mauromalara
commented
2 years ago Closed juliamagan closed 2 years ago
mauromalara
commented
2 years ago mauromalara
commented
2 years ago mauromalara
commented
2 years ago curl -k -u USER:PASS https://<INDEXER-IP>:9200/_cat/nodes?v
ip heap.percent ram.percent cpu load_1m load_5m load_15m node.role master name
10.0.0.178 18 82 0 0.00 0.00 0.00 dimr - node-7
10.0.2.169 33 81 0 0.00 0.00 0.00 dimr * node-2
10.0.2.230 12 83 0 0.02 0.01 0.00 dimr - node-1
10.0.2.170 23 82 0 0.00 0.00 0.00 dimr - node-3When accessing Home from another Opensearch module:
TypeError: NetworkError when attempting to fetch resource.
Wrapper https://demo-436-info-wazuh-5d79494dfa1b98ee.elb.us-west-1.amazonaws.com/1/bundles/core/core.entry.js:6
_createSuperInternal https://demo-436-info-wazuh-5d79494dfa1b98ee.elb.us-west-1.amazonaws.com/1/bundles/core/core.entry.js:6
HttpFetchError https://demo-436-info-wazuh-5d79494dfa1b98ee.elb.us-west-1.amazonaws.com/1/bundles/core/core.entry.js:6
_callee3$ https://demo-436-info-wazuh-5d79494dfa1b98ee.elb.us-west-1.amazonaws.com/1/bundles/core/core.entry.js:6
tryCatch https://demo-436-info-wazuh-5d79494dfa1b98ee.elb.us-west-1.amazonaws.com/1/bundles/plugin/indexManagementDashboards/indexManagementDashboards.plugin.js:1
invoke https://demo-436-info-wazuh-5d79494dfa1b98ee.elb.us-west-1.amazonaws.com/1/bundles/plugin/indexManagementDashboards/indexManagementDashboards.plugin.js:1Issue:
juliamagan
commented
2 years ago These are the modules configured in environment 1, and we can see events generated in all of them:
However, Osquery is configured in this environment, but it doesn't appear. If we enable it, see can see events:
These are the modules configured in environment 2, and we can see events generated in all of them except System Auditing and Policy monitoring, but they are enabled by default:
juliamagan
commented
2 years ago After performing several tests both in Discover and in different modules, we have not been able to find any warning.
juliamagan
commented
2 years ago Bad connection to CentOS agent:
juliamagan@pop-os:~$ ssh -i <key> paco@13.52.153.25
paco@13.52.153.25's password:
Permission denied, please try again.
paco@13.52.153.25's password:
Permission denied, please try again.
paco@13.52.153.25's password:
paco@13.52.153.25: Permission denied (publickey,gssapi-keyex,gssapi-with-mic,password).Generated alerts:
Description
The following issue aims to run the specified test for the current release candidate, report the results, and open new issues for any encountered errors.
Test information
Proposed checks
Conclusion 🔴
New bugs have been found when testing. In addition, some previously reported problems have been found again.
Issues found
Detected issues and previously reported
New opened issues
Auditors' validation
The definition of done for this one is the validation of the conclusions and the test results from all auditors.
All checks from below must be accepted in order to close this issue.
References