Wazuh installation issues

[Roye R]

On a clean Ubuntu install...  (built a new server due to issues on the production one)

Using the installation assistant I finish the indexer install successfully.  The service is running.  The results of the curl command results in:

curl: (7) Failed to connect to x.x.x.46 port 9200 after 0 ms: Connection refused

There's nothing else on the server!

This is broken

[Lucio Donda]

Hi Roye!
When you say the curl command results in ... connection refused you mean the 2nd step here?
Have you checked the logs of filebeat or the manager if there's an error ?
can you tell me which version are you trying to install?

thanks in advance!

[Roye R]

Yes step 2.

I haven't installed anything else as it doesn't make sense to continue if the first component isn't working.

What logs could I look to?

[Roye R]

Also, using 4.3.10

[Lucio Donda]

Hi Roye, sorry for the late response, that was the end of my day.
Let me clear out the scenario, you tried to install indexer, server and dashboard on the same machine but while finishing indexer installation (service is running ok) you found an issue, right?
systemctl status wazuh-indexer shows ok?
can you tell if you could find something here:
grep -iE 'WARN|ERR' /var/log/wazuh-indexer/wazuh-cluster.log

[Roye R]

I figured it out.  In config.yml I listed the ip address as 127.0.0.1.  That was the issue.  Once I changed the IP to a real one, I was able to connect to port 9200 with the curl command.

[Lucio Donda]

awesome, glad to hear that, have a great day!