Unable to start wazuh-indexer after moving directories
182 views
Skip to first unread message
Lukas Fritzsche
Dec 13, 2024, 4:15:06 AM12/13/24
to Wazuh | Mailing List
Hello,
I've moved the wazuh-indexer directories "/var/log/wazuh-indexer/*" and "/var/lib/wazuh-indexer/*" to new paths
"mnt/mydrive/var/log/wazuh-indexer/*" and "mnt/mydrive/var/lib/wazuh-indexer/*".
I have changed the ownership of both paths with:
chown wazuh-indexer:wazuh-indexer -R /mnt/mydrive/var/log/wazuh-indexer
chown wazuh-indexer:wazuh-indexer -R /mnt/mydrive/var/lib/wazuh-indexer
After that I changed the "path.data" and "path.log" in the /etc/wazuh-indexer/opensearch.yml file accordingly.
Unfortunately after trying to restart the wazuh-indexer service, I get the following error message:
root@wazuh-indexer:/mnt/mydrive/var/log/wazuh-indexer# systemctl status wazuh-indexer
× wazuh-indexer.service - wazuh-indexer
Loaded: loaded (/usr/lib/systemd/system/wazuh-indexer.service; enabled; preset: enabled)
Active: failed (Result: exit-code) since Fri 2024-12-13 08:56:32 UTC; 13min ago
Duration: 8min 26.233s
Docs: https://documentation.wazuh.com
Process: 2666 ExecStart=/usr/share/wazuh-indexer/bin/systemd-entrypoint -p ${PID_DIR}/wazuh-indexer.pid --quiet (code=exited, status=78)
Main PID: 2666 (code=exited, status=78)
CPU: 5.110s
Dez 13 08:56:32 wazuh-indexer systemd-entrypoint[2666]: WARNING: java.io.tmpdir directory does not exist
Dez 13 08:56:32 wazuh-indexer systemd-entrypoint[2666]: WARNING: A terminally deprecated method in java.lang.System has been called
Dez 13 08:56:32 wazuh-indexer systemd-entrypoint[2666]: WARNING: System::setSecurityManager has been called by org.opensearch.bootstrap.OpenSearch (file:/usr/share/wazuh-indexer/lib/opensearch-2.13.0.jar)
Dez 13 08:56:32 wazuh-indexer systemd-entrypoint[2666]: WARNING: Please consider reporting this to the maintainers of org.opensearch.bootstrap.OpenSearch
Dez 13 08:56:32 wazuh-indexer systemd-entrypoint[2666]: WARNING: System::setSecurityManager will be removed in a future release
Dez 13 08:56:32 wazuh-indexer systemd-entrypoint[2666]: ERROR: Temporary file directory [/var/log/wazuh-indexer/tmp] does not exist or is not accessible
Dez 13 08:56:32 wazuh-indexer systemd[1]: wazuh-indexer.service: Main process exited, code=exited, status=78/CONFIG
Dez 13 08:56:32 wazuh-indexer systemd[1]: wazuh-indexer.service: Failed with result 'exit-code'.
Dez 13 08:56:32 wazuh-indexer systemd[1]: Failed to start wazuh-indexer.service - wazuh-indexer.
Dez 13 08:56:32 wazuh-indexer systemd[1]: wazuh-indexer.service: Consumed 5.110s CPU time.
× wazuh-indexer.service - wazuh-indexer
Loaded: loaded (/usr/lib/systemd/system/wazuh-indexer.service; enabled; preset: enabled)
Active: failed (Result: exit-code) since Fri 2024-12-13 08:56:32 UTC; 13min ago
Duration: 8min 26.233s
Docs: https://documentation.wazuh.com
Process: 2666 ExecStart=/usr/share/wazuh-indexer/bin/systemd-entrypoint -p ${PID_DIR}/wazuh-indexer.pid --quiet (code=exited, status=78)
Main PID: 2666 (code=exited, status=78)
CPU: 5.110s
Dez 13 08:56:32 wazuh-indexer systemd-entrypoint[2666]: WARNING: java.io.tmpdir directory does not exist
Dez 13 08:56:32 wazuh-indexer systemd-entrypoint[2666]: WARNING: A terminally deprecated method in java.lang.System has been called
Dez 13 08:56:32 wazuh-indexer systemd-entrypoint[2666]: WARNING: System::setSecurityManager has been called by org.opensearch.bootstrap.OpenSearch (file:/usr/share/wazuh-indexer/lib/opensearch-2.13.0.jar)
Dez 13 08:56:32 wazuh-indexer systemd-entrypoint[2666]: WARNING: Please consider reporting this to the maintainers of org.opensearch.bootstrap.OpenSearch
Dez 13 08:56:32 wazuh-indexer systemd-entrypoint[2666]: WARNING: System::setSecurityManager will be removed in a future release
Dez 13 08:56:32 wazuh-indexer systemd-entrypoint[2666]: ERROR: Temporary file directory [/var/log/wazuh-indexer/tmp] does not exist or is not accessible
Dez 13 08:56:32 wazuh-indexer systemd[1]: wazuh-indexer.service: Main process exited, code=exited, status=78/CONFIG
Dez 13 08:56:32 wazuh-indexer systemd[1]: wazuh-indexer.service: Failed with result 'exit-code'.
Dez 13 08:56:32 wazuh-indexer systemd[1]: Failed to start wazuh-indexer.service - wazuh-indexer.
Dez 13 08:56:32 wazuh-indexer systemd[1]: wazuh-indexer.service: Consumed 5.110s CPU time.
Now im here wondering why it can't access the new /mnt/mydrive/var/log/wazuh-indexer/tmp folder. I have checked it's owner etc. and they are "normal" is I've only moved all files and fodlers to the new location (drwxr-xr-x 2 wazuh-indexer wazuh-indexer 4096 Dez 13 08:40 tmp).
Also I see no way of manually setting the path for the new tmp-folder.
Hope you can help me!
Thanks in advance and enjoy the weekend!
Kind regards,
Lukas
Olusegun Adenrele Oyebo
Dec 13, 2024, 9:20:13 AM12/13/24
to Wazuh | Mailing List
Hello Lukas,
We don't have an official procedural guide on migrating from the default path, it's only when you're installing Wazuh manager or agent from sources that you can specify an alternate path apart from the default one (reference).
Kindly permit me to review this internally with the team. Will give you feedback as soon as possible.
In the meantime, you can also share with us the full output of the below command:
- cat /var/log/wazuh-indexer/wazuh-cluster.log | grep -i -E "error|warn|fatal|crit"
Best regards
Lukas Fritzsche
Dec 17, 2024, 3:02:12 AM12/17/24
to Wazuh | Mailing List
Hello, thanks for your reply!
I've used the following "guides":
Moving manager directories location: https://github.com/wazuh/wazuh/issues/4281 (SUCCESSFULL)
Moving indexer directories location: https://groups.google.com/g/wazuh/c/H7nxl6O7kU8 (UNSUCCESSFULL)
Weirdly enough after chaning these directories and their config the old admin/password for the dashboard login don't work anymore aswell..
Here the log:
As I've moved the logs the location is mnt/mydrive/var/log/wazuh-indexer/wazuh-indexer-cluster.log:
[2024-12-13T00:00:23,599][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):46954
[2024-12-13T00:01:23,945][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):58378
[2024-12-13T00:02:24,294][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):57692
[2024-12-13T00:03:24,640][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):32986
[2024-12-13T00:04:24,987][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):38692
[2024-12-13T00:05:25,333][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):39042
[2024-12-13T00:06:25,682][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):52350
[2024-12-13T00:07:26,029][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):56852
[2024-12-13T00:08:26,376][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):48986
[2024-12-13T00:09:26,726][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):49918
[2024-12-13T00:10:27,074][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):34330
[2024-12-13T00:11:27,423][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):50324
[2024-12-13T00:12:27,774][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):38608
[2024-12-13T00:13:28,121][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):36788
[2024-12-13T00:14:28,467][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):34362
[2024-12-13T00:15:28,816][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):54672
[2024-12-13T00:16:29,163][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):56622
[2024-12-13T00:17:29,511][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):44976
[2024-12-13T00:18:29,873][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):40654
[2024-12-13T00:19:30,235][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):54904
[2024-12-13T00:20:30,582][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):34612
[2024-12-13T00:21:30,928][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):33626
[2024-12-13T00:22:31,275][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):60038
[2024-12-13T00:23:31,621][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):37334
[2024-12-13T00:24:31,968][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):35098
[2024-12-13T00:25:32,314][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):59800
[2024-12-13T00:26:32,661][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):44640
[2024-12-13T00:27:33,008][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):48566
[2024-12-13T00:28:33,355][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):57644
[2024-12-13T00:29:33,702][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):51500
[2024-12-13T00:30:34,049][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):48292
[2024-12-13T00:31:34,395][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):43988
[2024-12-13T00:32:34,742][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):55070
[2024-12-13T00:33:35,089][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):51596
[2024-12-13T00:34:35,438][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):47980
[2024-12-13T00:35:35,796][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):57962
[2024-12-13T00:36:36,143][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):47888
[2024-12-13T00:37:36,492][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):47258
[2024-12-13T00:38:36,839][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):47580
[2024-12-13T00:39:37,187][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):33184
[2024-12-13T00:40:37,537][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):47010
[2024-12-13T00:41:37,885][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):60050
[2024-12-13T00:42:38,235][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):45052
[2024-12-13T00:43:38,581][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):42228
[2024-12-13T00:44:38,928][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):55326
[2024-12-13T00:45:39,275][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):42064
[2024-12-13T00:46:39,621][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):56654
[2024-12-13T00:47:39,970][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):51420
[2024-12-13T00:48:40,317][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):42176
[2024-12-13T00:49:40,664][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):44820
[2024-12-13T00:50:41,013][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):39352
[2024-12-13T00:51:41,360][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):50800
[2024-12-13T00:52:41,706][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):48800
[2024-12-13T00:53:42,054][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):33660
[2024-12-13T00:54:42,400][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):36418
[2024-12-13T00:55:42,746][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):44750
[2024-12-13T00:56:43,095][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):33810
[2024-12-13T00:57:43,449][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):58374
[2024-12-13T00:58:43,796][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):39308
[2024-12-13T00:59:44,144][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):49304
[2024-12-13T01:00:44,490][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):58710
[2024-12-13T01:01:44,841][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):45192
[2024-12-13T01:02:45,188][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):42572
[2024-12-13T01:03:45,537][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):39900
[2024-12-13T01:04:45,885][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):48900
[2024-12-13T01:05:46,238][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):43288
[2024-12-13T01:06:46,585][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):59658
[2024-12-13T01:07:46,937][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):58102
[2024-12-13T01:08:47,283][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):33998
[2024-12-13T01:09:47,630][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):39902
[2024-12-13T01:10:47,979][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):47628
[2024-12-13T01:11:48,330][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):34486
[2024-12-13T01:12:48,676][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):34250
[2024-12-13T01:13:49,023][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):32858
[2024-12-13T01:14:49,371][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):53368
[2024-12-13T01:15:49,721][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):37986
[2024-12-13T01:16:50,071][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):56582
[2024-12-13T01:17:50,419][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):35120
[2024-12-13T01:18:50,767][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):47490
[2024-12-13T01:19:51,114][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):47076
[2024-12-13T01:20:51,462][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):49022
[2024-12-13T01:21:51,813][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):39556
[2024-12-13T01:22:52,161][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):58856
[2024-12-13T01:23:52,508][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):46760
[2024-12-13T01:24:52,859][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):53478
[2024-12-13T01:25:53,206][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):58246
[2024-12-13T01:26:53,552][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):35186
[2024-12-13T01:27:53,902][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):47656
[2024-12-13T01:28:54,256][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):45808
[2024-12-13T01:29:54,603][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):41278
[2024-12-13T01:30:54,948][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):52874
[2024-12-13T01:31:55,294][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):45832
[2024-12-13T01:32:55,643][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):56634
[2024-12-13T01:33:55,989][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):52684
[2024-12-13T01:34:56,342][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):56720
[2024-12-13T01:35:56,689][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):38192
[2024-12-13T01:36:57,039][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):37098
[2024-12-13T01:37:57,385][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):48260
[2024-12-13T01:38:57,732][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):36684
[2024-12-13T01:39:58,084][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):51074
[2024-12-13T01:40:58,431][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):44566
[2024-12-13T01:41:58,779][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):35676
[2024-12-13T01:42:59,126][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):45794
[2024-12-13T01:43:59,473][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):37118
[2024-12-13T01:44:59,820][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):52148
[2024-12-13T01:46:00,167][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):55062
[2024-12-13T01:47:00,515][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):58840
[2024-12-13T01:48:00,861][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):37290
[2024-12-13T01:49:01,208][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):50566
[2024-12-13T01:50:01,557][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):38058
[2024-12-13T01:51:01,907][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):55658
[2024-12-13T01:52:02,253][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):35778
[2024-12-13T01:53:02,601][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):49162
[2024-12-13T01:54:02,949][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):35338
[2024-12-13T01:55:03,296][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):45560
[2024-12-13T01:56:03,646][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):40324
[2024-12-13T01:57:03,992][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):49516
[2024-12-13T01:58:04,340][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):49770
[2024-12-13T01:59:04,688][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):56352
[2024-12-13T02:00:05,037][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):50004
[2024-12-13T02:01:05,384][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):48084
[2024-12-13T02:02:05,731][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):39258
[2024-12-13T02:03:06,084][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):57154
[2024-12-13T02:04:06,433][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):47254
[2024-12-13T02:05:06,782][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):45554
[2024-12-13T02:06:07,128][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):41316
[2024-12-13T02:07:07,482][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):38484
[2024-12-13T02:08:07,832][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):50818
[2024-12-13T02:09:08,195][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):43540
[2024-12-13T02:10:08,543][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):56982
[2024-12-13T02:11:08,892][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):49948
[2024-12-13T02:12:09,245][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):43328
[2024-12-13T02:13:09,595][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):56674
[2024-12-13T02:14:09,953][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):47752
[2024-12-13T02:15:10,301][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):51598
[2024-12-13T02:16:10,657][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):35640
[2024-12-13T02:17:11,005][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):52324
[2024-12-13T02:18:11,353][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):51268
[2024-12-13T02:19:11,703][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):52410
[2024-12-13T02:20:12,050][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):41364
[2024-12-13T02:21:12,397][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):34672
[2024-12-13T02:22:12,752][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):33964
[2024-12-13T02:23:13,102][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):44802
[2024-12-13T02:24:13,449][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):40818
[2024-12-13T02:25:13,797][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):57842
[2024-12-13T02:26:14,145][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):44774
[2024-12-13T02:27:14,492][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):33724
[2024-12-13T02:28:14,841][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):42816
[2024-12-13T02:29:15,189][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):40694
[2024-12-13T02:30:15,540][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):42630
[2024-12-13T02:31:15,886][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):60742
[2024-12-13T02:32:16,236][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):42510
[2024-12-13T02:33:16,584][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):53586
[2024-12-13T02:34:16,933][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):40354
[2024-12-13T02:35:17,287][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):54694
[2024-12-13T02:36:17,635][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):46714
[2024-12-13T02:37:17,981][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):54714
[2024-12-13T02:38:18,327][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):43640
[2024-12-13T02:39:18,672][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):39422
[2024-12-13T02:40:19,019][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):42628
[2024-12-13T02:41:19,364][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):39404
[2024-12-13T02:42:19,714][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):57496
[2024-12-13T02:43:20,060][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):53240
[2024-12-13T02:44:20,407][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):47052
[2024-12-13T02:45:20,754][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):56360
[2024-12-13T02:46:21,103][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):32992
[2024-12-13T02:47:21,450][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):33494
[2024-12-13T02:48:21,798][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):46850
[2024-12-13T02:49:22,144][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):34550
[2024-12-13T02:50:22,491][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):49962
[2024-12-13T02:51:22,838][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):39684
[2024-12-13T02:52:23,185][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):42550
[2024-12-13T02:53:23,532][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):36550
[2024-12-13T02:54:23,878][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):50178
[2024-12-13T02:55:24,234][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):44574
[2024-12-13T02:56:24,581][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):50940
[2024-12-13T02:57:24,929][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):34102
[2024-12-13T02:58:25,278][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):58368
[2024-12-13T02:59:25,626][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):57250
[2024-12-13T03:00:25,974][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):33896
[2024-12-13T03:01:26,323][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):37718
[2024-12-13T03:01:38,891][ERROR][o.o.a.a.AlertIndices ] [wazuh-indexer] info deleteOldIndices
[2024-12-13T03:01:38,906][ERROR][o.o.a.a.AlertIndices ] [wazuh-indexer] info deleteOldIndices
[2024-12-13T03:02:26,671][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):38392
[2024-12-13T03:03:27,026][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):53258
[2024-12-13T03:04:27,378][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):38554
[2024-12-13T03:05:27,728][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):38216
[2024-12-13T03:06:28,077][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):57232
[2024-12-13T03:07:28,426][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):41734
[2024-12-13T03:08:28,778][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):44508
[2024-12-13T03:09:29,127][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):56438
[2024-12-13T03:10:29,475][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):50116
[2024-12-13T03:11:29,821][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):48610
[2024-12-13T03:12:30,170][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):44340
[2024-12-13T03:13:30,525][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):51660
[2024-12-13T03:14:30,872][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):49120
[2024-12-13T03:15:31,219][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):34660
[2024-12-13T03:16:31,568][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):33948
[2024-12-13T03:17:31,916][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):33264
[2024-12-13T03:18:32,263][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):52766
[2024-12-13T03:19:32,610][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):58142
[2024-12-13T03:20:32,962][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):38766
[2024-12-13T03:21:33,311][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):52696
[2024-12-13T03:22:33,661][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):44258
[2024-12-13T03:23:34,014][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):46830
[2024-12-13T03:24:34,370][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):45784
[2024-12-13T03:25:34,719][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):50600
[2024-12-13T03:26:35,066][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):56484
[2024-12-13T03:27:35,415][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):49770
[2024-12-13T03:28:35,762][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):38928
[2024-12-13T03:29:36,108][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):42274
[2024-12-13T03:30:36,455][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):53290
[2024-12-13T03:31:36,803][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):58142
[2024-12-13T03:32:37,149][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):53766
[2024-12-13T03:33:37,497][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):37296
[2024-12-13T03:34:37,845][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):47230
[2024-12-13T03:35:38,191][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):43422
[2024-12-13T03:36:38,537][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):47738
[2024-12-13T03:37:38,884][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):49484
[2024-12-13T03:38:39,230][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):60986
[2024-12-13T03:39:39,577][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):54626
[2024-12-13T03:40:39,924][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):36604
[2024-12-13T03:41:40,271][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):44596
[2024-12-13T03:42:40,622][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):54198
[2024-12-13T03:43:40,968][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):41912
[2024-12-13T03:44:41,314][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):58330
[2024-12-13T03:45:41,661][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):49216
[2024-12-13T03:46:42,011][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):41412
[2024-12-13T03:47:42,356][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):54148
[2024-12-13T03:48:42,703][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):44624
[2024-12-13T03:49:43,049][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):33748
[2024-12-13T03:50:43,395][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):50370
[2024-12-13T03:51:43,746][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):60234
[2024-12-13T03:52:44,092][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):56862
[2024-12-13T03:53:44,437][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):39824
[2024-12-13T03:54:44,784][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):33226
[2024-12-13T03:55:45,131][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):50004
[2024-12-13T03:56:45,480][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):32998
[2024-12-13T03:57:45,828][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):34556
[2024-12-13T03:58:46,174][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):46660
[2024-12-13T03:59:46,521][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):43532
[2024-12-13T04:00:46,867][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):38364
[2024-12-13T04:01:47,214][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):48292
[2024-12-13T04:02:47,563][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):43540
[2024-12-13T04:03:47,912][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):47340
[2024-12-13T04:04:48,258][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):35746
[2024-12-13T04:05:48,605][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):36002
[2024-12-13T04:06:48,953][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):55390
[2024-12-13T04:07:49,301][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):57940
[2024-12-13T04:08:49,652][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):57686
[2024-12-13T04:09:50,000][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):43740
[2024-12-13T04:10:50,346][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):55048
[2024-12-13T04:11:50,694][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):44910
[2024-12-13T04:12:51,041][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):38420
[2024-12-13T04:13:51,403][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):43874
[2024-12-13T04:14:51,750][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):37164
[2024-12-13T04:15:52,097][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):44710
[2024-12-13T04:16:52,445][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):35132
[2024-12-13T04:17:52,792][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):45412
[2024-12-13T04:18:53,139][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):36976
[2024-12-13T04:19:53,486][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):57308
[2024-12-13T04:20:53,835][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):54204
[2024-12-13T04:21:54,189][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):37892
[2024-12-13T04:22:54,538][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):35916
[2024-12-13T04:23:54,886][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):33190
[2024-12-13T04:24:55,234][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):35792
[2024-12-13T04:25:55,582][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):37674
[2024-12-13T04:26:55,930][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):50368
[2024-12-13T04:27:56,278][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):50268
[2024-12-13T04:28:56,626][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):38540
[2024-12-13T04:29:56,974][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):48994
[2024-12-13T04:30:57,321][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):51282
[2024-12-13T04:31:57,668][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):49946
[2024-12-13T04:32:58,016][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):55666
[2024-12-13T04:33:58,366][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):37484
[2024-12-13T04:34:58,717][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):46588
[2024-12-13T04:35:59,070][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):39004
[2024-12-13T04:36:59,416][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):48854
[2024-12-13T04:37:59,768][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):36208
[2024-12-13T04:39:00,114][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):51770
[2024-12-13T04:40:00,464][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):53194
[2024-12-13T04:41:00,811][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):60362
[2024-12-13T04:42:01,158][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):53324
[2024-12-13T04:43:01,504][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):60134
[2024-12-13T04:44:01,851][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):46142
[2024-12-13T04:45:02,198][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):56488
[2024-12-13T04:46:02,548][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):58826
[2024-12-13T04:47:02,899][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):52668
[2024-12-13T04:48:03,246][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):37060
[2024-12-13T04:49:03,593][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):59066
[2024-12-13T04:50:03,939][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):43950
[2024-12-13T04:51:04,286][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):49940
[2024-12-13T04:52:04,632][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):33328
[2024-12-13T04:53:04,978][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):55172
[2024-12-13T04:54:05,324][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):36264
[2024-12-13T04:55:05,673][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):41754
[2024-12-13T04:56:06,019][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):41086
[2024-12-13T04:57:06,366][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):55288
[2024-12-13T04:58:06,714][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):56344
[2024-12-13T04:59:07,064][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):52120
[2024-12-13T05:00:07,411][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):57952
[2024-12-13T05:01:07,757][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):42092
[2024-12-13T05:02:08,105][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):47368
[2024-12-13T05:03:08,469][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):43236
[2024-12-13T05:04:08,819][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):41136
[2024-12-13T05:05:09,166][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):52582
[2024-12-13T05:06:09,515][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):36050
[2024-12-13T05:07:09,873][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):60148
[2024-12-13T05:08:10,222][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):59560
[2024-12-13T05:09:10,570][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):48922
[2024-12-13T05:10:10,922][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):52002
[2024-12-13T05:11:11,271][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):39078
[2024-12-13T05:12:11,617][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):55750
[2024-12-13T05:13:11,964][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):38876
[2024-12-13T05:14:12,311][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):41108
[2024-12-13T05:15:12,657][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):53076
[2024-12-13T05:16:13,003][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):55672
[2024-12-13T05:17:13,350][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):39272
[2024-12-13T05:18:13,698][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):36104
[2024-12-13T05:19:14,045][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):41988
[2024-12-13T05:20:14,391][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):43742
[2024-12-13T05:21:14,738][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):41526
[2024-12-13T05:22:15,084][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):37992
[2024-12-13T05:23:15,438][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):50362
[2024-12-13T05:24:15,785][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):37366
[2024-12-13T05:25:16,133][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):33258
[2024-12-13T05:26:16,480][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):56246
[2024-12-13T05:27:16,827][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):54820
[2024-12-13T05:28:17,173][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):35036
[2024-12-13T05:29:17,519][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):33222
[2024-12-13T05:30:17,868][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):45818
[2024-12-13T05:31:18,216][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):46534
[2024-12-13T05:32:18,564][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):40192
[2024-12-13T05:33:18,911][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):46190
[2024-12-13T05:34:19,263][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):50030
[2024-12-13T05:35:19,613][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):44960
[2024-12-13T05:36:19,961][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):34240
[2024-12-13T05:37:20,308][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):39684
[2024-12-13T05:38:20,658][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):51948
[2024-12-13T05:39:21,005][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):51870
[2024-12-13T05:40:21,353][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):53038
[2024-12-13T05:41:21,702][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):34952
[2024-12-13T05:42:22,054][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):45040
[2024-12-13T05:43:22,401][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):34562
[2024-12-13T05:44:22,753][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):33948
[2024-12-13T05:45:23,100][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):35670
[2024-12-13T05:46:23,449][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):46986
[2024-12-13T05:47:23,798][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):44868
[2024-12-13T05:48:24,145][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):50228
[2024-12-13T05:49:24,493][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):43034
[2024-12-13T05:50:24,840][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):42080
[2024-12-13T05:51:25,187][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):58278
[2024-12-13T05:52:25,535][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):60896
[2024-12-13T05:53:25,885][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):58146
[2024-12-13T05:54:26,232][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):57598
[2024-12-13T05:55:26,578][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):48822
[2024-12-13T05:56:26,925][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):39480
[2024-12-13T05:57:27,275][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):60112
[2024-12-13T05:58:27,622][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):40196
[2024-12-13T05:59:27,971][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):60746
[2024-12-13T06:00:28,321][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):42742
[2024-12-13T06:01:28,668][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):58324
[2024-12-13T06:02:29,014][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):34928
[2024-12-13T06:03:29,362][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):44712
[2024-12-13T06:04:29,709][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):53216
[2024-12-13T06:05:30,055][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):40354
[2024-12-13T06:06:30,403][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):52404
[2024-12-13T06:07:30,749][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):36268
[2024-12-13T06:08:31,096][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):50354
[2024-12-13T06:09:31,443][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):51338
[2024-12-13T06:10:31,790][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):50166
[2024-12-13T06:11:32,138][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):40054
[2024-12-13T06:12:32,484][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):39146
[2024-12-13T06:13:32,835][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):52204
[2024-12-13T06:14:33,181][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):47184
[2024-12-13T06:15:33,529][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):45260
[2024-12-13T06:16:33,878][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):57496
[2024-12-13T06:17:34,225][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):40766
[2024-12-13T06:18:34,577][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):47190
[2024-12-13T06:19:34,924][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):54852
[2024-12-13T06:20:35,271][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):57086
[2024-12-13T06:21:35,617][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):33332
[2024-12-13T06:22:35,965][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):39406
[2024-12-13T06:23:36,313][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):41890
[2024-12-13T06:24:36,659][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):55288
[2024-12-13T06:25:37,009][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):57022
[2024-12-13T06:26:37,359][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):36174
[2024-12-13T06:27:37,706][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):59676
[2024-12-13T06:28:38,056][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):38418
[2024-12-13T06:29:38,403][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):58678
[2024-12-13T06:30:38,752][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):59660
[2024-12-13T06:31:39,099][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):58052
[2024-12-13T06:32:39,445][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):49994
[2024-12-13T06:33:39,795][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):35500
[2024-12-13T06:34:40,144][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):55226
[2024-12-13T06:35:40,491][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):43144
[2024-12-13T06:36:40,846][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):59548
[2024-12-13T06:37:41,195][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):34086
[2024-12-13T06:38:41,554][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):33452
[2024-12-13T06:39:41,902][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):38732
[2024-12-13T06:40:42,249][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):38736
[2024-12-13T06:41:42,596][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):56922
[2024-12-13T06:42:42,943][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):54566
[2024-12-13T06:43:43,291][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):46652
[2024-12-13T06:44:43,640][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):34056
[2024-12-13T06:45:43,987][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):54244
[2024-12-13T06:46:44,334][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):40638
[2024-12-13T06:47:44,686][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):56220
[2024-12-13T06:48:45,035][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):37130
[2024-12-13T06:49:45,381][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):56138
[2024-12-13T06:50:45,733][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):59262
[2024-12-13T06:51:46,083][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):51580
[2024-12-13T06:52:46,430][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):58150
[2024-12-13T06:53:46,783][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):40878
[2024-12-13T06:54:47,133][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):53774
[2024-12-13T06:55:47,480][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):57742
[2024-12-13T06:56:47,828][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):39236
[2024-12-13T06:57:48,174][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):44558
[2024-12-13T06:58:48,521][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):43596
[2024-12-13T06:59:48,870][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):35482
[2024-12-13T07:00:49,217][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):44022
[2024-12-13T07:01:49,569][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):43200
[2024-12-13T07:02:49,921][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):45392
[2024-12-13T07:03:50,279][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):50208
[2024-12-13T07:04:50,627][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):58638
[2024-12-13T07:05:50,974][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):38844
[2024-12-13T07:06:51,325][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):36028
[2024-12-13T07:07:51,675][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):32878
[2024-12-13T07:08:52,021][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):56944
[2024-12-13T07:09:52,370][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):34572
[2024-12-13T07:10:52,718][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):40408
[2024-12-13T07:11:53,067][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):41020
[2024-12-13T07:12:53,416][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):37902
[2024-12-13T07:13:53,764][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):58392
[2024-12-13T07:14:54,111][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):50846
[2024-12-13T07:15:54,458][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):54122
[2024-12-13T07:16:54,806][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):37830
[2024-12-13T07:17:55,162][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):57838
[2024-12-13T07:18:55,509][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):42898
[2024-12-13T07:19:55,858][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):42818
[2024-12-13T07:20:56,208][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):55762
[2024-12-13T07:21:56,560][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):55412
[2024-12-13T07:22:56,910][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):46850
[2024-12-13T07:23:57,257][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):49586
[2024-12-13T07:24:57,609][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):33372
[2024-12-13T07:25:57,960][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):57490
[2024-12-13T07:26:58,307][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):37458
[2024-12-13T07:27:58,654][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):49670
[2024-12-13T07:28:59,001][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):49700
[2024-12-13T07:29:59,349][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):57372
[2024-12-13T07:30:59,696][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):35274
[2024-12-13T07:32:00,043][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):35364
[2024-12-13T07:33:00,390][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):38454
[2024-12-13T07:34:00,737][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):44568
[2024-12-13T07:35:01,087][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):32984
[2024-12-13T07:36:01,434][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):46048
[2024-12-13T07:37:01,782][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):36872
[2024-12-13T07:38:02,137][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):36714
[2024-12-13T07:39:02,487][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):44374
[2024-12-13T07:40:02,838][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):36904
[2024-12-13T07:41:03,185][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):54988
[2024-12-13T07:42:03,533][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):37916
[2024-12-13T07:43:03,882][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):34594
[2024-12-13T07:44:04,230][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):52006
[2024-12-13T07:45:04,579][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):51020
[2024-12-13T07:46:04,926][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):51268
[2024-12-13T07:47:05,274][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):49500
[2024-12-13T07:48:05,621][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):38992
[2024-12-13T07:49:05,969][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):59720
[2024-12-13T07:50:06,320][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):36236
[2024-12-13T07:51:06,676][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):44246
[2024-12-13T07:52:07,025][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):47746
[2024-12-13T07:53:07,391][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):39468
[2024-12-13T07:54:07,737][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):51186
[2024-12-13T07:55:08,085][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):43286
[2024-12-13T07:56:08,432][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):39660
[2024-12-13T07:57:08,781][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):56462
[2024-12-13T07:58:09,136][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):48214
[2024-12-13T07:59:09,485][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):36274
[2024-12-13T08:00:09,833][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):42038
[2024-12-13T08:01:10,182][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):49830
[2024-12-13T08:02:10,531][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):54492
[2024-12-13T08:03:10,879][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):48646
[2024-12-13T08:04:11,225][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):39792
[2024-12-13T08:05:11,571][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):35586
[2024-12-13T08:06:11,918][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):54616
[2024-12-13T08:07:12,266][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):40814
[2024-12-13T08:08:12,614][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):60946
[2024-12-13T08:09:12,961][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):33858
[2024-12-13T08:10:13,307][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):59774
[2024-12-13T08:11:13,654][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):39526
[2024-12-13T08:12:14,001][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):34374
[2024-12-13T08:13:14,347][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):36004
[2024-12-13T08:14:14,694][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):41796
[2024-12-13T08:15:15,045][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):51368
[2024-12-13T08:16:15,398][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):48102
[2024-12-13T08:17:15,719][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address):55188
[2024-12-13T08:40:21,492][INFO ][o.o.n.Node ] [wazuh-indexer] JVM arguments [-Xshare:auto, -Dopensearch.networkaddress.cache.ttl=60, -Dopensearch.networkaddress.cache.negative.ttl=10, -XX:+AlwaysPreTouch, -Xss1m, -Djava.awt.headless=true, -Dfile.encoding=UTF-8, -Djna.nosys=true, -XX:-OmitStackTraceInFastThrow, -XX:+ShowCodeDetailsInExceptionMessages, -Dio.netty.noUnsafe=true, -Dio.netty.noKeySetOptimization=true, -Dio.netty.recycler.maxCapacityPerThread=0, -Dio.netty.allocator.numDirectArenas=0, -Dlog4j.shutdownHookEnabled=false, -Dlog4j2.disable.jmx=true, -Djava.security.manager=allow, -Djava.locale.providers=SPI,COMPAT, -Xms1024m, -Xmx1024m, -XX:+UseG1GC, -XX:G1ReservePercent=25, -XX:InitiatingHeapOccupancyPercent=30, -Djava.io.tmpdir=/var/log/wazuh-indexer/tmp, -XX:+HeapDumpOnOutOfMemoryError, -XX:HeapDumpPath=/var/lib/wazuh-indexer, -XX:ErrorFile=/var/log/wazuh-indexer/hs_err_pid%p.log, -Xlog:gc*,gc+age=trace,safepoint:file=/var/log/wazuh-indexer/gc.log:utctime,pid,tags:filecount=32,filesize=64m, -Djava.security.manager=allow, -Djava.util.concurrent.ForkJoinPool.common.threadFactory=org.opensearch.secure_sm.SecuredForkJoinWorkerThreadFactory, -Dclk.tck=100, -Djdk.attach.allowAttachSelf=true, -Djava.security.policy=file:///etc/wazuh-indexer/opensearch-performance-analyzer/opensearch_security.policy, --add-opens=jdk.attach/sun.tools.attach=ALL-UNNAMED, -XX:MaxDirectMemorySize=536870912, -Dopensearch.path.home=/usr/share/wazuh-indexer, -Dopensearch.path.conf=/etc/wazuh-indexer, -Dopensearch.distribution.type=deb, -Dopensearch.bundled_jdk=true]
[2024-12-13T08:40:31,568][WARN ][o.o.s.c.Salt ] [wazuh-indexer] If you plan to use field masking pls configure compliance salt e1ukloTsQlOgPquJ to be a random string of 16 chars length identical on all nodes
[2024-12-13T08:40:31,627][ERROR][o.o.s.a.s.SinkProvider ] [wazuh-indexer] Default endpoint could not be created, auditlog will not work properly.
[2024-12-13T08:40:31,628][WARN ][o.o.s.a.r.AuditMessageRouter] [wazuh-indexer] No default storage available, audit log may not work properly. Please check configuration.
[2024-12-13T08:40:32,998][WARN ][o.o.s.p.SQLPlugin ] [wazuh-indexer] Master key is a required config for using create and update datasource APIs. Please set plugins.query.datasources.encryption.masterkey config in opensearch.yml in all the cluster nodes. More details can be found here: https://github.com/opensearch-project/sql/blob/main/docs/user/ppl/admin/datasources.rst#master-key-config-for-encrypting-credential-information
[2024-12-13T08:40:34,737][WARN ][o.o.g.DanglingIndicesState] [wazuh-indexer] gateway.auto_import_dangling_indices is disabled, dangling indices will not be automatically detected or imported and must be managed manually
[2024-12-13T08:40:36,471][WARN ][o.o.p.c.s.h.ConfigOverridesClusterSettingHandler] [wazuh-indexer] Config override setting update called with empty string. Ignoring.
[2024-12-13T08:40:36,691][WARN ][o.o.o.i.ObservabilityIndex] [wazuh-indexer] message: index [.opensearch-observability/m7yvnNlMQZOWCiwoVT_1LQ] already exists
[2024-12-13T08:40:36,704][ERROR][o.o.i.i.ManagedIndexCoordinator] [wazuh-indexer] get managed-index failed: NoShardAvailableActionException[No shard available for [org.opensearch.action.get.MultiGetShardRequest@74828696]]
[2024-12-13T08:40:36,727][WARN ][o.o.s.SecurityAnalyticsPlugin] [wazuh-indexer] Failed to initialize LogType config index and builtin log types
[2024-12-13T08:40:36,727][ERROR][o.o.i.i.ManagedIndexCoordinator] [wazuh-indexer] Failed to get ISM policies with templates: Failed to execute phase [query], all shards failed
[2024-12-13T08:40:37,372][ERROR][o.o.s.a.BackendRegistry ] [wazuh-indexer] Not yet initialized (you may need to run securityadmin)
[2024-12-13T08:40:37,401][ERROR][o.o.s.a.BackendRegistry ] [wazuh-indexer] Not yet initialized (you may need to run securityadmin)
[2024-12-13T08:40:37,405][ERROR][o.o.s.a.BackendRegistry ] [wazuh-indexer] Not yet initialized (you may need to run securityadmin)
[2024-12-13T08:40:37,407][ERROR][o.o.s.a.BackendRegistry ] [wazuh-indexer] Not yet initialized (you may need to run securityadmin)
[2024-12-13T08:41:35,250][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address)
[2024-12-13T08:42:35,606][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address)
[2024-12-13T08:43:35,959][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address)
[2024-12-13T08:44:36,311][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address)
[2024-12-13T08:45:36,661][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address)
[2024-12-13T08:46:37,017][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address)
[2024-12-13T08:47:37,367][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address)
[2024-12-13T08:48:37,719][WARN ][o.o.s.a.BackendRegistry ] [wazuh-indexer] Authentication finally failed for admin from REDACTED (wazuh-manager IP address)
Lukas Fritzsche
Dec 18, 2024, 10:25:58 AM12/18/24
to Wazuh | Mailing List
any update or workoung on that matter? I can't be the only one who ever wanted/did change the default log paths right?
Olusegun Adenrele Oyebo
Dec 20, 2024, 5:22:50 AM12/20/24
to Wazuh | Mailing List
Hello Lukas,
We don't officially have procedures for this. Though I have been trying on some workarounds on this based on some github links, but my Wazuh indexer service does not come up after migrating the directories.
Do you have a snapshot or any recovery plan for the node? If you do, will suggest that you revert to the last working state of the server.
We remain attentive to your queries.
We don't officially have procedures for this. Though I have been trying on some workarounds on this based on some github links, but my Wazuh indexer service does not come up after migrating the directories.
Do you have a snapshot or any recovery plan for the node? If you do, will suggest that you revert to the last working state of the server.
We remain attentive to your queries.
Best regards.
Lukas Fritzsche
Dec 20, 2024, 1:30:44 PM12/20/24
to Wazuh | Mailing List
Yes I've just reverted the indexer changes and expanded the system disk drive. Thank you for your time and effort tho!
Reply all
Reply to author
Forward
0 new messages