cant start service wazuh-manager

[Ayoub MM]

Hello community,

Please i need your help i cant start service wazuh-manager after i do update and upgrade to my Machine ubuntu:

Here is the output of the command journalctl -xeu wazuh-manager

Thanks in advance.

Regards.

[Raul Del Pozo Moreno]

Hello

It seems that there is some problem with the configuration of the Wazuh manager from the lines that I see about wazuh-analysisd (ERROR, CRITICAL) in the use of some rules, specifically with the frequency/context options.

I don't see the complete message, but could you share the complete rule mentioned in the Error loading the rules message?

Please, share with us the output of the following command:

• grep -i -E "error|critical|fatal|warning" /var/ossec/logs/ossec.log

Note that if you have modified a rule in the /var/ossec/ruleset/rules directory, it will be lost during the update process, please see the following link: https://documentation.wazuh.com/current/user-manual/ruleset/custom.html#changing-an-existing-rule

Raúl Del Pozo Moreno IT Security Engineer - CICD

--
You received this message because you are subscribed to the Google Groups "Wazuh mailing list" group.
To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+un...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/wazuh/67794158-0d6a-4c2b-bf19-a99e56808d6fn%40googlegroups.com.