Vulnerability detector : databse could not be fetched

[Abderrazak MEKSI]

Hello everyone,

I installed wazuh with elastic Stack. While enabling Vulnerability detector, it shows me these warnings : 

cve.db is always empty.

How can i resolve this issue to perform vulnerability scan ?

[Openime Oniagbi]

Hi Abderrazak MEKSI,

Thank you for using Wazuh.

The reason for this error could be that the Wazuh server cannot access the Internet to fetch the feeds.

Can you confirm that your server has Internet access?

I'm looking forward to your feedback so we can resolve the issue.

Regards,
Openime Oniagbi

[Abderrazak MEKSI]

Yes, i confirm have access to internet with proxy.

[Openime Oniagbi]

Hi, 

If your server is behind a proxy, I recommend you use the steps outlined in: https://github.com/wazuh/wazuh/issues/1112.

Otherwise, you can use the Offline update method or give the Wazuh server direct access if possible.

Let me know if this resolves the issue.

Regards,

Openime Oniagbi

[Abderrazak MEKSI]

I switched to direct access. 

Problem resolved but it took too much time with 'Amazon Linux 1' database update.

is this normal ?

[Openime Oniagbi]

Hi,

Glad to know the issue is resolved.

The time it takes depends on the size of the vulnerability feed and the network speed.

Regards,
Openime

[Abderrazak MEKSI]

2023/04/05 10:52:52 wazuh-modulesd:vulnerability-detector: INFO: (5400): Starting 'Amazon Linux 1' database update.
2023/04/05 11:20:55 wazuh-modulesd: ERROR: Failed to retrieve hash value. File integrity won't be checked.

2023/04/05 11:48:13 wazuh-modulesd:vulnerability-detector: INFO: (5400): Starting 'Microsoft Security Update' database update.
2023/04/05 12:16:16 wazuh-modulesd: ERROR: Failed to retrieve hash value. File integrity won't be checked.

[Openime Oniagbi]

Check your dashboard for the Vulnerability detector results.

[Abderrazak MEKSI]

You're right. There are data about detected vulnerabilities so it's working fine. 

I was waiting for  <feed finished successfully>

Thanks for your assistance.

[Openime Oniagbi]

You're welcome.