OpenSearch ECONNREFUSED on localhost after updating the keychain

[AltStorm]

Hello team,

I've begun configuring Wazuh on an Ubuntu Server. After running the automatic installer and checking the dashboard out, I configured the e-mail notification service to send alerts.

However, we use Mandrill, so I had to add the username/key to the OpenSearch keychain. I followed this documentation to do so.

After updating the keychain, the Wazuh dashboard shows the following:

Wazuh dashboard server is not ready yet

Looking at the error log using journalctl -u wazuh-dashboard | grep -i -E "$(date + %F)".*"error|warn" gives me the following (repeating) log:

Mar 20 09:24:15 wazuhsrv opensearch-dashboards [722]: {"type":"log","@timestamp":"2024-03-20T08:24:15Z","tags":["error","opensearch","data"], "pid":722,"message":"[ConnectionError]: connector ECONNREFUSED 127.0.0.1:9200"}

I've attempted to replace 127.0.0.1 with the local IP instead of localhost and the result is the same. To do so I edited /etc/wazuh-dashboard/opensearch_dashboards.yml .

I've been reading through documentation and the OpenSearch forums, but I am unable to fix the issue.

If you need any more logs, I'll be happy to provide them as needed. 

Could anyone lend me a hand?

Kind regards,

Alt