Installing wazuh ova on virtualbox

[Peter Bridle]

Hi, 

I'm trying to install the wazuh ova as a VM on virtualbox and then connect to an ubuntu or kali VM.

There seems to be a problem with the indexer and I'm getting the attached error message.

Initially I thought it might not have enough ram on the host machine (only had 1.5gigs) so increased it to 3gigs.  I also renamed the file named  wazuh-indexer.pem under etc/wazuh-indexer/certs/ as indexer.pem.  However no luck with either.

Hoping someone can point me in the right direction as I really want to get wazuh working on my virtual system

thanks

Peter

[Stuti Gupta]

Hi Peter
Hope you are doing well today and thank you for using wazuh!

Can you share below-mentioned details, so we can find the root cause:

• Please share the link to the documentation you followed for installing wazuh
• Please verify what changes you made, as you mentioned you rename the file under the certs directory.  Make sure that the file is readable by the user running the Wazuh service. If the permissions are incorrect, you can change them using the following command: chmod 644 /etc/wazuh-indexer/certs/  
• Also, verify the ownership using the command ls -lrt  /etc/wazuh-indexer/certs/
• Please share the wazuh-indexer logs using the command
  cat /var/log/wazuh-indexer/wazuh-cluster.log or journalctl -u wazuh-indexer | grep -i -E "error|warn"
• Please share your opensearch.yml which is located at /etc/wazuh-indexer/opensearch.yml

Looking forward to your response. Hope to hear from you soon.

Regards,