Upgrade from 4.12 to 4.14 error on wazuh -indexer

[dwight c]

Hello all,
I spun up an Azure cloud image and was able to run Wazuh 4.12 on it, but when I try to upgrade it, I'm getting errors on the Wazuh-indexer, and now it can't seem to run. Need help completing the upgrade

Below is the error 

Job for wazuh-indexer.service failed because the control process exited with error code.
See "systemctl status wazuh-indexer.service" and "journalctl -xeu wazuh-indexer.service" for details.
[root@####~]# journalctl -xeu wazuh-indexer.service
░░ The unit wazuh-indexer.service completed and consumed the indicated resources.
Nov 13 20:12:04 ####systemd[1]: Starting wazuh-indexer...
░░ Subject: A start job for unit wazuh-indexer.service has begun execution
░░ Subject: A start job for unit wazuh-indexer.service has begun execution
░░ Defined-By: systemd
░░ Support: https://access.redhat.com/support
░░
░░ A start job for unit wazuh-indexer.service has begun execution.
░░
░░ The job identifier is 1783217.
Nov 13 20:12:05 ####systemd-entrypoint[2344631]: WARNING: A terminally deprecated method in java.lang.System has been called
Nov 13 20:12:05 ####systemd-entrypoint[2344631]: WARNING: System::setSecurityManager has been called by org.opensearch.bootstrap.OpenSearch (file:/usr/share/wazuh-indexer/lib/opensearch-2.19.3.jar)
Nov 13 20:12:05 ####systemd-entrypoint[2344631]: WARNING: Please consider reporting this to the maintainers of org.opensearch.bootstrap.OpenSearch
Nov 13 20:12:05 ####systemd-entrypoint[2344631]: WARNING: System::setSecurityManager will be removed in a future release
Nov 13 20:12:06 ####systemd-entrypoint[2344631]: Nov 13, 2025 8:12:06 PM sun.util.locale.provider.LocaleProviderAdapter <clinit>
Nov 13 20:12:06 ####systemd-entrypoint[2344631]: WARNING: COMPAT locale provider will be removed in a future release
Nov 13 20:12:06 ####systemd-entrypoint[2344631]: WARNING: A terminally deprecated method in java.lang.System has been called
Nov 13 20:12:06 ####systemd-entrypoint[2344631]: WARNING: System::setSecurityManager has been called by org.opensearch.bootstrap.Security (file:/usr/share/wazuh-indexer/lib/opensearch-2.19.3.jar)
Nov 13 20:12:06 ####systemd-entrypoint[2344631]: WARNING: Please consider reporting this to the maintainers of org.opensearch.bootstrap.Security
Nov 13 20:12:06 ####systemd-entrypoint[2344631]: WARNING: System::setSecurityManager will be removed in a future release
Nov 13 20:12:13 ####systemd-entrypoint[2344631]: fatal error in thread [main], exiting
Nov 13 20:12:13 ####systemd-entrypoint[2344631]: java.lang.NoClassDefFoundError: Could not initialize class com.sun.jna.Native
Nov 13 20:12:13 ####systemd-entrypoint[2344631]:         at org.opensearch.systemd.Libsystemd.lambda$static$0(Libsystemd.java:48)
Nov 13 20:12:13 ####systemd-entrypoint[2344631]:         at java.base/java.security.AccessController.doPrivileged(AccessController.java:319)
Nov 13 20:12:13 ####systemd-entrypoint[2344631]:         at org.opensearch.systemd.Libsystemd.<clinit>(Libsystemd.java:47)
Nov 13 20:12:13 ####systemd-entrypoint[2344631]:         at org.opensearch.systemd.SystemdPlugin.sd_notify(SystemdPlugin.java:126)
Nov 13 20:12:13 ####systemd-entrypoint[2344631]:         at org.opensearch.systemd.SystemdPlugin.onNodeStarted(SystemdPlugin.java:137)
Nov 13 20:12:13 ####systemd-entrypoint[2344631]:         at org.opensearch.plugins.ClusterPlugin.onNodeStarted(ClusterPlugin.java:102)
Nov 13 20:12:13 ####systemd-entrypoint[2344631]:         at org.opensearch.node.Node.lambda$start$40(Node.java:1776)
Nov 13 20:12:13 ####systemd-entrypoint[2344631]:         at java.base/java.util.ArrayList.forEach(ArrayList.java:1596)
Nov 13 20:12:13 ####systemd-entrypoint[2344631]:         at org.opensearch.node.Node.start(Node.java:1776)
Nov 13 20:12:13 ####systemd-entrypoint[2344631]:         at org.opensearch.bootstrap.Bootstrap.start(Bootstrap.java:339)
Nov 13 20:12:13 ####systemd-entrypoint[2344631]:         at org.opensearch.bootstrap.Bootstrap.init(Bootstrap.java:413)
Nov 13 20:12:13 ####systemd-entrypoint[2344631]:         at org.opensearch.bootstrap.OpenSearch.init(OpenSearch.java:181)
Nov 13 20:12:13 ####systemd-entrypoint[2344631]:         at org.opensearch.bootstrap.OpenSearch.execute(OpenSearch.java:172)
Nov 13 20:12:13 ####systemd-entrypoint[2344631]:         at org.opensearch.cli.EnvironmentAwareCommand.execute(EnvironmentAwareCommand.java:104)
Nov 13 20:12:13 ####systemd-entrypoint[2344631]:         at org.opensearch.cli.Command.mainWithoutErrorHandling(Command.java:138)
Nov 13 20:12:13 ####systemd-entrypoint[2344631]:         at org.opensearch.cli.Command.main(Command.java:101)
Nov 13 20:12:13 ####systemd-entrypoint[2344631]:         at org.opensearch.bootstrap.OpenSearch.main(OpenSearch.java:138)
Nov 13 20:12:13 ####systemd-entrypoint[2344631]:         at org.opensearch.bootstrap.OpenSearch.main(OpenSearch.java:104)
Nov 13 20:12:13 ####systemd-entrypoint[2344631]: Caused by: java.lang.ExceptionInInitializerError: Exception java.lang.UnsatisfiedLinkError: /tmp/opensearch-7179007196144165349/jna6707429492078432>
Nov 13 20:12:13 ####systemd-entrypoint[2344631]:         at java.base/jdk.internal.loader.NativeLibraries.load(Native Method)
Nov 13 20:12:13 ####systemd-entrypoint[2344631]:         at java.base/jdk.internal.loader.NativeLibraries$NativeLibraryImpl.open(NativeLibraries.java:331)
Nov 13 20:12:13 ####systemd-entrypoint[2344631]:         at java.base/jdk.internal.loader.NativeLibraries.loadLibrary(NativeLibraries.java:197)
Nov 13 20:12:13 ####systemd-entrypoint[2344631]:         at java.base/jdk.internal.loader.NativeLibraries.loadLibrary(NativeLibraries.java:139)
Nov 13 20:12:13 ####systemd-entrypoint[2344631]:         at java.base/java.lang.ClassLoader.loadLibrary(ClassLoader.java:2418)
Nov 13 20:12:13 ####systemd-entrypoint[2344631]:         at java.base/java.lang.Runtime.load0(Runtime.java:852)
Nov 13 20:12:13 ####systemd-entrypoint[2344631]:         at java.base/java.lang.System.load(System.java:2025)
Nov 13 20:12:13 ####systemd-entrypoint[2344631]:         at com.sun.jna.Native.loadNativeDispatchLibraryFromClasspath(Native.java:1045)
Nov 13 20:12:13 ####systemd-entrypoint[2344631]:         at com.sun.jna.Native.loadNativeDispatchLibrary(Native.java:1015)
Nov 13 20:12:13 ####systemd-entrypoint[2344631]:         at com.sun.jna.Native.<clinit>(Native.java:221)
Nov 13 20:12:13 ####systemd-entrypoint[2344631]:         at java.base/java.lang.Class.forName0(Native Method)
Nov 13 20:12:13 ####systemd-entrypoint[2344631]:         at java.base/java.lang.Class.forName(Class.java:421)
Nov 13 20:12:13 ####systemd-entrypoint[2344631]:         at java.base/java.lang.Class.forName(Class.java:412)
Nov 13 20:12:13 ####systemd-entrypoint[2344631]:         at org.opensearch.bootstrap.Natives.<clinit>(Natives.java:60)
Nov 13 20:12:13 ####systemd-entrypoint[2344631]:         at org.opensearch.bootstrap.Bootstrap.initializeNatives(Bootstrap.java:123)
Nov 13 20:12:13 ####systemd-entrypoint[2344631]:         at org.opensearch.bootstrap.Bootstrap.setup(Bootstrap.java:191)
Nov 13 20:12:13 ####systemd-entrypoint[2344631]:         at org.opensearch.bootstrap.Bootstrap.init(Bootstrap.java:404)
Nov 13 20:12:13 ####systemd-entrypoint[2344631]:         ... 7 more
Nov 13 20:12:13 ####systemd[1]: wazuh-indexer.service: Main process exited, code=exited, status=1/FAILURE
░░ Subject: Unit process exited
░░ Defined-By: systemd
░░ Support: https://access.redhat.com/support
░░
░░ An ExecStart= process belonging to unit wazuh-indexer.service has exited.
░░
░░ The process' exit code is 'exited' and its exit status is 1.
Nov 13 20:12:13 ####systemd[1]: wazuh-indexer.service: Failed with result 'exit-code'.
░░ Subject: Unit failed
░░ Defined-By: systemd
░░ Support: https://access.redhat.com/support
░░
░░ The unit wazuh-indexer.service has entered the 'failed' state with result 'exit-code'.
Nov 13 20:12:13 ####systemd[1]: Failed to start wazuh-indexer.
░░ Subject: A start job for unit wazuh-indexer.service has failed
░░ Defined-By: systemd
░░ Support: https://access.redhat.com/support
░░
░░ A start job for unit wazuh-indexer.service has finished with a failure.
░░
░░ The job identifier is 1783217 and the job result is failed.
Nov 13 20:12:13 ####systemd[1]: wazuh-indexer.service: Consumed 30.574s CPU time.
░░ Subject: Resources consumed by unit runtime
░░ Defined-By: systemd
░░ Support: https://access.redhat.com/support
░░
░░ The unit wazuh-indexer.service completed and consumed the indicated resources.

[Francis Timilehin Jeremiah]

Hello, can you confirm that you followed all the steps here https://documentation.wazuh.com/current/upgrade-guide/upgrading-central-components.html. Please go over the steps again, the error messages don't clearly show the issue. 

[dwight c]

I followed the document as much as I could, but I did get errors when I tried to disable the shared replicator; it was telling me that it couldn't connect to the host 

[dwight c]

Hi, 

I tried uninstalling all the central components and installing the 4.14 instead of doing an upgrade, but i still have an error with the indexer. It seems that I can only install 4.12

look at the error below 

[root@####~]# curl -sO https://packages.wazuh.com/4.14/wazuh-install.sh && sudo bash ./wazuh-install.sh -a
14/11/2025 15:06:45 INFO: Starting Wazuh installation assistant. Wazuh version: 4.14.1
14/11/2025 15:06:45 INFO: Verbose logging redirected to /var/log/wazuh-install.log
14/11/2025 15:06:45 WARNING: The CentOS key could not be added. Some dependencies may not be installed.
14/11/2025 15:06:45 INFO: Verifying that your system meets the recommended minimum hardware requirements.
14/11/2025 15:06:45 INFO: Wazuh web interface port will be 443.
14/11/2025 15:06:46 WARNING: The system has Firewalld enabled. Please ensure that traffic is allowed on these ports: 1515, 1514, 443.
14/11/2025 15:06:46 INFO: Wazuh repository added.
14/11/2025 15:06:46 INFO: --- Configuration files ---
14/11/2025 15:06:46 INFO: Generating configuration files.
14/11/2025 15:06:46 INFO: Generating the root certificate.
14/11/2025 15:06:47 INFO: Generating Admin certificates.
14/11/2025 15:06:47 INFO: Generating Wazuh indexer certificates.
14/11/2025 15:06:47 INFO: Generating Filebeat certificates.
14/11/2025 15:06:47 INFO: Generating Wazuh dashboard certificates.
14/11/2025 15:06:48 INFO: Created wazuh-install-files.tar. It contains the Wazuh cluster key, certificates, and passwords necessary for installation.
14/11/2025 15:06:48 INFO: --- Wazuh indexer ---
14/11/2025 15:06:48 INFO: Starting Wazuh indexer installation.
14/11/2025 15:08:16 INFO: Wazuh indexer installation finished.
14/11/2025 15:08:16 INFO: Wazuh indexer post-install configuration finished.
14/11/2025 15:08:16 INFO: Starting service wazuh-indexer.
14/11/2025 15:08:26 ERROR: wazuh-indexer could not be started.
14/11/2025 15:08:26 INFO: --- Removing existing Wazuh installation ---
14/11/2025 15:08:26 INFO: Removing Wazuh indexer.
14/11/2025 15:08:27 INFO: Wazuh indexer removed.
14/11/2025 15:08:28 INFO: Installation cleaned. Check the /var/log/wazuh-install.log file to learn more about the issue.
[root@####~]# /var/log/wazuh-install.log
-bash: /var/log/wazuh-install.log: Permission denied
[root@####~]# cat /var/log/wazuh-install.log
14/11/2025 15:06:45 INFO: Starting Wazuh installation assistant. Wazuh version: 4.14.1
14/11/2025 15:06:45 INFO: Verbose logging redirected to /var/log/wazuh-install.log
14/11/2025 15:06:45 WARNING: The CentOS key could not be added. Some dependencies may not be installed.
56 files removed
14/11/2025 15:06:45 INFO: Verifying that your system meets the recommended minimum hardware requirements.
14/11/2025 15:06:45 INFO: Wazuh web interface port will be 443.
14/11/2025 15:06:46 WARNING: The system has Firewalld enabled. Please ensure that traffic is allowed on these ports: 1515, 1514, 443.
[wazuh]
gpgcheck=1
gpgkey=https://packages.wazuh.com/key/GPG-KEY-WAZUH
enabled=1
name=EL-${releasever} - Wazuh
baseurl=https://packages.wazuh.com/4.x/yum/
protect=1
14/11/2025 15:06:46 INFO: Wazuh repository added.
14/11/2025 15:06:46 INFO: --- Configuration files ---
14/11/2025 15:06:46 INFO: Generating configuration files.
14/11/2025 15:06:46 INFO: Generating the root certificate.
14/11/2025 15:06:47 INFO: Generating Admin certificates.
14/11/2025 15:06:47 INFO: Generating Wazuh indexer certificates.
14/11/2025 15:06:47 INFO: Generating Filebeat certificates.
14/11/2025 15:06:47 INFO: Generating Wazuh dashboard certificates.
14/11/2025 15:06:48 INFO: Created wazuh-install-files.tar. It contains the Wazuh cluster key, certificates, and passwords necessary for installation.
14/11/2025 15:06:48 INFO: --- Wazuh indexer ---
14/11/2025 15:06:48 INFO: Starting Wazuh indexer installation.
Azure CLI 30 MB/s | 24 MB 00:00 customrepo 132 kB/s | 99 kB 00:00 Red Hat CodeReady Linux Builder for RHEL 9 x86_ 36 MB/s | 15 MB 00:00 Red Hat Enterprise Linux 9 for x86_64 - AppStre 137 MB/s | 76 MB 00:00 Red Hat Enterprise Linux 9 for x86_64 - BaseOS 104 MB/s | 90 MB 00:00 Red Hat Enterprise Linux 9 for x86_64 - Supplem 11 kB/s | 3.4 kB 00:00 Microsoft Azure RPMs for Red Hat Enterprise Lin 28 kB/s | 3.3 kB 00:00 EL-9 - Wazuh 27 MB/s | 42 MB 00:01 Dependencies resolved. ================================================================================ Package Architecture Version Repository Size ================================================================================ Installing: wazuh-indexer x86_64 4.14.1-1 wazuh 818 M Transaction Summary ================================================================================ Install 1 Package Total download size: 818 M Installed size: 1.0 G Downloading Packages: wazuh-indexer-4.14.1-1.x86_64.rpm 43 MB/s | 818 MB 00:19 -------------------------------------------------------------------------------- Total 43 MB/s | 818 MB 00:19 Running transaction check Transaction check succeeded. Running transaction test Transaction test succeeded. Running transaction Preparing : 1/1 Running scriptlet: wazuh-indexer-4.14.1-1.x86_64 1/1 Installing : wazuh-indexer-4.14.1-1.x86_64 1/1 Running scriptlet: wazuh-indexer-4.14.1-1.x86_64 1/1 ### NOT starting on installation, please execute the following statements to configure wazuh-indexer service to start automatically using systemd sudo systemctl daemon-reload sudo systemctl enable wazuh-indexer.service ### You can start the wazuh-indexer service by executing sudo systemctl start wazuh-indexer.service Verifying : wazuh-indexer-4.14.1-1.x86_64 1/1 Installed products updated. Installed: wazuh-indexer-4.14.1-1.x86_64 Complete!
14/11/2025 15:08:16 INFO: Wazuh indexer installation finished.
14/11/2025 15:08:16 INFO: Wazuh indexer post-install configuration finished.
14/11/2025 15:08:16 INFO: Starting service wazuh-indexer.

Job for wazuh-indexer.service failed because the control process exited with error code.
See "systemctl status wazuh-indexer.service" and "journalctl -xeu wazuh-indexer.service" for details.

14/11/2025 15:08:26 ERROR: wazuh-indexer could not be started.
Oct 08 18:00:35 ####systemd[1]: Stopping wazuh-indexer...
Oct 08 18:00:35 ####systemd[1]: wazuh-indexer.service: Deactivated successfully.
Oct 08 18:00:35 ####systemd[1]: Stopped wazuh-indexer.
Oct 08 18:00:35 ####systemd[1]: wazuh-indexer.service: Consumed 1h 54min 59.999s CPU time.
-- Boot --
Oct 08 18:04:25 ####systemd[1]: Starting wazuh-indexer...
Oct 08 18:04:31 ####systemd-entrypoint[1720]: WARNING: A terminally deprecated method in java.lang.System has been called
Oct 08 18:04:31 ####systemd-entrypoint[1720]: WARNING: System::setSecurityManager has been called by org.opensearch.bootstrap.OpenSearch (file:/usr/share/wazuh-indexer/lib/opensearch-2.19.1.jar)
Oct 08 18:04:31 ####systemd-entrypoint[1720]: WARNING: Please consider reporting this to the maintainers of org.opensearch.bootstrap.OpenSearch
Oct 08 18:04:31 ####systemd-entrypoint[1720]: WARNING: System::setSecurityManager will be removed in a future release
Oct 08 18:04:31 ####systemd-entrypoint[1720]: Oct 08, 2025 6:04:31 PM sun.util.locale.provider.LocaleProviderAdapter <clinit>
Oct 08 18:04:31 ####systemd-entrypoint[1720]: WARNING: COMPAT locale provider will be removed in a future release
Oct 08 18:04:32 ####systemd-entrypoint[1720]: WARNING: A terminally deprecated method in java.lang.System has been called
Oct 08 18:04:32 ####systemd-entrypoint[1720]: WARNING: System::setSecurityManager has been called by org.opensearch.bootstrap.Security (file:/usr/share/wazuh-indexer/lib/opensearch-2.19.1.jar)
Oct 08 18:04:32 ####systemd-entrypoint[1720]: WARNING: Please consider reporting this to the maintainers of org.opensearch.bootstrap.Security
Oct 08 18:04:32 ####systemd-entrypoint[1720]: WARNING: System::setSecurityManager will be removed in a future release
Oct 08 18:04:46 ####systemd[1]: Started wazuh-indexer.
Oct 13 14:52:41 ####systemd[1]: Stopping wazuh-indexer...
Oct 13 14:52:41 ####systemd[1]: wazuh-indexer.service: Deactivated successfully.
Oct 13 14:52:41 ####systemd[1]: Stopped wazuh-indexer.
Oct 13 14:52:41 ####systemd[1]: wazuh-indexer.service: Consumed 1h 12min 56.397s CPU time.
-- Boot  --
Oct 13 14:55:45 ####systemd[1]: Starting wazuh-indexer...
Oct 13 14:55:47 ####systemd-entrypoint[1925]: WARNING: A terminally deprecated method in java.lang.System has been called
Oct 13 14:55:47 ####systemd-entrypoint[1925]: WARNING: System::setSecurityManager has been called by org.opensearch.bootstrap.OpenSearch (file:/usr/share/wazuh-indexer/lib/opensearch-2.19.1.jar)
Oct 13 14:55:47 ####systemd-entrypoint[1925]: WARNING: Please consider reporting this to the maintainers of org.opensearch.bootstrap.OpenSearch
Oct 13 14:55:47 ####systemd-entrypoint[1925]: WARNING: System::setSecurityManager will be removed in a future release
Oct 13 14:55:48 ####systemd-entrypoint[1925]: Oct 13, 2025 2:55:48 PM sun.util.locale.provider.LocaleProviderAdapter <clinit>
Oct 13 14:55:48 ####systemd-entrypoint[1925]: WARNING: COMPAT locale provider will be removed in a future release
Oct 13 14:55:48 ####systemd-entrypoint[1925]: WARNING: A terminally deprecated method in java.lang.System has been called
Oct 13 14:55:48 ####systemd-entrypoint[1925]: WARNING: System::setSecurityManager has been called by org.opensearch.bootstrap.Security (file:/usr/share/wazuh-indexer/lib/opensearch-2.19.1.jar)
Oct 13 14:55:48 ####systemd-entrypoint[1925]: WARNING: Please consider reporting this to the maintainers of org.opensearch.bootstrap.Security
Oct 13 14:55:48 ####systemd-entrypoint[1925]: WARNING: System::setSecurityManager will be removed in a future release
Oct 13 14:55:58 ####systemd[1]: Started wazuh-indexer.
Oct 21 17:41:17 ####systemd[1]: Stopping wazuh-indexer...
Oct 21 17:41:17 ####systemd[1]: wazuh-indexer.service: Deactivated successfully.
Oct 21 17:41:17 ####systemd[1]: Stopped wazuh-indexer.
Oct 21 17:41:17 ####systemd[1]: wazuh-indexer.service: Consumed 2h 5min 767ms CPU time.
-- Boot  --
Oct 21 17:46:18 ####systemd[1]: Starting wazuh-indexer...
Oct 21 17:46:25 ####systemd-entrypoint[1823]: WARNING: A terminally deprecated method in java.lang.System has been called
Oct 21 17:46:25 ####systemd-entrypoint[1823]: WARNING: System::setSecurityManager has been called by org.opensearch.bootstrap.OpenSearch (file:/usr/share/wazuh-indexer/lib/opensearch-2.19.1.jar)
Oct 21 17:46:25 ####systemd-entrypoint[1823]: WARNING: Please consider reporting this to the maintainers of org.opensearch.bootstrap.OpenSearch
Oct 21 17:46:25 ####systemd-entrypoint[1823]: WARNING: System::setSecurityManager will be removed in a future release
Oct 21 17:46:26 ####systemd-entrypoint[1823]: Oct 21, 2025 5:46:26 PM sun.util.locale.provider.LocaleProviderAdapter <clinit>
Oct 21 17:46:26 ####systemd-entrypoint[1823]: WARNING: COMPAT locale provider will be removed in a future release
Oct 21 17:46:27 ####systemd-entrypoint[1823]: WARNING: A terminally deprecated method in java.lang.System has been called
Oct 21 17:46:27 ####systemd-entrypoint[1823]: WARNING: System::setSecurityManager has been called by org.opensearch.bootstrap.Security (file:/usr/share/wazuh-indexer/lib/opensearch-2.19.1.jar)
Oct 21 17:46:27 ####systemd-entrypoint[1823]: WARNING: Please consider reporting this to the maintainers of org.opensearch.bootstrap.Security
Oct 21 17:46:27 ####systemd-entrypoint[1823]: WARNING: System::setSecurityManager will be removed in a future release
Oct 21 17:46:43 ####systemd[1]: Started wazuh-indexer.
Oct 22 15:19:35 ####systemd[1]: Stopping wazuh-indexer...
Oct 22 15:19:35 ####systemd[1]: wazuh-indexer.service: Deactivated successfully.
Oct 22 15:19:35 ####systemd[1]: Stopped wazuh-indexer.
Oct 22 15:19:35 ####systemd[1]: wazuh-indexer.service: Consumed 16min 18.962s CPU time.
-- Boot  --
Oct 22 15:26:50 ####systemd[1]: Starting wazuh-indexer...
Oct 22 15:26:56 ####systemd-entrypoint[1800]: WARNING: A terminally deprecated method in java.lang.System has been called
Oct 22 15:26:56 ####systemd-entrypoint[1800]: WARNING: System::setSecurityManager has been called by org.opensearch.bootstrap.OpenSearch (file:/usr/share/wazuh-indexer/lib/opensearch-2.19.1.jar)
Oct 22 15:26:56 ####systemd-entrypoint[1800]: WARNING: Please consider reporting this to the maintainers of org.opensearch.bootstrap.OpenSearch
Oct 22 15:26:56 ####systemd-entrypoint[1800]: WARNING: System::setSecurityManager will be removed in a future release
Oct 22 15:26:57 ####systemd-entrypoint[1800]: Oct 22, 2025 3:26:57 PM sun.util.locale.provider.LocaleProviderAdapter <clinit>
Oct 22 15:26:57 ####systemd-entrypoint[1800]: WARNING: COMPAT locale provider will be removed in a future release
Oct 22 15:26:57 ####systemd-entrypoint[1800]: WARNING: A terminally deprecated method in java.lang.System has been called
Oct 22 15:26:57 ####systemd-entrypoint[1800]: WARNING: System::setSecurityManager has been called by org.opensearch.bootstrap.Security (file:/usr/share/wazuh-indexer/lib/opensearch-2.19.1.jar)
Oct 22 15:26:57 ####systemd-entrypoint[1800]: WARNING: Please consider reporting this to the maintainers of org.opensearch.bootstrap.Security
Oct 22 15:26:57 ####systemd-entrypoint[1800]: WARNING: System::setSecurityManager will be removed in a future release
Oct 22 15:27:12 ####systemd[1]: Started wazuh-indexer.
Oct 22 15:28:25 ####systemd[1]: Stopping wazuh-indexer...
Oct 22 15:28:25 ####systemd[1]: wazuh-indexer.service: Deactivated successfully.
Oct 22 15:28:25 ####systemd[1]: Stopped wazuh-indexer.
Oct 22 15:28:25 ####systemd[1]: wazuh-indexer.service: Consumed 55.835s CPU time.
-- Boot --
Oct 22 15:33:25 ####systemd[1]: Starting wazuh-indexer...
Oct 22 15:33:35 ####systemd-entrypoint[1899]: WARNING: A terminally deprecated method in java.lang.System has been called
Oct 22 15:33:35 ####systemd-entrypoint[1899]: WARNING: System::setSecurityManager has been called by org.opensearch.bootstrap.OpenSearch (file:/usr/share/wazuh-indexer/lib/opensearch-2.19.1.jar)
Oct 22 15:33:35 ####systemd-entrypoint[1899]: WARNING: Please consider reporting this to the maintainers of org.opensearch.bootstrap.OpenSearch
Oct 22 15:33:35 ####systemd-entrypoint[1899]: WARNING: System::setSecurityManager will be removed in a future release
Oct 22 15:33:35 ####systemd-entrypoint[1899]: Oct 22, 2025 3:33:35 PM sun.util.locale.provider.LocaleProviderAdapter <clinit>
Oct 22 15:33:35 ####systemd-entrypoint[1899]: WARNING: COMPAT locale provider will be removed in a future release
Oct 22 15:33:36 ####systemd-entrypoint[1899]: WARNING: A terminally deprecated method in java.lang.System has been called
Oct 22 15:33:36 ####systemd-entrypoint[1899]: WARNING: System::setSecurityManager has been called by org.opensearch.bootstrap.Security (file:/usr/share/wazuh-indexer/lib/opensearch-2.19.1.jar)
Oct 22 15:33:36 ####systemd-entrypoint[1899]: WARNING: Please consider reporting this to the maintainers of org.opensearch.bootstrap.Security
Oct 22 15:33:36 ####systemd-entrypoint[1899]: WARNING: System::setSecurityManager will be removed in a future release
Oct 22 15:33:50 ####systemd[1]: Started wazuh-indexer.
Nov 13 20:02:24 ####systemd[1]: Stopping wazuh-indexer...
Nov 13 20:02:24 ####systemd[1]: wazuh-indexer.service: Deactivated successfully.
Nov 13 20:02:24 ####systemd[1]: Stopped wazuh-indexer.
Nov 13 20:02:24 ####systemd[1]: wazuh-indexer.service: Consumed 5h 52min 41.457s CPU time.
Nov 13 20:06:00 ####systemd[1]: Starting wazuh-indexer...
Nov 13 20:06:02 ####systemd-entrypoint[2343394]: WARNING: A terminally deprecated method in java.lang.System has been called
Nov 13 20:06:02 ####systemd-entrypoint[2343394]: WARNING: System::setSecurityManager has been called by org.opensearch.bootstrap.OpenSearch (file:/usr/share/wazuh-indexer/lib/opensearch-2.19.3.jar)
Nov 13 20:06:02 ####systemd-entrypoint[2343394]: WARNING: Please consider reporting this to the maintainers of org.opensearch.bootstrap.OpenSearch
Nov 13 20:06:02 ####systemd-entrypoint[2343394]: WARNING: System::setSecurityManager will be removed in a future release
Nov 13 20:06:02 ####systemd-entrypoint[2343394]: Nov 13, 2025 8:06:02 PM sun.util.locale.provider.LocaleProviderAdapter <clinit>
Nov 13 20:06:02 ####systemd-entrypoint[2343394]: WARNING: COMPAT locale provider will be removed in a future release
Nov 13 20:06:02 ####systemd-entrypoint[2343394]: WARNING: A terminally deprecated method in java.lang.System has been called
Nov 13 20:06:02 ####systemd-entrypoint[2343394]: WARNING: System::setSecurityManager has been called by org.opensearch.bootstrap.Security (file:/usr/share/wazuh-indexer/lib/opensearch-2.19.3.jar)
Nov 13 20:06:02 ####systemd-entrypoint[2343394]: WARNING: Please consider reporting this to the maintainers of org.opensearch.bootstrap.Security
Nov 13 20:06:02 ####systemd-entrypoint[2343394]: WARNING: System::setSecurityManager will be removed in a future release
Nov 13 20:06:10 ####systemd-entrypoint[2343394]: fatal error in thread [main], exiting
Nov 13 20:06:10 ####systemd-entrypoint[2343394]: java.lang.NoClassDefFoundError: Could not initialize class com.sun.jna.Native
Nov 13 20:06:10 ####systemd-entrypoint[2343394]:         at org.opensearch.systemd.Libsystemd.lambda$static$0(Libsystemd.java:48)
Nov 13 20:06:10 ####systemd-entrypoint[2343394]:         at java.base/java.security.AccessController.doPrivileged(AccessController.java:319)
Nov 13 20:06:10 ####systemd-entrypoint[2343394]:         at org.opensearch.systemd.Libsystemd.<clinit>(Libsystemd.java:47)
Nov 13 20:06:10 ####systemd-entrypoint[2343394]:         at org.opensearch.systemd.SystemdPlugin.sd_notify(SystemdPlugin.java:126)
Nov 13 20:06:10 ####systemd-entrypoint[2343394]:         at org.opensearch.systemd.SystemdPlugin.onNodeStarted(SystemdPlugin.java:137)
Nov 13 20:06:10 ####systemd-entrypoint[2343394]:         at org.opensearch.plugins.ClusterPlugin.onNodeStarted(ClusterPlugin.java:102)
Nov 13 20:06:10 ####systemd-entrypoint[2343394]:         at org.opensearch.node.Node.lambda$start$40(Node.java:1776)
Nov 13 20:06:10 ####systemd-entrypoint[2343394]:         at java.base/java.util.ArrayList.forEach(ArrayList.java:1596)
Nov 13 20:06:10 ####systemd-entrypoint[2343394]:         at org.opensearch.node.Node.start(Node.java:1776)
Nov 13 20:06:10 ####systemd-entrypoint[2343394]:         at org.opensearch.bootstrap.Bootstrap.start(Bootstrap.java:339)
Nov 13 20:06:10 ####systemd-entrypoint[2343394]:         at org.opensearch.bootstrap.Bootstrap.init(Bootstrap.java:413)
Nov 13 20:06:10 ####systemd-entrypoint[2343394]:         at org.opensearch.bootstrap.OpenSearch.init(OpenSearch.java:181)
Nov 13 20:06:10 ####systemd-entrypoint[2343394]:         at org.opensearch.bootstrap.OpenSearch.execute(OpenSearch.java:172)
Nov 13 20:06:10 ####systemd-entrypoint[2343394]:         at org.opensearch.cli.EnvironmentAwareCommand.execute(EnvironmentAwareCommand.java:104)
Nov 13 20:06:10 ####systemd-entrypoint[2343394]:         at org.opensearch.cli.Command.mainWithoutErrorHandling(Command.java:138)
Nov 13 20:06:10 ####systemd-entrypoint[2343394]:         at org.opensearch.cli.Command.main(Command.java:101)
Nov 13 20:06:10 ####systemd-entrypoint[2343394]:         at org.opensearch.bootstrap.OpenSearch.main(OpenSearch.java:138)
Nov 13 20:06:10 ####systemd-entrypoint[2343394]:         at org.opensearch.bootstrap.OpenSearch.main(OpenSearch.java:104)
Nov 13 20:06:10 ####systemd-entrypoint[2343394]: Caused by: java.lang.ExceptionInInitializerError: Exception java.lang.UnsatisfiedLinkError: /tmp/opensearch-17383693049540856787/jna6144505757979655864.tmp: /tmp/opensearch-17383693049540856787/jna6144505757979655864.tmp: failed to map segment from shared object [in thread "main"]
Nov 13 20:06:10 ####systemd-entrypoint[2343394]:         at java.base/jdk.internal.loader.NativeLibraries.load(Native Method)
Nov 13 20:06:10 ####systemd-entrypoint[2343394]:         at java.base/jdk.internal.loader.NativeLibraries$NativeLibraryImpl.open(NativeLibraries.java:331)
Nov 13 20:06:10 ####systemd-entrypoint[2343394]:         at java.base/jdk.internal.loader.NativeLibraries.loadLibrary(NativeLibraries.java:197)
Nov 13 20:06:10 ####systemd-entrypoint[2343394]:         at java.base/jdk.internal.loader.NativeLibraries.loadLibrary(NativeLibraries.java:139)
Nov 13 20:06:10 ####systemd-entrypoint[2343394]:         at java.base/java.lang.ClassLoader.loadLibrary(ClassLoader.java:2418)
Nov 13 20:06:10 ####systemd-entrypoint[2343394]:         at java.base/java.lang.Runtime.load0(Runtime.java:852)
Nov 13 20:06:10 ####systemd-entrypoint[2343394]:         at java.base/java.lang.System.load(System.java:2025)
Nov 13 20:06:10 ####systemd-entrypoint[2343394]:         at com.sun.jna.Native.loadNativeDispatchLibraryFromClasspath(Native.java:1045)
Nov 13 20:06:10 ####systemd-entrypoint[2343394]:         at com.sun.jna.Native.loadNativeDispatchLibrary(Native.java:1015)
Nov 13 20:06:10 ####systemd-entrypoint[2343394]:         at com.sun.jna.Native.<clinit>(Native.java:221)
Nov 13 20:06:10 ####systemd-entrypoint[2343394]:         at java.base/java.lang.Class.forName0(Native Method)
Nov 13 20:06:10 ####systemd-entrypoint[2343394]:         at java.base/java.lang.Class.forName(Class.java:421)
Nov 13 20:06:10 ####systemd-entrypoint[2343394]:         at java.base/java.lang.Class.forName(Class.java:412)
Nov 13 20:06:10 ####systemd-entrypoint[2343394]:         at org.opensearch.bootstrap.Natives.<clinit>(Natives.java:60)
Nov 13 20:06:10 ####systemd-entrypoint[2343394]:         at org.opensearch.bootstrap.Bootstrap.initializeNatives(Bootstrap.java:123)
Nov 13 20:06:10 ####systemd-entrypoint[2343394]:         at org.opensearch.bootstrap.Bootstrap.setup(Bootstrap.java:191)
Nov 13 20:06:10 ####systemd-entrypoint[2343394]:         at org.opensearch.bootstrap.Bootstrap.init(Bootstrap.java:404)
Nov 13 20:06:10 ####systemd-entrypoint[2343394]:         ... 7 more
Nov 13 20:06:10 ####systemd[1]: wazuh-indexer.service: Main process exited, code=exited, status=1/FAILURE
Nov 13 20:06:10 ####systemd[1]: wazuh-indexer.service: Failed with result 'exit-code'.
Nov 13 20:06:10 ####systemd[1]: Failed to start wazuh-indexer.
Nov 13 20:06:10 ####systemd[1]: wazuh-indexer.service: Consumed 34.543s CPU time.
Nov 13 20:07:05 ####systemd[1]: Starting wazuh-indexer...
Nov 13 20:07:06 ####systemd-entrypoint[2343792]: WARNING: A terminally deprecated method in java.lang.System has been called
Nov 13 20:07:06 ####systemd-entrypoint[2343792]: WARNING: System::setSecurityManager has been called by org.opensearch.bootstrap.OpenSearch (file:/usr/share/wazuh-indexer/lib/opensearch-2.19.3.jar)
Nov 13 20:07:06 ####systemd-entrypoint[2343792]: WARNING: Please consider reporting this to the maintainers of org.opensearch.bootstrap.OpenSearch
Nov 13 20:07:06 ####systemd-entrypoint[2343792]: WARNING: System::setSecurityManager will be removed in a future release
Nov 13 20:07:07 ####systemd-entrypoint[2343792]: Nov 13, 2025 8:07:07 PM sun.util.locale.provider.LocaleProviderAdapter <clinit>
Nov 13 20:07:07 ####systemd-entrypoint[2343792]: WARNING: COMPAT locale provider will be removed in a future release
Nov 13 20:07:07 ####systemd-entrypoint[2343792]: WARNING: A terminally deprecated method in java.lang.System has been called
Nov 13 20:07:07 ####systemd-entrypoint[2343792]: WARNING: System::setSecurityManager has been called by org.opensearch.bootstrap.Security (file:/usr/share/wazuh-indexer/lib/opensearch-2.19.3.jar)
Nov 13 20:07:07 ####systemd-entrypoint[2343792]: WARNING: Please consider reporting this to the maintainers of org.opensearch.bootstrap.Security
Nov 13 20:07:07 ####systemd-entrypoint[2343792]: WARNING: System::setSecurityManager will be removed in a future release
Nov 13 20:07:14 ####systemd-entrypoint[2343792]: fatal error in thread [main], exiting
Nov 13 20:07:14 ####systemd-entrypoint[2343792]: java.lang.NoClassDefFoundError: Could not initialize class com.sun.jna.Native
Nov 13 20:07:14 ####systemd-entrypoint[2343792]:         at org.opensearch.systemd.Libsystemd.lambda$static$0(Libsystemd.java:48)
Nov 13 20:07:14 ####systemd-entrypoint[2343792]:         at java.base/java.security.AccessController.doPrivileged(AccessController.java:319)
Nov 13 20:07:14 ####systemd-entrypoint[2343792]:         at org.opensearch.systemd.Libsystemd.<clinit>(Libsystemd.java:47)
Nov 13 20:07:14 ####systemd-entrypoint[2343792]:         at org.opensearch.systemd.SystemdPlugin.sd_notify(SystemdPlugin.java:126)
Nov 13 20:07:14 ####systemd-entrypoint[2343792]:         at org.opensearch.systemd.SystemdPlugin.onNodeStarted(SystemdPlugin.java:137)
Nov 13 20:07:14 ####systemd-entrypoint[2343792]:         at org.opensearch.plugins.ClusterPlugin.onNodeStarted(ClusterPlugin.java:102)
Nov 13 20:07:14 ####systemd-entrypoint[2343792]:         at org.opensearch.node.Node.lambda$start$40(Node.java:1776)
Nov 13 20:07:14 ####systemd-entrypoint[2343792]:         at java.base/java.util.ArrayList.forEach(ArrayList.java:1596)
Nov 13 20:07:14 ####systemd-entrypoint[2343792]:         at org.opensearch.node.Node.start(Node.java:1776)
Nov 13 20:07:14 ####systemd-entrypoint[2343792]:         at org.opensearch.bootstrap.Bootstrap.start(Bootstrap.java:339)
Nov 13 20:07:14 ####systemd-entrypoint[2343792]:         at org.opensearch.bootstrap.Bootstrap.init(Bootstrap.java:413)
Nov 13 20:07:14 ####systemd-entrypoint[2343792]:         at org.opensearch.bootstrap.OpenSearch.init(OpenSearch.java:181)
Nov 13 20:07:14 ####systemd-entrypoint[2343792]:         at org.opensearch.bootstrap.OpenSearch.execute(OpenSearch.java:172)
Nov 13 20:07:14 ####systemd-entrypoint[2343792]:         at org.opensearch.cli.EnvironmentAwareCommand.execute(EnvironmentAwareCommand.java:104)
Nov 13 20:07:14 ####systemd-entrypoint[2343792]:         at org.opensearch.cli.Command.mainWithoutErrorHandling(Command.java:138)
Nov 13 20:07:14 ####systemd-entrypoint[2343792]:         at org.opensearch.cli.Command.main(Command.java:101)
Nov 13 20:07:14 ####systemd-entrypoint[2343792]:         at org.opensearch.bootstrap.OpenSearch.main(OpenSearch.java:138)
Nov 13 20:07:14 ####systemd-entrypoint[2343792]:         at org.opensearch.bootstrap.OpenSearch.main(OpenSearch.java:104)
Nov 13 20:07:14 ####systemd-entrypoint[2343792]: Caused by: java.lang.ExceptionInInitializerError: Exception java.lang.UnsatisfiedLinkError: /tmp/opensearch-10892347247464720307/jna7462497120476074492.tmp: /tmp/opensearch-10892347247464720307/jna7462497120476074492.tmp: failed to map segment from shared object [in thread "main"]
Nov 13 20:07:14 ####systemd-entrypoint[2343792]:         at java.base/jdk.internal.loader.NativeLibraries.load(Native Method)
Nov 13 20:07:14 ####systemd-entrypoint[2343792]:         at java.base/jdk.internal.loader.NativeLibraries$NativeLibraryImpl.open(NativeLibraries.java:331)
Nov 13 20:07:14 ####systemd-entrypoint[2343792]:         at java.base/jdk.internal.loader.NativeLibraries.loadLibrary(NativeLibraries.java:197)
Nov 13 20:07:14 ####systemd-entrypoint[2343792]:         at java.base/jdk.internal.loader.NativeLibraries.loadLibrary(NativeLibraries.java:139)
Nov 13 20:07:14 ####systemd-entrypoint[2343792]:         at java.base/java.lang.ClassLoader.loadLibrary(ClassLoader.java:2418)
Nov 13 20:07:14 ####systemd-entrypoint[2343792]:         at java.base/java.lang.Runtime.load0(Runtime.java:852)
Nov 13 20:07:14 ####systemd-entrypoint[2343792]:         at java.base/java.lang.System.load(System.java:2025)
Nov 13 20:07:14 ####systemd-entrypoint[2343792]:         at com.sun.jna.Native.loadNativeDispatchLibraryFromClasspath(Native.java:1045)
Nov 13 20:07:14 ####systemd-entrypoint[2343792]:         at com.sun.jna.Native.loadNativeDispatchLibrary(Native.java:1015)
Nov 13 20:07:14 ####systemd-entrypoint[2343792]:         at com.sun.jna.Native.<clinit>(Native.java:221)
Nov 13 20:07:14 ####systemd-entrypoint[2343792]:         at java.base/java.lang.Class.forName0(Native Method)
Nov 13 20:07:14 ####systemd-entrypoint[2343792]:         at java.base/java.lang.Class.forName(Class.java:421)
Nov 13 20:07:14 ####systemd-entrypoint[2343792]:         at java.base/java.lang.Class.forName(Class.java:412)
Nov 13 20:07:14 ####systemd-entrypoint[2343792]:         at org.opensearch.bootstrap.Natives.<clinit>(Natives.java:60)
Nov 13 20:07:14 ####systemd-entrypoint[2343792]:         at org.opensearch.bootstrap.Bootstrap.initializeNatives(Bootstrap.java:123)
Nov 13 20:07:14 ####systemd-entrypoint[2343792]:         at org.opensearch.bootstrap.Bootstrap.setup(Bootstrap.java:191)
Nov 13 20:07:14 ####systemd-entrypoint[2343792]:         at org.opensearch.bootstrap.Bootstrap.init(Bootstrap.java:404)
Nov 13 20:07:14 ####systemd-entrypoint[2343792]:         ... 7 more
Nov 13 20:07:14 ####systemd[1]: wazuh-indexer.service: Main process exited, code=exited, status=1/FAILURE
Nov 13 20:07:14 ####systemd[1]: wazuh-indexer.service: Failed with result 'exit-code'.
Nov 13 20:07:14 ####systemd[1]: Failed to start wazuh-indexer.
Nov 13 20:07:14 ####systemd[1]: wazuh-indexer.service: Consumed 30.020s CPU time.

Nov 13 20:12:04 ####systemd[1]: Starting wazuh-indexer...

Nov 13 20:12:13 ####systemd-entrypoint[2344631]: Caused by: java.lang.ExceptionInInitializerError: Exception java.lang.UnsatisfiedLinkError: /tmp/opensearch-7179007196144165349/jna6707429492078432157.tmp: /tmp/opensearch-7179007196144165349/jna6707429492078432157.tmp: failed to map segment from shared object [in thread "main"]

Nov 13 20:12:13 ####systemd-entrypoint[2344631]:         at java.base/jdk.internal.loader.NativeLibraries.load(Native Method)
Nov 13 20:12:13 ####systemd-entrypoint[2344631]:         at java.base/jdk.internal.loader.NativeLibraries$NativeLibraryImpl.open(NativeLibraries.java:331)
Nov 13 20:12:13 ####systemd-entrypoint[2344631]:         at java.base/jdk.internal.loader.NativeLibraries.loadLibrary(NativeLibraries.java:197)
Nov 13 20:12:13 ####systemd-entrypoint[2344631]:         at java.base/jdk.internal.loader.NativeLibraries.loadLibrary(NativeLibraries.java:139)
Nov 13 20:12:13 ####systemd-entrypoint[2344631]:         at java.base/java.lang.ClassLoader.loadLibrary(ClassLoader.java:2418)
Nov 13 20:12:13 ####systemd-entrypoint[2344631]:         at java.base/java.lang.Runtime.load0(Runtime.java:852)
Nov 13 20:12:13 ####systemd-entrypoint[2344631]:         at java.base/java.lang.System.load(System.java:2025)
Nov 13 20:12:13 ####systemd-entrypoint[2344631]:         at com.sun.jna.Native.loadNativeDispatchLibraryFromClasspath(Native.java:1045)
Nov 13 20:12:13 ####systemd-entrypoint[2344631]:         at com.sun.jna.Native.loadNativeDispatchLibrary(Native.java:1015)
Nov 13 20:12:13 ####systemd-entrypoint[2344631]:         at com.sun.jna.Native.<clinit>(Native.java:221)
Nov 13 20:12:13 ####systemd-entrypoint[2344631]:         at java.base/java.lang.Class.forName0(Native Method)
Nov 13 20:12:13 ####systemd-entrypoint[2344631]:         at java.base/java.lang.Class.forName(Class.java:421)
Nov 13 20:12:13 ####systemd-entrypoint[2344631]:         at java.base/java.lang.Class.forName(Class.java:412)
Nov 13 20:12:13 ####systemd-entrypoint[2344631]:         at org.opensearch.bootstrap.Natives.<clinit>(Natives.java:60)
Nov 13 20:12:13 ####systemd-entrypoint[2344631]:         at org.opensearch.bootstrap.Bootstrap.initializeNatives(Bootstrap.java:123)
Nov 13 20:12:13 ####systemd-entrypoint[2344631]:         at org.opensearch.bootstrap.Bootstrap.setup(Bootstrap.java:191)
Nov 13 20:12:13 ####systemd-entrypoint[2344631]:         at org.opensearch.bootstrap.Bootstrap.init(Bootstrap.java:404)
Nov 13 20:12:13 ####systemd-entrypoint[2344631]:         ... 7 more
Nov 13 20:12:13 ####systemd[1]: wazuh-indexer.service: Main process exited, code=exited, status=1/FAILURE

Nov 13 20:12:13 ####systemd[1]: wazuh-indexer.service: Failed with result 'exit-code'.

Nov 13 20:12:13 ####systemd[1]: Failed to start wazuh-indexer.

Nov 13 20:12:13 ####systemd[1]: wazuh-indexer.service: Consumed 30.574s CPU time.

Nov 14 15:08:16 ####systemd[1]: Starting wazuh-indexer...
Nov 14 15:08:18 ####systemd-entrypoint[2422819]: WARNING: Using incubator modules: jdk.incubator.vector
Nov 14 15:08:18 ####systemd-entrypoint[2422819]: WARNING: A terminally deprecated method in java.lang.System has been called
Nov 14 15:08:18 ####systemd-entrypoint[2422819]: WARNING: System::setSecurityManager has been called by org.opensearch.bootstrap.OpenSearch (file:/usr/share/wazuh-indexer/lib/opensearch-2.19.3.jar)
Nov 14 15:08:18 ####systemd-entrypoint[2422819]: WARNING: Please consider reporting this to the maintainers of org.opensearch.bootstrap.OpenSearch
Nov 14 15:08:18 ####systemd-entrypoint[2422819]: WARNING: System::setSecurityManager will be removed in a future release
Nov 14 15:08:18 ####systemd-entrypoint[2422819]: Nov 14, 2025 3:08:18 PM sun.util.locale.provider.LocaleProviderAdapter <clinit>
Nov 14 15:08:18 ####systemd-entrypoint[2422819]: WARNING: COMPAT locale provider will be removed in a future release
Nov 14 15:08:18 ####systemd-entrypoint[2422819]: WARNING: A terminally deprecated method in java.lang.System has been called
Nov 14 15:08:18 ####systemd-entrypoint[2422819]: WARNING: System::setSecurityManager has been called by org.opensearch.bootstrap.Security (file:/usr/share/wazuh-indexer/lib/opensearch-2.19.3.jar)
Nov 14 15:08:18 ####systemd-entrypoint[2422819]: WARNING: Please consider reporting this to the maintainers of org.opensearch.bootstrap.Security
Nov 14 15:08:18 ####systemd-entrypoint[2422819]: WARNING: System::setSecurityManager will be removed in a future release
Nov 14 15:08:26 ####systemd-entrypoint[2422819]: fatal error in thread [main], exiting
Nov 14 15:08:26 ####systemd-entrypoint[2422819]: java.lang.NoClassDefFoundError: Could not initialize class com.sun.jna.Native
Nov 14 15:08:26 ####systemd-entrypoint[2422819]:         at org.opensearch.systemd.Libsystemd.lambda$static$0(Libsystemd.java:48)
Nov 14 15:08:26 ####systemd-entrypoint[2422819]:         at java.base/java.security.AccessController.doPrivileged(AccessController.java:319)
Nov 14 15:08:26 ####systemd-entrypoint[2422819]:         at org.opensearch.systemd.Libsystemd.<clinit>(Libsystemd.java:47)
Nov 14 15:08:26 ####systemd-entrypoint[2422819]:         at org.opensearch.systemd.SystemdPlugin.sd_notify(SystemdPlugin.java:126)
Nov 14 15:08:26 ####systemd-entrypoint[2422819]:         at org.opensearch.systemd.SystemdPlugin.onNodeStarted(SystemdPlugin.java:137)
Nov 14 15:08:26 ####systemd-entrypoint[2422819]:         at org.opensearch.plugins.ClusterPlugin.onNodeStarted(ClusterPlugin.java:102)
Nov 14 15:08:26 ####systemd-entrypoint[2422819]:         at org.opensearch.node.Node.lambda$start$40(Node.java:1776)
Nov 14 15:08:26 ####systemd-entrypoint[2422819]:         at java.base/java.util.ArrayList.forEach(ArrayList.java:1596)
Nov 14 15:08:26 ####systemd-entrypoint[2422819]:         at org.opensearch.node.Node.start(Node.java:1776)
Nov 14 15:08:26 ####systemd-entrypoint[2422819]:         at org.opensearch.bootstrap.Bootstrap.start(Bootstrap.java:339)
Nov 14 15:08:26 ####systemd-entrypoint[2422819]:         at org.opensearch.bootstrap.Bootstrap.init(Bootstrap.java:413)
Nov 14 15:08:26 ####systemd-entrypoint[2422819]:         at org.opensearch.bootstrap.OpenSearch.init(OpenSearch.java:181)
Nov 14 15:08:26 ####systemd-entrypoint[2422819]:         at org.opensearch.bootstrap.OpenSearch.execute(OpenSearch.java:172)
Nov 14 15:08:26 ####systemd-entrypoint[2422819]:         at org.opensearch.cli.EnvironmentAwareCommand.execute(EnvironmentAwareCommand.java:104)
Nov 14 15:08:26 ####systemd-entrypoint[2422819]:         at org.opensearch.cli.Command.mainWithoutErrorHandling(Command.java:138)
Nov 14 15:08:26 ####systemd-entrypoint[2422819]:         at org.opensearch.cli.Command.main(Command.java:101)
Nov 14 15:08:26 ####systemd-entrypoint[2422819]:         at org.opensearch.bootstrap.OpenSearch.main(OpenSearch.java:138)
Nov 14 15:08:26 ####systemd-entrypoint[2422819]:         at org.opensearch.bootstrap.OpenSearch.main(OpenSearch.java:104)
Nov 14 15:08:26 ####systemd-entrypoint[2422819]: Caused by: java.lang.ExceptionInInitializerError: Exception java.lang.UnsatisfiedLinkError: /tmp/opensearch-12431257161478073174/jna10032647513523575390.tmp: /tmp/opensearch-12431257161478073174/jna10032647513523575390.tmp: failed to map segment from shared object [in thread "main"]
Nov 14 15:08:26 ####systemd-entrypoint[2422819]:         at java.base/jdk.internal.loader.NativeLibraries.load(Native Method)
Nov 14 15:08:26 ####systemd-entrypoint[2422819]:         at java.base/jdk.internal.loader.NativeLibraries$NativeLibraryImpl.open(NativeLibraries.java:331)
Nov 14 15:08:26 ####systemd-entrypoint[2422819]:         at java.base/jdk.internal.loader.NativeLibraries.loadLibrary(NativeLibraries.java:197)
Nov 14 15:08:26 ####systemd-entrypoint[2422819]:         at java.base/jdk.internal.loader.NativeLibraries.loadLibrary(NativeLibraries.java:139)
Nov 14 15:08:26 ####systemd-entrypoint[2422819]:         at java.base/java.lang.ClassLoader.loadLibrary(ClassLoader.java:2418)
Nov 14 15:08:26 ####systemd-entrypoint[2422819]:         at java.base/java.lang.Runtime.load0(Runtime.java:852)
Nov 14 15:08:26 ####systemd-entrypoint[2422819]:         at java.base/java.lang.System.load(System.java:2025)
Nov 14 15:08:26 ####systemd-entrypoint[2422819]:         at com.sun.jna.Native.loadNativeDispatchLibraryFromClasspath(Native.java:1045)
Nov 14 15:08:26 ####systemd-entrypoint[2422819]:         at com.sun.jna.Native.loadNativeDispatchLibrary(Native.java:1015)
Nov 14 15:08:26 ####systemd-entrypoint[2422819]:         at com.sun.jna.Native.<clinit>(Native.java:221)
Nov 14 15:08:26 ####systemd-entrypoint[2422819]:         at java.base/java.lang.Class.forName0(Native Method)
Nov 14 15:08:26 ####systemd-entrypoint[2422819]:         at java.base/java.lang.Class.forName(Class.java:421)
Nov 14 15:08:26 ####systemd-entrypoint[2422819]:         at java.base/java.lang.Class.forName(Class.java:412)
Nov 14 15:08:26 ####systemd-entrypoint[2422819]:         at org.opensearch.bootstrap.Natives.<clinit>(Natives.java:60)
Nov 14 15:08:26 ####systemd-entrypoint[2422819]:         at org.opensearch.bootstrap.Bootstrap.initializeNatives(Bootstrap.java:123)
Nov 14 15:08:26 ####systemd-entrypoint[2422819]:         at org.opensearch.bootstrap.Bootstrap.setup(Bootstrap.java:191)
Nov 14 15:08:26 ####systemd-entrypoint[2422819]:         at org.opensearch.bootstrap.Bootstrap.init(Bootstrap.java:404)
Nov 14 15:08:26 ####systemd-entrypoint[2422819]:         ... 7 more
Nov 14 15:08:26 ####systemd[1]: wazuh-indexer.service: Main process exited, code=exited, status=1/FAILURE
Nov 14 15:08:26 ####systemd[1]: wazuh-indexer.service: Failed with result 'exit-code'.
Nov 14 15:08:26 ####systemd[1]: Failed to start wazuh-indexer.
Nov 14 15:08:26 ####systemd[1]: wazuh-indexer.service: Consumed 28.561s CPU time.
14/11/2025 15:08:26 INFO: --- Removing existing Wazuh installation ---
14/11/2025 15:08:26 INFO: Removing Wazuh indexer.
Dependencies resolved.
================================================================================
 Package                Architecture    Version           Repository       Size
================================================================================
Removing:
 wazuh-indexer          x86_64          4.14.1-1          @wazuh          1.0 G

Transaction Summary
================================================================================
Remove  1 Package

Freed space: 1.0 G
Running transaction check
Transaction check succeeded.
Running transaction test
Transaction test succeeded.
Running transaction
  Preparing        :                                                        1/1
  Running scriptlet: wazuh-indexer-4.14.1-1.x86_64                          1/1
  Erasing          : wazuh-indexer-4.14.1-1.x86_64                          1/1
warning: /etc/wazuh-indexer/opensearch.yml saved as /etc/wazuh-indexer/opensearch.yml.rpmsave
warning: /etc/wazuh-indexer/jvm.options saved as /etc/wazuh-indexer/jvm.options.rpmsave

  Verifying        : wazuh-indexer-4.14.1-1.x86_64                          1/1
Installed products updated.

Removed:
  wazuh-indexer-4.14.1-1.x86_64

Complete!
14/11/2025 15:08:27 INFO: Wazuh indexer removed.
14/11/2025 15:08:28 INFO: Installation cleaned. Check the /var/log/wazuh-install.log file to learn more about the issue.

On Friday, November 14, 2025 at 4:24:58 AM UTC-5 Francis Timilehin Jeremiah wrote:

[Francis Timilehin Jeremiah]

Hello, just noticed your message. It is not clear what the error is, I can't find the issue in your logs. Let's try it again, do 'apt get && apt update' before running the installation script 

[Francis Timilehin Jeremiah]

Hi, did you get to resolve it now? It seems to be because of this error -  /tmp/opensearch-12431257161478073174/jna10032647513523575390.tmp: failed to map segment from shared object [in thread "main"]

 Check if /tmp is mounted with noexec. If you see noexec, then run this command to remount /tmp temporarily - mount | grep /tmp. After this, try the installation again.