Wazuh manager failed

[Jeanne IDOLEKE]

Hello all
I installed wazuh a few months ago but for a few days the wazuh manager is down

here are the logs
""
Nov 11 17:33:54 Patrol systemd[1]: wazuh-manager.service: Consumed 1.352s CPU time.
░░ Subject: Resources consumed by unit runtime
░░ Defined-By: systemd
░░ Support: http://www.ubuntu.com/support
░░
░░ The unit wazuh-manager.service completed and consumed the indicated resources.
Nov 11 17:52:26 Patrol systemd[1]: wazuh-manager.service: Found left-over process 56240 (wazuh-modulesd) in control group while starting unit. Ignoring.
Nov 11 17:52:26 Patrol systemd[1]: This usually indicates unclean termination of a previous run, or service implementation deficiencies.
Nov 11 17:52:26 Patrol systemd[1]: Starting Wazuh manager...
░░ Subject: A start job for unit wazuh-manager.service has begun execution
░░ Defined-By: systemd
░░ Support: http://www.ubuntu.com/support
░░
░░ A start job for unit wazuh-manager.service has begun execution.
░░
░░ The job identifier is 3717.
Nov 11 17:53:56 Patrol systemd[1]: wazuh-manager.service: start operation timed out. Terminating.
Nov 11 17:53:56 Patrol systemd[1]: wazuh-manager.service: Failed with result 'timeout'.
░░ Subject: Unit failed
░░ Defined-By: systemd
░░ Support: http://www.ubuntu.com/support
░░
░░ The unit wazuh-manager.service has entered the 'failed' state with result 'timeout'.
Nov 11 17:53:56 Patrol systemd[1]: wazuh-manager.service: Unit process 56240 (wazuh-modulesd) remains running after unit stopped.
Nov 11 17:53:56 Patrol systemd[1]: wazuh-manager.service: Unit process 58053 (wazuh-modulesd) remains running after unit stopped.
Nov 11 17:53:56 Patrol systemd[1]: Failed to start Wazuh manager.
░░ Subject: A start job for unit wazuh-manager.service has failed
░░ Defined-By: systemd
░░ Support: http://www.ubuntu.com/support
░░
░░ A start job for unit wazuh-manager.service has finished with a failure.
░░
░░ The job identifier is 3717 and the job result is failed.

""

[Olusegun Adenrele Oyebo]

Hello Jeanne,

I can see that the Wazuh manager service timed out Nov 11 17:53:56 Patrol systemd[1]: wazuh-manager.service: Failed with result 'timeout'. This normally occurs due to resource constraints/liimitations on the Wazuh server. Kindly review the resources you have in your Wazuh server and ensure that you scale accordingly if you notice that they are almost maxed out. You can review the resurces on your Wazuh server by running the below commands:

• df -H (storage space)
• top (CPU/memory utilization)

Another thing you can do is specifying no timeout for your Wazuh manager service:

• Run the command systemctl edit --full wazuh-manager.service
• Scroll to the part that where you have TimeoutStartSec and set it to 0 i.e. TimeoutStartSec=0. If you don't see the entry present, you can input it.
• Save the changes and restart the service with command systemctl restart wazuh-manager.

I hope this helps you. We remain attentive to your queries.

Best regards.