Quickstart Installation not working on Ubuntu 20.04LTS

[Patrick Kaiser]

Hi,

i've just installed fresh machine with ubuntu 20.04LTS and ran the command from the quickstart installation guide:

curl -sO https://packages.wazuh.com/4.3/wazuh-install.sh && sudo bash ./wazuh-install.sh -a

After the installation seems to be finished successfully and i am logging in to the webui

the first time, he is complaining about Index pattern not found.

After digging around i found the issue by running 

filebeat test output:

elasticsearch: https://127.0.0.1:9200...

  parse url... OK

  connection...

    parse host... OK

    dns lookup... OK

    addresses: 127.0.0.1

    dial up... OK

  TLS...

    security: server's certificate chain verification is enabled

    handshake... OK

    TLS version: TLSv1.2

    dial up... OK

  talk to server... ERROR Connection marked as failed because the onConnect callback failed: Filebeat requires the default distribution of Elasticsearch. Please update to the default distribution of Elasticsearch for full access to all free features, or switch to the OSS distribution of Filebeat.

I've also tried to add 'deb https://artifacts.elastic.co/packages/7.x/apt stable main' to the repository and pinned filebeat to this repository, so we get the oss version. but still no luck.

can someone help me out on that please?

Thanks,

Patrick

[Alejandro Ruiz Becerra]

Hello Patrick

Thanks for getting in touch with us. I'm sorry that you are having this problem.

You are following this guide, right?

I'll follow the steps myself with 20.04LTS and check if I can reproduce this problem.

Regards,

Alex