Configuration Error: Unable to Start Wazuh Manager Due to Invalid API Element

98 views
Skip to first unread message

Muli M

unread,
Sep 23, 2024, 1:13:34 AM9/23/24
to Wazuh | Mailing List
Hello Wazuh Community,

I am encountering an issue with my Wazuh Manager setup on Ubuntu 24.04. After adding the `<api>` element to my `ossec.conf` file, I am receiving the following error when attempting to start the Wazuh Manager:

2024/09/20 23:34:21 wazuh-csyslogd: ERROR: (1230): Invalid element in the configuration: 'api'. 
2024/09/20 23:34:21 wazuh-csyslogd: CRITICAL: (1202): Configuration error at 'etc/ossec.conf'.

I have checked the `ossec.conf` file and made sure that the `<api>` element is within the `<ossec_config>` block, as suggested in the documentation. Despite this, I am still unable to start the Wazuh Manager service, and it fails with the error.

**System Information:**
- OS: Ubuntu 24.04
- Wazuh Version: 4.9.0
- Manager installed on: `/media/mul/601ceb87-5e12-49da-8dd4-cc4355157df5/wazuh-data`

**Relevant Configuration (ossec.conf):**
```xml
<ossec_config>
    <!-- Other configuration elements -->
    <api>
        <enabled>yes</enabled>
        <host>0.0.0.0</host>
        <port>55000</port>
        <username>wazuh</username>
        <password>wazuh</password>
        <https>yes</https>
        <ssl_verify>no</ssl_verify>
    </api>
</ossec_config>

Md. Nazmur Sakib

unread,
Sep 23, 2024, 2:18:05 AM9/23/24
to Wazuh | Mailing List
Hi Muli M,

<api> can not be configured like this in the Wazuh manager’s configuration.

These are the available options.
https://documentation.wazuh.com/current/user-manual/reference/ossec-conf/index.html

So remove the <api> block and restart the manager

Also, I am sharing some documents related to Wazuh API which can be helpful

https://documentation.wazuh.com/current/user-manual/api/index.html

https://documentation.wazuh.com/current/user-manual/api/getting-started.html

I hope you find this information helpful.
Reply all
Reply to author
Forward
0 new messages