-
Notifications
You must be signed in to change notification settings - Fork 98
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Unexpected Parse Error "Pause on PRI/Upgrade" in logs #2449
Comments
There is no connectivity to the indexer nodes. This may be caused by a configuration problem, as there are many errors related to SSL certificates. This should be investigated by the AMI producers (@wazuh/cicd). |
Some errors in this issue are reported in: #2445 |
Update reportI was testing the AMI: ami-0e3aa680272bebe7a and I couldn't replicate the errors. Can you tell us what steps you took to replicate the error? [root@wazuh-server ~]# journalctl | grep wazuh-dashboard
Sep 12 19:02:12 wazuh-server systemd[1]: Configuration file /etc/systemd/system/wazuh-dashboard.service is marked world-inaccessible. This has no effect as configuration data is accessible via APIs without restrictions. Proceeding anyway.
Sep 12 19:02:25 wazuh-server systemd[1]: Started wazuh-dashboard.
Sep 12 19:04:48 wazuh-server systemd[1]: Configuration file /etc/systemd/system/wazuh-dashboard.service is marked world-inaccessible. This has no effect as configuration data is accessible via APIs without restrictions. Proceeding anyway.
Sep 12 19:04:49 wazuh-server systemd[1]: Configuration file /etc/systemd/system/wazuh-dashboard.service is marked world-inaccessible. This has no effect as configuration data is accessible via APIs without restrictions. Proceeding anyway.
Sep 12 19:04:49 wazuh-server systemd[1]: Stopping wazuh-dashboard...
Sep 12 19:04:50 wazuh-server systemd[1]: Stopped wazuh-dashboard.
Sep 12 19:04:50 wazuh-server systemd[1]: Started wazuh-dashboard.
Sep 12 19:44:30 wazuh-server systemd[1]: Configuration file /etc/systemd/system/wazuh-dashboard.service is marked world-inaccessible. This has no effect as configuration data is accessible via APIs without restrictions. Proceeding anyway.
Sep 12 19:44:31 wazuh-server systemd[1]: Configuration file /etc/systemd/system/wazuh-dashboard.service is marked world-inaccessible. This has no effect as configuration data is accessible via APIs without restrictions. Proceeding anyway.
Sep 12 19:44:32 wazuh-server systemd[1]: Configuration file /etc/systemd/system/wazuh-dashboard.service is marked world-inaccessible. This has no effect as configuration data is accessible via APIs without restrictions. Proceeding anyway.
Sep 12 19:44:32 wazuh-server systemd[1]: Configuration file /etc/systemd/system/wazuh-dashboard.service is marked world-inaccessible. This has no effect as configuration data is accessible via APIs without restrictions. Proceeding anyway.
Sep 12 19:52:31 wazuh-server systemd[1]: Stopping wazuh-dashboard...
Sep 12 19:52:32 wazuh-server systemd[1]: Stopped wazuh-dashboard.
Sep 13 11:21:43 wazuh-server systemd[1]: Configuration file /etc/systemd/system/wazuh-dashboard.service is marked world-inaccessible. This has no effect as configuration data is accessible via APIs without restrictions. Proceeding anyway.
Sep 13 11:21:44 wazuh-server systemd[1]: Started wazuh-dashboard.
Sep 13 12:11:34 wazuh-server systemd[1]: Configuration file /etc/systemd/system/wazuh-dashboard.service is marked world-inaccessible. This has no effect as configuration data is accessible via APIs without restrictions. Proceeding anyway. [root@wazuh-server ~]# systemctl status wazuh-dashboard.service -l
● wazuh-dashboard.service - wazuh-dashboard
Loaded: loaded (/etc/systemd/system/wazuh-dashboard.service; enabled; vendor preset: disabled)
Active: active (running) since Wed 2023-09-13 11:21:44 UTC; 2h 37min ago
Main PID: 2715 (node)
CGroup: /system.slice/wazuh-dashboard.service
└─2715 /usr/share/wazuh-dashboard/node/bin/node --no-warnings --max-http-header-size=65536 --unhandled-rejections=warn /usr/share/wazuh-dashboard/src/cli/dist -c /etc/wazuh-dashboard/opensearch_dashboards.yml
Sep 13 12:32:05 wazuh-server opensearch-dashboards[2715]: {"type":"response","@timestamp":"2023-09-13T12:32:05Z","tags":[],"pid":2715,"method":"get","statusCode":200,"req":{"url":"/hosts/apis","method":"get","headers":{"host":"172.31.46.154","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/116.0","accept":"application/json, text/plain, */*","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate, br","osd-xsrf":"kibana","pattern":"wazuh-alerts-*","id":"default","connection":"keep-alive","referer":"https://172.31.46.154/app/wazuh","sec-fetch-dest":"empty","sec-fetch-mode":"cors","sec-fetch-site":"same-origin"},"remoteAddress":"10.10.0.159","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/116.0","referer":"https://172.31.46.154/app/wazuh"},"res":{"statusCode":200,"responseTime":8,"contentLength":9},"message":"GET /hosts/apis 200 8ms - 9.0B"}
Sep 13 12:32:05 wazuh-server opensearch-dashboards[2715]: {"type":"response","@timestamp":"2023-09-13T12:32:05Z","tags":[],"pid":2715,"method":"get","statusCode":200,"req":{"url":"/utils/configuration","method":"get","headers":{"host":"172.31.46.154","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/116.0","accept":"application/json, text/plain, */*","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate, br","osd-xsrf":"kibana","pattern":"wazuh-alerts-*","id":"default","connection":"keep-alive","referer":"https://172.31.46.154/app/wazuh","sec-fetch-dest":"empty","sec-fetch-mode":"cors","sec-fetch-site":"same-origin"},"remoteAddress":"10.10.0.159","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/116.0","referer":"https://172.31.46.154/app/wazuh"},"res":{"statusCode":200,"responseTime":8,"contentLength":9},"message":"GET /utils/configuration 200 8ms - 9.0B"}
Sep 13 12:32:05 wazuh-server opensearch-dashboards[2715]: {"type":"response","@timestamp":"2023-09-13T12:32:05Z","tags":[],"pid":2715,"method":"post","statusCode":200,"req":{"url":"/api/request","method":"post","headers":{"host":"172.31.46.154","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/116.0","accept":"application/json, text/plain, */*","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate, br","content-type":"application/json","osd-xsrf":"kibana","content-length":"52","origin":"https://172.31.46.154","connection":"keep-alive","referer":"https://172.31.46.154/app/wazuh","sec-fetch-dest":"empty","sec-fetch-mode":"cors","sec-fetch-site":"same-origin"},"remoteAddress":"10.10.0.159","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/116.0","referer":"https://172.31.46.154/app/wazuh"},"res":{"statusCode":200,"responseTime":17,"contentLength":9},"message":"POST /api/request 200 17ms - 9.0B"}
Sep 13 12:32:05 wazuh-server opensearch-dashboards[2715]: {"type":"response","@timestamp":"2023-09-13T12:32:05Z","tags":[],"pid":2715,"method":"post","statusCode":200,"req":{"url":"/api/request","method":"post","headers":{"host":"172.31.46.154","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/116.0","accept":"application/json, text/plain, */*","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate, br","content-type":"application/json","osd-xsrf":"kibana","content-length":"73","origin":"https://172.31.46.154","connection":"keep-alive","referer":"https://172.31.46.154/app/wazuh","sec-fetch-dest":"empty","sec-fetch-mode":"cors","sec-fetch-site":"same-origin"},"remoteAddress":"10.10.0.159","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/116.0","referer":"https://172.31.46.154/app/wazuh"},"res":{"statusCode":200,"responseTime":22,"contentLength":9},"message":"POST /api/request 200 22ms - 9.0B"}
Sep 13 12:32:05 wazuh-server opensearch-dashboards[2715]: {"type":"response","@timestamp":"2023-09-13T12:32:05Z","tags":[],"pid":2715,"method":"post","statusCode":200,"req":{"url":"/api/request","method":"post","headers":{"host":"172.31.46.154","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/116.0","accept":"application/json, text/plain, */*","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate, br","content-type":"application/json","osd-xsrf":"kibana","content-length":"66","origin":"https://172.31.46.154","connection":"keep-alive","referer":"https://172.31.46.154/app/wazuh","sec-fetch-dest":"empty","sec-fetch-mode":"cors","sec-fetch-site":"same-origin"},"remoteAddress":"10.10.0.159","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/116.0","referer":"https://172.31.46.154/app/wazuh"},"res":{"statusCode":200,"responseTime":22,"contentLength":9},"message":"POST /api/request 200 22ms - 9.0B"}
Sep 13 12:32:06 wazuh-server opensearch-dashboards[2715]: {"type":"response","@timestamp":"2023-09-13T12:32:06Z","tags":[],"pid":2715,"method":"post","statusCode":200,"req":{"url":"/api/request","method":"post","headers":{"host":"172.31.46.154","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/116.0","accept":"application/json, text/plain, */*","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate, br","content-type":"application/json","osd-xsrf":"kibana","content-length":"70","origin":"https://172.31.46.154","connection":"keep-alive","referer":"https://172.31.46.154/app/wazuh","sec-fetch-dest":"empty","sec-fetch-mode":"cors","sec-fetch-site":"same-origin"},"remoteAddress":"10.10.0.159","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/116.0","referer":"https://172.31.46.154/app/wazuh"},"res":{"statusCode":200,"responseTime":19,"contentLength":9},"message":"POST /api/request 200 19ms - 9.0B"}
Sep 13 12:32:06 wazuh-server opensearch-dashboards[2715]: {"type":"response","@timestamp":"2023-09-13T12:32:06Z","tags":[],"pid":2715,"method":"post","statusCode":200,"req":{"url":"/api/request","method":"post","headers":{"host":"172.31.46.154","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/116.0","accept":"application/json, text/plain, */*","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate, br","content-type":"application/json","osd-xsrf":"kibana","content-length":"66","origin":"https://172.31.46.154","connection":"keep-alive","referer":"https://172.31.46.154/app/wazuh","sec-fetch-dest":"empty","sec-fetch-mode":"cors","sec-fetch-site":"same-origin"},"remoteAddress":"10.10.0.159","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/116.0","referer":"https://172.31.46.154/app/wazuh"},"res":{"statusCode":200,"responseTime":22,"contentLength":9},"message":"POST /api/request 200 22ms - 9.0B"}
Sep 13 12:32:06 wazuh-server opensearch-dashboards[2715]: {"type":"response","@timestamp":"2023-09-13T12:32:06Z","tags":[],"pid":2715,"method":"post","statusCode":200,"req":{"url":"/api/request","method":"post","headers":{"host":"172.31.46.154","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/116.0","accept":"application/json, text/plain, */*","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate, br","content-type":"application/json","osd-xsrf":"kibana","content-length":"88","origin":"https://172.31.46.154","connection":"keep-alive","referer":"https://172.31.46.154/app/wazuh","sec-fetch-dest":"empty","sec-fetch-mode":"cors","sec-fetch-site":"same-origin"},"remoteAddress":"10.10.0.159","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/116.0","referer":"https://172.31.46.154/app/wazuh"},"res":{"statusCode":200,"responseTime":20,"contentLength":9},"message":"POST /api/request 200 20ms - 9.0B"}
Sep 13 12:32:07 wazuh-server opensearch-dashboards[2715]: {"type":"response","@timestamp":"2023-09-13T12:32:07Z","tags":[],"pid":2715,"method":"post","statusCode":200,"req":{"url":"/api/request","method":"post","headers":{"host":"172.31.46.154","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/116.0","accept":"application/json, text/plain, */*","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate, br","content-type":"application/json","osd-xsrf":"kibana","content-length":"79","origin":"https://172.31.46.154","connection":"keep-alive","referer":"https://172.31.46.154/app/wazuh","sec-fetch-dest":"empty","sec-fetch-mode":"cors","sec-fetch-site":"same-origin"},"remoteAddress":"10.10.0.159","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/116.0","referer":"https://172.31.46.154/app/wazuh"},"res":{"statusCode":200,"responseTime":20,"contentLength":9},"message":"POST /api/request 200 20ms - 9.0B"}
Sep 13 12:32:07 wazuh-server opensearch-dashboards[2715]: {"type":"response","@timestamp":"2023-09-13T12:32:07Z","tags":[],"pid":2715,"method":"post","statusCode":200,"req":{"url":"/api/request","method":"post","headers":{"host":"172.31.46.154","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/116.0","accept":"application/json, text/plain, */*","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate, br","content-type":"application/json","osd-xsrf":"kibana","content-length":"58","origin":"https://172.31.46.154","connection":"keep-alive","referer":"https://172.31.46.154/app/wazuh","sec-fetch-dest":"empty","sec-fetch-mode":"cors","sec-fetch-site":"same-origin"},"remoteAddress":"10.10.0.159","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/116.0","referer":"https://172.31.46.154/app/wazuh"},"res":{"statusCode":200,"responseTime":22,"contentLength":9},"message":"POST /api/request 200 22ms - 9.0B"}
[root@wazuh-server ~]# journalctl | grep wazuh-indexer
Sep 12 19:02:12 wazuh-server systemd[1]: Configuration file /usr/lib/systemd/system/wazuh-indexer.service is marked world-inaccessible. This has no effect as configuration data is accessible via APIs without restrictions. Proceeding anyway.
Sep 12 19:03:11 wazuh-server systemd-entrypoint[3208]: WARNING: System::setSecurityManager has been called by org.opensearch.bootstrap.OpenSearch (file:/usr/share/wazuh-indexer/lib/opensearch-2.8.0.jar)
Sep 12 19:03:19 wazuh-server systemd-entrypoint[3208]: WARNING: System::setSecurityManager has been called by org.opensearch.bootstrap.Security (file:/usr/share/wazuh-indexer/lib/opensearch-2.8.0.jar)
Sep 12 19:03:19 wazuh-server systemd-entrypoint[3208]: 2023-09-12 19:03:19,223 main ERROR Could not define attribute view on path "/var/log/wazuh-indexer/wazuh-cluster_server.json" got access denied ("java.lang.RuntimePermission" "accessUserInformation") java.security.AccessControlException: access denied ("java.lang.RuntimePermission" "accessUserInformation")
Sep 12 19:03:19 wazuh-server systemd-entrypoint[3208]: 2023-09-12 19:03:19,230 main ERROR Could not define attribute view on path "/var/log/wazuh-indexer/wazuh-cluster.log" got access denied ("java.lang.RuntimePermission" "accessUserInformation") java.security.AccessControlException: access denied ("java.lang.RuntimePermission" "accessUserInformation")
Sep 12 19:04:48 wazuh-server systemd[1]: Configuration file /usr/lib/systemd/system/wazuh-indexer.service is marked world-inaccessible. This has no effect as configuration data is accessible via APIs without restrictions. Proceeding anyway.
Sep 12 19:04:49 wazuh-server systemd[1]: Configuration file /usr/lib/systemd/system/wazuh-indexer.service is marked world-inaccessible. This has no effect as configuration data is accessible via APIs without restrictions. Proceeding anyway.
Sep 12 19:44:30 wazuh-server systemd[1]: Configuration file /usr/lib/systemd/system/wazuh-indexer-performance-analyzer.service is marked world-inaccessible. This has no effect as configuration data is accessible via APIs without restrictions. Proceeding anyway.
Sep 12 19:44:31 wazuh-server systemd[1]: Configuration file /usr/lib/systemd/system/wazuh-indexer.service is marked world-inaccessible. This has no effect as configuration data is accessible via APIs without restrictions. Proceeding anyway.
Sep 12 19:44:31 wazuh-server systemd[1]: Configuration file /usr/lib/systemd/system/wazuh-indexer-performance-analyzer.service is marked world-inaccessible. This has no effect as configuration data is accessible via APIs without restrictions. Proceeding anyway.
Sep 12 19:44:31 wazuh-server systemd[1]: Configuration file /usr/lib/systemd/system/wazuh-indexer.service is marked world-inaccessible. This has no effect as configuration data is accessible via APIs without restrictions. Proceeding anyway.
Sep 12 19:44:32 wazuh-server systemd[1]: Configuration file /usr/lib/systemd/system/wazuh-indexer-performance-analyzer.service is marked world-inaccessible. This has no effect as configuration data is accessible via APIs without restrictions. Proceeding anyway.
Sep 12 19:44:32 wazuh-server systemd[1]: Configuration file /usr/lib/systemd/system/wazuh-indexer.service is marked world-inaccessible. This has no effect as configuration data is accessible via APIs without restrictions. Proceeding anyway.
Sep 13 11:21:43 wazuh-server systemd[1]: Configuration file /usr/lib/systemd/system/wazuh-indexer.service is marked world-inaccessible. This has no effect as configuration data is accessible via APIs without restrictions. Proceeding anyway.
Sep 13 11:21:52 wazuh-server systemd-entrypoint[3208]: WARNING: System::setSecurityManager has been called by org.opensearch.bootstrap.OpenSearch (file:/usr/share/wazuh-indexer/lib/opensearch-2.8.0.jar)
Sep 13 11:21:54 wazuh-server systemd-entrypoint[3208]: WARNING: System::setSecurityManager has been called by org.opensearch.bootstrap.Security (file:/usr/share/wazuh-indexer/lib/opensearch-2.8.0.jar)
Sep 13 11:21:54 wazuh-server systemd-entrypoint[3208]: 2023-09-13 11:21:54,477 main ERROR Could not define attribute view on path "/var/log/wazuh-indexer/wazuh-cluster_server.json" got access denied ("java.lang.RuntimePermission" "accessUserInformation") java.security.AccessControlException: access denied ("java.lang.RuntimePermission" "accessUserInformation")
Sep 13 11:21:54 wazuh-server systemd-entrypoint[3208]: 2023-09-13 11:21:54,498 main ERROR Could not define attribute view on path "/var/log/wazuh-indexer/wazuh-cluster.log" got access denied ("java.lang.RuntimePermission" "accessUserInformation") java.security.AccessControlException: access denied ("java.lang.RuntimePermission" "accessUserInformation")
|
@Deblintrake09 Was the Wazuh stack working correctly despite these errors? |
@c-bordon The AMI behaved correctly. As it can be seen in the referenced issue in the original comment. This only was present on the AMI but not on the OVA, so we did not replicate it on our end. |
We are reopening this issue since these logs have appeared again in the OVA and AMI in 4.8.0 RC 1, in wazuh/wazuh#23261. |
I tried to reproduce the errors presented in the issue but did not get them. I got other errors and warnings, which I uploaded to the Wazuh indexer team in this issue, but they were all known errors which have already been fixed in future releases. I ask if you can provide more information regarding the steps and tools you have used to obtain the errors. |
Describe the bug
While doing testing on the
AMI
for Release 4.6.0 - Alpha 1, the logs for Wazuh Dashboard presented an unexpected error log:This log was not found when launching OVA instances. Further research is needed on this error:
LOGS:
The text was updated successfully, but these errors were encountered: