Wazuh application not found

[Le Sok]

Hello everyone,
I just updated Wazuh from 4.7.2 to 4.9.1 and i got this error after the update 
please tell me how to fix this issue 
Best regards,

[Le Sok]

I already changed  /app/wz-home instead of /app/wazuh and still not work

[hasitha.u...@wazuh.com]

Hi Le Sok,

[WARN ][o.o.p.c.u.JsonConverter ] [node-1] Json
Mapping Error: Cannot invoke "java.lang.Long.longValue()" because
"this.cacheMaxSize" is null (through reference chain:
org.opensearch.performanceanalyzer.collectors.CacheConfigMetricsCollector$CacheMaxSizeStatus["Cache_MaxSize"])

The error indicates that OpenSearch encountered a NullPointerException while trying to access the cacheMaxSize value, which is null, in the CacheConfigMetricsCollector.
This is a known problem that happens when upgrading to Opensearch version 2.13, which is what the indexer uses on 4.9.0:
https://github.com/opensearch-project/performance-analyzer/issues/644To solve this, you will need to disable the performance analyzer plugin that comes built into Opensearch.
https://opensearch.org/docs/2.13/monitoring-your-cluster/pa/index/#disable-performance-analyzer

And then restart the Wazuh Indexer
systemctl restart wazuh-indexer
Additionally let me know if your Wazuh-Indexer is up and running.
systemctl status wazuh-indexer -l
For further, please share cluster log.
cat /var/log/wazuh-indexer/wazuh-cluster.log | grep -i -E "error|warn" 

If the issue persist follow this way. If you're getting "Application not found" error, it might be because the /etc/wazuh-dashboard/opensearch_dashboards.yml file wasn't overwritten with new changes. To resolve this issue, update the uiSettings.overrides.defaultRoute setting with the /app/wz-home value in the configuration file:

uiSettings.overrides.defaultRoute: /app/wz-home

You can also check the below link for more information on this:

Let me know if this helps to resolve your issue.
Regards,
Hasitha Upekshitha

[Le Sok]

I just run the command to disable and not got this error sir ?

[hasitha.u...@wazuh.com]

Hi  Le Sok,

If you did any configuration in any of the configuration files, make sure to restart the services to apply changes.

And then restart the Wazuh Indexer
systemctl restart wazuh-indexer
Additionally let me know if your Wazuh-Indexer is up and running.
systemctl status wazuh-indexer -l

Try restarting the dashboard service.
systemctl restart wazuh-manager

And check again if you can access the dashboard or not.

Let us know the update to move forward.

Regards,
Hasitha Upekshitha

[Le Sok]

I dont know if Performance Analyzer is already disabled or not but i still got this log 

I already checked systemctl wazuh-indexer and wazuh-manager

[Le Sok]

Any update, sir?
[2024-10-28T07:27:20,762][WARN ][o.o.p.c.u.JsonConverter  ] [node-1] Json Mapping Error: Cannot invoke "java.lang.Long.longValue()" because "this.cacheMaxSize" is null (through reference chain: org.opensearch.performanceanalyzer.collectors.CacheConfigMetricsCollector$CacheMaxSizeStatus["Cache_MaxSize"])
still got this log
How do I know if I have disabled it or not?

On Friday, October 25, 2024 at 3:51:06 PM UTC+7 hasitha.u...@wazuh.com wrote:

[hasitha.u...@wazuh.com]

Hi Le Sok,

Let me know if you restart the wazuh-dashboard after configuring this. uiSettings.overrides.defaultRoute: /app/wz-home
systemctl restart wazuh-dashboard

Then let us know the update, if the dashboard can access after this.

Regards,
Hasitha Upekshitha

[Le Sok]

I already changed the configuration and restarted the dashboard
but still error sir

[hasitha.u...@wazuh.com]

Hi Le Sok,

Kindy check that this configuration file you have configured properly.
nano /usr/share/wazuh-dashboard/data/wazuh/config/wazuh.yml

Kindly check the url: which is defined as https://localhost. If this is the case change it to https://127.0.0.1
hosts:
  - default:
      url: https://127.0.0.1
      port: 55000
      username: wazuh-wui
      password: "xxxxxxxxxxxxxx"
      run_as: false

If you are using a separate component for Wazuh dashboard without using the All in one installation, make sure to add the Wazuh Dashboard IP instead of 127.0.0.1.

Let me know if this resolves your issue.

Regards,
Hasitha Upekshitha

[Le Sok]

Here is my configuration file in  /usr/share/wazuh-dashboard/data/wazuh/config/wazuh.yml 
I install wazuh from https://documentation.wazuh.com/current/deployment-options/virtual-machine/virtual-machine.html and this is a default maybe 
I dont change anything in here  

[hasitha.u...@wazuh.com]

Hi  Le Sok,

Try changing the  https://localhost to  https://127.0.0.1 in this file  /usr/share/wazuh-dashboard/data/wazuh/config/wazuh.yml 

And restart the Wazuh dashboard to apply changes.
systemctl restart wazuh-dashboard

Let me know the issue was resolved.

[Le Sok]

still error sir ? I dont know what's wrong how can I rollback to  4.7.5 sir ?
if can't rollback please help me to solve this issue 

[hasitha.u...@wazuh.com]

Hi  Le Sok,

Let me replicate this issue on my end and come back to you as soon as I can.
Can you confirm that you updated from 4.7.5 or 4.7.2.
That would be helpful.

Regards,

Hasitha Upekshitha

[Le Sok]

I update wazuh from 4.7.2 to 4.9.1

[Le Sok]

4.7.5 sir sorry sir not 4.7.2

[hasitha.u...@wazuh.com]

Hi Le Sok,

I have seen that you have created a new post regarding this. Our team is working on this new query. I suggest you follow that new thread.
https://groups.google.com/g/wazuh/c/y9c3rE4K3FE/m/9g0w0Ij5AgAJ

Regards,
Hasitha Upekshitha