Question about reporting

20 views
Skip to first unread message

Steve Chekan

unread,
Feb 3, 2023, 2:18:22 PM2/3/23
to Wazuh mailing list
I have setup Wazuh running on an Ubuntu server. 16 agents. 
Worked great for a few months now all of a sudden every graphic 
shows no events after a certain day. Like something is broken or
was broken on that day. Any ideas on what may have happened
would be greatly appreciated. Thanks in advance. 

Screenshot 2023-02-03 141352.pngScreenshot 2023-02-03 141301.pngScreenshot 2023-02-03 141200.png

Nicolas Osvaldo Fernandez

unread,
Feb 5, 2023, 6:07:30 PM2/5/23
to Wazuh mailing list
Hello, nice to greet you.

Can you check the logs of wazuh?

        cat /var/log/wazuh-indexer/wazuh-cluster.log | grep -i -E "error|warn|critical"
        cat /var/log/filebeat/filebeat | grep -i -E "error|warn|critical"
        cat /var/ossec/logs/ossec.log | grep -i -E "error|warn|critical"

Tell me if you find any error/warning messages and we'll review them. 

Greetings!
Reply all
Reply to author
Forward
0 new messages