Hello Tom,
I’ll try to help here. Our Wazuh app for Kibana currently consumes data from two sources:
So let’s check your Wazuh API status. Can you please perform the following curl command to the API and paste here the results?
curl -u foo:bar http(s)://manager-ip:55000/agents?pretty
Notice that foo:bar have to be changed for your API credentials
That command requests the information of the agents to the Wazuh API, the same kind of petition that the underlying logic of the app requests to the API.
Additionally, any further information about your installation/architecture would be appreciated:
F12 you can check if any errors appeared on the console.I’ll be waiting for your reply.
Regards
--
You received this message because you are subscribed to the Google Groups "Wazuh mailing list" group.
To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+un...@googlegroups.com.
To post to this group, send email to wa...@googlegroups.com.
Visit this group at https://groups.google.com/group/wazuh.
To view this discussion on the web visit https://groups.google.com/d/msgid/wazuh/0b27a4b3-0e86-4dbb-8613-255016d575ed%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
uname -a
Linux ip-10-0-10-219 4.14.114-82.97.amzn1.x86_64 #1 SMP Sun Apr 28 07:27:43 UTC 2019 x86_64 x86_64 x86_64 GNU/Linux
wazuh-manager-3.9.0-1.x86_64wazuh-api-3.9.0-1.x86_64
Hello Tom,
Sorry for the late response. After looking at the information that you’ve kindly attached above, everything looks correct to me.
The form that you’re currently seeing in the Wazuh app is for introducing the address and credentials of your Wazuh manager, this is a mandatory step in order to be able to access to the different sections of the app, Agents section included.
Did you try to introduce your Wazuh API data in the form?
username: The username that you set up in your Wazuh API. By default foo.password: The password that you set up in your Wazuh API. By default bar.URL: The URL of the Wazuh manager, where the API is also installed. It must include the protocol.Example: https://10.0.0.10.Port: The port that Wazuh API is listening to. By default 55000.I hope that helps, let me know if you have any questions. I will also be waiting for your feedback on this.
Regards
--
You received this message because you are subscribed to the Google Groups "Wazuh mailing list" group.
To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+un...@googlegroups.com.
To post to this group, send email to wa...@googlegroups.com.
Visit this group at https://groups.google.com/group/wazuh.
To view this discussion on the web visit https://groups.google.com/d/msgid/wazuh/e96ea242-9fc5-42e9-b6c0-a2dc31374fe5%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+unsubscribe@googlegroups.com.
To post to this group, send email to wa...@googlegroups.com.
Visit this group at https://groups.google.com/group/wazuh.
To view this discussion on the web visit https://groups.google.com/d/msgid/wazuh/e96ea242-9fc5-42e9-b6c0-a2dc31374fe5%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+un...@googlegroups.com.
To post to this group, send email to wa...@googlegroups.com.
Visit this group at https://groups.google.com/group/wazuh.
To view this discussion on the web visit https://groups.google.com/d/msgid/wazuh/e96ea242-9fc5-42e9-b6c0-a2dc31374fe5%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
---
--
You received this message because you are subscribed to the Google Groups "Wazuh mailing list" group.
To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+un...@googlegroups.com.
To post to this group, send email to wa...@googlegroups.com.
Visit this group at https://groups.google.com/group/wazuh.
To view this discussion on the web visit https://groups.google.com/d/msgid/wazuh/550108ff-2740-477f-ae9d-f4746ff57207%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+unsubscribe@googlegroups.com.
To post to this group, send email to wa...@googlegroups.com.
Visit this group at https://groups.google.com/group/wazuh.
To view this discussion on the web visit https://groups.google.com/d/msgid/wazuh/e96ea242-9fc5-42e9-b6c0-a2dc31374fe5%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
---
--
You received this message because you are subscribed to the Google Groups "Wazuh mailing list" group.
To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+unsubscribe@googlegroups.com.
To post to this group, send email to wa...@googlegroups.com.
Visit this group at https://groups.google.com/group/wazuh.
To view this discussion on the web visit https://groups.google.com/d/msgid/wazuh/550108ff-2740-477f-ae9d-f4746ff57207%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
Hello Tom,
Thanks for your kindly attach the information. Taking a look at the screenshots made me realize this message:
Expected version 3.9.x and found 3.8.x
Which means that your Wazuh manager/Wazuh API version doesn’t match with the Wazuh app version. According to our documentation, the major.minor version of both components Wazuh manager/API and Wazuh app must match in order to guarantee the proper functionality.
You can check your current Wazuh manager by listing the content of the following file:
cat /etc/ossec-init.conf
Also, ensure your API version:
curl -u foo:bar "http(s)://localhost:55000/version?pretty"
Where foo:bar are your API credentials, also change localhost by your Wazuh manager IP if needed
For checking the app version, you can navigate to the Settings section and clicking on the About tab:

The problem should be solved after updating the related component.
I hope that helps, let me know if you have any questions.
Best regards
Hi Manuel.
To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+un...@googlegroups.com.
To post to this group, send email to wa...@googlegroups.com.
Visit this group at https://groups.google.com/group/wazuh.
To view this discussion on the web visit https://groups.google.com/d/msgid/wazuh/e96ea242-9fc5-42e9-b6c0-a2dc31374fe5%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
---
--
You received this message because you are subscribed to the Google Groups "Wazuh mailing list" group.
To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+un...@googlegroups.com.
To post to this group, send email to wa...@googlegroups.com.
Visit this group at https://groups.google.com/group/wazuh.
To view this discussion on the web visit https://groups.google.com/d/msgid/wazuh/550108ff-2740-477f-ae9d-f4746ff57207%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
---
--
You received this message because you are subscribed to the Google Groups "Wazuh mailing list" group.
To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+un...@googlegroups.com.
To post to this group, send email to wa...@googlegroups.com.
Visit this group at https://groups.google.com/group/wazuh.
To view this discussion on the web visit https://groups.google.com/d/msgid/wazuh/80377ae3-de19-44b1-bf80-8c941fb9d4c0%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
Curl output:DIRECTORY="/var/ossec"NAME="Wazuh"VERSION="v3.9.0"REVISION="3918"DATE="Thu May 2 10:11:49 UTC 2019"TYPE="server"
{"error": 0,"data": "v3.9.0"}
Hi Manuel.
To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+unsubscribe@googlegroups.com.
To post to this group, send email to wa...@googlegroups.com.
Visit this group at https://groups.google.com/group/wazuh.
To view this discussion on the web visit https://groups.google.com/d/msgid/wazuh/e96ea242-9fc5-42e9-b6c0-a2dc31374fe5%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
---
--
You received this message because you are subscribed to the Google Groups "Wazuh mailing list" group.
To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+unsubscribe@googlegroups.com.
To post to this group, send email to wa...@googlegroups.com.
Visit this group at https://groups.google.com/group/wazuh.
To view this discussion on the web visit https://groups.google.com/d/msgid/wazuh/550108ff-2740-477f-ae9d-f4746ff57207%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
---
--
You received this message because you are subscribed to the Google Groups "Wazuh mailing list" group.
To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+unsubscribe@googlegroups.com.
To post to this group, send email to wa...@googlegroups.com.
Visit this group at https://groups.google.com/group/wazuh.
To view this discussion on the web visit https://groups.google.com/d/msgid/wazuh/80377ae3-de19-44b1-bf80-8c941fb9d4c0%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
Hi tom,
According to the Kibana app Wiki, you can follow these steps for upgrading the app:
systemctl stop kibana
/usr/share/kibana/bin/kibana-plugin remove wazuh
rm -rf /usr/share/kibana/optimize/bundles
chown -R kibana:kibana /usr/share/kibana/optimize
chown -R kibana:kibana /usr/share/kibana/plugins
sudo -u kibana NODE_OPTIONS="--max-old-space-size=3072" /usr/share/kibana/bin/kibana-plugin install https://packages.wazuh.com/wazuhapp/wazuhapp-3.9.0_6.7.2.zip
systemctl restart kibana
I hope that helps, let me know if that worked for you.
Regards
Hi Manuel.
To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+un...@googlegroups.com.
To post to this group, send email to wa...@googlegroups.com.
Visit this group at https://groups.google.com/group/wazuh.
To view this discussion on the web visit https://groups.google.com/d/msgid/wazuh/e96ea242-9fc5-42e9-b6c0-a2dc31374fe5%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
---
--
You received this message because you are subscribed to the Google Groups "Wazuh mailing list" group.
To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+un...@googlegroups.com.
To post to this group, send email to wa...@googlegroups.com.
Visit this group at https://groups.google.com/group/wazuh.
To view this discussion on the web visit https://groups.google.com/d/msgid/wazuh/550108ff-2740-477f-ae9d-f4746ff57207%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
---
--
You received this message because you are subscribed to the Google Groups "Wazuh mailing list" group.
To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+un...@googlegroups.com.
To post to this group, send email to wa...@googlegroups.com.
Visit this group at https://groups.google.com/group/wazuh.
To view this discussion on the web visit https://groups.google.com/d/msgid/wazuh/80377ae3-de19-44b1-bf80-8c941fb9d4c0%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
---
--
You received this message because you are subscribed to the Google Groups "Wazuh mailing list" group.
To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+un...@googlegroups.com.
To post to this group, send email to wa...@googlegroups.com.
Visit this group at https://groups.google.com/group/wazuh.
To view this discussion on the web visit https://groups.google.com/d/msgid/wazuh/485ba633-5909-4158-a380-0ca2ff38ada6%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
Hi Manuel.
To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+unsubscribe@googlegroups.com.
To post to this group, send email to wa...@googlegroups.com.
Visit this group at https://groups.google.com/group/wazuh.
To view this discussion on the web visit https://groups.google.com/d/msgid/wazuh/e96ea242-9fc5-42e9-b6c0-a2dc31374fe5%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
---
--
You received this message because you are subscribed to the Google Groups "Wazuh mailing list" group.
To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+unsubscribe@googlegroups.com.
To post to this group, send email to wa...@googlegroups.com.
Visit this group at https://groups.google.com/group/wazuh.
To view this discussion on the web visit https://groups.google.com/d/msgid/wazuh/550108ff-2740-477f-ae9d-f4746ff57207%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
---
--
You received this message because you are subscribed to the Google Groups "Wazuh mailing list" group.
To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+unsubscribe@googlegroups.com.
To post to this group, send email to wa...@googlegroups.com.
Visit this group at https://groups.google.com/group/wazuh.
To view this discussion on the web visit https://groups.google.com/d/msgid/wazuh/80377ae3-de19-44b1-bf80-8c941fb9d4c0%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
---
--
You received this message because you are subscribed to the Google Groups "Wazuh mailing list" group.
To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+unsubscribe@googlegroups.com.
To post to this group, send email to wa...@googlegroups.com.
Visit this group at https://groups.google.com/group/wazuh.
To view this discussion on the web visit https://groups.google.com/d/msgid/wazuh/485ba633-5909-4158-a380-0ca2ff38ada6%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
Hello Tom,
Currently, we attach a specific Wazuh version to a specific branch in the repository, it seems that maybe you run the 3.8 branch. Since we released the 3.9 version, you can get the latest roles changes in the 3.9, master and stable branches.
Let me know if you’re able to get this solved.
Regards
Hi Manuel.
To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+un...@googlegroups.com.
To post to this group, send email to wa...@googlegroups.com.
Visit this group at https://groups.google.com/group/wazuh.
To view this discussion on the web visit https://groups.google.com/d/msgid/wazuh/e96ea242-9fc5-42e9-b6c0-a2dc31374fe5%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
---
--
You received this message because you are subscribed to the Google Groups "Wazuh mailing list" group.
To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+un...@googlegroups.com.
To post to this group, send email to wa...@googlegroups.com.
Visit this group at https://groups.google.com/group/wazuh.
To view this discussion on the web visit https://groups.google.com/d/msgid/wazuh/550108ff-2740-477f-ae9d-f4746ff57207%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
---
--
You received this message because you are subscribed to the Google Groups "Wazuh mailing list" group.
To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+un...@googlegroups.com.
To post to this group, send email to wa...@googlegroups.com.
Visit this group at https://groups.google.com/group/wazuh.
To view this discussion on the web visit https://groups.google.com/d/msgid/wazuh/80377ae3-de19-44b1-bf80-8c941fb9d4c0%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
---
--
You received this message because you are subscribed to the Google Groups "Wazuh mailing list" group.
To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+un...@googlegroups.com.
To post to this group, send email to wa...@googlegroups.com.
Visit this group at https://groups.google.com/group/wazuh.
To view this discussion on the web visit https://groups.google.com/d/msgid/wazuh/485ba633-5909-4158-a380-0ca2ff38ada6%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
---
--
You received this message because you are subscribed to the Google Groups "Wazuh mailing list" group.
To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+un...@googlegroups.com.
To post to this group, send email to wa...@googlegroups.com.
Visit this group at https://groups.google.com/group/wazuh.
To view this discussion on the web visit https://groups.google.com/d/msgid/wazuh/61b8e6fd-09e3-400c-a1b6-407c6085777c%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
Hi Manuel.
To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+unsubscribe@googlegroups.com.
To post to this group, send email to wa...@googlegroups.com.
Visit this group at https://groups.google.com/group/wazuh.
To view this discussion on the web visit https://groups.google.com/d/msgid/wazuh/e96ea242-9fc5-42e9-b6c0-a2dc31374fe5%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
---
--
You received this message because you are subscribed to the Google Groups "Wazuh mailing list" group.
To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+unsubscribe@googlegroups.com.
To post to this group, send email to wa...@googlegroups.com.
Visit this group at https://groups.google.com/group/wazuh.
To view this discussion on the web visit https://groups.google.com/d/msgid/wazuh/550108ff-2740-477f-ae9d-f4746ff57207%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
---
--
You received this message because you are subscribed to the Google Groups "Wazuh mailing list" group.
To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+unsubscribe@googlegroups.com.
To post to this group, send email to wa...@googlegroups.com.
Visit this group at https://groups.google.com/group/wazuh.
To view this discussion on the web visit https://groups.google.com/d/msgid/wazuh/80377ae3-de19-44b1-bf80-8c941fb9d4c0%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
---
--
You received this message because you are subscribed to the Google Groups "Wazuh mailing list" group.
To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+unsubscribe@googlegroups.com.
To post to this group, send email to wa...@googlegroups.com.
Visit this group at https://groups.google.com/group/wazuh.
To view this discussion on the web visit https://groups.google.com/d/msgid/wazuh/485ba633-5909-4158-a380-0ca2ff38ada6%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
---
--
You received this message because you are subscribed to the Google Groups "Wazuh mailing list" group.
To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+unsubscribe@googlegroups.com.
To post to this group, send email to wa...@googlegroups.com.
Visit this group at https://groups.google.com/group/wazuh.
To view this discussion on the web visit https://groups.google.com/d/msgid/wazuh/61b8e6fd-09e3-400c-a1b6-407c6085777c%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
Hi Manuel.
To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+un...@googlegroups.com.
To post to this group, send email to wa...@googlegroups.com.
Visit this group at https://groups.google.com/group/wazuh.
To view this discussion on the web visit https://groups.google.com/d/msgid/wazuh/e96ea242-9fc5-42e9-b6c0-a2dc31374fe5%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
---
--
You received this message because you are subscribed to the Google Groups "Wazuh mailing list" group.
To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+un...@googlegroups.com.
To post to this group, send email to wa...@googlegroups.com.
Visit this group at https://groups.google.com/group/wazuh.
To view this discussion on the web visit https://groups.google.com/d/msgid/wazuh/550108ff-2740-477f-ae9d-f4746ff57207%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
---
--
You received this message because you are subscribed to the Google Groups "Wazuh mailing list" group.
To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+un...@googlegroups.com.
To post to this group, send email to wa...@googlegroups.com.
Visit this group at https://groups.google.com/group/wazuh.
To view this discussion on the web visit https://groups.google.com/d/msgid/wazuh/80377ae3-de19-44b1-bf80-8c941fb9d4c0%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
---
--
You received this message because you are subscribed to the Google Groups "Wazuh mailing list" group.
To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+un...@googlegroups.com.
To post to this group, send email to wa...@googlegroups.com.
Visit this group at https://groups.google.com/group/wazuh.
To view this discussion on the web visit https://groups.google.com/d/msgid/wazuh/485ba633-5909-4158-a380-0ca2ff38ada6%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
---
--
You received this message because you are subscribed to the Google Groups "Wazuh mailing list" group.
To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+un...@googlegroups.com.
To post to this group, send email to wa...@googlegroups.com.
Visit this group at https://groups.google.com/group/wazuh.
To view this discussion on the web visit https://groups.google.com/d/msgid/wazuh/61b8e6fd-09e3-400c-a1b6-407c6085777c%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
---
--
You received this message because you are subscribed to the Google Groups "Wazuh mailing list" group.
To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+un...@googlegroups.com.
To post to this group, send email to wa...@googlegroups.com.
Visit this group at https://groups.google.com/group/wazuh.
To view this discussion on the web visit https://groups.google.com/d/msgid/wazuh/4180715c-17c4-451b-aff6-fbbff03a2fbe%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.