Windows agent upgrade issue with 4.5.0 from 4.4.5

[Emmanuel ANDRY]

Hi,

I updated my linux agent through apt on my debian machines without any issue.
I'cant update the windows agents (tried on API console and CLI with same result.) There's not error, but no upgrade.

It occurs on all my windows machine so far.

Command issued :

# /var/ossec/bin/agent_upgrade -d -a 005 -f var/upgrade/wazuh_agent_v4.5.0_windows.wpk

Upgrading...

Upgraded agents:
        Agent 006 upgraded: Wazuh v4.4.5 -> Wazuh v4.4.5

I also tried /var/ossec/bin/agent_upgrade -d -a 005   (same result)

Upgrade Log :

2023-08-16 14:03:05Z - Current version: v4.4.5.
2023-08-16 14:03:05Z - Generating backup.
2023-08-16 14:03:05Z - Backing up Wazuh home files.
2023-08-16 14:03:09Z - Searching Wazuh-Agent cached MSI through the registry.
2023-08-16 14:03:09Z - Wazuh-Agent cached MSI was not found.
2023-08-16 14:03:09Z - Trying to stop Wazuh service.
2023-08-16 14:03:11Z - Starting upgrade processs.
2023-08-16 14:03:15Z - Waiting for the Wazuh-Agent installation to end.
2023-08-16 14:03:17Z - Waiting for the Wazuh-Agent installation to end.
2023-08-16 14:03:19Z - Waiting for the Wazuh-Agent installation to end.
2023-08-16 14:03:21Z - Waiting for the Wazuh-Agent installation to end.
2023-08-16 14:03:23Z - Waiting for the Wazuh-Agent installation to end.
2023-08-16 14:03:25Z - Restarting Wazuh-Agent service.
2023-08-16 14:03:26Z - Installation finished.
2023-08-16 14:03:26Z - Process ID: 14732.
2023-08-16 14:03:36Z - Reading status file: status='connected'.
2023-08-16 14:03:36Z - Upgrade finished successfully.
2023-08-16 14:03:36Z - New version: v4.4.5.

If someone can help me with this...

Thanks !

[Nicolas Curioni]

Hello Emmanuel,

Thanks for sharing your doubts with the community.

In order to assist you further, I would like to have some information from you.

• Could you please share the version running in your central components? (Wazuh Manager, Indexer and Dashboard)
• Could you please share a screenshot of the version that is shown in the agent? To do so, go to the Agent Manager, located in C:\Program Files (x86)\ossec-agent\win32ui.exe

Looking forward to your comments.
Best regards.

[Sam Heuchert]

Following

[Emmanuel ANDRY]

i,

thanks for you help.

Wazuh manager, Indexer and dashboard are running 4.5.0-1 version. Filebeat is 7.10.2.

[Emmanuel ANDRY]

After analyzing the 4.5.0 agent changelog, it seems that the windows agent has no functionnal change compared to 4.4.5.

So maybe it doesn't update because both 4.4.5 and 4.5.0 agents are seen as identical (beside the agent version) ?

It also means that there's no problem using 4.4.5 agent with 4.5.0 manager.

[Nicolas Curioni]

Hello Emmanuel,

Sorry for the late reply.

Could you please provide me with the following information?

• Full architecture/hardware
• Cluster sync logs (in case that there is a cluster)
• API logs
• ossec logs
• Total number of agents, and the last keep alive in the system of the agent that shows this error

Thanks in advance!
Regards.

--
You received this message because you are subscribed to the Google Groups "Wazuh mailing list" group.
To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+un...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/wazuh/f8d3d91e-507e-4881-9d8c-1f7e964e74fen%40googlegroups.com.

[Emmanuel ANDRY]

Hi,

The windows agent upgrade to 4.5.1 and 4.5.2 went fine, sorry I forgot to mention it.

Thanks for your help !