--------------------------------
08/07/2024 15:35:35 DEBUG: Checking root permissions.
08/07/2024 15:35:35 DEBUG: Checking sudo package.
08/07/2024 15:35:35 INFO: Starting Wazuh installation assistant. Wazuh version: 4.9.0
08/07/2024 15:35:35 INFO: Verbose logging redirected to /var/log/wazuh-install.log
08/07/2024 15:35:35 DEBUG: YUM package manager will be used.
08/07/2024 15:35:35 DEBUG: Checking system distribution.
08/07/2024 15:35:35 DEBUG: Detected distribution name: centos
08/07/2024 15:35:35 DEBUG: Detected distribution version: 8
08/07/2024 15:35:35 DEBUG: Installing check dependencies.
08/07/2024 15:35:35 DEBUG: Checking Wazuh installation.
08/07/2024 15:35:36 DEBUG: Checking system architecture.
08/07/2024 15:35:36 INFO: Verifying that your system meets the recommended minimum hardware requirements.
08/07/2024 15:35:36 DEBUG: CPU cores detected: 2
08/07/2024 15:35:36 DEBUG: Free RAM memory detected: 7688
08/07/2024 15:35:36 DEBUG: Installing check dependencies.
08/07/2024 15:35:36 INFO: Wazuh web interface port will be 443.
08/07/2024 15:35:36 INFO: --- Dependencies ---
08/07/2024 15:35:36 INFO: Installing lsof.
Last metadata expiration check: 0:01:47 ago on Mon 08 Jul 2024 03:33:49 PM UTC. Dependencies resolved. ================================================================================ Package Architec
ture Version Repository Size ================================================================================ Installing: lsof x86_64 4.93.2-1.el8 baseos 253 k Transaction Summary ====================
============================================================ Install 1 Package Total download size: 253 k Installed size: 623 k Downloading Packages: lsof-4.93.2-1.el8.x86_64.rpm 11 MB/s | 253 kB 00:0
0 -------------------------------------------------------------------------------- Total 10 MB/s | 253 kB 00:00 Running transaction check Transaction check succeeded. Running transaction test Transact
ion test succeeded. Running transaction Preparing : 1/1 Installing : lsof-4.93.2-1.el8.x86_64 1/1 Running scriptlet: lsof-4.93.2-1.el8.x86_64 1/1 Verifying : lsof-4.93.2-1.el8.x86_64 1/1 Installed: ls
of-4.93.2-1.el8.x86_64 Complete!
Last metadata expiration check: 0:01:47 ago on Mon 08 Jul 2024 03:33:49 PM UTC. Dependencies resolved. ================================================================================ Package Architec
ture Version Repository Size ================================================================================ Installing: lsof x86_64 4.93.2-1.el8 baseos 253 k Transaction Summary ====================
============================================================ Install 1 Package Total download size: 253 k Installed size: 623 k Downloading Packages: lsof-4.93.2-1.el8.x86_64.rpm 11 MB/s | 253 kB 00:0
0 -------------------------------------------------------------------------------- Total 10 MB/s | 253 kB 00:00 Running transaction check Transaction check succeeded. Running transaction test Transact
ion test succeeded. Running transaction Preparing : 1/1 Installing : lsof-4.93.2-1.el8.x86_64 1/1 Running scriptlet: lsof-4.93.2-1.el8.x86_64 1/1 Verifying : lsof-4.93.2-1.el8.x86_64 1/1 Installed: ls
of-4.93.2-1.el8.x86_64 Complete!
08/07/2024 15:35:38 DEBUG: Checking ports availability.
08/07/2024 15:35:38 DEBUG: Installing prerequisites dependencies.
08/07/2024 15:35:38 DEBUG: Checking curl tool version.
08/07/2024 15:35:38 DEBUG: Adding the Wazuh repository.
[wazuh]
gpgcheck=1
gpgkey=https://packages-dev.wazuh.com/key/GPG-KEY-WAZUH
enabled=1
name=EL-${releasever} - Wazuh
baseurl=https://packages-dev.wazuh.com/staging/yum/
protect=1
08/07/2024 15:35:38 INFO: Wazuh development repository added.
08/07/2024 15:35:38 INFO: --- Configuration files ---
08/07/2024 15:35:38 INFO: Generating configuration files.
08/07/2024 15:35:38 DEBUG: Creating Wazuh certificates.
08/07/2024 15:35:38 DEBUG: Reading configuration file.
08/07/2024 15:35:38 DEBUG: Checking if 127.0.0.1 is private.
08/07/2024 15:35:39 DEBUG: Checking if 127.0.0.1 is private.
08/07/2024 15:35:39 DEBUG: Checking if 127.0.0.1 is private.
08/07/2024 15:35:39 INFO: Generating the root certificate.
08/07/2024 15:35:39 INFO: Generating Admin certificates.
08/07/2024 15:35:39 DEBUG: Generating Admin private key.
08/07/2024 15:35:39 DEBUG: Converting Admin private key to PKCS8 format.
08/07/2024 15:35:39 DEBUG: Generating Admin CSR.
08/07/2024 15:35:39 DEBUG: Creating Admin certificate.
08/07/2024 15:35:39 INFO: Generating Wazuh indexer certificates.
08/07/2024 15:35:39 DEBUG: Creating the certificates for wazuh-indexer indexer node.
08/07/2024 15:35:39 DEBUG: Generating certificate configuration.
08/07/2024 15:35:39 DEBUG: Creating the Wazuh indexer tmp key pair.
08/07/2024 15:35:39 DEBUG: Creating the Wazuh indexer certificates.
08/07/2024 15:35:39 INFO: Generating Filebeat certificates.
08/07/2024 15:35:39 DEBUG: Generating the certificates for wazuh-server server node.
08/07/2024 15:35:39 DEBUG: Generating certificate configuration.
08/07/2024 15:35:39 DEBUG: Creating the Wazuh server tmp key pair.
08/07/2024 15:35:39 DEBUG: Creating the Wazuh server certificates.
08/07/2024 15:35:39 INFO: Generating Wazuh dashboard certificates.
08/07/2024 15:35:39 DEBUG: Generating certificate configuration.
08/07/2024 15:35:39 DEBUG: Creating the Wazuh dashboard tmp key pair.
08/07/2024 15:35:40 DEBUG: Creating the Wazuh dashboard certificates.
08/07/2024 15:35:40 DEBUG: Cleaning certificate files.
08/07/2024 15:35:40 DEBUG: Generating password file.
08/07/2024 15:35:40 DEBUG: Generating random passwords.
08/07/2024 15:35:40 INFO: Created wazuh-install-files.tar. It contains the Wazuh cluster key, certificates, and passwords necessary for installation.
08/07/2024 15:35:40 DEBUG: Extracting Wazuh configuration.
08/07/2024 15:35:40 DEBUG: Reading configuration file.
08/07/2024 15:35:40 DEBUG: Checking if 127.0.0.1 is private.
08/07/2024 15:35:40 DEBUG: Checking if 127.0.0.1 is private.
08/07/2024 15:35:40 DEBUG: Checking if 127.0.0.1 is private.
08/07/2024 15:35:40 INFO: --- Wazuh indexer ---
08/07/2024 15:35:40 INFO: Starting Wazuh indexer installation.
EL-8 - Wazuh 5.1 MB/s | 3.2 MB 00:00 Last metadata expiration check: 0:00:01 ago on Mon 08 Jul 2024 03:35:41 PM UTC. Dependencies resolved. ============================================================
==================== Package Architecture Version Repository Size ================================================================================ Installing: wazuh-indexer x86_64 4.9.0-1 wazuh 743 M 
Transaction Summary ================================================================================ Install 1 Package Total download size: 743 M Installed size: 1.0 G Downloading Packages: wazuh-inde
xer-4.9.0-1.x86_64.rpm 151 MB/s | 743 MB 00:04 -------------------------------------------------------------------------------- Total 151 MB/s | 743 MB 00:04 Running transaction check Transaction chec
k succeeded. Running transaction test Transaction test succeeded. Running transaction Preparing : 1/1 Running scriptlet: wazuh-indexer-4.9.0-1.x86_64 1/1 Installing : wazuh-indexer-4.9.0-1.x86_64 1/1 
Running scriptlet: wazuh-indexer-4.9.0-1.x86_64 1/1 Created opensearch keystore in /etc/wazuh-indexer/opensearch.keystore Verifying : wazuh-indexer-4.9.0-1.x86_64 1/1 Installed: wazuh-indexer-4.9.0-1.
x86_64 Complete!
08/07/2024 15:37:03 DEBUG: Checking Wazuh installation.
08/07/2024 15:37:03 DEBUG: There are Wazuh indexer remaining files.
08/07/2024 15:37:03 INFO: Wazuh indexer installation finished.
08/07/2024 15:37:03 DEBUG: Configuring Wazuh indexer.
08/07/2024 15:37:03 DEBUG: Copying Wazuh indexer certificates.
08/07/2024 15:37:09 INFO: Wazuh indexer post-install configuration finished.
08/07/2024 15:37:09 INFO: Starting service wazuh-indexer.
Created symlink /etc/systemd/system/multi-user.target.wants/wazuh-indexer.service ��� /usr/lib/systemd/system/wazuh-indexer.service.
08/07/2024 15:37:30 INFO: wazuh-indexer service started.
08/07/2024 15:37:30 INFO: Initializing Wazuh indexer cluster security settings.
**************************************************************************
** This tool will be deprecated in the next major release of OpenSearch **
** https://github.com/opensearch-project/security/issues/1755           **
**************************************************************************
Security Admin v7
Will connect to 127.0.0.1:9200 ... done
Connected as "CN=admin,OU=Wazuh,O=Wazuh,L=California,C=US"
OpenSearch Version: 2.10.0
Contacting opensearch cluster 'opensearch' and wait for YELLOW clusterstate ...
Clustername: wazuh-cluster
Clusterstate: GREEN
Number of nodes: 1
Number of data nodes: 1
.opendistro_security index does not exists, attempt to create it ... done (0-all replicas)
Populate config from /etc/wazuh-indexer/opensearch-security/
Will update '/config' with /etc/wazuh-indexer/opensearch-security/config.yml 
   SUCC: Configuration for 'config' created or updated
Will update '/roles' with /etc/wazuh-indexer/opensearch-security/roles.yml 
   SUCC: Configuration for 'roles' created or updated
Will update '/rolesmapping' with /etc/wazuh-indexer/opensearch-security/roles_mapping.yml 
   SUCC: Configuration for 'rolesmapping' created or updated
Will update '/internalusers' with /etc/wazuh-indexer/opensearch-security/internal_users.yml 
   SUCC: Configuration for 'internalusers' created or updated
Will update '/actiongroups' with /etc/wazuh-indexer/opensearch-security/action_groups.yml 
   SUCC: Configuration for 'actiongroups' created or updated
Will update '/tenants' with /etc/wazuh-indexer/opensearch-security/tenants.yml 
   SUCC: Configuration for 'tenants' created or updated
Will update '/nodesdn' with /etc/wazuh-indexer/opensearch-security/nodes_dn.yml 
   SUCC: Configuration for 'nodesdn' created or updated
Will update '/whitelist' with /etc/wazuh-indexer/opensearch-security/whitelist.yml 
   SUCC: Configuration for 'whitelist' created or updated
Will update '/audit' with /etc/wazuh-indexer/opensearch-security/audit.yml 
   SUCC: Configuration for 'audit' created or updated
Will update '/allowlist' with /etc/wazuh-indexer/opensearch-security/allowlist.yml 
   SUCC: Configuration for 'allowlist' created or updated
SUCC: Expected 10 config types for node {"updated_config_types":["allowlist","tenants","rolesmapping","nodesdn","audit","roles","whitelist","internalusers","actiongroups","config"],"updated_config_siz
e":10,"message":null} is 10 (["allowlist","tenants","rolesmapping","nodesdn","audit","roles","whitelist","internalusers","actiongroups","config"]) due to: null
Done with success
08/07/2024 15:37:41 INFO: Wazuh indexer cluster security configuration initialized.
08/07/2024 15:37:41 INFO: Wazuh indexer cluster initialized.
08/07/2024 15:37:41 INFO: --- Wazuh server ---
08/07/2024 15:37:41 INFO: Starting the Wazuh manager installation.
Last metadata expiration check: 0:02:00 ago on Mon 08 Jul 2024 03:35:41 PM UTC. Dependencies resolved. ================================================================================ Package Architec
ture Version Repository Size ================================================================================ Installing: wazuh-manager x86_64 4.9.0-1 wazuh 291 M Transaction Summary =================
=============================================================== Install 1 Package Total download size: 291 M Installed size: 880 M Downloading Packages: wazuh-manager-4.9.0-1.x86_64.rpm 128 MB/s | 291
 MB 00:02 -------------------------------------------------------------------------------- Total 128 MB/s | 291 MB 00:02 Running transaction check Transaction check succeeded. Running transaction test
 Transaction test succeeded. Running transaction Preparing : 1/1 Running scriptlet: wazuh-manager-4.9.0-1.x86_64 1/1 Installing : wazuh-manager-4.9.0-1.x86_64 1/1 Running scriptlet: wazuh-manager-4.9.
0-1.x86_64 1/1 Verifying : wazuh-manager-4.9.0-1.x86_64 1/1 Installed: wazuh-manager-4.9.0-1.x86_64 Complete!
08/07/2024 15:39:24 DEBUG: Checking Wazuh installation.
08/07/2024 15:39:24 DEBUG: There are Wazuh remaining files.
08/07/2024 15:39:24 DEBUG: There are Wazuh indexer remaining files.
08/07/2024 15:39:24 INFO: Wazuh manager installation finished.
08/07/2024 15:39:24 DEBUG: Configuring Wazuh manager.
08/07/2024 15:39:24 DEBUG: Setting provisional Wazuh indexer password.
08/07/2024 15:39:24 INFO: Wazuh manager vulnerability detection configuration finished.
08/07/2024 15:39:24 INFO: Starting service wazuh-manager.
Created symlink /etc/systemd/system/multi-user.target.wants/wazuh-manager.service ��� /usr/lib/systemd/system/wazuh-manager.service.
08/07/2024 15:39:39 INFO: wazuh-manager service started.
08/07/2024 15:39:39 INFO: Starting Filebeat installation.
Last metadata expiration check: 0:03:59 ago on Mon 08 Jul 2024 03:35:41 PM UTC. Dependencies resolved. ================================================================================ Package Architec
ture Version Repository Size ================================================================================ Installing: filebeat x86_64 7.10.2-1 wazuh 21 M Transaction Summary ======================
========================================================== Install 1 Package Total download size: 21 M Installed size: 70 M Downloading Packages: filebeat-oss-7.10.2-x86_64.rpm 34 MB/s | 21 MB 00:00 -
------------------------------------------------------------------------------- Total 33 MB/s | 21 MB 00:00 Running transaction check Transaction check succeeded. Running transaction test Transaction 
test succeeded. Running transaction Preparing : 1/1 Installing : filebeat-7.10.2-1.x86_64 1/1 Running scriptlet: filebeat-7.10.2-1.x86_64 1/1 Verifying : filebeat-7.10.2-1.x86_64 1/1 Installed: filebe
at-7.10.2-1.x86_64 Complete!
08/07/2024 15:39:45 DEBUG: Checking Wazuh installation.
08/07/2024 15:39:45 DEBUG: There are Wazuh remaining files.
08/07/2024 15:39:45 DEBUG: There are Wazuh indexer remaining files.
08/07/2024 15:39:45 DEBUG: There are Filebeat remaining files.
08/07/2024 15:39:45 INFO: Filebeat installation finished.
08/07/2024 15:39:45 DEBUG: Configuring Filebeat.
08/07/2024 15:39:45 DEBUG: Filebeat template was download successfully.
wazuh/
wazuh/_meta/
wazuh/_meta/docs.asciidoc
wazuh/_meta/fields.yml
wazuh/_meta/config.yml
wazuh/alerts/
wazuh/alerts/config/
wazuh/alerts/config/alerts.yml
wazuh/alerts/manifest.yml
wazuh/alerts/ingest/
wazuh/alerts/ingest/pipeline.json
wazuh/module.yml
wazuh/archives/
wazuh/archives/config/
wazuh/archives/config/archives.yml
wazuh/archives/manifest.yml
wazuh/archives/ingest/
wazuh/archives/ingest/pipeline.json
08/07/2024 15:39:45 DEBUG: Filebeat module was downloaded successfully.
08/07/2024 15:39:45 DEBUG: Copying Filebeat certificates.
Created filebeat keystore
Successfully updated the keystore
Successfully updated the keystore
08/07/2024 15:39:46 INFO: Filebeat post-install configuration finished.
08/07/2024 15:39:46 INFO: Starting service filebeat.
Synchronizing state of filebeat.service with SysV service script with /usr/lib/systemd/systemd-sysv-install.
Executing: /usr/lib/systemd/systemd-sysv-install enable filebeat
Created symlink /etc/systemd/system/multi-user.target.wants/filebeat.service ��� /usr/lib/systemd/system/filebeat.service.
08/07/2024 15:39:47 INFO: filebeat service started.
08/07/2024 15:39:47 INFO: --- Wazuh dashboard ---
08/07/2024 15:39:47 INFO: Starting Wazuh dashboard installation.
Last metadata expiration check: 0:04:07 ago on Mon 08 Jul 2024 03:35:41 PM UTC. No match for argument: wazuh-dashboard-4.9.0-* Error: Unable to find a match: wazuh-dashboard-4.9.0-*
08/07/2024 15:39:52 DEBUG: Checking Wazuh installation.
08/07/2024 15:39:52 DEBUG: There are Wazuh remaining files.
08/07/2024 15:39:52 DEBUG: There are Wazuh indexer remaining files.
08/07/2024 15:39:52 DEBUG: There are Filebeat remaining files.
08/07/2024 15:39:52 ERROR: Wazuh dashboard installation failed.
08/07/2024 15:39:52 INFO: --- Removing existing Wazuh installation ---
08/07/2024 15:39:52 INFO: Removing Wazuh manager.
Dependencies resolved.
================================================================================
 Package                Architecture    Version           Repository       Size
================================================================================
Removing:
 wazuh-manager          x86_64          4.9.0-1           @wazuh          880 M

Transaction Summary
================================================================================
Remove  1 Package

Freed space: 880 M
Running transaction check
Transaction check succeeded.
Running transaction test
Transaction test succeeded.
Running transaction
  Preparing        :                                                        1/1 
  Running scriptlet: wazuh-manager-4.9.0-1.x86_64                           1/1 
  Erasing          : wazuh-manager-4.9.0-1.x86_64                           1/1 
warning: /var/ossec/etc/ossec.conf saved as /var/ossec/etc/ossec.conf.rpmsave

  Running scriptlet: wazuh-manager-4.9.0-1.x86_64                           1/1 
  Verifying        : wazuh-manager-4.9.0-1.x86_64                           1/1 

Removed:
  wazuh-manager-4.9.0-1.x86_64                                                  

Complete!
08/07/2024 15:40:29 INFO: Wazuh manager removed.
08/07/2024 15:40:29 INFO: Removing Wazuh indexer.
Dependencies resolved.
================================================================================
 Package                Architecture    Version           Repository       Size
================================================================================
Removing:
 wazuh-indexer          x86_64          4.9.0-1           @wazuh          1.0 G

Transaction Summary
================================================================================
Remove  1 Package

Freed space: 1.0 G
Running transaction check
Transaction check succeeded.
Running transaction test
Transaction test succeeded.
Running transaction
  Preparing        :                                                        1/1 
  Running scriptlet: wazuh-indexer-4.9.0-1.x86_64                           1/1 
Stopping wazuh-indexer service... OK

  Erasing          : wazuh-indexer-4.9.0-1.x86_64                           1/1 
warning: /etc/wazuh-indexer/opensearch.yml saved as /etc/wazuh-indexer/opensearch.yml.rpmsave
warning: /etc/wazuh-indexer/jvm.options saved as /etc/wazuh-indexer/jvm.options.rpmsave

  Running scriptlet: wazuh-indexer-4.9.0-1.x86_64                           1/1 
  Verifying        : wazuh-indexer-4.9.0-1.x86_64                           1/1 

Removed:
  wazuh-indexer-4.9.0-1.x86_64                                                  

Complete!
08/07/2024 15:40:32 WARNING: The Wazuh indexer package could not be removed.
08/07/2024 15:40:32 INFO: Removing Filebeat.
Dependencies resolved.
================================================================================
 Package            Architecture     Version             Repository        Size
================================================================================
Removing:
 filebeat           x86_64           7.10.2-1            @wazuh            70 M

Transaction Summary
================================================================================
Remove  1 Package

Freed space: 70 M
Running transaction check
Transaction check succeeded.
Running transaction test
Transaction test succeeded.
Running transaction
  Preparing        :                                                        1/1 
  Erasing          : filebeat-7.10.2-1.x86_64                               1/1 
warning: /etc/filebeat/filebeat.yml saved as /etc/filebeat/filebeat.yml.rpmsave

  Running scriptlet: filebeat-7.10.2-1.x86_64                               1/1 
  Verifying        : filebeat-7.10.2-1.x86_64                               1/1 

Removed:
  filebeat-7.10.2-1.x86_64                                                      

Complete!
08/07/2024 15:40:33 WARNING: The Filebeat package could not be removed.
08/07/2024 15:40:33 DEBUG: Removing GPG key from system.
08/07/2024 15:40:33 INFO: --- Dependencies ---
08/07/2024 15:40:33 INFO: Removing lsof.
Dependencies resolved. ================================================================================ Package Architecture Version Repository Size ===================================================
============================= Removing: lsof x86_64 4.93.2-1.el8 @baseos 623 k Transaction Summary ================================================================================ Remove 1 Package Fre
ed space: 623 k Running transaction check Transaction check succeeded. Running transaction test Transaction test succeeded. Running transaction Preparing : 1/1 Erasing : lsof-4.93.2-1.el8.x86_64 1/1 R
unning scriptlet: lsof-4.93.2-1.el8.x86_64 1/1 Verifying : lsof-4.93.2-1.el8.x86_64 1/1 Removed: lsof-4.93.2-1.el8.x86_64 Complete!
08/07/2024 15:40:34 INFO: Installation cleaned. Check the /var/log/wazuh-install.log file to learn more about the issue.