"keep-alive","referer":"https://172.31.46.154/app/wazuh","sec-fetch-dest":"empty","sec-fetch-mode":"cors","sec-fetch-site":"same-origin"},"remoteAddress":"10.10.0.159","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/116.0","referer":"https://172.31.46.154/app/wazuh"},"res":{"statusCode":200,"responseTime":8,"contentLength":9},"message":"GET /hosts/apis 200 8ms - 9.0B"}
Sep 13 12:32:05 wazuh-server opensearch-dashboards[2715]: {"type":"response","@timestamp":"2023-09-13T12:32:05Z","tags":[],"pid":2715,"method":"get","statusCode":200,"req":{"url":"/utils/configuration","method":"get","headers":{"host":"172.31.46.154","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/116.0","accept":"application/json, text/plain, */*","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate, br","osd-xsrf":"kibana","pattern":"wazuh-alerts-*","id":"default","connection":"keep-alive","referer":"https://172.31.46.154/app/wazuh","sec-fetch-dest":"empty","sec-fetch-mode":"cors","sec-fetch-site":"same-origin"},"remoteAddress":"10.10.0.159","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/116.0","referer":"https://172.31.46.154/app/wazuh"},"res":{"statusCode":200,"responseTime":8,"contentLength":9},"message":"GET /utils/configuration 200 8ms - 9.0B"}
Sep 13 12:32:05 wazuh-server opensearch-dashboards[2715]: {"type":"response","@timestamp":"2023-09-13T12:32:05Z","tags":[],"pid":2715,"method":"post","statusCode":200,"req":{"url":"/api/request","method":"post","headers":{"host":"172.31.46.154","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/116.0","accept":"application/json, text/plain, */*","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate, br","content-type":"application/json","osd-xsrf":"kibana","content-length":"52","origin":"https://172.31.46.154","connection":"keep-alive","referer":"https://172.31.46.154/app/wazuh","sec-fetch-dest":"empty","sec-fetch-mode":"cors","sec-fetch-site":"same-origin"},"remoteAddress":"10.10.0.159","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/116.0","referer":"https://172.31.46.154/app/wazuh"},"res":{"statusCode":200,"responseTime":17,"contentLength":9},"message":"POST /api/request 200 17ms - 9.0B"}
Sep 13 12:32:05 wazuh-server opensearch-dashboards[2715]: {"type":"response","@timestamp":"2023-09-13T12:32:05Z","tags":[],"pid":2715,"method":"post","statusCode":200,"req":{"url":"/api/request","method":"post","headers":{"host":"172.31.46.154","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/116.0","accept":"application/json, text/plain, */*","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate, br","content-type":"application/json","osd-xsrf":"kibana","content-length":"73","origin":"https://172.31.46.154","connection":"keep-alive","referer":"https://172.31.46.154/app/wazuh","sec-fetch-dest":"empty","sec-fetch-mode":"cors","sec-fetch-site":"same-origin"},"remoteAddress":"10.10.0.159","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/116.0","referer":"https://172.31.46.154/app/wazuh"},"res":{"statusCode":200,"responseTime":22,"contentLength":9},"message":"POST /api/request 200 22ms - 9.0B"}
Sep 13 12:32:05 wazuh-server opensearch-dashboards[2715]: {"type":"response","@timestamp":"2023-09-13T12:32:05Z","tags":[],"pid":2715,"method":"post","statusCode":200,"req":{"url":"/api/request","method":"post","headers":{"host":"172.31.46.154","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/116.0","accept":"application/json, text/plain, */*","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate, br","content-type":"application/json","osd-xsrf":"kibana","content-length":"66","origin":"https://172.31.46.154","connection":"keep-alive","referer":"https://172.31.46.154/app/wazuh","sec-fetch-dest":"empty","sec-fetch-mode":"cors","sec-fetch-site":"same-origin"},"remoteAddress":"10.10.0.159","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/116.0","referer":"https://172.31.46.154/app/wazuh"},"res":{"statusCode":200,"responseTime":22,"contentLength":9},"message":"POST /api/request 200 22ms - 9.0B"}
Sep 13 12:32:06 wazuh-server opensearch-dashboards[2715]: {"type":"response","@timestamp":"2023-09-13T12:32:06Z","tags":[],"pid":2715,"method":"post","statusCode":200,"req":{"url":"/api/request","method":"post","headers":{"host":"172.31.46.154","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/116.0","accept":"application/json, text/plain, */*","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate, br","content-type":"application/json","osd-xsrf":"kibana","content-length":"70","origin":"https://172.31.46.154","connection":"keep-alive","referer":"https://172.31.46.154/app/wazuh","sec-fetch-dest":"empty","sec-fetch-mode":"cors","sec-fetch-site":"same-origin"},"remoteAddress":"10.10.0.159","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/116.0","referer":"https://172.31.46.154/app/wazuh"},"res":{"statusCode":200,"responseTime":19,"contentLength":9},"message":"POST /api/request 200 19ms - 9.0B"}
Sep 13 12:32:06 wazuh-server opensearch-dashboards[2715]: {"type":"response","@timestamp":"2023-09-13T12:32:06Z","tags":[],"pid":2715,"method":"post","statusCode":200,"req":{"url":"/api/request","method":"post","headers":{"host":"172.31.46.154","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/116.0","accept":"application/json, text/plain, */*","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate, br","content-type":"application/json","osd-xsrf":"kibana","content-length":"66","origin":"https://172.31.46.154","connection":"keep-alive","referer":"https://172.31.46.154/app/wazuh","sec-fetch-dest":"empty","sec-fetch-mode":"cors","sec-fetch-site":"same-origin"},"remoteAddress":"10.10.0.159","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/116.0","referer":"https://172.31.46.154/app/wazuh"},"res":{"statusCode":200,"responseTime":22,"contentLength":9},"message":"POST /api/request 200 22ms - 9.0B"}
Sep 13 12:32:06 wazuh-server opensearch-dashboards[2715]: {"type":"response","@timestamp":"2023-09-13T12:32:06Z","tags":[],"pid":2715,"method":"post","statusCode":200,"req":{"url":"/api/request","method":"post","headers":{"host":"172.31.46.154","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/116.0","accept":"application/json, text/plain, */*","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate, br","content-type":"application/json","osd-xsrf":"kibana","content-length":"88","origin":"https://172.31.46.154","connection":"keep-alive","referer":"https://172.31.46.154/app/wazuh","sec-fetch-dest":"empty","sec-fetch-mode":"cors","sec-fetch-site":"same-origin"},"remoteAddress":"10.10.0.159","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/116.0","referer":"https://172.31.46.154/app/wazuh"},"res":{"statusCode":200,"responseTime":20,"contentLength":9},"message":"POST /api/request 200 20ms - 9.0B"}
Sep 13 12:32:07 wazuh-server opensearch-dashboards[2715]: {"type":"response","@timestamp":"2023-09-13T12:32:07Z","tags":[],"pid":2715,"method":"post","statusCode":200,"req":{"url":"/api/request","method":"post","headers":{"host":"172.31.46.154","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/116.0","accept":"application/json, text/plain, */*","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate, br","content-type":"application/json","osd-xsrf":"kibana","content-length":"79","origin":"https://172.31.46.154","connection":"keep-alive","referer":"https://172.31.46.154/app/wazuh","sec-fetch-dest":"empty","sec-fetch-mode":"cors","sec-fetch-site":"same-origin"},"remoteAddress":"10.10.0.159","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/116.0","referer":"https://172.31.46.154/app/wazuh"},"res":{"statusCode":200,"responseTime":20,"contentLength":9},"message":"POST /api/request 200 20ms - 9.0B"}
Sep 13 12:32:07 wazuh-server opensearch-dashboards[2715]: {"type":"response","@timestamp":"2023-09-13T12:32:07Z","tags":[],"pid":2715,"method":"post","statusCode":200,"req":{"url":"/api/request","method":"post","headers":{"host":"172.31.46.154","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/116.0","accept":"application/json, text/plain, */*","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate, br","content-type":"application/json","osd-xsrf":"kibana","content-length":"58","origin":"https://172.31.46.154","connection":"keep-alive","referer":"https://172.31.46.154/app/wazuh","sec-fetch-dest":"empty","sec-fetch-mode":"cors","sec-fetch-site":"same-origin"},"remoteAddress":"10.10.0.159","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/116.0","referer":"https://172.31.46.154/app/wazuh"},"res":{"statusCode":200,"responseTime":22,"contentLength":9},"message":"POST /api/request 200 22ms - 9.0B"}
[root@wazuh-server ~]# journalctl | grep wazuh-indexer
Sep 12 19:02:12 wazuh-server systemd[1]: Configuration file /usr/lib/systemd/system/wazuh-indexer.service is marked world-inaccessible. This has no effect as configuration data is accessible via APIs without restrictions. Proceeding anyway.
Sep 12 19:03:11 wazuh-server systemd-entrypoint[3208]: WARNING: System::setSecurityManager has been called by org.opensearch.bootstrap.OpenSearch (file:/usr/share/wazuh-indexer/lib/opensearch-2.8.0.jar)
Sep 12 19:03:19 wazuh-server systemd-entrypoint[3208]: WARNING: System::setSecurityManager has been called by org.opensearch.bootstrap.Security (file:/usr/share/wazuh-indexer/lib/opensearch-2.8.0.jar)
Sep 12 19:03:19 wazuh-server systemd-entrypoint[3208]: 2023-09-12 19:03:19,223 main ERROR Could not define attribute view on path "/var/log/wazuh-indexer/wazuh-cluster_server.json" got access denied ("java.lang.RuntimePermission" "accessUserInformation") java.security.AccessControlException: access denied ("java.lang.RuntimePermission" "accessUserInformation")
Sep 12 19:03:19 wazuh-server systemd-entrypoint[3208]: 2023-09-12 19:03:19,230 main ERROR Could not define attribute view on path "/var/log/wazuh-indexer/wazuh-cluster.log" got access denied ("java.lang.RuntimePermission" "accessUserInformation") java.security.AccessControlException: access denied ("java.lang.RuntimePermission" "accessUserInformation")
Sep 12 19:04:48 wazuh-server systemd[1]: Configuration file /usr/lib/systemd/system/wazuh-indexer.service is marked world-inaccessible. This has no effect as configuration data is accessible via APIs without restrictions. Proceeding anyway.
Sep 12 19:04:49 wazuh-server systemd[1]: Configuration file /usr/lib/systemd/system/wazuh-indexer.service is marked world-inaccessible. This has no effect as configuration data is accessible via APIs without restrictions. Proceeding anyway.
Sep 12 19:44:30 wazuh-server systemd[1]: Configuration file /usr/lib/systemd/system/wazuh-indexer-performance-analyzer.service is marked world-inaccessible. This has no effect as configuration data is accessible via APIs without restrictions. Proceeding anyway.
Sep 12 19:44:31 wazuh-server systemd[1]: Configuration file /usr/lib/systemd/system/wazuh-indexer.service is marked world-inaccessible. This has no effect as configuration data is accessible via APIs without restrictions. Proceeding anyway.
Sep 12 19:44:31 wazuh-server systemd[1]: Configuration file /usr/lib/systemd/system/wazuh-indexer-performance-analyzer.service is marked world-inaccessible. This has no effect as configuration data is accessible via APIs without restrictions. Proceeding anyway.
Sep 12 19:44:31 wazuh-server systemd[1]: Configuration file /usr/lib/systemd/system/wazuh-indexer.service is marked world-inaccessible. This has no effect as configuration data is accessible via APIs without restrictions. Proceeding anyway.
Sep 12 19:44:32 wazuh-server systemd[1]: Configuration file /usr/lib/systemd/system/wazuh-indexer-performance-analyzer.service is marked world-inaccessible. This has no effect as configuration data is accessible via APIs without restrictions. Proceeding anyway.
Sep 12 19:44:32 wazuh-server systemd[1]: Configuration file /usr/lib/systemd/system/wazuh-indexer.service is marked world-inaccessible. This has no effect as configuration data is accessible via APIs without restrictions. Proceeding anyway.
Sep 13 11:21:43 wazuh-server systemd[1]: Configuration file /usr/lib/systemd/system/wazuh-indexer.service is marked world-inaccessible. This has no effect as configuration data is accessible via APIs without restrictions. Proceeding anyway.
Sep 13 11:21:52 wazuh-server systemd-entrypoint[3208]: WARNING: System::setSecurityManager has been called by org.opensearch.bootstrap.OpenSearch (file:/usr/share/wazuh-indexer/lib/opensearch-2.8.0.jar)
Sep 13 11:21:54 wazuh-server systemd-entrypoint[3208]: WARNING: System::setSecurityManager has been called by org.opensearch.bootstrap.Security (file:/usr/share/wazuh-indexer/lib/opensearch-2.8.0.jar)
Sep 13 11:21:54 wazuh-server systemd-entrypoint[3208]: 2023-09-13 11:21:54,477 main ERROR Could not define attribute view on path "/var/log/wazuh-indexer/wazuh-cluster_server.json" got access denied ("java.lang.RuntimePermission" "accessUserInformation") java.security.AccessControlException: access denied ("java.lang.RuntimePermission" "accessUserInformation")
Sep 13 11:21:54 wazuh-server systemd-entrypoint[3208]: 2023-09-13 11:21:54,498 main ERROR Could not define attribute view on path "/var/log/wazuh-indexer/wazuh-cluster.log" got access denied ("java.lang.RuntimePermission" "accessUserInformation") java.security.AccessControlException: access denied ("java.lang.RuntimePermission" "accessUserInformation")
c-bordon commented 1 year ago

Update report

I have created a new instance with the AMI (ami-0e3aa680272bebe7a) and I cannot reproduce the error, I have registered 7 different agents, I have navigated through different parts of the Wazuh dashboard interface and I cannot obtain the logs mentioned in the issue, I would need you to expand on how the actions were carried out. tests to try to replicate them: Screenshot_20230914_114319

Screenshot_20230914_114139

[root@wazuh-server ~]# journalctl | grep wazuh-indexer
Sep 14 13:58:51 wazuh-server systemd[1]: Configuration file /usr/lib/systemd/system/wazuh-indexer.service is marked world-inaccessible. This has no effect as configuration data is accessible via APIs without restrictions. Proceeding anyway.
Sep 14 13:59:49 wazuh-server systemd-entrypoint[3216]: WARNING: System::setSecurityManager has been called by org.opensearch.bootstrap.OpenSearch (file:/usr/share/wazuh-indexer/lib/opensearch-2.8.0.jar)
Sep 14 14:00:06 wazuh-server systemd-entrypoint[3216]: WARNING: System::setSecurityManager has been called by org.opensearch.bootstrap.Security (file:/usr/share/wazuh-indexer/lib/opensearch-2.8.0.jar)
Sep 14 14:00:06 wazuh-server systemd-entrypoint[3216]: 2023-09-14 14:00:06,269 main ERROR Could not define attribute view on path "/var/log/wazuh-indexer/wazuh-cluster_server.json" got access denied ("java.lang.RuntimePermission" "accessUserInformation") java.security.AccessControlException: access denied ("java.lang.RuntimePermission" "accessUserInformation")
Sep 14 14:00:06 wazuh-server systemd-entrypoint[3216]: 2023-09-14 14:00:06,276 main ERROR Could not define attribute view on path "/var/log/wazuh-indexer/wazuh-cluster.log" got access denied ("java.lang.RuntimePermission" "accessUserInformation") java.security.AccessControlException: access denied ("java.lang.RuntimePermission" "accessUserInformation")
Sep 14 14:01:26 wazuh-server systemd[1]: Configuration file /usr/lib/systemd/system/wazuh-indexer.service is marked world-inaccessible. This has no effect as configuration data is accessible via APIs without restrictions. Proceeding anyway.
Sep 14 14:01:27 wazuh-server systemd[1]: Configuration file /usr/lib/systemd/system/wazuh-indexer.service is marked world-inaccessible. This has no effect as configuration data is accessible via APIs without restrictions. Proceeding anyway.
[root@wazuh-server ~]# journalctl | grep wazuh-dashboard
Sep 14 13:58:51 wazuh-server systemd[1]: Configuration file /etc/systemd/system/wazuh-dashboard.service is marked world-inaccessible. This has no effect as configuration data is accessible via APIs without restrictions. Proceeding anyway.
Sep 14 13:59:04 wazuh-server systemd[1]: Started wazuh-dashboard.
Sep 14 14:01:26 wazuh-server systemd[1]: Configuration file /etc/systemd/system/wazuh-dashboard.service is marked world-inaccessible. This has no effect as configuration data is accessible via APIs without restrictions. Proceeding anyway.
Sep 14 14:01:27 wazuh-server systemd[1]: Configuration file /etc/systemd/system/wazuh-dashboard.service is marked world-inaccessible. This has no effect as configuration data is accessible via APIs without restrictions. Proceeding anyway.
Sep 14 14:01:27 wazuh-server systemd[1]: Stopping wazuh-dashboard...
Sep 14 14:01:28 wazuh-server systemd[1]: Stopped wazuh-dashboard.
Sep 14 14:01:28 wazuh-server systemd[1]: Started wazuh-dashboard.
[root@wazuh-server ~]# ip add
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 9001 qdisc mq state UP group default qlen 1000
    link/ether 0e:fe:7f:b7:01:b9 brd ff:ff:ff:ff:ff:ff
    inet 172.31.34.210/20 brd 172.31.47.255 scope global dynamic eth0
       valid_lft 2695sec preferred_lft 2695sec
    inet6 fe80::cfe:7fff:feb7:1b9/64 scope link 
       valid_lft forever preferred_lft forever
c-bordon commented 1 year ago

@Deblintrake09 Was the Wazuh stack working correctly despite these errors?

Deblintrake09 commented 1 year ago

@c-bordon The AMI behaved correctly. As it can be seen in the referenced issue in the original comment. This only was present on the AMI but not on the OVA, so we did not replicate it on our end.

teddytpc1 commented 1 year ago

As exposed here and here, the issue could not be reproduced. We are going to close this issue and re-open it if the errors are found again.

juliamagan commented 6 months ago

We are reopening this issue since these logs have appeared again in the OVA and AMI in 4.8.0 RC 1, in https://github.com/wazuh/wazuh/issues/23261.

vcerenu commented 6 months ago

I tried to reproduce the errors presented in the issue but did not get them.

I got other errors and warnings, which I uploaded to the Wazuh indexer team in this issue, but they were all known errors which have already been fixed in future releases.

I ask if you can provide more information regarding the steps and tools you have used to obtain the errors.