Wazuh Dashboard Server Not Ready

[SIIL IT]

I'm running a setup consisting of a load balancer, dashboard server, master, 2 workers and 3 data nodes on ubuntu 22.04 hosts. Everything has been running fine until this morning!

There were a lot of updates queued for each server so I ran the updates. I noticed it changed the opensearch.yml and jvm.options on the data nodes during the update and had to tweak things to get the data cluster back working.

Once the data cluster was back operating, running filebeat test output show  on the master gives ok results across all servers

Restarting the dashboard, I get the server not ready message in the web interface.
checking the logs shows me the following after restarting the dashboard service

Mar 29 10:59:36 wazdash opensearch-dashboards[2176]: {"type":"log","@timestamp":"2023-03-29T07:59:36Z","tags":["info","plugins-service"],"pid":2176,"message":"Plugin \"dataSourceManagement\" has been disabled since the following direct or transitive dependencies are missing or disabled: [dataSource]"}
Mar 29 10:59:36 wazdash opensearch-dashboards[2176]: {"type":"log","@timestamp":"2023-03-29T07:59:36Z","tags":["info","plugins-service"],"pid":2176,"message":"Plugin \"dataSource\" is disabled."}
Mar 29 10:59:36 wazdash opensearch-dashboards[2176]: {"type":"log","@timestamp":"2023-03-29T07:59:36Z","tags":["info","plugins-service"],"pid":2176,"message":"Plugin \"visTypeXy\" is disabled."}
Mar 29 10:59:36 wazdash opensearch-dashboards[2176]: {"type":"log","@timestamp":"2023-03-29T07:59:36Z","tags":["info","plugins-system"],"pid":2176,"message":"Setting up [45] plugins: [**redacted**]"}
Mar 29 10:59:37 wazdash opensearch-dashboards[2176]: {"type":"log","@timestamp":"2023-03-29T07:59:37Z","tags":["info","savedobjects-service"],"pid":2176,"message":"Waiting until all OpenSearch nodes are compatible with OpenSearch Dashboards before starting saved objects migrations..."}
Mar 29 10:59:37 wazdash opensearch-dashboards[2176]: {"type":"log","@timestamp":"2023-03-29T07:59:37Z","tags":["error","opensearch","data"],"pid":2176,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
Mar 29 10:59:37 wazdash opensearch-dashboards[2176]: {"type":"log","@timestamp":"2023-03-29T07:59:37Z","tags":["error","savedobjects-service"],"pid":2176,"message":"Unable to retrieve version information from OpenSearch nodes."}
Mar 29 10:59:40 wazdash opensearch-dashboards[2176]: {"type":"log","@timestamp":"2023-03-29T07:59:40Z","tags":["error","opensearch","data"],"pid":2176,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}

I'm a bit baffled now as to how to resolve this!

Also as a side issue, when I check the status of the data node cluster, the ram.percent of one of the nodes is at 98%. Where do I alter the available RAM?

Thanks in advance

[Matias Braida]

Hello again,

The message "Wazuh dashboard server is not ready yet" usually appears when you just started or restarted Wazuh dashboard.

It can also be produced for one of the following reasons:
 1) Your Wazuh dashboard cannot communicate with Wazuh indexer service.
 2) Your Wazuh dashboard service has some error that causes it to constantly reboot.
 3) Your Wazuh indexer service is not up or has some error.

In the dashboard logs you send, the problem seems to be that dashboard cannot connect to indexer nodes.

  * Verify that the Wazuh dashboard configuration file has the correct Wazuh indexer IPs:
    File: "/etc/wazuh-dashboard/opensearch_dashboards.yml"
    Line: "opensearch.hosts: https://<wazuh-indexer-ip>:9200"

  * Verify that you have connectivity between the Wazuh dashboard node and the Wazuh indexer nodes:
    "curl -v telnet://<wazuh-indexer-ip>:9200"

Here is the documentation link how to configure dashboard:
https://documentation.wazuh.com/current/installation-guide/wazuh-dashboard/step-by-step.html#configuring-the-wazuh-dashboard

Let me know if this helps

--
You received this message because you are subscribed to the Google Groups "Wazuh mailing list" group.
To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+un...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/wazuh/5a46b223-5091-48d0-aaee-688b1c1f8381n%40googlegroups.com.

--

Matias S. Braida Software Engineer