WAZUH API Down after upgrade from 4.7 to 4.8

[Albert Waweru]

Hi all, i am facing a problem with wazuh after upgrading from 4.7 to 4.8. I faced the problem with 4.7 however i though once i upgrade it will fix but i am receiving the following error when accessing the dashboard. I have tried to restart the manager but it didnt solve the problem. and also tried to append the followng in local-internal-options but it didnt work either

echo analysisd.rule_matching_threads=1 >> /var/ossec/etc/local_internal_options.conf
service wazuh-manager restart

INFO: No current API selected
INFO: Getting API hosts...
INFO: API hosts found: 1
INFO: Checking API host id [default]...
INFO: Could not connect to API id [default]: 3099 - ERROR3099 - Some Wazuh daemons are not ready yet in node "node01" (wazuh-analysisd->stopped)
INFO: Removed [navigate] cookie
ERROR: No API available to connect

INFO: No current API selected INFO: Getting API hosts... INFO: API hosts found: 1 INFO: Checking API host id [default]... INFO: Could not connect to API id [default]: 3099 - ERROR3099 - Some Wazuh daemons are not ready yet in node "node01" (wazuh-analysisd->stopped) INFO: Removed [navigate] cookie ERROR: No API available to connect

INFO: No current API selected INFO: Getting API hosts... INFO: API hosts found: 1 INFO: Checking API host id [default]... INFO: Could not connect to API id [default]: 3099 - ERROR3099 - Some Wazuh daemons are not ready yet in node "node01" (wazuh-analysisd->stopped) INFO: Removed [navigate] cookie ERROR: No API available to connect

[Kasim Mustapha]

Hello Albert,

It appears that the wazuh-analysisd daemon has been stopped, which is causing this error. Would you be able to share the manager’s /var/ossec/logs/ossec.log file with us?

Also, please share the status of all the wazuh components with me:

systemctl status wazuh-manager

systemctl status wazuh-indexer

systemctl status wazuh-dashboard

What are the specifications of the system? Share the output of the following commands;

• df -h
• free -h
• lscpu | grep CPU
• lsb_release -a

I will be waiting for your response.