--------------------------------
02/04/2024 10:32:35 DEBUG: Checking root permissions.
02/04/2024 10:32:35 DEBUG: Checking sudo package.
02/04/2024 10:32:35 INFO: Starting Wazuh installation assistant. Wazuh version: 4.9.0
02/04/2024 10:32:35 INFO: Verbose logging redirected to /var/log/wazuh-install.log
02/04/2024 10:32:35 DEBUG: YUM package manager will be used.
02/04/2024 10:32:35 DEBUG: Checking system distribution.
02/04/2024 10:32:35 DEBUG: Detected distribution name: amzn
02/04/2024 10:32:35 DEBUG: Detected distribution version: 2
02/04/2024 10:32:35 DEBUG: Installing check dependencies.
02/04/2024 10:32:35 DEBUG: Checking Wazuh installation.
02/04/2024 10:32:36 DEBUG: Checking system architecture.
02/04/2024 10:32:36 INFO: Verifying that your system meets the recommended minimum hardware requirements.
02/04/2024 10:32:36 DEBUG: CPU cores detected: 2
02/04/2024 10:32:36 DEBUG: Free RAM memory detected: 7869
02/04/2024 10:32:36 INFO: Wazuh web interface port will be 443.
02/04/2024 10:32:36 DEBUG: Checking ports availability.
02/04/2024 10:32:36 DEBUG: Installing prerequisites dependencies.
02/04/2024 10:32:36 DEBUG: Checking curl tool version.
02/04/2024 10:32:36 DEBUG: Adding the Wazuh repository.
[wazuh]
gpgcheck=1
gpgkey=https://packages-dev.wazuh.com/key/GPG-KEY-WAZUH
enabled=1
name=EL-${releasever} - Wazuh
baseurl=https://packages-dev.wazuh.com/staging/yum/
protect=1
02/04/2024 10:32:36 INFO: Wazuh development repository added.
02/04/2024 10:32:36 INFO: --- Configuration files ---
02/04/2024 10:32:36 INFO: Generating configuration files.
02/04/2024 10:32:36 DEBUG: Creating Wazuh certificates.
02/04/2024 10:32:36 DEBUG: Reading configuration file.
02/04/2024 10:32:36 DEBUG: Checking if 127.0.0.1 is private.
02/04/2024 10:32:36 DEBUG: Checking if 127.0.0.1 is private.
02/04/2024 10:32:36 DEBUG: Checking if 127.0.0.1 is private.
02/04/2024 10:32:37 INFO: Generating the root certificate.
02/04/2024 10:32:37 INFO: Generating Admin certificates.
02/04/2024 10:32:37 DEBUG: Generating Admin private key.
02/04/2024 10:32:37 DEBUG: Converting Admin private key to PKCS8 format.
02/04/2024 10:32:37 DEBUG: Generating Admin CSR.
02/04/2024 10:32:37 DEBUG: Creating Admin certificate.
02/04/2024 10:32:37 INFO: Generating Wazuh indexer certificates.
02/04/2024 10:32:37 DEBUG: Creating the certificates for wazuh-indexer indexer node.
02/04/2024 10:32:37 DEBUG: Generating certificate configuration.
02/04/2024 10:32:37 DEBUG: Creating the Wazuh indexer tmp key pair.
02/04/2024 10:32:37 DEBUG: Creating the Wazuh indexer certificates.
02/04/2024 10:32:37 INFO: Generating Filebeat certificates.
02/04/2024 10:32:37 DEBUG: Generating the certificates for wazuh-server server node.
02/04/2024 10:32:37 DEBUG: Generating certificate configuration.
02/04/2024 10:32:37 DEBUG: Creating the Wazuh server tmp key pair.
02/04/2024 10:32:37 DEBUG: Creating the Wazuh server certificates.
02/04/2024 10:32:37 INFO: Generating Wazuh dashboard certificates.
02/04/2024 10:32:37 DEBUG: Generating certificate configuration.
02/04/2024 10:32:37 DEBUG: Creating the Wazuh dashboard tmp key pair.
02/04/2024 10:32:38 DEBUG: Creating the Wazuh dashboard certificates.
02/04/2024 10:32:38 DEBUG: Cleaning certificate files.
02/04/2024 10:32:38 DEBUG: Generating password file.
02/04/2024 10:32:38 DEBUG: Generating random passwords.
02/04/2024 10:32:38 INFO: Created wazuh-install-files.tar. It contains the Wazuh cluster key, certificates, and passwords necessary for installation.
02/04/2024 10:32:38 DEBUG: Extracting Wazuh configuration.
02/04/2024 10:32:38 DEBUG: Reading configuration file.
02/04/2024 10:32:38 DEBUG: Checking if 127.0.0.1 is private.
02/04/2024 10:32:38 DEBUG: Checking if 127.0.0.1 is private.
02/04/2024 10:32:38 DEBUG: Checking if 127.0.0.1 is private.
02/04/2024 10:32:38 INFO: --- Wazuh indexer ---
02/04/2024 10:32:38 INFO: Starting Wazuh indexer installation.
Loaded plugins: extras_suggestions, langpacks, priorities, update-motd Resolving Dependencies --> Running transaction check ---> Package wazuh-indexer.x86_64 0:4.9.0-1 will be installed --> Finished D
ependency Resolution Dependencies Resolved ================================================================================ Package Arch Version Repository Size =======================================
========================================= Installing: wazuh-indexer x86_64 4.9.0-1 wazuh 743 M Transaction Summary ================================================================================ Inst
all 1 Package Total download size: 743 M Installed size: 1.0 G Downloading packages: Running transaction check Running transaction test Transaction test succeeded Running transaction Installing : wazu
h-indexer-4.9.0-1.x86_64 1/1 Created opensearch keystore in /etc/wazuh-indexer/opensearch.keystore Verifying : wazuh-indexer-4.9.0-1.x86_64 1/1 Installed: wazuh-indexer.x86_64 0:4.9.0-1 Complete!
02/04/2024 10:34:03 DEBUG: Checking Wazuh installation.
02/04/2024 10:34:03 DEBUG: There are Wazuh indexer remaining files.
02/04/2024 10:34:03 INFO: Wazuh indexer installation finished.
02/04/2024 10:34:03 DEBUG: Configuring Wazuh indexer.
02/04/2024 10:34:03 DEBUG: Copying Wazuh indexer certificates.
02/04/2024 10:34:03 INFO: Wazuh indexer post-install configuration finished.
02/04/2024 10:34:03 INFO: Starting service wazuh-indexer.
Created symlink from /etc/systemd/system/multi-user.target.wants/wazuh-indexer.service to /usr/lib/systemd/system/wazuh-indexer.service.
02/04/2024 10:34:33 INFO: wazuh-indexer service started.
02/04/2024 10:34:33 INFO: Initializing Wazuh indexer cluster security settings.
**************************************************************************
** This tool will be deprecated in the next major release of OpenSearch **
** https://github.com/opensearch-project/security/issues/1755           **
**************************************************************************
Security Admin v7
Will connect to 127.0.0.1:9200 ... done
Connected as "CN=admin,OU=Wazuh,O=Wazuh,L=California,C=US"
OpenSearch Version: 2.10.0
Contacting opensearch cluster 'opensearch' and wait for YELLOW clusterstate ...
Clustername: wazuh-cluster
Clusterstate: GREEN
Number of nodes: 1
Number of data nodes: 1
.opendistro_security index does not exists, attempt to create it ... done (0-all replicas)
Populate config from /etc/wazuh-indexer/opensearch-security/
Will update '/config' with /etc/wazuh-indexer/opensearch-security/config.yml 
   SUCC: Configuration for 'config' created or updated
Will update '/roles' with /etc/wazuh-indexer/opensearch-security/roles.yml 
   SUCC: Configuration for 'roles' created or updated
Will update '/rolesmapping' with /etc/wazuh-indexer/opensearch-security/roles_mapping.yml 
   SUCC: Configuration for 'rolesmapping' created or updated
Will update '/internalusers' with /etc/wazuh-indexer/opensearch-security/internal_users.yml 
   SUCC: Configuration for 'internalusers' created or updated
Will update '/actiongroups' with /etc/wazuh-indexer/opensearch-security/action_groups.yml 
   SUCC: Configuration for 'actiongroups' created or updated
Will update '/tenants' with /etc/wazuh-indexer/opensearch-security/tenants.yml 
   SUCC: Configuration for 'tenants' created or updated
Will update '/nodesdn' with /etc/wazuh-indexer/opensearch-security/nodes_dn.yml 
   SUCC: Configuration for 'nodesdn' created or updated
Will update '/whitelist' with /etc/wazuh-indexer/opensearch-security/whitelist.yml 
   SUCC: Configuration for 'whitelist' created or updated
Will update '/audit' with /etc/wazuh-indexer/opensearch-security/audit.yml 
   SUCC: Configuration for 'audit' created or updated
Will update '/allowlist' with /etc/wazuh-indexer/opensearch-security/allowlist.yml 
   SUCC: Configuration for 'allowlist' created or updated
SUCC: Expected 10 config types for node {"updated_config_types":["allowlist","tenants","rolesmapping","nodesdn","audit","roles","whitelist","internalusers","actiongroups","config"],"updated_config_siz
e":10,"message":null} is 10 (["allowlist","tenants","rolesmapping","nodesdn","audit","roles","whitelist","internalusers","actiongroups","config"]) due to: null
Done with success
02/04/2024 10:34:44 INFO: Wazuh indexer cluster security configuration initialized.
02/04/2024 10:34:44 INFO: Wazuh indexer cluster initialized.
02/04/2024 10:34:44 INFO: --- Wazuh server ---
02/04/2024 10:34:44 INFO: Starting the Wazuh manager installation.
Loaded plugins: extras_suggestions, langpacks, priorities, update-motd Resolving Dependencies --> Running transaction check ---> Package wazuh-manager.x86_64 0:4.9.0-1 will be installed --> Finished D
ependency Resolution Dependencies Resolved ================================================================================ Package Arch Version Repository Size =======================================
========================================= Installing: wazuh-manager x86_64 4.9.0-1 wazuh 291 M Transaction Summary ================================================================================ Inst
all 1 Package Total download size: 291 M Installed size: 880 M Downloading packages: Running transaction check Running transaction test Transaction test succeeded Running transaction Installing : wazu
h-manager-4.9.0-1.x86_64 1/1 Verifying : wazuh-manager-4.9.0-1.x86_64 1/1 Installed: wazuh-manager.x86_64 0:4.9.0-1 Complete!
02/04/2024 10:35:20 DEBUG: Checking Wazuh installation.
02/04/2024 10:35:20 DEBUG: There are Wazuh remaining files.
02/04/2024 10:35:20 DEBUG: There are Wazuh indexer remaining files.
02/04/2024 10:35:21 INFO: Wazuh manager installation finished.
02/04/2024 10:35:21 DEBUG: Configuring Wazuh manager.
02/04/2024 10:35:21 DEBUG: Setting provisional Wazuh indexer password.
02/04/2024 10:35:21 INFO: Wazuh manager vulnerability detection configuration finished.
02/04/2024 10:35:21 INFO: Starting service wazuh-manager.
Created symlink from /etc/systemd/system/multi-user.target.wants/wazuh-manager.service to /usr/lib/systemd/system/wazuh-manager.service.
02/04/2024 10:35:39 INFO: wazuh-manager service started.
02/04/2024 10:35:39 INFO: Starting Filebeat installation.
Loaded plugins: extras_suggestions, langpacks, priorities, update-motd Resolving Dependencies --> Running transaction check ---> Package filebeat.x86_64 0:7.10.2-1 will be installed --> Finished Depen
dency Resolution Dependencies Resolved ================================================================================ Package Arch Version Repository Size ===========================================
===================================== Installing: filebeat x86_64 7.10.2-1 wazuh 21 M Transaction Summary ================================================================================ Install 1 Pac
kage Total download size: 21 M Installed size: 70 M Downloading packages: Running transaction check Running transaction test Transaction test succeeded Running transaction Installing : filebeat-7.10.2
-1.x86_64 1/1 Verifying : filebeat-7.10.2-1.x86_64 1/1 Installed: filebeat.x86_64 0:7.10.2-1 Complete!
02/04/2024 10:35:48 DEBUG: Checking Wazuh installation.
02/04/2024 10:35:49 DEBUG: There are Wazuh remaining files.
02/04/2024 10:35:49 DEBUG: There are Wazuh indexer remaining files.
02/04/2024 10:35:49 DEBUG: There are Filebeat remaining files.
02/04/2024 10:35:49 INFO: Filebeat installation finished.
02/04/2024 10:35:49 DEBUG: Configuring Filebeat.
02/04/2024 10:35:49 DEBUG: Filebeat template was download successfully.
wazuh/
wazuh/_meta/
wazuh/_meta/docs.asciidoc
wazuh/_meta/fields.yml
wazuh/_meta/config.yml
wazuh/alerts/
wazuh/alerts/config/
wazuh/alerts/config/alerts.yml
wazuh/alerts/manifest.yml
wazuh/alerts/ingest/
wazuh/alerts/ingest/pipeline.json
wazuh/module.yml
wazuh/archives/
wazuh/archives/config/
wazuh/archives/config/archives.yml
wazuh/archives/manifest.yml
wazuh/archives/ingest/
wazuh/archives/ingest/pipeline.json
02/04/2024 10:35:49 DEBUG: Filebeat module was downloaded successfully.
02/04/2024 10:35:49 DEBUG: Copying Filebeat certificates.
Created filebeat keystore
Successfully updated the keystore
Successfully updated the keystore
02/04/2024 10:35:50 INFO: Filebeat post-install configuration finished.
02/04/2024 10:35:50 INFO: Starting service filebeat.
Created symlink from /etc/systemd/system/multi-user.target.wants/filebeat.service to /usr/lib/systemd/system/filebeat.service.
02/04/2024 10:35:50 INFO: filebeat service started.
02/04/2024 10:35:50 INFO: --- Wazuh dashboard ---
02/04/2024 10:35:50 INFO: Starting Wazuh dashboard installation.
Loaded plugins: extras_suggestions, langpacks, priorities, update-motd Existing lock /var/run/yum.pid: another copy is running as pid 11887. Another app is currently holding the yum lock; waiting for 
it to exit... The other application is: yum Memory : 34 M RSS (254 MB VSZ) Started: Tue Apr 2 10:35:50 2024 - 00:02 ago State : Running, pid: 11887 Another app is currently holding the yum lock; waiti
ng for it to exit... The other application is: yum Memory : 108 M RSS (327 MB VSZ) Started: Tue Apr 2 10:35:50 2024 - 00:04 ago State : Running, pid: 11887 Another app is currently holding the yum loc
k; waiting for it to exit... The other application is: yum Memory : 157 M RSS (377 MB VSZ) Started: Tue Apr 2 10:35:50 2024 - 00:06 ago State : Running, pid: 11887 Another app is currently holding the
 yum lock; waiting for it to exit... The other application is: yum Memory : 183 M RSS (404 MB VSZ) Started: Tue Apr 2 10:35:50 2024 - 00:08 ago State : Running, pid: 11887 Another app is currently hol
ding the yum lock; waiting for it to exit... The other application is: yum Memory : 187 M RSS (410 MB VSZ) Started: Tue Apr 2 10:35:50 2024 - 00:10 ago State : Running, pid: 11887 Another app is curre
ntly holding the yum lock; waiting for it to exit... The other application is: yum Memory : 198 M RSS (419 MB VSZ) Started: Tue Apr 2 10:35:50 2024 - 00:12 ago State : Running, pid: 11887 Another app 
is currently holding the yum lock; waiting for it to exit... The other application is: yum Memory : 198 M RSS (419 MB VSZ) Started: Tue Apr 2 10:35:50 2024 - 00:14 ago State : Running, pid: 11887 Anot
her app is currently holding the yum lock; waiting for it to exit... The other application is: yum Memory : 199 M RSS (419 MB VSZ) Started: Tue Apr 2 10:35:50 2024 - 00:16 ago State : Running, pid: 11
887 No package wazuh-dashboard-4.9.0-* available. Error: Nothing to do
02/04/2024 10:36:26 DEBUG: Checking Wazuh installation.
02/04/2024 10:36:26 DEBUG: There are Wazuh remaining files.
02/04/2024 10:36:27 DEBUG: There are Wazuh indexer remaining files.
02/04/2024 10:36:27 DEBUG: There are Filebeat remaining files.
02/04/2024 10:36:27 ERROR: Wazuh dashboard installation failed.
02/04/2024 10:36:27 INFO: --- Removing existing Wazuh installation ---
02/04/2024 10:36:27 INFO: Removing Wazuh manager.
Loaded plugins: extras_suggestions, langpacks, priorities, update-motd
Resolving Dependencies
--> Running transaction check
---> Package wazuh-manager.x86_64 0:4.9.0-1 will be erased
--> Finished Dependency Resolution

Dependencies Resolved

================================================================================
 Package                Arch            Version           Repository       Size
================================================================================
Removing:
 wazuh-manager          x86_64          4.9.0-1           @wazuh          880 M

Transaction Summary
================================================================================
Remove  1 Package

Installed size: 880 M
Downloading packages:
Running transaction check
Running transaction test
Transaction test succeeded
Running transaction
  Erasing    : wazuh-manager-4.9.0-1.x86_64                                 1/1 
warning: file /var/ossec/queue/vd: remove failed: No such file or directory
warning: /var/ossec/etc/ossec.conf saved as /var/ossec/etc/ossec.conf.rpmsave
  Verifying  : wazuh-manager-4.9.0-1.x86_64                                 1/1 

Removed:
  wazuh-manager.x86_64 0:4.9.0-1                                                

Complete!
02/04/2024 10:36:38 INFO: Wazuh manager removed.
02/04/2024 10:36:38 INFO: Removing Wazuh indexer.
Loaded plugins: extras_suggestions, langpacks, priorities, update-motd
Resolving Dependencies
--> Running transaction check
---> Package wazuh-indexer.x86_64 0:4.9.0-1 will be erased
--> Finished Dependency Resolution

Dependencies Resolved

================================================================================
 Package                Arch            Version           Repository       Size
================================================================================
Removing:
 wazuh-indexer          x86_64          4.9.0-1           @wazuh          1.0 G

Transaction Summary
================================================================================
Remove  1 Package

Installed size: 1.0 G
Downloading packages:
Running transaction check
Running transaction test
Transaction test succeeded
Running transaction
Stopping wazuh-indexer service... OK
  Erasing    : wazuh-indexer-4.9.0-1.x86_64                                 1/1 
warning: /etc/wazuh-indexer/opensearch.yml saved as /etc/wazuh-indexer/opensearch.yml.rpmsave
warning: /etc/wazuh-indexer/jvm.options saved as /etc/wazuh-indexer/jvm.options.rpmsave
  Verifying  : wazuh-indexer-4.9.0-1.x86_64                                 1/1 

Removed:
  wazuh-indexer.x86_64 0:4.9.0-1                                                

Complete!
02/04/2024 10:36:40 WARNING: The Wazuh indexer package could not be removed.
02/04/2024 10:36:40 INFO: Removing Filebeat.
Loaded plugins: extras_suggestions, langpacks, priorities, update-motd
Resolving Dependencies
--> Running transaction check
---> Package filebeat.x86_64 0:7.10.2-1 will be erased
--> Finished Dependency Resolution

Dependencies Resolved

================================================================================
 Package            Arch             Version             Repository        Size
================================================================================
Removing:
 filebeat           x86_64           7.10.2-1            @wazuh            70 M

Transaction Summary
================================================================================
Remove  1 Package

Installed size: 70 M
Downloading packages:
Running transaction check
Running transaction test
Transaction test succeeded
Running transaction
  Erasing    : filebeat-7.10.2-1.x86_64                                     1/1 
warning: /etc/filebeat/filebeat.yml saved as /etc/filebeat/filebeat.yml.rpmsave
  Verifying  : filebeat-7.10.2-1.x86_64                                     1/1 

Removed:
  filebeat.x86_64 0:7.10.2-1                                                    

Complete!
02/04/2024 10:36:41 WARNING: The Filebeat package could not be removed.
02/04/2024 10:36:41 DEBUG: Removing GPG key from system.
02/04/2024 10:36:42 INFO: Installation cleaned. Check the /var/log/wazuh-install.log file to learn more about the issue.