--------------------------------
02/04/2024 10:34:26 DEBUG: Checking root permissions.
02/04/2024 10:34:26 DEBUG: Checking sudo package.
02/04/2024 10:34:26 INFO: Starting Wazuh installation assistant. Wazuh version: 4.9.0
02/04/2024 10:34:26 INFO: Verbose logging redirected to /var/log/wazuh-install.log
02/04/2024 10:34:26 DEBUG: APT package manager will be used.
02/04/2024 10:34:26 DEBUG: Checking system distribution.
02/04/2024 10:34:26 DEBUG: Detected distribution name: ubuntu
02/04/2024 10:34:26 DEBUG: Detected distribution version: 20
02/04/2024 10:34:26 DEBUG: Installing check dependencies.
Hit:1 http://us-east-1.ec2.archive.ubuntu.com/ubuntu focal InRelease
Hit:2 http://us-east-1.ec2.archive.ubuntu.com/ubuntu focal-updates InRelease
Hit:3 http://us-east-1.ec2.archive.ubuntu.com/ubuntu focal-backports InRelease
Hit:4 https://download.docker.com/linux/ubuntu focal InRelease
Hit:5 http://security.ubuntu.com/ubuntu focal-security InRelease
Hit:6 http://ppa.launchpad.net/deadsnakes/ppa/ubuntu focal InRelease
Reading package lists...
02/04/2024 10:34:32 DEBUG: Checking Wazuh installation.
02/04/2024 10:34:34 DEBUG: Checking system architecture.
02/04/2024 10:34:34 INFO: Verifying that your system meets the recommended minimum hardware requirements.
02/04/2024 10:34:34 DEBUG: CPU cores detected: 2
02/04/2024 10:34:34 DEBUG: Free RAM memory detected: 7871
02/04/2024 10:34:34 INFO: Wazuh web interface port will be 443.
02/04/2024 10:34:35 DEBUG: Checking ports availability.
Hit:1 http://us-east-1.ec2.archive.ubuntu.com/ubuntu focal InRelease
Hit:2 http://us-east-1.ec2.archive.ubuntu.com/ubuntu focal-updates InRelease
Hit:3 http://us-east-1.ec2.archive.ubuntu.com/ubuntu focal-backports InRelease
Hit:4 https://download.docker.com/linux/ubuntu focal InRelease
Hit:5 http://security.ubuntu.com/ubuntu focal-security InRelease
Hit:6 http://ppa.launchpad.net/deadsnakes/ppa/ubuntu focal InRelease
Reading package lists...
02/04/2024 10:34:39 DEBUG: Installing prerequisites dependencies.
02/04/2024 10:34:44 INFO: --- Dependencies ----
02/04/2024 10:34:44 INFO: Installing debhelper.
Reading package lists... Building dependency tree... Reading state information... The following packages were automatically installed and are no longer required: libfwupdplugin1 linux-aws-5.8-headers-
5.8.0-1038 linux-headers-5.8.0-1038-aws linux-image-5.8.0-1038-aws linux-modules-5.8.0-1038-aws Use 'sudo apt autoremove' to remove them. The following additional packages will be installed: autoconf 
automake autopoint autotools-dev dh-autoreconf dh-strip-nondeterminism dwz gettext intltool-debian libarchive-cpio-perl libarchive-zip-perl libcroco3 libdebhelper-perl libfile-stripnondeterminism-perl
 libltdl-dev libmail-sendmail-perl libsub-override-perl libsys-hostname-long-perl libtool m4 po-debconf Suggested packages: autoconf-archive gnu-standards autoconf-doc dh-make gettext-doc libasprintf-
dev libgettextpo-dev libtool-doc gfortran | fortran95-compiler gcj-jdk m4-doc libmail-box-perl The following NEW packages will be installed: autoconf automake autopoint autotools-dev debhelper dh-auto
reconf dh-strip-nondeterminism dwz gettext intltool-debian libarchive-cpio-perl libarchive-zip-perl libcroco3 libdebhelper-perl libfile-stripnondeterminism-perl libltdl-dev libmail-sendmail-perl libsu
b-override-perl libsys-hostname-long-perl libtool m4 po-debconf 0 upgraded, 22 newly installed, 0 to remove and 266 not upgraded. Need to get 4,324 kB of archives. After this operation, 14.4 MB of add
itional disk space will be used. Get:1 http://us-east-1.ec2.archive.ubuntu.com/ubuntu focal/main amd64 m4 amd64 1.4.18-4 [199 kB] Get:2 http://us-east-1.ec2.archive.ubuntu.com/ubuntu focal/main amd64 
autoconf all 2.69-11.1 [321 kB] Get:3 http://us-east-1.ec2.archive.ubuntu.com/ubuntu focal/main amd64 autotools-dev all 20180224.1 [39.6 kB] Get:4 http://us-east-1.ec2.archive.ubuntu.com/ubuntu focal/
main amd64 automake all 1:1.16.1-4ubuntu6 [522 kB] Get:5 http://us-east-1.ec2.archive.ubuntu.com/ubuntu focal/main amd64 autopoint all 0.19.8.1-10build1 [412 kB] Get:6 http://us-east-1.ec2.archive.ubu
ntu.com/ubuntu focal/main amd64 libtool all 2.4.6-14 [161 kB] Get:7 http://us-east-1.ec2.archive.ubuntu.com/ubuntu focal/main amd64 dh-autoreconf all 19 [16.1 kB] Get:8 http://us-east-1.ec2.archive.ub
untu.com/ubuntu focal/main amd64 libdebhelper-perl all 12.10ubuntu1 [62.1 kB] Get:9 http://us-east-1.ec2.archive.ubuntu.com/ubuntu focal/main amd64 libarchive-zip-perl all 1.67-2 [90.5 kB] Get:10 http
://us-east-1.ec2.archive.ubuntu.com/ubuntu focal/main amd64 libsub-override-perl all 0.09-2 [9,532 B] Get:11 http://us-east-1.ec2.archive.ubuntu.com/ubuntu focal/main amd64 libfile-stripnondeterminism
-perl all 1.7.0-1 [15.9 kB] Get:12 http://us-east-1.ec2.archive.ubuntu.com/ubuntu focal/main amd64 dh-strip-nondeterminism all 1.7.0-1 [5,228 B] Get:13 http://us-east-1.ec2.archive.ubuntu.com/ubuntu f
ocal/main amd64 dwz amd64 0.13-5 [151 kB] Get:14 http://us-east-1.ec2.archive.ubuntu.com/ubuntu focal/main amd64 libcroco3 amd64 0.6.13-1 [82.5 kB] Get:15 http://us-east-1.ec2.archive.ubuntu.com/ubunt
u focal/main amd64 gettext amd64 0.19.8.1-10build1 [895 kB] Get:16 http://us-east-1.ec2.archive.ubuntu.com/ubuntu focal/main amd64 intltool-debian all 0.35.0+20060710.5 [24.9 kB] Get:17 http://us-east
-1.ec2.archive.ubuntu.com/ubuntu focal/main amd64 po-debconf all 1.0.21 [233 kB] Get:18 http://us-east-1.ec2.archive.ubuntu.com/ubuntu focal/main amd64 debhelper all 12.10ubuntu1 [877 kB] Get:19 http:
//us-east-1.ec2.archive.ubuntu.com/ubuntu focal/main amd64 libarchive-cpio-perl all 0.10-1 [9,644 B] Get:20 http://us-east-1.ec2.archive.ubuntu.com/ubuntu focal/main amd64 libltdl-dev amd64 2.4.6-14 [
162 kB] Get:21 http://us-east-1.ec2.archive.ubuntu.com/ubuntu focal/main amd64 libsys-hostname-long-perl all 1.5-1 [11.7 kB] Get:22 http://us-east-1.ec2.archive.ubuntu.com/ubuntu focal/main amd64 libm
ail-sendmail-perl all 0.80-1 [22.6 kB] Fetched 4,324 kB in 0s (21.9 MB/s) Selecting previously unselected package m4.
 (Reading database ... 
(Reading database ... 5%
(Reading database ... 10%
(Reading database ... 15%
(Reading database ... 20%
(Reading database ... 25%
(Reading database ... 30%
(Reading database ... 35%
(Reading database ... 40%
(Reading database ... 45%
(Reading database ... 50%
(Reading database ... 55%
(Reading database ... 60%
(Reading database ... 65%
(Reading database ... 70%
(Reading database ... 75%
(Reading database ... 80%
(Reading database ... 85%
(Reading database ... 90%
(Reading database ... 95%
(Reading database ... 100%
(Reading database ... 176417 files and directories currently installed.)
 Preparing to unpack .../00-m4_1.4.18-4_amd64.deb ...
 Unpacking m4 (1.4.18-4) ...
 Selecting previously unselected package autoconf.
 Preparing to unpack .../01-autoconf_2.69-11.1_all.deb ...
 Unpacking autoconf (2.69-11.1) ...
 Selecting previously unselected package autotools-dev.
 Preparing to unpack .../02-autotools-dev_20180224.1_all.deb ...
 Unpacking autotools-dev (20180224.1) ...
 Selecting previously unselected package automake.
 Preparing to unpack .../03-automake_1%3a1.16.1-4ubuntu6_all.deb ...
 Unpacking automake (1:1.16.1-4ubuntu6) ...
 Selecting previously unselected package autopoint.
 Preparing to unpack .../04-autopoint_0.19.8.1-10build1_all.deb ...
 Unpacking autopoint (0.19.8.1-10build1) ...
 Selecting previously unselected package libtool.
 Preparing to unpack .../05-libtool_2.4.6-14_all.deb ...
 Unpacking libtool (2.4.6-14) ...
 Selecting previously unselected package dh-autoreconf.
 Preparing to unpack .../06-dh-autoreconf_19_all.deb ...
 Unpacking dh-autoreconf (19) ...
 Selecting previously unselected package libdebhelper-perl.
 Preparing to unpack .../07-libdebhelper-perl_12.10ubuntu1_all.deb ...
 Unpacking libdebhelper-perl (12.10ubuntu1) ...
 Selecting previously unselected package libarchive-zip-perl.
 Preparing to unpack .../08-libarchive-zip-perl_1.67-2_all.deb ...
 Unpacking libarchive-zip-perl (1.67-2) ...
 Selecting previously unselected package libsub-override-perl.
 Preparing to unpack .../09-libsub-override-perl_0.09-2_all.deb ...
 Unpacking libsub-override-perl (0.09-2) ...
 Selecting previously unselected package libfile-stripnondeterminism-perl.
 Preparing to unpack .../10-libfile-stripnondeterminism-perl_1.7.0-1_all.deb ...
 Unpacking libfile-stripnondeterminism-perl (1.7.0-1) ...
 Selecting previously unselected package dh-strip-nondeterminism.
 Preparing to unpack .../11-dh-strip-nondeterminism_1.7.0-1_all.deb ...
 Unpacking dh-strip-nondeterminism (1.7.0-1) ...
 Selecting previously unselected package dwz.
 Preparing to unpack .../12-dwz_0.13-5_amd64.deb ...
 Unpacking dwz (0.13-5) ...
 Selecting previously unselected package libcroco3:amd64.
 Preparing to unpack .../13-libcroco3_0.6.13-1_amd64.deb ...
 Unpacking libcroco3:amd64 (0.6.13-1) ...
 Selecting previously unselected package gettext.
 Preparing to unpack .../14-gettext_0.19.8.1-10build1_amd64.deb ...
 Unpacking gettext (0.19.8.1-10build1) ...
 Selecting previously unselected package intltool-debian.
 Preparing to unpack .../15-intltool-debian_0.35.0+20060710.5_all.deb ...
 Unpacking intltool-debian (0.35.0+20060710.5) ...
 Selecting previously unselected package po-debconf.
 Preparing to unpack .../16-po-debconf_1.0.21_all.deb ...
 Unpacking po-debconf (1.0.21) ...
 Selecting previously unselected package debhelper.
 Preparing to unpack .../17-debhelper_12.10ubuntu1_all.deb ...
 Unpacking debhelper (12.10ubuntu1) ...
 Selecting previously unselected package libarchive-cpio-perl.
 Preparing to unpack .../18-libarchive-cpio-perl_0.10-1_all.deb ...
 Unpacking libarchive-cpio-perl (0.10-1) ...
 Selecting previously unselected package libltdl-dev:amd64.
 Preparing to unpack .../19-libltdl-dev_2.4.6-14_amd64.deb ...
 Unpacking libltdl-dev:amd64 (2.4.6-14) ...
 Selecting previously unselected package libsys-hostname-long-perl.
 Preparing to unpack .../20-libsys-hostname-long-perl_1.5-1_all.deb ...
 Unpacking libsys-hostname-long-perl (1.5-1) ...
 Selecting previously unselected package libmail-sendmail-perl.
 Preparing to unpack .../21-libmail-sendmail-perl_0.80-1_all.deb ...
 Unpacking libmail-sendmail-perl (0.80-1) ...
 Setting up libarchive-zip-perl (1.67-2) ...
 Setting up libdebhelper-perl (12.10ubuntu1) ...
 Setting up m4 (1.4.18-4) ...
 Setting up autotools-dev (20180224.1) ...
 Setting up autopoint (0.19.8.1-10build1) ...
 Setting up libcroco3:amd64 (0.6.13-1) ...
 Setting up autoconf (2.69-11.1) ...
 Setting up dwz (0.13-5) ...
 Setting up libarchive-cpio-perl (0.10-1) ...
 Setting up libsub-override-perl (0.09-2) ...
 Setting up libsys-hostname-long-perl (1.5-1) ...
 Setting up automake (1:1.16.1-4ubuntu6) ...
 update-alternatives: using /usr/bin/automake-1.16 to provide /usr/bin/automake (automake) in auto mode
 Setting up libfile-stripnondeterminism-perl (1.7.0-1) ...
 Setting up gettext (0.19.8.1-10build1) ...
 Setting up libtool (2.4.6-14) ...
 Setting up intltool-debian (0.35.0+20060710.5) ...
 Setting up libmail-sendmail-perl (0.80-1) ...
 Setting up libltdl-dev:amd64 (2.4.6-14) ...
 Setting up dh-strip-nondeterminism (1.7.0-1) ...
 Setting up po-debconf (1.0.21) ...
 Setting up dh-autoreconf (19) ...
 Setting up debhelper (12.10ubuntu1) ...
 Processing triggers for man-db (2.9.1-1) ...
 Processing triggers for install-info (6.7.0.dfsg.2-5) ...
 Processing triggers for libc-bin (2.31-0ubuntu9.9) ...
02/04/2024 10:35:09 DEBUG: Checking curl tool version.
02/04/2024 10:35:09 DEBUG: Adding the Wazuh repository.
gpg: keyring '/usr/share/keyrings/wazuh.gpg' created
gpg: directory '/root/.gnupg' created
gpg: /root/.gnupg/trustdb.gpg: trustdb created
gpg: key 96B3EE5F29111145: public key "Wazuh.com (Wazuh Signing Key) <[email protected]>" imported
gpg: Total number processed: 1
gpg:               imported: 1
deb [signed-by=/usr/share/keyrings/wazuh.gpg] https://packages-dev.wazuh.com/staging/apt/ unstable main
Hit:1 http://us-east-1.ec2.archive.ubuntu.com/ubuntu focal InRelease
Hit:2 http://us-east-1.ec2.archive.ubuntu.com/ubuntu focal-updates InRelease
Hit:3 http://us-east-1.ec2.archive.ubuntu.com/ubuntu focal-backports InRelease
Hit:4 http://security.ubuntu.com/ubuntu focal-security InRelease
Hit:5 https://download.docker.com/linux/ubuntu focal InRelease
Hit:6 http://ppa.launchpad.net/deadsnakes/ppa/ubuntu focal InRelease
Get:7 https://packages-dev.wazuh.com/staging/apt unstable InRelease [17.3 kB]
Get:8 https://packages-dev.wazuh.com/staging/apt unstable/main amd64 Packages [5,146 B]
Fetched 22.4 kB in 1s (20.1 kB/s)
Reading package lists...
02/04/2024 10:35:13 INFO: Wazuh development repository added.
02/04/2024 10:35:13 INFO: --- Configuration files ---
02/04/2024 10:35:13 INFO: Generating configuration files.
02/04/2024 10:35:13 DEBUG: Creating Wazuh certificates.
02/04/2024 10:35:13 DEBUG: Reading configuration file.
02/04/2024 10:35:13 DEBUG: Checking if 127.0.0.1 is private.
02/04/2024 10:35:13 DEBUG: Checking if 127.0.0.1 is private.
02/04/2024 10:35:14 DEBUG: Checking if 127.0.0.1 is private.
02/04/2024 10:35:14 INFO: Generating the root certificate.
02/04/2024 10:35:14 INFO: Generating Admin certificates.
02/04/2024 10:35:14 DEBUG: Generating Admin private key.
02/04/2024 10:35:14 DEBUG: Converting Admin private key to PKCS8 format.
02/04/2024 10:35:14 DEBUG: Generating Admin CSR.
02/04/2024 10:35:14 DEBUG: Creating Admin certificate.
02/04/2024 10:35:14 INFO: Generating Wazuh indexer certificates.
02/04/2024 10:35:14 DEBUG: Creating the certificates for wazuh-indexer indexer node.
02/04/2024 10:35:14 DEBUG: Generating certificate configuration.
02/04/2024 10:35:14 DEBUG: Creating the Wazuh indexer tmp key pair.
02/04/2024 10:35:14 DEBUG: Creating the Wazuh indexer certificates.
02/04/2024 10:35:14 INFO: Generating Filebeat certificates.
02/04/2024 10:35:14 DEBUG: Generating the certificates for wazuh-server server node.
02/04/2024 10:35:14 DEBUG: Generating certificate configuration.
02/04/2024 10:35:14 DEBUG: Creating the Wazuh server tmp key pair.
02/04/2024 10:35:14 DEBUG: Creating the Wazuh server certificates.
02/04/2024 10:35:14 INFO: Generating Wazuh dashboard certificates.
02/04/2024 10:35:14 DEBUG: Generating certificate configuration.
02/04/2024 10:35:14 DEBUG: Creating the Wazuh dashboard tmp key pair.
02/04/2024 10:35:14 DEBUG: Creating the Wazuh dashboard certificates.
02/04/2024 10:35:14 DEBUG: Cleaning certificate files.
02/04/2024 10:35:14 DEBUG: Generating password file.
02/04/2024 10:35:14 DEBUG: Generating random passwords.
02/04/2024 10:35:15 INFO: Created wazuh-install-files.tar. It contains the Wazuh cluster key, certificates, and passwords necessary for installation.
02/04/2024 10:35:15 DEBUG: Extracting Wazuh configuration.
02/04/2024 10:35:15 DEBUG: Reading configuration file.
02/04/2024 10:35:15 DEBUG: Checking if 127.0.0.1 is private.
02/04/2024 10:35:15 DEBUG: Checking if 127.0.0.1 is private.
02/04/2024 10:35:15 DEBUG: Checking if 127.0.0.1 is private.
02/04/2024 10:35:15 INFO: --- Wazuh indexer ---
02/04/2024 10:35:15 INFO: Starting Wazuh indexer installation.
Reading package lists... Building dependency tree... Reading state information... The following packages were automatically installed and are no longer required: libfwupdplugin1 linux-aws-5.8-headers-
5.8.0-1038 linux-headers-5.8.0-1038-aws linux-image-5.8.0-1038-aws linux-modules-5.8.0-1038-aws Use 'sudo apt autoremove' to remove them. The following NEW packages will be installed: wazuh-indexer 0 
upgraded, 1 newly installed, 0 to remove and 266 not upgraded. Need to get 758 MB of archives. After this operation, 1,050 MB of additional disk space will be used. Get:1 https://packages-dev.wazuh.co
m/staging/apt unstable/main amd64 wazuh-indexer amd64 4.9.0-1 [758 MB] Fetched 758 MB in 43s (17.5 MB/s) Selecting previously unselected package wazuh-indexer.
 (Reading database ... 
(Reading database ... 5%
(Reading database ... 10%
(Reading database ... 15%
(Reading database ... 20%
(Reading database ... 25%
(Reading database ... 30%
(Reading database ... 35%
(Reading database ... 40%
(Reading database ... 45%
(Reading database ... 50%
(Reading database ... 55%
(Reading database ... 60%
(Reading database ... 65%
(Reading database ... 70%
(Reading database ... 75%
(Reading database ... 80%
(Reading database ... 85%
(Reading database ... 90%
(Reading database ... 95%
(Reading database ... 100%
(Reading database ... 177659 files and directories currently installed.)
 Preparing to unpack .../wazuh-indexer_4.9.0-1_amd64.deb ...
 Creating wazuh-indexer group... OK
 Creating wazuh-indexer user... OK
 Unpacking wazuh-indexer (4.9.0-1) ...
 Setting up wazuh-indexer (4.9.0-1) ...
 Created opensearch keystore in /etc/wazuh-indexer/opensearch.keystore
 Processing triggers for systemd (245.4-4ubuntu3.17) ...
 Processing triggers for libc-bin (2.31-0ubuntu9.9) ...
02/04/2024 10:38:02 DEBUG: Checking Wazuh installation.
02/04/2024 10:38:03 DEBUG: There are Wazuh indexer remaining files.
02/04/2024 10:38:04 INFO: Wazuh indexer installation finished.
02/04/2024 10:38:04 DEBUG: Configuring Wazuh indexer.
02/04/2024 10:38:04 DEBUG: Copying Wazuh indexer certificates.
02/04/2024 10:38:10 INFO: Wazuh indexer post-install configuration finished.
02/04/2024 10:38:10 INFO: Starting service wazuh-indexer.
Created symlink /etc/systemd/system/multi-user.target.wants/wazuh-indexer.service ��� /lib/systemd/system/wazuh-indexer.service.
02/04/2024 10:38:33 INFO: wazuh-indexer service started.
02/04/2024 10:38:33 INFO: Initializing Wazuh indexer cluster security settings.
**************************************************************************
** This tool will be deprecated in the next major release of OpenSearch **
** https://github.com/opensearch-project/security/issues/1755           **
**************************************************************************
Security Admin v7
Will connect to 127.0.0.1:9200 ... done
Connected as "CN=admin,OU=Wazuh,O=Wazuh,L=California,C=US"
OpenSearch Version: 2.10.0
Contacting opensearch cluster 'opensearch' and wait for YELLOW clusterstate ...
Clustername: wazuh-cluster
Clusterstate: GREEN
Number of nodes: 1
Number of data nodes: 1
.opendistro_security index does not exists, attempt to create it ... done (0-all replicas)
Populate config from /etc/wazuh-indexer/opensearch-security/
Will update '/config' with /etc/wazuh-indexer/opensearch-security/config.yml 
   SUCC: Configuration for 'config' created or updated
Will update '/roles' with /etc/wazuh-indexer/opensearch-security/roles.yml 
   SUCC: Configuration for 'roles' created or updated
Will update '/rolesmapping' with /etc/wazuh-indexer/opensearch-security/roles_mapping.yml 
   SUCC: Configuration for 'rolesmapping' created or updated
Will update '/internalusers' with /etc/wazuh-indexer/opensearch-security/internal_users.yml 
   SUCC: Configuration for 'internalusers' created or updated
Will update '/actiongroups' with /etc/wazuh-indexer/opensearch-security/action_groups.yml 
   SUCC: Configuration for 'actiongroups' created or updated
Will update '/tenants' with /etc/wazuh-indexer/opensearch-security/tenants.yml 
   SUCC: Configuration for 'tenants' created or updated
Will update '/nodesdn' with /etc/wazuh-indexer/opensearch-security/nodes_dn.yml 
   SUCC: Configuration for 'nodesdn' created or updated
Will update '/whitelist' with /etc/wazuh-indexer/opensearch-security/whitelist.yml 
   SUCC: Configuration for 'whitelist' created or updated
Will update '/audit' with /etc/wazuh-indexer/opensearch-security/audit.yml 
   SUCC: Configuration for 'audit' created or updated
Will update '/allowlist' with /etc/wazuh-indexer/opensearch-security/allowlist.yml 
   SUCC: Configuration for 'allowlist' created or updated
SUCC: Expected 10 config types for node {"updated_config_types":["allowlist","tenants","rolesmapping","nodesdn","audit","roles","whitelist","internalusers","actiongroups","config"],"updated_config_siz
e":10,"message":null} is 10 (["allowlist","tenants","rolesmapping","nodesdn","audit","roles","whitelist","internalusers","actiongroups","config"]) due to: null
Done with success
02/04/2024 10:38:45 INFO: Wazuh indexer cluster security configuration initialized.
02/04/2024 10:38:45 INFO: Wazuh indexer cluster initialized.
02/04/2024 10:38:45 INFO: --- Wazuh server ---
02/04/2024 10:38:45 INFO: Starting the Wazuh manager installation.
Reading package lists... Building dependency tree... Reading state information... The following packages were automatically installed and are no longer required: libfwupdplugin1 linux-aws-5.8-headers-
5.8.0-1038 linux-headers-5.8.0-1038-aws linux-image-5.8.0-1038-aws linux-modules-5.8.0-1038-aws Use 'sudo apt autoremove' to remove them. Suggested packages: expect The following NEW packages will be 
installed: wazuh-manager 0 upgraded, 1 newly installed, 0 to remove and 266 not upgraded. Need to get 309 MB of archives. After this operation, 916 MB of additional disk space will be used. Get:1 http
s://packages-dev.wazuh.com/staging/apt unstable/main amd64 wazuh-manager amd64 4.9.0-1 [309 MB] Fetched 309 MB in 6s (47.6 MB/s) Selecting previously unselected package wazuh-manager.
 (Reading database ... 
(Reading database ... 5%
(Reading database ... 10%
(Reading database ... 15%
(Reading database ... 20%
(Reading database ... 25%
(Reading database ... 30%
(Reading database ... 35%
(Reading database ... 40%
(Reading database ... 45%
(Reading database ... 50%
(Reading database ... 55%
(Reading database ... 60%
(Reading database ... 65%
(Reading database ... 70%
(Reading database ... 75%
(Reading database ... 80%
(Reading database ... 85%
(Reading database ... 90%
(Reading database ... 95%
(Reading database ... 100%
(Reading database ... 178831 files and directories currently installed.)
 Preparing to unpack .../wazuh-manager_4.9.0-1_amd64.deb ...
 Unpacking wazuh-manager (4.9.0-1) ...
 Setting up wazuh-manager (4.9.0-1) ...
 Processing triggers for systemd (245.4-4ubuntu3.17) ...
02/04/2024 10:40:02 DEBUG: Checking Wazuh installation.
02/04/2024 10:40:03 DEBUG: There are Wazuh remaining files.
02/04/2024 10:40:03 DEBUG: There are Wazuh indexer remaining files.
02/04/2024 10:40:04 INFO: Wazuh manager installation finished.
02/04/2024 10:40:04 DEBUG: Configuring Wazuh manager.
02/04/2024 10:40:04 DEBUG: Setting provisional Wazuh indexer password.
02/04/2024 10:40:04 INFO: Wazuh manager vulnerability detection configuration finished.
02/04/2024 10:40:04 INFO: Starting service wazuh-manager.
Created symlink /etc/systemd/system/multi-user.target.wants/wazuh-manager.service ��� /lib/systemd/system/wazuh-manager.service.
02/04/2024 10:40:27 INFO: wazuh-manager service started.
02/04/2024 10:40:27 INFO: Starting Filebeat installation.
Reading package lists... Building dependency tree... Reading state information... The following packages were automatically installed and are no longer required: libfwupdplugin1 linux-aws-5.8-headers-
5.8.0-1038 linux-headers-5.8.0-1038-aws linux-image-5.8.0-1038-aws linux-modules-5.8.0-1038-aws Use 'sudo apt autoremove' to remove them. The following NEW packages will be installed: filebeat 0 upgra
ded, 1 newly installed, 0 to remove and 266 not upgraded. Need to get 22.1 MB of archives. After this operation, 73.6 MB of additional disk space will be used. Get:1 https://packages-dev.wazuh.com/sta
ging/apt unstable/main amd64 filebeat amd64 7.10.2 [22.1 MB] Fetched 22.1 MB in 1s (22.4 MB/s) Selecting previously unselected package filebeat.
 (Reading database ... 
(Reading database ... 5%
(Reading database ... 10%
(Reading database ... 15%
(Reading database ... 20%
(Reading database ... 25%
(Reading database ... 30%
(Reading database ... 35%
(Reading database ... 40%
(Reading database ... 45%
(Reading database ... 50%
(Reading database ... 55%
(Reading database ... 60%
(Reading database ... 65%
(Reading database ... 70%
(Reading database ... 75%
(Reading database ... 80%
(Reading database ... 85%
(Reading database ... 90%
(Reading database ... 95%
(Reading database ... 100%
(Reading database ... 200889 files and directories currently installed.)
 Preparing to unpack .../filebeat_7.10.2_amd64.deb ...
 Unpacking filebeat (7.10.2) ...
 Setting up filebeat (7.10.2) ...
 Processing triggers for systemd (245.4-4ubuntu3.17) ...
02/04/2024 10:40:44 DEBUG: Checking Wazuh installation.
02/04/2024 10:40:45 DEBUG: There are Wazuh remaining files.
02/04/2024 10:40:46 DEBUG: There are Wazuh indexer remaining files.
02/04/2024 10:40:46 DEBUG: There are Filebeat remaining files.
02/04/2024 10:40:47 INFO: Filebeat installation finished.
02/04/2024 10:40:47 DEBUG: Configuring Filebeat.
02/04/2024 10:40:47 DEBUG: Filebeat template was download successfully.
wazuh/
wazuh/_meta/
wazuh/_meta/docs.asciidoc
wazuh/_meta/fields.yml
wazuh/_meta/config.yml
wazuh/alerts/
wazuh/alerts/config/
wazuh/alerts/config/alerts.yml
wazuh/alerts/manifest.yml
wazuh/alerts/ingest/
wazuh/alerts/ingest/pipeline.json
wazuh/module.yml
wazuh/archives/
wazuh/archives/config/
wazuh/archives/config/archives.yml
wazuh/archives/manifest.yml
wazuh/archives/ingest/
wazuh/archives/ingest/pipeline.json
02/04/2024 10:40:48 DEBUG: Filebeat module was downloaded successfully.
02/04/2024 10:40:48 DEBUG: Copying Filebeat certificates.
Created filebeat keystore
Successfully updated the keystore
Successfully updated the keystore
02/04/2024 10:40:48 INFO: Filebeat post-install configuration finished.
02/04/2024 10:40:48 INFO: Starting service filebeat.
Synchronizing state of filebeat.service with SysV service script with /lib/systemd/systemd-sysv-install.
Executing: /lib/systemd/systemd-sysv-install enable filebeat
Created symlink /etc/systemd/system/multi-user.target.wants/filebeat.service ��� /lib/systemd/system/filebeat.service.
02/04/2024 10:40:50 INFO: filebeat service started.
02/04/2024 10:40:50 INFO: --- Wazuh dashboard ---
02/04/2024 10:40:50 INFO: Starting Wazuh dashboard installation.
Reading package lists... Building dependency tree... Reading state information... E: Version '4.9.0-*' for 'wazuh-dashboard' was not found
02/04/2024 10:40:51 DEBUG: Checking Wazuh installation.
02/04/2024 10:40:52 DEBUG: There are Wazuh remaining files.
02/04/2024 10:40:53 DEBUG: There are Wazuh indexer remaining files.
02/04/2024 10:40:54 DEBUG: There are Filebeat remaining files.
02/04/2024 10:40:54 ERROR: Wazuh dashboard installation failed.
02/04/2024 10:40:54 INFO: --- Removing existing Wazuh installation ---
02/04/2024 10:40:54 INFO: Removing Wazuh manager.
Reading package lists...
Building dependency tree...
Reading state information...
The following packages were automatically installed and are no longer required:
  libfwupdplugin1 linux-aws-5.8-headers-5.8.0-1038
  linux-headers-5.8.0-1038-aws linux-image-5.8.0-1038-aws
  linux-modules-5.8.0-1038-aws
Use 'sudo apt autoremove' to remove them.
The following packages will be REMOVED:
  wazuh-manager*
0 upgraded, 0 newly installed, 1 to remove and 266 not upgraded.
After this operation, 916 MB disk space will be freed.
(Reading database ... 
(Reading database ... 5%
(Reading database ... 10%
(Reading database ... 15%
(Reading database ... 20%
(Reading database ... 25%
(Reading database ... 30%
(Reading database ... 35%
(Reading database ... 40%
(Reading database ... 45%
(Reading database ... 50%
(Reading database ... 55%
(Reading database ... 60%
(Reading database ... 65%
(Reading database ... 70%
(Reading database ... 75%
(Reading database ... 80%
(Reading database ... 85%
(Reading database ... 90%
(Reading database ... 95%
(Reading database ... 100%
(Reading database ... 201208 files and directories currently installed.)
Removing wazuh-manager (4.9.0-1) ...
(Reading database ... 
(Reading database ... 5%
(Reading database ... 10%
(Reading database ... 15%
(Reading database ... 20%
(Reading database ... 25%
(Reading database ... 30%
(Reading database ... 35%
(Reading database ... 40%
(Reading database ... 45%
(Reading database ... 50%
(Reading database ... 55%
(Reading database ... 60%
(Reading database ... 65%
(Reading database ... 70%
(Reading database ... 75%
(Reading database ... 80%
(Reading database ... 85%
(Reading database ... 90%
(Reading database ... 95%
(Reading database ... 100%
(Reading database ... 179170 files and directories currently installed.)
Purging configuration files for wazuh-manager (4.9.0-1) ...
Processing triggers for systemd (245.4-4ubuntu3.17) ...
02/04/2024 10:41:16 INFO: Wazuh manager removed.
02/04/2024 10:41:16 INFO: Removing Wazuh indexer.
Reading package lists...
Building dependency tree...
Reading state information...
The following packages were automatically installed and are no longer required:
  libfwupdplugin1 linux-aws-5.8-headers-5.8.0-1038
  linux-headers-5.8.0-1038-aws linux-image-5.8.0-1038-aws
  linux-modules-5.8.0-1038-aws
Use 'sudo apt autoremove' to remove them.
The following packages will be REMOVED:
  wazuh-indexer*
0 upgraded, 0 newly installed, 1 to remove and 266 not upgraded.
After this operation, 1,050 MB disk space will be freed.
(Reading database ... 
(Reading database ... 5%
(Reading database ... 10%
(Reading database ... 15%
(Reading database ... 20%
(Reading database ... 25%
(Reading database ... 30%
(Reading database ... 35%
(Reading database ... 40%
(Reading database ... 45%
(Reading database ... 50%
(Reading database ... 55%
(Reading database ... 60%
(Reading database ... 65%
(Reading database ... 70%
(Reading database ... 75%
(Reading database ... 80%
(Reading database ... 85%
(Reading database ... 90%
(Reading database ... 95%
(Reading database ... 100%
(Reading database ... 179150 files and directories currently installed.)
Removing wazuh-indexer (4.9.0-1) ...
Stopping wazuh-indexer service... OK
(Reading database ... 
(Reading database ... 5%
(Reading database ... 10%
(Reading database ... 15%
(Reading database ... 20%
(Reading database ... 25%
(Reading database ... 30%
(Reading database ... 35%
(Reading database ... 40%
(Reading database ... 45%
(Reading database ... 50%
(Reading database ... 55%
(Reading database ... 60%
(Reading database ... 65%
(Reading database ... 70%
(Reading database ... 75%
(Reading database ... 80%
(Reading database ... 85%
(Reading database ... 90%
(Reading database ... 95%
(Reading database ... 100%
(Reading database ... 178016 files and directories currently installed.)
Purging configuration files for wazuh-indexer (4.9.0-1) ...
Deleting configuration directory... OK
dpkg: warning: while removing wazuh-indexer, directory '/var/lib/wazuh-indexer' not empty so not removed
dpkg: warning: while removing wazuh-indexer, directory '/var/log/wazuh-indexer' not empty so not removed
Processing triggers for systemd (245.4-4ubuntu3.17) ...
02/04/2024 10:41:27 INFO: Wazuh indexer removed.
02/04/2024 10:41:27 INFO: Removing Filebeat.
Reading package lists...
Building dependency tree...
Reading state information...
The following packages were automatically installed and are no longer required:
  libfwupdplugin1 linux-aws-5.8-headers-5.8.0-1038
  linux-headers-5.8.0-1038-aws linux-image-5.8.0-1038-aws
  linux-modules-5.8.0-1038-aws
Use 'sudo apt autoremove' to remove them.
The following packages will be REMOVED:
  filebeat*
0 upgraded, 0 newly installed, 1 to remove and 266 not upgraded.
After this operation, 73.6 MB disk space will be freed.
(Reading database ... 
(Reading database ... 5%
(Reading database ... 10%
(Reading database ... 15%
(Reading database ... 20%
(Reading database ... 25%
(Reading database ... 30%
(Reading database ... 35%
(Reading database ... 40%
(Reading database ... 45%
(Reading database ... 50%
(Reading database ... 55%
(Reading database ... 60%
(Reading database ... 65%
(Reading database ... 70%
(Reading database ... 75%
(Reading database ... 80%
(Reading database ... 85%
(Reading database ... 90%
(Reading database ... 95%
(Reading database ... 100%
(Reading database ... 177978 files and directories currently installed.)
Removing filebeat (7.10.2) ...
(Reading database ... 
(Reading database ... 5%
(Reading database ... 10%
(Reading database ... 15%
(Reading database ... 20%
(Reading database ... 25%
(Reading database ... 30%
(Reading database ... 35%
(Reading database ... 40%
(Reading database ... 45%
(Reading database ... 50%
(Reading database ... 55%
(Reading database ... 60%
(Reading database ... 65%
(Reading database ... 70%
(Reading database ... 75%
(Reading database ... 80%
(Reading database ... 85%
(Reading database ... 90%
(Reading database ... 95%
(Reading database ... 100%
(Reading database ... 177686 files and directories currently installed.)
Purging configuration files for filebeat (7.10.2) ...
dpkg: warning: while removing filebeat, directory '/etc/filebeat' not empty so not removed
dpkg: warning: while removing filebeat, directory '/usr/share/filebeat/module' not empty so not removed
Processing triggers for systemd (245.4-4ubuntu3.17) ...
02/04/2024 10:41:36 INFO: Filebeat removed.
02/04/2024 10:41:36 DEBUG: Removing GPG key from system.
02/04/2024 10:41:36 INFO: Installation cleaned. Check the /var/log/wazuh-install.log file to learn more about the issue.