I am trying to install wazuh in a distributed mode, each central component in a different server. I could able to successfully install the wazuh indexer and server. During the wazuh dashboard installation, i am following the installation using a installation assistant in ubuntu 22.x in a VM, I could able to see, that opensearch_dashboards.yml file is not been created and because of which the installation fails. I have tried more than 10 times. Can you please help me in completing this installation.
Note: I have copied the configuration file(.tar) in my current working directory. please find below the logs from /var/log/wazuh-install.log
---------------------------------------------------------------------------------------------------------------------------------------------
29/10/2023 21:55:45 INFO: Starting Wazuh installation assistant. Wazuh version: 4.5.4
29/10/2023 21:55:45 INFO: Verbose logging redirected to /var/log/wazuh-install.log
29/10/2023 21:55:47 INFO: --- Removing existing Wazuh installation ---
29/10/2023 21:55:47 INFO: Removing Wazuh dashboard.
Reading package lists...
Building dependency tree...
Reading state information...
The following packages will be REMOVED:
wazuh-dashboard*
0 upgraded, 0 newly installed, 1 to remove and 351 not upgraded.
After this operation, 813 MB disk space will be freed.
(Reading database ... 295976 files and directories currently installed.)
Removing wazuh-dashboard (4.5.4-1) ...
Stopping wazuh-dashboard service...Failed to stop wazuh-dashboard.service: Unit wazuh-dashboard.service not loaded.
dpkg: error processing package wazuh-dashboard (--remove):
installed wazuh-dashboard package pre-removal script subprocess returned error exit status 5
dpkg: too many errors, stopping
Errors were encountered while processing:
wazuh-dashboard
Processing was halted because there were too many errors.
E: Sub-process /usr/bin/dpkg returned an error code (1)
29/10/2023 21:55:54 INFO: Wazuh dashboard removed.
29/10/2023 21:55:54 INFO: Wazuh GPG key was not found in the system
29/10/2023 21:55:54 INFO: Installation cleaned.
Hit:1
http://se.archive.ubuntu.com/ubuntu jammy InRelease
Hit:2
http://se.archive.ubuntu.com/ubuntu jammy-updates InRelease
Hit:3
http://se.archive.ubuntu.com/ubuntu jammy-backports InRelease
Hit:4
http://security.ubuntu.com/ubuntu jammy-security InRelease
Reading package lists...
29/10/2023 21:56:06 INFO: Wazuh web interface port will be 443.
Hit:1
http://se.archive.ubuntu.com/ubuntu jammy InRelease
Hit:2
http://se.archive.ubuntu.com/ubuntu jammy-updates InRelease
Hit:3
http://security.ubuntu.com/ubuntu jammy-security InRelease
Hit:4
http://se.archive.ubuntu.com/ubuntu jammy-backports InRelease
Reading package lists...
gpg: keyring '/usr/share/keyrings/wazuh.gpg' created
gpg: key 96B3EE5F29111145: public key "Wazuh.com (Wazuh Signing Key) <
sup...@wazuh.com>" imported
gpg: Total number processed: 1
gpg: imported: 1
deb [signed-by=/usr/share/keyrings/wazuh.gpg]
https://packages.wazuh.com/4.x/apt/ stable main
Hit:1
http://se.archive.ubuntu.com/ubuntu jammy InRelease
Hit:2
http://se.archive.ubuntu.com/ubuntu jammy-updates InRelease
Hit:3
http://se.archive.ubuntu.com/ubuntu jammy-backports InRelease
Hit:4
http://security.ubuntu.com/ubuntu jammy-security InRelease
Get:5
https://packages.wazuh.com/4.x/apt stable InRelease [17,3 kB]
Get:6
https://packages.wazuh.com/4.x/apt stable/main amd64 Packages [33,5 kB]
Get:7
https://packages.wazuh.com/4.x/apt stable/main i386 Packages [9 990 B]
Fetched 60,7 kB in 1s (82,3 kB/s)
Reading package lists...
29/10/2023 21:56:24 INFO: Wazuh repository added.
29/10/2023 21:56:25 INFO: --- Wazuh dashboard ----
29/10/2023 21:56:25 INFO: Starting Wazuh dashboard installation.
Reading package lists...
Building dependency tree...
Reading state information...
wazuh-dashboard is already the newest version (4.5.4-1).
0 upgraded, 0 newly installed, 0 to remove and 351 not upgraded.
29/10/2023 21:56:27 INFO: Wazuh dashboard installation finished.
wazuh-install.sh: line 1846: /etc/wazuh-dashboard/opensearch_dashboards.yml: No such file or directory
mkdir: cannot create directory ‘/etc/wazuh-dashboard/certs’: No such file or directory
sed: can't read /etc/wazuh-dashboard/opensearch_dashboards.yml: No such file or directory
sed: can't read /etc/wazuh-dashboard/opensearch_dashboards.yml: No such file or directory
tar: /etc/wazuh-dashboard/certs: Cannot open: No such file or directory
tar: Error is not recoverable: exiting now
tar: /etc/wazuh-dashboard/certs: Cannot open: No such file or directory
tar: Error is not recoverable: exiting now
tar: /etc/wazuh-dashboard/certs: Cannot open: No such file or directory
tar: Error is not recoverable: exiting now
chown: cannot access '/etc/wazuh-dashboard/': No such file or directory
chmod: cannot access '/etc/wazuh-dashboard/certs': No such file or directory
chmod: cannot access '/etc/wazuh-dashboard/certs/*': No such file or directory
chown: cannot access '/etc/wazuh-dashboard/certs/*': No such file or directory
29/10/2023 21:56:27 INFO: Wazuh dashboard post-install configuration finished.
29/10/2023 21:56:27 INFO: Starting service wazuh-dashboard.
Failed to enable unit: Unit file wazuh-dashboard.service does not exist.
Failed to start wazuh-dashboard.service: Unit wazuh-dashboard.service not found.
29/10/2023 21:56:28 ERROR: wazuh-dashboard could not be started.
okt 29 21:26:15 wazuhdashboard-virtual-machine systemd[1]: Started wazuh-dashboard.
okt 29 21:26:19 wazuhdashboard-virtual-machine systemd[1]: Stopping wazuh-dashboard...
okt 29 21:26:20 wazuhdashboard-virtual-machine opensearch-dashboards[8968]: {"type":"log","@timestamp":"2023-10-29T20:26:20Z","tags":["info","plugins-service"],"pid":8968,"message":"Plugin \"dataSourceManagement\" has been disabled since the following direct or transitive dependencies are missing or disabled: [dataSource]"}
okt 29 21:26:20 wazuhdashboard-virtual-machine opensearch-dashboards[8968]: {"type":"log","@timestamp":"2023-10-29T20:26:20Z","tags":["info","plugins-service"],"pid":8968,"message":"Plugin \"dataSource\" is disabled."}
okt 29 21:26:20 wazuhdashboard-virtual-machine opensearch-dashboards[8968]: {"type":"log","@timestamp":"2023-10-29T20:26:20Z","tags":["info","plugins-service"],"pid":8968,"message":"Plugin \"visTypeXy\" is disabled."}
okt 29 21:26:20 wazuhdashboard-virtual-machine opensearch-dashboards[8968]: {"type":"log","@timestamp":"2023-10-29T20:26:20Z","tags":["info","plugins-service"],"pid":8968,"message":"Plugin \"mlCommonsDashboards\" is disabled."}
okt 29 21:26:20 wazuhdashboard-virtual-machine systemd[1]: wazuh-dashboard.service: Deactivated successfully.
okt 29 21:26:20 wazuhdashboard-virtual-machine systemd[1]: Stopped wazuh-dashboard.
okt 29 21:26:20 wazuhdashboard-virtual-machine systemd[1]: wazuh-dashboard.service: Consumed 5.792s CPU time.
okt 29 21:26:20 wazuhdashboard-virtual-machine systemd[1]: Started wazuh-dashboard.
okt 29 21:26:25 wazuhdashboard-virtual-machine opensearch-dashboards[9126]: {"type":"log","@timestamp":"2023-10-29T20:26:25Z","tags":["info","plugins-service"],"pid":9126,"message":"Plugin \"dataSourceManagement\" has been disabled since the following direct or transitive dependencies are missing or disabled: [dataSource]"}
okt 29 21:26:25 wazuhdashboard-virtual-machine opensearch-dashboards[9126]: {"type":"log","@timestamp":"2023-10-29T20:26:25Z","tags":["info","plugins-service"],"pid":9126,"message":"Plugin \"dataSource\" is disabled."}
okt 29 21:26:25 wazuhdashboard-virtual-machine opensearch-dashboards[9126]: {"type":"log","@timestamp":"2023-10-29T20:26:25Z","tags":["info","plugins-service"],"pid":9126,"message":"Plugin \"visTypeXy\" is disabled."}
okt 29 21:26:25 wazuhdashboard-virtual-machine opensearch-dashboards[9126]: {"type":"log","@timestamp":"2023-10-29T20:26:25Z","tags":["info","plugins-service"],"pid":9126,"message":"Plugin \"mlCommonsDashboards\" is disabled."}
okt 29 21:26:25 wazuhdashboard-virtual-machine opensearch-dashboards[9126]: {"type":"log","@timestamp":"2023-10-29T20:26:25Z","tags":["info","plugins-system"],"pid":9126,"message":"Setting up [45] plugins: [alertingDashboards,usageCollection,opensearchDashboardsUsageCollection,opensearchDashboardsLegacy,mapsLegacy,share,opensearchUiShared,legacyExport,embeddable,expressions,data,home,console,apmOss,management,indexPatternManagement,advancedSettings,savedObjects,reportsDashboards,indexManagementDashboards,dashboard,visualizations,visTypeTable,visTypeVega,visTypeTimeline,timeline,visTypeMarkdown,visBuilder,tileMap,regionMap,customImportMapDashboards,inputControlVis,ganttChartDashboards,visualize,notificationsDashboards,bfetch,charts,visTypeVislib,visTypeTimeseries,visTypeTagcloud,visTypeMetric,discover,savedObjectsManagement,securityDashboards,wazuh]"}
okt 29 21:26:26 wazuhdashboard-virtual-machine opensearch-dashboards[9126]: {"type":"log","@timestamp":"2023-10-29T20:26:26Z","tags":["info","savedobjects-service"],"pid":9126,"message":"Waiting until all OpenSearch nodes are compatible with OpenSearch Dashboards before starting saved objects migrations..."}
okt 29 21:28:26 wazuhdashboard-virtual-machine opensearch-dashboards[9126]: {"type":"log","@timestamp":"2023-10-29T20:28:26Z","tags":["error","opensearch","data"],"pid":9126,"message":"[TimeoutError]: Request timed out"}
okt 29 21:28:26 wazuhdashboard-virtual-machine opensearch-dashboards[9126]: {"type":"log","@timestamp":"2023-10-29T20:28:26Z","tags":["error","savedobjects-service"],"pid":9126,"message":"Unable to retrieve version information from OpenSearch nodes."}
okt 29 21:30:26 wazuhdashboard-virtual-machine opensearch-dashboards[9126]: {"type":"log","@timestamp":"2023-10-29T20:30:26Z","tags":["error","opensearch","data"],"pid":9126,"message":"[TimeoutError]: Request timed out"}
okt 29 21:31:37 wazuhdashboard-virtual-machine opensearch-dashboards[9126]: {"type":"log","@timestamp":"2023-10-29T20:31:37Z","tags":["info","plugins-system"],"pid":9126,"message":"Stopping all plugins."}
okt 29 21:31:37 wazuhdashboard-virtual-machine systemd[1]: Stopping wazuh-dashboard...
okt 29 21:31:37 wazuhdashboard-virtual-machine opensearch-dashboards[9126]: {"type":"log","@timestamp":"2023-10-29T20:31:37Z","tags":["info","savedobjects-service"],"pid":9126,"message":"Starting saved objects migrations"}
okt 29 21:32:07 wazuhdashboard-virtual-machine opensearch-dashboards[9126]: {"type":"log","@timestamp":"2023-10-29T20:32:07Z","tags":["error","opensearch","data"],"pid":9126,"message":"[TimeoutError]: Request timed out"}
okt 29 21:32:07 wazuhdashboard-virtual-machine opensearch-dashboards[9126]: {"type":"log","@timestamp":"2023-10-29T20:32:07Z","tags":["warning","savedobjects-service"],"pid":9126,"message":"Unable to connect to OpenSearch. Error: Request timed out"}
okt 29 21:32:26 wazuhdashboard-virtual-machine opensearch-dashboards[9126]: {"type":"log","@timestamp":"2023-10-29T20:32:26Z","tags":["error","opensearch","data"],"pid":9126,"message":"[TimeoutError]: Request timed out"}
okt 29 21:32:39 wazuhdashboard-virtual-machine opensearch-dashboards[9126]: {"type":"log","@timestamp":"2023-10-29T20:32:39Z","tags":["error","opensearch","data"],"pid":9126,"message":"[TimeoutError]: Request timed out"}
okt 29 21:32:40 wazuhdashboard-virtual-machine systemd[1]: wazuh-dashboard.service: Deactivated successfully.
okt 29 21:32:40 wazuhdashboard-virtual-machine systemd[1]: Stopped wazuh-dashboard.
okt 29 21:32:40 wazuhdashboard-virtual-machine systemd[1]: wazuh-dashboard.service: Consumed 7.509s CPU time.
okt 29 21:35:01 wazuhdashboard-virtual-machine systemd[1]: Started wazuh-dashboard.
okt 29 21:35:05 wazuhdashboard-virtual-machine systemd[1]: Stopping wazuh-dashboard...
okt 29 21:35:06 wazuhdashboard-virtual-machine opensearch-dashboards[11715]: {"type":"log","@timestamp":"2023-10-29T20:35:06Z","tags":["info","plugins-service"],"pid":11715,"message":"Plugin \"dataSourceManagement\" has been disabled since the following direct or transitive dependencies are missing or disabled: [dataSource]"}
okt 29 21:35:06 wazuhdashboard-virtual-machine opensearch-dashboards[11715]: {"type":"log","@timestamp":"2023-10-29T20:35:06Z","tags":["info","plugins-service"],"pid":11715,"message":"Plugin \"dataSource\" is disabled."}
okt 29 21:35:06 wazuhdashboard-virtual-machine opensearch-dashboards[11715]: {"type":"log","@timestamp":"2023-10-29T20:35:06Z","tags":["info","plugins-service"],"pid":11715,"message":"Plugin \"visTypeXy\" is disabled."}
okt 29 21:35:06 wazuhdashboard-virtual-machine opensearch-dashboards[11715]: {"type":"log","@timestamp":"2023-10-29T20:35:06Z","tags":["info","plugins-service"],"pid":11715,"message":"Plugin \"mlCommonsDashboards\" is disabled."}
okt 29 21:35:07 wazuhdashboard-virtual-machine systemd[1]: wazuh-dashboard.service: Deactivated successfully.
okt 29 21:35:07 wazuhdashboard-virtual-machine systemd[1]: Stopped wazuh-dashboard.
okt 29 21:35:07 wazuhdashboard-virtual-machine systemd[1]: wazuh-dashboard.service: Consumed 6.494s CPU time.
okt 29 21:35:07 wazuhdashboard-virtual-machine systemd[1]: Started wazuh-dashboard.
okt 29 21:35:11 wazuhdashboard-virtual-machine opensearch-dashboards[11871]: {"type":"log","@timestamp":"2023-10-29T20:35:11Z","tags":["info","plugins-service"],"pid":11871,"message":"Plugin \"dataSourceManagement\" has been disabled since the following direct or transitive dependencies are missing or disabled: [dataSource]"}
okt 29 21:35:11 wazuhdashboard-virtual-machine opensearch-dashboards[11871]: {"type":"log","@timestamp":"2023-10-29T20:35:11Z","tags":["info","plugins-service"],"pid":11871,"message":"Plugin \"mlCommonsDashboards\" is disabled."}
okt 29 21:35:11 wazuhdashboard-virtual-machine opensearch-dashboards[11871]: {"type":"log","@timestamp":"2023-10-29T20:35:11Z","tags":["info","plugins-service"],"pid":11871,"message":"Plugin \"dataSource\" is disabled."}
okt 29 21:35:11 wazuhdashboard-virtual-machine opensearch-dashboards[11871]: {"type":"log","@timestamp":"2023-10-29T20:35:11Z","tags":["info","plugins-service"],"pid":11871,"message":"Plugin \"visTypeXy\" is disabled."}
okt 29 21:35:12 wazuhdashboard-virtual-machine opensearch-dashboards[11871]: {"type":"log","@timestamp":"2023-10-29T20:35:12Z","tags":["info","plugins-system"],"pid":11871,"message":"Setting up [45] plugins: [usageCollection,opensearchDashboardsUsageCollection,opensearchDashboardsLegacy,mapsLegacy,alertingDashboards,share,opensearchUiShared,legacyExport,embeddable,expressions,data,home,console,apmOss,management,indexPatternManagement,advancedSettings,savedObjects,dashboard,visualizations,visTypeTimeline,timeline,visTypeVega,visTypeTable,visTypeMarkdown,visBuilder,tileMap,regionMap,customImportMapDashboards,inputControlVis,visualize,ganttChartDashboards,reportsDashboards,indexManagementDashboards,notificationsDashboards,charts,visTypeMetric,visTypeVislib,visTypeTimeseries,visTypeTagcloud,discover,savedObjectsManagement,securityDashboards,wazuh,bfetch]"}
okt 29 21:35:12 wazuhdashboard-virtual-machine opensearch-dashboards[11871]: {"type":"log","@timestamp":"2023-10-29T20:35:12Z","tags":["info","savedobjects-service"],"pid":11871,"message":"Waiting until all OpenSearch nodes are compatible with OpenSearch Dashboards before starting saved objects migrations..."}
okt 29 21:37:12 wazuhdashboard-virtual-machine opensearch-dashboards[11871]: {"type":"log","@timestamp":"2023-10-29T20:37:12Z","tags":["error","opensearch","data"],"pid":11871,"message":"[TimeoutError]: Request timed out"}
okt 29 21:37:12 wazuhdashboard-virtual-machine opensearch-dashboards[11871]: {"type":"log","@timestamp":"2023-10-29T20:37:12Z","tags":["error","savedobjects-service"],"pid":11871,"message":"Unable to retrieve version information from OpenSearch nodes."}
okt 29 21:39:13 wazuhdashboard-virtual-machine opensearch-dashboards[11871]: {"type":"log","@timestamp":"2023-10-29T20:39:13Z","tags":["error","opensearch","data"],"pid":11871,"message":"[TimeoutError]: Request timed out"}
okt 29 21:40:27 wazuhdashboard-virtual-machine systemd[1]: Stopping wazuh-dashboard...
okt 29 21:40:27 wazuhdashboard-virtual-machine opensearch-dashboards[11871]: {"type":"log","@timestamp":"2023-10-29T20:40:27Z","tags":["info","plugins-system"],"pid":11871,"message":"Stopping all plugins."}
okt 29 21:40:27 wazuhdashboard-virtual-machine opensearch-dashboards[11871]: {"type":"log","@timestamp":"2023-10-29T20:40:27Z","tags":["info","savedobjects-service"],"pid":11871,"message":"Starting saved objects migrations"}
okt 29 21:40:57 wazuhdashboard-virtual-machine opensearch-dashboards[11871]: {"type":"log","@timestamp":"2023-10-29T20:40:57Z","tags":["error","opensearch","data"],"pid":11871,"message":"[TimeoutError]: Request timed out"}
okt 29 21:40:57 wazuhdashboard-virtual-machine opensearch-dashboards[11871]: {"type":"log","@timestamp":"2023-10-29T20:40:57Z","tags":["warning","savedobjects-service"],"pid":11871,"message":"Unable to connect to OpenSearch. Error: Request timed out"}
okt 29 21:40:59 wazuhdashboard-virtual-machine systemd[1]: wazuh-dashboard.service: Current command vanished from the unit file, execution of the command list won't be resumed.
okt 29 21:41:14 wazuhdashboard-virtual-machine opensearch-dashboards[11871]: {"type":"log","@timestamp":"2023-10-29T20:41:14Z","tags":["error","opensearch","data"],"pid":11871,"message":"[TimeoutError]: Request timed out"}
okt 29 21:41:29 wazuhdashboard-virtual-machine opensearch-dashboards[11871]: {"type":"log","@timestamp":"2023-10-29T20:41:29Z","tags":["error","opensearch","data"],"pid":11871,"message":"[TimeoutError]: Request timed out"}
okt 29 21:41:30 wazuhdashboard-virtual-machine systemd[1]: wazuh-dashboard.service: Deactivated successfully.
okt 29 21:41:30 wazuhdashboard-virtual-machine systemd[1]: Stopped wazuh-dashboard.service.
okt 29 21:41:30 wazuhdashboard-virtual-machine systemd[1]: wazuh-dashboard.service: Consumed 13.029s CPU time.
29/10/2023 21:56:28 INFO: --- Removing existing Wazuh installation ---
29/10/2023 21:56:28 INFO: Removing Wazuh dashboard.
Reading package lists...
Building dependency tree...
Reading state information...
The following packages will be REMOVED:
wazuh-dashboard*
0 upgraded, 0 newly installed, 1 to remove and 351 not upgraded.
After this operation, 813 MB disk space will be freed.
(Reading database ... 295976 files and directories currently installed.)
Removing wazuh-dashboard (4.5.4-1) ...
Stopping wazuh-dashboard service...Failed to stop wazuh-dashboard.service: Unit wazuh-dashboard.service not loaded.
dpkg: error processing package wazuh-dashboard (--remove):
installed wazuh-dashboard package pre-removal script subprocess returned error exit status 5
dpkg: too many errors, stopping
Errors were encountered while processing:
wazuh-dashboard
Processing was halted because there were too many errors.
E: Sub-process /usr/bin/dpkg returned an error code (1)
29/10/2023 21:56:37 INFO: Wazuh dashboard removed.
29/10/2023 21:56:37 INFO: Installation cleaned.
--------------------------------------------------------------------------------------------------------------------------------------------------------
Jai.