Wazuh Issue #1913

Closed
opened 2025-11-20 05:19:44 -05:00 by saavagebueno · 10 comments
Owner

Originally created by @Samaze123 on GitHub (Sep 19, 2025).

Have you read and understood the above guidelines?

Yes

📜 What is the name of the script you are using?

Wazuh

📂 What was the exact command used to execute the script?

bash -c "$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/ct/wazuh.sh)"

⚙️ What settings are you using?

  • Default Settings
  • Advanced Settings

🖥️ Which Linux distribution are you using?

Debian 12

📈 Which Proxmox version are you on?

6.8.12-13-pve

📝 Provide a clear and concise description of the issue.

When executing the command, I'm getting an error:

Image

I tried multiple times before submitting this issue to check if it was really the script or something else.

🔄 Steps to reproduce the issue.

  1. Executing the script in default mode
  2. Write y when ask to use the wazuh script
  3. Get the error

Paste the full error output (if available).

Image

🖼️ Additional context (optional).

No response

Originally created by @Samaze123 on GitHub (Sep 19, 2025). ### ✅ Have you read and understood the above guidelines? Yes ### 📜 What is the name of the script you are using? Wazuh ### 📂 What was the exact command used to execute the script? bash -c "$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/ct/wazuh.sh)" ### ⚙️ What settings are you using? - [x] Default Settings - [ ] Advanced Settings ### 🖥️ Which Linux distribution are you using? Debian 12 ### 📈 Which Proxmox version are you on? 6.8.12-13-pve ### 📝 Provide a clear and concise description of the issue. When executing the command, I'm getting an error: <img width="1674" height="620" alt="Image" src="https://github.com/user-attachments/assets/27e27036-bb3f-486c-b187-88175c8a4381" /> I tried multiple times before submitting this issue to check if it was really the script or something else. ### 🔄 Steps to reproduce the issue. 1. Executing the script in default mode 2. Write `y` when ask to use the wazuh script 3. Get the error ### ❌ Paste the full error output (if available). <img width="1674" height="620" alt="Image" src="https://github.com/user-attachments/assets/c300dd7c-dc0f-4238-99b7-fd045389dcf3" /> ### 🖼️ Additional context (optional). _No response_
saavagebueno added the not a script issueexternal labels 2025-11-20 05:19:44 -05:00
Author
Owner

@MickLesk commented on GitHub (Sep 19, 2025):

Run verbose. Its the build in Installer from wazuh, so it should reported to there repo

Or pct enter lxcid and then cat the Log ~/wazuh-install.output

@MickLesk commented on GitHub (Sep 19, 2025): Run verbose. Its the build in Installer from wazuh, so it should reported to there repo Or pct enter lxcid and then cat the Log ~/wazuh-install.output
Author
Owner

@Samaze123 commented on GitHub (Sep 19, 2025):

Here is the verbose from the Wazuh script.

Image

I opened an issue on their repo: https://github.com/wazuh/wazuh/issues/32052

@Samaze123 commented on GitHub (Sep 19, 2025): Here is the verbose from the Wazuh script. <img width="1422" height="624" alt="Image" src="https://github.com/user-attachments/assets/5cf1fbca-4880-456f-a772-716a29a0d352" /> I opened an issue on their repo: https://github.com/wazuh/wazuh/issues/32052
Author
Owner

@MickLesk commented on GitHub (Sep 19, 2025):

Whats inside of /var/log/wazuh-install.log ?

@MickLesk commented on GitHub (Sep 19, 2025): Whats inside of /var/log/wazuh-install.log ?
Author
Owner

@Samaze123 commented on GitHub (Sep 19, 2025):

Image
Image

I can't get inside the LXC due to a password

@Samaze123 commented on GitHub (Sep 19, 2025): <img width="420" height="31" alt="Image" src="https://github.com/user-attachments/assets/a45cb70f-bffb-4391-888f-3cde0a5878f0" /> ---- <img width="443" height="114" alt="Image" src="https://github.com/user-attachments/assets/be0f6265-5a1a-4c26-a758-437a0c961e65" /> I can't get inside the LXC due to a password
Author
Owner

@MickLesk commented on GitHub (Sep 19, 2025):

With pct enter lxcid you can enter into LXC

@MickLesk commented on GitHub (Sep 19, 2025): With pct enter lxcid you can enter into LXC
Author
Owner

@Samaze123 commented on GitHub (Sep 19, 2025):

root@wazuh:~# cat /var/log/wazuh-install.log
19/09/2025 21:56:18 INFO: Starting Wazuh installation assistant. Wazuh version: 4.13.0
19/09/2025 21:56:18 INFO: Verbose logging redirected to /var/log/wazuh-install.log
19/09/2025 21:56:18 INFO: The recommended systems are: Red Hat Enterprise Linux 7, 8, 9; CentOS 7, 8; Amazon Linux 2; Amazon Linux 2023; Ubuntu 16.04, 18.04, 20.04, 22.04; Rocky Linux 9.4.
19/09/2025 21:56:18 WARNING: The current system does not match with the list of recommended systems. The installation may not work properly.
Hit:1 http://security.debian.org bookworm-security InRelease
Hit:2 http://deb.debian.org/debian bookworm InRelease
Hit:3 http://deb.debian.org/debian bookworm-updates InRelease
Reading package lists...
19/09/2025 21:56:20 INFO: --- Dependencies ----
19/09/2025 21:56:20 INFO: Installing gawk.
Reading package lists... Building dependency tree... Reading state information... The following additional packages will be installed: libmpfr6 libsigsegv2 Suggested packages: gawk-doc The following NEW packages will be installed: gawk libmpfr6 libsigsegv2 0 upgraded, 3 newly installed, 0 to remove and 0 not upgraded. Need to get 1,411 kB of archives. After this operation, 4,253 kB of additional disk space will be used. Get:1 http://deb.debian.org/debian bookworm/main amd64 libmpfr6 amd64 4.2.0-1 [701 kB] Get:2 http://deb.debian.org/debian bookworm/main amd64 libsigsegv2 amd64 2.14-1 [37.2 kB] Get:3 http://deb.debian.org/deb Processing triggers for libc-bin (2.36-9+deb12u13) ...ntly installed.)in 0s (18.6 MB/s) Selecting previously unselected package libmpfr6:amd64.
19/09/2025 21:56:22 INFO: Verifying that your system meets the recommended minimum hardware requirements.
19/09/2025 21:56:22 INFO: Wazuh web interface port will be 443.
Hit:1 http://deb.debian.org/debian bookworm InRelease
Hit:2 http://security.debian.org bookworm-security InRelease
Hit:3 http://deb.debian.org/debian bookworm-updates InRelease
Reading package lists...
19/09/2025 21:56:25 INFO: --- Dependencies ----
19/09/2025 21:56:25 INFO: Installing apt-transport-https.
Reading package lists... Building dependency tree... Reading state information... The following NEW packages will be installed: apt-transport-https 0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded. Need to get 25.2 kB of archives. After this operation, 35.8 kB of additional disk space will be used. Get:1 http://deb.debian.org/debian bookworm/main amd64 apt-transport-https all 2.6.1 [25.2 kB] Fetched 25.2 kB in 0s (1,038 kB/s) Selecting previously unselected Setting up apt-transport-https (2.6.1) ...s_2.6.1_all.deb ...stalled.)
19/09/2025 21:56:26 INFO: Installing debhelper.
Reading package lists... Building dependency tree... Reading state information... The following additional packages will be installed: autoconf automake autopoint autotools-dev binutils binutils-common binutils-x86-64-linux-gnu build-essential cpp cpp-12 dh-autoreconf dh-strip-nondeterminism dpkg-dev dwz fakeroot fontconfig-config fonts-dejavu-core g++ g++-12 gcc gcc-12 gettext intltool-debian libabsl20220623 libalgorithm-diff-perl libalgorithm-diff-xs-perl libalgorithm-merge-perl libaom3 libarchive-cpio-perl libarchive-zip-perl libasan8 libatomic1 libavif15 libbinutils libc-dev-bin libc-devtools libc6-dev libcc1-0 libcrypt-dev libctf-nobfd0 libctf0 libdav1d6 libde265-0 libdebhelper-perl libdeflate0 libdpkg-perl libfakeroot libfile-fcntllock-perl libfile-stripnondeterminism-perl libfontconfig1 libfreetype6 libgav1-1 libgcc-12-dev libgd3 libgomp1 libgprofng0 libheif1 libisl23 libitm1 libjbig0 libjpeg62-turbo liblerc4 liblsan0 libltdl-dev libltdl7 libmail-sendmail-perl libmpc3 libnsl-dev libnuma1 libpng16-16 libquadmath0 librav1e0 libstdc++-12-dev libsub-override-perl libsvtav1enc1 libsys-hostname-long-perl libtiff6 libtirpc-dev libtool libtsan2 libubsan1 libwebp7 libx11-6 libx11-data libx265-199 libxau6 libxcb1 libxdmcp6 libxpm4 libyuv0 linux-libc-dev m4 make manpages-dev patch po-debconf rpcsvc-proto Suggested packages: autoconf-archive gnu-standards autoconf-doc binutils-doc cpp-doc gcc-12-locales cpp-12-doc dh-make debian-keyring g++-multilib g++-12-multilib gcc-12-doc gcc-multilib flex bison gdb gcc-doc gcc-12-multilib gettext-doc libasprintf-dev libgettextpo-dev glibc-doc git bzr libgd-tools libtool-doc libstdc++-12-doc gfortran | fortran95-compiler gcj-jdk m4-doc make-doc ed diffutils-doc libmail-box-perl The following NEW packages will be installed: autoconf automake autopoint autotools-dev binutils binutils-common binutils-x86-64-linux-gnu build-essential cpp cpp-12 debhelper dh-autoreconf dh-strip-nondeterminism dpkg-dev dwz fakeroot fontconfig-config fonts-dejavu-core g++ g++-12 gcc gcc-12 gettext intltool-debian libabsl20220623 libalgorithm-diff-perl libalgorithm-diff-xs-perl libalgorithm-merge-perl libaom3 libarchive-cpio-perl libarchive-zip-perl libasan8 libatomic1 libavif15 libbinutils libc-dev-bin libc-devtools libc6-dev libcc1-0 libcrypt-dev libctf-nobfd0 libctf0 libdav1d6 libde265-0 libdebhelper-perl libdeflate0 libdpkg-perl libfakeroot libfile-fcntllock-perl libfile-stripnondeterminism-perl libfontconfig1 libfreetype6 libgav1-1 libgcc-12-dev libgd3 libgomp1 libgprofng0 libheif1 libisl23 libitm1 libjbig0 libjpeg62-turbo liblerc4 liblsan0 libltdl-dev libltdl7 libmail-sendmail-perl libmpc3 libnsl-dev libnuma1 libpng16-16 libquadmath0 librav1e0 libstdc++-12-dev libsub-override-perl libsvtav1enc1 libsys-hostname-long-perl libtiff6 libtirpc-dev libtool libtsan2 libubsan1 libwebp7 libx11-6 libx11-data libx265-199 libxau6 libxcb1 libxdmcp6 libxpm4 libyuv0 linux-libc-dev m4 make manpages-dev patch po-debconf rpcsvc-proto 0 upgraded, 98 newly installed, 0 to remove and 0 not upgraded. Need to get 86.0 MB of archives. After this operation, 336 MB of additional disk space will be used. Get:1 http://deb.debian.org/debian bookworm/main amd64 m4 amd64 1.4.19-3 [287 kB] Get:2 http://deb.debian.org/debian bookworm/main amd64 autoconf all 2.71-3 [332 kB] Get:3 http://deb.debian.org/debian bookworm/main amd64 autotools-dev all 20220109.1 [51.6 kB] Get:4 http://deb.debian.org/debian bookworm/main amd64 automake all 1:1.16.5-1.3 [823 kB] Get:5 http://deb.debian.org/debian bookworm/main amd64 autopoint all 0.21-12 [495 kB] Get:6 http://deb.debian.org/debian bookworm/main amd64 binutils-common amd64 2.40-2 [2,487 kB] Get:7 http://deb.debian.org/debian bookworm/main amd64 libbinutils amd64 2.40-2 [572 kB] Get:8 http://deb.debian.org/debian bookworm/main amd64 libctf-nobfd0 amd64 2.40-2 [153 kB] Get:9 http://deb.debian.org/debian bookworm/main amd64 libctf0 amd64 2.40-2 [89.8 kB] Get:10 http://deb.debian.org/debian bookworm/main amd64 libgprofng0 amd64 2.40-2 [812 kB] Get:11 http://deb.debian.org/debian bookworm/main amd64 binutils-x86-64-linux-gnu amd64 2.40-2 [2,246 kB] Get:12 http://deb.debian.org/debian bookworm/main amd64 binutils amd64 2.40-2 [65.0 kB] Get:13 http://deb.debian.org/debian bookworm/main amd64 libc-dev-bin amd64 2.36-9+deb12u13 [47.4 kB] Get:14 http://deb.debian.org/debian bookworm/main amd64 linux-libc-dev amd64 6.1.148-1 [2,176 kB] Get:15 http://deb.debian.org/debian bookworm/main amd64 libcrypt-dev amd64 1:4.4.33-2 [118 kB] Get:16 http://deb.debian.org/debian bookworm/main amd64 libtirpc-dev amd64 1.3.3+ds-1 [191 kB] Get:17 http://deb.debian.org/debian bookworm/main amd64 libnsl-dev amd64 1.3.0-2 [66.4 kB] Get:18 http://deb.debian.org/debian bookworm/main amd64 rpcsvc-proto amd64 1.4.3-1 [63.3 kB] Get:19 http://deb.debian.org/debian bookworm/main amd64 libc6-dev amd64 2.36-9+deb12u13 [1,904 kB] Get:20 http://deb.debian.org/debian bookworm/main amd64 libisl23 amd64 0.25-1.1 [683 kB] Get:21 http://deb.debian.org/debian bookworm/main amd64 libmpc3 amd64 1.3.1-1 [51.5 kB] Get:22 http://deb.debian.org/debian bookworm/main amd64 cpp-12 amd64 12.2.0-14+deb12u1 [9,768 kB] Get:23 http://deb.debian.org/debian bookworm/main amd64 cpp amd64 4:12.2.0-3 [6,836 B] Get:24 http://deb.debian.org/debian bookworm/main amd64 libcc1-0 amd64 12.2.0-14+deb12u1 [41.7 kB] Get:25 http://deb.debian.org/debian bookworm/main amd64 libgomp1 amd64 12.2.0-14+deb12u1 [116 kB] Get:26 http://deb.debian.org/debian bookworm/main amd64 libitm1 amd64 12.2.0-14+deb12u1 [26.1 kB] Get:27 http://deb.debian.org/debian bookworm/main amd64 libatomic1 amd64 12.2.0-14+deb12u1 [9,376 B] Get:28 http://deb.debian.org/debian bookworm/main amd64 libasan8 amd64 12.2.0-14+deb12u1 [2,193 kB] Get:29 http://deb.debian.org/debian bookworm/main amd64 liblsan0 amd64 12.2.0-14+deb12u1 [969 kB] Get:30 http://deb.debian.org/debian bookworm/main amd64 libtsan2 amd64 12.2.0-14+deb12u1 [2,197 kB] Get:31 http://deb.debian.org/debian bookworm/main amd64 libubsan1 amd64 12.2.0-14+deb12u1 [883 kB] Get:32 http://deb.debian.org/debian bookworm/main amd64 libquadmath0 amd64 12.2.0-14+deb12u1 [145 kB] Get:33 http://deb.debian.org/debian bookworm/main amd64 libgcc-12-dev amd64 12.2.0-14+deb12u1 [2,437 kB] Get:34 http://deb.debian.org/debian bookworm/main amd64 gcc-12 amd64 12.2.0-14+deb12u1 [19.3 MB] Get:35 http://deb.debian.org/debian bookworm/main amd64 gcc amd64 4:12.2.0-3 [5,216 B] Get:36 http://deb.debian.org/debian bookworm/main amd64 libstdc++-12-dev amd64 12.2.0-14+deb12u1 [2,047 kB] Get:37 http://deb.debian.org/debian bookworm/main amd64 g++-12 amd64 12.2.0-14+deb12u1 [10.7 MB] Get:38 http://deb.debian.org/debian bookworm/main amd64 g++ amd64 4:12.2.0-3 [1,356 B] Get:39 http://deb.debian.org/debian bookworm/main amd64 make amd64 4.3-4.1 [396 kB] Get:40 http://deb.debian.org/debian bookworm/main amd64 libdpkg-perl all 1.21.22 [603 kB] Get:41 http://deb.debian.org/debian bookworm/main amd64 patch amd64 2.7.6-7 [128 kB] Get:42 http://deb.debian.org/debian bookworm/main amd64 dpkg-dev all 1.21.22 [1,353 kB] Get:43 http://deb.debian.org/debian bookworm/main amd64 build-essential amd64 12.9 [7,704 B] Get:44 http://deb.debian.org/debian bookworm/main amd64 libdebhelper-perl all 13.11.4 [81.2 kB] Get:45 http://deb.debian.org/debian bookworm/main amd64 libtool all 2.4.7-7~deb12u1 [517 kB] Get:46 http://deb.debian.org/debian bookworm/main amd64 dh-autoreconf all 20 [17.1 kB] Get:47 http://deb.debian.org/debian bookworm/main amd64 libarchive-zip-perl all 1.68-1 [104 kB] Get:48 http://deb.debian.org/debian bookworm/main amd64 libsub-override-perl all 0.09-4 [9,304 B] Get:49 http://deb.debian.org/debian bookworm/main amd64 libfile-stripnondeterminism-perl all 1.13.1-1 [19.4 kB] Get:50 http://deb.debian.org/debian bookworm/main amd64 dh-strip-nondeterminism all 1.13.1-1 [8,620 B] Get:51 http://deb.debian.org/debian bookworm/main amd64 dwz amd64 0.15-1 [109 kB] Get:52 http://deb.debian.org/debian bookworm/main amd64 gettext amd64 0.21-12 [1,300 kB] Get:53 http://deb.debian.org/debian bookworm/main amd64 intltool-debian all 0.35.0+20060710.6 [22.9 kB] Get:54 http://deb.debian.org/debian bookworm/main amd64 po-debconf all 1.0.21+nmu1 [248 kB] Get:55 http://deb.debian.org/debian bookworm/main amd64 debhelper all 13.11.4 [942 kB] Get:56 http://deb.debian.org/debian bookworm/main amd64 libfakeroot amd64 1.31-1.2 [28.3 kB] Get:57 http://deb.debian.org/debian bookworm/main amd64 fakeroot amd64 1.31-1.2 [66.9 kB] Get:58 http://deb.debian.org/debian bookworm/main amd64 fonts-dejavu-core all 2.37-6 [1,068 kB] Get:59 http://deb.debian.org/debian bookworm/main amd64 fontconfig-config amd64 2.14.1-4 [315 kB] Get:60 http://deb.debian.org/debian bookworm/main amd64 libabsl20220623 amd64 20220623.1-1+deb12u2 [391 kB] Get:61 http://deb.debian.org/debian bookworm/main amd64 libalgorithm-diff-perl all 1.201-1 [43.3 kB] Get:62 http://deb.debian.org/debian bookworm/main amd64 libalgorithm-diff-xs-perl amd64 0.04-8+b1 [11.4 kB] Get:63 http://deb.debian.org/debian bookworm/main amd64 libalgorithm-merge-perl all 0.08-5 [11.8 kB] Get:64 http://deb.debian.org/debian bookworm/main amd64 libaom3 amd64 3.6.0-1+deb12u2 [1,850 kB] Get:65 http://deb.debian.org/debian bookworm/main amd64 libarchive-cpio-perl all 0.10-3 [10.8 kB] Get:66 http://deb.debian.org/debian bookworm/main amd64 libdav1d6 amd64 1.0.0-2+deb12u1 [513 kB] Get:67 http://deb.debian.org/debian bookworm/main amd64 libgav1-1 amd64 0.18.0-1+b1 [332 kB] Get:68 http://deb.debian.org/debian bookworm/main amd64 librav1e0 amd64 0.5.1-6 [763 kB] Get:69 http://deb.debian.org/debian bookworm/main amd64 libsvtav1enc1 amd64 1.4.1+dfsg-1 [2,121 kB] Get:70 http://deb.debian.org/debian bookworm/main amd64 libjpeg62-turbo amd64 1:2.1.5-2 [166 kB] Get:71 http://deb.debian.org/debian bookworm/main amd64 libyuv0 amd64 0.0~git20230123.b2528b0-1 [168 kB] Get:72 http://deb.debian.org/debian bookworm/main amd64 libavif15 amd64 0.11.1-1+deb12u1 [94.4 kB] Get:73 http://deb.debian.org/debian bookworm/main amd64 libpng16-16 amd64 1.6.39-2 [276 kB] Get:74 http://deb.debian.org/debian bookworm/main amd64 libfreetype6 amd64 2.12.1+dfsg-5+deb12u4 [398 kB] Get:75 http://deb.debian.org/debian bookworm/main amd64 libfontconfig1 amd64 2.14.1-4 [386 kB] Get:76 http://deb.debian.org/debian bookworm/main amd64 libde265-0 amd64 1.0.11-1+deb12u2 [185 kB] Get:77 http://deb.debian.org/debian bookworm/main amd64 libnuma1 amd64 2.0.16-1 [21.0 kB] Get:78 http://deb.debian.org/debian bookworm/main amd64 libx265-199 amd64 3.5-2+b1 [1,150 kB] Get:79 http://deb.debian.org/debian bookworm/main amd64 libheif1 amd64 1.15.1-1+deb12u1 [215 kB] Get:80 http://deb.debian.org/debian bookworm/main amd64 libdeflate0 amd64 1.14-1 [61.4 kB] Get:81 http://deb.debian.org/debian bookworm/main amd64 libjbig0 amd64 2.1-6.1 [31.7 kB] Get:82 http://deb.debian.org/debian bookworm/main amd64 liblerc4 amd64 4.0.0+ds-2 [170 kB] Get:83 http://deb.debian.org/debian bookworm/main amd64 libwebp7 amd64 1.2.4-0.2+deb12u1 [286 kB] Get:84 http://deb.debian.org/debian bookworm/main amd64 libtiff6 amd64 4.5.0-6+deb12u2 [316 kB] Get:85 http://deb.debian.org/debian bookworm/main amd64 libxau6 amd64 1:1.0.9-1 [19.7 kB] Get:86 http://deb.debian.org/debian bookworm/main amd64 libxdmcp6 amd64 1:1.1.2-3 [26.3 kB] Get:87 http://deb.debian.org/debian bookworm/main amd64 libxcb1 amd64 1.15-1 [144 kB] Get:88 http://deb.debian.org/debian bookworm/main amd64 libx11-data all 2:1.8.4-2+deb12u2 [292 kB] Get:89 http://deb.debian.org/debian bookworm/main amd64 libx11-6 amd64 2:1.8.4-2+deb12u2 [760 kB] Get:90 http://deb.debian.org/debian bookworm/main amd64 libxpm4 amd64 1:3.5.12-1.1+deb12u1 [48.6 kB] Get:91 http://deb.debian.org/debian bookworm/main amd64 libgd3 amd64 2.3.3-9 [124 kB] Get:92 http://deb.debian.org/debian bookworm/main amd64 libc-devtools amd64 2.36-9+deb12u13 [55.0 kB] Get:93 http://deb.debian.org/debian bookworm/main amd64 libfile-fcntllock-perl amd64 0.22-4+b1 [34.8 kB] Get:94 http://deb.debian.org/debian bookworm/main amd64 libltdl7 amd64 2.4.7-7~deb12u1 [393 kB] Get:95 http://deb.debian.org/debian bookworm/main amd64 libltdl-dev amd64 2.4.7-7~deb12u1 [164 kB] Get:96 http://deb.debian.org/debian bookworm/main amd64 libsys-hostname-long-perl all 1.5-3 [11.6 kB] Get:97 http://deb.debian.org/debian bookworm/main amd64 libmail-sendmail-perl all 0.80-3 [24.3 kB] Get:98 http://deb.debian.org/debian bookworm/main amd64 manpages-dev all 6.03-2 [2,030 kB] Preconfigu Processing triggers for man-db (2.11.2-2) ...2u13) ...r/bin/c++ (c++) in auto modetomake) in auto mode
19/09/2025 21:56:52 INFO: Installing software-properties-common.
Reading package lists... Building dependency tree... Reading state information... The following additional packages will be installed: appstream gir1.2-glib-2.0 gir1.2-packagekitglib-1.0 iso-codes libappstream4 libduktape207 libdw1 libgirepository-1.0-1 libglib2.0-bin libgstreamer1.0-0 libpackagekit-glib2-18 libpolkit-agent-1-0 libpolkit-gobject-1-0 libstemmer0d libunwind8 libxmlb2 libyaml-0-2 lsb-release packagekit packagekit-tools polkitd python3-blinker python3-cffi-backend python3-cryptography python3-dbus python3-distro python3-gi python3-jwt python3-lazr.restfulclient python3-lazr.uri python3-oauthlib python3-software-properties python3-wadllib sgml-base xml-core Suggested packages: apt-config-icons isoquery gstreamer1.0-tools polkitd-pkla python-blinker-doc python-cryptography-doc python3-cryptography-vectors python-dbus-doc python3-crypto sgml-base-doc The following NEW packages will be installed: appstream gir1.2-glib-2.0 gir1.2-packagekitglib-1.0 iso-codes libappstream4 libduktape207 libdw1 libgirepository-1.0-1 libglib2.0-bin libgstreamer1.0-0 libpackagekit-glib2-18 libpolkit-agent-1-0 libpolkit-gobject-1-0 libstemmer0d libunwind8 libxmlb2 libyaml-0-2 lsb-release packagekit packagekit-tools polkitd python3-blinker python3-cffi-backend python3-cryptography python3-dbus python3-distro python3-gi python3-jwt python3-lazr.restfulclient python3-lazr.uri python3-oauthlib python3-software-properties python3-wadllib sgml-base software-properties-common xml-core 0 upgraded, 36 newly installed, 0 to remove and 0 not upgraded. Need to get 8,128 kB of archives. After this operation, 43.3 MB of additional disk space will be used. Get:1 http://deb.debian.org/debian bookworm/main amd64 sgml-base all 1.31 [15.4 kB] Get:2 http://deb.debian.org/debian bookworm/main amd64 libstemmer0d amd64 2.2.0-2 [118 kB] Get:3 http://deb.debian.org/debian bookworm/main amd64 libxmlb2 amd64 0.3.10-2 [60.2 kB] Get:4 http://deb.debian.org/debian bookworm/main amd64 libyaml-0-2 amd64 0.2.5-1 [53.6 kB] Get:5 http://deb.debian.org/debian bookworm/main amd64 libappstream4 amd64 0.16.1-2 [199 kB] Get:6 http://deb.debian.org/debian bookworm/main amd64 appstream amd64 0.16.1-2 [407 kB] Get:7 http://deb.debian.org/debian bookworm/main amd64 libgirepository-1.0-1 amd64 1.74.0-3 [101 kB] Get:8 http://deb.debian.org/debian bookworm/main amd64 gir1.2-glib-2.0 amd64 1.74.0-3 [159 kB] Get:9 http://deb.debian.org/debian bookworm/main amd64 libpackagekit-glib2-18 amd64 1.2.6-5 [113 kB] Get:10 http://deb.debian.org/debian bookworm/main amd64 gir1.2-packagekitglib-1.0 amd64 1.2.6-5 [25.9 kB] Get:11 http://deb.debian.org/debian bookworm/main amd64 iso-codes all 4.15.0-1 [2,906 kB] Get:12 http://deb.debian.org/debian bookworm/main amd64 libduktape207 amd64 2.7.0-2 [134 kB] Get:13 http://deb.debian.org/debian bookworm/main amd64 libdw1 amd64 0.188-2.1 [235 kB] Get:14 http://deb.debian.org/debian bookworm/main amd64 libglib2.0-bin amd64 2.74.6-2+deb12u7 [112 kB] Get:15 http://deb.debian.org/debian bookworm/main amd64 libunwind8 amd64 1.6.2-3 [51.2 kB] Get:16 http://deb.debian.org/debian bookworm/main amd64 libgstreamer1.0-0 amd64 1.22.0-2+deb12u1 [1,170 kB] Get:17 http://deb.debian.org/debian bookworm/main amd64 libpolkit-gobject-1-0 amd64 122-3 [43.9 kB] Get:18 http://deb.debian.org/debian bookworm/main amd64 libpolkit-agent-1-0 amd64 122-3 [24.4 kB] Get:19 http://deb.debian.org/debian bookworm/main amd64 lsb-release all 12.0-1 [6,416 B] Get:20 http://deb.debian.org/debian bookworm/main amd64 xml-core all 0.18+nmu1 [23.8 kB] Get:21 http://deb.debian.org/debian bookworm/main amd64 polkitd amd64 122-3 [112 kB] Get:22 http://deb.debian.org/debian bookworm/main amd64 packagekit amd64 1.2.6-5 [610 kB] Get:23 http://deb.debian.org/debian bookworm/main amd64 packagekit-tools amd64 1.2.6-5 [30.9 kB] Get:24 http://deb.debian.org/debian bookworm/main amd64 python3-blinker all 1.5-1 [14.7 kB] Get:25 http://deb.debian.org/debian bookworm/main amd64 python3-cffi-backend amd64 1.15.1-5+b1 [84.6 kB] Get:26 http://deb.debian.org/debian bookworm/main amd64 python3-cryptography amd64 38.0.4-3+deb12u1 [665 kB] Get:27 http://deb.debian.org/debian bookworm/main amd64 python3-dbus amd64 1.3.2-4+b1 [95.1 kB] Get:28 http://deb.debian.org/debian bookworm/main amd64 python3-distro all 1.8.0-1 [20.5 kB] Get:29 http://deb.debian.org/debian bookworm/main amd64 python3-gi amd64 3.42.2-3+b1 [219 kB] Get:30 http://deb.debian.org/debian bookworm/main amd64 python3-jwt all 2.6.0-1 [26.6 kB] Get:31 http://deb.debian.org/debian bookworm/main amd64 python3-lazr.uri all 1.0.6-3 [13.7 kB] Get:32 http://deb.debian.org/debian bookworm/main amd64 python3-wadllib all 1.3.6-4 [37.2 kB] Get:33 http://deb.debian.org/debian bookworm/main amd64 python3-oauthlib all 3.2.2-1 [95.4 kB] Get:34 http://deb.debian.org/debian bookworm/main amd64 python3-lazr.restfulclient all 0.14.5-1 [50.4 kB] Get:35 http://deb.debian.org/debian bookworm/main amd64 python3-software-properties all 0.99.30-4.1~deb12u1 [32.9 kB] Get:36 http://deb.debian.org/debian bookworm/main am Processing triggers for dbus (1.14.10-1~deb12u1) ...eb12u1) ...nf-helper.socket → /usr/lib/systemd/user/pk-debconf-helper.socket.d package sgml-base.
gpg: keyring '/usr/share/keyrings/wazuh.gpg' created
gpg: directory '/root/.gnupg' created
gpg: /root/.gnupg/trustdb.gpg: trustdb created
gpg: key 96B3EE5F29111145: public key "Wazuh.com (Wazuh Signing Key) <support@wazuh.com>" imported
gpg: Total number processed: 1
gpg:               imported: 1
deb [signed-by=/usr/share/keyrings/wazuh.gpg] https://packages.wazuh.com/4.x/apt/ stable main
Hit:1 http://deb.debian.org/debian bookworm InRelease
Hit:2 http://security.debian.org bookworm-security InRelease
Hit:3 http://deb.debian.org/debian bookworm-updates InRelease
Get:4 https://packages.wazuh.com/4.x/apt stable InRelease [17.3 kB]
Get:5 http://deb.debian.org/debian bookworm/main amd64 DEP-11 Metadata [4,492 kB]
Get:6 http://deb.debian.org/debian bookworm/contrib amd64 DEP-11 Metadata [16.5 kB]
Get:7 https://packages.wazuh.com/4.x/apt stable/main amd64 Packages [47.4 kB]
Fetched 4,574 kB in 1s (4,813 kB/s)
Reading package lists...
19/09/2025 21:57:07 INFO: Wazuh repository added.
19/09/2025 21:57:07 INFO: --- Configuration files ---
19/09/2025 21:57:07 INFO: Generating configuration files.
19/09/2025 21:57:07 INFO: Generating the root certificate.
19/09/2025 21:57:08 INFO: Generating Admin certificates.
19/09/2025 21:57:08 INFO: Generating Wazuh indexer certificates.
19/09/2025 21:57:08 INFO: Generating Filebeat certificates.
19/09/2025 21:57:08 INFO: Generating Wazuh dashboard certificates.
19/09/2025 21:57:08 INFO: Created wazuh-install-files.tar. It contains the Wazuh cluster key, certificates, and passwords necessary for installation.
19/09/2025 21:57:08 INFO: --- Wazuh indexer ---
19/09/2025 21:57:08 INFO: Starting Wazuh indexer installation.
Reading package lists... Building dependency tree... Reading state information... The following NEW packages will be installed: wazuh-indexer 0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded. Need to get 856 MB of archives. After this operation, 1,081 MB of additional disk space will be used. Get:1 https://packages.wazuh.com/4.x/apt stable/main amd64 wazuh-indexer amd64 4.13.0-1 [856 MB] Fetched 856 MB in 10s (89.8 MB/s) Selecting previously unselected pack sudo systemctl start wazuh-indexer.service executing following statements to configure wazuh-indexer service to start automatically using systemd
19/09/2025 21:57:25 INFO: Wazuh indexer installation finished.
sysctl: permission denied on key "vm.max_map_count"
19/09/2025 21:57:25 INFO: Wazuh indexer post-install configuration finished.
19/09/2025 21:57:25 INFO: Starting service wazuh-indexer.
Synchronizing state of wazuh-indexer.service with SysV service script with /lib/systemd/systemd-sysv-install.
Executing: /lib/systemd/systemd-sysv-install enable wazuh-indexer
Created symlink /etc/systemd/system/multi-user.target.wants/wazuh-indexer.service → /lib/systemd/system/wazuh-indexer.service.
19/09/2025 21:57:35 INFO: wazuh-indexer service started.
19/09/2025 21:57:35 INFO: Initializing Wazuh indexer cluster security settings.
Security Admin v7
Will connect to 127.0.0.1:9200 ... done
Connected as "CN=admin,OU=Wazuh,O=Wazuh,L=California,C=US"
OpenSearch Version: 2.19.2
Contacting opensearch cluster 'opensearch' and wait for YELLOW clusterstate ...
Clustername: wazuh-cluster
Clusterstate: GREEN
Number of nodes: 1
Number of data nodes: 1
.opendistro_security index does not exists, attempt to create it ... done (0-all replicas)
Populate config from /etc/wazuh-indexer/opensearch-security/
Will update '/config' with /etc/wazuh-indexer/opensearch-security/config.yml 
   SUCC: Configuration for 'config' created or updated
Will update '/roles' with /etc/wazuh-indexer/opensearch-security/roles.yml 
   SUCC: Configuration for 'roles' created or updated
Will update '/rolesmapping' with /etc/wazuh-indexer/opensearch-security/roles_mapping.yml 
   SUCC: Configuration for 'rolesmapping' created or updated
Will update '/internalusers' with /etc/wazuh-indexer/opensearch-security/internal_users.yml 
   SUCC: Configuration for 'internalusers' created or updated
Will update '/actiongroups' with /etc/wazuh-indexer/opensearch-security/action_groups.yml 
   SUCC: Configuration for 'actiongroups' created or updated
Will update '/tenants' with /etc/wazuh-indexer/opensearch-security/tenants.yml 
   SUCC: Configuration for 'tenants' created or updated
Will update '/nodesdn' with /etc/wazuh-indexer/opensearch-security/nodes_dn.yml 
   SUCC: Configuration for 'nodesdn' created or updated
Will update '/whitelist' with /etc/wazuh-indexer/opensearch-security/whitelist.yml 
   SUCC: Configuration for 'whitelist' created or updated
Will update '/audit' with /etc/wazuh-indexer/opensearch-security/audit.yml 
   SUCC: Configuration for 'audit' created or updated
Will update '/allowlist' with /etc/wazuh-indexer/opensearch-security/allowlist.yml 
   SUCC: Configuration for 'allowlist' created or updated
SUCC: Expected 10 config types for node {"updated_config_types":["allowlist","tenants","rolesmapping","nodesdn","audit","roles","whitelist","actiongroups","config","internalusers"],"updated_config_size":10,"message":null} is 10 (["allowlist","tenants","rolesmapping","nodesdn","audit","roles","whitelist","actiongroups","config","internalusers"]) due to: null
Done with success
19/09/2025 21:57:38 INFO: Wazuh indexer cluster security configuration initialized.
19/09/2025 21:57:38 INFO: Wazuh indexer cluster initialized.
19/09/2025 21:57:38 INFO: --- Wazuh server ---
19/09/2025 21:57:38 INFO: Starting the Wazuh manager installation.
Reading package lists... Building dependency tree... Reading state information... Suggested packages: expect The following NEW packages will be installed: wazuh-manager 0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded. Need to get 433 MB of archives. After this operation, 1,020 MB of additional disk space will be used. Err:1 https://packages.wazuh.com/4.x/apt stable/main amd64 wazuh-manager amd64 4.13.0-1 403 Forbidden [IP: 3.160.150.81 443] E: Failed to fetch https://packages.wazuh.com/4.x/apt/pool/main/w/wazuh-manager/wazuh-manager_4.13.0-1_amd64.deb 403 Forbidden [IP: 3.160.150.81 443] E: Unable to fetch some archives, maybe run apt-get update or try with --fix-missing?
19/09/2025 21:57:40 ERROR: Wazuh installation failed.
19/09/2025 21:57:40 INFO: --- Removing existing Wazuh installation ---
19/09/2025 21:57:40 INFO: Removing Wazuh indexer.
Reading package lists...
Building dependency tree...
Reading state information...
The following packages will be REMOVED:
  wazuh-indexer*
0 upgraded, 0 newly installed, 1 to remove and 0 not upgraded.
After this operation, 1,081 MB disk space will be freed.
(Reading database ... 32155 files and directories currently installed.)
Removing wazuh-indexer (4.13.0-1) ...
Running Wazuh Indexer Pre-Removal Script
Stop existing wazuh-indexer.service
(Reading database ... 31004 files and directories currently installed.)
Purging configuration files for wazuh-indexer (4.13.0-1) ...
dpkg: warning: while removing wazuh-indexer, directory '/var/log/wazuh-indexer' not empty so not removed
dpkg: warning: while removing wazuh-indexer, directory '/var/lib/wazuh-indexer' not empty so not removed
dpkg: warning: while removing wazuh-indexer, directory '/etc/wazuh-indexer' not empty so not removed
19/09/2025 21:57:43 INFO: Wazuh indexer removed.
19/09/2025 21:57:44 INFO: --- Dependencies ----
19/09/2025 21:57:44 INFO: Removing gawk.
Reading package lists... Building dependency tree... Reading state information... The following package was automatically installed and is no longer required: libsigsegv2 Use 'apt autoremove' to remove it. The following packages will be REMOVED: gawk* 0 upgraded, 0 newly installed, 1 to remove and 0 not upgraded. A Purging configuration files for gawk (1:5.2.1-2) ...rently installed.) in auto mode
19/09/2025 21:57:46 INFO: Installation cleaned. Check the /var/log/wazuh-install.log file to learn more about the issue.
@Samaze123 commented on GitHub (Sep 19, 2025): ```bash root@wazuh:~# cat /var/log/wazuh-install.log 19/09/2025 21:56:18 INFO: Starting Wazuh installation assistant. Wazuh version: 4.13.0 19/09/2025 21:56:18 INFO: Verbose logging redirected to /var/log/wazuh-install.log 19/09/2025 21:56:18 INFO: The recommended systems are: Red Hat Enterprise Linux 7, 8, 9; CentOS 7, 8; Amazon Linux 2; Amazon Linux 2023; Ubuntu 16.04, 18.04, 20.04, 22.04; Rocky Linux 9.4. 19/09/2025 21:56:18 WARNING: The current system does not match with the list of recommended systems. The installation may not work properly. Hit:1 http://security.debian.org bookworm-security InRelease Hit:2 http://deb.debian.org/debian bookworm InRelease Hit:3 http://deb.debian.org/debian bookworm-updates InRelease Reading package lists... 19/09/2025 21:56:20 INFO: --- Dependencies ---- 19/09/2025 21:56:20 INFO: Installing gawk. Reading package lists... Building dependency tree... Reading state information... The following additional packages will be installed: libmpfr6 libsigsegv2 Suggested packages: gawk-doc The following NEW packages will be installed: gawk libmpfr6 libsigsegv2 0 upgraded, 3 newly installed, 0 to remove and 0 not upgraded. Need to get 1,411 kB of archives. After this operation, 4,253 kB of additional disk space will be used. Get:1 http://deb.debian.org/debian bookworm/main amd64 libmpfr6 amd64 4.2.0-1 [701 kB] Get:2 http://deb.debian.org/debian bookworm/main amd64 libsigsegv2 amd64 2.14-1 [37.2 kB] Get:3 http://deb.debian.org/deb Processing triggers for libc-bin (2.36-9+deb12u13) ...ntly installed.)in 0s (18.6 MB/s) Selecting previously unselected package libmpfr6:amd64. 19/09/2025 21:56:22 INFO: Verifying that your system meets the recommended minimum hardware requirements. 19/09/2025 21:56:22 INFO: Wazuh web interface port will be 443. Hit:1 http://deb.debian.org/debian bookworm InRelease Hit:2 http://security.debian.org bookworm-security InRelease Hit:3 http://deb.debian.org/debian bookworm-updates InRelease Reading package lists... 19/09/2025 21:56:25 INFO: --- Dependencies ---- 19/09/2025 21:56:25 INFO: Installing apt-transport-https. Reading package lists... Building dependency tree... Reading state information... The following NEW packages will be installed: apt-transport-https 0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded. Need to get 25.2 kB of archives. After this operation, 35.8 kB of additional disk space will be used. Get:1 http://deb.debian.org/debian bookworm/main amd64 apt-transport-https all 2.6.1 [25.2 kB] Fetched 25.2 kB in 0s (1,038 kB/s) Selecting previously unselected Setting up apt-transport-https (2.6.1) ...s_2.6.1_all.deb ...stalled.) 19/09/2025 21:56:26 INFO: Installing debhelper. Reading package lists... Building dependency tree... Reading state information... The following additional packages will be installed: autoconf automake autopoint autotools-dev binutils binutils-common binutils-x86-64-linux-gnu build-essential cpp cpp-12 dh-autoreconf dh-strip-nondeterminism dpkg-dev dwz fakeroot fontconfig-config fonts-dejavu-core g++ g++-12 gcc gcc-12 gettext intltool-debian libabsl20220623 libalgorithm-diff-perl libalgorithm-diff-xs-perl libalgorithm-merge-perl libaom3 libarchive-cpio-perl libarchive-zip-perl libasan8 libatomic1 libavif15 libbinutils libc-dev-bin libc-devtools libc6-dev libcc1-0 libcrypt-dev libctf-nobfd0 libctf0 libdav1d6 libde265-0 libdebhelper-perl libdeflate0 libdpkg-perl libfakeroot libfile-fcntllock-perl libfile-stripnondeterminism-perl libfontconfig1 libfreetype6 libgav1-1 libgcc-12-dev libgd3 libgomp1 libgprofng0 libheif1 libisl23 libitm1 libjbig0 libjpeg62-turbo liblerc4 liblsan0 libltdl-dev libltdl7 libmail-sendmail-perl libmpc3 libnsl-dev libnuma1 libpng16-16 libquadmath0 librav1e0 libstdc++-12-dev libsub-override-perl libsvtav1enc1 libsys-hostname-long-perl libtiff6 libtirpc-dev libtool libtsan2 libubsan1 libwebp7 libx11-6 libx11-data libx265-199 libxau6 libxcb1 libxdmcp6 libxpm4 libyuv0 linux-libc-dev m4 make manpages-dev patch po-debconf rpcsvc-proto Suggested packages: autoconf-archive gnu-standards autoconf-doc binutils-doc cpp-doc gcc-12-locales cpp-12-doc dh-make debian-keyring g++-multilib g++-12-multilib gcc-12-doc gcc-multilib flex bison gdb gcc-doc gcc-12-multilib gettext-doc libasprintf-dev libgettextpo-dev glibc-doc git bzr libgd-tools libtool-doc libstdc++-12-doc gfortran | fortran95-compiler gcj-jdk m4-doc make-doc ed diffutils-doc libmail-box-perl The following NEW packages will be installed: autoconf automake autopoint autotools-dev binutils binutils-common binutils-x86-64-linux-gnu build-essential cpp cpp-12 debhelper dh-autoreconf dh-strip-nondeterminism dpkg-dev dwz fakeroot fontconfig-config fonts-dejavu-core g++ g++-12 gcc gcc-12 gettext intltool-debian libabsl20220623 libalgorithm-diff-perl libalgorithm-diff-xs-perl libalgorithm-merge-perl libaom3 libarchive-cpio-perl libarchive-zip-perl libasan8 libatomic1 libavif15 libbinutils libc-dev-bin libc-devtools libc6-dev libcc1-0 libcrypt-dev libctf-nobfd0 libctf0 libdav1d6 libde265-0 libdebhelper-perl libdeflate0 libdpkg-perl libfakeroot libfile-fcntllock-perl libfile-stripnondeterminism-perl libfontconfig1 libfreetype6 libgav1-1 libgcc-12-dev libgd3 libgomp1 libgprofng0 libheif1 libisl23 libitm1 libjbig0 libjpeg62-turbo liblerc4 liblsan0 libltdl-dev libltdl7 libmail-sendmail-perl libmpc3 libnsl-dev libnuma1 libpng16-16 libquadmath0 librav1e0 libstdc++-12-dev libsub-override-perl libsvtav1enc1 libsys-hostname-long-perl libtiff6 libtirpc-dev libtool libtsan2 libubsan1 libwebp7 libx11-6 libx11-data libx265-199 libxau6 libxcb1 libxdmcp6 libxpm4 libyuv0 linux-libc-dev m4 make manpages-dev patch po-debconf rpcsvc-proto 0 upgraded, 98 newly installed, 0 to remove and 0 not upgraded. Need to get 86.0 MB of archives. After this operation, 336 MB of additional disk space will be used. Get:1 http://deb.debian.org/debian bookworm/main amd64 m4 amd64 1.4.19-3 [287 kB] Get:2 http://deb.debian.org/debian bookworm/main amd64 autoconf all 2.71-3 [332 kB] Get:3 http://deb.debian.org/debian bookworm/main amd64 autotools-dev all 20220109.1 [51.6 kB] Get:4 http://deb.debian.org/debian bookworm/main amd64 automake all 1:1.16.5-1.3 [823 kB] Get:5 http://deb.debian.org/debian bookworm/main amd64 autopoint all 0.21-12 [495 kB] Get:6 http://deb.debian.org/debian bookworm/main amd64 binutils-common amd64 2.40-2 [2,487 kB] Get:7 http://deb.debian.org/debian bookworm/main amd64 libbinutils amd64 2.40-2 [572 kB] Get:8 http://deb.debian.org/debian bookworm/main amd64 libctf-nobfd0 amd64 2.40-2 [153 kB] Get:9 http://deb.debian.org/debian bookworm/main amd64 libctf0 amd64 2.40-2 [89.8 kB] Get:10 http://deb.debian.org/debian bookworm/main amd64 libgprofng0 amd64 2.40-2 [812 kB] Get:11 http://deb.debian.org/debian bookworm/main amd64 binutils-x86-64-linux-gnu amd64 2.40-2 [2,246 kB] Get:12 http://deb.debian.org/debian bookworm/main amd64 binutils amd64 2.40-2 [65.0 kB] Get:13 http://deb.debian.org/debian bookworm/main amd64 libc-dev-bin amd64 2.36-9+deb12u13 [47.4 kB] Get:14 http://deb.debian.org/debian bookworm/main amd64 linux-libc-dev amd64 6.1.148-1 [2,176 kB] Get:15 http://deb.debian.org/debian bookworm/main amd64 libcrypt-dev amd64 1:4.4.33-2 [118 kB] Get:16 http://deb.debian.org/debian bookworm/main amd64 libtirpc-dev amd64 1.3.3+ds-1 [191 kB] Get:17 http://deb.debian.org/debian bookworm/main amd64 libnsl-dev amd64 1.3.0-2 [66.4 kB] Get:18 http://deb.debian.org/debian bookworm/main amd64 rpcsvc-proto amd64 1.4.3-1 [63.3 kB] Get:19 http://deb.debian.org/debian bookworm/main amd64 libc6-dev amd64 2.36-9+deb12u13 [1,904 kB] Get:20 http://deb.debian.org/debian bookworm/main amd64 libisl23 amd64 0.25-1.1 [683 kB] Get:21 http://deb.debian.org/debian bookworm/main amd64 libmpc3 amd64 1.3.1-1 [51.5 kB] Get:22 http://deb.debian.org/debian bookworm/main amd64 cpp-12 amd64 12.2.0-14+deb12u1 [9,768 kB] Get:23 http://deb.debian.org/debian bookworm/main amd64 cpp amd64 4:12.2.0-3 [6,836 B] Get:24 http://deb.debian.org/debian bookworm/main amd64 libcc1-0 amd64 12.2.0-14+deb12u1 [41.7 kB] Get:25 http://deb.debian.org/debian bookworm/main amd64 libgomp1 amd64 12.2.0-14+deb12u1 [116 kB] Get:26 http://deb.debian.org/debian bookworm/main amd64 libitm1 amd64 12.2.0-14+deb12u1 [26.1 kB] Get:27 http://deb.debian.org/debian bookworm/main amd64 libatomic1 amd64 12.2.0-14+deb12u1 [9,376 B] Get:28 http://deb.debian.org/debian bookworm/main amd64 libasan8 amd64 12.2.0-14+deb12u1 [2,193 kB] Get:29 http://deb.debian.org/debian bookworm/main amd64 liblsan0 amd64 12.2.0-14+deb12u1 [969 kB] Get:30 http://deb.debian.org/debian bookworm/main amd64 libtsan2 amd64 12.2.0-14+deb12u1 [2,197 kB] Get:31 http://deb.debian.org/debian bookworm/main amd64 libubsan1 amd64 12.2.0-14+deb12u1 [883 kB] Get:32 http://deb.debian.org/debian bookworm/main amd64 libquadmath0 amd64 12.2.0-14+deb12u1 [145 kB] Get:33 http://deb.debian.org/debian bookworm/main amd64 libgcc-12-dev amd64 12.2.0-14+deb12u1 [2,437 kB] Get:34 http://deb.debian.org/debian bookworm/main amd64 gcc-12 amd64 12.2.0-14+deb12u1 [19.3 MB] Get:35 http://deb.debian.org/debian bookworm/main amd64 gcc amd64 4:12.2.0-3 [5,216 B] Get:36 http://deb.debian.org/debian bookworm/main amd64 libstdc++-12-dev amd64 12.2.0-14+deb12u1 [2,047 kB] Get:37 http://deb.debian.org/debian bookworm/main amd64 g++-12 amd64 12.2.0-14+deb12u1 [10.7 MB] Get:38 http://deb.debian.org/debian bookworm/main amd64 g++ amd64 4:12.2.0-3 [1,356 B] Get:39 http://deb.debian.org/debian bookworm/main amd64 make amd64 4.3-4.1 [396 kB] Get:40 http://deb.debian.org/debian bookworm/main amd64 libdpkg-perl all 1.21.22 [603 kB] Get:41 http://deb.debian.org/debian bookworm/main amd64 patch amd64 2.7.6-7 [128 kB] Get:42 http://deb.debian.org/debian bookworm/main amd64 dpkg-dev all 1.21.22 [1,353 kB] Get:43 http://deb.debian.org/debian bookworm/main amd64 build-essential amd64 12.9 [7,704 B] Get:44 http://deb.debian.org/debian bookworm/main amd64 libdebhelper-perl all 13.11.4 [81.2 kB] Get:45 http://deb.debian.org/debian bookworm/main amd64 libtool all 2.4.7-7~deb12u1 [517 kB] Get:46 http://deb.debian.org/debian bookworm/main amd64 dh-autoreconf all 20 [17.1 kB] Get:47 http://deb.debian.org/debian bookworm/main amd64 libarchive-zip-perl all 1.68-1 [104 kB] Get:48 http://deb.debian.org/debian bookworm/main amd64 libsub-override-perl all 0.09-4 [9,304 B] Get:49 http://deb.debian.org/debian bookworm/main amd64 libfile-stripnondeterminism-perl all 1.13.1-1 [19.4 kB] Get:50 http://deb.debian.org/debian bookworm/main amd64 dh-strip-nondeterminism all 1.13.1-1 [8,620 B] Get:51 http://deb.debian.org/debian bookworm/main amd64 dwz amd64 0.15-1 [109 kB] Get:52 http://deb.debian.org/debian bookworm/main amd64 gettext amd64 0.21-12 [1,300 kB] Get:53 http://deb.debian.org/debian bookworm/main amd64 intltool-debian all 0.35.0+20060710.6 [22.9 kB] Get:54 http://deb.debian.org/debian bookworm/main amd64 po-debconf all 1.0.21+nmu1 [248 kB] Get:55 http://deb.debian.org/debian bookworm/main amd64 debhelper all 13.11.4 [942 kB] Get:56 http://deb.debian.org/debian bookworm/main amd64 libfakeroot amd64 1.31-1.2 [28.3 kB] Get:57 http://deb.debian.org/debian bookworm/main amd64 fakeroot amd64 1.31-1.2 [66.9 kB] Get:58 http://deb.debian.org/debian bookworm/main amd64 fonts-dejavu-core all 2.37-6 [1,068 kB] Get:59 http://deb.debian.org/debian bookworm/main amd64 fontconfig-config amd64 2.14.1-4 [315 kB] Get:60 http://deb.debian.org/debian bookworm/main amd64 libabsl20220623 amd64 20220623.1-1+deb12u2 [391 kB] Get:61 http://deb.debian.org/debian bookworm/main amd64 libalgorithm-diff-perl all 1.201-1 [43.3 kB] Get:62 http://deb.debian.org/debian bookworm/main amd64 libalgorithm-diff-xs-perl amd64 0.04-8+b1 [11.4 kB] Get:63 http://deb.debian.org/debian bookworm/main amd64 libalgorithm-merge-perl all 0.08-5 [11.8 kB] Get:64 http://deb.debian.org/debian bookworm/main amd64 libaom3 amd64 3.6.0-1+deb12u2 [1,850 kB] Get:65 http://deb.debian.org/debian bookworm/main amd64 libarchive-cpio-perl all 0.10-3 [10.8 kB] Get:66 http://deb.debian.org/debian bookworm/main amd64 libdav1d6 amd64 1.0.0-2+deb12u1 [513 kB] Get:67 http://deb.debian.org/debian bookworm/main amd64 libgav1-1 amd64 0.18.0-1+b1 [332 kB] Get:68 http://deb.debian.org/debian bookworm/main amd64 librav1e0 amd64 0.5.1-6 [763 kB] Get:69 http://deb.debian.org/debian bookworm/main amd64 libsvtav1enc1 amd64 1.4.1+dfsg-1 [2,121 kB] Get:70 http://deb.debian.org/debian bookworm/main amd64 libjpeg62-turbo amd64 1:2.1.5-2 [166 kB] Get:71 http://deb.debian.org/debian bookworm/main amd64 libyuv0 amd64 0.0~git20230123.b2528b0-1 [168 kB] Get:72 http://deb.debian.org/debian bookworm/main amd64 libavif15 amd64 0.11.1-1+deb12u1 [94.4 kB] Get:73 http://deb.debian.org/debian bookworm/main amd64 libpng16-16 amd64 1.6.39-2 [276 kB] Get:74 http://deb.debian.org/debian bookworm/main amd64 libfreetype6 amd64 2.12.1+dfsg-5+deb12u4 [398 kB] Get:75 http://deb.debian.org/debian bookworm/main amd64 libfontconfig1 amd64 2.14.1-4 [386 kB] Get:76 http://deb.debian.org/debian bookworm/main amd64 libde265-0 amd64 1.0.11-1+deb12u2 [185 kB] Get:77 http://deb.debian.org/debian bookworm/main amd64 libnuma1 amd64 2.0.16-1 [21.0 kB] Get:78 http://deb.debian.org/debian bookworm/main amd64 libx265-199 amd64 3.5-2+b1 [1,150 kB] Get:79 http://deb.debian.org/debian bookworm/main amd64 libheif1 amd64 1.15.1-1+deb12u1 [215 kB] Get:80 http://deb.debian.org/debian bookworm/main amd64 libdeflate0 amd64 1.14-1 [61.4 kB] Get:81 http://deb.debian.org/debian bookworm/main amd64 libjbig0 amd64 2.1-6.1 [31.7 kB] Get:82 http://deb.debian.org/debian bookworm/main amd64 liblerc4 amd64 4.0.0+ds-2 [170 kB] Get:83 http://deb.debian.org/debian bookworm/main amd64 libwebp7 amd64 1.2.4-0.2+deb12u1 [286 kB] Get:84 http://deb.debian.org/debian bookworm/main amd64 libtiff6 amd64 4.5.0-6+deb12u2 [316 kB] Get:85 http://deb.debian.org/debian bookworm/main amd64 libxau6 amd64 1:1.0.9-1 [19.7 kB] Get:86 http://deb.debian.org/debian bookworm/main amd64 libxdmcp6 amd64 1:1.1.2-3 [26.3 kB] Get:87 http://deb.debian.org/debian bookworm/main amd64 libxcb1 amd64 1.15-1 [144 kB] Get:88 http://deb.debian.org/debian bookworm/main amd64 libx11-data all 2:1.8.4-2+deb12u2 [292 kB] Get:89 http://deb.debian.org/debian bookworm/main amd64 libx11-6 amd64 2:1.8.4-2+deb12u2 [760 kB] Get:90 http://deb.debian.org/debian bookworm/main amd64 libxpm4 amd64 1:3.5.12-1.1+deb12u1 [48.6 kB] Get:91 http://deb.debian.org/debian bookworm/main amd64 libgd3 amd64 2.3.3-9 [124 kB] Get:92 http://deb.debian.org/debian bookworm/main amd64 libc-devtools amd64 2.36-9+deb12u13 [55.0 kB] Get:93 http://deb.debian.org/debian bookworm/main amd64 libfile-fcntllock-perl amd64 0.22-4+b1 [34.8 kB] Get:94 http://deb.debian.org/debian bookworm/main amd64 libltdl7 amd64 2.4.7-7~deb12u1 [393 kB] Get:95 http://deb.debian.org/debian bookworm/main amd64 libltdl-dev amd64 2.4.7-7~deb12u1 [164 kB] Get:96 http://deb.debian.org/debian bookworm/main amd64 libsys-hostname-long-perl all 1.5-3 [11.6 kB] Get:97 http://deb.debian.org/debian bookworm/main amd64 libmail-sendmail-perl all 0.80-3 [24.3 kB] Get:98 http://deb.debian.org/debian bookworm/main amd64 manpages-dev all 6.03-2 [2,030 kB] Preconfigu Processing triggers for man-db (2.11.2-2) ...2u13) ...r/bin/c++ (c++) in auto modetomake) in auto mode 19/09/2025 21:56:52 INFO: Installing software-properties-common. Reading package lists... Building dependency tree... Reading state information... The following additional packages will be installed: appstream gir1.2-glib-2.0 gir1.2-packagekitglib-1.0 iso-codes libappstream4 libduktape207 libdw1 libgirepository-1.0-1 libglib2.0-bin libgstreamer1.0-0 libpackagekit-glib2-18 libpolkit-agent-1-0 libpolkit-gobject-1-0 libstemmer0d libunwind8 libxmlb2 libyaml-0-2 lsb-release packagekit packagekit-tools polkitd python3-blinker python3-cffi-backend python3-cryptography python3-dbus python3-distro python3-gi python3-jwt python3-lazr.restfulclient python3-lazr.uri python3-oauthlib python3-software-properties python3-wadllib sgml-base xml-core Suggested packages: apt-config-icons isoquery gstreamer1.0-tools polkitd-pkla python-blinker-doc python-cryptography-doc python3-cryptography-vectors python-dbus-doc python3-crypto sgml-base-doc The following NEW packages will be installed: appstream gir1.2-glib-2.0 gir1.2-packagekitglib-1.0 iso-codes libappstream4 libduktape207 libdw1 libgirepository-1.0-1 libglib2.0-bin libgstreamer1.0-0 libpackagekit-glib2-18 libpolkit-agent-1-0 libpolkit-gobject-1-0 libstemmer0d libunwind8 libxmlb2 libyaml-0-2 lsb-release packagekit packagekit-tools polkitd python3-blinker python3-cffi-backend python3-cryptography python3-dbus python3-distro python3-gi python3-jwt python3-lazr.restfulclient python3-lazr.uri python3-oauthlib python3-software-properties python3-wadllib sgml-base software-properties-common xml-core 0 upgraded, 36 newly installed, 0 to remove and 0 not upgraded. Need to get 8,128 kB of archives. After this operation, 43.3 MB of additional disk space will be used. Get:1 http://deb.debian.org/debian bookworm/main amd64 sgml-base all 1.31 [15.4 kB] Get:2 http://deb.debian.org/debian bookworm/main amd64 libstemmer0d amd64 2.2.0-2 [118 kB] Get:3 http://deb.debian.org/debian bookworm/main amd64 libxmlb2 amd64 0.3.10-2 [60.2 kB] Get:4 http://deb.debian.org/debian bookworm/main amd64 libyaml-0-2 amd64 0.2.5-1 [53.6 kB] Get:5 http://deb.debian.org/debian bookworm/main amd64 libappstream4 amd64 0.16.1-2 [199 kB] Get:6 http://deb.debian.org/debian bookworm/main amd64 appstream amd64 0.16.1-2 [407 kB] Get:7 http://deb.debian.org/debian bookworm/main amd64 libgirepository-1.0-1 amd64 1.74.0-3 [101 kB] Get:8 http://deb.debian.org/debian bookworm/main amd64 gir1.2-glib-2.0 amd64 1.74.0-3 [159 kB] Get:9 http://deb.debian.org/debian bookworm/main amd64 libpackagekit-glib2-18 amd64 1.2.6-5 [113 kB] Get:10 http://deb.debian.org/debian bookworm/main amd64 gir1.2-packagekitglib-1.0 amd64 1.2.6-5 [25.9 kB] Get:11 http://deb.debian.org/debian bookworm/main amd64 iso-codes all 4.15.0-1 [2,906 kB] Get:12 http://deb.debian.org/debian bookworm/main amd64 libduktape207 amd64 2.7.0-2 [134 kB] Get:13 http://deb.debian.org/debian bookworm/main amd64 libdw1 amd64 0.188-2.1 [235 kB] Get:14 http://deb.debian.org/debian bookworm/main amd64 libglib2.0-bin amd64 2.74.6-2+deb12u7 [112 kB] Get:15 http://deb.debian.org/debian bookworm/main amd64 libunwind8 amd64 1.6.2-3 [51.2 kB] Get:16 http://deb.debian.org/debian bookworm/main amd64 libgstreamer1.0-0 amd64 1.22.0-2+deb12u1 [1,170 kB] Get:17 http://deb.debian.org/debian bookworm/main amd64 libpolkit-gobject-1-0 amd64 122-3 [43.9 kB] Get:18 http://deb.debian.org/debian bookworm/main amd64 libpolkit-agent-1-0 amd64 122-3 [24.4 kB] Get:19 http://deb.debian.org/debian bookworm/main amd64 lsb-release all 12.0-1 [6,416 B] Get:20 http://deb.debian.org/debian bookworm/main amd64 xml-core all 0.18+nmu1 [23.8 kB] Get:21 http://deb.debian.org/debian bookworm/main amd64 polkitd amd64 122-3 [112 kB] Get:22 http://deb.debian.org/debian bookworm/main amd64 packagekit amd64 1.2.6-5 [610 kB] Get:23 http://deb.debian.org/debian bookworm/main amd64 packagekit-tools amd64 1.2.6-5 [30.9 kB] Get:24 http://deb.debian.org/debian bookworm/main amd64 python3-blinker all 1.5-1 [14.7 kB] Get:25 http://deb.debian.org/debian bookworm/main amd64 python3-cffi-backend amd64 1.15.1-5+b1 [84.6 kB] Get:26 http://deb.debian.org/debian bookworm/main amd64 python3-cryptography amd64 38.0.4-3+deb12u1 [665 kB] Get:27 http://deb.debian.org/debian bookworm/main amd64 python3-dbus amd64 1.3.2-4+b1 [95.1 kB] Get:28 http://deb.debian.org/debian bookworm/main amd64 python3-distro all 1.8.0-1 [20.5 kB] Get:29 http://deb.debian.org/debian bookworm/main amd64 python3-gi amd64 3.42.2-3+b1 [219 kB] Get:30 http://deb.debian.org/debian bookworm/main amd64 python3-jwt all 2.6.0-1 [26.6 kB] Get:31 http://deb.debian.org/debian bookworm/main amd64 python3-lazr.uri all 1.0.6-3 [13.7 kB] Get:32 http://deb.debian.org/debian bookworm/main amd64 python3-wadllib all 1.3.6-4 [37.2 kB] Get:33 http://deb.debian.org/debian bookworm/main amd64 python3-oauthlib all 3.2.2-1 [95.4 kB] Get:34 http://deb.debian.org/debian bookworm/main amd64 python3-lazr.restfulclient all 0.14.5-1 [50.4 kB] Get:35 http://deb.debian.org/debian bookworm/main amd64 python3-software-properties all 0.99.30-4.1~deb12u1 [32.9 kB] Get:36 http://deb.debian.org/debian bookworm/main am Processing triggers for dbus (1.14.10-1~deb12u1) ...eb12u1) ...nf-helper.socket → /usr/lib/systemd/user/pk-debconf-helper.socket.d package sgml-base. gpg: keyring '/usr/share/keyrings/wazuh.gpg' created gpg: directory '/root/.gnupg' created gpg: /root/.gnupg/trustdb.gpg: trustdb created gpg: key 96B3EE5F29111145: public key "Wazuh.com (Wazuh Signing Key) <support@wazuh.com>" imported gpg: Total number processed: 1 gpg: imported: 1 deb [signed-by=/usr/share/keyrings/wazuh.gpg] https://packages.wazuh.com/4.x/apt/ stable main Hit:1 http://deb.debian.org/debian bookworm InRelease Hit:2 http://security.debian.org bookworm-security InRelease Hit:3 http://deb.debian.org/debian bookworm-updates InRelease Get:4 https://packages.wazuh.com/4.x/apt stable InRelease [17.3 kB] Get:5 http://deb.debian.org/debian bookworm/main amd64 DEP-11 Metadata [4,492 kB] Get:6 http://deb.debian.org/debian bookworm/contrib amd64 DEP-11 Metadata [16.5 kB] Get:7 https://packages.wazuh.com/4.x/apt stable/main amd64 Packages [47.4 kB] Fetched 4,574 kB in 1s (4,813 kB/s) Reading package lists... 19/09/2025 21:57:07 INFO: Wazuh repository added. 19/09/2025 21:57:07 INFO: --- Configuration files --- 19/09/2025 21:57:07 INFO: Generating configuration files. 19/09/2025 21:57:07 INFO: Generating the root certificate. 19/09/2025 21:57:08 INFO: Generating Admin certificates. 19/09/2025 21:57:08 INFO: Generating Wazuh indexer certificates. 19/09/2025 21:57:08 INFO: Generating Filebeat certificates. 19/09/2025 21:57:08 INFO: Generating Wazuh dashboard certificates. 19/09/2025 21:57:08 INFO: Created wazuh-install-files.tar. It contains the Wazuh cluster key, certificates, and passwords necessary for installation. 19/09/2025 21:57:08 INFO: --- Wazuh indexer --- 19/09/2025 21:57:08 INFO: Starting Wazuh indexer installation. Reading package lists... Building dependency tree... Reading state information... The following NEW packages will be installed: wazuh-indexer 0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded. Need to get 856 MB of archives. After this operation, 1,081 MB of additional disk space will be used. Get:1 https://packages.wazuh.com/4.x/apt stable/main amd64 wazuh-indexer amd64 4.13.0-1 [856 MB] Fetched 856 MB in 10s (89.8 MB/s) Selecting previously unselected pack sudo systemctl start wazuh-indexer.service executing following statements to configure wazuh-indexer service to start automatically using systemd 19/09/2025 21:57:25 INFO: Wazuh indexer installation finished. sysctl: permission denied on key "vm.max_map_count" 19/09/2025 21:57:25 INFO: Wazuh indexer post-install configuration finished. 19/09/2025 21:57:25 INFO: Starting service wazuh-indexer. Synchronizing state of wazuh-indexer.service with SysV service script with /lib/systemd/systemd-sysv-install. Executing: /lib/systemd/systemd-sysv-install enable wazuh-indexer Created symlink /etc/systemd/system/multi-user.target.wants/wazuh-indexer.service → /lib/systemd/system/wazuh-indexer.service. 19/09/2025 21:57:35 INFO: wazuh-indexer service started. 19/09/2025 21:57:35 INFO: Initializing Wazuh indexer cluster security settings. Security Admin v7 Will connect to 127.0.0.1:9200 ... done Connected as "CN=admin,OU=Wazuh,O=Wazuh,L=California,C=US" OpenSearch Version: 2.19.2 Contacting opensearch cluster 'opensearch' and wait for YELLOW clusterstate ... Clustername: wazuh-cluster Clusterstate: GREEN Number of nodes: 1 Number of data nodes: 1 .opendistro_security index does not exists, attempt to create it ... done (0-all replicas) Populate config from /etc/wazuh-indexer/opensearch-security/ Will update '/config' with /etc/wazuh-indexer/opensearch-security/config.yml SUCC: Configuration for 'config' created or updated Will update '/roles' with /etc/wazuh-indexer/opensearch-security/roles.yml SUCC: Configuration for 'roles' created or updated Will update '/rolesmapping' with /etc/wazuh-indexer/opensearch-security/roles_mapping.yml SUCC: Configuration for 'rolesmapping' created or updated Will update '/internalusers' with /etc/wazuh-indexer/opensearch-security/internal_users.yml SUCC: Configuration for 'internalusers' created or updated Will update '/actiongroups' with /etc/wazuh-indexer/opensearch-security/action_groups.yml SUCC: Configuration for 'actiongroups' created or updated Will update '/tenants' with /etc/wazuh-indexer/opensearch-security/tenants.yml SUCC: Configuration for 'tenants' created or updated Will update '/nodesdn' with /etc/wazuh-indexer/opensearch-security/nodes_dn.yml SUCC: Configuration for 'nodesdn' created or updated Will update '/whitelist' with /etc/wazuh-indexer/opensearch-security/whitelist.yml SUCC: Configuration for 'whitelist' created or updated Will update '/audit' with /etc/wazuh-indexer/opensearch-security/audit.yml SUCC: Configuration for 'audit' created or updated Will update '/allowlist' with /etc/wazuh-indexer/opensearch-security/allowlist.yml SUCC: Configuration for 'allowlist' created or updated SUCC: Expected 10 config types for node {"updated_config_types":["allowlist","tenants","rolesmapping","nodesdn","audit","roles","whitelist","actiongroups","config","internalusers"],"updated_config_size":10,"message":null} is 10 (["allowlist","tenants","rolesmapping","nodesdn","audit","roles","whitelist","actiongroups","config","internalusers"]) due to: null Done with success 19/09/2025 21:57:38 INFO: Wazuh indexer cluster security configuration initialized. 19/09/2025 21:57:38 INFO: Wazuh indexer cluster initialized. 19/09/2025 21:57:38 INFO: --- Wazuh server --- 19/09/2025 21:57:38 INFO: Starting the Wazuh manager installation. Reading package lists... Building dependency tree... Reading state information... Suggested packages: expect The following NEW packages will be installed: wazuh-manager 0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded. Need to get 433 MB of archives. After this operation, 1,020 MB of additional disk space will be used. Err:1 https://packages.wazuh.com/4.x/apt stable/main amd64 wazuh-manager amd64 4.13.0-1 403 Forbidden [IP: 3.160.150.81 443] E: Failed to fetch https://packages.wazuh.com/4.x/apt/pool/main/w/wazuh-manager/wazuh-manager_4.13.0-1_amd64.deb 403 Forbidden [IP: 3.160.150.81 443] E: Unable to fetch some archives, maybe run apt-get update or try with --fix-missing? 19/09/2025 21:57:40 ERROR: Wazuh installation failed. 19/09/2025 21:57:40 INFO: --- Removing existing Wazuh installation --- 19/09/2025 21:57:40 INFO: Removing Wazuh indexer. Reading package lists... Building dependency tree... Reading state information... The following packages will be REMOVED: wazuh-indexer* 0 upgraded, 0 newly installed, 1 to remove and 0 not upgraded. After this operation, 1,081 MB disk space will be freed. (Reading database ... 32155 files and directories currently installed.) Removing wazuh-indexer (4.13.0-1) ... Running Wazuh Indexer Pre-Removal Script Stop existing wazuh-indexer.service (Reading database ... 31004 files and directories currently installed.) Purging configuration files for wazuh-indexer (4.13.0-1) ... dpkg: warning: while removing wazuh-indexer, directory '/var/log/wazuh-indexer' not empty so not removed dpkg: warning: while removing wazuh-indexer, directory '/var/lib/wazuh-indexer' not empty so not removed dpkg: warning: while removing wazuh-indexer, directory '/etc/wazuh-indexer' not empty so not removed 19/09/2025 21:57:43 INFO: Wazuh indexer removed. 19/09/2025 21:57:44 INFO: --- Dependencies ---- 19/09/2025 21:57:44 INFO: Removing gawk. Reading package lists... Building dependency tree... Reading state information... The following package was automatically installed and is no longer required: libsigsegv2 Use 'apt autoremove' to remove it. The following packages will be REMOVED: gawk* 0 upgraded, 0 newly installed, 1 to remove and 0 not upgraded. A Purging configuration files for gawk (1:5.2.1-2) ...rently installed.) in auto mode 19/09/2025 21:57:46 INFO: Installation cleaned. Check the /var/log/wazuh-install.log file to learn more about the issue. ```
Author
Owner

@MickLesk commented on GitHub (Sep 19, 2025):

Add this into the issue in wazuh repo

@MickLesk commented on GitHub (Sep 19, 2025): Add this into the issue in wazuh repo
Author
Owner

@Samaze123 commented on GitHub (Sep 19, 2025):

The issue from Wazuh is resolved but now I'm getting this:

20/09/2025 02:23:57 INFO: --- Wazuh dashboard ---
20/09/2025 02:23:57 INFO: Starting Wazuh dashboard installation.
20/09/2025 02:25:38 INFO: Wazuh dashboard installation finished.
20/09/2025 02:25:38 INFO: Wazuh dashboard post-install configuration finished.
20/09/2025 02:25:38 INFO: Starting service wazuh-dashboard.
20/09/2025 02:25:38 INFO: wazuh-dashboard service started.
20/09/2025 02:25:39 INFO: Updating the internal users.
20/09/2025 02:25:41 INFO: A backup of the internal users has been saved in the /etc/wazuh-indexer/internalusers-backup folder.
20/09/2025 02:25:48 INFO: The filebeat.yml file has been updated to use the Filebeat Keystore username and password.
Failed to repair RocksDB database. Reason: While appending to file: queue/keystore/MANIFEST-000001: No space left on device
20/09/2025 02:26:08 ERROR: Could not load the changes.

[ERROR] in line 35: exit code 0: while executing command tee -a ~/wazuh-install.output

[ERROR] in line 1345: exit code 0: while executing command lxc-attach -n "$CTID" -- bash -c "$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/install/${var_install}.sh)"

I used default settings (18GB) but it's not enough. I will try with 25GB. I don't know if I shoukd close this issue and open a new one as it's not the same error.

@Samaze123 commented on GitHub (Sep 19, 2025): The issue from Wazuh is resolved but now I'm getting this: ```bash 20/09/2025 02:23:57 INFO: --- Wazuh dashboard --- 20/09/2025 02:23:57 INFO: Starting Wazuh dashboard installation. 20/09/2025 02:25:38 INFO: Wazuh dashboard installation finished. 20/09/2025 02:25:38 INFO: Wazuh dashboard post-install configuration finished. 20/09/2025 02:25:38 INFO: Starting service wazuh-dashboard. 20/09/2025 02:25:38 INFO: wazuh-dashboard service started. 20/09/2025 02:25:39 INFO: Updating the internal users. 20/09/2025 02:25:41 INFO: A backup of the internal users has been saved in the /etc/wazuh-indexer/internalusers-backup folder. 20/09/2025 02:25:48 INFO: The filebeat.yml file has been updated to use the Filebeat Keystore username and password. Failed to repair RocksDB database. Reason: While appending to file: queue/keystore/MANIFEST-000001: No space left on device 20/09/2025 02:26:08 ERROR: Could not load the changes. [ERROR] in line 35: exit code 0: while executing command tee -a ~/wazuh-install.output [ERROR] in line 1345: exit code 0: while executing command lxc-attach -n "$CTID" -- bash -c "$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/install/${var_install}.sh)" ``` I used default settings (18GB) but it's not enough. I will try with 25GB. I don't know if I shoukd close this issue and open a new one as it's not the same error.
Author
Owner

@Samaze123 commented on GitHub (Sep 19, 2025):

With 25GB it worked pretty well. After the installation copmleted, the storage dropped to 12GB.

@Samaze123 commented on GitHub (Sep 19, 2025): With 25GB it worked pretty well. After the installation copmleted, the storage dropped to 12GB.
Author
Owner

@MickLesk commented on GitHub (Sep 20, 2025):

Thx for Info, we Upgrade the disk Size for Default

@MickLesk commented on GitHub (Sep 20, 2025): Thx for Info, we Upgrade the disk Size for Default
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: SVI/ProxmoxVE#1913