error message in tenant

[arham rehman]

hey !

i have created tenant in wazuh with ready only rights every thing is working fine but when ever i login with read-only right user some errors are appearing 

below are the errors

null_pointer_exception Cannot invoke "org.elasticsearch.search.aggregations.InternalAggregations.getSerializedSize()" because "reducePhase.aggregations" is null Error: Internal Server Error at Fetch._callee3$ (https://192.168.1.92/36136/bundles/core/core.entry.js:6:59535) at tryCatch (https://192.168.1.92/36136/bundles/plugin/opendistroQueryWorkbenchKibana/opendistroQueryWorkbenchKibana.plugin.js:1:32004) at Generator.invoke [as _invoke] (https://192.168.1.92/36136/bundles/plugin/opendistroQueryWorkbenchKibana/opendistroQueryWorkbenchKibana.plugin.js:1:35968) at Generator.forEach.prototype.<computed> [as next] (https://192.168.1.92/36136/bundles/plugin/opendistroQueryWorkbenchKibana/opendistroQueryWorkbenchKibana.plugin.js:1:33129) at fetch_asyncGeneratorStep (https://192.168.1.92/36136/bundles/core/core.entry.js:6:52652) at _next (https://192.168.1.92/36136/bundles/core/core.entry.js:6:52968)

[John Soliani]

Hey Arham,

Thanks for using Wazuh!

Normally this is resolved by disabling the telemetry in Kibana.

• Add telemetry.enabled: false into the /etc/kibana/kibana.yml file.
• Restart the Kibana service: systemctl restart kibana and try again from a new private (incognito) web page.

Let me know if this helped,
John.-

​

[arham rehman]

now i am unable to access wazuh :D

This site can’t be reached

[arham rehman]

hi john,

i already tried but after add telemetry i am unable to access wazuh

On Thursday, March 10, 2022 at 1:09:58 AM UTC+5 john.s...@wazuh.com wrote:

[John Soliani]

Hello,

Sorry for the delay. When you say that you can’t access Wazuh you mean the WazuhApp in Kibana? Is Kibana UI working? You can check Kibana status and errors with this:

• systemctl status kibana --no-pager
• journalctl -u kibana --no-pager | grep -Ei "error|warn|fail|cause"

If there’s something wrong with Kibana, could be Elasticsearch is not working ok. To check if Elasticsearch is working, use this:

• systemctl status elasticsearch --no-pager
• curl -k -u USER:PASSWORD -XGET "https://ELASTIC-IP:9200/_cluster/health?pretty=true"

To check if Wazuh is working, use this (in the server):

• systemctl status wazuh-manager --no-pager
• /var/ossec/bin/wazuh-control status

To check the WazuhAPI, use this:

• Get the token with: TOKEN=$(curl -u wazuh-wui:wazuh-wui -k -X GET "https://MANAGER-IP:55000/security/user/authenticate?raw=true")
• Then use this call: curl -k -X GET "https://MANAGER-IP:55000/?pretty=true" -H "Authorization: Bearer $TOKEN"

This new issue doesn’t seem to be related to the initial one.

Let me know the status.
John.-

​

[arham rehman]

Hi john,

thanks for your response but its now working fine