Error when get the items of rules

Nakova Technologies

unread,

Nov 28, 2022, 6:14:48 AM11/28/22

to Wazuh mailing list

Hi Team;

How to solve this issue..?

Please Find The Attachment Below.

Capture.PNG

Federico Rodriguez

unread,

Nov 28, 2022, 11:56:49 AM11/28/22

to Wazuh mailing list

Hi!

this issue can be caused by an error parsing the XML rules and, if this is the case, the API is unable to provide the rules list.
I suggest you check Wazuh logs for errors:

Wazuh API logs:

/var/ossec/logs/api.log

Wazuh Manager logs:

egrep -i "ERROR|WARNING" /var/ossec/logs/ossec.log

To dive deeper, it is also possible to check the API response in the browser developer tools -> Network tab, filtering by XHR

Screenshot from 2022-11-28 17-55-22.png

In case you see any errors please share them to assess the situation.

Regards

Nakova Technologies

unread,

Nov 28, 2022, 11:40:09 PM11/28/22

to Wazuh mailing list

Hi!

How can I solve this guys..?

Federico Rodriguez

unread,

Nov 29, 2022, 4:45:40 AM11/29/22

to Wazuh mailing list

Hi,
can you verify the rules folder and files have wazuh owner?

Screenshot from 2022-11-29 10-44-28.png

Nakova Technologies

unread,

Nov 29, 2022, 5:25:24 AM11/29/22

to Wazuh mailing list

Hi

Please find the attachment below

Federico Rodriguez

unread,

Nov 29, 2022, 7:41:50 AM11/29/22

to Wazuh mailing list

mmmh... Permissions seem fine...

- It would be very useful if you could provide this info:

- Wazuh version you are using?

- What type of installation do you have? (All-in-one, Step-by-Step, Docker)

- Did you recently migrate from an old Wazuh version?

- Is it possible those default rule files were modified? (0580-win-security_rules.xml; 0620-win-generic_rules.xml)
Even though the error says Permission Denied, there are still chances it is a syntax error in the rule files.

Thanks in advance!

Reply all

Reply to author

Forward