Failing to start wazuh-indexer service

[Clement Wu]

[root@wazuh-server ~]# systemctl status wazuh-indexer
● wazuh-indexer.service - Wazuh-indexer
   Loaded: loaded (/usr/lib/systemd/system/wazuh-indexer.service; enabled; vendor preset: disabled)
   Active: failed (Result: timeout) since Tue 2024-05-07 18:58:39 UTC; 1min 3s ago
     Docs: https://documentation.wazuh.com
Process: 5667 ExecStart=/usr/share/wazuh-indexer/bin/systemd-entrypoint -p ${PID_DIR}/wazuh-indexer.pid --quiet (code=exited, status=143)
Main PID: 5667 (code=exited, status=143)


May 07 18:56:48 wazuh-server systemd-entrypoint[5667]: WARNING: A terminally deprecated method in java.lang.System has been called
May 07 18:56:48 wazuh-server systemd-entrypoint[5667]: WARNING: System::setSecurityManager has been called by org.opensearch.bootstrap.OpenSearch (file:/usr/share/wazuh-indexer/lib/opensearch-2.8.0.jar)
May 07 18:56:48 wazuh-server systemd-entrypoint[5667]: WARNING: Please consider reporting this to the maintainers of org.opensearch.bootstrap.OpenSearch
May 07 18:56:48 wazuh-server systemd-entrypoint[5667]: WARNING: System::setSecurityManager will be removed in a future release
May 07 18:57:26 wazuh-server systemd-entrypoint[5667]: WARNING: A terminally deprecated method in java.lang.System has been called
May 07 18:57:26 wazuh-server systemd-entrypoint[5667]: WARNING: System::setSecurityManager has been called by org.opensearch.bootstrap.Security (file:/usr/share/wazuh-indexer/lib/opensearch-2.8.0.jar)
May 07 18:57:26 wazuh-server systemd-entrypoint[5667]: WARNING: Please consider reporting this to the maintainers of org.opensearch.bootstrap.Security
May 07 18:57:26 wazuh-server systemd-entrypoint[5667]: WARNING: System::setSecurityManager will be removed in a future release

May I consult what could be the problem?

[Juan Manuel Segura Duarte]

Hello Clement,

Hope you are doing well.

In order to further investigate the issue we would need more information.

Could you share the indexer journal entries with `journalctl -xeu wazuh-indexer | cat`?
How many indexer nodes do you have? If it's the all-in-one installation it should be one unless you installed another indexer node and made a cluster.

Did you recently upgrade any of the three main components (dashboard, manager, indexer)?
Can you also share the output of `cat /etc/wazuh-indexer/jvm.options`?

Regards,
Juan Manuel