unable to use systemctl

[maha]

when I try to use systemctl it is giving me error saying.

attached image for reference.

Thank you

[Tomas Sarquis]

Hi maha

I assume that's the Wazuh OVA, right? Confirm this, please. Also, if that's the case, can you tell me which version it is?

If it is not the OVA, give me some background on this so I could help you.

Regards

[maha]

Yes,  Im using the Wazuh-OVA 4.4.4. configured in VMWare.

[Tomas Sarquis]

Thanks. Let me see if I can reproduce this.

[Tomas Sarquis]

I tried this in a fresh new OVA machine and I had no problem performing the commands above (see image attached).

Have you made any configuration that could have broken this?

Please, try with the following commands and show me the output:

- Log in to privileged user:       sudo su

- Restart the network service: systemctl restart network

- Log out:                                     exit

[maha]

I followed this https://www.reddit.com/r/Wazuh/comments/ryh48l/how_can_i_set_the_wazuh_server_to_use_a_static_ip/

Then tried to restart the network.

This is fresh installation of wazuh-ova.

[Tomas Sarquis]

What happens if you execute the commands I asked you above?

> Please, try with the following commands and show me the output:

> - Log in to privileged user:       sudo su

> - Restart the network service: systemctl restart network

> - Log out:                                     exit

[maha]

even running the command in sudo gives the same error.

[Tomas Sarquis]

Perfect. We can be sure that it is not a privilege problem.

Can you show me which changes did you make to the /etc/sysconfig/network-scripts/ifcfg-eth0 file? Please, be as specific as possible.

[Tomas Sarquis]

Also, what's the output of systemctl status network.service ?

[maha]

I removed the old configurations and added this.

the wazuh-server is now running on the new IP, and I'm able visit the dashboard at new ip.

[maha]

this is  the output of systemctl status network.service

[Tomas Sarquis]

Is everything working well then? Did you manage to change the IP address?

[maha]

yes i changed the IP address. thank you

[maha]

but unable to restart wazuh-indexer

 

[Tomas Sarquis]

This just happens after the network configuration?

What's the output of systemctl status wazuh-indexer.service ?

[maha]

This indexer was not starting even before the network configuration.

[Tomas Sarquis]

Hi maha

So, you are telling me that the Wazuh image is not working out of the box? Without ANY configuration of yours?

Have you changed the virtual machine's hardware specifications?

[maha]

HI Tomas,

My network is behind a firewall. I think That might be the cause.

As per VM there were no changes done.

I'll talk to the firewall team and make few changes.

Thank You.

[Tomas Sarquis]

Okay, maha. The OVA image usually works well out of the box. It's very weird to have an error without any changes applied. So, it is very likely this error comes from an external source.

I'll be here for any other messages.

[maha]

Hi,

Update [SOLVED]

For Further Reference.

Disabling the Core Isolation in Device security solved it.

Thank You.