Re: API Errors

[Mauricio Aguilar]

Hi,

One small piece of information I have seen is the host. I guess it's just an edit to hide sensitive data and that's not the problem.

2025/01/22 07:58:51 wazuh-integratord: ERROR: While running custom-vulnm -> integrations. Output: requests.exceptions.ConnectionError: HTTPSConnectionPool(host='wazuh-master.com', port=55000): Max retries exceeded with url: /security/user/authenticate (Caused by NewConnectionError('<urllib3.connection.HTTPSConnection object at 0x7f97919e21a0>: Failed to establish a new connection: [Errno 111] Connection refused'))

Check if the master instance is slow (processor level), and if it has ram and disk space.
As your node seems to be overloaded and sending timeouts, you could check that and implement a retry system in the query.

Here you can check the documentation API https://documentation.wazuh.com/current/user-manual/api/reference.html#tag/SCA
https://documentation.wazuh.com/current/user-manual/api/rbac/reference.html

On Thursday, January 23, 2025 at 11:20:49 AM UTC-3 Artem Mishukov wrote:

Hello everyone!

Wazuh version: 4.8.0-1
Component: API
Install type: Cluster (3 nodes)
Install method: Packages
Platform: Ubuntu 22.04

I actively use the API Wazuh and periodically due to some requests, in particular GET /sca/<agent_id> the API gives an error, along with this affecting all other components of Wazuh.
I would like to get advice on possible causes of failures and understand the problems. Get recommendations on ways to improve the fault tolerance of the API. I have attached the error log in the attachment.