Wazuh API cannot start, multiple errors

Elastic Stack Elasticsearch
1

My wazuh-manager version installed v3.9.3 (for Kibana 7.1.1) but the wazuh-api cannot be started. I have run the following command to remove / reindex the system:
service kibana stop
curl -u elastic -XDELETE 10.0.106.144:9200/.kibana
curl -u elastic -XDELETE 10.0.106.144:9200/.wazuh
curl -u elastic -XDELETE 10.0.106.144:9200/.wazuh-version
rm -rf /usr/share/kibana/optimize/bundles

When entering a new API Configuration, it prompt the error below:
image

Then I reinstall the API using this command: sudo -u kibana /usr/share/kibana/bin/kibana-plugin install https://packages.wazuh.com/wazuhapp/wazuhapp-3.9.3_7.1.1.zip.

Next "ERROR: Wazuh manager v3.9.3 found. Wazuh manager v2.1.x expected. Exiting." this error was found under API log.

How do I check my wazuh-api version when I cannot curl and check?

2

That looks like a dedicated wazuh issue to me and you might have more success in their forum/mailinglist or whatever other means of troubleshooting wazuh supports.

Thanks!

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.