Elastic problems updating from 6.8 to 7.x

1,813 views
Skip to first unread message

Javier Martín-Moreno Guijarro

unread,
Aug 6, 2019, 2:32:53 AM8/6/19
to Wazuh mailing list
Dear team,

Today I'm taking the opprtunity to upgrade Wazuh and ELK from 6.8 to 7.x

I've followed all steps as you note in wazuh documentation and updating Elasticsearch, after configure cluster_node_name (i don't have a cluster but i've changed) i'm seeing this:

root@wazuhdb:~# systemctl status elasticsearch
● elasticsearch.service - Elasticsearch
   Loaded: loaded (/usr/lib/systemd/system/elasticsearch.service; enabled; vendor preset: enabled)
  Drop-In: /etc/systemd/system/elasticsearch.service.d
           └─elasticsearch.conf
   Active: failed (Result: exit-code) since Tue 2019-08-06 08:21:39 CEST; 6min ago
     Docs: http://www.elastic.co
  Process: 40427 ExecStart=/usr/share/elasticsearch/bin/elasticsearch -p ${PID_DIR}/elasticsearch.pid --quiet (code=exited, status=1/FAILURE)
 Main PID: 40427 (code=exited, status=1/FAILURE)

Aug 06 08:21:39 wazuhdb elasticsearch[40427]:         at java.base/sun.nio.fs.UnixException.rethrowAsIOException(UnixException.java:116)
Aug 06 08:21:39 wazuhdb elasticsearch[40427]:         at java.base/sun.nio.fs.UnixFileSystemProvider.newByteChannel(UnixFileSystemProvider.java:219)
Aug 06 08:21:39 wazuhdb elasticsearch[40427]:         at java.base/java.nio.file.Files.newByteChannel(Files.java:373)
Aug 06 08:21:39 wazuhdb elasticsearch[40427]:         at java.base/java.nio.file.Files.newByteChannel(Files.java:424)
Aug 06 08:21:39 wazuhdb elasticsearch[40427]:         at java.base/java.nio.file.spi.FileSystemProvider.newInputStream(FileSystemProvider.java:420)
Aug 06 08:21:39 wazuhdb elasticsearch[40427]:         at java.base/java.nio.file.Files.newInputStream(Files.java:158)
Aug 06 08:21:39 wazuhdb elasticsearch[40427]:         at org.elasticsearch.tools.launchers.JvmOptionsParser.main(JvmOptionsParser.java:61)
Aug 06 08:21:39 wazuhdb systemd[1]: elasticsearch.service: Main process exited, code=exited, status=1/FAILURE
Aug 06 08:21:39 wazuhdb systemd[1]: elasticsearch.service: Unit entered failed state.
Aug 06 08:21:39 wazuhdb systemd[1]: elasticsearch.service: Failed with result 'exit-code'.

Could you help me to solve this issue please?

Regards.

Javier Martín-Moreno Guijarro

unread,
Aug 6, 2019, 2:57:01 AM8/6/19
to Wazuh mailing list
I saw that when i'm triying to install Elasticsearch 7.2.0 i'm getting this:

 Setting up elasticsearch (7.2.0) ...
future versions of Elasticsearch will require Java 11; your Java version from [/usr/lib/jvm/java-8-oracle/jre] does not meet this requirement
Created elasticsearch keystore in /etc/elasticsearch

It suppose that Elastic 7.2.0 comes with java but maybe it's having problems with old version of java. Could be?

Thanks!

Pablo Torres

unread,
Aug 6, 2019, 3:00:53 AM8/6/19
to Wazuh mailing list
Hi Javier,

Could you please tell me what version of Wazuh are you using and what version of ELK you upgraded to? Did you follow every step of this doc? https://documentation.wazuh.com/3.x/installation-guide/upgrading-elastic-stack/elastic_server_rolling_upgrade.html

Could you send us the full error log of elasticsearch? This file can be found here:
 /var/log/elasticsearch/<CLUSTER-NAME/elasticsearch>.log

It would be also helpful for us if you could send us the elasticsearch.yml configuration file, this file is located at:
/etc/elasticsearch/elasticsearch.yml

Regards,
Pablo Torres

Javier Martín-Moreno Guijarro

unread,
Aug 6, 2019, 3:18:20 AM8/6/19
to Wazuh mailing list
Hi Pablo,

Thanks for your quick response.

Yes, i've followed steps in Wazuh documentation that you said me.

Attached you files that you said me.

Regards,
ElasticFiles.zip

Pablo Torres

unread,
Aug 6, 2019, 4:08:23 AM8/6/19
to Wazuh mailing list
Hi Javier,

We can see this error in your logs: 

ValidationException[Validation Failed: 1: this action would add [2] total shards, but this cluster currently has [6342]/[1000] maximum shards open;];

In Elastic 7 there is a default limit of 1000 shards per node in the cluster, in your case the number of shards in your cluster (6342) is over this default limit per node (1000) and that is causing that error. For example, as mentioned in the Elastic doc (https://www.elastic.co/guide/en/elasticsearch/reference/current/misc-cluster.html#cluster-shard-limit) a 3-node cluster with the default settings would allow 3.000 shards total.

You can reduce the number of shards until that number of shards is below the limit by closing some indices, closed indices does not count for the cluster shard limit (closing an index does not mean that the index is going to be deleted and closed indices can be reopened again)

You can check your indices by typing:

curl ELASTIC_IP:9200/_cat/indices?v

And you can close/open and index like this:

curl -X POST "ELASTIC_IP:9200/index_name/_close"
curl 
-X POST "ELASTIC_IP:9200/index_name/_open"

More info about Open/Close Index API can be found in Elastic doc: https://www.elastic.co/guide/en/elasticsearch/reference/current/indices-open-close.html

You can also increase the limit of 1000 shards per node in your Elasticsearch cluster by modifying the following property cluster.max_shards_per_node :

curl -XPUT -'Content-Type: application/json' 'ELASTIC_IP:9200/_cluster/settings' -'{ 
   "persistent" : {"cluster.max_shards_per_node" : 7000 }
}
'

In this case the shard limit per node would be increased to 7000.
Note that having too many shards opened it is not recommended and it can lead to performance issues.

As a final note, adding more nodes to your cluster, will add 1000 shards per node to the cluster limit.


Best regards,
Pablo Torres

Javier Martín-Moreno Guijarro

unread,
Aug 6, 2019, 4:36:56 AM8/6/19
to Wazuh mailing list
Hi Pablo,

The problem is that i can't check this:

curl ELASTIC_IP:9200/_cat/indices?v

because my node is not running nothing in 9200 port...

How is possible that with only one node I have 6342 shards opened??

Thanks

Pablo Torres

unread,
Aug 6, 2019, 6:33:20 AM8/6/19
to Wazuh mailing list
Hi Javier,

Let's set the max number of shards per node to 7000 as a temporary solution until you get the number of shards under control, add the following line to your elasticsearch.yml configuration file (/etc/elasticsearch/elasticsearch.yml):

cluster.max_shards_per_node: 7000

**As I said in my previous message: Having too many shards opened it is not recommended and it can lead to performance issues.
Save and restart Elasticsearch 
systemctl restart elasticsearch

And let's see if you can now check your indices:
curl ELASTIC_IP:9200/_cat/indices?v
(remember to replace ELASTIC_IP with the IP of the Elasticsearch server)

Could you please send us the output of this command:
curl -XGET ELASTIC_IP:9200/_cluster/health?pretty


How is possible that with only one node I have 6342 shards opened??
The amount of shards depends on the amount of indices you have and the size of them, I recommend you this article about shards https://www.elastic.co/blog/how-many-shards-should-i-have-in-my-elasticsearch-cluster

Let me know if it helps,

Best regards,
Pablo Torres

Javier Martín-Moreno Guijarro

unread,
Aug 6, 2019, 7:08:34 AM8/6/19
to Wazuh mailing list
Pablo,

I tried to change cluster.max configuration but, when i tried to restart elastic, it's still with same status and /var/log/elasticsearch/elasticsearch.log is without updates (I can't see nothing when i restart elastic)

So, if elastic didn't run, impossible to see nothing in port 9200...

Do you have another idea how can I run elastic?

Thanks and regards!

Pablo Torres

unread,
Aug 6, 2019, 7:22:49 AM8/6/19
to Wazuh mailing list
Hello Javier,

Yes, we can check Elasticsearch status with this command:
systemctl status elasticsearch

and we can start Elasticsearch service with this other command:
systemctl start elasticsearch


Could you please paste here the output of those two commands?

Regards,
Pablo Torres

Javier Martín-Moreno Guijarro

unread,
Aug 6, 2019, 7:27:25 AM8/6/19
to Wazuh mailing list
Sure!

First one:

root@wazuhdb:~# systemctl status elasticsearch
● elasticsearch.service - Elasticsearch
   Loaded: loaded (/usr/lib/systemd/system/elasticsearch.service; enabled; vendor preset: enabled)
  Drop-In: /etc/systemd/system/elasticsearch.service.d
           └─elasticsearch.conf
   Active: failed (Result: exit-code) since Tue 2019-08-06 13:21:46 CEST; 2min 52s ago
     Docs: http://www.elastic.co
  Process: 21654 ExecStart=/usr/share/elasticsearch/bin/elasticsearch -p ${PID_DIR}/elasticsearch.pid --quiet (code=exited, status=1/FAILURE)
 Main PID: 21654 (code=exited, status=1/FAILURE)

Aug 06 13:21:46 wazuhdb elasticsearch[21654]:         at java.base/sun.nio.fs.UnixException.rethrowAsIOException(UnixException.java:116)
Aug 06 13:21:46 wazuhdb elasticsearch[21654]:         at java.base/sun.nio.fs.UnixFileSystemProvider.newByteChannel(UnixFileSystemProvider.java:219)
Aug 06 13:21:46 wazuhdb elasticsearch[21654]:         at java.base/java.nio.file.Files.newByteChannel(Files.java:373)
Aug 06 13:21:46 wazuhdb elasticsearch[21654]:         at java.base/java.nio.file.Files.newByteChannel(Files.java:424)
Aug 06 13:21:46 wazuhdb elasticsearch[21654]:         at java.base/java.nio.file.spi.FileSystemProvider.newInputStream(FileSystemProvider.java:420)
Aug 06 13:21:46 wazuhdb elasticsearch[21654]:         at java.base/java.nio.file.Files.newInputStream(Files.java:158)
Aug 06 13:21:46 wazuhdb elasticsearch[21654]:         at org.elasticsearch.tools.launchers.JvmOptionsParser.main(JvmOptionsParser.java:61)
Aug 06 13:21:46 wazuhdb systemd[1]: elasticsearch.service: Main process exited, code=exited, status=1/FAILURE
Aug 06 13:21:46 wazuhdb systemd[1]: elasticsearch.service: Unit entered failed state.
Aug 06 13:21:46 wazuhdb systemd[1]: elasticsearch.service: Failed with result 'exit-code'.

Second one:

No exit with start option. After lunch it, status is the same:

root@wazuhdb:~# systemctl status elasticsearch.service
● elasticsearch.service - Elasticsearch
   Loaded: loaded (/usr/lib/systemd/system/elasticsearch.service; enabled; vendor preset: enabled)
  Drop-In: /etc/systemd/system/elasticsearch.service.d
           └─elasticsearch.conf
   Active: failed (Result: exit-code) since Tue 2019-08-06 13:26:15 CEST; 46s ago
     Docs: http://www.elastic.co
  Process: 22407 ExecStart=/usr/share/elasticsearch/bin/elasticsearch -p ${PID_DIR}/elasticsearch.pid --quiet (code=exited, status=1/FAILURE)
 Main PID: 22407 (code=exited, status=1/FAILURE)

Aug 06 13:26:15 wazuhdb elasticsearch[22407]:         at java.base/sun.nio.fs.UnixException.rethrowAsIOException(UnixException.java:116)
Aug 06 13:26:15 wazuhdb elasticsearch[22407]:         at java.base/sun.nio.fs.UnixFileSystemProvider.newByteChannel(UnixFileSystemProvider.java:219)
Aug 06 13:26:15 wazuhdb elasticsearch[22407]:         at java.base/java.nio.file.Files.newByteChannel(Files.java:373)
Aug 06 13:26:15 wazuhdb elasticsearch[22407]:         at java.base/java.nio.file.Files.newByteChannel(Files.java:424)
Aug 06 13:26:15 wazuhdb elasticsearch[22407]:         at java.base/java.nio.file.spi.FileSystemProvider.newInputStream(FileSystemProvider.java:420)
Aug 06 13:26:15 wazuhdb elasticsearch[22407]:         at java.base/java.nio.file.Files.newInputStream(Files.java:158)
Aug 06 13:26:15 wazuhdb elasticsearch[22407]:         at org.elasticsearch.tools.launchers.JvmOptionsParser.main(JvmOptionsParser.java:61)
Aug 06 13:26:15 wazuhdb systemd[1]: elasticsearch.service: Main process exited, code=exited, status=1/FAILURE
Aug 06 13:26:15 wazuhdb systemd[1]: elasticsearch.service: Unit entered failed state.
Aug 06 13:26:15 wazuhdb systemd[1]: elasticsearch.service: Failed with result 'exit-code'.



Pablo Torres

unread,
Aug 7, 2019, 1:50:31 AM8/7/19
to Wazuh mailing list
Hi Javier,

Ok it seems that Elasticsearch doesn't event start, let's do this:

Restart Elasticsearch (once again):
systemctl restart elasticsearch

Wait some seconds and now run this command and attach here the output file (elasticoutput.log):
journalctl -u elasticsearch > elasticoutput.log

Let's also run Elasticsearch manually, so we can check if we obtain any extra information about what's happening.
sudo -u elasticsearch /usr/share/elasticsearch/bin/elasticsearch
Please paste the full output here.

Regards,
Pablo Torres

Javier Martín-Moreno Guijarro

unread,
Aug 7, 2019, 2:01:02 AM8/7/19
to Wazuh mailing list
Hi Pablo,

Attached you file elasticoutput.log. Here the result triying to run manually elastic:

root@wazuhdb:~# sudo -u elasticsearch /usr/share/elasticsearch/bin/elasticsearch
Exception in thread "main" java.nio.file.AccessDeniedException: /etc/elasticsearch/jvm.options
        at java.base/sun.nio.fs.UnixException.translateToIOException(UnixException.java:90)
        at java.base/sun.nio.fs.UnixException.rethrowAsIOException(UnixException.java:111)
        at java.base/sun.nio.fs.UnixException.rethrowAsIOException(UnixException.java:116)
        at java.base/sun.nio.fs.UnixFileSystemProvider.newByteChannel(UnixFileSystemProvider.java:219)
        at java.base/java.nio.file.Files.newByteChannel(Files.java:373)
        at java.base/java.nio.file.Files.newByteChannel(Files.java:424)
        at java.base/java.nio.file.spi.FileSystemProvider.newInputStream(FileSystemProvider.java:420)
        at java.base/java.nio.file.Files.newInputStream(Files.java:158)
        at org.elasticsearch.tools.launchers.JvmOptionsParser.main(JvmOptionsParser.java:61)

Thanks!
elasticoutput.log

Javier Martín-Moreno Guijarro

unread,
Aug 7, 2019, 2:14:13 AM8/7/19
to Wazuh mailing list
UPDATE:

I saw that my files elasticsearch.yml and jvm.options are not with good permissions. I've changed to:

root@wazuhdb:/etc/elasticsearch# ls -lia
total 96
69468733 drwxr-s---   2 root elasticsearch  4096 Aug  7 08:07 .
69468161 drwxr-xr-x 109 root root          12288 Aug  6 09:13 ..
69468265 -rw-rw----   1 root elasticsearch   199 Aug  6 12:39 elasticsearch.keystore
69468468 -rw-r--r--   1 root elasticsearch    76 Aug  6 12:39 .elasticsearch.keystore.initial_md5sum
69470258 -rw-rw----   1 root elasticsearch  2882 Aug  7 08:07 elasticsearch.yml
69469991 -rw-rw----   1 root elasticsearch  2904 Apr 25  2018 elasticsearch.yml.bk
69469102 -rw-------   1 root elasticsearch  2939 Aug  6 12:38 elasticsearch.yml.dpkg-old
69470266 -rw-rw----   1 root elasticsearch  2809 Aug  7 08:01 jvm.options
69469995 -rw-rw----   1 root elasticsearch  2809 Jun  4  2018 jvm.options.bk
69469190 -rw-------   1 root elasticsearch  2809 Aug  6 11:51 jvm.options.dpkg-old
69470155 -rw-rw----   1 root elasticsearch 17170 Jun 20 18:03 log4j2.properties
69470173 -rw-rw----   1 root elasticsearch   473 Aug 18  2018 role_mapping.yml
69470006 -rw-rw----   1 root elasticsearch   197 Aug 18  2018 roles.yml
69470139 -rw-rw----   1 root elasticsearch     0 Aug 18  2018 users
69470012 -rw-rw----   1 root elasticsearch     0 Aug 18  2018 users_roles
69470013 -rw-------   1 root elasticsearch 17269 Apr 25  2018 w-elastic-template.json

And now, the output when i try to luch elastic manually is the file attached.

Regards,
ErrorElastic.txt

Pablo Torres

unread,
Aug 7, 2019, 2:16:18 AM8/7/19
to Wazuh mailing list
Hi Javier,

We can see in your logs:
Exception in thread "main" java.nio.file.AccessDeniedException: /etc/elasticsearch/jvm.options

It seems that Elasticsearch doesn't have permissions to read from that file, let's give elasticsearch user permission to that directory:
chmod -R +r /etc/elasticsearch

After that, let's do again the steps of my previous message so we can check if its now running:

Restart Elasticsearch (once again):
systemctl restart elasticsearch
Wait some seconds and now run this command and attach here the output file (elasticoutput.log):
journalctl -u elasticsearch > elasticoutput.log


Regards,
Pablo Torres

Pablo Torres

unread,
Aug 7, 2019, 2:36:07 AM8/7/19
to Wazuh mailing list
Hi Javier,

Ok, let's take a look at your logs:
[2019-08-07T08:08:02,450][WARN ][o.e.b.JNANatives         ] [wazuhdb] Unable to lock JVM Memory: error=12, reason=Cannot allocate memory
[2019-08-07T08:08:02,454][WARN ][o.e.b.JNANatives         ] [wazuhdb] This can result in part of the JVM being swapped out.
[2019-08-07T08:08:02,454][WARN ][o.e.b.JNANatives         ] [wazuhdb] Increase RLIMIT_MEMLOCK, soft limit: 65536, hard limit: 65536
[2019-08-07T08:08:02,455][WARN ][o.e.b.JNANatives         ] [wazuhdb] These can be adjusted by modifying /etc/security/limits.conf, for example:
       
# allow user 'elasticsearch' mlockall
        elasticsearch soft memlock unlimited
        elasticsearch hard memlock unlimited
...

You have this option configured in your elasticsearch.yml:
bootstrap.memory_lock: true


Let's do the following changes in this file 
/usr/lib/systemd/system/elasticsearch.service

After [SERVICE] add 
LimitMEMLOCK=infinity

Save and then run this command: 
sudo systemctl daemon-reload

Now restart Elasticsearch service:
systemctl restart elasticsearch

And check if its status is Active:
systemctl status elasticsearch

Let me know if it helps,

Kind regards,
Pablo Torres


Javier Martín-Moreno Guijarro

unread,
Aug 7, 2019, 3:23:40 AM8/7/19
to Wazuh mailing list
Hi Pablo,

With your recomendations, it seems that everything is "working". I said "working" with quotes because now i have the services running but I think without a good configuration. Now, when i try to access trough Kibana (i've just finished all update guide in Wazuh documentation page) i saw this:

{"message":"all shards failed: [search_phase_execution_exception] all shards failed","statusCode":503,"error":"Service Unavailable"}

Maybe here is the problem:

root@wazuhdb:~# curl -XGET localhost:9200/_cluster/health?pretty
{
  "cluster_name" : "elasticsearch",
  "status" : "red",
  "timed_out" : false,
  "number_of_nodes" : 1,
  "number_of_data_nodes" : 1,
  "active_primary_shards" : 3496,
  "active_shards" : 3496,
  "relocating_shards" : 0,
  "initializing_shards" : 0,
  "unassigned_shards" : 2857,
  "delayed_unassigned_shards" : 0,
  "number_of_pending_tasks" : 0,
  "number_of_in_flight_fetch" : 0,
  "task_max_waiting_in_queue_millis" : 0,
  "active_shards_percent_as_number" : 55.0291201007398
}

Thanks a lot for your help!


Pablo Torres

unread,
Aug 7, 2019, 4:14:06 AM8/7/19
to Wazuh mailing list
Hi Javier,

Yes, Elasticsearch is finally up and running. Now Elasticsearch should be logging errors to the error log file, please attach here that file, it can be found here:
/var/log/elasticsearch/<CLUSTER-NAME/elasticsearch>.log

We can see in the cluster health output that the cluster status is RED and we can also see that there are 2857 unassigned shards, let's check the cluster allocation status with this command:
curl ELASTIC_IP:9200/_cluster/allocation/explain?pretty

One more command that will give us information about the unassigned shards and the reason why they are unassigned:
curl -XGET ELASTIC_IP:9200/_cat/shards?h=index,shard,prirep,state,unassigned.reason,node | grep -i unassigned


Best regards,
Pablo Torres

Javier Martín-Moreno Guijarro

unread,
Aug 7, 2019, 4:32:52 AM8/7/19
to Wazuh mailing list
Hi,

elastichsearch.log is around 70MB, Attached the end of the file in part_elasticsearch.log.txt


root@wazuhdb:/var/log/elasticsearch# curl 134.16.1.201:9200/_cluster/allocation/explain?pretty
{
  "index" : "wazuh-monitoring-3.x-2018.09.19",
  "shard" : 4,
  "primary" : false,
  "current_state" : "unassigned",
  "unassigned_info" : {
    "reason" : "CLUSTER_RECOVERED",
    "at" : "2019-08-07T06:42:51.782Z",
    "last_allocation_status" : "no_attempt"
  },
  "can_allocate" : "no",
  "allocate_explanation" : "cannot allocate because allocation is not permitted to any of the nodes",
  "node_allocation_decisions" : [
    {
      "node_id" : "nudsfmqLSC2WW6MhUCdsvw",
      "node_name" : "wazuhdb",
      "transport_address" : "134.16.1.201:9300",
      "node_attributes" : {
        "ml.machine_memory" : "33611071488",
        "xpack.installed" : "true",
        "ml.max_open_jobs" : "20"
      },
      "node_decision" : "no",
      "deciders" : [
        {
          "decider" : "same_shard",
          "decision" : "NO",
          "explanation" : "the shard cannot be allocated to the same node on which a copy of the shard already exists [[wazuh-monitoring-3.x-2018.09.19][4], node[nudsfmqLSC2WW6MhUCdsvw], [P], s[STARTED], a[id=VCjrv0IVTMSjCmDq-Y7mxw]]"
        }
      ]
    }
  ]
}

For third command, i've attached elastic_unassigned.log file
elastic_unassigned.log
part_elasticsearhc.log.txt

Pablo Torres

unread,
Aug 7, 2019, 4:51:44 AM8/7/19
to Wazuh mailing list
Hi Javier,

Before continuing, could you please paste the output of this command:

curl ELASTIC_IP:9200/_cat/indices

Regards,
Pablo Torres

Javier Martín-Moreno Guijarro

unread,
Aug 7, 2019, 4:53:48 AM8/7/19
to Wazuh mailing list
Sure!

root@wazuhdb:~# curl 134.16.1.201:9200/_cat/indices
green  open wazuh-monitoring-3.x-2019.02.08  JX9ZUx9-TEajkVAmpZimwQ 2 0    1488      0 631.8kb 631.8kb
green  open wazuh-monitoring-3.x-2019.04.11  D3YU5Gh0R2a51KMn5ew2Aw 2 0    1512      0 646.2kb 646.2kb
yellow open wazuh-alerts-3.x-2018.10.20      qNaphFoAQdW1srdogm6CHA 5 1  756947      0 472.2mb 472.2mb
yellow open wazuh-monitoring-3.x-2018.12.12  CL9xQZqVT4GY6A2YUrfbiQ 5 1    1680      0   1.2mb   1.2mb
green  open wazuh-monitoring-3.x-2019.04.16  7OfdfjnpQTuv0tM7yZ0Pmg 2 0    1512      0 627.5kb 627.5kb
yellow open wazuh-monitoring-3.x-2018.09.29  -llqOf4OQ8SjOl-wbfPjtg 5 1    1608      0   1.2mb   1.2mb
green  open wazuh-monitoring-3.x-2019.03.25  QaamqTDKTeel0PJq1C5uVw 2 0    1512      0 629.1kb 629.1kb
yellow open wazuh-alerts-3.x-2018.08.20      _EVla1IuStaF4jkmDZ6HAw 5 1  376962      0 288.4mb 288.4mb
green  open wazuh-alerts-3.x-2018.08.09      Zp3Qoq0VTHO7mC1AngQ3wQ 1 0  336210      0 241.8mb 241.8mb
yellow open wazuh-alerts-3.x-2019.01.04      Is1CyIsNRjuSbwhc6FM5cg 5 1 1163420      0 776.7mb 776.7mb
yellow open wazuh-monitoring-3.x-2018.08.22  uF4D8-elTSO9GoVFHaPAAQ 5 1    1776      0   1.3mb   1.3mb
green  open wazuh-alerts-3.x-2018.07.09      aiJghWOoQKytzfKNCHXB5w 1 0  470350      0 399.4mb 399.4mb
yellow open wazuh-monitoring-3.x-2018.10.16  n9E0M1nbTGuSh0PpVr3JAg 5 1    1656      0   1.2mb   1.2mb
yellow open wazuh-monitoring-3.x-2018.10.09  SDhpvFuBSRC0TJXLaLvI8A 5 1    1623      0   1.2mb   1.2mb
yellow open wazuh-alerts-3.x-2019.04.01      uqyXV91wQmay61HAojVLyg 5 1 1626445      0 893.5mb 893.5mb
yellow open wazuh-alerts-3.x-2019.06.06      kzH23cpZQxqaAiEA9M8L9A 5 1 2729410      0   8.5gb   8.5gb
yellow open wazuh-alerts-3.x-2018.11.12      kzHaFaSkTbKZvS29DehwZg 5 1 1064644      0 751.9mb 751.9mb
yellow open wazuh-alerts-3.x-2019.05.10      yCVXTxonT3Cc36jHJGHgxw 5 1 1278528      0   912mb   912mb
yellow open wazuh-monitoring-3.x-2018.07.01  fYkpLnBDTRa9bdiG23l2rA 5 1    1704      0 985.5kb 985.5kb
yellow open wazuh-alerts-3.x-2018.11.27      w5OIVsG8RKeL7eJWAkAmew 5 1 1170296      0 811.5mb 811.5mb
green  open wazuh-alerts-3.x-2018.03.09      neYu86RyTAGCCeJyc9FYkg 1 0  285642      0   148mb   148mb
yellow open wazuh-monitoring-3.x-2018.10.25  WGabnNOwQgSFWkNq-dwldQ 5 1    1656      0   1.2mb   1.2mb
yellow open wazuh-monitoring-3.x-2018.06.24  I7FeB1JpRJSOhfDj_6_dEQ 5 1    1704      0 991.9kb 991.9kb
green  open wazuh-alerts-3.x-2018.06.28      fBnOymIGSAuE7r0i-hG5HQ 1 0  488951      0 304.2mb 304.2mb
green  open wazuh-alerts-3.x-2018.06.08      J69PB6PFRP-YIuC9gazMGg 1 0  525194      0 337.5mb 337.5mb
green  open .tasks                           NV62oiGPSVuAxLnoV4ty7w 1 0       1      0   6.2kb   6.2kb
yellow open wazuh-monitoring-3.x-2019.01.18  6FfSbi_sSwqYFYI8yK3Ohw 5 1    1680      0   1.2mb   1.2mb
yellow open wazuh-monitoring-3.x-2018.09.28  hJOGjP0bThmJV7jiwhzfcQ 5 1    1608      0   1.2mb   1.2mb
yellow open wazuh-alerts-3.x-2018.12.12      -LSdlMjFQMOlffFpsVIgow 5 1 1213283      0 847.7mb 847.7mb
green  open wazuh-monitoring-3.x-2019.02.26  _n01QjqLRJGVvOJmu0dDkA 2 0    1488      0 621.4kb 621.4kb
green  open wazuh-monitoring-3.x-2019.01.27  KniYOFySR6OWpso2yo_sVg 2 0    1704      0 721.8kb 721.8kb
yellow open wazuh-monitoring-3.x-2018.05.22  xfE0gUqPQciP75iQYnVbKg 5 1   10080      0   2.7mb   2.7mb
yellow open wazuh-alerts-3.x-2019.05.03      RjHOyV-5S_OtU1ERUjuzTw 5 1 1415911      0   788mb   788mb
green  open wazuh-alerts-3.x-2018.04.20      lMVv5B-wThWmegT0MYokcg 1 0  293218      0 144.3mb 144.3mb
yellow open wazuh-alerts-3.x-2019.04.06      iTV4mFXdRfSYZMiOYxXgCQ 5 1 1254248      0 677.5mb 677.5mb
yellow open wazuh-alerts-3.x-2019.02.18      TXAsGFpjR2KXBKSETNpAow 5 1 1339307      0   840mb   840mb
yellow open wazuh-monitoring-3.x-2018.11.04  8_cHgIqpQJahULj0OFVmug 5 1    1680      0   1.3mb   1.3mb
yellow open wazuh-monitoring-3.x-2019.01.04  4-u_-mChRoKVtsnpB5rXRA 5 1    1680      0   1.3mb   1.3mb
green  open wazuh-alerts-3.x-2018.07.04      rOzlHZkqTiml527zEx9gxg 1 0  548095      0 372.2mb 372.2mb
green  open wazuh-monitoring-3.x-2019.03.23  Yyzihc9sQIW1Ou6j6rQGjw 2 0    1512      0 630.3kb 630.3kb
yellow open wazuh-monitoring-3.x-2018.09.11  yigS6CHuQzSvDG2dxHiEcQ 5 1    1824      0   1.3mb   1.3mb
yellow open wazuh-alerts-3.x-2019.04.18      CdLDVW9kQKmhWQkJSdWkcg 5 1 1640132      0 924.1mb 924.1mb
yellow open wazuh-alerts-3.x-2019.04.03      ONz5_SbuRAe-adnllZqKOw 5 1 1664732      0 916.3mb 916.3mb
yellow open wazuh-alerts-3.x-2018.11.14      sin-yozMRamwAudrdtA94g 5 1 1120833      0   790mb   790mb
green  open wazuh-alerts-3.x-2019.07.12      mEmLz8ZtQR2Sx_2zGGqW9g 3 0 1040878      0 537.2mb 537.2mb
yellow open wazuh-alerts-3.x-2019.06.24      MABH13RSRTapGXZCBV3gXA 5 1 1195391      0 625.4mb 625.4mb
green  open wazuh-alerts-3.x-2019.07.19      hi-IebDBSseAh0-7qPh_SA 3 0 1066858      0 548.7mb 548.7mb
green  open wazuh-monitoring-3.x-2019.02.13  x8P7OZEFTi-WBHBHIfp4Hw 2 0    1488      0 623.2kb 623.2kb
green  open .monitoring-es-6-2019.08.03      G0pAIUOVSeuA91WepRoCng 1 0 9644636  75249   4.2gb   4.2gb
yellow open wazuh-monitoring-3.x-2018.11.27  KszdRL91TeiXFxnM11MCmQ 5 1    1680      0   1.2mb   1.2mb
yellow open wazuh-alerts-3.x-2018.12.09      8AeNKiA1RfihWVhkIIXVFQ 5 1  909934      0   592mb   592mb
yellow open wazuh-alerts-3.x-2019.02.23      wzJi9AVGSNCd59OER_Calw 5 1 1315972      0 765.3mb 765.3mb
green  open wazuh-monitoring-3.x-2019.04.21  68mCDi_dTlOt_xkT3j7f4g 2 0    1512      0 628.5kb 628.5kb
green  open wazuh-monitoring-3.x-2019.07.04  aUQ7CsU8QWal3gfnXCvILg 2 0    1512      0 630.3kb 630.3kb
yellow open wazuh-alerts-3.x-2018.12.17      yNMyRWPcQ6O0BIAf8Hwh6w 5 1 1246378      0 855.1mb 855.1mb
green  open wazuh-alerts-3.x-2018.01.25      Lpe5E6VdS5GM0vQzFJNG2g 1 0  347571      0 182.6mb 182.6mb
yellow open wazuh-alerts-3.x-2019.01.30      ikXtwjPgRm--JfgqaXHuPQ 5 1 1215857      0   757mb   757mb
yellow open wazuh-monitoring-3.x-2018.10.12  zD0MPZ_zQx6vqKMpFqbadw 5 1    1632      0   1.2mb   1.2mb
yellow open wazuh-alerts-3.x-2018.08.15      8fMn5rv_TJCm0n3YfLmuTA 5 1  210319      0 161.5mb 161.5mb
green  open wazuh-alerts-3.x-2018.03.30      bQiyj09WSaqVEFNb6wNCSw 1 0  277486      0 140.6mb 140.6mb
green  open wazuh-alerts-3.x-2018.07.14      HM7KGRl9Qp6AOsjKfe7rzQ 1 0  245550      0 189.9mb 189.9mb
yellow open wazuh-alerts-3.x-2019.01.29      XvP1v10jS1GSE0n_rl1ckw 5 1 1200867      0 728.2mb 728.2mb
green  open wazuh-alerts-3.x-2018.02.24      IbQSJ9MgRhmj4sCa8kP48g 1 0  172605      0  82.7mb  82.7mb
yellow open wazuh-alerts-3.x-2018.11.02      sXy0TiMCTpOj0w-2eQvdFw 5 1  806468      0 510.8mb 510.8mb
green  open wazuh-alerts-3.x-2018.01.29      l7o873DIStmJtmGWW8i-Sw 1 0  303947      0 158.5mb 158.5mb
yellow open wazuh-alerts-3.x-2018.08.19      AxzC_xheQtO-NNrqhDwzbQ 5 1  196844      0 154.6mb 154.6mb
yellow open wazuh-alerts-3.x-2019.06.01      po-G4u__Qje-cOYQXUqxcQ 5 1  866332      0 467.4mb 467.4mb
green  open wazuh-monitoring-3.x-2019.06.19  k9xHFLmyTUOzG_vtvTbZgg 2 0    1512      0 631.7kb 631.7kb
yellow open wazuh-monitoring-3.x-2018.12.18  hSryjPAARg-87H_b1Jva5w 5 1    1680      0   1.3mb   1.3mb
yellow open wazuh-alerts-3.x-2018.12.22      4oWDS6XIR7iGL0_FuTdJhw 5 1  895001      0 563.5mb 563.5mb
yellow open wazuh-monitoring-3.x-2019.01.06  wZqAQjXvSzuvnL3RsQ5dPg 5 1    1680      0   1.2mb   1.2mb
green  open wazuh-monitoring-3.x-2019.04.25  1ZzgMqx2TYWc6v8k4ui0Kg 2 0    1512      0 627.1kb 627.1kb
yellow open wazuh-alerts-3.x-2019.03.05      mew8j73mTWGFoSlZQceObA 5 1 1670800      0 921.6mb 921.6mb
green  open wazuh-alerts-3.x-2018.04.05      ztwKn2H1T0W9lWV5mcqa-w 1 0  296491      0 153.4mb 153.4mb
yellow open wazuh-alerts-3.x-2018.11.20      tCj2ivyxR32zKSyCGMfMIg 5 1 1129976      0 788.8mb 788.8mb
green  open wazuh-alerts-3.x-2018.04.27      CBEtkRNSRNCQQYwR_PU6eA 1 0  291228      0 163.3mb 163.3mb
green  open wazuh-monitoring-3.x-2019.03.28  3xuI0pvaQ8a0FFUxuS2ZFw 2 0    1512      0 627.6kb 627.6kb
green  open wazuh-monitoring-3.x-2019.05.24  33Fi7op8SJ6d05RwzdyHPQ 2 0    1512      0 650.6kb 650.6kb
green  open wazuh-monitoring-3.x-2019.04.18  mf3fL7dvQvuJy-vI8-5yGA 2 0    1512      0 626.7kb 626.7kb
yellow open wazuh-alerts-3.x-2018.08.26      eAZAV38VSPWw4cdsAAO7TQ 5 1  203781      0   163mb   163mb
green  open wazuh-monitoring-3.x-2019.06.24  AX4e5hdwRE-8_vuvcgjIIA 2 0    1512      0 631.2kb 631.2kb
green  open wazuh-alerts-3.x-2018.03.26      OUyZSlGOTmKIxUshbbNnPQ 1 0  334308      0 175.5mb 175.5mb
yellow open wazuh-alerts-3.x-2019.01.24      jAvGG9N9RdutCG12VebrIw 5 1 1167391      0   703mb   703mb
green  open wazuh-alerts-3.x-2018.07.21      QB7IInpJQkmjzztjyvXOuA 1 0  339502      0 286.5mb 286.5mb
green  open wazuh-monitoring-3.x-2019.05.15  s1nZzzdDScqI8zR5rpkCkg 2 0    1512      0 627.7kb 627.7kb
yellow open wazuh-alerts-3.x-2019.02.09      0r-B-7ojQ7mFOh9HppwSLQ 5 1  933581      0   532mb   532mb
green  open wazuh-monitoring-3.x-2019.06.16  axIUHWDEQVmPDZRSY-327w 2 0    1512      0   629kb   629kb
green  open wazuh-monitoring-3.x-2019.06.02  9Qqqui9sR26TXnmrl4E7TA 2 0    1512      0 632.1kb 632.1kb
yellow open wazuh-monitoring-3.x-2018.12.29  ABwe7KoaSmydTEByBcxEDg 5 1    1680      0   1.3mb   1.3mb
yellow open wazuh-alerts-3.x-2018.11.06      ddRbs7BgSB6JM_rxx_mGqA 5 1 1179455      0 815.2mb 815.2mb
yellow open wazuh-alerts-3.x-2019.01.16      6x4ePGWkTXKlxwLCoryyqQ 5 1 1145411      0 790.1mb 790.1mb
green  open wazuh-alerts-3.x-2018.05.06      B40iG4OiTnSlbt40RmZp8w 1 0  167309      0  87.8mb  87.8mb
yellow open wazuh-alerts-3.x-2019.05.18      e_ztBrLYRUSk5HlIsTo1WQ 5 1 1294628      0   724mb   724mb
green  open wazuh-alerts-3.x-2018.07.23      c7LwIlxWQySDyRxrT_wlmQ 1 0  591610      0 467.3mb 467.3mb
green  open wazuh-alerts-3.x-2018.03.12      JWzFsu1GToeTgACKs9d6nA 1 0  332159      0 169.1mb 169.1mb
yellow open wazuh-alerts-3.x-2018.10.25      fNx29WSeQPGUnoPlzg152A 5 1 1024549      0 682.8mb 682.8mb
green  open wazuh-alerts-3.x-2018.04.17      -6M6-m8GRwir4SD46E46pg 1 0  327559      0 162.1mb 162.1mb
yellow open wazuh-alerts-3.x-2018.11.18      KITbDK-cRHaHwJg4Ot3h7g 5 1  821827      0 546.6mb 546.6mb
yellow open wazuh-alerts-3.x-2019.05.17      8Er33S5dSTG6E1C9IN93lw 5 1 1437625      0 817.3mb 817.3mb
green  open wazuh-alerts-3.x-2018.07.28      O8ec1wiGSPG-fgP1iCz5Tg 1 0  339486      0   319mb   319mb
yellow open wazuh-monitoring-3.x-2019.01.09  Lbgw3APwSf-bSi-ACpHepw 5 1    1680      0   1.3mb   1.3mb
green  open wazuh-alerts-3.x-2018.02.10      8Kj1Rh0YQvezdDUZMYo_Jw 1 0  186041      0  86.2mb  86.2mb
green  open wazuh-alerts-3.x-2019.07.29      zDOeY78bQo6MSsOnJOxn9Q 3 0  455933      0 238.3mb 238.3mb
green  open wazuh-alerts-3.x-2018.02.08      qj--Hu1rS1C136HOgrIoDw 1 0  330804      0   180mb   180mb
yellow open wazuh-alerts-3.x-2018.11.23      Kq9zpuw2RjeswDQGjiQLmg 5 1 1118180      0 778.6mb 778.6mb
green  open wazuh-monitoring-3.x-2019.06.06  jEqndlASSOyQ6tQ1kRH91g 2 0    1512      0 628.6kb 628.6kb
yellow open wazuh-alerts-3.x-2018.12.07      C0SElSO5TPaECO76kDWkrw 5 1 1114442      0 751.6mb 751.6mb
yellow open wazuh-monitoring-3.x-2018.11.30  M4rPm-0gTkO6z9GozhWjJA 5 1    1680      0   1.2mb   1.2mb
yellow open wazuh-alerts-3.x-2018.11.29      0rgpr0x9RVC3a0iMU6c7cA 5 1 1149070      0 810.3mb 810.3mb
yellow open wazuh-monitoring-3.x-2018.12.25  UvFP5lZSSfS0flnf8J8Clw 5 1    1680      0   1.3mb   1.3mb
yellow open wazuh-monitoring-3.x-2018.06.17  9wylwPpIRFu7gi0a02NyUg 5 1    1704      0 991.4kb 991.4kb
yellow open wazuh-monitoring-3.x-2018.11.19  vXIlzs-5SSK_1irbU4M7SA 5 1    1680      0   1.3mb   1.3mb
yellow open wazuh-alerts-3.x-2018.11.15      rC8DMeA1SbqyleziHifsKA 5 1 1132714      0 817.8mb 817.8mb
green  open wazuh-monitoring-3.x-2019.04.01  QI0vBV_nT1e-aHtmjfG0mw 2 0    1512      0 628.6kb 628.6kb
yellow open wazuh-alerts-3.x-2018.09.11      4t0MoI0OQ7yIGh62JwP-uA 5 1  945624      0 642.8mb 642.8mb
yellow open wazuh-monitoring-3.x-2018.09.07  59e3OmQiRz-hwhs-5P_KDA 5 1    1824      0   1.3mb   1.3mb
yellow open wazuh-monitoring-3.x-2018.11.28  j_PNQ41LRZm3Q6seOWL5Ew 5 1    1680      0   1.3mb   1.3mb
green  open wazuh-alerts-3.x-2019.07.24      j2AFVnY4SwaT9mTVM0eg8g 3 0 1104653      0 568.6mb 568.6mb
green  open wazuh-alerts-3.x-2018.04.06      A35uvcJZR0qaTs_PJ6__CQ 1 0  265033      0 135.3mb 135.3mb
green  open wazuh-alerts-3.x-2018.03.17      1d22riGnS9W4tJ8bpG5N6A 1 0   84736      0    46mb    46mb
yellow open wazuh-monitoring-3.x-2018.10.26  oWUjECiHQpaMpXfse0QNMg 5 1    1656      0   1.2mb   1.2mb
yellow open wazuh-alerts-3.x-2018.10.17      cabbqc0CT1e7NhPe3_DrQA 5 1 1099472      0 732.4mb 732.4mb
yellow open wazuh-monitoring-3.x-2018.10.08  DvK-6ss8SOKY8AITQ--bmw 5 1    1608      0   1.2mb   1.2mb
yellow open wazuh-alerts-3.x-2019.01.31      zCVF7S5ySBia8FS_Gzrp6g 5 1 1169097      0 714.3mb 714.3mb
yellow open wazuh-monitoring-3.x-2019.01.03  1J0JkpGEQSmtzwwk2CYzfA 5 1    1680      0   1.2mb   1.2mb
green  open wazuh-monitoring-3.x-2019.06.21  1Bhhq9PVTv-5YFb6ghEDyw 2 0    1512      0 630.2kb 630.2kb
yellow open wazuh-alerts-3.x-2018.11.28      kPY63jReQ8GUbmGVYW-8_g 5 1 1158670      0 811.2mb 811.2mb
green  open wazuh-monitoring-3.x-2019.07.23  _i6Jjos5RPu_x4jTtRc4Eg 2 0    5890      0   1.5mb   1.5mb
yellow open wazuh-alerts-3.x-2018.11.05      Y8hPFyyiRjyVQiXMSk2C0w 5 1 1082385      0 757.5mb 757.5mb
green  open wazuh-alerts-3.x-2018.05.08      Yxa9AXm9QRC7qiIFd7g8GQ 1 0  286435      0 148.9mb 148.9mb
green  open wazuh-monitoring-3.x-2019.05.28  U4EranhkQgmsO0iAsm2NGg 2 0    1512      0 630.7kb 630.7kb
yellow open wazuh-alerts-3.x-2019.05.08      2QOM-HL6RaiTn0UgqoUXLA 5 1 1062338      0 729.5mb 729.5mb
yellow open wazuh-alerts-3.x-2018.12.03      Ja2_3kjGSvqBTLgUuk26aw 5 1 1159652      0 809.8mb 809.8mb
yellow open wazuh-alerts-3.x-2019.05.02      AJir3OZsROSL3NTMy2AMJA 5 1 1664094      0 995.4mb 995.4mb
green  open wazuh-alerts-3.x-2018.05.16      SnTe-z-_T86KYnMzT8Jb1A 1 0  476961      0 309.9mb 309.9mb
green  open wazuh-monitoring-3.x-2019.03.07  5zA3S3WQRMerQ7Bxi0sOYw 2 0    1488      0 621.7kb 621.7kb
yellow open wazuh-alerts-3.x-2018.11.09      eFk9yZKSQ5qjjiNRYNkJkw 5 1 1088174      0 731.7mb 731.7mb
green  open wazuh-alerts-3.x-2018.03.13      Qzy2h8zmQk2GRNGYeeE9bA 1 0  318188      0 163.5mb 163.5mb
green  open wazuh-alerts-3.x-2018.06.14      U5SuPWhtT6-rVIw91lbmUQ 1 0  539550      0 356.6mb 356.6mb
yellow open wazuh-alerts-3.x-2019.03.14      4FaMiOFQSy6JCwTWtJOwPw 5 1 1667737      0 935.9mb 935.9mb
yellow open wazuh-alerts-3.x-2019.01.07      jzZttO8uTfSEiOvcarEu-A 5 1 1175978      0 804.7mb 804.7mb
yellow open wazuh-alerts-3.x-2018.11.04      5RoprsJOQvura7Pw8SoFaA 5 1  804148      0 507.9mb 507.9mb
yellow open wazuh-monitoring-3.x-2018.12.20  rUwjxtfzQNqlJpEydCyuHQ 5 1    1680      0   1.2mb   1.2mb
green  open wazuh-monitoring-3.x-2019.04.10  SZ_dfvuVRDuUG61N2Vr6lg 2 0    1512      0 625.8kb 625.8kb
green  open wazuh-alerts-3.x-2018.05.10      5WaLJBd1RQCna9VPCnEq7w 1 0  239993      0 172.1mb 172.1mb
yellow open wazuh-alerts-3.x-2018.11.26      -NgEPHwgS-y3seUC3ho9MQ 5 1 1146959      0 797.8mb 797.8mb
yellow open wazuh-alerts-3.x-2018.11.24      GHIUtJ5dTsORbjfIqrtdwA 5 1  875424      0 573.9mb 573.9mb
green  open .monitoring-es-6-2019.08.04      YUXT1AxaTlSlxmRBAFdJug 1 0 9660408  74516   4.3gb   4.3gb
yellow open wazuh-alerts-3.x-2019.02.08      Dg50GcbSRte7GLt36UgE1Q 5 1 1152694      0 689.8mb 689.8mb
yellow open wazuh-monitoring-3.x-2018.05.21  KDKBMF76SHCZnSS5MIuxKQ 5 1   10080      0   2.9mb   2.9mb
yellow open wazuh-monitoring-3.x-2018.10.03  ZAER_eVNS72R79VVfA7jUg 5 1    1608      0   1.2mb   1.2mb
yellow open wazuh-alerts-3.x-2018.12.01      tcs9xa-ISje3uxC1s5X5EA 5 1  865573      0 566.3mb 566.3mb
yellow open wazuh-monitoring-3.x-2018.11.07  oEQuOImoRla8spPpVgHNOg 5 1    1680      0   1.3mb   1.3mb
green  open wazuh-alerts-3.x-2018.05.28      buDAinNeSWGyeAIY8ecPMg 1 0  392612      0 272.7mb 272.7mb
yellow open wazuh-alerts-3.x-2018.09.18      u9RXV_iaTHe2tVjprHl-EQ 5 1 1191200      0 832.9mb 832.9mb
yellow open wazuh-monitoring-3.x-2018.12.30  rxlaEWBiSUy5KsurCE6SZA 5 1    1680      0   1.3mb   1.3mb
yellow open wazuh-alerts-3.x-2018.09.13      UMewvoE-TvGFgNZOIVI8gQ 5 1 1041689      0 692.2mb 692.2mb
yellow open wazuh-monitoring-3.x-2018.12.24  0NJmMxr-SCGy2C8YNF02yA 5 1    1680      0   1.3mb   1.3mb
yellow open wazuh-monitoring-3.x-2018.04.30  Fcl2jix4RIW82xBsrhCyGg 5 1   10080      0   2.8mb   2.8mb
green  open wazuh-alerts-3.x-2018.06.30      -lYF8Nq6RYuyygmXXiH2pQ 1 0  209740      0 129.1mb 129.1mb
yellow open wazuh-alerts-3.x-2019.03.15      wuw5iF7xSnuFANNX6CkXNA 5 1 1513371      0 834.2mb 834.2mb
green  open wazuh-monitoring-3.x-2019.02.12  6l496Sd1TSihGd5jOTfelA 2 0    1426      0 568.9kb 568.9kb
green  open wazuh-alerts-3.x-2018.04.29      lOK6P44IS0ydd0KKRz_6og 1 0  167814      0  90.9mb  90.9mb
green  open wazuh-alerts-3.x-2019.07.14      LvBw2C1zQ7qEQB7ubIfanw 3 0  796671      0 407.2mb 407.2mb
green  open .monitoring-kibana-6-2019.08.06  ohsIaz19RPihVal1OPDjXg 1 0    2041      0 552.5kb 552.5kb
yellow open wazuh-alerts-3.x-2019.06.16      66t0m1v-TJORFAYNAsjheQ 5 1  807960      0 430.5mb 430.5mb
green  open wazuh-monitoring-3.x-2019.04.30  BHfaTC7WQoOLRR5tfmqXgg 2 0    1512      0 627.8kb 627.8kb
yellow open wazuh-alerts-3.x-2019.03.03      Dmk6mxmRSJaB6GZqmuOREw 5 1 1274098      0 692.6mb 692.6mb
yellow open wazuh-alerts-3.x-2019.02.11      cnSoBoiqSOGnrI2KWjRMTQ 5 1 1301934      0 830.1mb 830.1mb
green  open wazuh-monitoring-3.x-2019.07.10  SvRmxUlqS1e84ZeAvaQbzg 2 0    5952      0   1.6mb   1.6mb
green  open wazuh-alerts-3.x-2018.02.06      ApfgeZBuRsW4wzD0MruDMQ 1 0  335927      0 177.4mb 177.4mb
green  open wazuh-alerts-3.x-2018.02.26      QthW1C1GRyO467k6IY2Glg 1 0  291695      0 150.2mb 150.2mb
green  open wazuh-monitoring-3.x-2019.03.04  nnImERwbTgylWbdRdqEpbg 2 0    1488      0 621.3kb 621.3kb
green  open wazuh-monitoring-3.x-2019.08.04  ZwOoilKkSpatH-5LEMnMkw 2 0    5952      0   1.6mb   1.6mb
yellow open wazuh-alerts-3.x-2018.12.29      Dez8XaFoQ2uLe5o2gaj1uw 5 1  900733      0 576.3mb 576.3mb
yellow open wazuh-monitoring-3.x-2018.09.26  -p-1Wp3dQhSfjeoL7OvghQ 5 1    1541      0   1.1mb   1.1mb
green  open wazuh-alerts-3.x-2019.07.30      2iKEcKN0Q_ywS6vJ-eltgg 3 0  247346      0 130.4mb 130.4mb
yellow open wazuh-alerts-3.x-2019.05.29      0Y7ekzROQUm8kC9MyjKGnQ 5 1 1049683      0 574.2mb 574.2mb
green  open wazuh-monitoring-3.x-2019.04.08  LqQbonVcQoqC2U8cNjMbrw 2 0    1512      0 627.5kb 627.5kb
yellow open wazuh-monitoring-3.x-2018.06.25  6KJfFphfQL2gEnXzJ-KBag 5 1    1704      0 992.8kb 992.8kb
green  open wazuh-alerts-3.x-2018.02.21      Q-4tpcsfQM2sPHgzeP7Bcw 1 0  279623      0 150.9mb 150.9mb
yellow open wazuh-monitoring-3.x-2018.11.26  CmJU66L3TUGgx_ssiT9S0g 5 1    1680      0   1.2mb   1.2mb
yellow open wazuh-monitoring-3.x-2018.06.16  6j5niZgATxmpwAVbXF4czA 5 1    1704      0 989.1kb 989.1kb
yellow open wazuh-monitoring-3.x-2018.06.10  3S3eJroTR_-XT_CoqP6EuA 5 1    1680      0 967.5kb 967.5kb
green  open wazuh-monitoring-3.x-2019.04.14  ykZtqo4QTWik8UrCpIJ0bQ 2 0    1512      0 625.7kb 625.7kb
yellow open wazuh-alerts-3.x-2018.10.06      _u-IurFPQuaTQ76kZS2A0Q 5 1  763204      0 472.8mb 472.8mb
yellow open wazuh-monitoring-3.x-2018.11.20  uvsdWrG-Rbq6TjyANg4fvw 5 1    1680      0   1.3mb   1.3mb
green  open .monitoring-kibana-6-2019.08.01  ZJtq4Xt4Rzq3By2yIiHuAw 1 0    8640      0     2mb     2mb
green  open wazuh-alerts-3.x-2018.02.14      qze-wwp7TkqMSD0aOxwr7Q 1 0  313301      0 162.5mb 162.5mb
green  open wazuh-alerts-3.x-2018.03.23      dBAKEKB2S8K6JHUCD67s0g 1 0  261209      0   134mb   134mb
green  open wazuh-alerts-3.x-2019.07.10      HMzy6l2nQ5O33ewAOvQpSg 3 0 1189283      0 615.9mb 615.9mb
green  open .monitoring-kibana-6-2019.07.30  ZAZGy0NMTkSWQzDGaewHbA 1 0    8639      0     2mb     2mb
green  open wazuh-monitoring-3.x-2019.05.25  weRq_BR9T9WqNvoMdFt3aQ 2 0    1512      0   625kb   625kb
yellow open wazuh-alerts-3.x-2018.10.26      M4O32WElQGKGixJAuubE2A 5 1  959656      0 642.1mb 642.1mb
green  open .monitoring-es-6-2019.07.31      2ZKc98-6SsmRS6MdgnDFGg 1 0 9637463  69879   4.3gb   4.3gb
yellow open wazuh-monitoring-3.x-2018.12.14  gHMdDvxlQC-uYFSWDB6B9Q 5 1    1680      0   1.2mb   1.2mb
green  open wazuh-alerts-3.x-2018.06.17      rDw48BO4T1y2T5ENFioA8g 1 0  196840      0 119.2mb 119.2mb
green  open wazuh-monitoring-3.x-2019.05.08  85GKDXDyQN-Oup6-mmTGSA 2 0    1512      0 626.3kb 626.3kb
green  open wazuh-monitoring-3.x-2019.05.27  1osvPdvpRG6aMEZOX4J7Yg 2 0    1512      0   624kb   624kb
green  open wazuh-monitoring-3.x-2019.07.06  1d8canSqTNydZNrlNx-Ojw 2 0    1512      0 631.9kb 631.9kb
yellow open wazuh-alerts-3.x-2019.02.13      OklOItmKQACQdgCDGX1H6A 5 1 1366245      0 873.3mb 873.3mb
yellow open wazuh-monitoring-3.x-2018.12.19  -BBwMZjHSHuO1zQZp0FyvA 5 1    1680      0   1.3mb   1.3mb
yellow open wazuh-monitoring-3.x-2018.08.16  nDJxUojfS1SDLKlpRiwxrw 5 1    1184      0   1.2mb   1.2mb
yellow open wazuh-monitoring-3.x-2018.11.17  nXlYMcJiSlyN6U3Kovpl3g 5 1    1680      0   1.3mb   1.3mb
green  open wazuh-alerts-3.x-2019.07.20      CS-nv5OCQ7KQvU_AsCmJqg 3 0  803123      0 414.8mb 414.8mb
yellow open wazuh-alerts-3.x-2019.04.13      c2Io4LIvT0mkd5VaFT3Kaw 5 1 1260667      0 682.2mb 682.2mb
green  open wazuh-alerts-3.x-2019.08.02      DZmdATwHTjiL7rCkrxfEEQ 3 0 1032341      0   531mb   531mb
yellow open wazuh-alerts-3.x-2019.05.22      nutu5FN6QEimNQ1Y-MnelA 5 1 1159441      0 645.9mb 645.9mb
yellow open wazuh-monitoring-3.x-2018.10.04  E00foZ5JRGmjR7q3We1a2A 5 1    1608      0   1.2mb   1.2mb
green  open wazuh-alerts-3.x-2018.03.28      rVwwXFLQSCuJXwPQAQOXWQ 1 0  308953      0 155.9mb 155.9mb
green  open wazuh-alerts-3.x-2018.07.06      NrId1c8kQ2eEIA2l1UuixQ 1 0  274560      0 216.1mb 216.1mb
green  open wazuh-monitoring-3.x-2019.05.16  MRQWSAajR_KX4ygHDkYuUg 2 0    1512      0   628kb   628kb
yellow open wazuh-alerts-3.x-2019.03.21      oDZKxq-HR9uXmV_xXpqd2A 5 1 1613436      0 880.9mb 880.9mb
yellow open wazuh-monitoring-3.x-2018.07.04  iVX5l21cR1qqdvlI2KogtQ 5 1    1728      0 992.8kb 992.8kb
yellow open wazuh-monitoring-3.x-2018.10.24  6HbS_8xXTwezGK7jnPpDow 5 1    1656      0   1.2mb   1.2mb
green  open wazuh-alerts-3.x-2018.03.18      0KNldSqlRcOYHY2RJNwv-A 1 0   84450      0  46.4mb  46.4mb
green  open .monitoring-kibana-6-2019.08.05  9zLfB-CKRdC4XrFrVb8S6w 1 0    8640      0   1.9mb   1.9mb
green  open wazuh-alerts-3.x-2018.06.03      WB81pBk5T-Gr-dd-bbfu2A 1 0  209212      0 138.5mb 138.5mb
yellow open wazuh-alerts-3.x-2018.10.22      g0Zh8fUORP21Dr1VXNLTLA 5 1 1035000      0 688.5mb 688.5mb
green  open wazuh-monitoring-3.x-2019.05.14  D11DuM79SZiPUyXbl1gFQQ 2 0    1512      0 627.2kb 627.2kb
yellow open wazuh-alerts-3.x-2018.12.27      hJk7KBq_TRG_pRD9NbEs2g 5 1 1134609      0 752.2mb 752.2mb
green  open wazuh-alerts-3.x-2018.02.07      7WtOIsIHTg2l-NzTizC8oA 1 0  329163      0 177.7mb 177.7mb
yellow open wazuh-monitoring-3.x-2018.05.15  I6_OC1tQRtCtWMk0VQackg 5 1   10080      0   2.8mb   2.8mb
green  open wazuh-monitoring-3.x-2019.05.02  WqcrJoC-QeS9Aj_LygIi-w 2 0    1512      0 628.6kb 628.6kb
green  open wazuh-alerts-3.x-2018.03.08      GfEel9svR_uMVlHUcbaJKA 1 0  324254      0 168.7mb 168.7mb
green  open wazuh-alerts-3.x-2018.07.29      a75TmTwwRdijIuOCLRFcGw 1 0  336120      0   318mb   318mb
yellow open wazuh-alerts-3.x-2018.09.15      DTMk-SXmR8W9Syxi0pjv1g 5 1  795648      0 534.6mb 534.6mb
yellow open wazuh-monitoring-3.x-2018.06.28  neY5lx_TQaOi3vQyYNZqpw 5 1    1704      0 985.5kb 985.5kb
yellow open wazuh-alerts-3.x-2018.08.24      eI_xWdf9SoSk92jY3Tc4pQ 5 1  358048      0 279.6mb 279.6mb
yellow open wazuh-alerts-3.x-2018.12.21      Raoax15hSiqDjF1930RupQ 5 1 1125810      0 767.9mb 767.9mb
yellow open wazuh-alerts-3.x-2018.10.09      WBWf7-UyTd21GGjtfLbhEQ 5 1 1163667      0   789mb   789mb
green  open wazuh-alerts-3.x-2018.02.22      XCc4ZLOARp-jyxYIWipccw 1 0  292532      0 151.3mb 151.3mb
green  open wazuh-alerts-3.x-2018.07.30      Dmo8NU5yTl6XEWbplo_tpw 1 0  571682      0 479.6mb 479.6mb
green  open wazuh-monitoring-3.x-2019.02.18  tcONsjavQBK64FNgiIQZbQ 2 0    1512      0 631.1kb 631.1kb
green  open wazuh-monitoring-3.x-2019.05.26  -u6JmbJHQN6GQ5UdQ6IYvw 2 0    1512      0 630.3kb 630.3kb
yellow open wazuh-alerts-3.x-2019.07.04      c51SJa4NRzyjY-hl4YwOdw 5 1 1168473      0 629.8mb 629.8mb
yellow open wazuh-alerts-3.x-2019.05.27      atqfQszzRvCuAqlP-8LFLQ 5 1 1282201      0 710.6mb 710.6mb
green  open wazuh-monitoring-3.x-2019.02.23  oMb107g3S1SmkPK6Ys_BTA 2 0    1512      0 627.3kb 627.3kb
green  open wazuh-monitoring-3.x-2019.05.11  Xr8Fakg1T22QTkTgcSz7Vg 2 0    1512      0 628.4kb 628.4kb
green  open wazuh-alerts-3.x-2018.05.18      ECSq3JQMTt2i2jzIiaj1jw 1 0  344297      0 233.4mb 233.4mb
yellow open wazuh-alerts-3.x-2019.01.28      irb6pQB4Sryhgy6sQKkZEA 5 1 1092528      0 665.6mb 665.6mb
yellow open wazuh-alerts-3.x-2019.04.22      yMHYYPbWTf2pJqgbY99OSg 5 1 1281605      0 715.4mb 715.4mb
yellow open wazuh-monitoring-3.x-2018.09.25  LVtbb5Z0ScGQJL9HVmkqiQ 5 1    1608      0   1.2mb   1.2mb
yellow open wazuh-monitoring-3.x-2018.09.24  quyRwH3zQK2yS9brSqFSFQ 5 1    1553      0   1.1mb   1.1mb
yellow open wazuh-monitoring-3.x-2018.12.17  JM2CXX-ISpuBAs4fBLCrCQ 5 1    1610      0   1.1mb   1.1mb
yellow open wazuh-alerts-3.x-2019.05.12      pH6Tn4zIQNuQQh_dfBNLCw 5 1  981697      0 706.8mb 706.8mb
yellow open wazuh-alerts-3.x-2019.06.29      6v8Qgto0Q3C_1OZwCasE-w 5 1  819109      0 436.1mb 436.1mb
green  open wazuh-alerts-3.x-2018.07.22      jterSuBOQ3-NYDAtjgck_A 1 0  298051      0 254.1mb 254.1mb
yellow open wazuh-monitoring-3.x-2018.11.21  1wJ5a88dQaK2vMRfjze7nA 5 1    1610      0   1.1mb   1.1mb
green  open wazuh-monitoring-3.x-2019.07.05  Zy0qACFYSd2F7pMR3WYb8A 2 0    1512      0 631.2kb 631.2kb
yellow open wazuh-monitoring-3.x-2018.08.26  AQhOGg6ERiKoZ0L7ZXAksw 5 1    1776      0   1.3mb   1.3mb
yellow open wazuh-monitoring-3.x-2018.06.05  qr4Qvd4_TCSAV7BEfr7XIw 5 1    1680      0 975.8kb 975.8kb
yellow open wazuh-monitoring-3.x-2018.06.02  Ki8VMtBZQ9GKjJAQenJY0w 5 1   10010      0   2.7mb   2.7mb
green  open wazuh-alerts-3.x-2018.03.04      gfkNRDUaTYSJU0Ayv8ujYg 1 0   85816      0  45.5mb  45.5mb
green  open wazuh-monitoring-3.x-2019.06.17  64Wx1ON8RvmvpEGGW4JeTg 2 0    1512      0 630.7kb 630.7kb
green  open wazuh-monitoring-3.x-2019.03.14  XEZRyg5eSsixb-R-4TkLMw 2 0    1512      0 630.9kb 630.9kb
yellow open wazuh-alerts-3.x-2018.11.19      IU4-fUQyS_y1hp0UAu0rGA 5 1 1144419      0 786.4mb 786.4mb
green  open wazuh-monitoring-3.x-2019.07.17  xUeARF-uRLKiNQTYMVAFEA 2 0    5952      0   1.6mb   1.6mb
green  open wazuh-alerts-3.x-2018.03.01      pQvlDC-6RpGqIcig2iLfuA 1 0  299131      0 151.5mb 151.5mb
yellow open wazuh-monitoring-3.x-2019.01.17  daI4AMNVStWLfLtii6YsjA 5 1    1680      0   1.2mb   1.2mb
green  open wazuh-monitoring-3.x-2019.04.02  6liUY88UTWup66wdDmJlKw 2 0    1512      0 627.2kb 627.2kb
green  open wazuh-monitoring-3.x-2019.07.11  rtbNk53sQ2alyUVb0MGWVw 2 0    5952      0   1.6mb   1.6mb
yellow open wazuh-monitoring-3.x-2018.09.01  SOj9X5qJSnSnNZXTPQ-LSA 5 1    1776      0   1.3mb   1.3mb
green  open wazuh-alerts-3.x-2018.05.15      PxhBuXq6Qz-2p6SBojRn9Q 1 0  481320      0   317mb   317mb
yellow open wazuh-monitoring-3.x-2018.06.09  PAJ0MC0pTtyXDuIWvOAF_w 5 1    1680      0 968.5kb 968.5kb
green  open wazuh-alerts-3.x-2019.07.15      _rdi3DtQQqyjsxgw9PCelA 3 0 1175174      0 610.4mb 610.4mb
green  open wazuh-monitoring-3.x-2019.04.19  -o_6LofASTCg2dzKv7NZ1g 2 0    1512      0 627.7kb 627.7kb
green  open wazuh-alerts-3.x-2018.04.02      dXDP0V_RSTKhekx_cEDzNA 1 0  163319      0  78.8mb  78.8mb
yellow open wazuh-monitoring-3.x-2018.10.23  3D0hePMwR8SHN7EJljAS5A 5 1    1656      0   1.2mb   1.2mb
green  open wazuh-alerts-3.x-2019.08.06      zLrnU8wsQQSo2hIqklGknQ 3 0  198544      0 105.8mb 105.8mb
yellow open wazuh-alerts-3.x-2019.03.17      vITzLrALTae5zX5cdJRldA 5 1 1192479      0 644.8mb 644.8mb
green  open wazuh-alerts-3.x-2018.06.29      NC-IzDyDSjG8v0yjOcbN_Q 1 0  442283      0 275.1mb 275.1mb
green  open wazuh-alerts-3.x-2018.05.03      fGTAtMkaRKqcvc5y9NQatQ 1 0  355072      0 201.5mb 201.5mb
yellow open wazuh-monitoring-3.x-2018.09.23  rOF481y7RHqEuVB9NZ6RGg 5 1    1632      0   1.2mb   1.2mb
yellow open wazuh-alerts-3.x-2018.09.27      muE-hssUQmml5pcrHc-pOw 5 1  850572      0 584.4mb 584.4mb
yellow open wazuh-monitoring-3.x-2018.07.03  FoAaiVGEQmSdKLpS_hg72w 5 1    1717      0 995.8kb 995.8kb
green  open wazuh-monitoring-3.x-2019.07.08  E5uJC-nCTEemXCMNBf0M8A 2 0    3668      0     1mb     1mb
green  open wazuh-alerts-3.x-2018.01.28      aN2FSsXHQ4yX037Xk2-JOQ 1 0  186590      0  84.5mb  84.5mb
green  open wazuh-monitoring-3.x-2019.05.06  rFtH657VSZymaIGugWdE7Q 2 0    1512      0 627.2kb 627.2kb
yellow open wazuh-monitoring-3.x-2018.10.06  OzC1Dc14TN6RUJ3C51o9AQ 5 1    1608      0   1.2mb   1.2mb
yellow open wazuh-alerts-3.x-2019.04.27      kxCkZa3wS8SizoFd_2OEcA 5 1 1283287      0 711.7mb 711.7mb
yellow open wazuh-monitoring-3.x-2018.12.28  1NIRrj2AToGB78Gv_9nWeA 5 1    1680      0   1.2mb   1.2mb
green  open wazuh-alerts-3.x-2018.04.10      U4k7EsL6Ru64epI5iqqQKQ 1 0  310859      0 152.8mb 152.8mb
green  open wazuh-alerts-3.x-2018.08.14      gCyy8U7TTWuNibjxGi9GPQ 1 0  228074      0 168.6mb 168.6mb
green  open .kibana_1                        0BinhUXmTnalrNWbjktyOQ 1 0      66      0    79kb    79kb
yellow open wazuh-monitoring-3.x-2018.06.18  WKjyGocgR0GMxm2ZiyDa5g 5 1    1704      0 988.9kb 988.9kb
yellow open wazuh-alerts-3.x-2019.02.20      vObG_6fbQVSxbRuuPI7D5w 5 1 1441250      0 911.1mb 911.1mb
yellow open wazuh-monitoring-3.x-2018.12.09  Jk9NPkfORdawOTqRjPUAmQ 5 1    1680      0   1.2mb   1.2mb
yellow open wazuh-monitoring-3.x-2018.08.21  mhUiysOLTg-PZa6oCtFTFQ 5 1    1776      0   1.3mb   1.3mb
yellow open wazuh-alerts-3.x-2018.09.16      -f-6MaA-TvS7lZmjdD5jgQ 5 1  793097      0 535.6mb 535.6mb
yellow open wazuh-monitoring-3.x-2018.07.02  3ixcer4dSSmz16j-9pSyhg 5 1    1704      0 995.9kb 995.9kb
green  open wazuh-monitoring-3.x-2019.04.07  exMuOcz5TsW7peJSPVGWkA 2 0    1512      0 626.8kb 626.8kb
green  open wazuh-monitoring-3.x-2019.07.03  pJf6P_9ORdyv6WP5OKhtQw 2 0    1512      0 629.9kb 629.9kb
yellow open wazuh-monitoring-3.x-2018.09.16  RKGipzouQ8-MjjD-H1FtVg 5 1    1748      0   1.2mb   1.2mb
green  open wazuh-alerts-3.x-2018.04.24      vDoLc6NYQ_SpApahJhKTiQ 1 0  353496      0 176.5mb 176.5mb
green  open wazuh-monitoring-3.x-2019.03.22  YrD8Di2PTvSlkD15b49ODA 2 0    1512      0 631.5kb 631.5kb
yellow open wazuh-monitoring-3.x-2018.06.23  Zag7fd0pQcu9VxsTbcsPVw 5 1    1704      0 994.2kb 994.2kb
yellow open wazuh-alerts-3.x-2018.09.05      Gee6PVEyQd-M1bgGNVPoZw 5 1  759873      0 633.1mb 633.1mb
green  open wazuh-alerts-3.x-2018.03.16      wkr3PZwlSKa3X6pAG1SDpw 1 0  277836      0 148.1mb 148.1mb
green  open wazuh-alerts-3.x-2018.04.30      8Ab8j35cRXKVvJqfiedVTQ 1 0  165506      0  89.2mb  89.2mb
yellow open wazuh-alerts-3.x-2018.09.19      RXhHbf4tSHWB3BqqyLOGeA 5 1 1143241      0 771.4mb 771.4mb
yellow open wazuh-monitoring-3.x-2018.12.01  eMng351wQmWbSEUxn_MWNg 5 1    1680      0   1.2mb   1.2mb
yellow open wazuh-monitoring-3.x-2018.11.11  l8_5QwpiQXqpHLIIrRyFDA 5 1    1680      0   1.3mb   1.3mb
green  open wazuh-monitoring-3.x-2019.07.16  4jqKqSOuQO2DkUd_EEvDkw 2 0    5952      0   1.6mb   1.6mb
yellow open wazuh-alerts-3.x-2018.10.05      dc7JAATfSR-teU1VH_VEkA 5 1  862048      0 550.2mb 550.2mb
yellow open wazuh-alerts-3.x-2019.01.08      rFcY5rcdR3CRRAzvY4Ow0A 5 1 1169996      0 801.1mb 801.1mb
green  open wazuh-alerts-3.x-2018.07.20      Kx2nSf9JTCWUsugbj4VPyg 1 0  507646      0 410.1mb 410.1mb
green  open wazuh-alerts-3.x-2018.02.28      ztHcx01nQq27oJi7_P3hsQ 1 0  311719      0 155.4mb 155.4mb
yellow open wazuh-monitoring-3.x-2018.05.24  DkFF15F_QXihjswWkh5SEA 5 1   10010      0   2.8mb   2.8mb
yellow open wazuh-alerts-3.x-2019.03.02      d9iiEm6IS6GPPCvK2YqksA 5 1 1265763      0 687.6mb 687.6mb
green  open wazuh-alerts-3.x-2018.02.25      40TUQ64IRhuSduxYY2O8Ew 1 0  175028      0  83.8mb  83.8mb
green  open wazuh-alerts-3.x-2018.06.05      W7dvmXJ_SCeE3mRTFGkCmg 1 0  937010      0 555.6mb 555.6mb
green  open .monitoring-es-6-2019.08.02      uIyXxCbyTRWNVtjEzDFZDw 1 0 9642657  82170   4.3gb   4.3gb
yellow open wazuh-alerts-3.x-2019.01.15      BjEK_kUnQdmq-FF059-JGA 5 1 1174826      0 794.2mb 794.2mb
yellow open wazuh-monitoring-3.x-2018.11.13  0MdwigyDTtKLXC1ipdkiBw 5 1    1680      0   1.3mb   1.3mb
yellow open wazuh-alerts-3.x-2019.01.10      T5wwHT0kRaaWwl3XsgXXlw 5 1 1227625      0 852.7mb 852.7mb
yellow open wazuh-monitoring-3.x-2018.07.05  NzXR3TCKRcatzlZSj5h_PQ 5 1    1728      0 994.5kb 994.5kb
yellow open wazuh-alerts-3.x-2018.10.18      WEtGQHMlRxS0-bWhWjwGdw 5 1 1067286      0 715.5mb 715.5mb
yellow open wazuh-alerts-3.x-2019.03.22      OWMEIXorQmyBm95u6kXSUg 5 1 1550851      0 842.6mb 842.6mb
yellow open wazuh-monitoring-3.x-2018.12.23  TE1mxoSZRm2KjCZATfTTsw 5 1    1680      0   1.2mb   1.2mb
yellow open wazuh-monitoring-3.x-2019.01.05  n47sR2ULTzuSzqK6jp5yIQ 5 1    1680      0   1.2mb   1.2mb
green  open wazuh-alerts-3.x-2018.06.24      9BPK3nO7SbCLWLDRWFeo4A 1 0  256657      0 188.3mb 188.3mb
yellow open wazuh-monitoring-3.x-2018.06.12  CRIeY-00RWKhIEqbJH1MkQ 5 1    1704      0 982.9kb 982.9kb
yellow open wazuh-monitoring-3.x-2018.12.07  PagxYeG7SbSq_kWRxa1nuQ 5 1    1680      0   1.2mb   1.2mb
yellow open wazuh-alerts-3.x-2018.09.09      -PaQ-KqLSPihVBbGaALqig 5 1  722680      0 461.6mb 461.6mb
green  open wazuh-monitoring-3.x-2019.05.01  qZUX5m31R6qk79vfhnUW6w 2 0    1449      0   571kb   571kb
yellow open wazuh-alerts-3.x-2018.09.06      wWqC1SUYTsWXAVC7SaBhRg 5 1  610702      0 469.5mb 469.5mb
green  open wazuh-alerts-3.x-2019.07.25      LDi510WOSpyLZVDsaRLpVw 3 0 1146057      0 586.4mb 586.4mb
yellow open wazuh-alerts-3.x-2019.06.11      nFeU6qiRRaSmGKkkkYCb9g 5 1 1207826      0 641.9mb 641.9mb
green  open wazuh-alerts-3.x-2018.07.03      -q6Qqoc9Tj2CTgoxw3Blrg 1 0  559539      0 391.8mb 391.8mb
green  open wazuh-alerts-3.x-2018.06.15      Y9W_fSdFShybpX3fxwA92Q 1 0  358070      0 241.2mb 241.2mb
green  open wazuh-alerts-3.x-2018.02.01      9VsAZckbTdigfk-vut3ITg 1 0  327802      0 165.4mb 165.4mb
yellow open wazuh-monitoring-3.x-2018.10.31  kMZQ1DK3SV2z18t6kX2jmA 5 1    1680      0   1.3mb   1.3mb
yellow open wazuh-monitoring-3.x-2019.01.07  8glJ66x2QuO7LwvD95JSSw 5 1    1680      0   1.2mb   1.2mb
green  open wazuh-alerts-3.x-2018.03.25      n98wE3sGQnOGTtIxEyKmkw 1 0  156246      0  75.4mb  75.4mb
green  open wazuh-monitoring-3.x-2019.07.29  9_zIa2itRSegHiFR20l8CQ 2 0    5952      0   1.3mb   1.3mb
yellow open wazuh-alerts-3.x-2019.02.15      lcX0mPjCQpqSCp7rF24_DQ 5 1 1227497      0 763.4mb 763.4mb
green  open wazuh-alerts-3.x-2018.03.02      6xNURmNIS-KkjF0YqAi7uA 1 0  288035      0 145.9mb 145.9mb
yellow open wazuh-monitoring-3.x-2018.05.17  8aQXX8mNSi-ymH3yEyObUQ 5 1   10010      0   2.8mb   2.8mb
green  open wazuh-monitoring-3.x-2019.06.15  YDJQ1MD0RAG1IuwGVJD64A 2 0    1512      0 628.1kb 628.1kb
green  open wazuh-monitoring-3.x-2019.02.15  v2ajU9BnR4uahJVhg7Os_Q 2 0    1512      0 633.6kb 633.6kb
yellow open wazuh-alerts-3.x-2018.12.02      6KCgn9HYShqDT_tkGD7bDQ 5 1  865132      0 562.6mb 562.6mb
yellow open wazuh-monitoring-3.x-2018.09.27  CP64R4B3Q8GlO2SP2n_kYg 5 1    1608      0   1.2mb   1.2mb
yellow open wazuh-monitoring-3.x-2018.09.14  Vgomd9bMTtC460v7SbE17Q 5 1    1824      0   1.3mb   1.3mb
yellow open wazuh-monitoring-3.x-2018.09.12  5l2GFowhSK6xGZb4gaurRg 5 1    1824      0   1.3mb   1.3mb
yellow open wazuh-alerts-3.x-2019.03.08      nHvuc-O5RW2sTCgAGPL1hQ 5 1 1618668      0 909.1mb 909.1mb
green  open wazuh-alerts-3.x-2018.02.03      zhVrRf2lQxmFtvyC0ZUKZA 1 0  182471      0  82.5mb  82.5mb
green  open wazuh-monitoring-3.x-2019.03.02  ez12ZUs2RleyrjN90ZVq6w 2 0    1488      0 625.6kb 625.6kb
green  open wazuh-monitoring-3.x-2019.01.25  1JgYovAYTEWWZII1KwAlyQ 2 0    1704      0 695.9kb 695.9kb
yellow open wazuh-alerts-3.x-2019.03.10      3QlxsM57QJevbJRdU1rMDA 5 1 1347691      0 764.8mb 764.8mb
green  open wazuh-alerts-3.x-2018.05.27      3eICIuceTB-snQIZ51lz5w 1 0  196779      0 129.8mb 129.8mb
green  open wazuh-monitoring-3.x-2019.02.05  -YBogqeeSuygACqkMHK6rQ 2 0    1632      0 676.2kb 676.2kb
yellow open wazuh-monitoring-3.x-2018.04.28  txQmb9TiQOeVgTmjdnhYzw 5 1   10080      0   2.8mb   2.8mb
green  open wazuh-alerts-3.x-2018.06.20      lOw4bOdPQj2ZqjjTTt83Tg 1 0  484424      0 279.6mb 279.6mb
yellow open wazuh-monitoring-3.x-2018.08.29  8zC3oXNDSkuvxd4-qk1XDw 5 1    1776      0   1.3mb   1.3mb
yellow open wazuh-monitoring-3.x-2018.06.20  j8Igil2SQce86b23xJDcUQ 5 1    1704      0 991.5kb 991.5kb
yellow open wazuh-alerts-3.x-2019.02.16      sFyJ8ia7SuqVCtzjJPvvbg 5 1  986008      0 574.7mb 574.7mb
green  open wazuh-alerts-3.x-2018.06.19      z4dFSapGSY-1coezB9J0hQ 1 0  493906      0   282mb   282mb
yellow open wazuh-alerts-3.x-2018.09.30      r46TaPj_TJmJXt_2EU9x-g 5 1  753399      0 442.2mb 442.2mb
yellow open wazuh-alerts-3.x-2019.04.19      QsbwCCDqQO-sEr_H2Pf39Q 5 1 1554882      0 876.5mb 876.5mb
green  open wazuh-monitoring-3.x-2019.06.23  JqwVLJIaT-Sd_uG1kaV5iA 2 0    1512      0 629.3kb 629.3kb
green  open wazuh-monitoring-3.x-2019.03.27  Y5fT_njFRbqFWCTwFsuY8A 2 0    1512      0 626.9kb 626.9kb
yellow open wazuh-monitoring-3.x-2018.06.26  3oQo6w0PRMS-j0g-Yt0v9w 5 1    1704      0 995.2kb 995.2kb
green  open wazuh-alerts-3.x-2018.06.26      6B_JkKITTjq80DqNcFq3pg 1 0  504135      0 325.1mb 325.1mb
yellow open wazuh-monitoring-3.x-2018.11.14  6f6Q6XPrQJWm9GE_EMf97A 5 1    1680      0   1.3mb   1.3mb
green  open wazuh-alerts-3.x-2018.02.09      T-bYE4RlQEidZmTixFQWNw 1 0  295232      0 151.9mb 151.9mb
yellow open wazuh-alerts-3.x-2018.10.11      UkSseuBXTYmgA5nQjaybTw 5 1 1079370      0 714.6mb 714.6mb
yellow open wazuh-monitoring-3.x-2018.06.01  HNVAW_EfQdKz8UzM87xYgw 5 1   10080      0   2.8mb   2.8mb
green  open wazuh-monitoring-3.x-2019.02.19  pFVXDLvGQ-amxIlbjasc9Q 2 0    1512      0 632.6kb 632.6kb
yellow open wazuh-alerts-3.x-2018.09.29      DEHqZcWQSbeaND2DweN2Rw 5 1  765589      0 454.2mb 454.2mb
yellow open wazuh-alerts-3.x-2019.06.19      D-y4FvHER_aVu6WzoV5deg 5 1 1194892      0 629.2mb 629.2mb
yellow open wazuh-alerts-3.x-2018.12.15      vcafRoccQzik__zccY33IQ 5 1  883565      0 552.7mb 552.7mb
yellow open wazuh-alerts-3.x-2018.10.30      EdlDN--7THi2firTCPnyxg 5 1 1152605      0 797.4mb 797.4mb
green  open wazuh-monitoring-3.x-2019.04.20  ulzq2GhTTTOBwMUHD9GgWA 2 0    1512      0 629.2kb 629.2kb
yellow open wazuh-alerts-3.x-2019.01.21      HgWtssrOS6i2t-Wf_yAtwA 5 1 1156220      0 800.2mb 800.2mb
yellow open wazuh-monitoring-3.x-2018.06.29  REhYnNtYQaKnQLeaGUFGHQ 5 1    1704      0 991.9kb 991.9kb
yellow open wazuh-monitoring-3.x-2018.11.25  tS_N9wTSSFuyL4GWrIDNfA 5 1    1680      0   1.2mb   1.2mb
yellow open wazuh-monitoring-3.x-2018.11.08  11vzSnHXQGCuf3xxmX-9vQ 5 1    1680      0   1.3mb   1.3mb
green  open wazuh-alerts-3.x-2018.08.12      yTQjNV7LSxODTeebF8QHbQ 1 0  203965      0 144.2mb 144.2mb
yellow open wazuh-monitoring-3.x-2019.01.16  UgnKuRkITRisxbSnyWwopQ 5 1    1680      0   1.2mb   1.2mb
yellow open wazuh-alerts-3.x-2018.10.12      V2gniCuVQWqTNd-DTSYKhQ 5 1  971379      0 632.1mb 632.1mb
yellow open wazuh-monitoring-3.x-2018.11.29  ReFZgmWtSOegKE9oP_Ivbw 5 1    1680      0   1.3mb   1.3mb
yellow open wazuh-monitoring-3.x-2018.12.04  4zb07cCwSSWBSbj9p-_FmQ 5 1    1680      0   1.2mb   1.2mb
yellow open wazuh-monitoring-3.x-2019.01.14  mAwJqwH3S3qQ0TV1TTqkmQ 5 1    1680      0   1.2mb   1.2mb
green  open wazuh-monitoring-3.x-2019.02.24  tu4aPdyHQQqm7AM53Z9Fzg 2 0    1512      0 630.8kb 630.8kb
green  open wazuh-monitoring-3.x-2019.07.09  KrJ39ZKXRKyR2ocJwHospQ 2 0    5952      0   1.6mb   1.6mb
green  open wazuh-monitoring-3.x-2019.07.24  HbIYdtaMROi-WNbgUFfLEA 2 0    5952      0   1.6mb   1.6mb
yellow open wazuh-alerts-3.x-2019.06.27      0nAITNE2QoaLNFeGpo3N4g 5 1 1179111      0 618.6mb 618.6mb
yellow open wazuh-monitoring-3.x-2018.11.03  ssNYoGXnRgKLprQcuLRJIA 5 1    1680      0   1.3mb   1.3mb
green  open wazuh-alerts-3.x-2019.07.09      XbvMLTvJSiq6nlujIHnH-Q 3 0 1215381      0 630.2mb 630.2mb
yellow open wazuh-alerts-3.x-2019.06.14      rpdRbmAtRAWEpZ0zaIdiZQ 5 1 1136058      0 603.9mb 603.9mb
yellow open wazuh-alerts-3.x-2019.04.10      CSpybg8DTbmCQc_DjcVbPA 5 1 1729755      0 958.4mb 958.4mb
green  open wazuh-alerts-3.x-2018.06.06      tHspBQ5XT6KGwZGA5xBIiw 1 0  557218      0 377.4mb 377.4mb
green  open wazuh-monitoring-3.x-2019.06.03  -Z8UVxfWRTqlwZn6Mo2j7w 2 0    1512      0 630.7kb 630.7kb
yellow open wazuh-monitoring-3.x-2018.11.02  V2E6XZitQcCR95ZbYwh6Nw 5 1    1680      0   1.3mb   1.3mb
green  open .monitoring-es-6-2019.08.06      u3j62jn0RS24spDb4HP5qw 1 0 2399535  63420     1gb     1gb
yellow open wazuh-alerts-3.x-2018.10.02      rsr0ycmUT-KjsN3duzMLnA 5 1 1118815      0 705.7mb 705.7mb
yellow open wazuh-monitoring-3.x-2018.09.21  WEwKkUkURi6Eh15qFDAIRw 5 1    1640      0   1.2mb   1.2mb
green  open wazuh-alerts-3.x-2018.06.21      FWU30HgKS_KzfPWYbQ6p2w 1 0  507996      0 325.2mb 325.2mb
green  open wazuh-monitoring-3.x-2019.07.28  lZI4cQszQ46nw30frcWMEg 2 0    5952      0   1.5mb   1.5mb
yellow open wazuh-monitoring-3.x-2018.05.02  MQnDkRhcT22RdpwZbCXHMA 5 1   10080      0   2.8mb   2.8mb
green  open wazuh-alerts-3.x-2018.04.22      ZkPI82DgRnudu2t4MghAzg 1 0  168611      0  80.4mb  80.4mb
green  open wazuh-alerts-3.x-2018.04.15      NH0kVME_QB6vt8c6PZj1Ng 1 0  162401      0  75.9mb  75.9mb
green  open wazuh-alerts-3.x-2018.03.24      KlXurrVuTp62yu2diM7rLg 1 0  162197      0  78.3mb  78.3mb
green  open wazuh-alerts-3.x-2018.07.16      lBhePunrRzWR3urnp8S_lA 1 0  563923      0 432.6mb 432.6mb
green  open wazuh-monitoring-3.x-2019.06.01  W0SnR4r5SrqBCYK-07TRRA 2 0    1512      0 632.2kb 632.2kb
yellow open wazuh-monitoring-3.x-2019.01.19  yJXYR7MSQhCkPzIYoQRolA 5 1    1680      0   1.2mb   1.2mb
yellow open wazuh-alerts-3.x-2019.06.13      Y2NDp1E4Sk2DhlGLUbWHkA 5 1 1161358      0 624.5mb 624.5mb
yellow open wazuh-alerts-3.x-2019.05.21      s4BDvI6XRJGWlP3phtZDsQ 5 1 1483958      0 852.6mb 852.6mb
yellow open wazuh-monitoring-3.x-2018.06.30  3qacWxyfSwyFDiO4Xmkcow 5 1    1704      0 982.5kb 982.5kb
yellow open wazuh-alerts-3.x-2019.02.28      0eN8AkEATgqciba-GZ4IMg 5 1 1653174      0 926.4mb 926.4mb
green  open wazuh-alerts-3.x-2018.07.15      YrWyS9eKRZ-yR8xhpv9m4w 1 0  241223      0 184.8mb 184.8mb
yellow open wazuh-alerts-3.x-2018.09.07      k7D5gNi3QSOjxOarQHEwRw 5 1  716352      0 512.4mb 512.4mb
green  open wazuh-monitoring-3.x-2019.07.25  jsQSV326SNuMVGoecEMYOg 2 0    5952      0   1.6mb   1.6mb
yellow open wazuh-alerts-3.x-2018.12.19      aXUxQBvsT6OKU6xhvLsl2A 5 1 1239726      0 853.8mb 853.8mb
yellow open wazuh-alerts-3.x-2018.10.29      U_V0qD5cQbaQ6ordGpjCJg 5 1 1048724      0 712.2mb 712.2mb
green  open wazuh-alerts-3.x-2018.05.01      tahEeXEPT6Gf5n0fH_CxRw 1 0  160909      0  84.6mb  84.6mb
green  open wazuh-alerts-3.x-2018.04.13      zMl9QmPQSZWt5qNtHmZDYw 1 0  271022      0 138.7mb 138.7mb
green  open wazuh-alerts-3.x-2018.04.14      Tgdjt13URAGfMaa5VtqaKw 1 0  165361      0  78.7mb  78.7mb
yellow open wazuh-monitoring-3.x-2018.05.23  4anTrM13RvqmgSMy7fcrVA 5 1   10080      0   2.7mb   2.7mb
green  open wazuh-monitoring-3.x-2019.07.21  18emXsmaTUeWQ7GYD6B07A 2 0    5952      0   1.6mb   1.6mb
green  open wazuh-alerts-3.x-2018.04.01      OCZJ4LxPRbqqKSyCHIxysg 1 0  164557      0    79mb    79mb
yellow open wazuh-alerts-3.x-2019.06.03      HAMhPkYXSku_mWttgR-Lkg 5 1 1273846      0 700.7mb 700.7mb
yellow open wazuh-monitoring-3.x-2018.09.10  95AGKlE-TrOV--UWpuq7IA 5 1    1824      0   1.3mb   1.3mb
yellow open wazuh-alerts-3.x-2019.07.06      gFqmEUvjQVuwwTIv4SBAYA 5 1  792229      0 420.2mb 420.2mb
yellow open wazuh-alerts-3.x-2019.02.10      BFuPVqKdSQqrRGneB1YMdw 5 1  934567      0   539mb   539mb
yellow open wazuh-monitoring-3.x-2018.10.02  fuL0z_nGTLmk5pK_LuthHw 5 1    1608      0   1.2mb   1.2mb
yellow open wazuh-alerts-3.x-2019.06.17      YVzE3kHcTaurmvrDdKvCVw 5 1 1271744      0 671.4mb 671.4mb
yellow open wazuh-monitoring-3.x-2018.06.19  O2pKWWgjQfOpdW6NWxsp2g 5 1    1704      0 985.2kb 985.2kb
yellow open wazuh-alerts-3.x-2019.03.16      Y_glntVfSAezDVOpIC5big 5 1 1189054      0 641.1mb 641.1mb
yellow open wazuh-alerts-3.x-2019.05.09      SzrKm7ZIRgCKxrqDSPgEWw 5 1 1365016      0 975.8mb 975.8mb
yellow open wazuh-alerts-3.x-2018.11.16      -fQVZVbQQYG6lxHkxSVbqg 5 1 1110775      0 802.6mb 802.6mb
green  open wazuh-monitoring-3.x-2019.08.02  IkLU15sqRnKd7DsEjvP4Ng 2 0    5952      0   1.6mb   1.6mb
yellow open wazuh-alerts-3.x-2018.08.21      30CUKUh9Sr6RBYudn77AkQ 5 1  411918      0   318mb   318mb
yellow open wazuh-monitoring-3.x-2018.10.11  vgmSQ44qS9-2izFlFopfxQ 5 1    1632      0   1.2mb   1.2mb
green  open wazuh-monitoring-3.x-2019.04.23  96EZAVeYTxOhIkc2tc2R6g 2 0    1512      0 627.3kb 627.3kb
yellow open wazuh-alerts-3.x-2019.01.17      2chu-AfTTPmkAz5HPnoaNg 5 1 1188982      0 828.3mb 828.3mb
green  open wazuh-alerts-3.x-2019.07.22      JKEf6i02T8OMPJl22xt6qg 3 0 1082783      0 565.5mb 565.5mb
yellow open wazuh-monitoring-3.x-2018.06.14  VJd7pORcTk-s2UUJtq7TjQ 5 1    1704      0 990.2kb 990.2kb
yellow open wazuh-monitoring-3.x-2018.10.22  qF1Zax5KSBejWSQK8oUtlQ 5 1    1656      0   1.2mb   1.2mb
yellow open wazuh-monitoring-3.x-2018.05.12  u7XxhIhTTOCUcIeie8g45A 5 1   10080      0   2.8mb   2.8mb
yellow open wazuh-alerts-3.x-2018.09.28      7DrXzTwBTlyytdvhTYeLfQ 5 1  988695      0   638mb   638mb
green  open wazuh-alerts-3.x-2018.06.27      T8KufgPlScS3E0GCiuINrQ 1 0  537633      0 363.8mb 363.8mb
yellow open wazuh-alerts-3.x-2019.03.31      XM6dn-r5Q62aq27mjBAMOg 5 1 1217018      0   645mb   645mb
yellow open wazuh-monitoring-3.x-2018.09.06  nFCd7xvrQHGAZaAsijs1Pw 5 1    1824      0   1.3mb   1.3mb
green  open wazuh-alerts-3.x-2018.08.01      jx8kcITUTJuosE4w7C3EMA 1 0  602133      0 512.5mb 512.5mb
yellow open wazuh-alerts-3.x-2019.02.06      9u5w9OQKSQWmQ1bZRtlEIg 5 1 1168236      0 709.9mb 709.9mb
yellow open wazuh-alerts-3.x-2018.12.16      HEd9pSPvTGSIpGnfjDJo8A 5 1  886442      0   553mb   553mb
yellow open wazuh-alerts-3.x-2019.03.23      Ie3eHdhBQb2CIb6qmPDB8w 5 1 1293197      0 703.8mb 703.8mb
yellow open wazuh-alerts-3.x-2019.03.26      x2xorL8YSkq8riiI2SneKA 5 1 1659304      0 945.5mb 945.5mb
yellow open wazuh-alerts-3.x-2019.03.09      Cj_4PxtgQP-Pn3OheG3qvw 5 1 1350337      0 760.6mb 760.6mb
yellow open wazuh-monitoring-3.x-2018.09.22  fsS2IgpOTKyEpq9yye88Vg 5 1    1632      0   1.2mb   1.2mb
green  open wazuh-alerts-3.x-2019.07.26      dfXVW_JgSI6A2wD8W-LUqw 3 0  861276      0 439.1mb 439.1mb
green  open wazuh-monitoring-3.x-2019.07.13  ItN-6gxWTuKxAvBQRpxV9A 2 0    5890      0   1.5mb   1.5mb
green  open wazuh-alerts-3.x-2018.05.17      Qej66PxHR4GGu1B3d8cyFA 1 0  488936      0 322.1mb 322.1mb
yellow open wazuh-monitoring-3.x-2018.06.21  s3zQYGuDSXm-tweIwdrcjA 5 1    1704      0 993.7kb 993.7kb
green  open wazuh-monitoring-3.x-2019.07.12  JgwAMpcDSA2EH0WqiS2wVQ 2 0    5952      0   1.6mb   1.6mb
yellow open wazuh-alerts-3.x-2019.03.18      0MT5wQtiRFaweRJSs7YACA 5 1 1541525      0 840.1mb 840.1mb
green  open wazuh-alerts-3.x-2018.07.01      2bu9KAxeSlG-vgJrPRKdyw 1 0  198613      0   122mb   122mb
yellow open wazuh-alerts-3.x-2019.04.08      z_iccr2PT9CvwETW9D00jQ 5 1 1624679      0 896.8mb 896.8mb
green  open wazuh-monitoring-3.x-2019.02.17  tMdlNHIRQgue6gSz-OWfeQ 2 0    1512      0 629.7kb 629.7kb
yellow open wazuh-alerts-3.x-2019.06.26      8zjHuDoNScGf1sJ6ctVEzA 5 1 1202727      0 630.4mb 630.4mb
yellow open wazuh-monitoring-3.x-2018.10.10  -PIS8AQ7Q1CeZkzgClxi1g 5 1    1632      0   1.2mb   1.2mb
green  open wazuh-monitoring-3.x-2019.07.19  7zC4SutaRYSkbFS7rBWg7A 2 0    5952      0   1.6mb   1.6mb
yellow open wazuh-monitoring-3.x-2018.08.25  nQYQl8iUQ6KcWjKlahSjSw 5 1    1776      0   1.3mb   1.3mb
green  open wazuh-alerts-3.x-2019.08.01      dI8wCseKSdqOUvC2-doxmA 3 0 1083231      0 576.1mb 576.1mb
green  open wazuh-alerts-3.x-2018.05.22      JV3Wsu6WRBu3XouW9CWlZw 1 0  401209      0 274.5mb 274.5mb
yellow open wazuh-monitoring-3.x-2018.05.10  PpV-b7cXRSGkzxumsv37iw 5 1   10080      0   2.8mb   2.8mb
green  open wazuh-monitoring-3.x-2019.06.10  G-NK7peOS32JEowyClkMXQ 2 0    1512      0 630.6kb 630.6kb
green  open wazuh-alerts-3.x-2018.02.13      2ux81QCBSpOFpL3cpqY0MA 1 0  320087      0 166.2mb 166.2mb
yellow open wazuh-alerts-3.x-2019.04.29      ukn_a9F_Sx2jeTimASitzw 5 1 1587879      0 891.4mb 891.4mb
yellow open wazuh-monitoring-3.x-2019.01.02  IyQwW6D5TkedMbSY9iITJw 5 1    1680      0   1.2mb   1.2mb
yellow open wazuh-monitoring-3.x-2018.11.01  qNhgvR66RcqlVHynkRhvZA 5 1    1680      0   1.3mb   1.3mb
green  open wazuh-alerts-3.x-2019.07.28      ySN8cshgSkqzq0KfWC9hSw 3 0  578996      0 293.7mb 293.7mb
green  open wazuh-alerts-3.x-2018.06.02      53ZKN8fBRqSF6hnYfvGEDg 1 0  208975      0 138.4mb 138.4mb
yellow open wazuh-alerts-3.x-2019.01.06      zJuAOkbiTNCqf7G9AJwlug 5 1  897870      0 566.2mb 566.2mb
yellow open wazuh-monitoring-3.x-2018.09.08  B-_SFFXcTrGwztydtYtNmg 5 1    1824      0   1.3mb   1.3mb
green  open wazuh-alerts-3.x-2018.08.11      qcIzpZMrTWiJplMNnm77jQ 1 0  202400      0   142mb   142mb
yellow open wazuh-monitoring-3.x-2018.12.31  2hp-b68qQHyDAWpx6fE97w 5 1    1680      0   1.2mb   1.2mb
green  open wazuh-monitoring-3.x-2019.06.04  64Cvm4lsRbeRrmumb3fdNA 2 0    1512      0 629.9kb 629.9kb
green  open wazuh-monitoring-3.x-2019.03.08  Pu1uvWQaRRu5DsDzAPnv1w 2 0    1488      0 623.8kb 623.8kb
green  open wazuh-monitoring-3.x-2019.05.18  va35_IxyR4Gx2x50gFTU6w 2 0    1512      0 627.2kb 627.2kb
green  open wazuh-alerts-3.x-2018.03.07      NkilfRH-SK6n0RGBAhT0dA 1 0  299467      0 153.8mb 153.8mb
yellow open wazuh-alerts-3.x-2019.02.22      vLy4qxRCRT60XLYfBOlvVQ 5 1 1646285      0 992.8mb 992.8mb
yellow open wazuh-monitoring-3.x-2018.11.06  ocRA2w8tSrCPDCUtRxNWrQ 5 1    1680      0   1.3mb   1.3mb
yellow open wazuh-alerts-3.x-2018.10.15      cg62tj4DSPmbWDcj1VXrtw 5 1 1017968      0 693.6mb 693.6mb
green  open wazuh-monitoring-3.x-2019.03.10  CuAMkWdXTTCNtw1pXJRmDw 2 0    1488      0 622.9kb 622.9kb
yellow open wazuh-alerts-3.x-2019.01.13      3FQnD5tFSHe5K07t_ZosEw 5 1  897435      0 566.5mb 566.5mb
green  open wazuh-monitoring-3.x-2019.08.05  2DX2i03DQiyp2b-7GciUAg 2 0    5952      0   1.6mb   1.6mb
green  open wazuh-alerts-3.x-2018.01.27      12DyXKIBSoSjS6fcVyB-vQ 1 0  191304      0  88.4mb  88.4mb
yellow open wazuh-monitoring-3.x-2018.05.19  9GoaYybyQQ--t0ULmfrMmA 5 1   10080      0   2.8mb   2.8mb
yellow open wazuh-alerts-3.x-2019.04.21      VlPkIFzWTXuUg1GluLiwCA 5 1 1284606      0 717.7mb 717.7mb
yellow open wazuh-alerts-3.x-2018.08.29      0sOFgGTiQgW8CK5YS7s4lQ 5 1  503118      0 422.6mb 422.6mb
green  open wazuh-alerts-3.x-2018.05.26      xvUWUYQQT3y2x1ziJsiRnw 1 0  196580      0 128.1mb 128.1mb
yellow open wazuh-alerts-3.x-2019.07.08      L2qUvs7ORzu9uBemgShgPA 5 1 1390193      0 809.7mb 809.7mb
green  open wazuh-monitoring-3.x-2019.05.22  JjiJrYC4R82GAMev59j17A 2 0    1512      0 629.4kb 629.4kb
yellow open wazuh-monitoring-3.x-2018.08.28  uVquFeEGSpOl8yvnliMZCg 5 1    1776      0   1.3mb   1.3mb
green  open wazuh-monitoring-3.x-2019.03.16  XXjCIM4TS4eZgPetSUYCvg 2 0    1512      0 630.1kb 630.1kb
green  open wazuh-alerts-3.x-2018.02.02      wabzVnrxS6mn08zryizzCQ 1 0  285698      0 146.7mb 146.7mb
yellow open wazuh-alerts-3.x-2019.02.14      ktnWSnoUTmqqQFxZn7Vcig 5 1 1361722      0 868.4mb 868.4mb
green  open wazuh-monitoring-3.x-2019.03.05  ob4MAj4DRhaiulqAYOHEiQ 2 0    1488      0 625.4kb 625.4kb
yellow open wazuh-alerts-3.x-2019.01.03      Ofr-MZTnRRCsClH0AMz-yQ 5 1 1225527      0 826.7mb 826.7mb
yellow open wazuh-alerts-3.x-2019.01.20      2MnugiR0Sb6NxPw9tLgK_A 5 1  881462      0 555.4mb 555.4mb
yellow open wazuh-monitoring-3.x-2018.09.02  1lSXFHW8QUGVEu727y4Gtg 5 1    1776      0   1.3mb   1.3mb
green  open wazuh-monitoring-3.x-2019.04.05  be7SMZHqSW2DjvjrzcgJig 2 0    1512      0 627.8kb 627.8kb
yellow open wazuh-monitoring-3.x-2018.05.28  wpJCE8ANQgWNBvr7ylDmQw 5 1   10080      0   2.7mb   2.7mb
green  open wazuh-alerts-3.x-2018.05.07      xYi9Co--ROC15QgdS1U6iQ 1 0  291250      0 153.8mb 153.8mb
green  open wazuh-alerts-3.x-2018.05.09      Eq2QD4T9QFCeX473dyoH7Q 1 0  286405      0 155.8mb 155.8mb
yellow open wazuh-alerts-3.x-2018.10.07      H5ScRHlYSAKw67RxXG5qrg 5 1  756609      0 464.7mb 464.7mb
green  open wazuh-monitoring-3.x-2019.03.19  cxlKuR-pRG6fPlvH6BONMQ 2 0    1512      0 627.8kb 627.8kb
yellow open wazuh-alerts-3.x-2019.05.19      EFVzMfONR0S1HsfsqJMMsw 5 1 1304594      0 737.6mb 737.6mb
yellow open wazuh-monitoring-3.x-2019.01.11  DvrpKn_QTFiRwNONeuQzXg 5 1    1680      0   1.3mb   1.3mb
yellow open wazuh-monitoring-3.x-2018.12.02  P1lDM_ZHRhO9_o0-g1-bkA 5 1    1680      0   1.2mb   1.2mb
yellow open wazuh-monitoring-3.x-2018.09.04  DdEMXo7bQCKUKgXL5OI_nQ 5 1    1815      0   1.3mb   1.3mb
yellow open wazuh-monitoring-3.x-2018.05.27  Abf9Ny3-SleKOQ0KCaN2BQ 5 1   10080      0   2.7mb   2.7mb
green  open .monitoring-kibana-6-2019.08.04  LU-XivlrQJmSsduwyn1C9A 1 0    8639      0   1.9mb   1.9mb
yellow open wazuh-alerts-3.x-2018.08.17      LsyRJC38Q_iRM0BF85w9IA 5 1  207521      0 169.2mb 169.2mb
yellow open wazuh-alerts-3.x-2019.07.02      j8pkY-55QwKSFTk_ivB7aQ 5 1 1198308      0 629.2mb 629.2mb
green  open wazuh-alerts-3.x-2018.02.18      EKVn4h3JTBSxOtqJRhw00w 1 0  158460      0  73.6mb  73.6mb
yellow open wazuh-monitoring-3.x-2018.10.17  irKFYQVWTAC63_oj1Cz5AA 5 1    1656      0   1.2mb   1.2mb
yellow open wazuh-alerts-3.x-2019.03.13      k37KH3-5QRKnXoVi3KRCuw 5 1 1681123      0 948.7mb 948.7mb
yellow open wazuh-alerts-3.x-2018.08.30      BJyaZRetQq-iigOcXn4fCQ 5 1  496526      0 421.1mb 421.1mb
green  open wazuh-monitoring-3.x-2019.03.09  kmNolpZ4Sby7CTOYQbNRBw 2 0    1488      0 623.4kb 623.4kb
yellow open wazuh-alerts-3.x-2018.10.01      SoIfh6_lQhSzrG4SPS7l5Q 5 1 1148748      0 729.1mb 729.1mb
green  open wazuh-monitoring-3.x-2019.04.26  GuqNjGgrQseq_XtW6_u5Ig 2 0    1512      0 626.9kb 626.9kb
green  open wazuh-monitoring-3.x-2019.03.15  AdnyA5rDSDysx0EhhLDIgQ 2 0    1512      0 628.7kb 628.7kb
green  open wazuh-alerts-3.x-2018.02.12      J-bU99duR5G1nZUFEAPTBg 1 0  286308      0 147.5mb 147.5mb
green  open wazuh-alerts-3.x-2018.08.10      iWfnTRJTTPazclf1KY70jQ 1 0  303718      0   228mb   228mb
green  open wazuh-alerts-3.x-2019.08.04      1nlvKisXTAezY1-Y4lPplQ 3 0  788253      0 399.5mb 399.5mb
yellow open wazuh-alerts-3.x-2019.05.23      RTrJNNDXSWCSIJPFQcuM0w 5 1 1048606      0 584.6mb 584.6mb
yellow open wazuh-alerts-3.x-2019.05.31      nzYZeo3xSPWLLfXv-iRpuQ 5 1  929567      0 644.5mb 644.5mb
yellow open wazuh-alerts-3.x-2018.11.25      n7Y4F7i4TUSQWXxQgz2jEA 5 1  858157      0 561.3mb 561.3mb
green  open wazuh-monitoring-3.x-2019.05.12  qy2FpajCSTapoMkm7c7i6w 2 0    1512      0 627.3kb 627.3kb
yellow open wazuh-alerts-3.x-2019.03.12      BOHo4TGtRx6cuPtu-EiUWQ 5 1 1690954      0 948.6mb 948.6mb
yellow open wazuh-alerts-3.x-2019.06.21      mIoewMWlRiCow6mEkpjMlw 5 1 1095732      0 581.4mb 581.4mb
yellow open wazuh-alerts-3.x-2019.01.11      bcpPaDe8QMut0LwxpGnWGg 5 1 1211579      0 838.9mb 838.9mb
green  open wazuh-monitoring-3.x-2019.06.18  jwhclQiISm-rsyvNHKZo_g 2 0    1512      0 628.3kb 628.3kb
green  open wazuh-monitoring-3.x-2019.01.24  UhAK1goVTLWmGXpgoy4XUA 2 0    1704      0   698kb   698kb
yellow open wazuh-alerts-3.x-2019.05.05      wdMIOPRJTUmJdclDB4YuBg 5 1  939711      0 520.1mb 520.1mb
green  open wazuh-monitoring-3.x-2019.03.18  zkkaDA0CT9migQp8VYwQtQ 2 0    1512      0 631.8kb 631.8kb
yellow open wazuh-monitoring-3.x-2018.06.04  FYiEp4P0RF-NdY1Pdddrog 5 1    5110      0   1.2mb   1.2mb
green  open wazuh-monitoring-3.x-2019.07.01  VfM7e53fS0G9VNfg93AKIA 2 0    1512      0 631.2kb 631.2kb
yellow open wazuh-alerts-3.x-2018.08.28      uzZjs7rsTDW451YKqaVUsQ 5 1  451570      0 371.4mb 371.4mb
yellow open wazuh-alerts-3.x-2019.04.28      mu_HcZUBQLO7KdRZ5oilPQ 5 1 1286577      0 721.7mb 721.7mb
green  open wazuh-alerts-3.x-2018.04.16      MlpPY_9uTGCAFJ6_FddV1w 1 0  295350      0   152mb   152mb
yellow open wazuh-alerts-3.x-2018.10.10      AoWJ0lcnTKW6_LWn7ZiVUQ 5 1 1065088      0 712.4mb 712.4mb
green  open wazuh-alerts-3.x-2018.03.03      MwcZEXjbRtmokRNMqnaG8Q 1 0  116843      0  59.3mb  59.3mb
yellow open wazuh-alerts-3.x-2019.05.11      A26dhfnwQjeRVcc1FgpgQw 5 1  951447      0 625.5mb 625.5mb
yellow open wazuh-monitoring-3.x-2018.08.31  oLOokzUlRmyYFcAZvE_Osg 5 1    1776      0   1.3mb   1.3mb
green  open wazuh-alerts-3.x-2019.08.05      n3KWW5gKTVyTRg874b-PKA 3 0 1091667      0 554.4mb 554.4mb
green  open wazuh-alerts-3.x-2018.02.15      LhK40iuTQkekc_g9WS4hAw 1 0  304031      0 157.2mb 157.2mb
yellow open wazuh-monitoring-3.x-2018.11.24  deMatiGIQxiJb6eA4wLuCA 5 1    1680      0   1.2mb   1.2mb
yellow open wazuh-alerts-3.x-2018.11.03      ClVacKl1QYyf7V5CTNo4gg 5 1  801065      0 503.4mb 503.4mb
yellow open wazuh-monitoring-3.x-2018.10.20  wggQLFpgQtuX1hOktvsqRg 5 1    1656      0   1.2mb   1.2mb
yellow open wazuh-alerts-3.x-2018.09.17      fjE4xS6HThCXx40e0S2yhA 5 1 1022014      0 718.7mb 718.7mb
green  open wazuh-alerts-3.x-2018.05.02      2ZsgOkZrTX2azmoqZPzoSQ 1 0  317328      0 177.8mb 177.8mb
green  open wazuh-monitoring-3.x-2019.02.03  gdOtlBM4SkSoPOrKqX1iRg 2 0    1704      0 703.3kb 703.3kb
yellow open wazuh-alerts-3.x-2018.10.28      Y7YeJwUvQeuFo3zDF4ZJiQ 5 1  773951      0 478.3mb 478.3mb
yellow open wazuh-alerts-3.x-2019.04.14      lpRZrKWYQfSmSKMieABVbg 5 1 1267331      0 692.2mb 692.2mb
green  open wazuh-alerts-3.x-2018.06.16      QM6x_fmLTUKe5U-UmEUJEA 1 0  203417      0 130.8mb 130.8mb
green  open wazuh-monitoring-3.x-2019.07.31  G7yChEzITKyvOInJlC5ZaQ 2 0    5952      0   1.5mb   1.5mb
yellow open wazuh-alerts-3.x-2018.12.20      QHFFmRUwS1GiOgVB-elssw 5 1 1250570      0 868.9mb 868.9mb
green  open wazuh-monitoring-3.x-2019.03.21  gkNoC1vZRlK7icKHTQixOA 2 0    1512      0 628.6kb 628.6kb
yellow open wazuh-monitoring-3.x-2018.08.18  fAYh1QXFSMGCH8orFkjXlg 5 1    1776      0   1.3mb   1.3mb
yellow open wazuh-monitoring-3.x-2018.12.10  RB_KOX3hRrutUPUVkFog1A 5 1    1680      0   1.2mb   1.2mb
yellow open wazuh-alerts-3.x-2018.11.17      qUhgP_KBSbWMlRLskPxUxg 5 1  835406      0 551.5mb 551.5mb
green  open wazuh-alerts-3.x-2018.08.06      e-72A-VsQuyE2DKFVxJwIg 1 0  409464      0 352.4mb 352.4mb
green  open wazuh-alerts-3.x-2018.05.20      MBaRxv5TRve85j_LroXd3A 1 0  204819      0 130.8mb 130.8mb
yellow open wazuh-alerts-3.x-2018.11.07      A64dgR4QRO6ul5GumTX08g 5 1 1247087      0 850.4mb 850.4mb
yellow open wazuh-alerts-3.x-2019.03.25      XTuvLsdlRc63LPEjkglEhw 5 1 1591755      0   870mb   870mb
yellow open wazuh-alerts-3.x-2019.03.24      F03cuDBfRY2j-85TzExt1Q 5 1 1300635      0 721.2mb 721.2mb
yellow open wazuh-monitoring-3.x-2018.12.26  4n7pKD-aQsKX4A4Pwv2apQ 5 1    1680      0   1.2mb   1.2mb
yellow open wazuh-alerts-3.x-2019.06.04      BTCX_f6TSd-jPj4njB-I7w 5 1 1225815      0 668.5mb 668.5mb
green  open wazuh-alerts-3.x-2018.02.05      2GGubYpIRXGFPwQsZZX-Jw 1 0  541543      0 303.1mb 303.1mb
yellow open wazuh-alerts-3.x-2019.01.25      if3uG_2dQeuoZqxrdZctUw 5 1 1007447      0 595.6mb 595.6mb
yellow open wazuh-alerts-3.x-2019.05.15      rzdYsJfDRP65RtDsEzBGKA 5 1 1370682      0 783.2mb 783.2mb
green  open wazuh-monitoring-3.x-2019.05.07  ZLMpoopwRBmf9FnDWhwBCA 2 0    1512      0 626.6kb 626.6kb
yellow open wazuh-alerts-3.x-2019.01.14      Kcj1ULo2RvuxWqPpnXHMmQ 5 1 1238446      0 835.2mb 835.2mb
yellow open wazuh-alerts-3.x-2019.03.30      PpvWkEWgRAyu9vvPmHszjw 5 1 1210449      0 643.2mb 643.2mb
yellow open wazuh-alerts-3.x-2018.11.10      k4LUx5-XQZ2vk6XYEm_6UA 5 1  794337      0 497.8mb 497.8mb
yellow open wazuh-alerts-3.x-2019.04.24      Cbhkj1yzRsiUlUOcOtqF2Q 5 1 1598321      0 932.8mb 932.8mb
green  open wazuh-monitoring-3.x-2019.04.17  wbvDs6giR5-yhYkzSnzWwg 2 0    1512      0 625.9kb 625.9kb
yellow open wazuh-monitoring-3.x-2018.11.12  iP6HfabITM600jqEkvBCaA 5 1    1680      0   1.3mb   1.3mb
green  open wazuh-monitoring-3.x-2019.05.03  -076VeX7T2WnDS0AfrM1yw 2 0    1512      0 625.8kb 625.8kb
yellow open wazuh-monitoring-3.x-2018.08.30  WnVGdPeFSDqXvYEUtj9y_g 5 1    1776      0   1.3mb   1.3mb
yellow open wazuh-monitoring-3.x-2018.12.22  vjp0-qMNRd6JjabLvP4xLg 5 1    1680      0   1.2mb   1.2mb
yellow open wazuh-monitoring-3.x-2018.06.13  JXZtREhXRWSRtV4fIkI3uQ 5 1    1704      0 985.3kb 985.3kb
yellow open wazuh-alerts-3.x-2018.08.22      vAXUM3_0QxeyU6_1Xw5uUg 5 1  428198      0 326.4mb 326.4mb
yellow open wazuh-alerts-3.x-2018.09.20      bz304DgUQ-6YCYgZjssyjg 5 1 1123296      0 769.1mb 769.1mb
yellow open wazuh-monitoring-3.x-2018.11.10  XkgLLnSqSdigc-ixy97ygQ 5 1    1680      0   1.3mb   1.3mb
green  open wazuh-alerts-3.x-2018.07.18      ArAMzcyPSLG4OC5x5qgYQA 1 0  654405      0 510.9mb 510.9mb
green  open wazuh-alerts-3.x-2019.07.21      0Lap7z3QQUeGhOMYXTAW9w 3 0  795288      0 407.3mb 407.3mb
green  open wazuh-alerts-3.x-2018.05.23      OoCe3YdGRgeUTM9x81cR0w 1 0  479972      0   302mb   302mb
green  open .monitoring-es-6-2019.08.01      jUCPmQJySSqshVH9h-1yNA 1 0 9671075  82415   4.3gb   4.3gb
yellow open wazuh-alerts-3.x-2019.01.02      BxmBUUwFRuSKs62iAc3QvA 5 1 1235693      0 817.2mb 817.2mb
yellow open wazuh-monitoring-3.x-2018.05.11  70qN8JOpTlG7SF-28CieXg 5 1   10080      0   2.8mb   2.8mb
green  open wazuh-monitoring-3.x-2019.04.24  2YGCvwrDQaCMXE9LhKyK7Q 2 0    1512      0 630.4kb 630.4kb
yellow open wazuh-monitoring-3.x-2018.10.29  ABjLyflESZOwWNdMEpFEfQ 5 1    1656      0   1.2mb   1.2mb
green  open wazuh-alerts-3.x-2018.03.22      5gbeXJ4XR6yopXoZTBqT_g 1 0  291774      0 147.9mb 147.9mb
green  open wazuh-monitoring-3.x-2019.04.12  0VVGKxtLS0WMjr-GOed_Cw 2 0    1512      0 627.3kb 627.3kb
green  open wazuh-monitoring-3.x-2019.06.20  5Eir20W4RwCRjGLKw0meIg 2 0    1512      0 630.2kb 630.2kb
green  open wazuh-alerts-3.x-2018.02.16      yW5xRYHlRNuHcQ4k2lS_9Q 1 0  245844      0 128.6mb 128.6mb
yellow open wazuh-monitoring-3.x-2018.10.18  7xYmo0YYTgiwnJzWWSfJ3w 5 1    1656      0   1.2mb   1.2mb
green  open wazuh-monitoring-3.x-2019.06.08  c7uAsDmBRSapOJPf30t6Fw 2 0    1512      0 631.4kb 631.4kb
yellow open wazuh-alerts-3.x-2019.05.26      E8X_XaC7RRq8cB53MtM7QQ 5 1  851240      0 453.7mb 453.7mb
green  open wazuh-monitoring-3.x-2019.03.03  84Qbi7nXQciyPe3hfKbhTw 2 0    1488      0 621.9kb 621.9kb
yellow open wazuh-monitoring-3.x-2019.01.01  VpS7WS-iSImFvCuTkCy7iQ 5 1    1680      0   1.3mb   1.3mb
yellow open wazuh-alerts-3.x-2019.01.12      ubGr17zjT9qB6pJFNXVhzA 5 1  913535      0 577.9mb 577.9mb
yellow open wazuh-alerts-3.x-2019.04.12      4zP1zrqfSG2XXhrczsRXfg 5 1 1445901      0 797.3mb 797.3mb
yellow open wazuh-monitoring-3.x-2019.01.13  sfvcIyVqQ6CqukW2eVVM_g 5 1    1680      0   1.2mb   1.2mb
yellow open wazuh-alerts-3.x-2019.02.01      td1IwXmnS8yPhuH-S7v7ng 5 1 1119849      0 658.6mb 658.6mb
yellow open wazuh-monitoring-3.x-2018.04.29  f1uADpYsR4aqfL4JSzcLHQ 5 1   10080      0   2.8mb   2.8mb
green  open wazuh-alerts-3.x-2018.03.29      1RaQGJdKRwSfRcBcDiKwXg 1 0  324271      0 163.3mb 163.3mb
green  open wazuh-alerts-3.x-2018.04.04      bywVrwl_Ttmpc3ErWSZGsQ 1 0  289362      0 149.7mb 149.7mb
yellow open wazuh-monitoring-3.x-2018.05.07  2gMQ9m-dTzyRotJ56lndjA 5 1   10150      0   2.2mb   2.2mb
yellow open wazuh-monitoring-3.x-2018.05.30  TZn65LPoRGqfQ5EAOWVwJw 5 1   10010      0   2.8mb   2.8mb
green  open wazuh-alerts-3.x-2018.08.05      xCM2w5bGSZGUUFGetu54vQ 1 0  223826      0 196.4mb 196.4mb
yellow open wazuh-alerts-3.x-2018.10.27      Tu4eXcu-QkGGXjRvXd5TtQ 5 1  770974      0 480.7mb 480.7mb
green  open wazuh-alerts-3.x-2018.02.19      _wwJLPVsQPaT0XSPgOsCkw 1 0  278806      0 142.7mb 142.7mb
green  open wazuh-alerts-3.x-2018.06.07      y3vZNo_8Rg-n1qO2sYfEzQ 1 0  502088      0 337.7mb 337.7mb
yellow open wazuh-monitoring-3.x-2018.10.01  KCYm0tOyQ3a9U0gd3XL80g 5 1    1608      0   1.2mb   1.2mb
green  open wazuh-monitoring-3.x-2019.03.30  HazHmsZtRnON7SWv86iJJA 2 0    1512      0 622.6kb 622.6kb
green  open wazuh-alerts-3.x-2018.03.31      78tWt--bSL-HxckTOscRKQ 1 0  162164      0  78.6mb  78.6mb
green  open wazuh-monitoring-3.x-2019.02.10  OCMgCL8wQou5YzKaEhKExQ 2 0    1488      0 628.2kb 628.2kb
green  open wazuh-alerts-3.x-2018.03.11      XK8Uy8JYTaGmi213NxSSpw 1 0  196112      0  90.2mb  90.2mb
green  open wazuh-alerts-3.x-2018.07.27      VAII1MO2QyyP1EDw1FS-ZA 1 0  560669      0 481.2mb 481.2mb
green  open wazuh-alerts-3.x-2018.07.05      UMllo6DkSc6mzPan4WnLXA 1 0  400551      0 285.4mb 285.4mb
yellow open wazuh-monitoring-3.x-2018.06.06  XXtyE7HoSrCc_H0f_aItnA 5 1    1680      0 982.9kb 982.9kb
yellow open wazuh-alerts-3.x-2018.09.01      p2h2NJEJROqh-ICXzmcnOA 5 1  290131      0 211.4mb 211.4mb
green  open wazuh-monitoring-3.x-2019.03.29  IBYK_nE3QrihR8EDfBTWNg 2 0    1512      0 625.4kb 625.4kb
yellow open wazuh-alerts-3.x-2019.05.20      efGl0K3bT4CToA26uWYQtQ 5 1 1479729      0 845.2mb 845.2mb
yellow open wazuh-alerts-3.x-2019.04.17      CqKh1-KOTZKBelek3ZAnsA 5 1 1651742      0 930.8mb 930.8mb
green  open wazuh-alerts-3.x-2018.04.23      PSC6YHDxTJ2-7W6xUH0oPA 1 0  320090      0 161.8mb 161.8mb
green  open wazuh-alerts-3.x-2018.03.06      hDK92Nv0SjigfKj9AhQkUA 1 0  293858      0 156.5mb 156.5mb
green  open .monitoring-es-6-2019.07.30      oBHEZ_IBQU2yFzGPndyM4Q 1 0 9610056 103138   4.2gb   4.2gb
yellow open wazuh-monitoring-3.x-2018.11.16  uPXO6Rx5RAWiRCYEOdDamA 5 1    1610      0   1.1mb   1.1mb
yellow open wazuh-alerts-3.x-2019.06.20      JiFxnyurT6CuCX0KpRJkHg 5 1 1147783      0 610.6mb 610.6mb
green  open wazuh-monitoring-3.x-2019.02.27  mD-7jMEjQ2SdRasxkJjlRg 2 0    1488      0 646.9kb 646.9kb
green  open wazuh-alerts-3.x-2019.07.23      ZjG9kom5QBCBTSmuZbK-Og 3 0 1106666      0 571.1mb 571.1mb
green  open wazuh-monitoring-3.x-2019.06.28  UbSipC-WTlWAJndvgqbddg 2 0    1512      0 631.6kb 631.6kb
green  open wazuh-monitoring-3.x-2019.04.27  yMScJRZNSlCpvGk6B_btNg 2 0    1512      0 627.1kb 627.1kb
yellow open wazuh-alerts-3.x-2018.10.14      AImJxPxLQvibM_H6OF5acg 5 1  757084      0 466.6mb 466.6mb
yellow open wazuh-alerts-3.x-2018.12.26      CD6Y_KxtSM-MxLLrK0yWmA 5 1 1126777      0 736.5mb 736.5mb
green  open wazuh-alerts-3.x-2018.08.08      2pWQafk5Q_qBou4AIcOHyg 1 0  327735      0 245.8mb 245.8mb
yellow open wazuh-monitoring-3.x-2018.05.31  qPC7eGVMRR6nIncFuhUQ8w 5 1   10080      0   2.9mb   2.9mb
green  open wazuh-alerts-3.x-2018.07.10      SzfELj_RTgqz_idpzVNsag 1 0  537119      0 453.1mb 453.1mb
yellow open wazuh-monitoring-3.x-2018.10.21  _Uz0_J4XRa--s_WrXkeD8w 5 1    1656      0   1.2mb   1.2mb
yellow open wazuh-alerts-3.x-2019.04.07      tuNir3rhSoeryf5kEujoSw 5 1 1271376      0 686.8mb 686.8mb
green  open wazuh-alerts-3.x-2018.05.31      HgNZwqo8SYCrZMUHH6L6BA 1 0  543753      0 351.5mb 351.5mb
yellow open wazuh-alerts-3.x-2019.04.04      NIQEv9PxSTuh1vUEGRSieQ 5 1 1665004      0 916.7mb 916.7mb
yellow open wazuh-alerts-3.x-2019.07.03      PWrI7-VYRLClUayhANpbYg 5 1 1196553      0   636mb   636mb
yellow open wazuh-alerts-3.x-2019.02.17      VQGxl0u_R_mUCxIpAaSh6g 5 1  990377      0 577.2mb 577.2mb
yellow open wazuh-alerts-3.x-2018.12.06      3dGPSva1StGfGewiYkxKdQ 5 1 1114262      0 756.3mb 756.3mb
yellow open wazuh-monitoring-3.x-2018.06.15  8nW1_WFTQte7n3d0HtHxqg 5 1    1704      0 990.5kb 990.5kb
yellow open wazuh-monitoring-3.x-2018.05.04  mFBUx6-UTEagxg3e0b2XBQ 5 1   10080      0   2.8mb   2.8mb
yellow open wazuh-alerts-3.x-2018.11.30      oWOY92UcQmCVd-Ptuvmsog 5 1 1058966      0 738.9mb 738.9mb
yellow open wazuh-monitoring-3.x-2018.08.23  1bR1Hw-MQTOHJVmAHwHEzw 5 1    1776      0   1.3mb   1.3mb
green  open wazuh-alerts-3.x-2018.08.02      fCwdYKcMQ-uO6-I7Uquy0g 1 0  648978      0 551.4mb 551.4mb
green  open .monitoring-kibana-6-2019.07.31  g3xsV5taSomF9pYDhhmSCA 1 0    8640      0     2mb     2mb
green  open wazuh-alerts-3.x-2018.05.05      IWYvUkSFQSqmZ5gNmH_nwg 1 0  166940      0  88.2mb  88.2mb
yellow open wazuh-alerts-3.x-2018.09.04      CYX7qOnzQdWB3JAOtxKBRQ 5 1  923144      0 821.6mb 821.6mb
green  open wazuh-alerts-3.x-2018.07.26      8qDFA4r4RuSGKkfgxQygfg 1 0  652309      0 510.7mb 510.7mb
green  open wazuh-monitoring-3.x-2019.07.02  0us9-e_zRlG8U59XFZ0G-Q 2 0    1512      0 631.6kb 631.6kb
yellow open wazuh-alerts-3.x-2019.03.07      a4gjOEfpS1mUYn6svI6Iug 5 1 1678607      0 946.4mb 946.4mb
green  open wazuh-monitoring-3.x-2019.04.06  1Z7t8bT7RLGPI-kAgSSF3Q 2 0    1512      0 625.1kb 625.1kb
green  open wazuh-alerts-3.x-2018.07.31      SzTrMGzWQqG-QkVNsj0PpQ 1 0  642193      0 521.9mb 521.9mb
yellow open wazuh-alerts-3.x-2019.02.02      lln1-hW-Tfek-X5e8lEHnA 5 1  871567      0 487.1mb 487.1mb
green  open wazuh-alerts-3.x-2018.02.23      C5fu-nVDT_O_dTohlCcoNg 1 0  259760      0 137.4mb 137.4mb
green  open wazuh-monitoring-3.x-2019.05.20  gGLI9r-hRo2ur9hL8OD3Kw 2 0    1512      0 627.3kb 627.3kb
green  open wazuh-alerts-3.x-2018.07.08      VNmdpjKNQP-P2FQVe8jfBg 1 0  335148      0 293.9mb 293.9mb
yellow open wazuh-alerts-3.x-2018.08.27      m7Z3w3abRyKcn3z38Dp7Jw 5 1  397425      0   314mb   314mb
green  open .monitoring-kibana-6-2019.08.03  5RhmMAqLTKe2uvgebCi-pQ 1 0    8640      0   1.9mb   1.9mb
yellow open wazuh-monitoring-3.x-2018.06.11  _OA6y7ErRDCdq6uRILeFWQ 5 1    1689      0 982.6kb 982.6kb
green  open wazuh-alerts-3.x-2018.01.30      u1YK8twDRxW_jvdmk01RPg 1 0  313664      0 159.8mb 159.8mb
yellow open wazuh-monitoring-3.x-2018.05.16  3NlDoW2iTMSOz2AFRjq2Dw 5 1   10080      0   2.8mb   2.8mb
yellow open wazuh-monitoring-3.x-2018.08.24  94n1uEGmSPyu5x-HJu49nQ 5 1    1776      0   1.3mb   1.3mb
yellow open wazuh-monitoring-3.x-2018.05.05  k1toEmtjQeOGewIqjO3Hig 5 1   10010      0   2.7mb   2.7mb
green  open wazuh-alerts-3.x-2019.07.11      JGMZIuW7QmyFrfEO4iwrfQ 3 0 1177015      0 610.7mb 610.7mb
yellow open wazuh-alerts-3.x-2019.05.13      2fHIpcQcQkGkd7-kUmM9xg 5 1 1125566      0   771mb   771mb
green  open wazuh-alerts-3.x-2018.04.21      XTPuZBwsTuuyIOsILIE7iw 1 0  163046      0  77.8mb  77.8mb
green  open wazuh-monitoring-3.x-2019.02.25  4ZJK2CiPR_O0ZU3958L28A 2 0    1496      0 623.5kb 623.5kb
yellow open wazuh-alerts-3.x-2018.12.13      7kUZFY1qSdG6MDAnqyMDJg 5 1 1223809      0 853.9mb 853.9mb
green  open wazuh-alerts-3.x-2018.03.10      RRoJQcGUQoCQ1geg6EThHw 1 0  194827      0  89.4mb  89.4mb
green  open wazuh-monitoring-3.x-2019.02.09  34OKHIF-SX6A0_aNVPwALg 2 0    1488      0 627.7kb 627.7kb
yellow open wazuh-alerts-3.x-2019.06.22      wNc761OHTa2_brWw4rieUg 5 1  803783      0   426mb   426mb
green  open wazuh-monitoring-3.x-2019.03.01  YdOaWjakSMSK9RU2QkqfHQ 2 0    1488      0 646.5kb 646.5kb
green  open wazuh-monitoring-3.x-2019.07.14  HMPRUAgQTX-T4dJq9grd-Q 2 0    5952      0   1.6mb   1.6mb
yellow open wazuh-monitoring-3.x-2018.11.15  5XgvFzqYQJ6Kh6wQa_tiyg 5 1    1680      0   1.3mb   1.3mb
yellow open wazuh-alerts-3.x-2019.06.10      rJ68gVrBSa26x405RksddQ 5 1  813780      0 433.7mb 433.7mb
green  open wazuh-monitoring-3.x-2019.06.09  Tbjb5hGJSxCUvouDzU5I8g 2 0    1512      0 630.4kb 630.4kb
yellow open wazuh-alerts-3.x-2018.08.16      xkspybGlS3KGTkVIuPq_VQ 5 1  216699      0 175.3mb 175.3mb
yellow open wazuh-alerts-3.x-2018.12.11      kG6ary-EQj-r6cvwqb-5Cw 5 1 1207796      0 846.1mb 846.1mb
green  open wazuh-monitoring-3.x-2019.02.11  0-tVAzQNR8aYCWk4ii6KxQ 2 0    1488      0 632.3kb 632.3kb
yellow open wazuh-alerts-3.x-2019.05.14      bPakUYxWS0SCDI44uaHwxg 5 1 1152721      0 658.2mb 658.2mb
yellow open wazuh-alerts-3.x-2019.06.15      jGYslkHlSKSJq9dXrypHag 5 1  807221      0   423mb   423mb
green  open wazuh-monitoring-3.x-2019.06.12  HmVBzmmxSAOuaZ66Ge_27g 2 0    1512      0 630.8kb 630.8kb
green  open wazuh-monitoring-3.x-2019.05.13  jX6h_NhFQv6OGuNTlRRT6w 2 0    1512      0 628.4kb 628.4kb
green  open wazuh-alerts-3.x-2018.04.08      nXSpDJjOSfuHGjMBRxoPQw 1 0  169300      0  82.4mb  82.4mb
yellow open wazuh-alerts-3.x-2019.07.01      _FLZg6ENQkONc58xwQAcTg 5 1 1214209      0 646.2mb 646.2mb
green  open wazuh-alerts-3.x-2018.08.03      Q2p9Lo6rRfGKS9n0mybAfA 1 0  558694      0 502.3mb 502.3mb
green  open wazuh-monitoring-3.x-2019.04.28  gmpxdqTmSsmyN10oHkqfZQ 2 0    1512      0 626.6kb 626.6kb
yellow open wazuh-monitoring-3.x-2018.09.30  Awk0rM8oTlu0vCFrjTBFxA 5 1    1608      0   1.2mb   1.2mb
green  open wazuh-monitoring-3.x-2019.05.31  wh1PXpCiQpqF_kOFXFbjDg 2 0    1512      0 628.7kb 628.7kb
green  open wazuh-alerts-3.x-2018.03.20      7w2eRCTCQwmT4SZGgQh69Q 1 0  320030      0 153.3mb 153.3mb
green  open wazuh-alerts-3.x-2018.08.13      Lo_tbzTZQ36gw1mr08KObg 1 0  231043      0 167.8mb 167.8mb
yellow open wazuh-alerts-3.x-2018.12.23      DRHJUzPBRTSyBHHpu5d5Sg 5 1  895281      0 561.4mb 561.4mb
yellow open wazuh-alerts-3.x-2019.04.30      dcCltPsnSEi1AEjmhz1ANQ 5 1 1704707      0 951.9mb 951.9mb
green  open wazuh-alerts-3.x-2018.04.19      rrCzsE37Tz-YmKNygtiu0w 1 0  311085      0 151.9mb 151.9mb
green  open wazuh-alerts-3.x-2019.07.27      1-NYjotFRrK-UkAkW_yLEQ 3 0  722041      0 368.2mb 368.2mb
yellow open wazuh-monitoring-3.x-2018.09.15  rkwjSVDTQN69mtHFmY6RdQ 5 1    1824      0   1.3mb   1.3mb
yellow open wazuh-monitoring-3.x-2018.05.20  frrbkEowQzaZbgTV7jYSFg 5 1   10010      0   2.7mb   2.7mb
yellow open wazuh-monitoring-3.x-2018.12.27  qnC-4HeRS_uJvN6rPDxgsg 5 1    1680      0   1.3mb   1.3mb
green  open wazuh-monitoring-3.x-2019.06.22  V2HfBQiKSVaT4R3ZIRhlfQ 2 0    1449      0 571.2kb 571.2kb
green  open wazuh-monitoring-3.x-2019.07.27  0-qWk0h6SDqqsHbY7dEozQ 2 0    5952      0   1.6mb   1.6mb
green  open wazuh-monitoring-3.x-2019.05.17  l_LDYw0rTyOOgGBX36Yonw 2 0    1512      0 626.8kb 626.8kb
yellow open wazuh-monitoring-3.x-2018.12.13  yjoffjhoTH2PakLs06U3aQ 5 1    1680      0   1.2mb   1.2mb
yellow open wazuh-alerts-3.x-2019.06.12      XqgMM2owQOSjS5IvOGV0ww 5 1 1189067      0 628.4mb 628.4mb
green  open wazuh-monitoring-3.x-2019.03.17  aLBjfgMHQYeRpsmCIz2G-w 2 0    1512      0 628.6kb 628.6kb
yellow open wazuh-alerts-3.x-2018.10.19      mrlA1iKNQdqCPIZhPWP5Dg 5 1  965164      0 639.2mb 639.2mb
yellow open wazuh-monitoring-3.x-2018.05.01  1BDKuC3XSvCzAs07fuYYLw 5 1   10080      0   2.8mb   2.8mb
yellow open wazuh-alerts-3.x-2019.06.09      XsOF0Y-tQp2hhYM7CW-DSw 5 1  812813      0 430.8mb 430.8mb
yellow open wazuh-alerts-3.x-2018.09.14      9QteVEB9Ttich2Q-ehHYBQ 5 1  983236      0 679.7mb 679.7mb
green  open wazuh-alerts-3.x-2018.06.09      rtFmGraLTXuP2fFaRnSoww 1 0  207421      0 134.5mb 134.5mb
green  open wazuh-alerts-3.x-2018.04.12      IXGRCxW4TFmQw6bWs5bEDg 1 0  308624      0 152.3mb 152.3mb
green  open wazuh-alerts-3.x-2019.07.18      ukKhH3kWS5a8tjFKTwjnvw 3 0 1120811      0 577.7mb 577.7mb
yellow open wazuh-monitoring-3.x-2018.06.07  B9aAW63KQIaNHaav5ank8Q 5 1    1680      0 970.2kb 970.2kb
green  open wazuh-monitoring-3.x-2019.07.15  uT2nZRFTStOpTbN_5aFbQA 2 0    5952      0   1.6mb   1.6mb
yellow open wazuh-alerts-3.x-2019.01.22      PYU1ScN1SEab__0cDz_0BA 5 1 1510729      0   1.1gb   1.1gb
yellow open wazuh-monitoring-3.x-2018.11.05  hWoULDUrRb24V6kZd4ftFA 5 1    1680      0   1.3mb   1.3mb
yellow open wazuh-monitoring-3.x-2019.01.12  tfrFv2EoQ8a16N9_-JAOOw 5 1    1680      0   1.2mb   1.2mb
green  open wazuh-alerts-3.x-2018.05.25      YvsGRvmyT5aryO56eNXPDQ 1 0  362090      0 248.9mb 248.9mb
yellow open wazuh-monitoring-3.x-2019.01.10  owpFVfigQlKiBNS1BCCesw 5 1    1680      0   1.2mb   1.2mb
green  open wazuh-alerts-3.x-2019.07.16      NqebXrh4RNKjbcTp3ng73Q 3 0 1178155      0 636.2mb 636.2mb
green  open wazuh-alerts-3.x-2018.02.20      qswlCkatTeKLYUXi8B51KQ 1 0  296036      0 151.8mb 151.8mb
yellow open wazuh-alerts-3.x-2019.04.02      p3NL1UWPSbOk8Fm2XoCXCQ 5 1 1667350      0 922.7mb 922.7mb
green  open wazuh-alerts-3.x-2018.06.12      pszBTa5xSzi0LYxWtVsfcw 1 0  542972      0 360.7mb 360.7mb
green  open wazuh-monitoring-3.x-2019.05.05  FtWvn0W4QBip9E6G7QyKBw 2 0    1512      0 625.7kb 625.7kb
yellow open wazuh-monitoring-3.x-2019.01.21  Hxng9r7BS_OJyP7UWN5PFw 5 1    1680      0   1.3mb   1.3mb
yellow open wazuh-monitoring-3.x-2018.12.11  py9N9kguQL656yhl3Ot2ow 5 1    1680      0   1.2mb   1.2mb
yellow open wazuh-monitoring-3.x-2018.06.27  i0YpCv4qSt-URyyjCb6X9A 5 1    1704      0 986.4kb 986.4kb
yellow open wazuh-alerts-3.x-2018.11.08      _KQAh7avQom7FmPMa80wRg 5 1 1173922      0 791.7mb 791.7mb
yellow open wazuh-alerts-3.x-2018.11.21      Eyrdzir1QFqcMXR3zn9AJg 5 1 1173330      0 833.3mb 833.3mb
green  open wazuh-monitoring-3.x-2019.05.19  Y8CIiKBySMOlKQT-YuNvhA 2 0    1512      0 621.5kb 621.5kb
green  open wazuh-monitoring-3.x-2019.03.12  -eoggolhQ_quCNnAonRsrA 2 0    1512      0 632.3kb 632.3kb
green  open wazuh-alerts-3.x-2018.07.25      D-kMimvZTKiwzQW0h56C7A 1 0  629541      0 464.5mb 464.5mb
yellow open wazuh-monitoring-3.x-2018.06.08  NMn1OjClQfS1ZqzRvdyxmA 5 1    1680      0 969.7kb 969.7kb
green  open wazuh-monitoring-3.x-2019.04.29  0M7C6pCFTgmcvsG8BgmOqw 2 0    1512      0 650.5kb 650.5kb
green  open wazuh-alerts-3.x-2018.07.13      tCZCewZoTzKmTQvH1OnejA 1 0  507936      0   402mb   402mb
green  open wazuh-monitoring-3.x-2019.06.29  -GcRSMCNQAmQF_IK9y6qhw 2 0    1512      0 633.1kb 633.1kb
yellow open wazuh-alerts-3.x-2018.08.18      PHePBi3vQt2QFofmJYdBQQ 5 1  192908      0 150.1mb 150.1mb
yellow open wazuh-monitoring-3.x-2018.05.08  kLrHSfxTRSuLl_frdKsNEA 5 1   10010      0   2.7mb   2.7mb
green  open wazuh-alerts-3.x-2018.05.29      NsZ4ZrWNTFmAcp5Lr_Aj1A 1 0  571059      0 362.1mb 362.1mb
yellow open wazuh-monitoring-3.x-2018.05.25  VjOnzjhsS52WcYrtrVW0xw 5 1   10080      0   2.7mb   2.7mb
green  open wazuh-monitoring-3.x-2019.06.07  KEporPEtSY-XBFYgc0Flgw 2 0    1512      0 630.5kb 630.5kb
yellow open wazuh-alerts-3.x-2019.01.01      nBWuE-f_RBGDb7A0h4QHfQ 5 1  973623      0   609mb   609mb
yellow open wazuh-monitoring-3.x-2018.05.18  nqzP30YYQjytd8jLAhX5JA 5 1   10080      0   2.9mb   2.9mb
green  open wazuh-monitoring-3.x-2019.02.07  RXGIS2YaRYiKFBYG_lxBeA 2 0    1488      0 628.2kb 628.2kb
green  open wazuh-alerts-3.x-2018.02.27      5xSpyZkNQm2fMNwxW4hVSQ 1 0  318187      0 166.7mb 166.7mb
green  open wazuh-alerts-3.x-2018.06.18      z957n-ZhTMOsvPcRdVlvsw 1 0  491399      0 278.6mb 278.6mb
yellow open wazuh-alerts-3.x-2019.06.28      s_hIuXX0SraLfb84kCgPQg 5 1 1119235      0 592.3mb 592.3mb
yellow open wazuh-monitoring-3.x-2018.12.05  7wBwgBKnRkSsqHdi6QUP-Q 5 1    1680      0   1.3mb   1.3mb
yellow open wazuh-monitoring-3.x-2018.09.03  9q9-1zvYQrG2tdBir6e76g 5 1    1568      0 976.5kb 976.5kb
yellow open wazuh-monitoring-3.x-2018.06.03  uGw_sKQZQrCZ3bR2R433Pg 5 1   10080      0   2.8mb   2.8mb
green  open wazuh-monitoring-3.x-2019.07.26  Rqdj8_V2RfOvRE6M55KxAA 2 0    5952      0   1.5mb   1.5mb
yellow open wazuh-alerts-3.x-2019.06.23      dzKRU68MRuudbW3T-M1nPQ 5 1  798432      0 413.9mb 413.9mb
green  open wazuh-alerts-3.x-2018.02.11      xtdviHL7SySlgIhlEzUPoQ 1 0  183625      0  83.4mb  83.4mb
yellow open wazuh-monitoring-3.x-2019.01.08  c5sEV5zURbyWALS6wPfyAQ 5 1    1680      0   1.3mb   1.3mb
yellow open wazuh-monitoring-3.x-2018.09.17  cpKMmcRpTcWo22mbfkMrbw 5 1    1748      0   1.2mb   1.2mb
green  open wazuh-monitoring-3.x-2019.03.24  AgK_aunDQOyB-8z0lbeHwg 2 0    1512      0 628.2kb 628.2kb
yellow open wazuh-alerts-3.x-2019.04.25      YadVJj1lRrCTDQ0Ccd2JgQ 5 1 1518880      0 877.7mb 877.7mb
yellow open wazuh-alerts-3.x-2018.12.08      ZVsZiY5sRFCxjXSPd-YQ6g 5 1  910286      0 586.9mb 586.9mb
green  open wazuh-monitoring-3.x-2019.02.21  ejXVqL7QTyWDj-ifcMzedA 2 0    1512      0 631.7kb 631.7kb
yellow open wazuh-alerts-3.x-2019.01.05      bpek6Bn0S3GEWTU0YViwVA 5 1  899481      0 566.9mb 566.9mb
green  open wazuh-monitoring-3.x-2019.04.03  Cc7aujLbRMKCM33ucgYAiw 2 0    1512      0 629.7kb 629.7kb
green  open wazuh-monitoring-3.x-2019.08.06  EfJ1BxbXQ1-dQoCL6mCpRA 2 0    1426      0 593.3kb 593.3kb
green  open wazuh-alerts-3.x-2018.01.26      ssWTiqI1Qv6qO_1AY4TluA 1 0  307046      0 159.1mb 159.1mb
yellow open wazuh-alerts-3.x-2019.02.07      vrDk5V4US1aXaSp-WMv54g 5 1 1235176      0 740.5mb 740.5mb
green  open wazuh-alerts-3.x-2018.08.07      ZrAmvrkYT1Wz4_JnwF7YZw 1 0  363701      0 283.6mb 283.6mb
yellow open wazuh-alerts-3.x-2019.02.24      3W2RLWn5TtOvvFDdHNZPiA 5 1 1327915      0 775.8mb 775.8mb
yellow open wazuh-alerts-3.x-2018.09.21      pyvivrTbTlmaq135vfovbQ 5 1 1023023      0 700.4mb 700.4mb
green  open wazuh-monitoring-3.x-2019.01.28  ti6Gvls0SVSXr8WGOEhi-A 2 0    1704      0 697.2kb 697.2kb
yellow open wazuh-alerts-3.x-2019.02.03      CpAyjFcGS3ueLmZJP1qcCg 5 1  872440      0 499.7mb 499.7mb
yellow open wazuh-monitoring-3.x-2018.09.09  K-QipsOUSCqrCLNZDVlhLw 5 1    1824      0   1.3mb   1.3mb
yellow open wazuh-alerts-3.x-2019.05.24      KWujhv1kQZ2eY28aTxblCA 5 1 1018976      0 570.7mb 570.7mb
green  open wazuh-alerts-3.x-2018.06.10      56-0PZMPQbOH8Khnf2qz0w 1 0  209340      0 135.1mb 135.1mb
yellow open wazuh-alerts-3.x-2019.02.27      FI5qcgU8RQOGo9B95zNlaA 5 1 1657561      0 926.6mb 926.6mb
yellow open wazuh-alerts-3.x-2019.03.06      FBORh0TXQtmE9PtaFxYcTQ 5 1 1701807      0 951.5mb 951.5mb
yellow open wazuh-alerts-3.x-2019.03.19      1_251_XXTI6-H2XoWLPHsg 5 1 1590778      0 871.6mb 871.6mb
yellow open wazuh-monitoring-3.x-2018.08.20  GWCNKl0PTzqCoAZ-p9uJIA 5 1    1702      0   1.2mb   1.2mb
green  open wazuh-monitoring-3.x-2019.08.01  xh883SfbSnmFgpFkz9SipQ 2 0    5952      0   1.6mb   1.6mb
yellow open wazuh-alerts-3.x-2019.03.11      t-WWs4MeT06ppfmJgd4-3w 5 1 1720743      0 977.3mb 977.3mb
yellow open wazuh-monitoring-3.x-2018.10.28  9PobLyz9RT2k6z69v-03UA 5 1    1656      0   1.2mb   1.2mb
yellow open wazuh-alerts-3.x-2018.10.13      N2QumQyNQEKhvFVPVhOXhw 5 1  760312      0 459.6mb 459.6mb
yellow open wazuh-alerts-3.x-2019.06.08      Ik1dqLGgSQit24OYQOzBbg 5 1  833319      0 448.2mb 448.2mb
green  open wazuh-monitoring-3.x-2019.03.26  g2t-2vYIS1a8w6-gFZOODg 2 0    1512      0 629.5kb 629.5kb
green  open wazuh-alerts-3.x-2019.07.13      D2Jo-iqTRiqBWuMdnsSR4Q 3 0  799514      0 410.3mb 410.3mb
yellow open wazuh-alerts-3.x-2019.05.25      bF54yZCVRh6m1kL01VvaDQ 5 1  852973      0 462.9mb 462.9mb
green  open wazuh-alerts-3.x-2018.07.17      bfzVjpyXSGmlSgOIfbRvRQ 1 0  593894      0 461.3mb 461.3mb
green  open wazuh-monitoring-3.x-2019.06.05  CmQCPy3QTeevqCL1xONExQ 2 0    1512      0 632.1kb 632.1kb
green  open wazuh-alerts-3.x-2018.01.24      0v65H9-rR8aF8W5xVLdvrw 1 0  347044      0   181mb   181mb
yellow open wazuh-alerts-3.x-2019.01.27      pkpROjpAQJuHlq3wjRqx5w 5 1  796216      0 446.9mb 446.9mb
green  open wazuh-alerts-3.x-2018.05.11      zYDX4hfHQ1CB4ysLiZZvzg 1 0  282699      0 222.5mb 222.5mb
yellow open wazuh-alerts-3.x-2019.04.16      e9TGlqlIR96c9Vg3PVu8mQ 5 1 1670674      0 932.9mb 932.9mb
yellow open wazuh-alerts-3.x-2018.12.18      -8mvnJ5fTTuOIsL-aMch0A 5 1 1308164      0 887.7mb 887.7mb
green  open wazuh-monitoring-3.x-2019.02.01  yzbIBITtQLG1-HlzJWOVQg 2 0    1704      0   707kb   707kb
green  open wazuh-monitoring-3.x-2019.02.02  LpjMFH1ySQq8JNI-dzwBhg 2 0    1704      0   729kb   729kb
yellow open wazuh-alerts-3.x-2018.10.23      gTAN-00hR4SBGD0dcJVdkA 5 1 3090048      0   1.3gb   1.3gb
yellow open wazuh-alerts-3.x-2019.06.25      i9bnTTU7Qkus6id7jHR0Yw 5 1 1240104      0 654.9mb 654.9mb
green  open wazuh-alerts-3.x-2018.06.13      sESfssHaRPCULIRiy8CH8A 1 0  517108      0 345.2mb 345.2mb
green  open wazuh-alerts-3.x-2018.07.11      n6zMi3usSO2Rf_hjhr1uJw 1 0  510970      0 414.5mb 414.5mb
yellow open wazuh-monitoring-3.x-2018.08.17  bPIgc77TQc20IZezzduNHA 5 1    1776      0   1.3mb   1.3mb
yellow open wazuh-alerts-3.x-2018.10.16      54pelHdkRqKgGNpyKZ15ow 5 1 1050466      0 689.6mb 689.6mb
yellow open wazuh-alerts-3.x-2019.05.01      UC4nwlYYTmaCYMW_1CrLHA 5 1 1388992      0 855.5mb 855.5mb
green  open wazuh-monitoring-3.x-2019.01.23  Ki2ARxsLSne7UouM8ZhTGQ 2 0    1704      0 727.2kb 727.2kb
yellow open wazuh-monitoring-3.x-2018.05.14  opb1wuULSqaSLmTzzEOTbQ 5 1   10010      0   2.7mb   2.7mb
yellow open wazuh-alerts-3.x-2019.04.23      GU1biL47QymLUO6XV3XGCg 5 1 1543507      0 884.6mb 884.6mb
yellow open wazuh-alerts-3.x-2018.09.10      ZNINo4IGSjOBZZG2SEW5Rg 5 1  889829      0 600.8mb 600.8mb
yellow open wazuh-alerts-3.x-2018.09.12      yGYh5hnyThCl7pXeKfQBeg 5 1 1009933      0 665.3mb 665.3mb
yellow open wazuh-monitoring-3.x-2018.08.27  ZxZmLkInSBCyzlJA7IxFpw 5 1    1776      0   1.3mb   1.3mb
green  open wazuh-monitoring-3.x-2019.07.20  BaUR9qgJSnuK_F3Ji5RD1A 2 0    5952      0   1.6mb   1.6mb
green  open wazuh-alerts-3.x-2018.04.07      eVmPnDc_RKuRRcpZzso4Nw 1 0  171029      0  79.4mb  79.4mb
green  open wazuh-monitoring-3.x-2019.04.04  FUfBpiqRRi6dhAoPxSXx0A 2 0    1512      0 627.2kb 627.2kb
yellow open wazuh-monitoring-3.x-2018.05.03  i5aBtrdmR7eX114khK956A 5 1   10080      0   2.8mb   2.8mb
yellow open wazuh-alerts-3.x-2018.10.24      gsmU8MaBSzyXMwh0r0ROIQ 5 1 1024282      0 681.3mb 681.3mb
yellow open wazuh-alerts-3.x-2018.12.14      ufDwhDvzRz2iVk2M-hTuJQ 5 1 1119732      0 751.7mb 751.7mb
green  open wazuh-monitoring-3.x-2019.06.30  Ou0K24nFSQmbDjYN1Rl5oQ 2 0    1512      0 633.6kb 633.6kb
green  open wazuh-alerts-3.x-2018.03.27      OhG-4_-9SBO605KAoXPQDA 1 0  297885      0 152.6mb 152.6mb
green  open wazuh-monitoring-3.x-2019.02.04  YYxLqDd5SeKE_IRbuTeuaQ 2 0    1704      0 702.3kb 702.3kb
green  open wazuh-alerts-3.x-2019.08.03      nZ7IzxSzQFa5ZqKrLtPHxA 3 0  791322      0 403.6mb 403.6mb
green  open wazuh-alerts-3.x-2018.04.28      -tU6qErLRjSHAOULYNYzZw 1 0  168851      0  90.1mb  90.1mb
yellow open wazuh-alerts-3.x-2018.12.05      hp_Edj8iRhOyYVJO6_4kRA 5 1 1159177      0 822.4mb 822.4mb
green  open wazuh-alerts-3.x-2018.03.15      _TUnPfGARMOXg9ALR0qVlA 1 0  334718      0 170.7mb 170.7mb
green  open .monitoring-es-6-2019.08.05      c9OgNlhpRdORbDBOp6SJRw 1 0 9753259  68438   4.3gb   4.3gb
yellow open wazuh-monitoring-3.x-2018.09.20  oRc5hpq_Qb6neqSGgwxJjg 5 1    1741      0   1.3mb   1.3mb
green  open wazuh-alerts-3.x-2018.06.04      61qPbFuDTUuq0l56F65j1w 1 0  534590      0 354.7mb 354.7mb
yellow open wazuh-alerts-3.x-2019.05.06      GOv-eq97SwGR7W-75uP3wQ 5 1 1228404      0 704.8mb 704.8mb
green  open wazuh-monitoring-3.x-2019.05.29  GHJn_aWKTXW7lN8rEbd3UQ 2 0    1512      0 630.3kb 630.3kb
green  open wazuh-alerts-3.x-2018.03.05      1xZU-njfQ4GkRRssxzoF8g 1 0  215176      0 124.8mb 124.8mb
yellow open wazuh-alerts-3.x-2019.05.30      zIyr6HLnTe6CZepc6Jc7HA 5 1  865276      0 521.7mb 521.7mb
yellow open wazuh-alerts-3.x-2018.12.25      k70txx8wQsuQOdwNsdgJvw 5 1  970991      0 596.3mb 596.3mb
green  open .kibana_2                        0Fe1_QLKTr61IRV3a6OPhg 1 0      70      5 217.2kb 217.2kb
green  open wazuh-alerts-3.x-2018.05.19      37ZC0wH2SgG5hQJKuTdyfA 1 0  201814      0 129.1mb 129.1mb
green  open wazuh-alerts-3.x-2018.05.04      ipU6vUMzQLeERxunkSzcug 1 0  296667      0 170.3mb 170.3mb
yellow open wazuh-alerts-3.x-2019.06.07      0_SsNi4eTC2MwDeCAEJOJg 5 1 1127175      0 604.8mb 604.8mb
yellow open wazuh-monitoring-3.x-2018.10.14  aQL3wchyQUSbWdsMBC7kvQ 5 1    1632      0   1.2mb   1.2mb
green  open wazuh-alerts-3.x-2019.07.31      2C1QAHBhQnKcoVZLoRAK7A 3 0  998904      0 514.4mb 514.4mb
yellow open wazuh-monitoring-3.x-2018.11.09  kbDG7PTKQt60at8du0achQ 5 1    1680      0   1.3mb   1.3mb
yellow open wazuh-monitoring-3.x-2018.10.13  1V2AujR-R7GoU6Dg9QJf-w 5 1    1632      0   1.2mb   1.2mb
green  open wazuh-monitoring-3.x-2019.01.30  YdSbnt0TT5uUFbGeKG51QQ 2 0    1704      0 702.6kb 702.6kb
yellow open wazuh-monitoring-3.x-2018.11.23  d3gOeCcUQ2Go6AbQ1j1Gwg 5 1    1680      0   1.2mb   1.2mb
yellow open wazuh-alerts-3.x-2018.09.22      4jYLtQq3TrKQFmehKDMCRg 5 1  810731      0 529.1mb 529.1mb
yellow open wazuh-alerts-3.x-2018.10.31      p-VCeJDURU2_yXPayZF2-A 5 1 1075519      0 743.2mb 743.2mb
green  open .monitoring-kibana-6-2019.08.02  VOpJ5bDhRFiMn4hh94jdnw 1 0    8639      0   1.9mb   1.9mb
green  open wazuh-alerts-3.x-2018.07.02      hZxPiQLMRh6fveIj8pGSmA 1 0 1195868      0 949.9mb 949.9mb
green  open wazuh-alerts-3.x-2018.07.12      WbGRrYd5RG2VXD-VmPYsSA 1 0  541151      0 380.6mb 380.6mb
green  open wazuh-monitoring-3.x-2019.04.22  qBWF3uFDQbWSIfKCzkXxGw 2 0    1512      0 631.1kb 631.1kb
yellow open wazuh-alerts-3.x-2019.06.18      t-30x_9VQKaR5gEyqdapQg 5 1 1262962      0 664.4mb 664.4mb
green  open wazuh-alerts-3.x-2018.06.11      7UckTFeKQk6lt72c5-2UKw 1 0  493559      0 330.9mb 330.9mb
yellow open wazuh-monitoring-3.x-2018.10.07  71ZEeHssRPuCJ-XlfmyOeg 5 1    1608      0   1.2mb   1.2mb
green  open wazuh-alerts-3.x-2018.04.11      BLhWTPOgQN2s2jQM-gLaig 1 0  297609      0 149.8mb 149.8mb
yellow open wazuh-monitoring-3.x-2018.10.30  6qEViNYXSHq1F7oXz5eQDA 5 1    1669      0   1.3mb   1.3mb
yellow open wazuh-alerts-3.x-2018.09.23      MCFlhEBTTMywzdZezIU1gw 5 1  918388      0 592.2mb 592.2mb
yellow open wazuh-alerts-3.x-2019.01.23      Y9w1425kRtG95cZQvdVgwQ 5 1 1645189      0     1gb     1gb
yellow open wazuh-alerts-3.x-2018.09.02      RfNSNTMrQDmrS-v68lhhug 5 1  324810      0 230.4mb 230.4mb
green  open wazuh-monitoring-3.x-2019.06.11  VHWmBjEjTAei670GR7-vfA 2 0    1512      0 630.1kb 630.1kb
yellow open wazuh-monitoring-3.x-2018.05.26  Sbc7fGDxR0i_MunKlcCCSg 5 1   10080      0   2.7mb   2.7mb
green  open wazuh-alerts-3.x-2018.02.17      5aKi26-bRZaKj8v7qyp3uw 1 0  156794      0  72.9mb  72.9mb
yellow open wazuh-alerts-3.x-2019.02.25      p-6-dsaqRfC0grG2i2YN5g 5 1 1612256      0 900.9mb 900.9mb
green  open wazuh-monitoring-3.x-2019.02.28  Yd8SJKr_SmuJ4dbDDwO0gQ 2 0    1426      0 563.3kb 563.3kb
yellow open wazuh-alerts-3.x-2018.08.25      oak-6hjyRu6zp7wL-YVIGg 5 1  201240      0 160.1mb 160.1mb
green  open wazuh-alerts-3.x-2018.05.24      -fYGmNK4SOGnEicO69DRNQ 1 0  445896      0 295.1mb 295.1mb
yellow open wazuh-alerts-3.x-2019.04.26      CW-zmanUQCayJPT1s6C9vA 5 1 1457443      0 836.4mb 836.4mb
green  open wazuh-monitoring-3.x-2019.04.15  sg9avDcrTZSQTjD5GHAwjg 2 0    1512      0 628.2kb 628.2kb
yellow open wazuh-alerts-3.x-2018.09.03      dWCnCN75TPmxbEhzno_MLQ 5 1  551385      0 411.3mb 411.3mb
green  open wazuh-monitoring-3.x-2019.02.22  1itpy946SCizxzJGxApSTA 2 0    1512      0 631.7kb 631.7kb
yellow open wazuh-monitoring-3.x-2018.05.09  27unmjZqSoyBoZsRMu4qRw 5 1   10080      0   2.8mb   2.8mb
yellow open wazuh-monitoring-3.x-2018.12.15  BGYXm740QTiMomD_VaAagQ 5 1    1680      0   1.3mb   1.3mb
green  open wazuh-monitoring-3.x-2019.02.20  gt2OHyUgQVOuXC4m9X0M4g 2 0    1449      0 571.5kb 571.5kb
green  open wazuh-monitoring-3.x-2019.03.06  u_PUKwqQQfG7OwdFhMtJwQ 2 0    1488      0 623.3kb 623.3kb
yellow open wazuh-monitoring-3.x-2018.11.22  Ycgoax2eQgqbpE4hYwW3uA 5 1    1680      0   1.3mb   1.3mb
yellow open wazuh-alerts-3.x-2018.12.31      qcY9bMUEQfKC15E8vr_JKw 5 1 1115591      0 722.1mb 722.1mb
yellow open wazuh-monitoring-3.x-2018.10.19  -__k2YS0TRivE3mq_RGZuA 5 1    1656      0   1.2mb   1.2mb
green  open wazuh-monitoring-3.x-2019.07.22  WZTDfozpTD2I2IhjJ_V0KQ 2 0    5890      0   1.5mb   1.5mb
yellow open wazuh-alerts-3.x-2019.07.07      IwuZAyXxS6qoyuohWGu17w 5 1  791852      0 419.4mb 419.4mb
yellow open wazuh-monitoring-3.x-2018.10.27  JSYu2oMzRoS0wy-lZOB6AQ 5 1    1656      0   1.2mb   1.2mb
yellow open wazuh-monitoring-3.x-2018.05.29  eKQrZx0DSA2cjvWRFkS2Nw 5 1   10080      0   2.9mb   2.9mb
green  open wazuh-monitoring-3.x-2019.06.25  edUYU4qJT5GXh-R0YFjJhA 2 0    1512      0 630.9kb 630.9kb
green  open wazuh-alerts-3.x-2018.06.01      ixTVgcNtQB6kQ0QtVpzURw 1 0  429620      0 290.6mb 290.6mb
green  open wazuh-alerts-3.x-2018.05.12      CquCZIKQQaGszDUkOEKeRA 1 0  213008      0 145.1mb 145.1mb
yellow open wazuh-monitoring-3.x-2018.07.06  5v2yooBMTZCK63JkbeFPpg 5 1     432      0 649.1kb 649.1kb
green  open wazuh-monitoring-3.x-2019.03.20  Pe5Lr596TrCZR4y1bbv0RQ 2 0    1512      0 633.1kb 633.1kb
green  open wazuh-monitoring-3.x-2019.05.30  IPBJ9YkXSIehrj0e4eMdhw 2 0    1512      0 628.5kb 628.5kb
green  open wazuh-alerts-3.x-2019.07.17      pQWTIhumS-q5zeTc-hfN8w 3 0 1177892      0 625.6mb 625.6mb
yellow open wazuh-alerts-3.x-2019.07.05      xL8EmLOUQpedil7bk3bosw 5 1 1084108      0 587.3mb 587.3mb
green  open wazuh-monitoring-3.x-2019.07.18  61aVNGd4Qfyp2G4-0wSHLg 2 0    5952      0   1.6mb   1.6mb
green  open wazuh-alerts-3.x-2018.06.25      FZF2H2lvRoC1cTCvQgJOvw 1 0  487446      0 318.5mb 318.5mb
green  open wazuh-monitoring-3.x-2019.06.14  _nsG10PfST-1dRD5xGHFNQ 2 0    1512      0 630.4kb 630.4kb
yellow open wazuh-alerts-3.x-2018.09.08      XXKVpkNHQ9q5angMFgATqQ 5 1  720915      0 461.3mb 461.3mb
green  open wazuh-monitoring-3.x-2019.01.22  QpAoYzfATv-SmZPXZiYP9A 5 0    1410      0 753.3kb 753.3kb
yellow open wazuh-alerts-3.x-2019.01.26      BHROOjvzRp2U5pFUC07roQ 5 1  783775      0 438.5mb 438.5mb
yellow open wazuh-monitoring-3.x-2018.05.13  s5LECN6ZSNaV_JxgmaIkIw 5 1   10080      0   2.7mb   2.7mb
yellow open wazuh-monitoring-3.x-2018.06.22  WqaQZ6a-RLm8eKFNxghb9g 5 1    1704      0 993.9kb 993.9kb
green  open wazuh-alerts-3.x-2018.06.22      vCfh3uIxSgmX67sp-U0GQw 1 0  462777      0 315.8mb 315.8mb
green  open wazuh-monitoring-3.x-2019.04.13  4LzGlN4gTeOQuGetCuEOWQ 2 0    1512      0 629.2kb 629.2kb
green  open wazuh-alerts-3.x-2018.05.13      zIXPRjQPTsGhvoBCcgYHtA 1 0  200823      0 133.8mb 133.8mb
green  open .kibana_3                        UQaDLSGJR_2YVvnh4WwHaA 1 0      73      3 228.8kb 228.8kb
yellow open wazuh-monitoring-3.x-2019.01.20  mA1g_SoFSD-unCy3CIVKcQ 5 1    1680      0   1.3mb   1.3mb
yellow open wazuh-monitoring-3.x-2018.12.21  YmlC3TboSOuTl_BLxXITzw 5 1    1680      0   1.2mb   1.2mb
yellow open wazuh-alerts-3.x-2019.06.30      UidQB5WNQfuZXnU0kpjlkQ 5 1  822804      0 428.4mb 428.4mb
yellow open wazuh-alerts-3.x-2018.12.24      iuQ04XxlS1WBt96k4BveEw 5 1 1034795      0 664.1mb 664.1mb
green  open wazuh-monitoring-3.x-2019.03.13  _k2AbRxwRsSXB3c7vbBhMg 2 0    1512      0   630kb   630kb
yellow open wazuh-alerts-3.x-2019.05.28      F4ppRH8-QDG9u6_1_WTagQ 5 1 1058583      0 583.5mb 583.5mb
yellow open wazuh-alerts-3.x-2018.12.04      R9NHZMqmSFabOeVeP3NaIg 5 1 1201493      0 834.4mb 834.4mb
green  open wazuh-monitoring-3.x-2019.05.23  TpfkRM-7QISUSjr335Gpdg 2 0    1512      0 627.6kb 627.6kb
green  open wazuh-monitoring-3.x-2019.06.27  FA5opA7GSIOQIcAGkUJGOg 2 0    1512      0   630kb   630kb
yellow open wazuh-alerts-3.x-2019.06.02      CeZ4sma8RfWPYA-xzBTWpA 5 1  875118      0 472.6mb 472.6mb
green  open wazuh-monitoring-3.x-2019.01.26  aK56XnTiStaj5hbc7M99Hw 2 0    1704      0 697.4kb 697.4kb
green  open wazuh-alerts-3.x-2018.05.14      JbQ_coYDQFyEecvtFllstw 1 0  496715      0 329.4mb 329.4mb
yellow open wazuh-alerts-3.x-2018.11.13      CHtYCiNvTkuoBNt_mZEuaQ 5 1 1100592      0 768.8mb 768.8mb
green  open wazuh-monitoring-3.x-2019.02.14  0GZuBFAERWu0EMyM9WMskA 2 0    1504      0 628.6kb 628.6kb
yellow open wazuh-monitoring-3.x-2018.10.15  J2-jEiGERw22_5ixbJCBlA 5 1    1641      0   1.2mb   1.2mb
green  open wazuh-alerts-3.x-2018.05.21      syR_rQ2iQ2mAk6EGUQdsNw 1 0  204059      0 130.8mb 130.8mb
yellow open wazuh-monitoring-3.x-2018.11.18  C7zqpO6CRSOWCtl3A4wmuw 5 1    1680      0   1.3mb   1.3mb
yellow open wazuh-alerts-3.x-2019.05.07      _VwjIVDVRlC0vD0ix0W8PA 5 1 1302873      0 739.6mb 739.6mb
green  open wazuh-alerts-3.x-2018.04.18      U9MX2vm9TaKNViyfAcZF5w 1 0  330243      0 164.3mb 164.3mb
yellow open wazuh-alerts-3.x-2019.03.04      -_05aAmKSLmxfZPU66A6Og 5 1 1574909      0 871.7mb 871.7mb
green  open wazuh-alerts-3.x-2018.03.19      IxWyuYOBSS--WV50EONUsA 1 0  264231      0 141.2mb 141.2mb
green  open wazuh-monitoring-3.x-2019.03.31  vVCBsJhCRZSqtaA-co4wVA 2 0    1512      0 625.7kb 625.7kb
yellow open wazuh-alerts-3.x-2019.02.19      Kg5HxXPhSqiLwBLzjEFX1w 5 1 1343145      0 865.5mb 865.5mb
yellow open wazuh-alerts-3.x-2019.02.26      ShBsKuHpRtKBNYH9n4sK-A 5 1 1640203      0   906mb   906mb
yellow open wazuh-monitoring-3.x-2018.10.05  G33eSLZqRiyoFJFlxqX76w 5 1    1608      0   1.2mb   1.2mb
yellow open wazuh-alerts-3.x-2019.03.27      oIpnnZJbTO2LWtr9jS_xjg 5 1 1669797      0 965.9mb 965.9mb
yellow open wazuh-alerts-3.x-2019.02.05      UuVXd3kkQbqq29knLBFwdA 5 1 1165425      0 700.5mb 700.5mb
yellow open wazuh-alerts-3.x-2019.02.12      b5tNou0oR_efFMHbHa0mBA 5 1 1370691      0 879.9mb 879.9mb
yellow open filebeat-7.2.0-2019.08.07-000001 2So2wxGETQmw_3oEMOQJpw 1 1       0      0    283b    283b
yellow open wazuh-alerts-3.x-2019.04.20      MLcTf8j7Qii6VX-UNUYJAQ 5 1 1278188      0 712.5mb 712.5mb
yellow open wazuh-alerts-3.x-2018.11.22      faIzk2rESx-Ulgxx8McDsg 5 1 1245623      0 890.4mb 890.4mb
yellow open wazuh-alerts-3.x-2019.05.16      3LeVOVb0Su-i9HDgjA1xOA 5 1 1468259      0 839.1mb 839.1mb
green  open wazuh-monitoring-3.x-2019.06.26  SoBCYJT0T8yUU2tF2ORQiQ 2 0    1512      0 633.7kb 633.7kb
yellow open wazuh-alerts-3.x-2018.08.23      -Q3gUsoJQvmCrlHYS0Cemg 5 1  407741      0 310.8mb 310.8mb
yellow open wazuh-alerts-3.x-2018.10.21      -WcMORyzS0GMG-w0koP9Vg 5 1  751452      0 463.4mb 463.4mb
yellow open wazuh-alerts-3.x-2018.10.03      0GWIQR6rTt2z_wCYcDLrmw 5 1 1100443      0   699mb   699mb
yellow open wazuh-monitoring-3.x-2019.01.15  ahcS4g7mSd-sABJ5_Cmj0A 5 1    1680      0   1.3mb   1.3mb
green  open wazuh-monitoring-3.x-2019.06.13  Dl4QK5TkT2GG8v6t-8paUw 2 0    1512      0 629.8kb 629.8kb
yellow open wazuh-alerts-3.x-2018.10.08      OBWe56jLTiyoVK3Zxzd31g 5 1 1096010      0 721.9mb 721.9mb
green  open wazuh-alerts-3.x-2018.05.30      durhvJqeTvSW0xtpglZ4bA 1 0  421611      0 293.5mb 293.5mb
yellow open wazuh-alerts-3.x-2018.11.11      Pk78yS0GRLSWBnxj0yuT6w 5 1  784715      0 490.9mb 490.9mb
yellow open wazuh-alerts-3.x-2018.08.31      WUdtkAdBSWS97UCLdcnQ2A 5 1  416764      0 332.2mb 332.2mb
yellow open wazuh-alerts-3.x-2018.12.10      uoTTQ_RVQgWjxB2m05o4WQ 5 1 1207241      0 863.7mb 863.7mb
yellow open wazuh-alerts-3.x-2019.05.04      lalWIFQ3TKa7j-AOUxw-Yw 5 1  931776      0 516.8mb 516.8mb
yellow open wazuh-monitoring-3.x-2018.12.16  1d_b_D7nQqaBwk9HflUxkw 5 1    1680      0   1.2mb   1.2mb
green  open wazuh-alerts-3.x-2018.06.23      HErg4V7wQ8KcbaGlPlHTDg 1 0  263704      0 195.3mb 195.3mb
green  open wazuh-monitoring-3.x-2019.04.09  yx4SVgn-SFavGUWL_YwqrQ 2 0    1512      0 629.4kb 629.4kb
yellow open wazuh-monitoring-3.x-2018.04.27  ZODJZIpTQ2Gk1ECCnXHLSQ 5 1   10080      0   2.8mb   2.8mb
yellow open wazuh-alerts-3.x-2019.04.05      ARDxZUwfT-CxvF5mtN1XNQ 5 1 1550971      0 847.4mb 847.4mb
green  open wazuh-monitoring-3.x-2019.07.07  pYEH0tiyQROXEC3H_6LrEw 2 0    1512      0 632.9kb 632.9kb
green  open wazuh-alerts-3.x-2018.03.21      sItDN5nYSuGQoL7cj2L1Pw 1 0  298922      0   147mb   147mb
green  open wazuh-monitoring-3.x-2019.02.16  xu-BAwugS3C82VPpkzhXxw 2 0    1512      0 626.3kb 626.3kb
green  open wazuh-monitoring-3.x-2019.07.30  GXjBN7CvQi24lpn6SvSMxg 2 0    5890      0   1.2mb   1.2mb
green  open wazuh-monitoring-3.x-2019.03.11  pLA-aMfcR26Wv-ej-AWc-w 2 0    1500      0 629.4kb 629.4kb
yellow open wazuh-alerts-3.x-2018.09.26      JWBF9fu9QzSgo4MkgwCP6g 5 1 1483251      0     1gb     1gb
green  open wazuh-alerts-3.x-2018.01.22      jln7PFzRSfWujStxgUIWwA 1 0  330709      0 166.4mb 166.4mb
yellow open wazuh-alerts-3.x-2019.04.09      RaDkv-B-SauLnUFuEMhN5g 5 1 1709974      0 951.4mb 951.4mb
yellow open wazuh-alerts-3.x-2019.01.19      Q1Ql91aJRwuAt0d1qg9NQg 5 1  875128      0 549.4mb 549.4mb
green  open wazuh-alerts-3.x-2018.07.24      JrQ2yRZnSyiCKxd9SN8c-Q 1 0  653590      0 483.8mb 483.8mb
green  open wazuh-monitoring-3.x-2019.01.31  EQTSfL72QKKPsRFTHMgIog 2 0    1704      0 702.5kb 702.5kb
yellow open wazuh-monitoring-3.x-2018.09.18  IwIriX06RJiIiNsSj4Zpgg 5 1    1824      0   1.3mb   1.3mb
yellow open wazuh-alerts-3.x-2019.06.05      9v-z6ZNERSqpkGvbZjfFSQ 5 1 2491405      0   7.2gb   7.2gb
yellow open wazuh-monitoring-3.x-2018.08.19  3gw0K4ouQCu9OlAqGNW_tw 5 1    1776      0   1.3mb   1.3mb
yellow open wazuh-alerts-3.x-2018.09.24      CVgvmRO7S6CxGuyedbq96w 5 1 1464008      0     1gb     1gb
yellow open wazuh-alerts-3.x-2019.04.11      QpnzhQ1nRwKgLz-Z1Sl2MA 5 1 1606005      0 885.6mb 885.6mb
yellow open wazuh-monitoring-3.x-2018.12.03  5cjFuKdSTNabj4EHqsF9dA 5 1    1680      0   1.2mb   1.2mb
green  open wazuh-alerts-3.x-2018.08.04      uITaOSVqSy2JKvi4wX8BhA 1 0  309027      0 281.1mb 281.1mb
yellow open wazuh-alerts-3.x-2019.03.20      W63DIqcCTzOy_bpSjGi-1A 5 1 1624425      0 886.5mb 886.5mb
yellow open wazuh-monitoring-3.x-2018.12.06  pbO_mdiNSi-GZIx1sgzXjQ 5 1    1610      0   1.1mb   1.1mb
yellow open wazuh-alerts-3.x-2018.12.30      i8Lq3EUyQLicJeezG6TY9A 5 1  891425      0 568.9mb 568.9mb
yellow open wazuh-alerts-3.x-2019.01.18      DPBp9OtGT3-7GjV2j-ikVA 5 1 1093110      0 738.5mb 738.5mb
yellow open wazuh-monitoring-3.x-2018.09.05  3aWXKizvTiOGW2oTrV5FXQ 5 1    1824      0   1.3mb   1.3mb
yellow open wazuh-monitoring-3.x-2018.05.06  9Ql70B6vRNGDxdCJRes7Lw 5 1   10080      0   2.8mb   2.8mb
yellow open wazuh-alerts-3.x-2018.09.25      XwaoJVEGTumJghIAXZFIeA 5 1  888328      0 626.4mb 626.4mb
yellow open wazuh-monitoring-3.x-2018.09.13  rv1fkEGbTzGker1TNELs9w 5 1    1824      0   1.3mb   1.3mb
yellow open wazuh-alerts-3.x-2019.04.15      VGvhWgRzSY6Yadrd2aompA 5 1 1580397      0   872mb   872mb
green  open wazuh-monitoring-3.x-2019.05.09  RQ5htafFSz-s6zfj1LqGkw 2 0    1512      0 624.6kb 624.6kb
green  open wazuh-monitoring-3.x-2019.01.29  mvT099BiRRSINYJTDUA46g 2 0    1704      0 697.6kb 697.6kb
yellow open wazuh-alerts-3.x-2018.12.28      lgmDpM8LQgmkVrXmXp6KaQ 5 1 1131800      0 752.2mb 752.2mb
green  open wazuh-alerts-3.x-2018.03.14      16EOFGtGT26slbyZvVOt5w 1 0  335884      0 176.5mb 176.5mb
yellow open wazuh-alerts-3.x-2019.02.04      D8KkWxLfTVy3vgUUQVZngg 5 1 1126920      0 697.2mb 697.2mb
yellow open wazuh-alerts-3.x-2018.11.01      6hS-JlrQQHG1UzMaFUrzMw 5 1  813704      0 514.7mb 514.7mb
green  open wazuh-alerts-3.x-2018.07.07      TjgymNipQX6LPNZxyKXicA 1 0  257163      0 219.4mb 219.4mb
yellow open wazuh-alerts-3.x-2019.02.21      3WaAhgdLS8CvxPkYeBeWeQ 5 1 1649842      0     1gb     1gb
yellow open wazuh-alerts-3.x-2018.10.04      HDvOpTxUQf2oCRwzQX69XQ 5 1 1049872      0 633.1mb 633.1mb
green  open wazuh-alerts-3.x-2018.04.03      wz5so8nFQ5eDkPBOgD0wwg 1 0  318844      0 163.7mb 163.7mb
yellow open wazuh-alerts-3.x-2019.03.28      JmblQofAQ22lNmKAPmXH1Q 5 1 1636281      0   906mb   906mb
yellow open wazuh-alerts-3.x-2019.03.29      v1r05frVRMm4nXTufPP6EQ 5 1 1540603      0 837.5mb 837.5mb
yellow open wazuh-alerts-3.x-2019.01.09      xH15PMdgSdKZVQdZdutCeA 5 1 1228091      0 851.6mb 851.6mb
yellow open wazuh-alerts-3.x-2019.03.01      5gVGbhDnRf2wjynqzxe-nA 5 1 1529269      0 844.1mb 844.1mb
green  open wazuh-monitoring-3.x-2019.02.06  Bb73lNANQV6oGcprl6VjNA 2 0    1488      0 642.8kb 642.8kb
green  open wazuh-alerts-3.x-2018.04.09      PDODHBiWRBahIBla7ssEIQ 1 0  286913      0   144mb   144mb
green  open wazuh-alerts-3.x-2018.07.19      pnnZfCapRq2JPCVTX_vWfw 1 0  596223      0 470.2mb 470.2mb
yellow open wazuh-monitoring-3.x-2018.12.08  t0tTpgMTQ8aC2VFqIC1IXw 5 1    1680      0   1.3mb   1.3mb
yellow open wazuh-monitoring-3.x-2018.09.19  PBTgp58YRVyWegkCPxfHWA 5 1    1808      0   1.3mb   1.3mb
green  open wazuh-monitoring-3.x-2019.08.03  SRmiqlL1RDK7rxlcjl4Crw 2 0    5952      0   1.6mb   1.6mb
green  open wazuh-monitoring-3.x-2019.05.04  Co6jQEN8TT26LQvW92XchA 2 0    1512      0   626kb   626kb
green  open wazuh-monitoring-3.x-2019.05.10  whNz3oR6T8q-Mg_tZTtZBQ 2 0    1512      0 625.8kb 625.8kb
green  open wazuh-monitoring-3.x-2019.05.21  6dp_rP0tS9mqKNM9I3OAHw 2 0    1512      0 627.6kb 627.6kb

Pablo Torres

unread,
Aug 7, 2019, 5:08:25 AM8/7/19
to Wazuh mailing list
Hi Javier,

Thanks for the output, as you only have 1 node you have to reduce the number of replica shards:
curl -XPUT 'ELASTIC_IP:9200/*/_settings' -H 'Content-Type: application/json' -d '{ "index": { "number_of_replicas": "0" } }'

Then we have to ensure that routing allocation is enabled:
curl -XPUT 'ELASTIC_IP:9200/_cluster/settings'  -'Content-Type: application/json'  -'{ "transient": { "cluster.routing.allocation.enable" : "all" } }'

Restart Elasticsearch:
systemctl restart elasticsearch

And now we'll put a watch to check if the active shards increases or not:
watch -n0 'curl -s localhost:9200/_cluster/health?pretty | grep "active_shards_percent"'
Wait a few minutes until that number gets to 100% or gets stuck.

Regards,
Pablo Torres

Javier Martín-Moreno Guijarro

unread,
Aug 7, 2019, 6:18:23 AM8/7/19
to Wazuh mailing list
Dear Pablo,

It seems that everything start to work at the end. Now I have other problems in Kibana... sorry for all inconvenience I'm causing, maybe other people can use it in the future :)

Now in Kibana Discover I see this:

DiscoverProblem.png


And in Wazuh app:


WazuhApp_Problem.png


It suppose that new logs arrives with new timestamp field no? To read old logs I should make Field migration from @timestamp to timestamp but, for new logs this field arrives directlly if i'm not wrong so, I should see in Kibana at least the last logs that are arriving...


I hope not bother you much more...


Thanks and regards!

Pablo Torres

unread,
Aug 7, 2019, 7:11:30 AM8/7/19
to Wazuh mailing list
Hi Javier,

I'm glad to see that Elasticsearch is working, let's see now what's going on with Kibana.

Let's reinstall Wazuh App:

1. Stop Kibana

systemctl stop kibana


2. Clean the Kibana related indices: It's important to know that removing .kibana index will make you lose all your kibana settings (indexes, graphs, dashboards), in case you don't mind loosing these Kibana settings do these commands: (otherwise you will have to export saved object, remove the index and import those previous saved objects on the new index)

curl -XDELETE ELASTIC_IP:9200/.wazuh, .wazuh-version
curl
-XDELETE ELASTIC_IP:9200/.kiban*


3. Remove generated bundles

 /usr/share/kibana/bin/kibana-plugin remove wazuh
 rm
-rf /usr/share/kibana/optimize/bundles



4. Reinstall the app ( this following command will install 3.9.3_7.2.0 Wazuh APP,  please replace with the APP your Wazuh and ELK versions support, you can check here supported versions: https://github.com/wazuh/wazuh-kibana-app/tree/master#older-packages)
 sudo -u kibana /usr/share/kibana/bin/kibana-plugin install https://packages.wazuh.com/wazuhapp/wazuhapp-3.9.3_7.2.0.zip


5. Restart Kibana and wait few minutes
 systemctl restart kibana

Let me know if it helps,

Best regards,
Pablo Torres

Javier Martín-Moreno Guijarro

unread,
Aug 8, 2019, 2:07:46 AM8/8/19
to Wazuh mailing list
Hi Pablo!

Let's go with news. I've reinstalled Wazuh App and now I have this meesage:

{"message":"all shards failed: [search_phase_execution_exception] all shards failed","statusCode":503,"error":"Service Unavailable"}

With curl ELASTIC_IP:9200/_cat/indices all indices are in green now.

More information:

root@wazuhdb:~# curl 134.16.1.201:9200/_cluster/allocation/explain?pretty
{
  "index" : "wazuh-alerts-3.x-2018.09.28",
  "shard" : 4,
  "primary" : true,
  "current_state" : "unassigned",
  "unassigned_info" : {
    "reason" : "CLUSTER_RECOVERED",
    "at" : "2019-08-08T05:48:02.051Z",
    "last_allocation_status" : "throttled"
  },
  "can_allocate" : "throttled",
  "allocate_explanation" : "allocation temporarily throttled",
  "node_allocation_decisions" : [
    {
      "node_id" : "nudsfmqLSC2WW6MhUCdsvw",
      "node_name" : "wazuhdb",
      "transport_address" : "134.16.1.201:9300",
      "node_attributes" : {
        "ml.machine_memory" : "33611071488",
        "xpack.installed" : "true",
        "ml.max_open_jobs" : "20"
      },
      "node_decision" : "throttled",
      "store" : {
        "in_sync" : true,
        "allocation_id" : "-ouryJwNTA-jm6PK-a3cYg"
      },
      "deciders" : [
        {
          "decider" : "throttling",
          "decision" : "THROTTLE",
          "explanation" : "reached the limit of ongoing initial primary recoveries [4], cluster setting [cluster.routing.allocation.node_initial_primaries_recoveries=4]"
        }
      ]
    }
  ]
}

If you need others, tell me.

Thanks!

Pablo Torres

unread,
Aug 8, 2019, 4:28:13 AM8/8/19
to Wazuh mailing list
Hi Javier,

Let's check your cluster health now that is recovered:
curl ELASTIC_IP:9200/_cluster/health?pretty

Could you also send us the full output of
curl ELASTIC_IP:9200/_cat/indices

And now it would be also helpful to check Elasticsearch logs, please attach that file to your message.
you can find that file here: 
/var/log/elasticsearch/<CLUSTER-NAME/elasticsearch>.log


Regards,
Pablo Torres

Javier Martín-Moreno Guijarro

unread,
Aug 8, 2019, 5:36:05 AM8/8/19
to Wazuh mailing list
Hi,

Results:

{
  "cluster_name" : "elasticsearch",
  "status" : "red",
  "timed_out" : false,
  "number_of_nodes" : 1,
  "number_of_data_nodes" : 1,
  "active_primary_shards" : 690,
  "active_shards" : 690,
  "relocating_shards" : 0,
  "initializing_shards" : 4,
  "unassigned_shards" : 2856,
  "delayed_unassigned_shards" : 0,
  "number_of_pending_tasks" : 5,
  "number_of_in_flight_fetch" : 0,
  "task_max_waiting_in_queue_millis" : 1753,
  "active_shards_percent_as_number" : 19.43661971830986

root@wazuhdb:~# watch -n0 'curl -s localhost:9200/_cluster/health?pretty | grep "active_shards_percent"'
root@wazuhdb:~# curl 134.16.1.201:9200/_cat/indices
green open wazuh-monitoring-3.x-2019.04.11  D3YU5Gh0R2a51KMn5ew2Aw 2 0    1512      0 646.2kb 646.2kb
green open wazuh-monitoring-3.x-2019.04.16  7OfdfjnpQTuv0tM7yZ0Pmg 2 0    1512      0 627.5kb 627.5kb
green open wazuh-monitoring-3.x-2019.03.25  QaamqTDKTeel0PJq1C5uVw 2 0    1512      0 629.1kb 629.1kb
green open wazuh-alerts-3.x-2019.04.01      uqyXV91wQmay61HAojVLyg 5 0 1626445      0 893.5mb 893.5mb
green open wazuh-alerts-3.x-2019.06.06      kzH23cpZQxqaAiEA9M8L9A 5 0 2729410      0   8.5gb   8.5gb
green open wazuh-alerts-3.x-2019.05.10      yCVXTxonT3Cc36jHJGHgxw 5 0 1278528      0   912mb   912mb
green open .tasks                           NV62oiGPSVuAxLnoV4ty7w 1 0       1      0   6.2kb   6.2kb
green open wazuh-alerts-3.x-2019.05.03      RjHOyV-5S_OtU1ERUjuzTw 5 0 1415911      0   788mb   788mb
green open wazuh-alerts-3.x-2019.04.06      iTV4mFXdRfSYZMiOYxXgCQ 5 0 1254248      0 677.5mb 677.5mb
green open wazuh-monitoring-3.x-2019.03.23  Yyzihc9sQIW1Ou6j6rQGjw 2 0    1512      0 630.3kb 630.3kb
green open wazuh-alerts-3.x-2019.04.18      CdLDVW9kQKmhWQkJSdWkcg 5 0 1640132      0 924.1mb 924.1mb
green open wazuh-alerts-3.x-2019.04.03      ONz5_SbuRAe-adnllZqKOw 5 0 1664732      0 916.3mb 916.3mb
green open wazuh-alerts-3.x-2019.07.12      mEmLz8ZtQR2Sx_2zGGqW9g 3 0 1040878      0 537.2mb 537.2mb
green open wazuh-alerts-3.x-2019.06.24      MABH13RSRTapGXZCBV3gXA 5 0 1195391      0 625.4mb 625.4mb
green open wazuh-alerts-3.x-2019.07.19      hi-IebDBSseAh0-7qPh_SA 3 0 1066858      0 548.7mb 548.7mb
green open .monitoring-es-6-2019.08.03      G0pAIUOVSeuA91WepRoCng 1 0 9644636  75249   4.2gb   4.2gb
green open wazuh-monitoring-3.x-2019.04.21  68mCDi_dTlOt_xkT3j7f4g 2 0    1512      0 628.5kb 628.5kb
green open wazuh-monitoring-3.x-2019.07.04  aUQ7CsU8QWal3gfnXCvILg 2 0    1512      0 630.3kb 630.3kb
green open wazuh-alerts-3.x-2019.06.01      po-G4u__Qje-cOYQXUqxcQ 5 0  866332      0 467.4mb 467.4mb
green open wazuh-monitoring-3.x-2019.06.19  k9xHFLmyTUOzG_vtvTbZgg 2 0    1512      0 631.7kb 631.7kb
green open wazuh-monitoring-3.x-2019.04.25  1ZzgMqx2TYWc6v8k4ui0Kg 2 0    1512      0 627.1kb 627.1kb
green open wazuh-monitoring-3.x-2019.03.28  3xuI0pvaQ8a0FFUxuS2ZFw 2 0    1512      0 627.6kb 627.6kb
green open wazuh-monitoring-3.x-2019.05.24  33Fi7op8SJ6d05RwzdyHPQ 2 0    1512      0 650.6kb 650.6kb
green open wazuh-monitoring-3.x-2019.04.18  mf3fL7dvQvuJy-vI8-5yGA 2 0    1512      0 626.7kb 626.7kb
green open wazuh-monitoring-3.x-2019.06.24  AX4e5hdwRE-8_vuvcgjIIA 2 0    1512      0 631.2kb 631.2kb
green open wazuh-monitoring-3.x-2019.05.15  s1nZzzdDScqI8zR5rpkCkg 2 0    1512      0 627.7kb 627.7kb
green open wazuh-monitoring-3.x-2019.06.16  axIUHWDEQVmPDZRSY-327w 2 0    1512      0   629kb   629kb
green open wazuh-monitoring-3.x-2019.06.02  9Qqqui9sR26TXnmrl4E7TA 2 0    1512      0 632.1kb 632.1kb
green open wazuh-alerts-3.x-2019.05.18      e_ztBrLYRUSk5HlIsTo1WQ 5 0 1294628      0   724mb   724mb
green open wazuh-alerts-3.x-2019.05.17      8Er33S5dSTG6E1C9IN93lw 5 0 1437625      0 817.3mb 817.3mb
green open wazuh-alerts-3.x-2019.07.29      zDOeY78bQo6MSsOnJOxn9Q 3 0  455933      0 238.3mb 238.3mb
green open wazuh-monitoring-3.x-2019.06.06  jEqndlASSOyQ6tQ1kRH91g 2 0    1512      0 628.6kb 628.6kb
green open wazuh-monitoring-3.x-2019.04.01  QI0vBV_nT1e-aHtmjfG0mw 2 0    1512      0 628.6kb 628.6kb
green open wazuh-alerts-3.x-2019.07.24      j2AFVnY4SwaT9mTVM0eg8g 3 0 1104653      0 568.6mb 568.6mb
green open .monitoring-kibana-7-2019.08.07  ntannc5vRqeetp0QvMMWsQ 1 0      72      0  65.8kb  65.8kb
green open wazuh-monitoring-3.x-2019.06.21  1Bhhq9PVTv-5YFb6ghEDyw 2 0    1512      0 630.2kb 630.2kb
green open wazuh-monitoring-3.x-2019.07.23  _i6Jjos5RPu_x4jTtRc4Eg 2 0    5890      0   1.5mb   1.5mb
green open wazuh-monitoring-3.x-2019.05.28  U4EranhkQgmsO0iAsm2NGg 2 0    1512      0 630.7kb 630.7kb
green open wazuh-alerts-3.x-2019.05.08      2QOM-HL6RaiTn0UgqoUXLA 5 0 1062338      0 729.5mb 729.5mb
green open wazuh-alerts-3.x-2019.05.02      AJir3OZsROSL3NTMy2AMJA 5 0 1664094      0 995.4mb 995.4mb
red   open wazuh-alerts-3.x-2019.03.14      4FaMiOFQSy6JCwTWtJOwPw 5 0 1334450      0 748.3mb 748.3mb
green open wazuh-monitoring-3.x-2019.04.10  SZ_dfvuVRDuUG61N2Vr6lg 2 0    1512      0 625.8kb 625.8kb
green open .monitoring-es-6-2019.08.04      YUXT1AxaTlSlxmRBAFdJug 1 0 9660408  74516   4.3gb   4.3gb
green open wazuh-alerts-3.x-2019.03.15      wuw5iF7xSnuFANNX6CkXNA 5 0 1513371      0 834.2mb 834.2mb
green open wazuh-alerts-3.x-2019.07.14      LvBw2C1zQ7qEQB7ubIfanw 3 0  796671      0 407.2mb 407.2mb
green open .monitoring-kibana-6-2019.08.06  ohsIaz19RPihVal1OPDjXg 1 0    2041      0 552.5kb 552.5kb
green open wazuh-alerts-3.x-2019.06.16      66t0m1v-TJORFAYNAsjheQ 5 0  807960      0 430.5mb 430.5mb
green open wazuh-monitoring-3.x-2019.04.30  BHfaTC7WQoOLRR5tfmqXgg 2 0    1512      0 627.8kb 627.8kb
green open wazuh-monitoring-3.x-2019.07.10  SvRmxUlqS1e84ZeAvaQbzg 2 0    5952      0   1.6mb   1.6mb
green open wazuh-monitoring-3.x-2019.08.04  ZwOoilKkSpatH-5LEMnMkw 2 0    5952      0   1.6mb   1.6mb
green open wazuh-alerts-3.x-2019.07.30      2iKEcKN0Q_ywS6vJ-eltgg 3 0  247346      0 130.4mb 130.4mb
green open wazuh-alerts-3.x-2019.05.29      0Y7ekzROQUm8kC9MyjKGnQ 5 0 1049683      0 574.2mb 574.2mb
green open wazuh-monitoring-3.x-2019.04.08  LqQbonVcQoqC2U8cNjMbrw 2 0    1512      0 627.5kb 627.5kb
green open wazuh-monitoring-3.x-2019.04.14  ykZtqo4QTWik8UrCpIJ0bQ 2 0    1512      0 625.7kb 625.7kb
green open .monitoring-kibana-6-2019.08.01  ZJtq4Xt4Rzq3By2yIiHuAw 1 0    8640      0     2mb     2mb
green open wazuh-alerts-3.x-2019.07.10      HMzy6l2nQ5O33ewAOvQpSg 3 0 1189283      0 615.9mb 615.9mb
green open .monitoring-kibana-6-2019.07.30  ZAZGy0NMTkSWQzDGaewHbA 1 0    8639      0     2mb     2mb
green open wazuh-monitoring-3.x-2019.05.25  weRq_BR9T9WqNvoMdFt3aQ 2 0    1512      0   625kb   625kb
green open .monitoring-es-6-2019.07.31      2ZKc98-6SsmRS6MdgnDFGg 1 0 9637463  69879   4.3gb   4.3gb
green open wazuh-monitoring-3.x-2019.05.08  85GKDXDyQN-Oup6-mmTGSA 2 0    1512      0 626.3kb 626.3kb
green open wazuh-monitoring-3.x-2019.05.27  1osvPdvpRG6aMEZOX4J7Yg 2 0    1512      0   624kb   624kb
green open wazuh-monitoring-3.x-2019.07.06  1d8canSqTNydZNrlNx-Ojw 2 0    1512      0 631.9kb 631.9kb
green open wazuh-alerts-3.x-2019.07.20      CS-nv5OCQ7KQvU_AsCmJqg 3 0  803123      0 414.8mb 414.8mb
green open wazuh-alerts-3.x-2019.04.13      c2Io4LIvT0mkd5VaFT3Kaw 5 0 1260667      0 682.2mb 682.2mb
green open wazuh-alerts-3.x-2019.08.02      DZmdATwHTjiL7rCkrxfEEQ 3 0 1032341      0   531mb   531mb
green open wazuh-alerts-3.x-2019.05.22      nutu5FN6QEimNQ1Y-MnelA 5 0 1159441      0 645.9mb 645.9mb
green open wazuh-monitoring-3.x-2019.05.16  MRQWSAajR_KX4ygHDkYuUg 2 0    1512      0   628kb   628kb
green open wazuh-alerts-3.x-2019.03.21      oDZKxq-HR9uXmV_xXpqd2A 5 0 1613436      0 880.9mb 880.9mb
green open .monitoring-kibana-6-2019.08.05  9zLfB-CKRdC4XrFrVb8S6w 1 0    8640      0   1.9mb   1.9mb
green open wazuh-monitoring-3.x-2019.05.14  D11DuM79SZiPUyXbl1gFQQ 2 0    1512      0 627.2kb 627.2kb
green open wazuh-monitoring-3.x-2019.05.02  WqcrJoC-QeS9Aj_LygIi-w 2 0    1512      0 628.6kb 628.6kb
green open wazuh-monitoring-3.x-2019.05.26  -u6JmbJHQN6GQ5UdQ6IYvw 2 0    1512      0 630.3kb 630.3kb
green open wazuh-alerts-3.x-2019.07.04      c51SJa4NRzyjY-hl4YwOdw 5 0 1168473      0 629.8mb 629.8mb
green open wazuh-alerts-3.x-2019.05.27      atqfQszzRvCuAqlP-8LFLQ 5 0 1282201      0 710.6mb 710.6mb
green open wazuh-monitoring-3.x-2019.05.11  Xr8Fakg1T22QTkTgcSz7Vg 2 0    1512      0 628.4kb 628.4kb
green open wazuh-alerts-3.x-2019.04.22      yMHYYPbWTf2pJqgbY99OSg 5 0 1281605      0 715.4mb 715.4mb
green open wazuh-alerts-3.x-2019.05.12      pH6Tn4zIQNuQQh_dfBNLCw 5 0  981697      0 706.8mb 706.8mb
green open wazuh-alerts-3.x-2019.06.29      6v8Qgto0Q3C_1OZwCasE-w 5 0  819109      0 436.1mb 436.1mb
green open wazuh-monitoring-3.x-2019.07.05  Zy0qACFYSd2F7pMR3WYb8A 2 0    1512      0 631.2kb 631.2kb
green open wazuh-monitoring-3.x-2019.06.17  64Wx1ON8RvmvpEGGW4JeTg 2 0    1512      0 630.7kb 630.7kb
green open wazuh-monitoring-3.x-2019.07.17  xUeARF-uRLKiNQTYMVAFEA 2 0    5952      0   1.6mb   1.6mb
green open wazuh-monitoring-3.x-2019.04.02  6liUY88UTWup66wdDmJlKw 2 0    1512      0 627.2kb 627.2kb
green open wazuh-monitoring-3.x-2019.07.11  rtbNk53sQ2alyUVb0MGWVw 2 0    5952      0   1.6mb   1.6mb
green open wazuh-alerts-3.x-2019.07.15      _rdi3DtQQqyjsxgw9PCelA 3 0 1175174      0 610.4mb 610.4mb
green open wazuh-monitoring-3.x-2019.04.19  -o_6LofASTCg2dzKv7NZ1g 2 0    1512      0 627.7kb 627.7kb
green open wazuh-alerts-3.x-2019.08.06      zLrnU8wsQQSo2hIqklGknQ 3 0  198544      0 105.8mb 105.8mb
green open wazuh-alerts-3.x-2019.03.17      vITzLrALTae5zX5cdJRldA 5 0 1192479      0 644.8mb 644.8mb
green open wazuh-monitoring-3.x-2019.07.08  E5uJC-nCTEemXCMNBf0M8A 2 0    3668      0     1mb     1mb
green open wazuh-monitoring-3.x-2019.05.06  rFtH657VSZymaIGugWdE7Q 2 0    1512      0 627.2kb 627.2kb
green open wazuh-alerts-3.x-2019.04.27      kxCkZa3wS8SizoFd_2OEcA 5 0 1283287      0 711.7mb 711.7mb
green open wazuh-monitoring-3.x-2019.04.07  exMuOcz5TsW7peJSPVGWkA 2 0    1512      0 626.8kb 626.8kb
green open wazuh-monitoring-3.x-2019.07.03  pJf6P_9ORdyv6WP5OKhtQw 2 0    1512      0 629.9kb 629.9kb
green open wazuh-monitoring-3.x-2019.03.22  YrD8Di2PTvSlkD15b49ODA 2 0    1512      0 631.5kb 631.5kb
green open wazuh-monitoring-3.x-2019.07.16  4jqKqSOuQO2DkUd_EEvDkw 2 0    5952      0   1.6mb   1.6mb
green open .monitoring-es-6-2019.08.02      uIyXxCbyTRWNVtjEzDFZDw 1 0 9642657  82170   4.3gb   4.3gb
green open wazuh-alerts-3.x-2019.03.22      OWMEIXorQmyBm95u6kXSUg 5 0 1550851      0 842.6mb 842.6mb
green open wazuh-monitoring-3.x-2019.05.01  qZUX5m31R6qk79vfhnUW6w 2 0    1449      0   571kb   571kb
green open wazuh-alerts-3.x-2019.07.25      LDi510WOSpyLZVDsaRLpVw 3 0 1146057      0 586.4mb 586.4mb
green open wazuh-alerts-3.x-2019.06.11      nFeU6qiRRaSmGKkkkYCb9g 5 0 1207826      0 641.9mb 641.9mb
green open wazuh-monitoring-3.x-2019.07.29  9_zIa2itRSegHiFR20l8CQ 2 0    5952      0   1.3mb   1.3mb
green open wazuh-monitoring-3.x-2019.06.15  YDJQ1MD0RAG1IuwGVJD64A 2 0    1512      0 628.1kb 628.1kb
green open wazuh-alerts-3.x-2019.04.19      QsbwCCDqQO-sEr_H2Pf39Q 5 0 1554882      0 876.5mb 876.5mb
green open wazuh-monitoring-3.x-2019.06.23  JqwVLJIaT-Sd_uG1kaV5iA 2 0    1512      0 629.3kb 629.3kb
green open wazuh-monitoring-3.x-2019.03.27  Y5fT_njFRbqFWCTwFsuY8A 2 0    1512      0 626.9kb 626.9kb
green open wazuh-alerts-3.x-2019.06.19      D-y4FvHER_aVu6WzoV5deg 5 0 1194892      0 629.2mb 629.2mb
green open wazuh-monitoring-3.x-2019.04.20  ulzq2GhTTTOBwMUHD9GgWA 2 0    1512      0 629.2kb 629.2kb
green open wazuh-monitoring-3.x-2019.08.08  6ZgRRSK0SjybKuA8RwkaVA 2 0       0      0    566b    566b
green open wazuh-monitoring-3.x-2019.07.09  KrJ39ZKXRKyR2ocJwHospQ 2 0    5952      0   1.6mb   1.6mb
green open wazuh-monitoring-3.x-2019.07.24  HbIYdtaMROi-WNbgUFfLEA 2 0    5952      0   1.6mb   1.6mb
green open wazuh-alerts-3.x-2019.06.27      0nAITNE2QoaLNFeGpo3N4g 5 0 1179111      0 618.6mb 618.6mb
green open wazuh-alerts-3.x-2019.07.09      XbvMLTvJSiq6nlujIHnH-Q 3 0 1215381      0 630.2mb 630.2mb
green open wazuh-alerts-3.x-2019.06.14      rpdRbmAtRAWEpZ0zaIdiZQ 5 0 1136058      0 603.9mb 603.9mb
green open wazuh-alerts-3.x-2019.04.10      CSpybg8DTbmCQc_DjcVbPA 5 0 1729755      0 958.4mb 958.4mb
green open wazuh-monitoring-3.x-2019.06.03  -Z8UVxfWRTqlwZn6Mo2j7w 2 0    1512      0 630.7kb 630.7kb
green open .monitoring-es-6-2019.08.06      u3j62jn0RS24spDb4HP5qw 1 0 2399535  63420     1gb     1gb
green open wazuh-monitoring-3.x-2019.07.28  lZI4cQszQ46nw30frcWMEg 2 0    5952      0   1.5mb   1.5mb
green open wazuh-monitoring-3.x-2019.06.01  W0SnR4r5SrqBCYK-07TRRA 2 0    1512      0 632.2kb 632.2kb
green open wazuh-alerts-3.x-2019.06.13      Y2NDp1E4Sk2DhlGLUbWHkA 5 0 1161358      0 624.5mb 624.5mb
green open wazuh-alerts-3.x-2019.05.21      s4BDvI6XRJGWlP3phtZDsQ 5 0 1483958      0 852.6mb 852.6mb
green open wazuh-monitoring-3.x-2019.07.25  jsQSV326SNuMVGoecEMYOg 2 0    5952      0   1.6mb   1.6mb
green open wazuh-monitoring-3.x-2019.07.21  18emXsmaTUeWQ7GYD6B07A 2 0    5952      0   1.6mb   1.6mb
green open wazuh-alerts-3.x-2019.06.03      HAMhPkYXSku_mWttgR-Lkg 5 0 1273846      0 700.7mb 700.7mb
green open wazuh-alerts-3.x-2019.07.06      gFqmEUvjQVuwwTIv4SBAYA 5 0  792229      0 420.2mb 420.2mb
green open wazuh-alerts-3.x-2019.06.17      YVzE3kHcTaurmvrDdKvCVw 5 0 1271744      0 671.4mb 671.4mb
green open wazuh-alerts-3.x-2019.03.16      Y_glntVfSAezDVOpIC5big 5 0 1189054      0 641.1mb 641.1mb
green open wazuh-alerts-3.x-2019.05.09      SzrKm7ZIRgCKxrqDSPgEWw 5 0 1365016      0 975.8mb 975.8mb
green open wazuh-monitoring-3.x-2019.08.02  IkLU15sqRnKd7DsEjvP4Ng 2 0    5952      0   1.6mb   1.6mb
green open wazuh-monitoring-3.x-2019.04.23  96EZAVeYTxOhIkc2tc2R6g 2 0    1512      0 627.3kb 627.3kb
green open wazuh-alerts-3.x-2019.07.22      JKEf6i02T8OMPJl22xt6qg 3 0 1082783      0 565.5mb 565.5mb
green open wazuh-alerts-3.x-2019.03.31      XM6dn-r5Q62aq27mjBAMOg 5 0 1217018      0   645mb   645mb
green open wazuh-alerts-3.x-2019.03.23      Ie3eHdhBQb2CIb6qmPDB8w 5 0 1293197      0 703.8mb 703.8mb
green open wazuh-alerts-3.x-2019.03.26      x2xorL8YSkq8riiI2SneKA 5 0 1659304      0 945.5mb 945.5mb
green open wazuh-alerts-3.x-2019.07.26      dfXVW_JgSI6A2wD8W-LUqw 3 0  861276      0 439.1mb 439.1mb
green open wazuh-monitoring-3.x-2019.07.13  ItN-6gxWTuKxAvBQRpxV9A 2 0    5890      0   1.5mb   1.5mb
green open wazuh-monitoring-3.x-2019.07.12  JgwAMpcDSA2EH0WqiS2wVQ 2 0    5952      0   1.6mb   1.6mb
green open wazuh-alerts-3.x-2019.03.18      0MT5wQtiRFaweRJSs7YACA 5 0 1541525      0 840.1mb 840.1mb
green open wazuh-alerts-3.x-2019.04.08      z_iccr2PT9CvwETW9D00jQ 5 0 1624679      0 896.8mb 896.8mb
green open wazuh-alerts-3.x-2019.06.26      8zjHuDoNScGf1sJ6ctVEzA 5 0 1202727      0 630.4mb 630.4mb
green open wazuh-monitoring-3.x-2019.07.19  7zC4SutaRYSkbFS7rBWg7A 2 0    5952      0   1.6mb   1.6mb
green open wazuh-alerts-3.x-2019.08.01      dI8wCseKSdqOUvC2-doxmA 3 0 1083231      0 576.1mb 576.1mb
green open wazuh-monitoring-3.x-2019.06.10  G-NK7peOS32JEowyClkMXQ 2 0    1512      0 630.6kb 630.6kb
green open wazuh-alerts-3.x-2019.04.29      ukn_a9F_Sx2jeTimASitzw 5 0 1587879      0 891.4mb 891.4mb
green open wazuh-alerts-3.x-2019.07.28      ySN8cshgSkqzq0KfWC9hSw 3 0  578996      0 293.7mb 293.7mb
green open .wazuh                           rvx9BbU9TOqCy7EECZLNpw 1 0       0      0    283b    283b
green open wazuh-monitoring-3.x-2019.06.04  64Cvm4lsRbeRrmumb3fdNA 2 0    1512      0 629.9kb 629.9kb
green open wazuh-monitoring-3.x-2019.05.18  va35_IxyR4Gx2x50gFTU6w 2 0    1512      0 627.2kb 627.2kb
green open wazuh-monitoring-3.x-2019.08.05  2DX2i03DQiyp2b-7GciUAg 2 0    5952      0   1.6mb   1.6mb
green open wazuh-alerts-3.x-2019.04.21      VlPkIFzWTXuUg1GluLiwCA 5 0 1284606      0 717.7mb 717.7mb
green open wazuh-alerts-3.x-2019.07.08      L2qUvs7ORzu9uBemgShgPA 5 0 1390193      0 809.7mb 809.7mb
green open wazuh-monitoring-3.x-2019.05.22  JjiJrYC4R82GAMev59j17A 2 0    1512      0 629.4kb 629.4kb
green open wazuh-monitoring-3.x-2019.03.16  XXjCIM4TS4eZgPetSUYCvg 2 0    1512      0 630.1kb 630.1kb
green open wazuh-monitoring-3.x-2019.04.05  be7SMZHqSW2DjvjrzcgJig 2 0    1512      0 627.8kb 627.8kb
green open wazuh-monitoring-3.x-2019.03.19  cxlKuR-pRG6fPlvH6BONMQ 2 0    1512      0 627.8kb 627.8kb
green open wazuh-alerts-3.x-2019.05.19      EFVzMfONR0S1HsfsqJMMsw 5 0 1304594      0 737.6mb 737.6mb
green open .monitoring-kibana-6-2019.08.04  LU-XivlrQJmSsduwyn1C9A 1 0    8639      0   1.9mb   1.9mb
green open wazuh-alerts-3.x-2019.07.02      j8pkY-55QwKSFTk_ivB7aQ 5 0 1198308      0 629.2mb 629.2mb
green open wazuh-monitoring-3.x-2019.04.26  GuqNjGgrQseq_XtW6_u5Ig 2 0    1512      0 626.9kb 626.9kb
green open wazuh-monitoring-3.x-2019.03.15  AdnyA5rDSDysx0EhhLDIgQ 2 0    1512      0 628.7kb 628.7kb
green open wazuh-alerts-3.x-2019.08.04      1nlvKisXTAezY1-Y4lPplQ 3 0  788253      0 399.5mb 399.5mb
green open wazuh-alerts-3.x-2019.05.23      RTrJNNDXSWCSIJPFQcuM0w 5 0 1048606      0 584.6mb 584.6mb
green open wazuh-alerts-3.x-2019.05.31      nzYZeo3xSPWLLfXv-iRpuQ 5 0  929567      0 644.5mb 644.5mb
green open wazuh-monitoring-3.x-2019.05.12  qy2FpajCSTapoMkm7c7i6w 2 0    1512      0 627.3kb 627.3kb
green open wazuh-alerts-3.x-2019.06.21      mIoewMWlRiCow6mEkpjMlw 5 0 1095732      0 581.4mb 581.4mb
green open wazuh-monitoring-3.x-2019.06.18  jwhclQiISm-rsyvNHKZo_g 2 0    1512      0 628.3kb 628.3kb
green open wazuh-alerts-3.x-2019.05.05      wdMIOPRJTUmJdclDB4YuBg 5 0  939711      0 520.1mb 520.1mb
green open wazuh-monitoring-3.x-2019.03.18  zkkaDA0CT9migQp8VYwQtQ 2 0    1512      0 631.8kb 631.8kb
green open wazuh-monitoring-3.x-2019.07.01  VfM7e53fS0G9VNfg93AKIA 2 0    1512      0 631.2kb 631.2kb
green open wazuh-alerts-3.x-2019.04.28      mu_HcZUBQLO7KdRZ5oilPQ 5 0 1286577      0 721.7mb 721.7mb
green open wazuh-alerts-3.x-2019.05.11      A26dhfnwQjeRVcc1FgpgQw 5 0  951447      0 625.5mb 625.5mb
green open wazuh-alerts-3.x-2019.08.05      n3KWW5gKTVyTRg874b-PKA 3 0 1091667      0 554.4mb 554.4mb
green open wazuh-alerts-3.x-2019.04.14      lpRZrKWYQfSmSKMieABVbg 5 0 1267331      0 692.2mb 692.2mb
green open wazuh-monitoring-3.x-2019.07.31  G7yChEzITKyvOInJlC5ZaQ 2 0    5952      0   1.5mb   1.5mb
green open wazuh-monitoring-3.x-2019.03.21  gkNoC1vZRlK7icKHTQixOA 2 0    1512      0 628.6kb 628.6kb
green open wazuh-alerts-3.x-2019.03.25      XTuvLsdlRc63LPEjkglEhw 5 0 1591755      0   870mb   870mb
green open wazuh-alerts-3.x-2019.03.24      F03cuDBfRY2j-85TzExt1Q 5 0 1300635      0 721.2mb 721.2mb
green open wazuh-alerts-3.x-2019.06.04      BTCX_f6TSd-jPj4njB-I7w 5 0 1225815      0 668.5mb 668.5mb
green open wazuh-alerts-3.x-2019.05.15      rzdYsJfDRP65RtDsEzBGKA 5 0 1370682      0 783.2mb 783.2mb
green open wazuh-monitoring-3.x-2019.05.07  ZLMpoopwRBmf9FnDWhwBCA 2 0    1512      0 626.6kb 626.6kb
green open wazuh-alerts-3.x-2019.03.30      PpvWkEWgRAyu9vvPmHszjw 5 0 1210449      0 643.2mb 643.2mb
green open wazuh-alerts-3.x-2019.04.24      Cbhkj1yzRsiUlUOcOtqF2Q 5 0 1598321      0 932.8mb 932.8mb
green open wazuh-monitoring-3.x-2019.04.17  wbvDs6giR5-yhYkzSnzWwg 2 0    1512      0 625.9kb 625.9kb
green open wazuh-monitoring-3.x-2019.05.03  -076VeX7T2WnDS0AfrM1yw 2 0    1512      0 625.8kb 625.8kb
green open wazuh-alerts-3.x-2019.07.21      0Lap7z3QQUeGhOMYXTAW9w 3 0  795288      0 407.3mb 407.3mb
green open .monitoring-es-6-2019.08.01      jUCPmQJySSqshVH9h-1yNA 1 0 9671075  82415   4.3gb   4.3gb
green open wazuh-monitoring-3.x-2019.04.24  2YGCvwrDQaCMXE9LhKyK7Q 2 0    1512      0 630.4kb 630.4kb
green open wazuh-monitoring-3.x-2019.04.12  0VVGKxtLS0WMjr-GOed_Cw 2 0    1512      0 627.3kb 627.3kb
green open wazuh-monitoring-3.x-2019.06.20  5Eir20W4RwCRjGLKw0meIg 2 0    1512      0 630.2kb 630.2kb
green open wazuh-monitoring-3.x-2019.06.08  c7uAsDmBRSapOJPf30t6Fw 2 0    1512      0 631.4kb 631.4kb
green open wazuh-alerts-3.x-2019.05.26      E8X_XaC7RRq8cB53MtM7QQ 5 0  851240      0 453.7mb 453.7mb
green open wazuh-alerts-3.x-2019.04.12      4zP1zrqfSG2XXhrczsRXfg 5 0 1445901      0 797.3mb 797.3mb
green open .monitoring-es-7-2019.08.07      z2RgNem1SHmf7Nmj4l74cA 1 0  845870 253920  98.5mb  98.5mb
green open wazuh-monitoring-3.x-2019.03.30  HazHmsZtRnON7SWv86iJJA 2 0    1512      0 622.6kb 622.6kb
green open wazuh-monitoring-3.x-2019.03.29  IBYK_nE3QrihR8EDfBTWNg 2 0    1512      0 625.4kb 625.4kb
green open wazuh-alerts-3.x-2019.05.20      efGl0K3bT4CToA26uWYQtQ 5 0 1479729      0 845.2mb 845.2mb
green open wazuh-alerts-3.x-2019.04.17      CqKh1-KOTZKBelek3ZAnsA 5 0 1651742      0 930.8mb 930.8mb
green open .monitoring-es-6-2019.07.30      oBHEZ_IBQU2yFzGPndyM4Q 1 0 9610056 103138   4.2gb   4.2gb
green open wazuh-alerts-3.x-2019.06.20      JiFxnyurT6CuCX0KpRJkHg 5 0 1147783      0 610.6mb 610.6mb
green open wazuh-alerts-3.x-2019.07.23      ZjG9kom5QBCBTSmuZbK-Og 3 0 1106666      0 571.1mb 571.1mb
green open wazuh-monitoring-3.x-2019.06.28  UbSipC-WTlWAJndvgqbddg 2 0    1512      0 631.6kb 631.6kb
green open wazuh-monitoring-3.x-2019.04.27  yMScJRZNSlCpvGk6B_btNg 2 0    1512      0 627.1kb 627.1kb
green open wazuh-alerts-3.x-2019.04.07      tuNir3rhSoeryf5kEujoSw 5 0 1271376      0 686.8mb 686.8mb
green open wazuh-alerts-3.x-2019.04.04      NIQEv9PxSTuh1vUEGRSieQ 5 0 1665004      0 916.7mb 916.7mb
green open wazuh-alerts-3.x-2019.07.03      PWrI7-VYRLClUayhANpbYg 5 0 1196553      0   636mb   636mb
green open .kibana_1                        o5mKirMNRT-KD9RmHUxrAQ 1 0       3     10 227.3kb 227.3kb
green open .monitoring-kibana-6-2019.07.31  g3xsV5taSomF9pYDhhmSCA 1 0    8640      0     2mb     2mb
green open wazuh-monitoring-3.x-2019.07.02  0us9-e_zRlG8U59XFZ0G-Q 2 0    1512      0 631.6kb 631.6kb
green open wazuh-monitoring-3.x-2019.04.06  1Z7t8bT7RLGPI-kAgSSF3Q 2 0    1512      0 625.1kb 625.1kb
green open wazuh-monitoring-3.x-2019.05.20  gGLI9r-hRo2ur9hL8OD3Kw 2 0    1512      0 627.3kb 627.3kb
green open .monitoring-kibana-6-2019.08.03  5RhmMAqLTKe2uvgebCi-pQ 1 0    8640      0   1.9mb   1.9mb
green open wazuh-alerts-3.x-2019.07.11      JGMZIuW7QmyFrfEO4iwrfQ 3 0 1177015      0 610.7mb 610.7mb
green open wazuh-alerts-3.x-2019.05.13      2fHIpcQcQkGkd7-kUmM9xg 5 0 1125566      0   771mb   771mb
green open wazuh-alerts-3.x-2019.06.22      wNc761OHTa2_brWw4rieUg 5 0  803783      0   426mb   426mb
green open wazuh-monitoring-3.x-2019.07.14  HMPRUAgQTX-T4dJq9grd-Q 2 0    5952      0   1.6mb   1.6mb
green open wazuh-alerts-3.x-2019.06.10      rJ68gVrBSa26x405RksddQ 5 0  813780      0 433.7mb 433.7mb
green open wazuh-monitoring-3.x-2019.06.09  Tbjb5hGJSxCUvouDzU5I8g 2 0    1512      0 630.4kb 630.4kb
green open wazuh-alerts-3.x-2019.05.14      bPakUYxWS0SCDI44uaHwxg 5 0 1152721      0 658.2mb 658.2mb
green open wazuh-alerts-3.x-2019.06.15      jGYslkHlSKSJq9dXrypHag 5 0  807221      0   423mb   423mb
green open wazuh-monitoring-3.x-2019.06.12  HmVBzmmxSAOuaZ66Ge_27g 2 0    1512      0 630.8kb 630.8kb
green open wazuh-monitoring-3.x-2019.05.13  jX6h_NhFQv6OGuNTlRRT6w 2 0    1512      0 628.4kb 628.4kb
green open wazuh-alerts-3.x-2019.07.01      _FLZg6ENQkONc58xwQAcTg 5 0 1214209      0 646.2mb 646.2mb
green open wazuh-monitoring-3.x-2019.04.28  gmpxdqTmSsmyN10oHkqfZQ 2 0    1512      0 626.6kb 626.6kb
green open wazuh-monitoring-3.x-2019.05.31  wh1PXpCiQpqF_kOFXFbjDg 2 0    1512      0 628.7kb 628.7kb
green open wazuh-alerts-3.x-2019.04.30      dcCltPsnSEi1AEjmhz1ANQ 5 0 1704707      0 951.9mb 951.9mb
green open wazuh-alerts-3.x-2019.07.27      1-NYjotFRrK-UkAkW_yLEQ 3 0  722041      0 368.2mb 368.2mb
green open wazuh-monitoring-3.x-2019.06.22  V2HfBQiKSVaT4R3ZIRhlfQ 2 0    1449      0 571.2kb 571.2kb
green open wazuh-monitoring-3.x-2019.07.27  0-qWk0h6SDqqsHbY7dEozQ 2 0    5952      0   1.6mb   1.6mb
green open wazuh-monitoring-3.x-2019.05.17  l_LDYw0rTyOOgGBX36Yonw 2 0    1512      0 626.8kb 626.8kb
green open wazuh-alerts-3.x-2019.06.12      XqgMM2owQOSjS5IvOGV0ww 5 0 1189067      0 628.4mb 628.4mb
green open wazuh-monitoring-3.x-2019.03.17  aLBjfgMHQYeRpsmCIz2G-w 2 0    1512      0 628.6kb 628.6kb
green open wazuh-alerts-3.x-2019.06.09      XsOF0Y-tQp2hhYM7CW-DSw 5 0  812813      0 430.8mb 430.8mb
green open wazuh-alerts-3.x-2019.07.18      ukKhH3kWS5a8tjFKTwjnvw 3 0 1120811      0 577.7mb 577.7mb
green open wazuh-monitoring-3.x-2019.07.15  uT2nZRFTStOpTbN_5aFbQA 2 0    5952      0   1.6mb   1.6mb
green open wazuh-alerts-3.x-2019.07.16      NqebXrh4RNKjbcTp3ng73Q 3 0 1178155      0 636.2mb 636.2mb
green open wazuh-monitoring-3.x-2019.08.07  C6ONdWnISrGh3w7rUohK1w 2 0       0      0    566b    566b
green open wazuh-alerts-3.x-2019.04.02      p3NL1UWPSbOk8Fm2XoCXCQ 5 0 1667350      0 922.7mb 922.7mb
green open wazuh-monitoring-3.x-2019.05.05  FtWvn0W4QBip9E6G7QyKBw 2 0    1512      0 625.7kb 625.7kb
green open wazuh-monitoring-3.x-2019.05.19  Y8CIiKBySMOlKQT-YuNvhA 2 0    1512      0 621.5kb 621.5kb
green open wazuh-monitoring-3.x-2019.04.29  0M7C6pCFTgmcvsG8BgmOqw 2 0    1512      0 650.5kb 650.5kb
green open wazuh-monitoring-3.x-2019.06.29  -GcRSMCNQAmQF_IK9y6qhw 2 0    1512      0 633.1kb 633.1kb
green open wazuh-monitoring-3.x-2019.06.07  KEporPEtSY-XBFYgc0Flgw 2 0    1512      0 630.5kb 630.5kb
green open wazuh-alerts-3.x-2019.06.28      s_hIuXX0SraLfb84kCgPQg 5 0 1119235      0 592.3mb 592.3mb
green open wazuh-monitoring-3.x-2019.07.26  Rqdj8_V2RfOvRE6M55KxAA 2 0    5952      0   1.5mb   1.5mb
green open wazuh-alerts-3.x-2019.06.23      dzKRU68MRuudbW3T-M1nPQ 5 0  798432      0 413.9mb 413.9mb
green open wazuh-monitoring-3.x-2019.03.24  AgK_aunDQOyB-8z0lbeHwg 2 0    1512      0 628.2kb 628.2kb
green open wazuh-alerts-3.x-2019.04.25      YadVJj1lRrCTDQ0Ccd2JgQ 5 0 1518880      0 877.7mb 877.7mb
green open wazuh-monitoring-3.x-2019.04.03  Cc7aujLbRMKCM33ucgYAiw 2 0    1512      0 629.7kb 629.7kb
green open wazuh-monitoring-3.x-2019.08.06  EfJ1BxbXQ1-dQoCL6mCpRA 2 0    1426      0 593.3kb 593.3kb
green open wazuh-alerts-3.x-2019.05.24      KWujhv1kQZ2eY28aTxblCA 5 0 1018976      0 570.7mb 570.7mb
green open wazuh-alerts-3.x-2019.03.19      1_251_XXTI6-H2XoWLPHsg 5 0 1590778      0 871.6mb 871.6mb
green open wazuh-monitoring-3.x-2019.08.01  xh883SfbSnmFgpFkz9SipQ 2 0    5952      0   1.6mb   1.6mb
green open wazuh-alerts-3.x-2019.06.08      Ik1dqLGgSQit24OYQOzBbg 5 0  833319      0 448.2mb 448.2mb
green open wazuh-monitoring-3.x-2019.03.26  g2t-2vYIS1a8w6-gFZOODg 2 0    1512      0 629.5kb 629.5kb
green open wazuh-alerts-3.x-2019.07.13      D2Jo-iqTRiqBWuMdnsSR4Q 3 0  799514      0 410.3mb 410.3mb
green open wazuh-alerts-3.x-2019.05.25      bF54yZCVRh6m1kL01VvaDQ 5 0  852973      0 462.9mb 462.9mb
green open wazuh-monitoring-3.x-2019.06.05  CmQCPy3QTeevqCL1xONExQ 2 0    1512      0 632.1kb 632.1kb
green open wazuh-alerts-3.x-2019.04.16      e9TGlqlIR96c9Vg3PVu8mQ 5 0 1670674      0 932.9mb 932.9mb
green open wazuh-alerts-3.x-2019.06.25      i9bnTTU7Qkus6id7jHR0Yw 5 0 1240104      0 654.9mb 654.9mb
green open wazuh-alerts-3.x-2019.05.01      UC4nwlYYTmaCYMW_1CrLHA 5 0 1388992      0 855.5mb 855.5mb
green open wazuh-alerts-3.x-2019.04.23      GU1biL47QymLUO6XV3XGCg 5 0 1543507      0 884.6mb 884.6mb
green open wazuh-monitoring-3.x-2019.07.20  BaUR9qgJSnuK_F3Ji5RD1A 2 0    5952      0   1.6mb   1.6mb
green open wazuh-monitoring-3.x-2019.04.04  FUfBpiqRRi6dhAoPxSXx0A 2 0    1512      0 627.2kb 627.2kb
green open wazuh-monitoring-3.x-2019.06.30  Ou0K24nFSQmbDjYN1Rl5oQ 2 0    1512      0 633.6kb 633.6kb
green open wazuh-alerts-3.x-2019.08.03      nZ7IzxSzQFa5ZqKrLtPHxA 3 0  791322      0 403.6mb 403.6mb
green open .monitoring-es-6-2019.08.05      c9OgNlhpRdORbDBOp6SJRw 1 0 9753259  68438   4.3gb   4.3gb
green open wazuh-alerts-3.x-2019.05.06      GOv-eq97SwGR7W-75uP3wQ 5 0 1228404      0 704.8mb 704.8mb
green open wazuh-monitoring-3.x-2019.05.29  GHJn_aWKTXW7lN8rEbd3UQ 2 0    1512      0 630.3kb 630.3kb
green open wazuh-alerts-3.x-2019.05.30      zIyr6HLnTe6CZepc6Jc7HA 5 0  865276      0 521.7mb 521.7mb
green open wazuh-alerts-3.x-2019.06.07      0_SsNi4eTC2MwDeCAEJOJg 5 0 1127175      0 604.8mb 604.8mb
green open wazuh-alerts-3.x-2019.07.31      2C1QAHBhQnKcoVZLoRAK7A 3 0  998904      0 514.4mb 514.4mb
green open .monitoring-kibana-6-2019.08.02  VOpJ5bDhRFiMn4hh94jdnw 1 0    8639      0   1.9mb   1.9mb
green open wazuh-monitoring-3.x-2019.04.22  qBWF3uFDQbWSIfKCzkXxGw 2 0    1512      0 631.1kb 631.1kb
green open wazuh-alerts-3.x-2019.06.18      t-30x_9VQKaR5gEyqdapQg 5 0 1262962      0 664.4mb 664.4mb
green open wazuh-monitoring-3.x-2019.06.11  VHWmBjEjTAei670GR7-vfA 2 0    1512      0 630.1kb 630.1kb
green open wazuh-alerts-3.x-2019.04.26      CW-zmanUQCayJPT1s6C9vA 5 0 1457443      0 836.4mb 836.4mb
green open wazuh-monitoring-3.x-2019.04.15  sg9avDcrTZSQTjD5GHAwjg 2 0    1512      0 628.2kb 628.2kb
green open wazuh-alerts-3.x-2019.08.07      E5zRVLTEQLakF9pyW1KmNw 3 0  604018      0 345.4mb 345.4mb
green open wazuh-monitoring-3.x-2019.07.22  WZTDfozpTD2I2IhjJ_V0KQ 2 0    5890      0   1.5mb   1.5mb
green open wazuh-alerts-3.x-2019.07.07      IwuZAyXxS6qoyuohWGu17w 5 0  791852      0 419.4mb 419.4mb
green open wazuh-monitoring-3.x-2019.06.25  edUYU4qJT5GXh-R0YFjJhA 2 0    1512      0 630.9kb 630.9kb
green open wazuh-monitoring-3.x-2019.03.20  Pe5Lr596TrCZR4y1bbv0RQ 2 0    1512      0 633.1kb 633.1kb
green open wazuh-monitoring-3.x-2019.05.30  IPBJ9YkXSIehrj0e4eMdhw 2 0    1512      0 628.5kb 628.5kb
green open wazuh-alerts-3.x-2019.07.17      pQWTIhumS-q5zeTc-hfN8w 3 0 1177892      0 625.6mb 625.6mb
green open wazuh-alerts-3.x-2019.07.05      xL8EmLOUQpedil7bk3bosw 5 0 1084108      0 587.3mb 587.3mb
green open wazuh-monitoring-3.x-2019.07.18  61aVNGd4Qfyp2G4-0wSHLg 2 0    5952      0   1.6mb   1.6mb
green open wazuh-monitoring-3.x-2019.06.14  _nsG10PfST-1dRD5xGHFNQ 2 0    1512      0 630.4kb 630.4kb
green open wazuh-monitoring-3.x-2019.04.13  4LzGlN4gTeOQuGetCuEOWQ 2 0    1512      0 629.2kb 629.2kb
green open wazuh-alerts-3.x-2019.06.30      UidQB5WNQfuZXnU0kpjlkQ 5 0  822804      0 428.4mb 428.4mb
green open wazuh-alerts-3.x-2019.05.28      F4ppRH8-QDG9u6_1_WTagQ 5 0 1058583      0 583.5mb 583.5mb
green open wazuh-monitoring-3.x-2019.05.23  TpfkRM-7QISUSjr335Gpdg 2 0    1512      0 627.6kb 627.6kb
green open wazuh-monitoring-3.x-2019.06.27  FA5opA7GSIOQIcAGkUJGOg 2 0    1512      0   630kb   630kb
green open wazuh-alerts-3.x-2019.06.02      CeZ4sma8RfWPYA-xzBTWpA 5 0  875118      0 472.6mb 472.6mb
green open wazuh-alerts-3.x-2019.05.07      _VwjIVDVRlC0vD0ix0W8PA 5 0 1302873      0 739.6mb 739.6mb
green open wazuh-monitoring-3.x-2019.03.31  vVCBsJhCRZSqtaA-co4wVA 2 0    1512      0 625.7kb 625.7kb
green open wazuh-alerts-3.x-2019.03.27      oIpnnZJbTO2LWtr9jS_xjg 5 0 1669797      0 965.9mb 965.9mb
green open filebeat-7.2.0-2019.08.07-000001 2So2wxGETQmw_3oEMOQJpw 1 0       0      0    283b    283b
green open wazuh-alerts-3.x-2019.04.20      MLcTf8j7Qii6VX-UNUYJAQ 5 0 1278188      0 712.5mb 712.5mb
green open wazuh-alerts-3.x-2019.05.16      3LeVOVb0Su-i9HDgjA1xOA 5 0 1468259      0 839.1mb 839.1mb
green open wazuh-monitoring-3.x-2019.06.26  SoBCYJT0T8yUU2tF2ORQiQ 2 0    1512      0 633.7kb 633.7kb
green open wazuh-monitoring-3.x-2019.06.13  Dl4QK5TkT2GG8v6t-8paUw 2 0    1512      0 629.8kb 629.8kb
green open wazuh-alerts-3.x-2019.05.04      lalWIFQ3TKa7j-AOUxw-Yw 5 0  931776      0 516.8mb 516.8mb
green open wazuh-monitoring-3.x-2019.04.09  yx4SVgn-SFavGUWL_YwqrQ 2 0    1512      0 629.4kb 629.4kb
green open wazuh-alerts-3.x-2019.04.05      ARDxZUwfT-CxvF5mtN1XNQ 5 0 1550971      0 847.4mb 847.4mb
green open wazuh-monitoring-3.x-2019.07.07  pYEH0tiyQROXEC3H_6LrEw 2 0    1512      0 632.9kb 632.9kb
green open wazuh-monitoring-3.x-2019.07.30  GXjBN7CvQi24lpn6SvSMxg 2 0    5890      0   1.2mb   1.2mb
green open wazuh-alerts-3.x-2019.04.09      RaDkv-B-SauLnUFuEMhN5g 5 0 1709974      0 951.4mb 951.4mb
green open wazuh-alerts-3.x-2019.06.05      9v-z6ZNERSqpkGvbZjfFSQ 5 0 2491405      0   7.2gb   7.2gb
green open wazuh-alerts-3.x-2019.04.11      QpnzhQ1nRwKgLz-Z1Sl2MA 5 0 1606005      0 885.6mb 885.6mb
green open wazuh-alerts-3.x-2019.03.20      W63DIqcCTzOy_bpSjGi-1A 5 0 1624425      0 886.5mb 886.5mb
green open wazuh-alerts-3.x-2019.04.15      VGvhWgRzSY6Yadrd2aompA 5 0 1580397      0   872mb   872mb
green open wazuh-monitoring-3.x-2019.05.09  RQ5htafFSz-s6zfj1LqGkw 2 0    1512      0 624.6kb 624.6kb
green open wazuh-alerts-3.x-2019.03.28      JmblQofAQ22lNmKAPmXH1Q 5 0 1636281      0   906mb   906mb
green open wazuh-alerts-3.x-2019.03.29      v1r05frVRMm4nXTufPP6EQ 5 0 1540603      0 837.5mb 837.5mb
green open wazuh-monitoring-3.x-2019.08.03  SRmiqlL1RDK7rxlcjl4Crw 2 0    5952      0   1.6mb   1.6mb
green open wazuh-monitoring-3.x-2019.05.04  Co6jQEN8TT26LQvW92XchA 2 0    1512      0   626kb   626kb
green open wazuh-monitoring-3.x-2019.05.10  whNz3oR6T8q-Mg_tZTtZBQ 2 0    1512      0 625.8kb 625.8kb
green open wazuh-monitoring-3.x-2019.05.21  6dp_rP0tS9mqKNM9I3OAHw 2 0    1512      0 627.6kb 627.6kb

Attached end of elasticsearch.log.


Regards.



part2_elasticsearch.log

Javier Martín-Moreno Guijarro

unread,
Aug 8, 2019, 6:59:04 AM8/8/19
to Wazuh mailing list
Dear Team,

Are you changing Wazuh documentation?? Monday when I've started my update from 6.8 to 7.x you have in the documentation to update to version 7.2.0, after 7.2.1 and now i see 7.3.0....

Regards,

Pablo Torres

unread,
Aug 8, 2019, 8:05:52 AM8/8/19
to Wazuh mailing list
Hi Javier,

Yes, Wazuh v3.9.4 was released yesterday and that new version adds support for ELK v7.3.0 / v7.2.1 / v6.8.2 , our documentation has been updated to the last supported version, in this case 3.9.4-7.3.0, if you are following any of the steps in our documentation you can change that version to the one you are using (e.g. 3.9.3-7.2.0). You can check the highlights of that new v3.9.4 version here: https://groups.google.com/forum/#!topic/wazuh/pHw2mY2D2-s


Regarding your issue, the cluster is still in RED status, indices are green but you still have 2800 unassigned shards and we can see in your Elasticsearch logs that there is no known master node in your cluster:
[2019-08-08T11:32:00,640][DEBUG][o.e.a.a.c.s.TransportClusterStateAction] [wazuhdb] no known master node, scheduling a retry
[2019-08-08T11:32:04,456][WARN ][r.suppressed             ] [wazuhdb] path: /_monitoring/bulk, params: {system_id=kibana, system_api_version=6, interval=10000ms}
org
.elasticsearch.cluster.block.ClusterBlockException: blocked by: [SERVICE_UNAVAILABLE/2/no master];

Does your cluster have more than one node? or do you have any extra node trying to connect to your cluster?

Could you try editing your elasticsearch.yml ( /etc/elasticsearch/elasticsearch.yml) (replace the IP if that's not your ELASTIC_IP) with the following configuration?
node.name: "node-1"
node
.master: true
path
.data: /var/lib/elasticsearch
path
.logs: /var/log/elasticsearch
cluster
.initial_master_nodes:
 
- "134.16.1.201"
network
.host: 134.16.1.201,127.0.0.1


Then restart Elasticsearch:
systemctl restart elasticsearch

We will repeat some steps we did in previous messages, just to be sure that cluster is trying to recover:
Check the cluster health:

This watch will show you the active shards percent, updating its value every 0.1s, you should run it once and check if the value of active shards percent has increased
watch -n0 'curl -s 134.16.1.201:9200/_cluster/health?pretty | grep "active_shards_percent"'
If that number increases, the cluster is recovering, if after some seconds/minutes the number gets stuck there's something wrong.

And again, after that restart we did, send me the Elasticsearch logs (/var/log/elasticsearch/<CLUSTER-NAME/elasticsearch>.log), so we can check if the master node have been found or not 

Keep me updated,

Regards,
Pablo Torres

Javier Martín-Moreno Guijarro

unread,
Aug 9, 2019, 2:25:33 AM8/9/19
to Wazuh mailing list
Hi Pablo,

Ok so, for your information I have installed version 7.2.1 in all packages. My configuration of servers is:

- First server with Wazuh Manager, Wazuh API and Filebeat
- Second server with ELK packages (take the opportunity,can I uninstall Logstash in this server?)

Here what you ask me:

{
  "cluster_name" : "elasticsearch",
  "status" : "red",
  "timed_out" : false,
  "number_of_nodes" : 1,
  "number_of_data_nodes" : 1,
  "active_primary_shards" : 2588,
  "active_shards" : 2588,
  "relocating_shards" : 0,
  "initializing_shards" : 4,
  "unassigned_shards" : 964,
  "delayed_unassigned_shards" : 0,
  "number_of_pending_tasks" : 6,
  "number_of_in_flight_fetch" : 0,
  "task_max_waiting_in_queue_millis" : 2348,
  "active_shards_percent_as_number" : 72.77840269966255

I saw that at this point, when active shards percent as number is 72.778 the request curl 134.16.1.201:9200/_cluster/health?pretty stop to work, so I can't see the result and in elasticsearch.log start to appear this message:

[2019-08-09T08:16:16,677][DEBUG][o.e.a.a.i.t.p.TransportPutIndexTemplateAction] [wazuhdb] no known master node, scheduling a retry
[2019-08-09T08:17:10,147][DEBUG][o.e.a.a.i.t.p.TransportPutIndexTemplateAction] [wazuhdb] no known master node, scheduling a retry
[2019-08-09T08:17:12,286][DEBUG][o.e.a.a.c.s.TransportClusterStateAction] [wazuhdb] no known master node, scheduling a retry
[2019-08-09T08:17:12,299][DEBUG][o.e.a.a.i.t.g.TransportGetIndexTemplatesAction] [wazuhdb] no known master node, scheduling a retry
[2019-08-09T08:17:48,819][DEBUG][o.e.a.a.i.t.g.TransportGetIndexTemplatesAction] [wazuhdb] no known master node, scheduling a retry
[2019-08-09T08:18:12,293][DEBUG][o.e.a.a.i.g.TransportGetIndexAction] [wazuhdb] no known master node, scheduling a retry
[2019-08-09T08:18:15,288][DEBUG][o.e.a.a.i.t.g.TransportGetIndexTemplatesAction] [wazuhdb] no known master node, scheduling a retry
[2019-08-09T08:18:30,226][WARN ][r.suppressed             ] [wazuhdb] path: /_monitoring/bulk, params: {system_id=kibana, system_api_version=6, interval=10000ms}
org.elasticsearch.cluster.block.ClusterBlockException: blocked by: [SERVICE_UNAVAILABLE/2/no master];

Attached you last logs in elasticsearch.log

Regards.


part3_elasticsearch.log.txt

JavierMMG

unread,
Aug 9, 2019, 6:36:06 AM8/9/19
to Wazuh mailing list
UPDATE:

I've closed all index from 2018, restart elastic and now i have this:

{
  "cluster_name" : "elasticsearch",
  "status" : "yellow",
  "timed_out" : false,
  "number_of_nodes" : 1,
  "number_of_data_nodes" : 1,
  "active_primary_shards" : 3558,
  "active_shards" : 3558,
  "relocating_shards" : 0,
  "initializing_shards" : 0,
  "unassigned_shards" : 2,
  "delayed_unassigned_shards" : 0,
  "number_of_pending_tasks" : 0,
  "number_of_in_flight_fetch" : 0,
  "task_max_waiting_in_queue_millis" : 0,
  "active_shards_percent_as_number" : 99.9438202247191
}


At the end of elasticsearch.log:

[2019-08-09T11:42:00,508][WARN ][o.e.g.DanglingIndicesState] [node-1] [[wazuh-monitoring-3.x-2019.08.07/XBiC3-1aR1SCjs9TkRoYSQ]] can not be imported as a dangling index, as index with same name already exists in cluster metadata
[2019-08-09T11:42:01,582][WARN ][o.e.g.DanglingIndicesState] [node-1] [[wazuh-monitoring-3.x-2019.08.07/XBiC3-1aR1SCjs9TkRoYSQ]] can not be imported as a dangling index, as index with same name already exists in cluster metadata
[2019-08-09T11:42:03,633][WARN ][o.e.g.DanglingIndicesState] [node-1] [[wazuh-monitoring-3.x-2019.08.07/XBiC3-1aR1SCjs9TkRoYSQ]] can not be imported as a dangling index, as index with same name already exists in cluster metadata
[2019-08-09T11:42:04,061][WARN ][o.e.g.DanglingIndicesState] [node-1] [[wazuh-monitoring-3.x-2019.08.07/XBiC3-1aR1SCjs9TkRoYSQ]] can not be imported as a dangling index, as index with same name already exists in cluster metadata
[2019-08-09T11:42:04,165][WARN ][o.e.g.DanglingIndicesState] [node-1] [[wazuh-monitoring-3.x-2019.08.07/XBiC3-1aR1SCjs9TkRoYSQ]] can not be imported as a dangling index, as index with same name already exists in cluster metadata
[2019-08-09T11:42:05,871][WARN ][o.e.g.DanglingIndicesState] [node-1] [[wazuh-monitoring-3.x-2019.08.07/XBiC3-1aR1SCjs9TkRoYSQ]] can not be imported as a dangling index, as index with same name already exists in cluster metadata
[2019-08-09T11:42:06,208][WARN ][o.e.g.DanglingIndicesState] [node-1] [[wazuh-monitoring-3.x-2019.08.07/XBiC3-1aR1SCjs9TkRoYSQ]] can not be imported as a dangling index, as index with same name already exists in cluster metadata
[2019-08-09T11:42:08,258][WARN ][o.e.g.DanglingIndicesState] [node-1] [[wazuh-monitoring-3.x-2019.08.07/XBiC3-1aR1SCjs9TkRoYSQ]] can not be imported as a dangling index, as index with same name already exists in cluster metadata
[2019-08-09T11:42:08,850][WARN ][o.e.g.DanglingIndicesState] [node-1] [[wazuh-monitoring-3.x-2019.08.07/XBiC3-1aR1SCjs9TkRoYSQ]] can not be imported as a dangling index, as index with same name already exists in cluster metadata
[2019-08-09T11:42:08,933][WARN ][o.e.g.DanglingIndicesState] [node-1] [[wazuh-monitoring-3.x-2019.08.07/XBiC3-1aR1SCjs9TkRoYSQ]] can not be imported as a dangling index, as index with same name already exists in cluster metadata
[2019-08-09T11:42:09,390][WARN ][o.e.g.DanglingIndicesState] [node-1] [[wazuh-monitoring-3.x-2019.08.07/XBiC3-1aR1SCjs9TkRoYSQ]] can not be imported as a dangling index, as index with same name already exists in cluster metadata
[2019-08-09T11:42:09,931][WARN ][o.e.g.DanglingIndicesState] [node-1] [[wazuh-monitoring-3.x-2019.08.07/XBiC3-1aR1SCjs9TkRoYSQ]] can not be imported as a dangling index, as index with same name already exists in cluster metadata
[2019-08-09T11:42:10,001][WARN ][o.e.g.DanglingIndicesState] [node-1] [[wazuh-monitoring-3.x-2019.08.07/XBiC3-1aR1SCjs9TkRoYSQ]] can not be imported as a dangling index, as index with same name already exists in cluster metadata
[2019-08-09T11:42:10,023][INFO ][o.e.c.r.a.AllocationService] [node-1] Cluster health status changed from [RED] to [GREEN] (reason: [shards started [[wazuh-alerts-3.x-2018.04.25][1]] ...]).
[2019-08-09T11:42:10,062][WARN ][o.e.g.DanglingIndicesState] [node-1] [[wazuh-monitoring-3.x-2019.08.07/XBiC3-1aR1SCjs9TkRoYSQ]] can not be imported as a dangling index, as index with same name already exists in cluster metadata

So, it seems that with all index that i have impossible to run elastic, at one moment stop elastic cluster and everything start to fail.

Now my question is, i have 3556 shards that is not a good feeling. Is it possible with my current configuration revert this situation?

So, pending questions are:
- Revert shards situation
- About Index, I need to keep 2018 index closed to everything works. It could be possible to revert this situation?
- Remove logstash

Regards.

JavierMMG

unread,
Aug 12, 2019, 2:28:34 AM8/12/19
to Wazuh mailing list
Dear Team,

Has anyone been able to review this issue?

Thanks a lot,

Regards.

Pablo Torres

unread,
Aug 12, 2019, 7:45:35 AM8/12/19
to Wazuh mailing list
Hi Javier,

Sorry for the late reply, yes Logstash should be uninstalled as it's no longer necessary. Filebeat is now reading alerts from our alerts.json file and shipping these alerts to Elasticsearch. 
About the sharding problem, yes it can be solved. As I said in a previous message, this guide is very useful to know what are shards and how to handle shard-related issues: https://www.elastic.co/blog/how-many-shards-should-i-have-in-my-elasticsearch-cluster

The problem is that you only have one node in your cluster and 3.5k+ shards (only counting 2019 indices), adding more nodes to the cluster should help (the soft default limit of shards per node is 1.000, the amount of shards depends on your server characteristics), so we have to reduce that amount of shards, we can do that in different ways:

1. Reducing the amount of shards per index, I can see that your wazuh-alerts* indices contain 5 shards per index:
green open wazuh-alerts-3.x-2019.04.22      yMHYYPbWTf2pJqgbY99OSg 5 0 1281605      0 715.4mb 715.4mb
green open wazuh
-alerts-3.x-2019.05.12      pH6Tn4zIQNuQQh_dfBNLCw 5 0  981697      0 706.8mb 706.8mb
green open wazuh
-alerts-3.x-2019.06.29      6v8Qgto0Q3C_1OZwCasE-w 5 0  819109      0 436.1mb 436.1mb

That means that you will generate 30 indices of 5 shards each per month:

30 indices per month * 5 shards per index = 150 shards per month

You could use the Shrink index API (https://www.elastic.co/guide/en/elasticsearch/reference/current/indices-shrink-index.html#indices-shrink-index)to decrease that number of shards. Shrink index API allows you to shrink an existing index into a new index with fewer primary shards. So you could reduce existing indices to have only 1 shards which translates into:

30 indices per month * 1 shard per index = 30 shards per month

And I just mentioned wazuh-alerts-*, you could also reduce the shard amount in other different indices that are created in a daily basis.
(Shards recommended size should be less than 30-40GB, your indices are 300MB-1GB so it won't be a problem to reduce the number of shards)


2. You can merge all indices within a month to a single index, for example merge all wazuh-alerts*  indices created on January on a single index and then delete all those daily indices, (before deleting any index check that the new index contains all the data that it should contains using WazuhApp or Kibana Discover/Visualize) also be careful with the use of wildcards on the indices name.

POST _reindex
{
 
"source": {
   
"index": "wazuh-alerts-3.x-2019-01.*"
 
},
 
"dest": {
   
"index": "wazuh-alerts-3.x-2019.01"
 
}
}

Again,  30 indices per month * 5 shards per index = 150 shards per month
If we merge all these indices in one monthly index:
1 index per month * 5 shards per month = 5 shards per month




Regarding your 2018 indices, if you must maintain those old indices as open indices, we can do the same as explained.
Check that the above explanation could be also applied to wazuh-monitoring* indices, take a look at your 2018 indices, both wazuh-monitoring* and wazuh-alerts* have 5 shards per index, which translates into:
yellow open wazuh-monitoring-3.x-2018.11.30  M4rPm-0gTkO6z9GozhWjJA 5 1    1680      0   1.2mb   1.2mb
yellow open wazuh
-alerts-3.x-2018.11.29      0rgpr0x9RVC3a0iMU6c7cA 5 1 1149070      0 810.3mb 810.3mb

2 indices * 30 indices per month * 5 shards per index = 300 shards per month

Using both of above ways to reduce shards could be helpful to reduce that huge amount of shards.


I hope it helps, let me know if you need anything else.

Best regards,
Pablo Torres

JavierMMG

unread,
Aug 14, 2019, 4:52:11 AM8/14/19
to Wazuh mailing list
Hi Pablo,

Thanks for your extend explanation. It has been very very helpful.

So, i will try to reindex all per months and after, when i migrate all index, for example for January of 2019, i should remove all index per day no? How can I do it?

Thanks a lot for all your help, now everything is alive :)

Pablo Torres

unread,
Aug 14, 2019, 5:42:41 AM8/14/19
to Wazuh mailing list
Hi Javier,

Yes, after re-indexing your data will be duplicated, one copy will be in the original index and the other copy in the new created index.
curl -X DELETE "ELASTIC_IP:9200/wazuh-alerts-3.x-2019.04.01?pretty"
in this example the index wazuh-alerts-3.x-2019.01.01 will be deleted. Delete indices only if you are sure the re-indexation was successful and there won't be any data loss.

We are happy to help, if you need anything else do not hesitate to ask.

Best regards,
Pablo Torres

JavierMMG

unread,
Aug 14, 2019, 5:50:28 AM8/14/19
to Wazuh mailing list
Hi Pablo,

Ok so, I can reindex one month, close all index in that month and take a look if with the reindex i have access to all logs. If everything is ok, i can remove index per day and keep only reindex for month, is it ok?

Regards.

Hardik Joshi

unread,
Aug 14, 2019, 5:59:28 AM8/14/19
to Pablo Torres, Wazuh mailing list
can someone help me on below error.

ossec not compiled with support for 'mysql'

 
Thanks
Hardik Joshi
8511113164


On Tue, Aug 6, 2019 at 4:03 PM Pablo Torres <pablo....@wazuh.com> wrote:
Hi Javier,

Let's set the max number of shards per node to 7000 as a temporary solution until you get the number of shards under control, add the following line to your elasticsearch.yml configuration file (/etc/elasticsearch/elasticsearch.yml):

cluster.max_shards_per_node: 7000

**As I said in my previous message: Having too many shards opened it is not recommended and it can lead to performance issues.
Save and restart Elasticsearch 
systemctl restart elasticsearch

And let's see if you can now check your indices:
curl ELASTIC_IP:9200/_cat/indices?v
(remember to replace ELASTIC_IP with the IP of the Elasticsearch server)

Could you please send us the output of this command:
curl -XGET ELASTIC_IP:9200/_cluster/health?pretty


How is possible that with only one node I have 6342 shards opened??
The amount of shards depends on the amount of indices you have and the size of them, I recommend you this article about shards https://www.elastic.co/blog/how-many-shards-should-i-have-in-my-elasticsearch-cluster

Let me know if it helps,

Best regards,
Pablo Torres

--
You received this message because you are subscribed to the Google Groups "Wazuh mailing list" group.
To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+un...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/wazuh/e3b258de-d587-40fe-91d4-245abd76bdf5%40googlegroups.com.

Pablo Torres

unread,
Aug 14, 2019, 6:11:20 AM8/14/19
to Wazuh mailing list
Hi Javier,

Yes, that could be a good approach, let me know if you need anything else.

Regards,
Pablo Torres

Pablo Torres

unread,
Aug 14, 2019, 6:22:34 AM8/14/19
to Wazuh mailing list
Hi Hardik Joshi,

That question is not related to this thread, could you please open a new thread explaining your problem and we will help you in that new thread, that way other users with the same problem as you may find it helpful. 
Sorry for any inconvenience

Regards,
Pablo Torres
To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+unsubscribe@googlegroups.com.

JavierMMG

unread,
Aug 14, 2019, 7:04:14 AM8/14/19
to Wazuh mailing list
Ok Pablo,

So, do you know how many time it can takes? My actions:

root@wazuhdb:~# POST _reindex
Please enter content (application/x-www-form-urlencoded) to be POSTed:
{
  "source": {
    "index": "wazuh-alerts-3.x-2019-01.*"
  },
  "dest": {
    "index": "wazuh-alerts-3.x-2019.01"
  }
}

i've lunched around 30 minutes ago and it's still thinking, I saw this:

root@wazuhdb:/var/log# ps -aux |grep reindex
root       6206  0.0  0.0  33416 10660 pts/0    S+   12:17   0:00 /usr/bin/perl -w /usr/bin/POST _reindex
root      11255  0.0  0.0  14228   980 pts/2    S+   13:00   0:00 grep --color=auto reindex

Exists the way to know that the reindexing is working? If I filter index, i don't see new index:

root@wazuhdb:/var/log# curl 134.16.1.201:9200/_cat/indices |grep wazuh-alerts-3.x-2019.01
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
  0     0    0     0    0     0      0      0 --:--:--  0:00:01 --:--:--     0green open  wazuh-alerts-3.x-2019.01.31      zCVF7S5ySBia8FS_Gzrp6g 5 0 1169097  247573  860.6mb  860.6mb
green open  wazuh-alerts-3.x-2019.01.30      ikXtwjPgRm--JfgqaXHuPQ 5 0 1215857  192373  876.8mb  876.8mb
green open  wazuh-alerts-3.x-2019.01.29      XvP1v10jS1GSE0n_rl1ckw 5 0 1200867  128584  808.1mb  808.1mb
green open  wazuh-alerts-3.x-2019.01.26      BHROOjvzRp2U5pFUC07roQ 5 0  783775  163843  529.1mb  529.1mb
green open  wazuh-alerts-3.x-2019.01.25      if3uG_2dQeuoZqxrdZctUw 5 0 1007447   97649  652.4mb  652.4mb
green open  wazuh-alerts-3.x-2019.01.28      irb6pQB4Sryhgy6sQKkZEA 5 0 1092528  223764  793.3mb  793.3mb
green open  wazuh-alerts-3.x-2019.01.27      pkpROjpAQJuHlq3wjRqx5w 5 0  796216  219195  570.7mb  570.7mb
green open  wazuh-alerts-3.x-2019.01.22      PYU1ScN1SEab__0cDz_0BA 5 0 1510729  267404    1.3gb    1.3gb
green open  wazuh-alerts-3.x-2019.01.21      HgWtssrOS6i2t-Wf_yAtwA 5 0 1156220  148186    902mb    902mb
green open  wazuh-alerts-3.x-2019.01.24      jAvGG9N9RdutCG12VebrIw 5 0 1167391  208519  829.4mb  829.4mb
green open  wazuh-alerts-3.x-2019.01.23      Y9w1425kRtG95cZQvdVgwQ 5 0 1645189  129008    1.1gb    1.1gb
green open  wazuh-alerts-3.x-2019.01.08      rFcY5rcdR3CRRAzvY4Ow0A 5 0 1169996  260094  973.9mb  973.9mb
green open  wazuh-alerts-3.x-2019.01.07      jzZttO8uTfSEiOvcarEu-A 5 0 1175978  176592  921.3mb  921.3mb
green open  wazuh-alerts-3.x-2019.01.09      xH15PMdgSdKZVQdZdutCeA 5 0 1228091  158731  956.4mb  956.4mb
green open  wazuh-alerts-3.x-2019.01.04      Is1CyIsNRjuSbwhc6FM5cg 5 0 1163420  274509  948.1mb  948.1mb
green open  wazuh-alerts-3.x-2019.01.03      Ofr-MZTnRRCsClH0AMz-yQ 5 0 1225527  146598  918.3mb  918.3mb
green open  wazuh-alerts-3.x-2019.01.06      zJuAOkbiTNCqf7G9AJwlug 5 0  897870  206794  695.2mb  695.2mb
green open  wazuh-alerts-3.x-2019.01.05      bpek6Bn0S3GEWTU0YViwVA 5 0  899481  249487    721mb    721mb
green open  wazuh-alerts-3.x-2019.01.02      BxmBUUwFRuSKs62iAc3QvA 5 0 1235693  229870  966.4mb  966.4mb
green open  wazuh-alerts-3.x-2019.01.01      nBWuE-f_RBGDb7A0h4QHfQ 5 0  973623  263415  768.5mb  768.5mb
green open  wazuh-alerts-3.x-2019.01.20      2MnugiR0Sb6NxPw9tLgK_A 5 0  881462  195262  679.2mb  679.2mb
green open  wazuh-alerts-3.x-2019.01.19      Q1Ql91aJRwuAt0d1qg9NQg 5 0  875128  105387  613.8mb  613.8mb
green open  wazuh-alerts-3.x-2019.01.18      DPBp9OtGT3-7GjV2j-ikVA 5 0 1093110  236012  892.6mb  892.6mb
green open  wazuh-alerts-3.x-2019.01.15      BjEK_kUnQdmq-FF059-JGA 5 0 1174826  295371  985.8mb  985.8mb
green open  wazuh-alerts-3.x-2019.01.14      Kcj1ULo2RvuxWqPpnXHMmQ 5 0 1238446  207261  966.5mb  966.5mb
green open  wazuh-alerts-3.x-2019.01.17      2chu-AfTTPmkAz5HPnoaNg 5 0 1188982   92761  885.2mb  885.2mb
green open  wazuh-alerts-3.x-2019.01.16      6x4ePGWkTXKlxwLCoryyqQ 5 0 1145411  296794  992.9mb  992.9mb
green open  wazuh-alerts-3.x-2019.01.11      bcpPaDe8QMut0LwxpGnWGg 5 0 1211579   94359  904.9mb  904.9mb
green open  wazuh-alerts-3.x-2019.01.10      T5wwHT0kRaaWwl3XsgXXlw 5 0 1227625  232609 1002.8mb 1002.8mb
green open  wazuh-alerts-3.x-2019.01.13      3FQnD5tFSHe5K07t_ZosEw 5 0  897435  191575  685.1mb  685.1mb
green open  wazuh-alerts-3.x-2019.01.12      ubGr17zjT9qB6pJFNXVhzA 5 0  913535  123458  656.8mb  656.8mb
100  108k  100  108k    0     0  69637      0  0:00:01  0:00:01 --:--:-- 69649

Regards,

Javier.


Pablo Torres

unread,
Aug 14, 2019, 7:20:54 AM8/14/19
to Wazuh mailing list
Hi Javier,

The time it takes to re-index depends on the size of your indices. To know running if the re-indexing is working you can make use of the Task API, it allows to retrieve information about the tasks currently executing on one or more nodes in the cluster.
curl -X GET "elastic-ip:9200/_tasks?detailed=true&actions=*reindex&pretty"
The output should look like this if you have any running task:

reindex.png

You can see there's a running task and the description explains that it's re-indexing from index X to Y.

Best regards,
Pablo Torres

JavierMMG

unread,
Aug 14, 2019, 7:24:41 AM8/14/19
to Wazuh mailing list
Ok, so I'm making something wrong:

root@wazuhdb:/etc/logstash/conf.d# curl -X GET "134.16.1.201:9200/_tasks?detailed=true&actions=*reindex&pretty"
{
  "nodes" : { }

Steps that i said to you are ok?

root@wazuhdb:~# POST _reindex
Please enter content (application/x-www-form-urlencoded) to be POSTed:

And after put this part:

{
  "source": {
    "index": "wazuh-alerts-3.x-2019-01.*"
  },
  "dest": {
    "index": "wazuh-alerts-3.x-2019.01"
  }
}

Regards.

Pablo Torres

unread,
Aug 14, 2019, 7:45:31 AM8/14/19
to Wazuh mailing list
Hi Javier,

Yes, it should be okay, take a look at my example:

First of all check that you have indices in January,
GET _cat/indices/wazuh-alerts-3.x-2019-01.*

indices.png

In my case I have these indices (you should have the whole month indices) 

Then I run the re-index command:
POST _reindex
{
 
"source": {
   
"index": "wazuh-alerts-3.x-2019-01.*"
 
},
 
"dest": {

   
"index": "wazuh-alerts-3.x-2019-01"
 
}
}

Now check if the task is running:

task.png

You can also check that the new index has been created and its size is increasing every few seconds with this:
GET _cat/indices/wazuh-alerts-3.x-2019-01

newindex2.png



Let me know if following these steps works for you,

Regards,
Pablo Torres



JavierMMG

unread,
Aug 14, 2019, 7:53:39 AM8/14/19
to Wazuh mailing list
Hi Pablo,

root@wazuhdb:~# GET _cat/indices/wazuh-alerts-3.x-2019-01.*
Can't connect to _cat:80

Temporary failure in name resolution at /usr/share/perl5/LWP/Protocol/http.pm line 47.
root@wazuhdb:~# netstat -nap |grep 80
tcp        0      0 0.0.0.0:80              0.0.0.0:*               LISTEN      2451/nginx -g daemo
tcp6       0      0 :::80                   :::*                    LISTEN      2451/nginx -g daemo
udp6       0      0 fe80::8218:44ff:fee:123 :::*                                2360/ntpd

It could be possible that i can't use _cat because I have nginx working on port 80?

Regards,

Pablo Torres

unread,
Aug 14, 2019, 8:13:17 AM8/14/19
to Wazuh mailing list
Hi Javier,

Did you do the curl like this?
curl -X GET  localhost:9200/_cat/indices/wazuh-alerts-3.x-2019-01.*

You can also do these requests from the Kibana Dev tools, so there's no need to keep writing the <server_ip>:<server_port> in your terminalboth ways works

kibana.png


Regards,
Pablo Torres


JavierMMG

unread,
Aug 14, 2019, 8:20:02 AM8/14/19
to Wazuh mailing list
Ok working for Kibana is without problem, now I get:

{
  "error" : {
    "root_cause" : [
      {
        "type" : "index_not_found_exception",
        "reason" : "no such index [wazuh-alerts-3.x-2019-01]",
        "resource.type" : "index_or_alias",
        "resource.id" : "wazuh-alerts-3.x-2019-01",
        "index_uuid" : "_na_",
        "index" : "wazuh-alerts-3.x-2019-01"
      }
    ],
    "type" : "index_not_found_exception",
    "reason" : "no such index [wazuh-alerts-3.x-2019-01]",
    "resource.type" : "index_or_alias",
    "resource.id" : "wazuh-alerts-3.x-2019-01",
    "index_uuid" : "_na_",
    "index" : "wazuh-alerts-3.x-2019-01"
  },
  "status" : 404
}

If I'm not wrong, in Elastic documentation said that we should create wazuh-alerts-3.x-2019-01 before to lunch the reindex, is it correct? how we can create it with same wazuh configuration?

Regards,

Pablo Torres

unread,
Aug 16, 2019, 2:09:25 AM8/16/19
to Wazuh mailing list
Hi Javier,

You can create the index or not, but it's not mandatory, when reindexing indices if the destination index does not exists it will be created. Regarding your question about creating an index with the same wazuh configuration, if you mean creating an index with the same index template (same settings/mappings) our template is applied to every new index that satisfy our index pattern wazuh-alerts-3.x-* . You can create an index with this request (Kibana Dev Tools):
PUT wazuh-alerts-3.x-2019.01

We can obtain index information with this request:
GET wazuh-alerts-3.x-2019.01

We can see that template was automatically applied:

template.png



Now let's continue with the reindexing, could you please follow again the steps and paste here every command and the output it gives you (even if it didn't fail), so we can find out where it's failing:

1. Check that you have indices:
GET _cat/indices/wazuh-alerts-3.x-2019.01.*

2. Run the reindex request:
POST _reindex
{
 
"source": {
   
"index": "wazuh-alerts-3.x-2019.01.*"
 
},
 
"dest": {
   "index": "wazuh-alerts-3.x-2019.01"
 
}
}

3. Check current reindexing tasks:
GET /_tasks?detailed=true&actions=*reindex&pretty

4. Check the new index exists 
GET _cat/indices/wazuh-alerts-3.x-2019.01


Please paste the output of the above commands in your reply,

Best regards,
Pablo Torres



JavierMMG

unread,
Aug 16, 2019, 5:15:26 AM8/16/19
to Wazuh mailing list
1. Check that you have indices:
GET _cat/indices/wazuh-alerts-3.x-2019.01.*

green open wazuh-alerts-3.x-2019.01.31 zCVF7S5ySBia8FS_Gzrp6g 5 0 1169097 247573  860.6mb  860.6mb
green open wazuh-alerts-3.x-2019.01.30 ikXtwjPgRm--JfgqaXHuPQ 5 0 1215857 192373  876.8mb  876.8mb
green open wazuh-alerts-3.x-2019.01.08 rFcY5rcdR3CRRAzvY4Ow0A 5 0 1169996 260094  973.9mb  973.9mb
green open wazuh-alerts-3.x-2019.01.07 jzZttO8uTfSEiOvcarEu-A 5 0 1175978 176592  921.3mb  921.3mb
green open wazuh-alerts-3.x-2019.01.29 XvP1v10jS1GSE0n_rl1ckw 5 0 1200867 128584  808.1mb  808.1mb
green open wazuh-alerts-3.x-2019.01.09 xH15PMdgSdKZVQdZdutCeA 5 0 1228091 158731  956.4mb  956.4mb
green open wazuh-alerts-3.x-2019.01.26 BHROOjvzRp2U5pFUC07roQ 5 0  783775 163843  529.1mb  529.1mb
green open wazuh-alerts-3.x-2019.01.04 Is1CyIsNRjuSbwhc6FM5cg 5 0 1163420 274509  948.1mb  948.1mb
green open wazuh-alerts-3.x-2019.01.25 if3uG_2dQeuoZqxrdZctUw 5 0 1007447  97649  652.4mb  652.4mb
green open wazuh-alerts-3.x-2019.01.03 Ofr-MZTnRRCsClH0AMz-yQ 5 0 1225527 146598  918.3mb  918.3mb
green open wazuh-alerts-3.x-2019.01.28 irb6pQB4Sryhgy6sQKkZEA 5 0 1092528 223764  793.3mb  793.3mb
green open wazuh-alerts-3.x-2019.01.06 zJuAOkbiTNCqf7G9AJwlug 5 0  897870 206794  695.2mb  695.2mb
green open wazuh-alerts-3.x-2019.01.05 bpek6Bn0S3GEWTU0YViwVA 5 0  899481 249487    721mb    721mb
green open wazuh-alerts-3.x-2019.01.27 pkpROjpAQJuHlq3wjRqx5w 5 0  796216 219195  570.7mb  570.7mb
green open wazuh-alerts-3.x-2019.01.22 PYU1ScN1SEab__0cDz_0BA 5 0 1510729 267404    1.3gb    1.3gb
green open wazuh-alerts-3.x-2019.01.21 HgWtssrOS6i2t-Wf_yAtwA 5 0 1156220 148186    902mb    902mb
green open wazuh-alerts-3.x-2019.01.24 jAvGG9N9RdutCG12VebrIw 5 0 1167391 208519  829.4mb  829.4mb
green open wazuh-alerts-3.x-2019.01.02 BxmBUUwFRuSKs62iAc3QvA 5 0 1235693 229870  966.4mb  966.4mb
green open wazuh-alerts-3.x-2019.01.23 Y9w1425kRtG95cZQvdVgwQ 5 0 1645189 129008    1.1gb    1.1gb
green open wazuh-alerts-3.x-2019.01.01 nBWuE-f_RBGDb7A0h4QHfQ 5 0  973623 263415  768.5mb  768.5mb
green open wazuh-alerts-3.x-2019.01.20 2MnugiR0Sb6NxPw9tLgK_A 5 0  881462 195262  679.2mb  679.2mb
green open wazuh-alerts-3.x-2019.01.19 Q1Ql91aJRwuAt0d1qg9NQg 5 0  875128 105387  613.8mb  613.8mb
green open wazuh-alerts-3.x-2019.01.18 DPBp9OtGT3-7GjV2j-ikVA 5 0 1093110 236012  892.6mb  892.6mb
green open wazuh-alerts-3.x-2019.01.15 BjEK_kUnQdmq-FF059-JGA 5 0 1174826 295371  985.8mb  985.8mb
green open wazuh-alerts-3.x-2019.01.14 Kcj1ULo2RvuxWqPpnXHMmQ 5 0 1238446 207261  966.5mb  966.5mb
green open wazuh-alerts-3.x-2019.01.17 2chu-AfTTPmkAz5HPnoaNg 5 0 1188982  92761  885.2mb  885.2mb
green open wazuh-alerts-3.x-2019.01.16 6x4ePGWkTXKlxwLCoryyqQ 5 0 1145411 296794  992.9mb  992.9mb
green open wazuh-alerts-3.x-2019.01.11 bcpPaDe8QMut0LwxpGnWGg 5 0 1211579  94359  904.9mb  904.9mb
green open wazuh-alerts-3.x-2019.01.10 T5wwHT0kRaaWwl3XsgXXlw 5 0 1227625 232609 1002.8mb 1002.8mb
green open wazuh-alerts-3.x-2019.01.13 3FQnD5tFSHe5K07t_ZosEw 5 0  897435 191575  685.1mb  685.1mb
green open wazuh-alerts-3.x-2019.01.12 ubGr17zjT9qB6pJFNXVhzA 5 0  913535 123458  656.8mb  656.8mb

 
2. Run the reindex request:
POST _reindex
{
 
"source": {
   
"index": "wazuh-alerts-3.x-2019.01.*"
 
},
 
"dest": {
   "index": "wazuh-alerts-3.x-2019.01"
 
}
}


It seems that now is working

 
3. Check current reindexing tasks:
GET /_tasks?detailed=true&actions=*reindex&pretty


{
  "nodes" : {
    "nudsfmqLSC2WW6MhUCdsvw" : {
      "name" : "node-1",
      "transport_address" : "134.16.1.201:9300",
      "host" : "134.16.1.201",
      "ip" : "134.16.1.201:9300",
      "roles" : [
        "ingest",
        "master",
        "data"
      ],
      "attributes" : {
        "ml.machine_memory" : "33611071488",
        "xpack.installed" : "true",
        "ml.max_open_jobs" : "20"
      },
      "tasks" : {
        "nudsfmqLSC2WW6MhUCdsvw:18616692" : {
          "node" : "nudsfmqLSC2WW6MhUCdsvw",
          "id" : 18616692,
          "type" : "transport",
          "action" : "indices:data/write/reindex",
          "status" : {
            "total" : 34562534,
            "updated" : 0,
            "created" : 349000,
            "deleted" : 0,
            "batches" : 350,
            "version_conflicts" : 0,
            "noops" : 0,
            "retries" : {
              "bulk" : 0,
              "search" : 0
            },
            "throttled_millis" : 0,
            "requests_per_second" : -1.0,
            "throttled_until_millis" : 0
          },
          "description" : "reindex from [wazuh-alerts-3.x-2019.01.*] to [wazuh-alerts-3.x-2019.01][_doc]",
          "start_time_in_millis" : 1565946564294,
          "running_time_in_nanos" : 39623693022,
          "cancellable" : true,
          "headers" : { }
        }
      }
    }
  }
}
 
4. Check the new index exists 
GET _cat/indices/wazuh-alerts-3.x-2019.01


green open wazuh-alerts-3.x-2019.01 xPyjChHZQNO1f_Yb6zYmkQ 3 0 1901572 0 1.8gb 1.8gb


Perfect Pablo, now it seems that everything start to work. I will wait indexing finished, try to make as I said to you (close all Jan index and take a look if new 2019-01 index works alone). I will keep you (and the community) informed.

Thanks for all 

JavierMMG

unread,
Sep 11, 2019, 3:17:06 AM9/11/19
to Wazuh mailing list
Hi Pablo,

After a long work, I can said that everything is ok with your indications. My status now:

{
  "cluster_name" : "elasticsearch",
  "status" : "green",
  "timed_out" : false,
  "number_of_nodes" : 1,
  "number_of_data_nodes" : 1,
  "active_primary_shards" : 1363,
  "active_shards" : 1363,
  "relocating_shards" : 0,
  "initializing_shards" : 0,
  "unassigned_shards" : 0,
  "delayed_unassigned_shards" : 0,
  "number_of_pending_tasks" : 0,
  "number_of_in_flight_fetch" : 0,
  "task_max_waiting_in_queue_millis" : 0,
  "active_shards_percent_as_number" : 100.0
}

So very very good. Thanks a lot for all your support.

By the other hand, I saw that now I have this for example:

green close wazuh-monitoring-3.x-2018.09.15 rkwjSVDTQN69mtHFmY6RdQ 5 0    
green close wazuh-monitoring-3.x-2018.09.14 Vgomd9bMTtC460v7SbE17Q 5 0    
green close wazuh-monitoring-3.x-2018.09.13 rv1fkEGbTzGker1TNELs9w 5 0    
green close wazuh-monitoring-3.x-2018.09.12 5l2GFowhSK6xGZb4gaurRg 5 0    
green close wazuh-monitoring-3.x-2018.09.19 PBTgp58YRVyWegkCPxfHWA 5 0    
green close wazuh-monitoring-3.x-2018.09.18 IwIriX06RJiIiNsSj4Zpgg 5 0    
green close wazuh-monitoring-3.x-2018.09.17 cpKMmcRpTcWo22mbfkMrbw 5 0    
green close wazuh-monitoring-3.x-2018.09.16 RKGipzouQ8-MjjD-H1FtVg 5 0    
green close wazuh-monitoring-3.x-2018.09.11 yigS6CHuQzSvDG2dxHiEcQ 5 0    
green close wazuh-monitoring-3.x-2018.09.10 95AGKlE-TrOV--UWpuq7IA 5 0    
green close wazuh-monitoring-3.x-2018.09.30 Awk0rM8oTlu0vCFrjTBFxA 5 0    
green close wazuh-monitoring-3.x-2018.09.26 -p-1Wp3dQhSfjeoL7OvghQ 5 0    
green close wazuh-monitoring-3.x-2018.09.04 DdEMXo7bQCKUKgXL5OI_nQ 5 0    
green close wazuh-monitoring-3.x-2018.09.03 9q9-1zvYQrG2tdBir6e76g 5 0    
green close wazuh-monitoring-3.x-2018.09.25 LVtbb5Z0ScGQJL9HVmkqiQ 5 0    
green close wazuh-monitoring-3.x-2018.09.02 1lSXFHW8QUGVEu727y4Gtg 5 0    
green close wazuh-monitoring-3.x-2018.09.24 quyRwH3zQK2yS9brSqFSFQ 5 0    
green close wazuh-monitoring-3.x-2018.09.01 SOj9X5qJSnSnNZXTPQ-LSA 5 0    
green close wazuh-monitoring-3.x-2018.09.23 rOF481y7RHqEuVB9NZ6RGg 5 0    
green close wazuh-monitoring-3.x-2018.09.08 B-_SFFXcTrGwztydtYtNmg 5 0    
green close wazuh-monitoring-3.x-2018.09.07 59e3OmQiRz-hwhs-5P_KDA 5 0    
green close wazuh-monitoring-3.x-2018.09.29 -llqOf4OQ8SjOl-wbfPjtg 5 0    
green close wazuh-monitoring-3.x-2018.09.06 nFCd7xvrQHGAZaAsijs1Pw 5 0    
green close wazuh-monitoring-3.x-2018.09.28 hJOGjP0bThmJV7jiwhzfcQ 5 0    
green close wazuh-monitoring-3.x-2018.09.05 3aWXKizvTiOGW2oTrV5FXQ 5 0    
green close wazuh-monitoring-3.x-2018.09.27 CP64R4B3Q8GlO2SP2n_kYg 5 0    
green close wazuh-monitoring-3.x-2018.09.22 fsS2IgpOTKyEpq9yye88Vg 5 0    
green close wazuh-monitoring-3.x-2018.09.21 WEwKkUkURi6Eh15qFDAIRw 5 0    
green close wazuh-monitoring-3.x-2018.09.20 oRc5hpq_Qb6neqSGgwxJjg 5 0    
green close wazuh-monitoring-3.x-2018.09.09 K-QipsOUSCqrCLNZDVlhLw 5 0    

A lot of wazuh-monitoring indexes taking a lot of shards. Can I make same procedure for this indexes? I must make something with them before reindex?. Sorry my ignorance but, for what are theese logs? For wazuh-alerts, before reindex I must migrate all of them with the new timestamp field but I don't know if I need to make something like that with wazuh-monitoring logs.

Regards,

Javier.

Pablo Torres

unread,
Sep 11, 2019, 6:18:34 AM9/11/19
to Wazuh mailing list
Hi Javier,

You are welcome, I'm happy to see that everything is successfully working.

You now want to reduce the amount of shards of wazuh-monitoring indices, 
first of all let's explain what are wazuh-monitoring indices for:
wazuh-monitoring-*  indices contain information about the agents data and status, by default every 15min this information is sent to the wazuh-monitoring index, you can check the content with this request (Kibana Dev Tools): 
GET wazuh-monitoring-*/_search?size=1

wazuh-monit.png


You can see that it contains Agent information like, status, operating system info, agent id, name etc...
This info is used by our Wazuh APP, e.g. some visualizations are created based on its content.


Now, let's reduce the number of shards:
- You can edit that number of shards in Wazuh App Settings -> Configuration as shown in this image, once you have modified it new indices will have that new amount of shards. (Restart kibana is needed to apply changes)

wazuh-monit2.png

Notice that it will just have effect on new indices created after the modification, so your old wazuh-monitoring indices will still have 5 shards, if you want to reduce old indices too, you'll have to edit the wazuh-agent template following these steps:

You can get its content with this request:
GET _template/wazuh-agent

wazuh-monit3.png


Now update that template with the content (you can see I highlighted the template content in my last screenshot)

wazuh-monit4.png

You can see is the same template, just the new setting "number_of_shards" have been added, it means that new indices will have that amount of shards you specify there, so all we have to do now is to reindex old indices:

I will explain you how to reindex one old index, in this case: wazuh-monitoring-3.x-2019.09.11
1. Reindex wazuh-monitoring-3.x-2019.09.11 in a temporary index:
POST _reindex
{
  "source": {
    "index": "wazuh-monitoring-3.x-2019.09.11"
  },
  "dest": {
    "index": "wazuh-monitoring-3.x-2019.09.11-tmp"
  }
}

2. Delete initial index (make sure that temporary index have been created successfully and it has the same data as the initial index, there shouldn't be any problem)
DELETE wazuh-monitoring-3.x-2019.09.11

3. Recreate the initial index with the new amount of shards (the template assigns the number of shards on index creation)
POST _reindex
{
  "source": {
    "index": "wazuh-monitoring-3.x-2019.09.11-tmp"
  },
  "dest": {
    "index": "wazuh-monitoring-3.x-2019.09.11"
  }
}

4. Delete temporary index
DELETE wazuh-monitoring-3.x-2019.09.11-tmp

5. Check the new index number of shards is updated:
GET _cat/indices/wazuh-monitoring-3.x-2019.09.11

wazuh-monit5.png



Let me know if it helps, if you need anything else I'll be happy to help!

Best regards,
Pablo Torres



JavierMMG

unread,
Sep 16, 2019, 4:08:13 AM9/16/19
to Wazuh mailing list
Hi Pablo,

When you said number of shards: 14 is better to configure only 2 no? to reduce the number from 5 to 2, or i'm wrong?

Regards,

Javier.


Pablo Torres

unread,
Sep 16, 2019, 4:37:08 AM9/16/19
to Wazuh mailing list
Hi Javier,

Yes, in your case you want to reduce the number of shards, so it's better to reduce it to 2 shards.
The number of shards: 14 was just an example of how to change the number of shards.

Best regards,
Pablo Torres 

JavierMMG

unread,
Sep 17, 2019, 2:06:26 AM9/17/19
to Wazuh mailing list
Hi Pablo,

When I lunched:

POST _reindex
{
  "source": {
    "index": "wazuh-monitoring-3.x-2018.09.01"
  },
  "dest": {
   "index": "wazuh-monitoring-3.x-2018.09.01-tmp"
  }
}

After cluster goes to "yellow" status and the indexes are:
........
green  open wazuh-monitoring-3.x-2018.09.10     95AGKlE-TrOV--UWpuq7IA 5 0 1824 0   1.3mb   1.3mb
green  open wazuh-monitoring-3.x-2018.09.30     Awk0rM8oTlu0vCFrjTBFxA 5 0 1608 0   1.2mb   1.2mb
yellow open wazuh-monitoring-3.x-2018.09.01-tmp xKRsVTCgS0CU04eQMFKxYA 2 1 1776 0 638.4kb 638.4kb
green  open wazuh-monitoring-3.x-2018.09.04     DdEMXo7bQCKUKgXL5OI_nQ 5 0 1815 0   1.3mb   1.3mb
green  open wazuh-monitoring-3.x-2018.09.26     -p-1Wp3dQhSfjeoL7OvghQ 5 0 1541 0   1.1mb   1.1mb
green  open wazuh-monitoring-3.x-2018.09.03     9q9-1zvYQrG2tdBir6e76g 5 0 1568 0 976.5kb 976.5kb
green  open wazuh-monitoring-3.x-2018.09.25     LVtbb5Z0ScGQJL9HVmkqiQ 5 0 1608 0   1.2mb   1.2mb
green  open wazuh-monitoring-3.x-2018.09.02     1lSXFHW8QUGVEu727y4Gtg 5 0 1776 0   1.3mb   1.3mb
green  open wazuh-monitoring-3.x-2018.09.24     quyRwH3zQK2yS9brSqFSFQ 5 0 1553 0   1.1mb   1.1mb
green  open wazuh-monitoring-3.x-2018.09.23     rOF481y7RHqEuVB9NZ6RGg 5 0 1632 0   1.2mb   1.2mb
green  open wazuh-monitoring-3.x-2018.09.01     SOj9X5qJSnSnNZXTPQ-LSA 5 0 1776 0   1.3mb   1.3mb
green  open wazuh-monitoring-3.x-2018.09.08     B-_SFFXcTrGwztydtYtNmg 5 0 1824 0   1.3mb   1.3mb
......

Is it normal this situation until i move tmp index to a new one with the same name than before? The "yellow" status always stays, it doesn't turn green.

Thanks!

Pablo Torres

unread,
Sep 17, 2019, 2:47:12 AM9/17/19
to Wazuh mailing list
Hi Javier,

Do you have only one node in your Elasticsearch cluster?
I can see that the new index was created with 1 replica shards, if you have only one node in your cluster, replica shards can't be allocated and that is why the index status is yellow:

We can see here that temporary index has 2 shards and 1 replica shard.
yellow open wazuh-monitoring-3.x-2018.09.01-tmp xKRsVTCgS0CU04eQMFKxYA 2 1 1776 0 638.4kb 638.4kb

We can fix that by just reducing the index to 0 replica shards. Check this doc to get more info about shards & replicas https://www.elastic.co/guide/en/elasticsearch/reference/6.2/_basic_concepts.html#getting-started-shards-and-replicas

Best regards,
Pablo Torres
Reply all
Reply to author
Forward
0 new messages