/usr/share/wazuh-dashboard/data/wazuh/config/wazuh.yml No such file or directory

[Diego Scapusio]

Hello to everyone,
I just installed wazuh-dashboard (4.4.5-1)in a distributed environment, but i can't find dashboard's configuration file wazuh.yml on /usr/share/wazuh-dashboard/data/wazuh/config/. The path doesn't exists

Does anyone have any idea what is going on?

Thanks
Regards

[Nicolas Agustin Guevara Pihen]

Hello Diego, 

Could you confirm which installation method did you use? Additionally, verify that you are in superuser (or use sudo to open the file), otherwise, you will not be able to see it. 

I will be looking forward to your answer!
Regards,

[Diego Scapusio]

Hi Nicolas,
I used the step by step installation method.
I was able to verify that the wazuh directory does not exist in the path:

root@wazuh-dashboard01:~# ls -la /usr/share/wazuh-dashboard/data/
total 12
drwxr-x---  2 wazuh-dashboard wazuh-dashboard 4096 Aug 15 09:34 .
drwxr-x--- 10 wazuh-dashboard wazuh-dashboard 4096 Aug 15 09:43 ..
-rw-r--r--  1 wazuh-dashboard wazuh-dashboard   36 Aug 15 09:34 uuid

I hope this is helpful

Regards

[Nicolas Agustin Guevara Pihen]

Ok. As the Wazuh dashboard is installed, if those files are missing they should be auto-generated the first time you access the Wazuh section in the Dashboard (after logging in). The Health Check of the Dashboard may fail the first time, as the generated files contains default information. 
Could you access the Dashboard and verify if after that the files are there or you have any issue?  

[Diego Scapusio]

Although the service is running, when I try to access through the browser the message is Wazuh dashboad server is not ready yet, because it is a distributed environment, it cannot locate the wazuh server, without the wazuh-dashboard configuration file.

Even if I create the file manually the error persists

[Nicolas Agustin Guevara Pihen]

The `Wazuh dashboard server is not ready yet` message usually means that the Dashboard cannot communicate with the Indexer. The settings for that communication are done in the /etc/wazuh-dashboard/opensearch_dashboards.yml file, with the opensearch.hosts setting. You should configure the address of your Wazuh Indexer server in that file and restart the Dashboard. You can see more about it in the Installing the Wazuh dashboard step by step documentation. 

The settings on the /usr/share/wazuh-dashboard/data/wazuh/config/wazuh.yml are used by the Wazuh plugin to communicate with the Server's API, but that step is done after the Dashboards communication with the Indexer and the login occurs. 

[Diego Scapusio]

Hi Nicolas,

You  was right, the /usr/share/wazuh-dashboard/data/wazuh/config/wazuh.yml was generated after the Dashboards communication with the Indexer and the login occurs. At that point fails the communication with Server's API, but I edited the file and it's works ok.
Than you very much for your help.

Best regards

[Taha Arabi]

Hello guys 

I have the same issue with wazuh 4.8, its a single node deployment and I cannot find the file  /usr/share/wazuh-dashboard/data/wazuh/config/wazuh.yml 

I have tried to restart the wazuh manager, indexer, dashboard and filebeat  and all the service are enabled and running smoothly however still the wazuh.yml file does not appear and the dashboard  is not ready yet.

Please help

Regards

Taha