ResponseError Wazuh Dashboard
33 views
Skip to first unread message
Kokosik
Feb 12, 2026, 12:13:35 PMFeb 12
to Wazuh | Mailing List
help me please, аfter updating wazuh from version 4.7 to 4.14, the dashboard stopped working, but the other components are working fine
wazuh-dashboard.service - wazuh-dashboard
Loaded: loaded (/etc/systemd/system/wazuh-dashboard.service; enabled; preset: enabled)
Active: active (running) since Thu 2026-02-12 16:54:09 UTC; 12s ago
Main PID: 66881 (node)
Tasks: 11 (limit: 4548)
Memory: 206.6M (peak: 206.8M)
CPU: 3.886s
CGroup: /system.slice/wazuh-dashboard.service
└─66881 /usr/share/wazuh-dashboard/node/bin/node --no-warnings --max-http-header-size=65536 --unhandled-rejections=warn /usr/share/wazuh-dashboard/src/cli/dist
фев 12 16:54:12 s7mth opensearch-dashboards[66881]: [agentkeepalive:deprecated] options.freeSocketKeepAliveTimeout is deprecated, please use options.freeSocketTimeout instead
фев 12 16:54:12 s7mth opensearch-dashboards[66881]: [agentkeepalive:deprecated] options.freeSocketKeepAliveTimeout is deprecated, please use options.freeSocketTimeout instead
feb 12 16:54:12 s7mth opensearch-dashboards[66881]: {"type":"log","@timestamp":"2026-02-12T16:54:12Z","tags":["info","dynamic-config-service"],"pid":66881,"message":"initiating start()"}
feb 12 16:54:12 s7mth opensearch-dashboards[66881]: {"type":"log","@timestamp":"2026-02-12T16:54:12Z","tags":["info","dynamic-config-service"],"pid":66881,"message":"finished start()"}
feb 12 16:54:12 s7mth opensearch-dashboards[66881]: {"type":"log","@timestamp":"2026-02-12T16:54:12Z","tags":["info","savedobjects-service"],"pid":66881,"message":"Waiting until all OpenSearch nodes are compa>
feb 12 16:54:12 s7mth opensearch-dashboards[66881]: {"type":"log","@timestamp":"2026-02-12T16:54:12Z","tags":["error","opensearch","data"],"pid":66881,"message":"[ResponseError]: Response Error"}
feb 12 16:54:13 s7mth opensearch-dashboards[66881]: {"type":"log","@timestamp":"2026-02-12T16:54:13Z","tags":["error","savedobjects-service"],"pid":66881,"message":"Unable to retrieve version information from>
feb 12 16:54:15 s7mth opensearch-dashboards[66881]: {"type":"log","@timestamp":"2026-02-12T16:54:15Z","tags":["error","opensearch","data"],"pid":66881,"message":"[ResponseError]: Response Error"}
feb 12 16:54:17 s7mth opensearch-dashboards[66881]: {"type":"log","@timestamp":"2026-02-12T16:54:17Z","tags":["error","opensearch","data"],"pid":66881,"message":"[ResponseError]: Response Error"}
feb 12 16:54:20 s7mth opensearch-dashboards[66881]: {"type":"log","@timestamp":"2026-02-12T16:54:20Z","tags":["error","opensearch","data"],"pid":66881,"message":"[ResponseError]: Response Error"}
curl -k -u admin "https://127.0.0.1:9200/_cat/indices?v"
Enter host password for user 'admin':
health status index uuid pri rep docs.count docs.deleted store.size pri.store.size
green open .opensearch-observability CRK2N7cKQq6_K-DqzOY5IQ 1 0 0 0 208b 208b
green open wazuh-alerts-4.x-2026.02.11 blHmMlwUSAWirHyaoy6L2A 3 0 118 0 448.1kb 448.1kb
green open .plugins-ml-config RzSEekWyQNCg2qNUKurs5Q 1 0 1 0 4kb 4kb
green open wazuh-statistics-2026.7w Pmfr9E28TemB3LGkdU36Ew 1 0 2 0 20.1kb 20.1kb
green open wazuh-alerts-4.x-2026.02.10 Y-FidBT6QjugaQaruu3m1A 3 0 18 0 190.7kb 190.7kb
green open wazuh-alerts-4.x-2026.02.12 ji5rUJseSXGnH2rWNhYnPQ 3 0 697 0 1.3mb 1.3mb
green open wazuh-monitoring-2026.7w 62qWVqWBR-iwQnK6L2O0fw 1 0 0 0 208b 208b
green open .opendistro_security z4Z8C3MRQdK3VLJjgZ3t5w 1 0 10 2 63.2kb 63.2kb
green open .kibana_1 Gi6EwxFgQzqpswdqoPYPuA 1 0 4 0 14.5kb 14.5kb
curl -k -u admin https://127.0.0.1:9200
Enter host password for user 'admin':
{
"name" : "node-1",
"cluster_name" : "wazuh-cluster",
"cluster_uuid" : "rzV7tTRgRQe331XAc3B9Bg",
"version" : {
"number" : "7.10.2",
"build_type" : "deb",
"build_hash" : "e27d4927fd308f52329c0644b83ca84987a68043",
"build_date" : "2026-02-06T10:58:23.962483055Z",
"build_snapshot" : false,
"lucene_version" : "9.12.3",
"minimum_wire_compatibility_version" : "7.10.0",
"minimum_index_compatibility_version" : "7.0.0"
},
"tagline" : "The OpenSearch Project: https://opensearch.org/"
}
here are the contents of my opensearch_dashboards.yml
server.host: 0.0.0.0
opensearch.hosts: https://127.0.0.1:9200
server.port: 443
opensearch.ssl.verificationMode: certificate
opensearch.username: admin
opensearch.password: "****************"
opensearch.requestHeadersAllowlist: ["securitytenant","Authorization"]
opensearch_security.multitenancy.enabled: false
opensearch_security.readonly_mode.roles: ["kibana_read_only"]
server.ssl.enabled: true
server.ssl.key: "/etc/wazuh-dashboard/certs/wazuh-dashboard-key.pem"
server.ssl.certificate: "/etc/wazuh-dashboard/certs/wazuh-dashboard.pem"
opensearch.ssl.certificateAuthorities: ["/etc/wazuh-dashboard/certs/root-ca.pem"]
uiSettings.overrides.defaultRoute: /app/wz-home
opensearch_security.cookie.secure: true
here opensearch.yml:
network.host: "127.0.0.1"
node.name: "node-1"
cluster.initial_master_nodes:
- "node-1"
cluster.name: "wazuh-cluster"
node.max_local_storage_nodes: "3"
path.data: /var/lib/wazuh-indexer
path.logs: /var/log/wazuh-indexer
plugins.security.ssl.http.pemcert_filepath: /etc/wazuh-indexer/certs/wazuh-indexer.pem
plugins.security.ssl.http.pemkey_filepath: /etc/wazuh-indexer/certs/wazuh-indexer-key.pem
plugins.security.ssl.http.pemtrustedcas_filepath: /etc/wazuh-indexer/certs/root-ca.pem
plugins.security.ssl.transport.pemcert_filepath: /etc/wazuh-indexer/certs/wazuh-indexer.pem
plugins.security.ssl.transport.pemkey_filepath: /etc/wazuh-indexer/certs/wazuh-indexer-key.pem
plugins.security.ssl.transport.pemtrustedcas_filepath: /etc/wazuh-indexer/certs/root-ca.pem
plugins.security.ssl.http.enabled: true
plugins.security.ssl.transport.enforce_hostname_verification: false
plugins.security.ssl.transport.resolve_hostname: false
plugins.security.ssl.http.enabled_ciphers:
- "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"
- "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384"
- "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256"
- "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384"
plugins.security.ssl.http.enabled_protocols:
- "TLSv1.2"
plugins.security.authcz.admin_dn:
- "CN=admin,OU=Wazuh,O=Wazuh,L=California,C=US"
plugins.security.check_snapshot_restore_write_privileges: true
plugins.security.enable_snapshot_restore_privilege: true
plugins.security.nodes_dn:
- "CN=indexer,OU=Wazuh,O=Wazuh,L=California,C=US"
plugins.security.restapi.roles_enabled:
- "all_access"
- "security_rest_api_access"
plugins.security.system_indices.enabled: true
plugins.security.system_indices.indices: [".opendistro-alerting-config", ".opendistro-alerting-alert*", ".opendistro-anomaly-results*", ".opendistro-anomaly-detector*", ".opendistro-anomaly-checkpoints", ".op>
### Option to allow Filebeat-oss 7.10.2 to work ###
compatibility.override_main_response_version: true
if you need any more information, please tell me
please help me
Loaded: loaded (/etc/systemd/system/wazuh-dashboard.service; enabled; preset: enabled)
Active: active (running) since Thu 2026-02-12 16:54:09 UTC; 12s ago
Main PID: 66881 (node)
Tasks: 11 (limit: 4548)
Memory: 206.6M (peak: 206.8M)
CPU: 3.886s
CGroup: /system.slice/wazuh-dashboard.service
└─66881 /usr/share/wazuh-dashboard/node/bin/node --no-warnings --max-http-header-size=65536 --unhandled-rejections=warn /usr/share/wazuh-dashboard/src/cli/dist
фев 12 16:54:12 s7mth opensearch-dashboards[66881]: [agentkeepalive:deprecated] options.freeSocketKeepAliveTimeout is deprecated, please use options.freeSocketTimeout instead
фев 12 16:54:12 s7mth opensearch-dashboards[66881]: [agentkeepalive:deprecated] options.freeSocketKeepAliveTimeout is deprecated, please use options.freeSocketTimeout instead
feb 12 16:54:12 s7mth opensearch-dashboards[66881]: {"type":"log","@timestamp":"2026-02-12T16:54:12Z","tags":["info","dynamic-config-service"],"pid":66881,"message":"initiating start()"}
feb 12 16:54:12 s7mth opensearch-dashboards[66881]: {"type":"log","@timestamp":"2026-02-12T16:54:12Z","tags":["info","dynamic-config-service"],"pid":66881,"message":"finished start()"}
feb 12 16:54:12 s7mth opensearch-dashboards[66881]: {"type":"log","@timestamp":"2026-02-12T16:54:12Z","tags":["info","savedobjects-service"],"pid":66881,"message":"Waiting until all OpenSearch nodes are compa>
feb 12 16:54:12 s7mth opensearch-dashboards[66881]: {"type":"log","@timestamp":"2026-02-12T16:54:12Z","tags":["error","opensearch","data"],"pid":66881,"message":"[ResponseError]: Response Error"}
feb 12 16:54:13 s7mth opensearch-dashboards[66881]: {"type":"log","@timestamp":"2026-02-12T16:54:13Z","tags":["error","savedobjects-service"],"pid":66881,"message":"Unable to retrieve version information from>
feb 12 16:54:15 s7mth opensearch-dashboards[66881]: {"type":"log","@timestamp":"2026-02-12T16:54:15Z","tags":["error","opensearch","data"],"pid":66881,"message":"[ResponseError]: Response Error"}
feb 12 16:54:17 s7mth opensearch-dashboards[66881]: {"type":"log","@timestamp":"2026-02-12T16:54:17Z","tags":["error","opensearch","data"],"pid":66881,"message":"[ResponseError]: Response Error"}
feb 12 16:54:20 s7mth opensearch-dashboards[66881]: {"type":"log","@timestamp":"2026-02-12T16:54:20Z","tags":["error","opensearch","data"],"pid":66881,"message":"[ResponseError]: Response Error"}
curl -k -u admin "https://127.0.0.1:9200/_cat/indices?v"
Enter host password for user 'admin':
health status index uuid pri rep docs.count docs.deleted store.size pri.store.size
green open .opensearch-observability CRK2N7cKQq6_K-DqzOY5IQ 1 0 0 0 208b 208b
green open wazuh-alerts-4.x-2026.02.11 blHmMlwUSAWirHyaoy6L2A 3 0 118 0 448.1kb 448.1kb
green open .plugins-ml-config RzSEekWyQNCg2qNUKurs5Q 1 0 1 0 4kb 4kb
green open wazuh-statistics-2026.7w Pmfr9E28TemB3LGkdU36Ew 1 0 2 0 20.1kb 20.1kb
green open wazuh-alerts-4.x-2026.02.10 Y-FidBT6QjugaQaruu3m1A 3 0 18 0 190.7kb 190.7kb
green open wazuh-alerts-4.x-2026.02.12 ji5rUJseSXGnH2rWNhYnPQ 3 0 697 0 1.3mb 1.3mb
green open wazuh-monitoring-2026.7w 62qWVqWBR-iwQnK6L2O0fw 1 0 0 0 208b 208b
green open .opendistro_security z4Z8C3MRQdK3VLJjgZ3t5w 1 0 10 2 63.2kb 63.2kb
green open .kibana_1 Gi6EwxFgQzqpswdqoPYPuA 1 0 4 0 14.5kb 14.5kb
curl -k -u admin https://127.0.0.1:9200
Enter host password for user 'admin':
{
"name" : "node-1",
"cluster_name" : "wazuh-cluster",
"cluster_uuid" : "rzV7tTRgRQe331XAc3B9Bg",
"version" : {
"number" : "7.10.2",
"build_type" : "deb",
"build_hash" : "e27d4927fd308f52329c0644b83ca84987a68043",
"build_date" : "2026-02-06T10:58:23.962483055Z",
"build_snapshot" : false,
"lucene_version" : "9.12.3",
"minimum_wire_compatibility_version" : "7.10.0",
"minimum_index_compatibility_version" : "7.0.0"
},
"tagline" : "The OpenSearch Project: https://opensearch.org/"
}
here are the contents of my opensearch_dashboards.yml
server.host: 0.0.0.0
opensearch.hosts: https://127.0.0.1:9200
server.port: 443
opensearch.ssl.verificationMode: certificate
opensearch.username: admin
opensearch.password: "****************"
opensearch.requestHeadersAllowlist: ["securitytenant","Authorization"]
opensearch_security.multitenancy.enabled: false
opensearch_security.readonly_mode.roles: ["kibana_read_only"]
server.ssl.enabled: true
server.ssl.key: "/etc/wazuh-dashboard/certs/wazuh-dashboard-key.pem"
server.ssl.certificate: "/etc/wazuh-dashboard/certs/wazuh-dashboard.pem"
opensearch.ssl.certificateAuthorities: ["/etc/wazuh-dashboard/certs/root-ca.pem"]
uiSettings.overrides.defaultRoute: /app/wz-home
opensearch_security.cookie.secure: true
here opensearch.yml:
network.host: "127.0.0.1"
node.name: "node-1"
cluster.initial_master_nodes:
- "node-1"
cluster.name: "wazuh-cluster"
node.max_local_storage_nodes: "3"
path.data: /var/lib/wazuh-indexer
path.logs: /var/log/wazuh-indexer
plugins.security.ssl.http.pemcert_filepath: /etc/wazuh-indexer/certs/wazuh-indexer.pem
plugins.security.ssl.http.pemkey_filepath: /etc/wazuh-indexer/certs/wazuh-indexer-key.pem
plugins.security.ssl.http.pemtrustedcas_filepath: /etc/wazuh-indexer/certs/root-ca.pem
plugins.security.ssl.transport.pemcert_filepath: /etc/wazuh-indexer/certs/wazuh-indexer.pem
plugins.security.ssl.transport.pemkey_filepath: /etc/wazuh-indexer/certs/wazuh-indexer-key.pem
plugins.security.ssl.transport.pemtrustedcas_filepath: /etc/wazuh-indexer/certs/root-ca.pem
plugins.security.ssl.http.enabled: true
plugins.security.ssl.transport.enforce_hostname_verification: false
plugins.security.ssl.transport.resolve_hostname: false
plugins.security.ssl.http.enabled_ciphers:
- "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"
- "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384"
- "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256"
- "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384"
plugins.security.ssl.http.enabled_protocols:
- "TLSv1.2"
plugins.security.authcz.admin_dn:
- "CN=admin,OU=Wazuh,O=Wazuh,L=California,C=US"
plugins.security.check_snapshot_restore_write_privileges: true
plugins.security.enable_snapshot_restore_privilege: true
plugins.security.nodes_dn:
- "CN=indexer,OU=Wazuh,O=Wazuh,L=California,C=US"
plugins.security.restapi.roles_enabled:
- "all_access"
- "security_rest_api_access"
plugins.security.system_indices.enabled: true
plugins.security.system_indices.indices: [".opendistro-alerting-config", ".opendistro-alerting-alert*", ".opendistro-anomaly-results*", ".opendistro-anomaly-detector*", ".opendistro-anomaly-checkpoints", ".op>
### Option to allow Filebeat-oss 7.10.2 to work ###
compatibility.override_main_response_version: true
if you need any more information, please tell me
please help me
Olamilekan Abdullateef Ajani
Feb 12, 2026, 1:19:41 PMFeb 12
to Wazuh | Mailing List
Hello Kirill4533,
sudo systemctl status wazuh-dashboard sudo systemctl status wazuh-indexer
journalctl -u wazuh-dashboard | grep -i -E "error|warn" and cat /var/log/wazuh-indexer/wazuh-cluster.log | grep -i -E "error|warn"
Lastly, ensure that the values of server.ssl.key and server.ssl.certificate match the files located in /etc/wazuh-dashboard/certs/
The information you shared looks accurate. Can you please do the following to isolate the issue?
Restart the Wazuh manager and indexer service, then capture the logs below:
journalctl -u wazuh-dashboard | grep -i -E "error|warn" and cat /var/log/wazuh-indexer/wazuh-cluster.log | grep -i -E "error|warn"
ls etc/wazuh-dashboard/certs/ matches the certificates listed in /etc/wazuh-dashboard/opensearch_dashboards.yml
Please let me know the outcome.
Kokosik
Feb 12, 2026, 1:55:22 PMFeb 12
to Wazuh | Mailing List
Here is all the information you need, as you said after the restart
sudo systemctl status wazuh-dashboard
● wazuh-dashboard.service - wazuh-dashboard
Loaded: loaded (/etc/systemd/system/wazuh-dashboard.service; enabled; preset: enabled)
Active: active (running) since Thu 2026-02-12 18:42:32 UTC; 3min 41s ago
Main PID: 2346 (node)
Tasks: 11 (limit: 4548)
Memory: 170.1M (peak: 224.2M)
CPU: 7.297s
CGroup: /system.slice/wazuh-dashboard.service
└─2346 /usr/share/wazuh-dashboard/node/bin/node --no-warnings --max-http-header-size=65536 --unhandled-rejections=warn /usr/share/wazuh-dashboard/src/cli/dist
фев 12 18:45:50 s7mth opensearch-dashboards[2346]: {"type":"log","@timestamp":"2026-02-12T18:45:50Z","tags":["error","opensearch","data"],"pid":2346,"message":"[ResponseError]: Response Error"}
фев 12 18:45:53 s7mth opensearch-dashboards[2346]: {"type":"log","@timestamp":"2026-02-12T18:45:53Z","tags":["error","opensearch","data"],"pid":2346,"message":"[ResponseError]: Response Error"}
фев 12 18:45:55 s7mth opensearch-dashboards[2346]: {"type":"log","@timestamp":"2026-02-12T18:45:55Z","tags":["error","opensearch","data"],"pid":2346,"message":"[ResponseError]: Response Error"}
фев 12 18:45:58 s7mth opensearch-dashboards[2346]: {"type":"log","@timestamp":"2026-02-12T18:45:58Z","tags":["error","opensearch","data"],"pid":2346,"message":"[ResponseError]: Response Error"}
фев 12 18:46:00 s7mth opensearch-dashboards[2346]: {"type":"log","@timestamp":"2026-02-12T18:46:00Z","tags":["error","opensearch","data"],"pid":2346,"message":"[ResponseError]: Response Error"}
фев 12 18:46:03 s7mth opensearch-dashboards[2346]: {"type":"log","@timestamp":"2026-02-12T18:46:03Z","tags":["error","opensearch","data"],"pid":2346,"message":"[ResponseError]: Response Error"}
фев 12 18:46:05 s7mth opensearch-dashboards[2346]: {"type":"log","@timestamp":"2026-02-12T18:46:05Z","tags":["error","opensearch","data"],"pid":2346,"message":"[ResponseError]: Response Error"}
фев 12 18:46:08 s7mth opensearch-dashboards[2346]: {"type":"log","@timestamp":"2026-02-12T18:46:08Z","tags":["error","opensearch","data"],"pid":2346,"message":"[ResponseError]: Response Error"}
фев 12 18:46:10 s7mth opensearch-dashboards[2346]: {"type":"log","@timestamp":"2026-02-12T18:46:10Z","tags":["error","opensearch","data"],"pid":2346,"message":"[ResponseError]: Response Error"}
фев 12 18:46:13 s7mth opensearch-dashboards[2346]: {"type":"log","@timestamp":"2026-02-12T18:46:13Z","tags":["error","opensearch","data"],"pid":2346,"message":"[ResponseError]: Response Error"}
wazuh-indexer.service - wazuh-indexer
Loaded: loaded (/usr/lib/systemd/system/wazuh-indexer.service; enabled; preset: enabled)
Active: active (running) since Thu 2026-02-12 18:42:25 UTC; 4min 16s ago
Docs: https://documentation.wazuh.com
Main PID: 2101 (java)
Tasks: 70 (limit: 4548)
Memory: 1.4G (peak: 1.4G)
CPU: 1min 18.154s
CGroup: /system.slice/wazuh-indexer.service
└─2101 /usr/share/wazuh-indexer/jdk/bin/java -Xshare:auto -Dopensearch.networkaddress.cache.ttl=60 -Dopensearch.networkaddress.cache.negative.ttl=10 -XX:+AlwaysPreTouch -Xss1m -Djava.awt.headless>
фев 12 18:42:07 s7mth systemd-entrypoint[2101]: WARNING: System::setSecurityManager has been called by org.opensearch.bootstrap.OpenSearch (file:/usr/share/wazuh-indexer/lib/opensearch-2.19.4.jar)
фев 12 18:42:07 s7mth systemd-entrypoint[2101]: WARNING: Please consider reporting this to the maintainers of org.opensearch.bootstrap.OpenSearch
фев 12 18:42:07 s7mth systemd-entrypoint[2101]: WARNING: System::setSecurityManager will be removed in a future release
фев 12 18:42:08 s7mth systemd-entrypoint[2101]: фев 12, 2026 6:42:08 PM sun.util.locale.provider.LocaleProviderAdapter <clinit>
фев 12 18:42:08 s7mth systemd-entrypoint[2101]: WARNING: COMPAT locale provider will be removed in a future release
фев 12 18:42:09 s7mth systemd-entrypoint[2101]: WARNING: A terminally deprecated method in java.lang.System has been called
фев 12 18:42:09 s7mth systemd-entrypoint[2101]: WARNING: System::setSecurityManager has been called by org.opensearch.bootstrap.Security (file:/usr/share/wazuh-indexer/lib/opensearch-2.19.4.jar)
фев 12 18:42:09 s7mth systemd-entrypoint[2101]: WARNING: Please consider reporting this to the maintainers of org.opensearch.bootstrap.Security
фев 12 18:42:09 s7mth systemd-entrypoint[2101]: WARNING: System::setSecurityManager will be removed in a future release
фев 12 18:42:25 s7mth systemd[1]: Started wazuh-indexer.service - wazuh-indexer.
journalctl -u wazuh-dashboard | grep -i -E "error|warn" :
фев 12 18:40:16 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:40:16Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:40:19 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:40:19Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:40:21 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:40:21Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:40:24 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:40:24Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:40:26 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:40:26Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:40:29 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:40:29Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:40:31 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:40:31Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:40:34 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:40:34Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:40:36 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:40:36Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:40:39 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:40:39Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:40:41 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:40:41Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:40:44 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:40:44Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:40:46 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:40:46Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:40:49 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:40:49Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:40:51 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:40:51Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:40:54 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:40:54Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:40:56 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:40:56Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:40:59 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:40:59Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:41:01 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:41:01Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:41:04 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:41:04Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:41:06 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:41:06Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:41:09 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:41:09Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:41:11 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:41:11Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:41:14 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:41:14Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:41:16 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:41:16Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:41:19 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:41:19Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:41:21 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:41:21Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:41:24 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:41:24Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:41:26 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:41:26Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:41:29 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:41:29Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:41:31 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:41:31Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:41:34 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:41:34Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:41:36 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:41:36Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:41:39 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:41:39Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:41:41 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:41:41Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:41:44 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:41:44Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:41:46 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:41:46Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:41:49 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:41:49Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:41:51 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:41:51Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:41:54 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:41:54Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:41:56 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:41:56Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:41:59 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:41:59Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:42:01 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:42:01Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:42:04 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:42:04Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:42:06 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:42:06Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:42:09 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:42:09Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:42:11 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:42:11Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:42:14 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:42:14Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:42:16 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:42:16Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:42:19 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:42:19Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:42:21 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:42:21Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:42:24 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:42:24Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:42:27 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:42:27Z","tags":["error","opensearch","data"],"pid":833,"message":"[ResponseError]: Response Error"}
фев 12 18:42:29 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:42:29Z","tags":["error","opensearch","data"],"pid":833,"message":"[ResponseError]: Response Error"}
фев 12 18:42:31 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:42:31Z","tags":["warning","savedobjects-service"],"pid":833,"message":"Unable to connect to OpenSearch. Error: Given the configuration, the ConnectionPool was not able to find a usable Connection for this request."}
фев 12 18:42:37 s7mth opensearch-dashboards[2346]: {"type":"log","@timestamp":"2026-02-12T18:42:37Z","tags":["error","opensearch","data"],"pid":2346,"message":"[ResponseError]: Response Error"}
фев 12 18:42:37 s7mth opensearch-dashboards[2346]: {"type":"log","@timestamp":"2026-02-12T18:42:37Z","tags":["error","savedobjects-service"],"pid":2346,"message":"Unable to retrieve version information from OpenSearch nodes."}
фев 12 18:42:40 s7mth opensearch-dashboards[2346]: {"type":"log","@timestamp":"2026-02-12T18:42:40Z","tags":["error","opensearch","data"],"pid":2346,"message":"[ResponseError]: Response Error"}
фев 12 18:42:42 s7mth opensearch-dashboards[2346]: {"type":"log","@timestamp":"2026-02-12T18:42:42Z","tags":["error","opensearch","data"],"pid":2346,"message":"[ResponseError]: Response Error"}
фев 12 18:42:45 s7mth opensearch-dashboards[2346]: {"type":"log","@timestamp":"2026-02-12T18:42:45Z","tags":["error","opensearch","data"],"pid":2346,"message":"[ResponseError]: Response Error"}
фев 12 18:42:47 s7mth opensearch-dashboards[2346]: {"type":"log","@timestamp":"2026-02-12T18:42:47Z","tags":["error","opensearch","data"],"pid":2346,"message":"[ResponseError]: Response Error"}
фев 12 18:42:50 s7mth opensearch-dashboards[2346]: {"type":"log","@timestamp":"2026-02-12T18:42:50Z","tags":["error","opensearch","data"],"pid":2346,"message":"[ResponseError]: Response Error"}
фев 12 18:42:52 s7mth opensearch-dashboards[2346]: {"type":"log","@timestamp":"2026-02-12T18:42:52Z","tags":["error","opensearch","data"],"pid":2346,"message":"[ResponseError]: Response Error"}
фев 12 18:42:55 s7mth opensearch-dashboards[2346]: {"type":"log","@timestamp":"2026-02-12T18:42:55Z","tags":["error","opensearch","data"],"pid":2346,"message":"[ResponseError]: Response Error"}
фев 12 18:42:57 s7mth opensearch-dashboards[2346]: {"type":"log","@timestamp":"2026-02-12T18:42:57Z","tags":["error","opensearch","data"],"pid":2346,"message":"[ResponseError]: Response Error"}
фев 12 18:43:00 s7mth opensearch-dashboards[2346]: {"type":"log","@timestamp":"2026-02-12T18:43:00Z","tags":["error","opensearch","data"],"pid":2346,"message":"[ResponseError]: Response Error"}
фев 12 18:43:02 s7mth opensearch-dashboards[2346]: {"type":"log","@timestamp":"2026-02-12T18:43:02Z","tags":["error","opensearch","data"],"pid":2346,"message":"[ResponseError]: Response Error"}
фев 12 18:43:05 s7mth opensearch-dashboards[2346]: {"type":"log","@timestamp":"2026-02-12T18:43:05Z","tags":["error","opensearch","data"],"pid":2346,"message":"[ResponseError]: Response Error"}
фев 12 18:43:07 s7mth opensearch-dashboards[2346]: {"type":"log","@timestamp":"2026-02-12T18:43:07Z","tags":["error","opensearch","data"],"pid":2346,"message":"[ResponseError]: Response Error"}
фев 12 18:43:10 s7mth opensearch-dashboards[2346]: {"type":"log","@timestamp":"2026-02-12T18:43:10Z","tags":["error","opensearch","data"],"pid":2346,"message":"[ResponseError]: Response Error"}
фев 12 18:43:12 s7mth opensearch-dashboards[2346]: {"type":"log","@timestamp":"2026-02-12T18:43:12Z","tags":["error","opensearch","data"],"pid":2346,"message":"[ResponseError]: Response Error"}
фев 12 18:43:15 s7mth opensearch-dashboards[2346]: {"type":"log","@timestamp":"2026-02-12T18:43:15Z","tags":["error","opensearch","data"],"pid":2346,"message":"[ResponseError]: Response Error"}
фев 12 18:43:17 s7mth opensearch-dashboards[2346]: {"type":"log","@timestamp":"2026-02-12T18:43:17Z","tags":["error","opensearch","data"],"pid":2346,"message":"[ResponseError]: Response Error"}
фев 12 18:43:20 s7mth opensearch-dashboards[2346]: {"type":"log","@timestamp":"2026-02-12T18:43:20Z","tags":["error","opensearch","data"],"pid":2346,"message":"[ResponseError]: Response Error"}
фев 12 18:43:22 s7mth opensearch-dashboards[2346]: {"type":"log","@timestamp":"2026-02-12T18:43:22Z","tags":["error","opensearch","data"],"pid":2346,"message":"[ResponseError]: Response Error"}
фев 12 18:43:25 s7mth opensearch-dashboards[2346]: {"type":"log","@timestamp":"2026-02-12T18:43:25Z","tags":["error","opensearch","data"],"pid":2346,"message":"[ResponseError]: Response Error"}
etc.
cat /var/log/wazuh-indexer/wazuh-cluster.log | grep -i -E "error|warn"
[2026-02-12T18:45:40,566][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:45:43,050][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:45:45,558][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:45:48,079][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:45:50,585][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:45:53,038][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:45:55,558][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:45:58,040][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:46:00,571][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:46:03,047][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:46:05,573][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:46:08,084][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:46:10,591][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:46:13,091][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:46:15,581][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:46:18,084][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:46:20,566][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:46:23,075][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:46:25,604][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:46:28,105][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:46:30,604][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:46:33,093][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:46:35,572][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:46:38,103][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:46:40,594][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:46:43,121][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:46:45,623][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:46:48,095][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:46:50,632][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:46:53,116][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:46:55,600][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:46:58,143][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:47:00,626][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:47:03,116][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:47:05,613][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:47:08,102][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:47:10,636][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:47:13,110][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:47:15,614][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:47:18,114][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:47:20,611][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:47:23,111][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:47:25,631][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:47:28,124][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:47:30,658][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:47:33,155][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:47:35,648][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:47:38,167][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:47:40,623][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:47:43,159][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:47:45,646][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:47:48,162][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:47:50,693][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:47:53,171][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:47:55,651][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:47:58,150][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:48:00,685][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:48:03,174][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:48:05,654][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:48:08,180][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:48:10,670][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
ls /etc/wazuh-dashboard/certs/
root-ca.pem wazuh-dashboard-key.pem wazuh-dashboard.pem
cat /etc/wazuh-dashboard/opensearch_dashboards.yml
server.host: 0.0.0.0
opensearch.hosts: https://127.0.0.1:9200
server.port: 443
opensearch.ssl.verificationMode: certificate
opensearch.username: admin
opensearch.password: "rkFjvKHG29kTOFeAffG9k2?BxtjvC?lx"
opensearch.requestHeadersAllowlist: ["securitytenant","Authorization"]
opensearch_security.multitenancy.enabled: false
opensearch_security.readonly_mode.roles: ["kibana_read_only"]
server.ssl.enabled: true
server.ssl.key: "/etc/wazuh-dashboard/certs/wazuh-dashboard-key.pem"
server.ssl.certificate: "/etc/wazuh-dashboard/certs/wazuh-dashboard.pem"
opensearch.ssl.certificateAuthorities: ["/etc/wazuh-dashboard/certs/root-ca.pem"]
uiSettings.overrides.defaultRoute: /app/wz-home
opensearch_security.cookie.secure: true
sudo systemctl status wazuh-dashboard
● wazuh-dashboard.service - wazuh-dashboard
Loaded: loaded (/etc/systemd/system/wazuh-dashboard.service; enabled; preset: enabled)
Main PID: 2346 (node)
Tasks: 11 (limit: 4548)
Memory: 170.1M (peak: 224.2M)
CPU: 7.297s
CGroup: /system.slice/wazuh-dashboard.service
└─2346 /usr/share/wazuh-dashboard/node/bin/node --no-warnings --max-http-header-size=65536 --unhandled-rejections=warn /usr/share/wazuh-dashboard/src/cli/dist
фев 12 18:45:50 s7mth opensearch-dashboards[2346]: {"type":"log","@timestamp":"2026-02-12T18:45:50Z","tags":["error","opensearch","data"],"pid":2346,"message":"[ResponseError]: Response Error"}
фев 12 18:45:53 s7mth opensearch-dashboards[2346]: {"type":"log","@timestamp":"2026-02-12T18:45:53Z","tags":["error","opensearch","data"],"pid":2346,"message":"[ResponseError]: Response Error"}
фев 12 18:45:55 s7mth opensearch-dashboards[2346]: {"type":"log","@timestamp":"2026-02-12T18:45:55Z","tags":["error","opensearch","data"],"pid":2346,"message":"[ResponseError]: Response Error"}
фев 12 18:45:58 s7mth opensearch-dashboards[2346]: {"type":"log","@timestamp":"2026-02-12T18:45:58Z","tags":["error","opensearch","data"],"pid":2346,"message":"[ResponseError]: Response Error"}
фев 12 18:46:00 s7mth opensearch-dashboards[2346]: {"type":"log","@timestamp":"2026-02-12T18:46:00Z","tags":["error","opensearch","data"],"pid":2346,"message":"[ResponseError]: Response Error"}
фев 12 18:46:03 s7mth opensearch-dashboards[2346]: {"type":"log","@timestamp":"2026-02-12T18:46:03Z","tags":["error","opensearch","data"],"pid":2346,"message":"[ResponseError]: Response Error"}
фев 12 18:46:05 s7mth opensearch-dashboards[2346]: {"type":"log","@timestamp":"2026-02-12T18:46:05Z","tags":["error","opensearch","data"],"pid":2346,"message":"[ResponseError]: Response Error"}
фев 12 18:46:08 s7mth opensearch-dashboards[2346]: {"type":"log","@timestamp":"2026-02-12T18:46:08Z","tags":["error","opensearch","data"],"pid":2346,"message":"[ResponseError]: Response Error"}
фев 12 18:46:10 s7mth opensearch-dashboards[2346]: {"type":"log","@timestamp":"2026-02-12T18:46:10Z","tags":["error","opensearch","data"],"pid":2346,"message":"[ResponseError]: Response Error"}
фев 12 18:46:13 s7mth opensearch-dashboards[2346]: {"type":"log","@timestamp":"2026-02-12T18:46:13Z","tags":["error","opensearch","data"],"pid":2346,"message":"[ResponseError]: Response Error"}
wazuh-indexer.service - wazuh-indexer
Loaded: loaded (/usr/lib/systemd/system/wazuh-indexer.service; enabled; preset: enabled)
Active: active (running) since Thu 2026-02-12 18:42:25 UTC; 4min 16s ago
Docs: https://documentation.wazuh.com
Main PID: 2101 (java)
Tasks: 70 (limit: 4548)
Memory: 1.4G (peak: 1.4G)
CPU: 1min 18.154s
CGroup: /system.slice/wazuh-indexer.service
└─2101 /usr/share/wazuh-indexer/jdk/bin/java -Xshare:auto -Dopensearch.networkaddress.cache.ttl=60 -Dopensearch.networkaddress.cache.negative.ttl=10 -XX:+AlwaysPreTouch -Xss1m -Djava.awt.headless>
фев 12 18:42:07 s7mth systemd-entrypoint[2101]: WARNING: System::setSecurityManager has been called by org.opensearch.bootstrap.OpenSearch (file:/usr/share/wazuh-indexer/lib/opensearch-2.19.4.jar)
фев 12 18:42:07 s7mth systemd-entrypoint[2101]: WARNING: Please consider reporting this to the maintainers of org.opensearch.bootstrap.OpenSearch
фев 12 18:42:07 s7mth systemd-entrypoint[2101]: WARNING: System::setSecurityManager will be removed in a future release
фев 12 18:42:08 s7mth systemd-entrypoint[2101]: фев 12, 2026 6:42:08 PM sun.util.locale.provider.LocaleProviderAdapter <clinit>
фев 12 18:42:08 s7mth systemd-entrypoint[2101]: WARNING: COMPAT locale provider will be removed in a future release
фев 12 18:42:09 s7mth systemd-entrypoint[2101]: WARNING: A terminally deprecated method in java.lang.System has been called
фев 12 18:42:09 s7mth systemd-entrypoint[2101]: WARNING: System::setSecurityManager has been called by org.opensearch.bootstrap.Security (file:/usr/share/wazuh-indexer/lib/opensearch-2.19.4.jar)
фев 12 18:42:09 s7mth systemd-entrypoint[2101]: WARNING: Please consider reporting this to the maintainers of org.opensearch.bootstrap.Security
фев 12 18:42:09 s7mth systemd-entrypoint[2101]: WARNING: System::setSecurityManager will be removed in a future release
фев 12 18:42:25 s7mth systemd[1]: Started wazuh-indexer.service - wazuh-indexer.
journalctl -u wazuh-dashboard | grep -i -E "error|warn" :
фев 12 18:40:16 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:40:16Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:40:19 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:40:19Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:40:21 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:40:21Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:40:24 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:40:24Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:40:26 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:40:26Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:40:29 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:40:29Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:40:31 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:40:31Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:40:34 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:40:34Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:40:36 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:40:36Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:40:39 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:40:39Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:40:41 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:40:41Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:40:44 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:40:44Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:40:46 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:40:46Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:40:49 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:40:49Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:40:51 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:40:51Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:40:54 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:40:54Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:40:56 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:40:56Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:40:59 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:40:59Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:41:01 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:41:01Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:41:04 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:41:04Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:41:06 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:41:06Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:41:09 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:41:09Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:41:11 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:41:11Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:41:14 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:41:14Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:41:16 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:41:16Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:41:19 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:41:19Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:41:21 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:41:21Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:41:24 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:41:24Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:41:26 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:41:26Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:41:29 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:41:29Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:41:31 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:41:31Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:41:34 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:41:34Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:41:36 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:41:36Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:41:39 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:41:39Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:41:41 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:41:41Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:41:44 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:41:44Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:41:46 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:41:46Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:41:49 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:41:49Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:41:51 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:41:51Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:41:54 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:41:54Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:41:56 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:41:56Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:41:59 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:41:59Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:42:01 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:42:01Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:42:04 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:42:04Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:42:06 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:42:06Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:42:09 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:42:09Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:42:11 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:42:11Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:42:14 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:42:14Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:42:16 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:42:16Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:42:19 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:42:19Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:42:21 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:42:21Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:42:24 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:42:24Z","tags":["error","opensearch","data"],"pid":833,"message":"[ConnectionError]: connect ECONNREFUSED 127.0.0.1:9200"}
фев 12 18:42:27 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:42:27Z","tags":["error","opensearch","data"],"pid":833,"message":"[ResponseError]: Response Error"}
фев 12 18:42:29 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:42:29Z","tags":["error","opensearch","data"],"pid":833,"message":"[ResponseError]: Response Error"}
фев 12 18:42:31 s7mth opensearch-dashboards[833]: {"type":"log","@timestamp":"2026-02-12T18:42:31Z","tags":["warning","savedobjects-service"],"pid":833,"message":"Unable to connect to OpenSearch. Error: Given the configuration, the ConnectionPool was not able to find a usable Connection for this request."}
фев 12 18:42:37 s7mth opensearch-dashboards[2346]: {"type":"log","@timestamp":"2026-02-12T18:42:37Z","tags":["error","opensearch","data"],"pid":2346,"message":"[ResponseError]: Response Error"}
фев 12 18:42:37 s7mth opensearch-dashboards[2346]: {"type":"log","@timestamp":"2026-02-12T18:42:37Z","tags":["error","savedobjects-service"],"pid":2346,"message":"Unable to retrieve version information from OpenSearch nodes."}
фев 12 18:42:40 s7mth opensearch-dashboards[2346]: {"type":"log","@timestamp":"2026-02-12T18:42:40Z","tags":["error","opensearch","data"],"pid":2346,"message":"[ResponseError]: Response Error"}
фев 12 18:42:42 s7mth opensearch-dashboards[2346]: {"type":"log","@timestamp":"2026-02-12T18:42:42Z","tags":["error","opensearch","data"],"pid":2346,"message":"[ResponseError]: Response Error"}
фев 12 18:42:45 s7mth opensearch-dashboards[2346]: {"type":"log","@timestamp":"2026-02-12T18:42:45Z","tags":["error","opensearch","data"],"pid":2346,"message":"[ResponseError]: Response Error"}
фев 12 18:42:47 s7mth opensearch-dashboards[2346]: {"type":"log","@timestamp":"2026-02-12T18:42:47Z","tags":["error","opensearch","data"],"pid":2346,"message":"[ResponseError]: Response Error"}
фев 12 18:42:50 s7mth opensearch-dashboards[2346]: {"type":"log","@timestamp":"2026-02-12T18:42:50Z","tags":["error","opensearch","data"],"pid":2346,"message":"[ResponseError]: Response Error"}
фев 12 18:42:52 s7mth opensearch-dashboards[2346]: {"type":"log","@timestamp":"2026-02-12T18:42:52Z","tags":["error","opensearch","data"],"pid":2346,"message":"[ResponseError]: Response Error"}
фев 12 18:42:55 s7mth opensearch-dashboards[2346]: {"type":"log","@timestamp":"2026-02-12T18:42:55Z","tags":["error","opensearch","data"],"pid":2346,"message":"[ResponseError]: Response Error"}
фев 12 18:42:57 s7mth opensearch-dashboards[2346]: {"type":"log","@timestamp":"2026-02-12T18:42:57Z","tags":["error","opensearch","data"],"pid":2346,"message":"[ResponseError]: Response Error"}
фев 12 18:43:00 s7mth opensearch-dashboards[2346]: {"type":"log","@timestamp":"2026-02-12T18:43:00Z","tags":["error","opensearch","data"],"pid":2346,"message":"[ResponseError]: Response Error"}
фев 12 18:43:02 s7mth opensearch-dashboards[2346]: {"type":"log","@timestamp":"2026-02-12T18:43:02Z","tags":["error","opensearch","data"],"pid":2346,"message":"[ResponseError]: Response Error"}
фев 12 18:43:05 s7mth opensearch-dashboards[2346]: {"type":"log","@timestamp":"2026-02-12T18:43:05Z","tags":["error","opensearch","data"],"pid":2346,"message":"[ResponseError]: Response Error"}
фев 12 18:43:07 s7mth opensearch-dashboards[2346]: {"type":"log","@timestamp":"2026-02-12T18:43:07Z","tags":["error","opensearch","data"],"pid":2346,"message":"[ResponseError]: Response Error"}
фев 12 18:43:10 s7mth opensearch-dashboards[2346]: {"type":"log","@timestamp":"2026-02-12T18:43:10Z","tags":["error","opensearch","data"],"pid":2346,"message":"[ResponseError]: Response Error"}
фев 12 18:43:12 s7mth opensearch-dashboards[2346]: {"type":"log","@timestamp":"2026-02-12T18:43:12Z","tags":["error","opensearch","data"],"pid":2346,"message":"[ResponseError]: Response Error"}
фев 12 18:43:15 s7mth opensearch-dashboards[2346]: {"type":"log","@timestamp":"2026-02-12T18:43:15Z","tags":["error","opensearch","data"],"pid":2346,"message":"[ResponseError]: Response Error"}
фев 12 18:43:17 s7mth opensearch-dashboards[2346]: {"type":"log","@timestamp":"2026-02-12T18:43:17Z","tags":["error","opensearch","data"],"pid":2346,"message":"[ResponseError]: Response Error"}
фев 12 18:43:20 s7mth opensearch-dashboards[2346]: {"type":"log","@timestamp":"2026-02-12T18:43:20Z","tags":["error","opensearch","data"],"pid":2346,"message":"[ResponseError]: Response Error"}
фев 12 18:43:22 s7mth opensearch-dashboards[2346]: {"type":"log","@timestamp":"2026-02-12T18:43:22Z","tags":["error","opensearch","data"],"pid":2346,"message":"[ResponseError]: Response Error"}
фев 12 18:43:25 s7mth opensearch-dashboards[2346]: {"type":"log","@timestamp":"2026-02-12T18:43:25Z","tags":["error","opensearch","data"],"pid":2346,"message":"[ResponseError]: Response Error"}
etc.
cat /var/log/wazuh-indexer/wazuh-cluster.log | grep -i -E "error|warn"
[2026-02-12T18:45:43,050][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:45:45,558][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:45:48,079][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:45:50,585][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:45:53,038][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:45:55,558][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:45:58,040][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:46:00,571][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:46:03,047][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:46:05,573][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:46:08,084][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:46:10,591][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:46:13,091][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:46:15,581][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:46:18,084][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:46:20,566][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:46:23,075][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:46:25,604][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:46:28,105][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:46:30,604][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:46:33,093][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:46:35,572][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:46:38,103][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:46:40,594][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:46:43,121][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:46:45,623][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:46:48,095][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:46:50,632][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:46:53,116][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:46:55,600][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:46:58,143][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:47:00,626][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:47:03,116][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:47:05,613][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:47:08,102][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:47:10,636][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:47:13,110][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:47:15,614][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:47:18,114][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:47:20,611][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:47:23,111][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:47:25,631][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:47:28,124][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:47:30,658][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:47:33,155][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:47:35,648][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:47:38,167][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:47:40,623][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:47:43,159][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:47:45,646][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:47:48,162][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:47:50,693][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:47:53,171][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:47:55,651][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:47:58,150][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:48:00,685][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:48:03,174][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:48:05,654][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:48:08,180][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
[2026-02-12T18:48:10,670][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
ls /etc/wazuh-dashboard/certs/
root-ca.pem wazuh-dashboard-key.pem wazuh-dashboard.pem
cat /etc/wazuh-dashboard/opensearch_dashboards.yml
server.host: 0.0.0.0
opensearch.hosts: https://127.0.0.1:9200
server.port: 443
opensearch.ssl.verificationMode: certificate
opensearch.username: admin
opensearch.requestHeadersAllowlist: ["securitytenant","Authorization"]
opensearch_security.multitenancy.enabled: false
opensearch_security.readonly_mode.roles: ["kibana_read_only"]
server.ssl.enabled: true
server.ssl.key: "/etc/wazuh-dashboard/certs/wazuh-dashboard-key.pem"
server.ssl.certificate: "/etc/wazuh-dashboard/certs/wazuh-dashboard.pem"
opensearch.ssl.certificateAuthorities: ["/etc/wazuh-dashboard/certs/root-ca.pem"]
uiSettings.overrides.defaultRoute: /app/wz-home
opensearch_security.cookie.secure: true
четверг, 12 февраля 2026 г. в 21:19:41 UTC+3, Olamilekan Abdullateef Ajani:
Olamilekan Abdullateef Ajani
Feb 12, 2026, 2:18:24 PMFeb 12
to Wazuh | Mailing List
Hello
Kirill4533,
The key issue in the log you shared is: [2026-02-12T18:48:10,670][WARN ][o.o.s.a.BackendRegistry ] [node-1] Authentication finally failed for kibanaserver from 127.0.0.1:51494
Which means the Wazuh Dashboard (which connects as kibanaserver) is trying to authenticate to the Wazuh Indexer, but the credentials are no longer valid, so the connection is being rejected.
Which means the Wazuh Dashboard (which connects as kibanaserver) is trying to authenticate to the Wazuh Indexer, but the credentials are no longer valid, so the connection is being rejected.
Run this command to verify that your Dashboard service can communicate with the indexer service with kibanaserver usercurl -XGET -k -u kibanaserver:<password> "https://<Indexer_IP>:9200/_cluster/health"
If you see no output or authentication error, try changing the kibanaserver password. To update the password for the kibanaserver user, here's what to do:
If you see no output or authentication error, try changing the kibanaserver password. To update the password for the kibanaserver user, here's what to do:
- Run this command to change the password:
/usr/share/wazuh-indexer/plugins/opensearch-security/tools/wazuh-passwords-tool.sh -u kibanaserver -p '<new_password>'
Make sure the password is between 8 and 64 characters and includes upper/lowercase letters, numbers, and a symbol (.*+?-).
Since you are using AIO, it automatically updates the passwords in the Wazuh dashboard node.
Make sure the password is between 8 and 64 characters and includes upper/lowercase letters, numbers, and a symbol (.*+?-).
Since you are using AIO, it automatically updates the passwords in the Wazuh dashboard node.
Please do the above and let me know if you require further assistance on this.
Kokosik
Feb 12, 2026, 3:29:44 PMFeb 12
to Wazuh | Mailing List
It works! Thank you very much
четверг, 12 февраля 2026 г. в 22:18:24 UTC+3, Olamilekan Abdullateef Ajani:
Olamilekan Abdullateef Ajani
Feb 12, 2026, 3:30:12 PMFeb 12
to Wazuh | Mailing List
I am glad it worked. Thank you for the feedback.
Reply all
Reply to author
Forward
0 new messages