Health Check. Error connecting to API: 2001 - Unexpected end of JSON input

1,009 views
Skip to first unread message

NoOne Cool

unread,
Jan 11, 2021, 2:38:26 PM1/11/21
to Wazuh mailing list
After two weeks of non-use I logged into a full server (storage capacity), due to restrictions we only have a 75gb backend for 200 agents atm. I deleted the alerts.json and reboot after an apt-update.

I am now unable to configure the server due to the following api issue:

Health Check. Error connecting to API: 2001 - Unexpected end of JSON input
Screen Shot 2021-01-11 at 2.34.13 PM.png 

I tried updating all my components to the latest without avail, which leads me to believe that deleting the alerts.json likely borked something.

How do I recover without losing everything?

Ubuntu 20.04, 75gb hdd, Wazuh 4.03, 200 agents.

NoOne Cool

unread,
Jan 11, 2021, 2:44:02 PM1/11/21
to Wazuh mailing list
Forgot to add that if I click goto app I get the following and a large which screen where the config would be.  I've tried reinstalling the kibana wazuh app using sudo -u kibana, but doesn't appear to have any impact on my issue.

Screen Shot 2021-01-11 at 2.41.34 PM.png

NoOne Cool

unread,
Jan 11, 2021, 3:23:47 PM1/11/21
to Wazuh mailing list

Fixed my own issue, I ended up deleting the wazuh app, then doing a rm -rf of the app directory (which previous housed the app) and reinstalling following the instructions. Would seem it was a kibana issue associated with the upgrade to 4.03 (possibly)

Humbert Gast

unread,
Jan 12, 2021, 1:50:32 AM1/12/21
to NoOne Cool, Wazuh mailing list
Hi,

Thanks a lot because I got the same issue and checked all since yesterday ...
So to resolve I did this below and all seems to work well now.

cd /usr/share/kibana
sudo -u kibana bin/kibana-plugin remove wazuh
cd /usr/share/kibana/optimize
mv wazuh wazuh.bkp12012021
mv wazuh-logs wazuh-logs.bkp12012021
mv wazuh-reporting wazuh-reporting.bkp12012021
sudo -u kibana /usr/share/kibana/bin/kibana-plugin install https://packages.wazuh.com/4.x/ui/kibana/wazuh_kibana-4.0.3_7.9.3-1.zip
systemctl daemon-reload
systemctl restart kibana.service

Regards,
Alex


--
You received this message because you are subscribed to the Google Groups "Wazuh mailing list" group.
To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+un...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/wazuh/57f1672a-3bb1-458d-a8b1-be22b406c4f9n%40googlegroups.com.

David José Iglesias Lopez

unread,
Jan 13, 2021, 12:27:14 PM1/13/21
to Wazuh mailing list
Hello,

I am glad you got it to work properly. It looks like there was an issue with the Wazuh API setup for Kibana.

Please let me know if you encounter any further problems,

David J. Iglesias
Reply all
Reply to author
Forward
0 new messages