Wazuh server is down after automatic update to Open Distro for Elastic Search

[Hari ft]

Dear Team,

WAZUH_VERSION":"v4.3.8"

We are facing an issue with the Wazuh server after it was automatically upgraded to Open Distro for Elastic Search. We can see the login page, but the old password is not working. When we checked the server, the services of the Wazuh indexer and Wazuh dashboard were down. And the error shows SSL is missing. The errors are given below.

Unable to read /etc/wazuh-indexer/certs/indexer.pem (/etc/wazuh-indexer/certs/indexer.pem)

FATAL  Error: ENOENT: no such file or directory, open '/etc/wazuh-dashboard/certs/dashboard-key.pem'

When I copy certificates from the Kibana Cert directory, the indexer works fine. But Dashboard has another error. Shown below.

FATAL  Error: Port 443 is already in use. Another instance of OpenSearch Dashboards may be running!

I don't know what happened. Some days ago, it worked fine. Now it is not working.
And I don't have a credentials to login to Open Distro for Elastic Search.
Anyone, please help.

Regards,

Hari

[Luis Enrique Chico Capistrano]

Hi Hari,

Thank you for reaching out to us regarding the issue you are facing with the Wazuh server.

FATAL Error: Port 443 is already in use. Another instance of OpenSearch Dashboards may be running!

So, this error indicates that another instance of OpenSearch Dashboards is already using port 443. Make sure there are no other instances of wazuh-dashboards or any other services running on port 443. You can check for running processes using the command:

 sudo lsof -i :443

I don't have a credentials to login to Open Distro for Elastic Search.

Could you double-check from step 4 on this Migrating to the Wazuh dashboard document? I think those steps could help you.Regards,
Luis