worker node agent upgrade issue

[Ethan Thompson]

hello, team

I've added a wazuh-manager worker node.
We're currently conducting various tests.
I'm contacting you regarding an issue related to agent upgrades.
The issue is as follows:

Agents connected to the master node are upgraded.
However, agents connected to worker nodes are not upgraded.

# master, worker version: v4.12.0

# repo info (Both master and worker nodes are the same.)
pwd
/var/repo/linux/x86_64
-rw-r--r--. 1 root root      49  9월 16 05:21 versions
-rw-r--r--. 1 root root 9858799  8월 19 11:19 wazuh_agent_v4.12.0_linux_x86_64.rpm.wpk

# CLI TEST
/var/ossec/bin/agent_upgrade -a 003 -f /var/repo/linux/x86_64/wazuh_agent_v4.12.0_linux_x86_64.rpm.wpk -x upgrade.sh

Upgrading...

Failed upgrades:
        Agent 003 status: Send lock restart error

# DEV TOOLS TEST
PUT /agents/upgrade?agents_list=003
{
  "wpk_repo": "/var/repo/linux/x86_64/wazuh_agent_v4.12.0_linux_x86_64.rpm.wpk",
  "installer": "upgrade.sh"
}

{
  "data": {
    "affected_items": [
      {
        "agent": "003",
        "task_id": 8
      }
    ],
    "total_affected_items": 1,
    "total_failed_items": 0,
    "failed_items": []
  },
  "message": "All upgrade tasks were created",
  "error": 0
}

[hasitha.u...@wazuh.com]

Hi Ethan,

The message "Send lock restart error" during a Wazuh agent upgrade typically indicates a communication or synchronization problem between the agent and the manager. It can be that certificates are not syncing properly as at the time it was initiated.

Can you share some historical logs from your agent located at
Windows: C:\Program Files (x86)\ossec-agent\upgrade\upgrade.log
Linux: /var/ossec/logs/upgrade.log
So we take a look at them to understand what was happening at the time you initiated the upgrade.

For more details, please refer to this: https://documentation.wazuh.com/current/user-manual/agent/agent-management/remote-upgrading/upgrading-agent.html

Additionally, try enabling debug mode in the wazuh-remoted.
Edit the  /var/ossec/etc/internal_options.conf
file remoted.debug=0 to 2
Then restart the manager and share the ossec.log to check further.
systemctl restart wazuh-manager

cat /var/ossec/logs/ossec.log | grep -i -E "remoted|error|warn"
Ref: https://documentation.wazuh.com/current/user-manual/reference/internal-options.html#remoted

Let me know the update on this.

[Ethan Thompson]

Hi  hasitha.upekshitha

Here's the answer.

I've updated the Wazuh operating information.

# cluster status

cluster_control -l

NAME     TYPE    VERSION  ADDRESS

wazuh-1  master  4.12.0   172.24.32.182

wazuh-2  worker  4.12.0   172.24.32.181

# agent status

/var/ossec/bin/cluster_control -a

ID   NAME                   IP             STATUS  VERSION        NODE NAME

000  localhost.localdomain  127.0.0.1      active  Wazuh v4.12.0  wazuh-1

004  worker_agent           172.24.32.180  active  Wazuh v4.9.0   wazuh-2

005  master_agent           172.24.32.110  active  Wazuh v4.9.0   wazuh-1

# agent status detail (003 was changed to 004 by reinstallation.)

/var/ossec/bin/agent_control -i 004

 

Wazuh agent_control. Agent information:

   Agent ID:   004

   Agent Name: worker_agent

   IP address: any

   Status:     Active

 

   Operating system:    Linux |worker_agent |4.18.0-477.10.1.el8_8.x86_64 |#1 SMP Tue May 16 11:38:37 UTC 2023 |x86_64

   Client version:      Wazuh v4.9.0

   Configuration hash:  ab73af41699f13fdd81903b5f23d8d00

   Shared file hash:    cb5dc59d195320bb20b6039a519a8c0e

   Last keep alive:     1758066508

 

   Syscheck last started at:  Unknown

   Syscheck last ended at:    Unknown

/var/ossec/bin/agent_control -i 005

 

Wazuh agent_control. Agent information:

   Agent ID:   005

   Agent Name: master_agent

   IP address: any

   Status:     Active

 

   Operating system:    Linux |master_agent |4.18.0-513.24.1.el8_9.x86_64 |#1 SMP Thu Apr 4 18:13:02 UTC 2024 |x86_64

   Client version:      Wazuh v4.9.0

   Configuration hash:  ab73af41699f13fdd81903b5f23d8d00

   Shared file hash:    cb5dc59d195320bb20b6039a519a8c0e

   Last keep alive:     1758066557

 

   Syscheck last started at:  Tue Sep 16 19:38:28 2025

   Syscheck last ended at:    Tue Sep 16 19:38:30 2025

# Enable debug mode and upgrade

/var/ossec/bin/agent_upgrade -a 004 -f /var/repo/linux/x86_64/wazuh_agent_v4.12.0_linux_x86_64.rpm.wpk -x upgrade.sh

 

Upgrading...

 

Failed upgrades:

        Agent 004 status: Send lock restart error

/var/ossec/bin/agent_upgrade -a 005 -f /var/repo/linux/x86_64/wazuh_agent_v4.12.0_linux_x86_64.rpm.wpk -x upgrade.sh

 

Upgrading...

 

 

Upgraded agents:

        Agent 005 upgraded: Wazuh v4.9.0 -> Wazuh v4.12.0

# Response to requests

1. There is no upgrade.log file in the path

2. master ossec.log (Attach file)

2025/09/16 20:02:08 wazuh-remoted[73304] sendmsg.c:82 at send_msg(): DEBUG: (1245): Sending message to disconnected agent '004'.
2025/09/16 20:02:08 wazuh-remoted[73304] request.c:169 at req_dispatch(): ERROR: Cannot send request to agent '004'
2025/09/16 20:02:08 wazuh-modulesd:agent-upgrade: ERROR: (8116): Error response from agent: 'Cannot send request'
3. worker ossec.log: No abnormal logs (Attach file)

2025년 9월 16일 (화) 오후 7:37, 'hasitha.u...@wazuh.com' via Wazuh | Mailing List <wa...@googlegroups.com>님이 작성:

--
You received this message because you are subscribed to a topic in the Google Groups "Wazuh | Mailing List" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/wazuh/lbDyEGf_lDY/unsubscribe.
To unsubscribe from this group and all its topics, send an email to wazuh+un...@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/wazuh/8e9dc8af-a727-4b96-b996-006762aae6f1n%40googlegroups.com.

[Ethan Thompson]

Hi  hasitha.upekshitha

The screenshot above is not accurate.

During testing, all agents were active.

2025년 9월 17일 (수) 오전 9:24, Ethan Thompson <xgr...@gmail.com>님이 작성:

[Ethan Thompson]

Hi  hasitha.upekshitha

When restarting worker_agent, the following fail log is recorded in worker ossec.conf.

2025/09/16 20:57:59 wazuh-remoted[62884] ar-forward.c:41 at AR_Forward(): DEBUG: Active response request received: (msg_to_agent) [] N!S 004 syscollector_hwinfo dbsync checksum_fail {"begin":"1849-4046-3735-7976-3794-3431-70","end":"1849-4046-3735-7976-3794-3431-70","id":1758070679}
2025/09/16 20:57:59 wazuh-remoted[62884] ar-forward.c:100 at AR_Forward(): DEBUG: Active response sent: #!-syscollector_hwinfo dbsync checksum_fail {"begin":"1849-4046-3735-7976-3794-3431-70","end":"1849-4046-3735-7976-3794-3431-70","id":1758070679}
2025/09/16 20:57:59 wazuh-remoted[62884] ar-forward.c:41 at AR_Forward(): DEBUG: Active response request received: (msg_to_agent) [] N!S 004 syscollector_osinfo dbsync checksum_fail {"begin":"Rocky Linux","end":"Rocky Linux","id":1758070679}
2025/09/16 20:57:59 wazuh-remoted[62884] ar-forward.c:100 at AR_Forward(): DEBUG: Active response sent: #!-syscollector_osinfo dbsync checksum_fail {"begin":"Rocky Linux","end":"Rocky Linux","id":1758070679}
2025/09/16 20:57:59 wazuh-remoted[62884] ar-forward.c:41 at AR_Forward(): DEBUG: Active response request received: (msg_to_agent) [] N!S 004 syscollector_network_iface dbsync checksum_fail {"begin":"d4aa8b01955e438235d586585492f3f5edceec1b","end":"d4aa8b01955e438235d586585492f3f5edceec1b","id":1758070679}
2025/09/16 20:57:59 wazuh-remoted[62884] ar-forward.c:100 at AR_Forward(): DEBUG: Active response sent: #!-syscollector_network_iface dbsync checksum_fail {"begin":"d4aa8b01955e438235d586585492f3f5edceec1b","end":"d4aa8b01955e438235d586585492f3f5edceec1b","id":1758070679}
2025/09/16 20:58:00 wazuh-remoted[62884] ar-forward.c:41 at AR_Forward(): DEBUG: Active response request received: (msg_to_agent) [] N!S 004 syscollector_processes dbsync checksum_fail {"begin":"1","end":"777","id":1758070680}
2025/09/16 20:58:00 wazuh-remoted[62884] ar-forward.c:100 at AR_Forward(): DEBUG: Active response sent: #!-syscollector_processes dbsync checksum_fail {"begin":"1","end":"777","id":1758070680}
2025/09/16 20:58:00 wazuh-remoted[62884] ar-forward.c:41 at AR_Forward(): DEBUG: Active response request received: (msg_to_agent) [] N!S 004 syscollector_processes dbsync checksum_fail {"begin":"1","end":"33","id":1758070680}
2025/09/16 20:58:00 wazuh-remoted[62884] ar-forward.c:100 at AR_Forward(): DEBUG: Active response sent: #!-syscollector_processes dbsync checksum_fail {"begin":"1","end":"33","id":1758070680}
2025/09/16 20:58:00 wazuh-remoted[62884] ar-forward.c:41 at AR_Forward(): DEBUG: Active response request received: (msg_to_agent) [] N!S 004 syscollector_processes dbsync checksum_fail {"begin":"34","end":"777","id":1758070680}
2025/09/16 20:58:00 wazuh-remoted[62884] ar-forward.c:100 at AR_Forward(): DEBUG: Active response sent: #!-syscollector_processes dbsync checksum_fail {"begin":"34","end":"777","id":1758070680}
2025/09/16 20:58:00 wazuh-remoted[62884] ar-forward.c:41 at AR_Forward(): DEBUG: Active response request received: (msg_to_agent) [] N!S 004 syscollector_processes dbsync checksum_fail {"begin":"1","end":"2533","id":1758070680}
2025/09/16 20:58:00 wazuh-remoted[62884] ar-forward.c:100 at AR_Forward(): DEBUG: Active response sent: #!-syscollector_processes dbsync checksum_fail {"begin":"1","end":"2533","id":1758070680}
2025/09/16 20:58:01 wazuh-remoted[62884] ar-forward.c:41 at AR_Forward(): DEBUG: Active response request received: (msg_to_agent) [] N!S 004 syscollector_processes dbsync checksum_fail {"begin":"2534","end":"33","id":1758070680}
2025/09/16 20:58:01 wazuh-remoted[62884] ar-forward.c:100 at AR_Forward(): DEBUG: Active response sent: #!-syscollector_processes dbsync checksum_fail {"begin":"2534","end":"33","id":1758070680}
2025/09/16 20:58:01 wazuh-remoted[62884] state.c:161 at rem_write_state(): DEBUG: Updating state file.
2025/09/16 20:58:01 wazuh-remoted[62884] ar-forward.c:41 at AR_Forward(): DEBUG: Active response request received: (msg_to_agent) [] N!S 004 syscollector_processes dbsync checksum_fail {"begin":"34","end":"56","id":1758070680}
2025/09/16 20:58:01 wazuh-remoted[62884] ar-forward.c:100 at AR_Forward(): DEBUG: Active response sent: #!-syscollector_processes dbsync checksum_fail {"begin":"34","end":"56","id":1758070680}
2025/09/16 20:58:01 wazuh-remoted[62884] ar-forward.c:41 at AR_Forward(): DEBUG: Active response request received: (msg_to_agent) [] N!S 004 syscollector_processes dbsync checksum_fail {"begin":"588","end":"777","id":1758070680}
2025/09/16 20:58:01 wazuh-remoted[62884] ar-forward.c:100 at AR_Forward(): DEBUG: Active response sent: #!-syscollector_processes dbsync checksum_fail {"begin":"588","end":"777","id":1758070680}
2025/09/16 20:58:01 wazuh-remoted[62884] ar-forward.c:41 at AR_Forward(): DEBUG: Active response request received: (msg_to_agent) [] N!S 004 syscollector_processes dbsync checksum_fail {"begin":"1","end":"16","id":1758070680}
2025/09/16 20:58:01 wazuh-remoted[62884] ar-forward.c:100 at AR_Forward(): DEBUG: Active response sent: #!-syscollector_processes dbsync checksum_fail {"begin":"1","end":"16","id":1758070680}
2025/09/16 20:58:01 wazuh-remoted[62884] ar-forward.c:41 at AR_Forward(): DEBUG: Active response request received: (msg_to_agent) [] N!S 004 syscollector_processes dbsync checksum_fail {"begin":"162","end":"2533","id":1758070680}
2025/09/16 20:58:01 wazuh-remoted[62884] ar-forward.c:100 at AR_Forward(): DEBUG: Active response sent: #!-syscollector_processes dbsync checksum_fail {"begin":"162","end":"2533","id":1758070680}
2025/09/16 20:58:01 wazuh-remoted[62884] ar-forward.c:41 at AR_Forward(): DEBUG: Active response request received: (msg_to_agent) [] N!S 004 syscollector_processes dbsync checksum_fail {"begin":"2534","end":"29758","id":1758070680}
2025/09/16 20:58:01 wazuh-remoted[62884] ar-forward.c:100 at AR_Forward(): DEBUG: Active response sent: #!-syscollector_processes dbsync checksum_fail {"begin":"2534","end":"29758","id":1758070680}
2025/09/16 20:58:01 wazuh-remoted[62884] ar-forward.c:41 at AR_Forward(): DEBUG: Active response request received: (msg_to_agent) [] N!S 004 syscollector_processes dbsync checksum_fail {"begin":"29865","end":"33","id":1758070680}
2025/09/16 20:58:01 wazuh-remoted[62884] ar-forward.c:100 at AR_Forward(): DEBUG: Active response sent: #!-syscollector_processes dbsync checksum_fail {"begin":"29865","end":"33","id":1758070680}
2025/09/16 20:58:01 wazuh-remoted[62884] ar-forward.c:41 at AR_Forward(): DEBUG: Active response request received: (msg_to_agent) [] N!S 004 syscollector_processes dbsync checksum_fail {"begin":"388","end":"56","id":1758070680}
2025/09/16 20:58:01 wazuh-remoted[62884] ar-forward.c:100 at AR_Forward(): DEBUG: Active response sent: #!-syscollector_processes dbsync checksum_fail {"begin":"388","end":"56","id":1758070680}
2025/09/16 20:58:01 wazuh-remoted[62884] ar-forward.c:41 at AR_Forward(): DEBUG: Active response request received: (msg_to_agent) [] N!S 004 syscollector_processes dbsync checksum_fail {"begin":"588","end":"689","id":1758070680}
2025/09/16 20:58:01 wazuh-remoted[62884] ar-forward.c:100 at AR_Forward(): DEBUG: Active response sent: #!-syscollector_processes dbsync checksum_fail {"begin":"588","end":"689","id":1758070680}
2025/09/16 20:58:01 wazuh-remoted[62884] ar-forward.c:41 at AR_Forward(): DEBUG: Active response request received: (msg_to_agent) [] N!S 004 syscollector_processes dbsync checksum_fail {"begin":"690","end":"777","id":1758070680}
2025/09/16 20:58:01 wazuh-remoted[62884] ar-forward.c:100 at AR_Forward(): DEBUG: Active response sent: #!-syscollector_processes dbsync checksum_fail {"begin":"690","end":"777","id":1758070680}
2025/09/16 20:58:02 wazuh-remoted[62884] ar-forward.c:41 at AR_Forward(): DEBUG: Active response request received: (msg_to_agent) [] N!S 004 syscollector_processes dbsync checksum_fail {"begin":"1","end":"12","id":1758070680}
2025/09/16 20:58:02 wazuh-remoted[62884] ar-forward.c:100 at AR_Forward(): DEBUG: Active response sent: #!-syscollector_processes dbsync checksum_fail {"begin":"1","end":"12","id":1758070680}
2025/09/16 20:58:02 wazuh-remoted[62884] ar-forward.c:41 at AR_Forward(): DEBUG: Active response request received: (msg_to_agent) [] N!S 004 syscollector_processes dbsync checksum_fail {"begin":"120","end":"16","id":1758070680}
2025/09/16 20:58:02 wazuh-remoted[62884] ar-forward.c:100 at AR_Forward(): DEBUG: Active response sent: #!-syscollector_processes dbsync checksum_fail {"begin":"120","end":"16","id":1758070680}
2025/09/16 20:58:02 wazuh-remoted[62884] msgs.c:194 at StoreCounter(): DEBUG: Opening rids for agent 004.
2025/09/16 20:58:02 wazuh-remoted[62884] msgs.c:204 at StoreCounter(): DEBUG: Pushing rids_node for agent 004.
2025/09/16 20:58:02 wazuh-remoted[62884] ar-forward.c:41 at AR_Forward(): DEBUG: Active response request received: (msg_to_agent) [] N!S 004 syscollector_processes dbsync checksum_fail {"begin":"23","end":"2533","id":1758070680}
2025/09/16 20:58:02 wazuh-remoted[62884] ar-forward.c:100 at AR_Forward(): DEBUG: Active response sent: #!-syscollector_processes dbsync checksum_fail {"begin":"23","end":"2533","id":1758070680}
2025/09/16 20:58:02 wazuh-remoted[62884] ar-forward.c:41 at AR_Forward(): DEBUG: Active response request received: (msg_to_agent) [] N!S 004 syscollector_processes dbsync checksum_fail {"begin":"2534","end":"25463","id":1758070680}
2025/09/16 20:58:02 wazuh-remoted[62884] ar-forward.c:100 at AR_Forward(): DEBUG: Active response sent: #!-syscollector_processes dbsync checksum_fail {"begin":"2534","end":"25463","id":1758070680}
2025/09/16 20:58:02 wazuh-remoted[62884] ar-forward.c:41 at AR_Forward(): DEBUG: Active response request received: (msg_to_agent) [] N!S 004 syscollector_processes dbsync checksum_fail {"begin":"26","end":"29758","id":1758070680}
2025/09/16 20:58:02 wazuh-remoted[62884] ar-forward.c:100 at AR_Forward(): DEBUG: Active response sent: #!-syscollector_processes dbsync checksum_fail {"begin":"26","end":"29758","id":1758070680}
2025/09/16 20:58:02 wazuh-remoted[62884] ar-forward.c:41 at AR_Forward(): DEBUG: Active response request received: (msg_to_agent) [] N!S 004 syscollector_processes dbsync checksum_fail {"begin":"29865","end":"30","id":1758070680}
2025/09/16 20:58:02 wazuh-remoted[62884] ar-forward.c:100 at AR_Forward(): DEBUG: Active response sent: #!-syscollector_processes dbsync checksum_fail {"begin":"29865","end":"30","id":1758070680}
2025/09/16 20:58:02 wazuh-remoted[62884] ar-forward.c:41 at AR_Forward(): DEBUG: Active response request received: (msg_to_agent) [] N!S 004 syscollector_processes dbsync checksum_fail {"begin":"30002","end":"33","id":1758070680}
2025/09/16 20:58:02 wazuh-remoted[62884] ar-forward.c:100 at AR_Forward(): DEBUG: Active response sent: #!-syscollector_processes dbsync checksum_fail {"begin":"30002","end":"33","id":1758070680}
2025/09/16 20:58:02 wazuh-remoted[62884] ar-forward.c:41 at AR_Forward(): DEBUG: Active response request received: (msg_to_agent) [] N!S 004 syscollector_processes dbsync checksum_fail {"begin":"497","end":"56","id":1758070680}
2025/09/16 20:58:02 wazuh-remoted[62884] ar-forward.c:100 at AR_Forward(): DEBUG: Active response sent: #!-syscollector_processes dbsync checksum_fail {"begin":"497","end":"56","id":1758070680}
2025/09/16 20:58:03 wazuh-remoted[62884] ar-forward.c:41 at AR_Forward(): DEBUG: Active response request received: (msg_to_agent) [] N!S 004 syscollector_processes dbsync checksum_fail {"begin":"588","end":"624","id":1758070680}
2025/09/16 20:58:03 wazuh-remoted[62884] ar-forward.c:100 at AR_Forward(): DEBUG: Active response sent: #!-syscollector_processes dbsync checksum_fail {"begin":"588","end":"624","id":1758070680}
2025/09/16 20:58:03 wazuh-remoted[62884] ar-forward.c:41 at AR_Forward(): DEBUG: Active response request received: (msg_to_agent) [] N!S 004 syscollector_processes dbsync checksum_fail {"begin":"625","end":"689","id":1758070680}
2025/09/16 20:58:03 wazuh-remoted[62884] ar-forward.c:100 at AR_Forward(): DEBUG: Active response sent: #!-syscollector_processes dbsync checksum_fail {"begin":"625","end":"689","id":1758070680}
2025/09/16 20:58:03 wazuh-remoted[62884] ar-forward.c:41 at AR_Forward(): DEBUG: Active response request received: (msg_to_agent) [] N!S 004 syscollector_processes dbsync checksum_fail {"begin":"690","end":"739","id":1758070680}
2025/09/16 20:58:03 wazuh-remoted[62884] ar-forward.c:100 at AR_Forward(): DEBUG: Active response sent: #!-syscollector_processes dbsync checksum_fail {"begin":"690","end":"739","id":1758070680}
2025/09/16 20:58:03 wazuh-remoted[62884] ar-forward.c:41 at AR_Forward(): DEBUG: Active response request received: (msg_to_agent) [] N!S 004 syscollector_processes dbsync checksum_fail {"begin":"740","end":"777","id":1758070680}
2025/09/16 20:58:03 wazuh-remoted[62884] ar-forward.c:100 at AR_Forward(): DEBUG: Active response sent: #!-syscollector_processes dbsync checksum_fail {"begin":"740","end":"777","id":1758070680}
2025/09/16 20:58:03 wazuh-remoted[62884] ar-forward.c:41 at AR_Forward(): DEBUG: Active response request received: (msg_to_agent) [] N!S 004 syscollector_processes dbsync checksum_fail {"begin":"1","end":"11","id":1758070680}
2025/09/16 20:58:03 wazuh-remoted[62884] ar-forward.c:100 at AR_Forward(): DEBUG: Active response sent: #!-syscollector_processes dbsync checksum_fail {"begin":"1","end":"11","id":1758070680}
2025/09/16 20:58:03 wazuh-remoted[62884] ar-forward.c:41 at AR_Forward(): DEBUG: Active response request received: (msg_to_agent) [] N!S 004 syscollector_processes dbsync checksum_fail {"begin":"120","end":"1231","id":1758070680}
2025/09/16 20:58:03 wazuh-remoted[62884] ar-forward.c:100 at AR_Forward(): DEBUG: Active response sent: #!-syscollector_processes dbsync checksum_fail {"begin":"120","end":"1231","id":1758070680}
2025/09/16 20:58:03 wazuh-remoted[62884] ar-forward.c:41 at AR_Forward(): DEBUG: Active response request received: (msg_to_agent) [] N!S 004 syscollector_processes dbsync checksum_fail {"begin":"13","end":"16","id":1758070680}
2025/09/16 20:58:03 wazuh-remoted[62884] ar-forward.c:100 at AR_Forward(): DEBUG: Active response sent: #!-syscollector_processes dbsync checksum_fail {"begin":"13","end":"16","id":1758070680}
2025/09/16 20:58:03 wazuh-remoted[62884] ar-forward.c:41 at AR_Forward(): DEBUG: Active response request received: (msg_to_agent) [] N!S 004 syscollector_processes dbsync checksum_fail {"begin":"23","end":"2313","id":1758070680}
2025/09/16 20:58:03 wazuh-remoted[62884] ar-forward.c:100 at AR_Forward(): DEBUG: Active response sent: #!-syscollector_processes dbsync checksum_fail {"begin":"23","end":"2313","id":1758070680}
2025/09/16 20:58:04 wazuh-remoted[62884] ar-forward.c:41 at AR_Forward(): DEBUG: Active response request received: (msg_to_agent) [] N!S 004 syscollector_processes dbsync checksum_fail {"begin":"2540","end":"25463","id":1758070680}
2025/09/16 20:58:04 wazuh-remoted[62884] ar-forward.c:100 at AR_Forward(): DEBUG: Active response sent: #!-syscollector_processes dbsync checksum_fail {"begin":"2540","end":"25463","id":1758070680}
2025/09/16 20:58:04 wazuh-remoted[62884] ar-forward.c:41 at AR_Forward(): DEBUG: Active response request received: (msg_to_agent) [] N!S 004 syscollector_processes dbsync checksum_fail {"begin":"26","end":"28","id":1758070680}
2025/09/16 20:58:04 wazuh-remoted[62884] ar-forward.c:100 at AR_Forward(): DEBUG: Active response sent: #!-syscollector_processes dbsync checksum_fail {"begin":"26","end":"28","id":1758070680}
2025/09/16 20:58:04 wazuh-remoted[62884] ar-forward.c:41 at AR_Forward(): DEBUG: Active response request received: (msg_to_agent) [] N!S 004 syscollector_processes dbsync checksum_fail {"begin":"29","end":"29758","id":1758070680}
2025/09/16 20:58:04 wazuh-remoted[62884] ar-forward.c:100 at AR_Forward(): DEBUG: Active response sent: #!-syscollector_processes dbsync checksum_fail {"begin":"29","end":"29758","id":1758070680}
2025/09/16 20:58:04 wazuh-remoted[62884] ar-forward.c:41 at AR_Forward(): DEBUG: Active response request received: (msg_to_agent) [] N!S 004 syscollector_processes dbsync no_data {"begin":"29865","end":"29945","id":1758070680}
2025/09/16 20:58:04 wazuh-remoted[62884] ar-forward.c:100 at AR_Forward(): DEBUG: Active response sent: #!-syscollector_processes dbsync no_data {"begin":"29865","end":"29945","id":1758070680}
2025/09/16 20:58:04 wazuh-remoted[62884] ar-forward.c:41 at AR_Forward(): DEBUG: Active response request received: (msg_to_agent) [] N!S 004 syscollector_processes dbsync checksum_fail {"begin":"29975","end":"30","id":1758070680}
2025/09/16 20:58:04 wazuh-remoted[62884] ar-forward.c:100 at AR_Forward(): DEBUG: Active response sent: #!-syscollector_processes dbsync checksum_fail {"begin":"29975","end":"30","id":1758070680}
2025/09/16 20:58:04 wazuh-remoted[62884] ar-forward.c:41 at AR_Forward(): DEBUG: Active response request received: (msg_to_agent) [] N!S 004 syscollector_processes dbsync no_data {"begin":"30002","end":"30034","id":1758070680}
2025/09/16 20:58:04 wazuh-remoted[62884] ar-forward.c:100 at AR_Forward(): DEBUG: Active response sent: #!-syscollector_processes dbsync no_data {"begin":"30002","end":"30034","id":1758070680}
2025/09/16 20:58:04 wazuh-remoted[62884] ar-forward.c:41 at AR_Forward(): DEBUG: Active response request received: (msg_to_agent) [] N!S 004 syscollector_processes dbsync checksum_fail {"begin":"30125","end":"33","id":1758070680}
2025/09/16 20:58:04 wazuh-remoted[62884] ar-forward.c:100 at AR_Forward(): DEBUG: Active response sent: #!-syscollector_processes dbsync checksum_fail {"begin":"30125","end":"33","id":1758070680}
2025/09/16 20:58:04 wazuh-remoted[62884] ar-forward.c:41 at AR_Forward(): DEBUG: Active response request received: (msg_to_agent) [] N!S 004 syscollector_processes dbsync checksum_fail {"begin":"500","end":"56","id":1758070680}
2025/09/16 20:58:04 wazuh-remoted[62884] ar-forward.c:100 at AR_Forward(): DEBUG: Active response sent: #!-syscollector_processes dbsync checksum_fail {"begin":"500","end":"56","id":1758070680}
2025/09/16 20:58:05 wazuh-remoted[62884] ar-forward.c:41 at AR_Forward(): DEBUG: Active response request received: (msg_to_agent) [] N!S 004 syscollector_processes dbsync checksum_fail {"begin":"588","end":"620","id":1758070680}
2025/09/16 20:58:05 wazuh-remoted[62884] ar-forward.c:100 at AR_Forward(): DEBUG: Active response sent: #!-syscollector_processes dbsync checksum_fail {"begin":"588","end":"620","id":1758070680}
2025/09/16 20:58:05 wazuh-remoted[62884] secure.c:751 at HandleSecureMessage(): DEBUG: TCP socket 26 already in keystore. Updating...
2025/09/16 20:58:05 wazuh-remoted[62884] manager.c:435 at save_controlmsg(): DEBUG: save_controlmsg(): inserting 'Linux |worker_agent |4.18.0-477.10.1.el8_8.x86_64 |#1 SMP Tue May 16 11:38:37 UTC 2023 |x86_64 [Rocky Linux|rocky: 8.8 (Green Obsidian)] - Wazuh v4.9.0 / ab73af41699f13fdd81903b5f23d8d00
2025/09/16 20:58:05 wazuh-remoted[62884] manager.c:1497 at lookfor_agent_group(): DEBUG: Agent '004' group is 'default'
2025/09/16 20:58:05 wazuh-remoted[62884] ar-forward.c:41 at AR_Forward(): DEBUG: Active response request received: (msg_to_agent) [] N!S 004 syscollector_processes dbsync checksum_fail {"begin":"625","end":"678","id":1758070680}
2025/09/16 20:58:05 wazuh-remoted[62884] ar-forward.c:100 at AR_Forward(): DEBUG: Active response sent: #!-syscollector_processes dbsync checksum_fail {"begin":"625","end":"678","id":1758070680}
2025/09/16 20:58:05 wazuh-remoted[62884] manager.c:846 at c_files(): DEBUG: Updating shared files.
2025/09/16 20:58:05 wazuh-remoted[62884] manager.c:868 at c_files(): DEBUG: End updating shared files.
2025/09/16 20:58:05 wazuh-remoted[62884] ar-forward.c:41 at AR_Forward(): DEBUG: Active response request received: (msg_to_agent) [] N!S 004 syscollector_processes dbsync checksum_fail {"begin":"712","end":"739","id":1758070680}
2025/09/16 20:58:05 wazuh-remoted[62884] ar-forward.c:100 at AR_Forward(): DEBUG: Active response sent: #!-syscollector_processes dbsync checksum_fail {"begin":"712","end":"739","id":1758070680}
2025/09/16 20:58:05 wazuh-remoted[62884] ar-forward.c:41 at AR_Forward(): DEBUG: Active response request received: (msg_to_agent) [] N!S 004 syscollector_processes dbsync checksum_fail {"begin":"740","end":"765","id":1758070680}
2025/09/16 20:58:05 wazuh-remoted[62884] ar-forward.c:100 at AR_Forward(): DEBUG: Active response sent: #!-syscollector_processes dbsync checksum_fail {"begin":"740","end":"765","id":1758070680}
2025/09/16 20:58:05 wazuh-remoted[62884] ar-forward.c:41 at AR_Forward(): DEBUG: Active response request received: (msg_to_agent) [] N!S 004 syscollector_processes dbsync checksum_fail {"begin":"766","end":"777","id":1758070680}
2025/09/16 20:58:05 wazuh-remoted[62884] ar-forward.c:100 at AR_Forward(): DEBUG: Active response sent: #!-syscollector_processes dbsync checksum_fail {"begin":"766","end":"777","id":1758070680}
2025/09/16 20:58:05 wazuh-remoted[62884] secure.c:423 at rem_keyupdate_main(): DEBUG: Checking for keys file changes.
2025/09/16 20:58:05 wazuh-remoted[62884] ar-forward.c:41 at AR_Forward(): DEBUG: Active response request received: (msg_to_agent) [] N!S 004 syscollector_processes dbsync checksum_fail {"begin":"1","end":"1","id":1758070680}
2025/09/16 20:58:05 wazuh-remoted[62884] ar-forward.c:100 at AR_Forward(): DEBUG: Active response sent: #!-syscollector_processes dbsync checksum_fail {"begin":"1","end":"1","id":1758070680}
2025/09/16 20:58:06 wazuh-remoted[62884] state.c:161 at rem_write_state(): DEBUG: Updating state file.
2025/09/16 20:58:06 wazuh-remoted[62884] ar-forward.c:41 at AR_Forward(): DEBUG: Active response request received: (msg_to_agent) [] N!S 004 syscollector_processes dbsync checksum_fail {"begin":"122","end":"1231","id":1758070680}
2025/09/16 20:58:06 wazuh-remoted[62884] ar-forward.c:100 at AR_Forward(): DEBUG: Active response sent: #!-syscollector_processes dbsync checksum_fail {"begin":"122","end":"1231","id":1758070680}
2025/09/16 20:58:06 wazuh-remoted[62884] ar-forward.c:41 at AR_Forward(): DEBUG: Active response request received: (msg_to_agent) [] N!S 004 syscollector_processes dbsync checksum_fail {"begin":"13","end":"14","id":1758070680}
2025/09/16 20:58:06 wazuh-remoted[62884] ar-forward.c:100 at AR_Forward(): DEBUG: Active response sent: #!-syscollector_processes dbsync checksum_fail {"begin":"13","end":"14","id":1758070680}
2025/09/16 20:58:06 wazuh-remoted[62884] ar-forward.c:41 at AR_Forward(): DEBUG: Active response request received: (msg_to_agent) [] N!S 004 syscollector_processes dbsync checksum_fail {"begin":"23","end":"2300","id":1758070680}
2025/09/16 20:58:06 wazuh-remoted[62884] ar-forward.c:100 at AR_Forward(): DEBUG: Active response sent: #!-syscollector_processes dbsync checksum_fail {"begin":"23","end":"2300","id":1758070680}
2025/09/16 20:58:06 wazuh-remoted[62884] ar-forward.c:41 at AR_Forward(): DEBUG: Active response request received: (msg_to_agent) [] N!S 004 syscollector_processes dbsync checksum_fail {"begin":"2305","end":"2313","id":1758070680}
2025/09/16 20:58:06 wazuh-remoted[62884] ar-forward.c:100 at AR_Forward(): DEBUG: Active response sent: #!-syscollector_processes dbsync checksum_fail {"begin":"2305","end":"2313","id":1758070680}
2025/09/16 20:58:06 wazuh-remoted[62884] ar-forward.c:41 at AR_Forward(): DEBUG: Active response request received: (msg_to_agent) [] N!S 004 syscollector_processes dbsync checksum_fail {"begin":"2540","end":"25458","id":1758070680}
2025/09/16 20:58:06 wazuh-remoted[62884] ar-forward.c:100 at AR_Forward(): DEBUG: Active response sent: #!-syscollector_processes dbsync checksum_fail {"begin":"2540","end":"25458","id":1758070680}
2025/09/16 20:58:06 wazuh-remoted[62884] ar-forward.c:41 at AR_Forward(): DEBUG: Active response request received: (msg_to_agent) [] N!S 004 syscollector_processes dbsync checksum_fail {"begin":"25462","end":"25463","id":1758070680}
2025/09/16 20:58:06 wazuh-remoted[62884] ar-forward.c:100 at AR_Forward(): DEBUG: Active response sent: #!-syscollector_processes dbsync checksum_fail {"begin":"25462","end":"25463","id":1758070680}
2025/09/16 20:58:06 wazuh-remoted[62884] ar-forward.c:41 at AR_Forward(): DEBUG: Active response request received: (msg_to_agent) [] N!S 004 syscollector_processes dbsync checksum_fail {"begin":"26","end":"26774","id":1758070680}
2025/09/16 20:58:06 wazuh-remoted[62884] ar-forward.c:100 at AR_Forward(): DEBUG: Active response sent: #!-syscollector_processes dbsync checksum_fail {"begin":"26","end":"26774","id":1758070680}
2025/09/16 20:58:06 wazuh-remoted[62884] ar-forward.c:41 at AR_Forward(): DEBUG: Active response request received: (msg_to_agent) [] N!S 004 syscollector_processes dbsync checksum_fail {"begin":"27","end":"28","id":1758070680}
2025/09/16 20:58:06 wazuh-remoted[62884] ar-forward.c:100 at AR_Forward(): DEBUG: Active response sent: #!-syscollector_processes dbsync checksum_fail {"begin":"27","end":"28","id":1758070680}
2025/09/16 20:58:07 wazuh-remoted[62884] ar-forward.c:41 at AR_Forward(): DEBUG: Active response request received: (msg_to_agent) [] N!S 004 syscollector_processes dbsync checksum_fail {"begin":"29","end":"29734","id":1758070680}
2025/09/16 20:58:07 wazuh-remoted[62884] ar-forward.c:100 at AR_Forward(): DEBUG: Active response sent: #!-syscollector_processes dbsync checksum_fail {"begin":"29","end":"29734","id":1758070680}
2025/09/16 20:58:07 wazuh-remoted[62884] ar-forward.c:41 at AR_Forward(): DEBUG: Active response request received: (msg_to_agent) [] N!S 004 syscollector_processes dbsync no_data {"begin":"29743","end":"29758","id":1758070680}
2025/09/16 20:58:07 wazuh-remoted[62884] ar-forward.c:100 at AR_Forward(): DEBUG: Active response sent: #!-syscollector_processes dbsync no_data {"begin":"29743","end":"29758","id":1758070680}
2025/09/16 20:58:07 wazuh-remoted[62884] ar-forward.c:41 at AR_Forward(): DEBUG: Active response request received: (msg_to_agent) [] N!S 004 syscollector_processes dbsync no_data {"begin":"29975","end":"29987","id":1758070680}
2025/09/16 20:58:07 wazuh-remoted[62884] ar-forward.c:100 at AR_Forward(): DEBUG: Active response sent: #!-syscollector_processes dbsync no_data {"begin":"29975","end":"29987","id":1758070680}
2025/09/16 20:58:08 wazuh-remoted[62884] msgs.c:207 at StoreCounter(): DEBUG: Updating rids_node for agent 004.
2025/09/16 20:58:08 wazuh-remoted[62884] ar-forward.c:41 at AR_Forward(): DEBUG: Active response request received: (msg_to_agent) [] N!S 004 syscollector_processes dbsync checksum_fail {"begin":"30125","end":"31","id":1758070680}
2025/09/16 20:58:08 wazuh-remoted[62884] ar-forward.c:100 at AR_Forward(): DEBUG: Active response sent: #!-syscollector_processes dbsync checksum_fail {"begin":"30125","end":"31","id":1758070680}
2025/09/16 20:58:08 wazuh-remoted[62884] ar-forward.c:41 at AR_Forward(): DEBUG: Active response request received: (msg_to_agent) [] N!S 004 syscollector_processes dbsync checksum_fail {"begin":"503","end":"56","id":1758070680}
2025/09/16 20:58:08 wazuh-remoted[62884] ar-forward.c:100 at AR_Forward(): DEBUG: Active response sent: #!-syscollector_processes dbsync checksum_fail {"begin":"503","end":"56","id":1758070680}
2025/09/16 20:58:08 wazuh-remoted[62884] ar-forward.c:41 at AR_Forward(): DEBUG: Active response request received: (msg_to_agent) [] N!S 004 syscollector_processes dbsync checksum_fail {"begin":"588","end":"588","id":1758070680}
2025/09/16 20:58:08 wazuh-remoted[62884] ar-forward.c:100 at AR_Forward(): DEBUG: Active response sent: #!-syscollector_processes dbsync checksum_fail {"begin":"588","end":"588","id":1758070680}
2025/09/16 20:58:09 wazuh-remoted[62884] ar-forward.c:41 at AR_Forward(): DEBUG: Active response request received: (msg_to_agent) [] N!S 004 syscollector_processes dbsync checksum_fail {"begin":"638","end":"678","id":1758070680}
2025/09/16 20:58:09 wazuh-remoted[62884] ar-forward.c:100 at AR_Forward(): DEBUG: Active response sent: #!-syscollector_processes dbsync checksum_fail {"begin":"638","end":"678","id":1758070680}
2025/09/16 20:58:09 wazuh-remoted[62884] ar-forward.c:41 at AR_Forward(): DEBUG: Active response request received: (msg_to_agent) [] N!S 004 syscollector_processes dbsync checksum_fail {"begin":"737","end":"739","id":1758070680}
2025/09/16 20:58:09 wazuh-remoted[62884] ar-forward.c:100 at AR_Forward(): DEBUG: Active response sent: #!-syscollector_processes dbsync checksum_fail {"begin":"737","end":"739","id":1758070680}
2025/09/16 20:58:09 wazuh-remoted[62884] ar-forward.c:41 at AR_Forward(): DEBUG: Active response request received: (msg_to_agent) [] N!S 004 syscollector_processes dbsync checksum_fail {"begin":"740","end":"742","id":1758070680}
2025/09/16 20:58:09 wazuh-remoted[62884] ar-forward.c:100 at AR_Forward(): DEBUG: Active response sent: #!-syscollector_processes dbsync checksum_fail {"begin":"740","end":"742","id":1758070680}
2025/09/16 20:58:09 wazuh-remoted[62884] msgs.c:207 at StoreCounter(): DEBUG: Updating rids_node for agent 004.
2025/09/16 20:58:09 wazuh-remoted[62884] ar-forward.c:41 at AR_Forward(): DEBUG: Active response request received: (msg_to_agent) [] N!S 004 syscollector_processes dbsync checksum_fail {"begin":"766","end":"771","id":1758070680}
2025/09/16 20:58:09 wazuh-remoted[62884] ar-forward.c:100 at AR_Forward(): DEBUG: Active response sent: #!-syscollector_processes dbsync checksum_fail {"begin":"766","end":"771","id":1758070680}
2025/09/16 20:58:09 wazuh-remoted[62884] ar-forward.c:41 at AR_Forward(): DEBUG: Active response request received: (msg_to_agent) [] N!S 004 syscollector_processes dbsync checksum_fail {"begin":"776","end":"777","id":1758070680}
2025/09/16 20:58:09 wazuh-remoted[62884] ar-forward.c:100 at AR_Forward(): DEBUG: Active response sent: #!-syscollector_processes dbsync checksum_fail {"begin":"776","end":"777","id":1758070680}
2025/09/16 20:58:09 wazuh-remoted[62884] ar-forward.c:41 at AR_Forward(): DEBUG: Active response request received: (msg_to_agent) [] N!S 004 syscollector_processes dbsync checksum_fail {"begin":"1231","end":"1231","id":1758070680}
2025/09/16 20:58:09 wazuh-remoted[62884] ar-forward.c:100 at AR_Forward(): DEBUG: Active response sent: #!-syscollector_processes dbsync checksum_fail {"begin":"1231","end":"1231","id":1758070680}
2025/09/16 20:58:10 wazuh-remoted[62884] ar-forward.c:41 at AR_Forward(): DEBUG: Active response request received: (msg_to_agent) [] N!S 004 syscollector_processes dbsync checksum_fail {"begin":"13","end":"13",

2025년 9월 17일 수요일 오전 9시 36분 27초 UTC+9에 Ethan Thompson님이 작성:

[Ethan Thompson]

hello, team

CLI-based upgrades don't work the same way on other server versions.

I solved this problem by upgrading via dev tools.

2025년 9월 17일 수요일 오전 10시 4분 40초 UTC+9에 Ethan Thompson님이 작성:

[hasitha.u...@wazuh.com]

Hi Ethan

I am glad that it has finally started working by using dev tools.

We have released the 4.13 version now. You can check the release notes for further details.
https://documentation.wazuh.com/current/release-notes/release-4-13-0.html

Upgrade guide: https://documentation.wazuh.com/current/upgrade-guide/upgrading-central-components.html

Then check again, the issue still persists with the latest version: https://documentation.wazuh.com/current/user-manual/agent/agent-management/remote-upgrading/upgrading-agent.html

I have upgraded the Wazuh agent using remote upgrade from the manager, and it's successful.
[root@wazuh-server wazuh-user]# /var/ossec/bin/agent_upgrade -a 003

Upgrading...

Upgraded agents:
        Agent 003 upgraded: Wazuh v4.12.0 -> Wazuh v4.13.0
[root@wazuh-server wazuh-user]#

Feel free to let me know if you need any more help.