Wazuh API is down

[Bill Green]

Good afternoon - thanks for any help you can provide.

I was using the management console to make changes to the config.  Some of the data directories not monitored by default I actually wanted to see data from.

I selected edit in the Manager configuration, made the changes, saved and selected restart manager.  Now, however, I am getting an API error.  I will add additional attachments to indicate the issue.

When I select go to app - I confirm the Wazuh API config is set as indicated at /usr/share/kibana/data/wazuh/config/waxuh.yml but when I test the config I get 3005 - Cannot read property 'data' of undefined.  I assumed I had messed up the .config file. Since I made a copy prior to make changes, I reverted back and restarted Ubuntu system to ensure all the services started as they should but to no avail.

I appreciate any suggestions.

Bill

[Bill Green]

[Bill Green]

[Samuel Ortiz]

Hi bill

First of all, try to restart the manager and check the daemon's status.
For that purpose, use this command:
 - <OSSEC_PATH>/bin/ossec-control restart
To check the status, use this command
  - <OSSEC_PATH>/bin/ossec-control status

Then, check at wazuh.yml if your host is correct.

If the problem persists, please send me your ossec.log to check for errors.

Regards.

[Bill Green]

I'm not sure what the specific issue was exactly - but I went ahead and restored from a backup, rebooted, made the changes I had made previously and after the reboot everything seemed to come up with no problem.

I appreciate all the help.   This group is a huge help.

Thank you

Bill