Docker Upgrade 4.13.1

[Julian Jorge]

Hi team! 

I just upgrade my docker cluster (1 manager - 2 workers) to Wazuh 4.13.1. Everything looks fine BUT there is a problem with the documentation from your website https://documentation.wazuh.com/current/deployment-options/docker/upgrading-wazuh-docker.html#multi-node-stack

 One of the last steps says that: 

• Replace the content of the following files in your stack with the ones from the v4.13.1 tag of the Wazuh Docker repository:

  • multi-node/config/wazuh_cluster/wazuh_manager.conf

  • multi-node/config/wazuh_cluster/wazuh_worker.conf

  When I finish this, the cluster died and I saw that the problem is in the worker.conf file because the lines:
    <!-- System inventory -->
    <wodle name="syscollector">
      <disabled>no</disabled>
      <interval>1h</interval>
      <scan_on_start>yes</scan_on_start>
      <hardware>yes</hardware>
      <os>yes</os>
      <network>yes</network>
      <packages>yes</packages>
      <ports all="yes">yes</ports>
      <processes>yes</processes>
      <users>yes</users>
      <groups>yes</groups>
      <services>yes</services>
      <browser_extensions>yes</browser_extensions>

Have a problem with the sintax. Wazuh doesnt recognize those tags, such I cant access to the IT Hygiene place.

Could someone help me?

[Enrique Araque Espinosa]

Hi,
Please tell me from which version you are upgrading to 4.13.1, so I can try to reproduce the error on my end. I’ll get back to you as soon as I have more information about this problem.

[Julian Jorge]

The version was 4.10.1

[Enrique Araque Espinosa]

After upgrading the Docker cluster from version 4.10.1 to 4.13.1, I was able to complete the process successfully and access the IT Hygiene screen.

Could you please send me the log trace from both the manager and one of the workers to see if we can gather more information from them? You can do this with:
docker exec -it <container-name> cat /var/ossec/logs/ossec.log
or
docker logs <container-name>

On the other hand, I see that the lines you shared in the multi-node/config/wazuh_cluster/wazuh_worker.conf file do not exist in the v4.13.1 tag. These lines are present in the main branch of the Docker repository, which is a development branch. Please verify that the manager and worker configuration files you are using correspond to the correct version:
wazuh/wazuh-docker@v4.13.1/multi-node/config/wazuh_cluster/wazuh_worker.conf