wazuh-authd: ERROR: (1206): Unable to Bind port '1515'

[Parvaj Sarker]

Hi, 

We got the below error message from the agent.

  

error: wazuh-agentd: ERROR: (1208): Unable to connect to the Auth service at

and the below error message from the wazuh manager

wazuh-authd: ERROR: (1206): Unable to Bind port '1515' due to [(98)-(Address already in use)]

So that didn't connect the agent to the server. 

Please advise. 

Thanks,

Parvaj Alam

[Alberto Rodriguez]

Hello Parvaj

The error message indicates that wazuh-authd is trying to run and use the 1515 port but, this port is used by another process, maybe from other software, maybe a previous auth zombie process. I would recommend you:

1. Stop the Wazuh manager by systemctl stop wazuh-manager
2. Check if exist any wazuh daemon with ps -xa | grep wazuh. If exist, kill the process with kill -9 <PID>, where <PID> is the PID of the process you find inps` previous command.

3. Check if other software is using 1515 by netstat -tunap | grep 1515. If so, please stop the software, or the process.

4. Start the Wazuh manager again: systemctl start wazuh-manager

Hope it helps

​