Wazuh error after update to 4.9.1

[Le Sok]

hello team,
Im using wazuh ova install from https://documentation.wazuh.com/current/deployment-options/virtual-machine/virtual-machine.html

now I dont know how to fix this error
I have already configured and restarted Wazuh-dasboard, but it is still not working.
already disable https://opensearch.org/docs/latest/monitoring-your-cluster/pa/index/ follow this link but still not work
please help me to solve this problem i got this from since last week and now still got error
Best regards

[Jeremiah Kolawole]

Hello Le Sok,

I’m trying to reproduce this error in my environment, I see you’ve followed the workaround steps to disable the performance analyzer plugin and you’re still getting the same error.

I’ll get back to you with my findings as soon as possible.

--
You received this message because you are subscribed to the Google Groups "Wazuh | Mailing List" group.
To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+un...@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/wazuh/16dcd268-d3ce-41b6-afb4-a95c24fa4d75n%40googlegroups.com.

[Jeremiah Kolawole]

Hello Le Sok,

I have tried and I'm unable to reproduce your error.

I was able to access the dashboard and services after I imported the OVA file.

Can you tell me if you made changes to the file and about the environment you're deploying to because the OVA should work out of the box without any settings.

[Le Sok]

I don't change anything because OVA after imported working really fine but after I update version to 4.9.1 and got the error and I don't know I follow all the step that I found in Google but still not work and the log still got like the images I give u

On Fri, Nov 1, 2024, 7:07 PM 'Jeremiah Kolawole' via Wazuh | Mailing List <wa...@googlegroups.com> wrote:

Hello Le Sok,

I have tried and I'm unable to reproduce your error.

I was able to access the dashboard and services after I imported the OVA file.

Can you tell me if you made changes to the file and about the environment you're deploying to because the OVA should work out of the box without any settings.

On Friday, November 1, 2024 at 8:35:43 AM UTC+1 Jeremiah Kolawole wrote:

Hello Le Sok,

I’m trying to reproduce this error in my environment, I see you’ve followed the workaround steps to disable the performance analyzer plugin and you’re still getting the same error.

I’ll get back to you with my findings as soon as possible.

On Fri, 1 Nov 2024 at 07:56, Le Sok <leso...@gmail.com> wrote:

hello team,
Im using wazuh ova install from https://documentation.wazuh.com/current/deployment-options/virtual-machine/virtual-machine.html

now I dont know how to fix this error
I have already configured and restarted Wazuh-dasboard, but it is still not working.
already disable https://opensearch.org/docs/latest/monitoring-your-cluster/pa/index/ follow this link but still not work
please help me to solve this problem i got this from since last week and now still got error
Best regards

--
You received this message because you are subscribed to the Google Groups "Wazuh | Mailing List" group.
To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+un...@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/wazuh/16dcd268-d3ce-41b6-afb4-a95c24fa4d75n%40googlegroups.com.

--

You received this message because you are subscribed to a topic in the Google Groups "Wazuh | Mailing List" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/wazuh/y9c3rE4K3FE/unsubscribe.
To unsubscribe from this group and all its topics, send an email to wazuh+un...@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/wazuh/79a159cb-de63-4a1b-8857-0796878c44efn%40googlegroups.com.

[Jeremiah Kolawole]

Hello Le Sok,

Can you let me know the steps you took to upgrade the manager?

[Le Sok]

I just yum update on Wazuh manager and it auto update wazuh to 4.9.1
After that, it was error until today, sir.
and here are all my command that I just started update wazuh manager

[Jeremiah Kolawole]

Hello Le Sok,

Please follow the step by step guide here on how to upgrade the Wazuh Manager

I hope this helps

[Le Sok]

So what now? I already update wazuh manager  4.9.1 so I need to update step by step on your link you provided right? Is that work if wazuh manager 4.9.1 and update to 4.9.1?

To view this discussion visit https://groups.google.com/d/msgid/wazuh/e1cfe499-a7e6-4715-809e-38614f9bd7edn%40googlegroups.com.

[Le Sok]

I updated and followed your link and still got the same error, sir. I just updated to 4.9.2 
I think your link you provided me is like I use yum update I saw it's the same sir 

[Le Sok]

I just updated the command curl -X POST "https://127.0.0.1:9200/_flush/synced" -u ************ -k
and here is the result, sir 

[Le Sok]

Is it possible to go back to version 4.7.5? I want to go back and update to 4.9.2 once more because I am not sure what I am doing with the error dashboard and indexer anymore.
I have made a lot of mistakes lately.
I use this command to check the log.
systemctl status wazuh-dashboard -l
egrep-i "error" /var/log/wazuh-indexer/wazuh-cluster.log

[Le Sok]

Hello sir,
do you have any update sir ?

[Anwar Mohamed Farook]

Le Sok,

Are you able to access wazuh-ui or are you seeing dashboard not ready error?

[Jeremiah Kolawole]

Hello Le Sok,

Apologies, I missed your responses.

Downgrading the manager might come with extra issues as we're not sure what exactly cause your current installation to be broken.

Can I advise that you download the latest OVA file from the same link and set it up as your new manager?

Is this something that works for you?

[Le Sok]

I have a lot of agents to set up, so I do not want to reinstall OVA. Do you have a way to fix the error, please?
I can restaill OVA using Wazuh Manager (Endpoint), but I am unable to do so with Wazuh Manager (Server), which is still at version 4.7.5.
I update Wazuh manager (Endpoint) first, and if it works, I update Wazuh manager (Server). However, Wazuh manager (Endpoint) failed, and I do not want to fail at Wazuh manager (Server) now.

[Le Sok]

Anwar Mohamed Farook,

Still error sir.

[Le Sok]

Any update sir ?

[Jeremiah Kolawole]

Good morning Le Sok,

Apologies for the experience you're going through.

I understand that you cannot reinstall the OVA because of the number of agents you have so I'm going to work with you to try to resolve this issue.

Can you let me know the OVA version you installed and the version you attempted to upgrade and all other actions you have performed since the upgrade?.

Also, Please share the manager ossec.log and indexer log files with me if available so that I can recreate this in my environment.

In addition, please share with me the current versions of the indexer, filebeat, dashboard and manager.

I'll also need logs for each components, this will help me understand where the disconnect is.

[Le Sok]

Now I already reinstalled ova version 4.7.5. Now I want to update to Wazuh 4.9.2. Can you guide me step by step to update? I do not want to get another error like before, which is so annoying. Before I use command yum update, and here is result. but 
before I use yum update to update from 4.4.5 to 4.7.5, and it works normally.

[Jeremiah Kolawole]

Hello Le Sok,

I apologize once again for the trouble you have gone through.

To upgrade the manager and other components effectively without any issues, you first need to stop the services before the yum upgrade command.

In this documentation here - https://documentation.wazuh.com/current/upgrade-guide/upgrading-central-components.html, there is a step by step activity to follow for you to upgrade without getting into any error.

Please, let me know if you need help with any of the steps in the guide and I'll provide them.

[Le Sok]

If I stop the services Does this link need to be followed before the Yum upgrade? https://documentation.wazuh.com/current/upgrade-guide/upgrading-central-components.html
because the Wazuh Index, dashboard, and opensearch will automatically update when I use Yum Upgrade. I had previously used Yum Update, but I had not stopped the services beforehand, so I received an error similar to the one in the picture. If I stop the services and just use the command yum upgrade, will that work?

[Markus Dubois]

i have the same issue, i'm on a single node docker install going from 4.7.2 to 4.9.2

after login i get this error and a spinning wheel "Application Not Found

No application was found at this URL. Try going back or choosing an app from the menu."

[Markus Dubois]

Firefox Browser Dev Tools show this:

reportsDashboards.plugin.js:24 Uncaught (in promise) TypeError: Cannot read properties of undefined (reading 'split')
    at checkURLParams (reportsDashboards.plugin.js:24:109409)
    at HTMLDocument.<anonymous> (reportsDashboards.plugin.js:24:109291)
    at u (osd-ui-shared-deps.js:411:26168)
    at osd-ui-shared-deps.js:411:26470

[Markus Dubois]

okay solved it. I don't know if this is qualified as a workaround or the final solution:

the file opensearch_dashboards.yml

had a line:

uiSettings.overrides.defaultRoute: /app/wazuh

this is to change to

uiSettings.overrides.defaultRoute: /app/wz-home#/overview

[Le Sok]

Thanks you sir, I solve the issue I have to change the url to ip of wazuh/app/wz-home ..... 
Thank for your time to support me sir.

Best regards