error "Wazuh dashboard server is not ready yet"

[Daniel Hinojo]

Good morning Dear, Today in the morning when trying to enter wazuh through the web, it showed me the following error "Wazuh dashboard server is not ready yet" what I did was restart the server and everything started to work, I would also like to know two things: 

 1) What causes this error message?

 2)Where can I find the logs of the whole wazuh, including its components.

[Pacome Kemkeu]

Hello Daniel,
There are two main reasons you might be getting this message:

1. Wazuh-dashboard is having a problem to start, or is returning an error.

2. Wazuh-indexer might give timeout when starting the service and Wazuh-dashboard  can't start. This can happen if the service does not get to start in the time Linux is expecting it to happen. We can extend this time with the following steps:

Execute # systemctl edit wazuh-indexer  and add the following lines: 

[Service] 
TimeoutStartSec=180

Save the file and execute 
# systemctl daemon-reload 

# systemctl restart wazuh-indexer

# systemctl restart wazuh-dashboard

If this is your case after extending the timeout period the service should start without problems and the dashboard available after a few minutes.

Concerning the logs:
Wazuh-dashboard logs can be found at /usr/share/wazuh-dashboard/data/wazuh/logs/wazuhapp.log
You can easily query them with the following commands:
# journalctl -u wazuh-dashboard
or 
# cat /usr/share/wazuh-dashboard/data/wazuh/logs/wazuhapp.log | grep -i -E "error|warn"

The same, you can find Wazuh-indexer logs under /var/log/wazuh-indexer/wazuh-cluster.log

In case the file does not exist under that name search for the logs on folder: /var/log/wazuh-indexer/
You can query them to check errors or warning in the same way as show above.

Below you can check our documentation on troubleshooting Wazuh-dashboard for some common issues:
https://documentation.wazuh.com/current/user-manual/wazuh-dashboard/troubleshooting.html

Regards,

[Jason Sassine]

systemctl edit wazuh-indexer

Editing "/etc/systemd/system/wazuh-indexer.service.d/override.conf" canceled: temporary file is empty.

i tried to add the line but it seem not working please help