You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Hi i have Version: 2.3.220 with 32gb ram on a 4code microserver.
After i running the system few months i found a issue ind the so hunt section:
cmin4 is a client of my SO
count 62400 / "Unknown problem somewhere in the system." | groupby event.module event.dataset
Apr 25 23:19:53 cmin4 auditbeat: 2023-04-25T23:19:53.818+0200#011ERROR#011[publisher_pipeline_output]#011pipeline/output.go:154#011Failed to connect to backoff(elasticsearch(http://localhost:9200)): Get "http://localhost:9200": dial tcp 127.0.0.1:9200: connect: connection refused
message:
{"timestamp":"2023-04-25T21:19:54.253+0000","rule":{"level":2,"description":"Unknown problem somewhere in the system.","id":"1002","firedtimes":442,"mail":false,"groups":["syslog","errors"],"gpg13":["4.3"]},"agent":{"id":"002","name":"cmin4.011235813213455.dk","ip":"37.128.222.7"},"manager":{"name":"lupe-wazuh-manager"},"id":"1682457594.65993214","full_log":"Apr 25 23:19:53 cmin4 auditbeat: 2023-04-25T23:19:53.818+0200#011ERROR#011[publisher_pipeline_output]#011pipeline/output.go:154#011Failed to connect to backoff(elasticsearch(http://localhost:9200)): Get "http://localhost:9200\": dial tcp 127.0.0.1:9200: connect: connection refused","predecoder":{"program_name":"auditbeat","timestamp":"Apr 25 23:19:53","hostname":"cmin4"},"decoder":{},"location":"/var/log/messages"}
i have a semilar issue with filebeat and metricbeat
This discussion was converted from issue #10223 on April 26, 2023 12:43.
Heading
Bold
Italic
Quote
Code
Link
Numbered list
Unordered list
Task list
Attach files
Mention
Reference
Menu
reacted with thumbs up emoji reacted with thumbs down emoji reacted with laugh emoji reacted with hooray emoji reacted with confused emoji reacted with heart emoji reacted with rocket emoji reacted with eyes emoji
Uh oh!
There was an error while loading. Please reload this page.
Uh oh!
There was an error while loading. Please reload this page.
-
Hi i have Version: 2.3.220 with 32gb ram on a 4code microserver.
After i running the system few months i found a issue ind the so hunt section:
cmin4 is a client of my SO
count 62400 / "Unknown problem somewhere in the system." | groupby event.module event.dataset
Apr 25 23:19:53 cmin4 auditbeat: 2023-04-25T23:19:53.818+0200#011ERROR#011[publisher_pipeline_output]#011pipeline/output.go:154#011Failed to connect to backoff(elasticsearch(http://localhost:9200)): Get "http://localhost:9200": dial tcp 127.0.0.1:9200: connect: connection refused
message:
{"timestamp":"2023-04-25T21:19:54.253+0000","rule":{"level":2,"description":"Unknown problem somewhere in the system.","id":"1002","firedtimes":442,"mail":false,"groups":["syslog","errors"],"gpg13":["4.3"]},"agent":{"id":"002","name":"cmin4.011235813213455.dk","ip":"37.128.222.7"},"manager":{"name":"lupe-wazuh-manager"},"id":"1682457594.65993214","full_log":"Apr 25 23:19:53 cmin4 auditbeat: 2023-04-25T23:19:53.818+0200#011ERROR#011[publisher_pipeline_output]#011pipeline/output.go:154#011Failed to connect to backoff(elasticsearch(http://localhost:9200)): Get "http://localhost:9200\": dial tcp 127.0.0.1:9200: connect: connection refused","predecoder":{"program_name":"auditbeat","timestamp":"Apr 25 23:19:53","hostname":"cmin4"},"decoder":{},"location":"/var/log/messages"}
i have a semilar issue with filebeat and metricbeat
Beta Was this translation helpful? Give feedback.
All reactions