Upgrade 4.9 - Wazuh dashboard server is not ready yet

[Tzong Yu Chay]

It happen after I used sudo apt update and  sudo apt upgrade to update wazuh.

Below are the error log for Wazuh Dashboard

itadmin@mytawazuh01:~$ sudo systemctl status wazuh-dashboard.service
● wazuh-dashboard.service - wazuh-dashboard
     Loaded: loaded (/etc/systemd/system/wazuh-dashboard.service; enabled; vendor preset: enabled)
     Active: active (running) since Fri 2024-09-06 15:47:50 +08; 16min ago
   Main PID: 6120 (node)
      Tasks: 11 (limit: 4556)
     Memory: 173.2M
        CPU: 6.008s
     CGroup: /system.slice/wazuh-dashboard.service
             └─6120 /usr/share/wazuh-dashboard/node/bin/node /usr/share/wazuh-dashboard/src/cli/dist -c /etc/wazuh-dashboard/opensearch_dashboards.yml

Sep 06 15:58:57 mytawazuh01 opensearch-dashboards[6120]: {"type":"log","@timestamp":"2024-09-06T07:58:57Z","tags":["error","opensearch","data"],"pid":6120,"message":"[TimeoutError]: Request timed out"}
Sep 06 15:59:30 mytawazuh01 opensearch-dashboards[6120]: {"type":"log","@timestamp":"2024-09-06T07:59:30Z","tags":["error","opensearch","data"],"pid":6120,"message":"[TimeoutError]: Request timed out"}
Sep 06 16:00:02 mytawazuh01 opensearch-dashboards[6120]: {"type":"log","@timestamp":"2024-09-06T08:00:02Z","tags":["error","opensearch","data"],"pid":6120,"message":"[TimeoutError]: Request timed out"}
Sep 06 16:00:35 mytawazuh01 opensearch-dashboards[6120]: {"type":"log","@timestamp":"2024-09-06T08:00:35Z","tags":["error","opensearch","data"],"pid":6120,"message":"[TimeoutError]: Request timed out"}
Sep 06 16:01:07 mytawazuh01 opensearch-dashboards[6120]: {"type":"log","@timestamp":"2024-09-06T08:01:07Z","tags":["error","opensearch","data"],"pid":6120,"message":"[TimeoutError]: Request timed out"}
Sep 06 16:01:40 mytawazuh01 opensearch-dashboards[6120]: {"type":"log","@timestamp":"2024-09-06T08:01:40Z","tags":["error","opensearch","data"],"pid":6120,"message":"[TimeoutError]: Request timed out"}
Sep 06 16:02:12 mytawazuh01 opensearch-dashboards[6120]: {"type":"log","@timestamp":"2024-09-06T08:02:12Z","tags":["error","opensearch","data"],"pid":6120,"message":"[TimeoutError]: Request timed out"}
Sep 06 16:02:45 mytawazuh01 opensearch-dashboards[6120]: {"type":"log","@timestamp":"2024-09-06T08:02:45Z","tags":["error","opensearch","data"],"pid":6120,"message":"[TimeoutError]: Request timed out"}
Sep 06 16:03:17 mytawazuh01 opensearch-dashboards[6120]: {"type":"log","@timestamp":"2024-09-06T08:03:17Z","tags":["error","opensearch","data"],"pid":6120,"message":"[TimeoutError]: Request timed out"}
Sep 06 16:03:50 mytawazuh01 opensearch-dashboards[6120]: {"type":"log","@timestamp":"2024-09-06T08:03:50Z","tags":["error","opensearch","data"],"pid":6120,"message":"[TimeoutError]: Request timed out"}
itadmin@mytawazuh01:~$



    PID USER      PR  NI    VIRT    RES    SHR S  %CPU  %MEM     TIME+ COMMAND
   6120 wazuh-d+  20   0 1061092 197200  36064 S   0.0   4.9   0:06.07 node

Please assist. 

[Olusegun Adenrele Oyebo]

Hello Tzong,

When you get "Wazuh dashboard server is not ready yet" error it normally indicates that the Wazuh dashboard cannot communicate with the indexer.

From findings, the kibanaserver user seems to be causiing the issue after the upgrade.Try to change the password for Kibana user and check if that resolves the issue using the below command:

• /usr/share/wazuh-indexer/plugins/opensearch-security/tools/wazuh-passwords-tool.sh -u kibanaserver -p '<NEW_PASSWORD>'

If you have an all-in-one deployment, the password updates automatically where necessary, but if you're using a distributed deployment, you'll need to run the below command to update the kibanaserver password in the Wazuh dashboard keystore:

• echo <KIBANASERVER_PASSWORD> | /usr/share/wazuh-dashboard/bin/opensearch-dashboards-keystore --allow-root add -f --stdin opensearch.password

Next, restart the dashboard service with command systemctl restart wazuh-dashboard

If issue still persists, check if you have the right indexer ip set in the /etc/wazuh-dashboard/opensearch_dashboards.yml file and also check that the right certificate paths and filenames are well defined in the configuration file. You can compare it with what you have with the output of command ls -lrt /etc/wazuh-dashboard/certs/

Pleae keep in mind that the team is working to ensure that this doesn't happen in future upgrades, so we apologize for any inconveniences this must have caused.

Also going forward, we recommend that you follow the upgrade documentation and use as guide whenever you want to perform an upgrade:

• https://documentation.wazuh.com/current/upgrade-guide/upgrading-central-components.html

Let me know if this helps to resolve your issue.

Best regards.

[Tzong Yu Chay]

problem solve after install wazuh-dashboard/stable 4.9.0-2.

Thank for helps

[Olusegun Adenrele Oyebo]

Hello Tzong,

I'm glad it's now resolved.

We remain attentive to your queries.

Best regards.

--
You received this message because you are subscribed to the Google Groups "Wazuh | Mailing List" group.
To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+un...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/wazuh/dd94b764-9a0e-48bd-af16-7775fb77a81cn%40googlegroups.com.

[Minh Hiếu Lâm]

Hi all, 

I'm have same issues and still get error when  "try to change the password for Kibana"

Can you help me 

● wazuh-dashboard.service - wazuh-dashboard
     Loaded: loaded (/etc/systemd/system/wazuh-dashboard.service; enabled; preset: disabled)
     Active: active (running) since Fri 2024-09-13 10:44:59 +07; 1min 53s ago
   Main PID: 10339 (node)
      Tasks: 11 (limit: 407812)
     Memory: 167.3M
        CPU: 5.414s
     CGroup: /system.slice/wazuh-dashboard.service
             └─10339 /usr/share/wazuh-dashboard/node/bin/node /usr/share/wazuh-dashboard/src/cli/dist

Sep 13 10:46:38 WAZUH opensearch-dashboards[10339]: {"type":"log","@timestamp":"2024-09-13T03:46:38Z","tags":["info","savedobjects-service"],"pid":10339,"message":"Detected mapping change in \"properties.homepage\""}
Sep 13 10:46:39 WAZUH opensearch-dashboards[10339]: {"type":"log","@timestamp":"2024-09-13T03:46:39Z","tags":["info","savedobjects-service"],"pid":10339,"message":"Detected mapping change in \"properties.homepage\""}
Sep 13 10:46:41 WAZUH opensearch-dashboards[10339]: {"type":"log","@timestamp":"2024-09-13T03:46:41Z","tags":["info","savedobjects-service"],"pid":10339,"message":"Detected mapping change in \"properties.homepage\""}
Sep 13 10:46:42 WAZUH opensearch-dashboards[10339]: {"type":"log","@timestamp":"2024-09-13T03:46:42Z","tags":["info","savedobjects-service"],"pid":10339,"message":"Detected mapping change in \"properties.homepage\""}
Sep 13 10:46:44 WAZUH opensearch-dashboards[10339]: {"type":"log","@timestamp":"2024-09-13T03:46:44Z","tags":["info","savedobjects-service"],"pid":10339,"message":"Detected mapping change in \"properties.homepage\""}
Sep 13 10:46:45 WAZUH opensearch-dashboards[10339]: {"type":"log","@timestamp":"2024-09-13T03:46:45Z","tags":["info","savedobjects-service"],"pid":10339,"message":"Detected mapping change in \"properties.homepage\""}
Sep 13 10:46:47 WAZUH opensearch-dashboards[10339]: {"type":"log","@timestamp":"2024-09-13T03:46:47Z","tags":["info","savedobjects-service"],"pid":10339,"message":"Detected mapping change in \"properties.homepage\""}
Sep 13 10:46:48 WAZUH opensearch-dashboards[10339]: {"type":"log","@timestamp":"2024-09-13T03:46:48Z","tags":["info","savedobjects-service"],"pid":10339,"message":"Detected mapping change in \"properties.homepage\""}
Sep 13 10:46:50 WAZUH opensearch-dashboards[10339]: {"type":"log","@timestamp":"2024-09-13T03:46:50Z","tags":["info","savedobjects-service"],"pid":10339,"message":"Detected mapping change in \"properties.homepage\""}
Sep 13 10:46:51 WAZUH opensearch-dashboards[10339]: {"type":"log","@timestamp":"2024-09-13T03:46:51Z","tags":["info","savedobjects-service"],"pid":10339,"message":"Detected mapping change in \"properties.homepage\""}

Vào lúc 16:47:03 UTC+7 ngày Thứ Sáu, 6 tháng 9, 2024, Olusegun Adenrele Oyebo đã viết:

[Víctor Ariel Hermosa Riveros]

I'm having the same issue after updating wazuh with apt update...

root@audit-wazuh:~# systemctl status wazuh-dashboard.service

● wazuh-dashboard.service - wazuh-dashboard
     Loaded: loaded (/etc/systemd/system/wazuh-dashboard.service; enabled; vendor preset: enabled)

     Active: active (running) since Sun 2024-09-15 19:47:10 -04; 58min ago
   Main PID: 1119 (node)
      Tasks: 11 (limit: 38408)
     Memory: 277.9M
     CGroup: /system.slice/wazuh-dashboard.service
             └─1119 /usr/share/wazuh-dashboard/node/bin/node /usr/share/wazuh-dashboard/src/cli/dist

sep 15 20:45:15 audit-wazuh opensearch-dashboards[1119]: {"type":"log","@timestamp":"2024-09-16T00:45:15Z","tags":["info","savedobjects-service"],"pid":1119,"message":"Detected mapping change in \"properties.homepage\""}
sep 15 20:45:17 audit-wazuh opensearch-dashboards[1119]: {"type":"log","@timestamp":"2024-09-16T00:45:17Z","tags":["info","savedobjects-service"],"pid":1119,"message":"Detected mapping change in \"properties.homepage\""}
sep 15 20:45:18 audit-wazuh opensearch-dashboards[1119]: {"type":"log","@timestamp":"2024-09-16T00:45:18Z","tags":["info","savedobjects-service"],"pid":1119,"message":"Detected mapping change in \"properties.homepage\""}
sep 15 20:45:20 audit-wazuh opensearch-dashboards[1119]: {"type":"log","@timestamp":"2024-09-16T00:45:20Z","tags":["info","savedobjects-service"],"pid":1119,"message":"Detected mapping change in \"properties.homepage\""}
sep 15 20:45:21 audit-wazuh opensearch-dashboards[1119]: {"type":"log","@timestamp":"2024-09-16T00:45:21Z","tags":["info","savedobjects-service"],"pid":1119,"message":"Detected mapping change in \"properties.homepage\""}
sep 15 20:45:23 audit-wazuh opensearch-dashboards[1119]: {"type":"log","@timestamp":"2024-09-16T00:45:23Z","tags":["info","savedobjects-service"],"pid":1119,"message":"Detected mapping change in \"properties.homepage\""}
sep 15 20:45:24 audit-wazuh opensearch-dashboards[1119]: {"type":"log","@timestamp":"2024-09-16T00:45:24Z","tags":["info","savedobjects-service"],"pid":1119,"message":"Detected mapping change in \"properties.homepage\""}
sep 15 20:45:26 audit-wazuh opensearch-dashboards[1119]: {"type":"log","@timestamp":"2024-09-16T00:45:26Z","tags":["info","savedobjects-service"],"pid":1119,"message":"Detected mapping change in \"properties.homepage\""}
sep 15 20:45:27 audit-wazuh opensearch-dashboards[1119]: {"type":"log","@timestamp":"2024-09-16T00:45:27Z","tags":["info","savedobjects-service"],"pid":1119,"message":"Detected mapping change in \"properties.homepage\""}
sep 15 20:45:29 audit-wazuh opensearch-dashboards[1119]: {"type":"log","@timestamp":"2024-09-16T00:45:29Z","tags":["info","savedobjects-service"],"pid":1119,"message":"Detected mapping change in \"properties.homepage\""}
root@audit-wazuh:~#
root@audit-wazuh:~#
root@audit-wazuh:~#