Assistance Required for Wazuh User Login Issue

[Jatin Rajput]

Hi Team,

I have created a new user in the Wazuh Dashboard and assigned the required role and role mapping. The user is visible in the Internal Users section, and all configurations appear to be correct.

However, when trying to log in with the new user credentials, I receive the error:

"Invalid username/password"

Could you please help me verify if there are any additional configurations required or suggest troubleshooting steps to resolve this issue?

Thank you for your support.

Regards,
Jatin

[Bony V John]

Hi,

Please allow me some time, I'm working on this and will get back to you with an update as soon as possible.

[Bony V John]

Hi,

Are you able to log in to the dashboard with the default admin user?

If you are able to log in with the default admin user but not with the custom user, then the issue might be related to configuration or browser cache.

First, try opening the Wazuh dashboard in incognito/private mode or clear the browser cache and then try logging in again with the custom user, since browser cache can sometimes cause similar issues.

If you are still facing the same issue, you can follow the below steps to reset the password.

On the Wazuh dashboard, log in with the default admin user.
Then go to: Hamburger menu > Indexer Management > Security > Internal users > Select the user

Add a new password in the password section, save the changes, and then check whether you are able to log in with the custom user.

Also, ensure that the user have proper permission, for that you can refer this Wazuh RBAC documentation for more details.

You can also reset the password from the Wazuh indexer command line.
Run the below commands on the indexer CLI.

Download the password management tool:
curl -so wazuh-passwords-tool.sh https://packages.wazuh.com/4.14.5/wazuh-passwords-tool.sh

Then run the below command to change the user password:
bash wazuh-passwords-tool.sh -u <user-name> -p <password>

Replace <user-name> with the custom username and <password> with a new password.
You can refer to the Wazuh password management documentation for more details.

Also, restart the indexer service to reload the service properly:
systemctl restart wazuh-indexer

Then check again on the dashboard whether you are able to log in.

If you are still not able to log in, please share the Wazuh indexer log file with us located at: /var/log/wazuh-indexer/wazuh-cluster.log

Also, let me know about the deployment type of Wazuh on your environment.

[Jatin Rajput]

thankyou

Can you help me learn Wazuh from basic to advanced level?