wazuh / wazuh-qa

Wazuh - Quality Assurance
GNU General Public License v2.0
65 stars 32 forks source link

Syscollector scanning IT fails for Windows agents #4230

Open Rebits opened 1 year ago

Rebits commented 1 year ago

Description

It has been detected in https://github.com/wazuh/wazuh/issues/17421 that the integration tests test_syscollector_scanning fails consistently.

It seems that the monitoring file is not being initialized properly, leading to the following error:

E TimeoutError: Could not find this event in None: DEBUG: Ending hotfixes scan

The expected log line was correctly produced in the Windows agent.

Evidences

pro-akim commented 11 months ago

Update

Additionally in Release 4.7.1 - Release Candidate 1 - Integration tests

The following scanning failures were found

ERROR    wazuh_testing:monitoring.py:466 Could not find this event in None: WARNING:.+ Invalid value for element 'max_eps': .+

ERROR    wazuh_testing:monitoring.py:466 Could not find this event in None: ERROR: Invalid content for attribute 'all' at module 'syscollector'.

ERROR    wazuh_testing:monitoring.py:466 Could not find this event in None: ERROR: Invalid content for tag 'ports' at module 'syscollector'.

E                   TimeoutError: Could not find this event in None: ERROR: Invalid content for tag 'processes' at module 'syscollector'.

E                   TimeoutError: Could not find this event in None: ERROR: Invalid content for attribute 'all' at module 'syscollector'.

E                   TimeoutError: Could not find this event in None: ERROR: Invalid content for tag 'ports' at module 'syscollector'.

E                   TimeoutError: Could not find this event in None: ERROR: Invalid content for tag 'packages' at module 'syscollector'.

E                   TimeoutError: Could not find this event in None: ERROR: Invalid content for tag 'network' at module 'syscollector'.