Apr 15 12:13:19 wazuhworker systemd-entrypoint[3673]: at org.opensearch.bootstrap.OpenSearch.main(OpenSearch.java:103) Apr 15 12:13:19 wazuhworker systemd-entrypoint[3673]: For complete error details, refer to the log at /var/log/wazuh-indexer/wazuh-cluster.log Apr 15 12:13:19 wazuhworker systemd[1]: wazuh-indexer.service: Main process exited, code=exited, status=1/FAILURE Apr 15 12:13:19 wazuhworker systemd[1]: wazuh-indexer.service: Failed with result 'exit-code'. Apr 15 12:13:19 wazuhworker systemd[1]: Failed to start Wazuh-indexer. Apr 15 12:13:19 wazuhworker systemd[1]: wazuh-indexer.service: Consumed 5.335s CPU time. Apr 15 12:32:04 wazuhworker systemd[1]: Starting Wazuh-indexer... Apr 15 12:32:08 wazuhworker systemd-entrypoint[3880]: WARNING: A terminally deprecated method in java.lang.System has been called Apr 15 12:32:08 wazuhworker systemd-entrypoint[3880]: WARNING: System::setSecurityManager has been called by org.opensearch.bootstrap.OpenSearch (file:/usr/> Apr 15 12:32:08 wazuhworker systemd-entrypoint[3880]: WARNING: Please consider reporting this to the maintainers of org.opensearch.bootstrap.OpenSearch Apr 15 12:32:08 wazuhworker systemd-entrypoint[3880]: WARNING: System::setSecurityManager will be removed in a future release Apr 15 12:32:09 wazuhworker systemd-entrypoint[3880]: Exception in thread "main" org.opensearch.bootstrap.BootstrapException: java.nio.file.AccessDeniedExce> Apr 15 12:32:09 wazuhworker systemd-entrypoint[3880]: Likely root cause: java.nio.file.AccessDeniedException: /etc/wazuh-indexer/backup/audit.yml Apr 15 12:32:09 wazuhworker systemd-entrypoint[3880]: at java.base/sun.nio.fs.UnixException.translateToIOException(UnixException.java:90) Apr 15 12:32:09 wazuhworker systemd-entrypoint[3880]: at java.base/sun.nio.fs.UnixException.rethrowAsIOException(UnixException.java:106) Apr 15 12:32:09 wazuhworker systemd-entrypoint[3880]: at java.base/sun.nio.fs.UnixException.rethrowAsIOException(UnixException.java:111) Apr 15 12:32:09 wazuhworker systemd-entrypoint[3880]: at java.base/sun.nio.fs.UnixFileAttributeViews$Basic.readAttributes(UnixFileAttributeViews.jav> Apr 15 12:32:09 wazuhworker systemd-entrypoint[3880]: at java.base/sun.nio.fs.UnixFileSystemProvider.readAttributes(UnixFileSystemProvider.java:148) Apr 15 12:32:09 wazuhworker systemd-entrypoint[3880]: at java.base/sun.nio.fs.LinuxFileSystemProvider.readAttributes(LinuxFileSystemProvider.java:99) Apr 15 12:32:09 wazuhworker systemd-entrypoint[3880]: at java.base/java.nio.file.Files.readAttributes(Files.java:1851) Apr 15 12:32:09 wazuhworker systemd-entrypoint[3880]: at java.base/java.nio.file.FileTreeWalker.getAttributes(FileTreeWalker.java:226) Apr 15 12:32:09 wazuhworker systemd-entrypoint[3880]: at java.base/java.nio.file.FileTreeWalker.visit(FileTreeWalker.java:277) Apr 15 12:32:09 wazuhworker systemd-entrypoint[3880]: at java.base/java.nio.file.FileTreeWalker.next(FileTreeWalker.java:374) Apr 15 12:32:09 wazuhworker systemd-entrypoint[3880]: at java.base/java.nio.file.Files.walkFileTree(Files.java:2845) Apr 15 12:32:09 wazuhworker systemd-entrypoint[3880]: at org.opensearch.common.logging.LogConfigurator.configure(LogConfigurator.java:237) Apr 15 12:32:09 wazuhworker systemd-entrypoint[3880]: at org.opensearch.common.logging.LogConfigurator.configure(LogConfigurator.java:147) Apr 15 12:32:09 wazuhworker systemd-entrypoint[3880]: at org.opensearch.bootstrap.Bootstrap.init(Bootstrap.java:373) Apr 15 12:32:09 wazuhworker systemd-entrypoint[3880]: at org.opensearch.bootstrap.OpenSearch.init(OpenSearch.java:180) Apr 15 12:32:09 wazuhworker systemd-entrypoint[3880]: at org.opensearch.bootstrap.OpenSearch.execute(OpenSearch.java:171) Apr 15 12:32:09 wazuhworker systemd-entrypoint[3880]: at org.opensearch.cli.EnvironmentAwareCommand.execute(EnvironmentAwareCommand.java:104) Apr 15 12:32:09 wazuhworker systemd-entrypoint[3880]: at org.opensearch.cli.Command.mainWithoutErrorHandling(Command.java:138) Apr 15 12:32:09 wazuhworker systemd-entrypoint[3880]: at org.opensearch.cli.Command.main(Command.java:101) Apr 15 12:32:09 wazuhworker systemd-entrypoint[3880]: at org.opensearch.bootstrap.OpenSearch.main(OpenSearch.java:137) Apr 15 12:32:09 wazuhworker systemd-entrypoint[3880]: at org.opensearch.bootstrap.OpenSearch.main(OpenSearch.java:103) Apr 15 12:32:09 wazuhworker systemd-entrypoint[3880]: For complete error details, refer to the log at /var/log/wazuh-indexer/wazuh-cluster.log Apr 15 12:32:09 wazuhworker systemd[1]: wazuh-indexer.service: Main process exited, code=exited, status=1/FAILURE Apr 15 12:32:09 wazuhworker systemd[1]: wazuh-indexer.service: Failed with result 'exit-code'. Apr 15 12:32:09 wazuhworker systemd[1]: Failed to start Wazuh-indexer. Apr 15 12:32:09 wazuhworker systemd[1]: wazuh-indexer.service: Consumed 5.358s CPU time. lines 2285-2327/2327 (END) ======================================================= var/log/wazuh-indexer/wazuh-cluster.log [2024-04-12T17:44:33,344][INFO ][o.o.j.s.JobSweeper ] [node-1] Running full sweep [2024-04-12T17:45:00,869][INFO ][o.o.c.m.MetadataUpdateSettingsService] [node-1] updating number_of_replicas to [0] for indices [wazuh-monitoring-2024.15w] [2024-04-12T17:49:33,345][INFO ][o.o.j.s.JobSweeper ] [node-1] Running full sweep [2024-04-12T17:54:33,346][INFO ][o.o.j.s.JobSweeper ] [node-1] Running full sweep [2024-04-12T17:54:33,803][INFO ][o.o.a.t.CronTransportAction] [node-1] Start running AD hourly cron. [2024-04-12T17:54:33,820][INFO ][o.o.a.t.ADTaskManager ] [node-1] Start to maintain running historical tasks [2024-04-12T17:54:33,827][INFO ][o.o.a.c.HourlyCron ] [node-1] Hourly maintenance succeeds [2024-04-12T17:59:33,347][INFO ][o.o.j.s.JobSweeper ] [node-1] Running full sweep [2024-04-12T18:00:02,004][INFO ][o.o.c.m.MetadataUpdateSettingsService] [node-1] updating number_of_replicas to [0] for indices [wazuh-monitoring-2024.15w] [2024-04-12T18:04:33,348][INFO ][o.o.j.s.JobSweeper ] [node-1] Running full sweep [2024-04-12T18:09:33,349][INFO ][o.o.j.s.JobSweeper ] [node-1] Running full sweep [2024-04-12T18:14:33,349][INFO ][o.o.j.s.JobSweeper ] [node-1] Running full sweep [2024-04-12T18:15:01,035][INFO ][o.o.c.m.MetadataUpdateSettingsService] [node-1] updating number_of_replicas to [0] for indices [wazuh-monitoring-2024.15w] [2024-04-12T18:19:33,350][INFO ][o.o.j.s.JobSweeper ] [node-1] Running full sweep [2024-04-12T18:24:33,351][INFO ][o.o.j.s.JobSweeper ] [node-1] Running full sweep [2024-04-12T18:29:33,352][INFO ][o.o.j.s.JobSweeper ] [node-1] Running full sweep [2024-04-12T18:30:00,614][INFO ][o.o.c.m.MetadataUpdateSettingsService] [node-1] updating number_of_replicas to [0] for indices [wazuh-monitoring-2024.15w] [2024-04-12T18:34:33,352][INFO ][o.o.j.s.JobSweeper ] [node-1] Running full sweep [2024-04-12T18:39:33,353][INFO ][o.o.j.s.JobSweeper ] [node-1] Running full sweep [2024-04-12T18:44:33,354][INFO ][o.o.j.s.JobSweeper ] [node-1] Running full sweep [2024-04-12T18:45:00,214][INFO ][o.o.c.m.MetadataUpdateSettingsService] [node-1] updating number_of_replicas to [0] for indices [wazuh-monitoring-2024.15w] [2024-04-12T18:49:33,355][INFO ][o.o.j.s.JobSweeper ] [node-1] Running full sweep [2024-04-12T18:54:33,356][INFO ][o.o.j.s.JobSweeper ] [node-1] Running full sweep [2024-04-12T18:54:33,806][INFO ][o.o.a.t.CronTransportAction] [node-1] Start running AD hourly cron. [2024-04-12T18:54:33,806][INFO ][o.o.a.t.ADTaskManager ] [node-1] Start to maintain running historical tasks [2024-04-12T18:54:33,807][INFO ][o.o.a.c.HourlyCron ] [node-1] Hourly maintenance succeeds [2024-04-12T18:59:33,361][INFO ][o.o.j.s.JobSweeper ] [node-1] Running full sweep [2024-04-12T19:00:02,382][INFO ][o.o.c.m.MetadataUpdateSettingsService] [node-1] updating number_of_replicas to [0] for indices [wazuh-monitoring-2024.15w] [2024-04-12T19:04:33,361][INFO ][o.o.j.s.JobSweeper ] [node-1] Running full sweep [2024-04-12T19:06:11,524][INFO ][o.o.p.PluginsService ] [node-1] PluginService:onIndexModule index:[wazuh-alerts-4.x-2024.04.12/-EA77755ThSKFDxLAzOfxA] [2024-04-12T19:06:11,580][INFO ][o.o.c.m.MetadataMappingService] [node-1] [wazuh-alerts-4.x-2024.04.12/-EA77755ThSKFDxLAzOfxA] update_mapping [_doc] [2024-04-12T19:06:11,643][INFO ][o.o.a.u.d.DestinationMigrationCoordinator] [node-1] Detected cluster change event for destination migration [2024-04-12T19:07:33,787][INFO ][o.o.n.Node ] [node-1] stopping ... [2024-04-12T19:07:33,828][INFO ][o.o.s.a.r.AuditMessageRouter] [node-1] Closing AuditMessageRouter [2024-04-12T19:07:33,828][INFO ][o.o.s.a.s.SinkProvider ] [node-1] Closing DebugSink [2024-04-12T19:07:34,296][INFO ][o.o.n.Node ] [node-1] stopped [2024-04-12T19:07:34,296][INFO ][o.o.n.Node ] [node-1] closing ... [2024-04-12T19:07:34,331][INFO ][o.o.s.a.i.AuditLogImpl ] [node-1] Closing AuditLogImpl [2024-04-12T19:07:34,387][INFO ][o.o.n.Node ] [node-1] closed root@wazuhworker:/var/log/wazuh-indexer#