Wazuh dashboard server is not ready yet

Mauricio Noronha

unread,

Nov 25, 2022, 12:17:23 PM11/25/22

to Wazuh mailing list

Hello Wazuh Team!

I'm using Wazuh OVA.

Everything was going great until suddenly WAZUH crashed!

After restarting, it displays the error below:

What to do?

WAZUH-ERROR.txt

Roman Luna

unread,

Nov 25, 2022, 12:29:18 PM11/25/22

to Wazuh mailing list

Hi Mauricio,

It's seems to be by the error that you have no space left on your disk. You can check your disk by doing: df -h

You could try to remove any data that might not be important, remove older alerts from /var/ossec/logs/alerts/2022, in there you will see all the alerts with their respective date and if you are using archives.json you could disable that feature,

In here you will find more information regarding log data collection: https://documentation.wazuh.com/current/user-manual/capabilities/log-data-collection/how-it-works.html?highlight=archive#alert

Regards,

Roman Luna.

Mauricio Noronha

unread,

Nov 25, 2022, 1:37:27 PM11/25/22

to Wazuh mailing list

Hello Roman!

I expanded the partition size to 300GB, as shown in the attached image.

Executing the command systemctl status wazuh-manager.service the system shows that it is ok. I also ran the systemctl restart wazuh-manager.service command which runs successfully. But the error Wazuh dashboard server is not ready yet remains...

error_wazuh1.png

Screenshot_9.png

Lorenzo Miguel Elguea Fernandez

unread,

Nov 25, 2022, 1:48:20 PM11/25/22

to Mauricio Noronha, Wazuh mailing list

Can you share error from wazuh-dashboard service?

Lorenzo Elguea Fernández
Director de Ciberseguridad UP

. . . . . . . . . . . . . . . . . . . . . . . . . . .

Transformación Digital

Intercampus - CDMX
lel...@up.edu.mx
T. 55 5482 1666

Ext. 5500

up.edu.mx
TWITTER | FACEBOOK | INSTAGRAM | LINKEDIN

--
You received this message because you are subscribed to the Google Groups "Wazuh mailing list" group.
To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+un...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/wazuh/8536a8a3-5da4-46f0-b4c8-2a3abfa940cdn%40googlegroups.com.

^{AVISO DE
PRIVACIDAD: Las instituciones pertenecientes al Sistema UP-IPADE
utilizarán cualquier dato personal expuesto en el presente correo
electrónico, única y exclusivamente para cuestiones académicas,
administrativas, de comunicación, o bien para las finalidades expresadas
en cada asunto en concreto, esto en cumplimiento con la Ley Federal de
Protección de Datos Personales en Posesión de los Particulares. Para
mayor información acerca del tratamiento y de los derechos que puede
hacer valer, usted puede acceder al aviso de privacidad integral a
través de nuestras páginas de Internet: www.up.edu.mx / prepaup.up.edu.mx / www.ipade.mx / www.ipadealumni.com.mx
La información contenida en este correo es privada y confidencial, dirigida exclusivamente a su destinatario. Si usted no es el destinatario del mismo debe destruirlo y notificar al remitente absteniéndose de obtener copias, ni difundirlo por ningún sistema, ya que está prohibido y goza de la protección legal de las comunicaciones.}

Mauricio Noronha

unread,

Nov 25, 2022, 1:52:58 PM11/25/22

to Wazuh mailing list

Hi Lorenzzo!

Screenshot_10.png

Mauricio Noronha

unread,

Nov 25, 2022, 2:02:22 PM11/25/22

to Wazuh mailing list

Screenshot_11.png

Lorenzo Miguel Elguea Fernandez

unread,

Nov 25, 2022, 2:10:36 PM11/25/22

to Mauricio Noronha, Wazuh mailing list

I new user in wazuh, but i see the wazuh-dashboard service is running.

you change port or user/password from api (wazuh-manager service)?

Can yo have an answer from a web portal?

Lorenzo Elguea Fernández
Director de Ciberseguridad UP

. . . . . . . . . . . . . . . . . . . . . . . . . . .

Transformación Digital

Intercampus - CDMX
lel...@up.edu.mx
T. 55 5482 1666

Ext. 5500

up.edu.mx
TWITTER | FACEBOOK | INSTAGRAM | LINKEDIN

To view this discussion on the web visit https://groups.google.com/d/msgid/wazuh/bc9ea074-194f-440e-a286-ed4f83a0756cn%40googlegroups.com.

Mauricio Noronha

unread,

Nov 25, 2022, 2:29:43 PM11/25/22

to Wazuh mailing list

Lorenzzo,

we didn't change anything in Wazuh.
but how can I confirm username and password of the services?

Lorenzo Miguel Elguea Fernandez

unread,

Nov 25, 2022, 3:59:42 PM11/25/22

to Mauricio Noronha, Wazuh mailing list

mmm in this file, WAZUH_PATH/api/configuration/api.yaml

for example in /var/ossec/api/configuration/api.yaml

This info is in this URL https://documentation.wazuh.com/current/user-manual/api/securing-api.html and https://documentation.wazuh.com/current/user-manual/wazuh-dashboard/config-file.html

General, the user is wazuh-wui, and default port is 55000

When I install, change the default password, but not the port. In OVA image of wazuh, the password for api user (wazuh-wui) is the same "wazuh-wui)

Lorenzo Elguea Fernández
Director de Ciberseguridad UP

. . . . . . . . . . . . . . . . . . . . . . . . . . .

Transformación Digital

Intercampus - CDMX
lel...@up.edu.mx
T. 55 5482 1666

Ext. 5500

up.edu.mx
TWITTER | FACEBOOK | INSTAGRAM | LINKEDIN

To view this discussion on the web visit https://groups.google.com/d/msgid/wazuh/6d1ec466-399f-4bfe-93cd-2cc4daaade73n%40googlegroups.com.

Roman Luna

unread,

Nov 28, 2022, 3:26:22 PM11/28/22

to Wazuh mailing list

Hi,

The error indicates a connection refuse to Wazuh Indexe, The "connection refused" message normally is due to network configurations, closed ports, service down, etc...

We should check that the service is running properly:

systemctl status wazuh-indexer

Additionally, it is usually best to look at the log (change the last part to the newest file):

grep -i -E "error|warn" /var/log/elasticsearch/<elasticsearch-cluster-name>.log

Documentation about ports:

https://documentation.wazuh.com/current/getting-started/architecture.html#required-ports

Regards.

Reply all

Reply to author

Forward