New installation error - indexer already installed but this is a new install

[Alfred Abrajano]

Hello Everyone,

Good day!
Does anyone have an idea why this is happening on a fresh new install?

[root@centos7 ~]# curl -sO https://packages.wazuh.com/4.4/wazuh-install.sh && sudo bash ./wazuh-install.sh -a
15/06/2023 07:32:29 INFO: Starting Wazuh installation assistant. Wazuh version: 4.4.4
15/06/2023 07:32:29 INFO: Verbose logging redirected to /var/log/wazuh-install.log
15/06/2023 07:32:33 ERROR: Wazuh indexer already installed.
15/06/2023 07:32:33 INFO: If you want to overwrite the current installation, run this script adding the option -o/--overwrite. This will erase all the existing configuration and data.



[root@centos7 ~]# curl -sO https://packages.wazuh.com/4.4/wazuh-install.sh && sudo bash ./wazuh-install.sh -o
15/06/2023 07:33:39 INFO: Starting Wazuh installation assistant. Wazuh version: 4.4.4
15/06/2023 07:33:39 INFO: Verbose logging redirected to /var/log/wazuh-install.log
15/06/2023 07:33:42 ERROR: The argument -o|--overwrite must be used in conjunction with -a|--all-in-one, -wd|--wazuh-dashboard, -wi|--wazuh-indexer, or -ws|--wazuh-server.


[root@centos7 ~]# curl -sO https://packages.wazuh.com/4.4/wazuh-install.sh && sudo bash ./wazuh-install.sh -o -a
15/06/2023 07:33:51 INFO: Starting Wazuh installation assistant. Wazuh version: 4.4.4
15/06/2023 07:33:51 INFO: Verbose logging redirected to /var/log/wazuh-install.log
15/06/2023 07:33:55 INFO: --- Removing existing Wazuh installation ---
15/06/2023 07:33:55 INFO: Removing Wazuh indexer.
15/06/2023 07:33:55 INFO: Wazuh indexer removed.
15/06/2023 07:33:55 INFO: Wazuh GPG key was not found in the system.
15/06/2023 07:33:55 INFO: Installation cleaned.
15/06/2023 07:34:05 INFO: Wazuh repository added.
15/06/2023 07:34:05 INFO: --- Configuration files ---
15/06/2023 07:34:05 INFO: Generating configuration files.
15/06/2023 07:34:07 INFO: Created wazuh-install-files.tar. It contains the Wazuh cluster key, certificates, and passwords necessary for installation.
15/06/2023 07:34:07 INFO: --- Wazuh indexer ---
15/06/2023 07:34:07 INFO: Starting Wazuh indexer installation.
15/06/2023 07:42:41 INFO: Wazuh indexer installation finished.
15/06/2023 07:42:41 INFO: Wazuh indexer post-install configuration finished.
15/06/2023 07:42:41 INFO: Starting service wazuh-indexer.
15/06/2023 07:45:42 ERROR: wazuh-indexer could not be started.
15/06/2023 07:45:42 INFO: --- Removing existing Wazuh installation ---
15/06/2023 07:45:42 INFO: Removing Wazuh indexer.
15/06/2023 07:45:44 INFO: Wazuh indexer removed.
15/06/2023 07:45:44 INFO: Removing Wazuh indexer.
15/06/2023 07:45:45 INFO: Wazuh indexer removed.
15/06/2023 07:45:45 INFO: Installation cleaned.

I am having the same error even if I reboot.

Thoughts?

Thanks,

Alfred

[Kasim Mustapha]

Hello Alfred, 

Thank you for reaching out to us. 

Based on the error message you provided, it seems like the Wazuh indexer could not be started. We recommend checking the logs for any specific error messages that could help identify the issue. 

Share the content of the /var/log/wazuh-install.log file with us.

If you have an existing unwanted Wazuh installation, I would recommend you remove them before performing the installation again.

https://documentation.wazuh.com/current/user-manual/uninstall/central-components.html

Additionally, please ensure that all the necessary dependencies are installed and that the system requirements are met. You can reference the link below for a quick guide on the requirements;
https://documentation.wazuh.com/current/quickstart.html#requirements

Let me know if you need further assistance. 

Best regards, 

Kasim Mustapha.

[Alfred Abrajano]

Hello Kasim,

Thank you, I will try it again and share /var/log/wazuh-install.log

Regards,

Alfred

--
You received this message because you are subscribed to the Google Groups "Wazuh mailing list" group.
To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+un...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/wazuh/bfadb3b5-ffd2-4fee-bca2-8d8d44c5d007n%40googlegroups.com.

[Alfred Abrajano]

Hello Kasim,

It worked!

I just did this:

# yum remove wazuh-indexer -y
# rm -rf /var/lib/wazuh-indexer/
# rm -rf /usr/share/wazuh-indexer/
# rm -rf /etc/wazuh-indexer/

Regards,

Alfred

[Kasim Mustapha]

Hello Alfred,

I am glad it worked. 

Don't hesitate to reach out if you have any questions/issues in the future.

Thank you.

regards,

Kasim