wazuh issue

[360 ALLROUND]

Hi Team,

Hope you are doing well.

i have some issue when trying to login to wazuh and we have configured our password with the active directory. Can anyone please tell how to mitigate the issue by looking at the below screenshot?

-thanks

 Ruben

[Federico Rodriguez]

Hi!
The circuit_breaking_exception is a mechanism used to prevent operations from causing an OutOfMemoryError. It seems like Wazuh Indexer was using most of the JVM heap configured, and the total memory required for all operations was superior to the memory available, so the operation you requested was aborted.
I suggest to increase the heap size. A rule of thumb is to set half of the available RAM memory to the Elasticsearch or Wazuh Indexer's heap as explained in our tuning elasticsearch section.Try to increase the heap memory of Elasticsearch/Wazuh Indexer.
Steps:
1. Edit the file 
/etc/elasticsearch/jvm.options for elasticsearch 
or 
/etc/wazuh-indexer/jvm.options for Wazuh Indexer to increase the heap memory, taking in account that the quantity should be:

• Use no more than 50% of available RAM.
• Use no more than 32 GB.

For example, if you want to set 4 GB, you should add to the file:

-Xms4g
-Xmx4g

2. Restart Elasticsearch

systemctl daemon-reload
systemctl restart elasticsearch

or

systemctl restart wazuh-indexer

I hope it helps!

[360 ALLROUND]

Hi Mr. Federico,

thanks worked like charm.

-regards

 Ruben.