Specified SLS 'data.*' in environment 'base' is not available on the salt master

[samocolorado]

Version

2.4.20

Installation Method

Security Onion ISO image

Description

other (please provide detail below)

Installation Type

Standalone

Location

on-prem with Internet access

Hardware Specs

Exceeds minimum requirements

CPU

8

RAM

80

Storage for /

1.4T

Storage for /nsm

1.2T

Network Traffic Collection

span port

Network Traffic Speeds

1Gbps to 10Gbps

Status

No, one or more services are failed (please provide detail below)

Salt Status

Yes, there are salt failures (please provide detail below)

Logs

Yes, there are additional clues in /opt/so/log/ (please provide detail below)

Detail

i had a functional Security onion 2.4.10 and i updated to 2.4.20 via soup

and then i ran
so-playbook-ruleupdate && so-rule-update && so-saltstack-update && so-yara-update

after that it faced a problem even i reboot the server nothing will work

it gives me

Error running 'state.show_top': Pillar failed to render. Additional info follows:

• Specified SLS 'data.*' in environment 'base' is not available on the salt master
• Specified SLS 'zeeklogs' in environment 'base' is not available on the salt master
• Specified SLS 'global' in environment 'base' is not available on the salt master
  Could not talk to salt master

where can i install this 3 sls files ot how can i resolve this issue

or how can resintall or fix Securityonion withoud dleting my 400+ GB NSM folder

tail -40 /opt/so/log/salt/master

2023-10-25 01:20:57,551 [salt.client.mixins:440 ][INFO ][2659] Runner completed: 20231025012056628328
2023-10-25 01:20:57,603 [salt.pillar :893 ][ERROR ][2659] Specified SLS 'data.' in environment 'base' is not available on the salt master
2023-10-25 01:20:57,603 [salt.template :62 ][ERROR ][2659] Template was specified incorrectly: False
2023-10-25 01:20:57,604 [salt.pillar :893 ][ERROR ][2659] Specified SLS 'zeeklogs' in environment 'base' is not available on the salt master
2023-10-25 01:20:57,604 [salt.template :62 ][ERROR ][2659] Template was specified incorrectly: False
2023-10-25 01:20:57,614 [salt.pillar :893 ][ERROR ][2659] Specified SLS 'global' in environment 'base' is not available on the salt master
2023-10-25 01:20:57,615 [salt.template :62 ][ERROR ][2659] Template was specified incorrectly: False
2023-10-25 01:20:57,640 [salt.pillar :1256][CRITICAL][2659] Pillar render error: Specified SLS 'data.' in environment 'base' is not available on the salt master
2023-10-25 01:20:57,640 [salt.pillar :1256][CRITICAL][2659] Pillar render error: Specified SLS 'zeeklogs' in environment 'base' is not available on the salt master
2023-10-25 01:20:57,640 [salt.pillar :1256][CRITICAL][2659] Pillar render error: Specified SLS 'global' in environment 'base' is not available on the salt master
2023-10-25 01:20:57,827 [salt.utils.job :86 ][INFO ][2657] Got return from securityonion_standalone for job 20231025012057826212
2023-10-25 01:20:57,829 [salt.utils.event :911 ][ERROR ][2657] Event iteration failed with exception: 'list' object has no attribute 'items'
2023-10-25 01:25:06,485 [salt.channel.server:288 ][INFO ][2661] Authentication request from securityonion_standalone
2023-10-25 01:25:06,486 [salt.channel.server:564 ][INFO ][2661] Authentication accepted from securityonion_standalone
2023-10-25 01:25:07,922 [salt.client.mixins:440 ][INFO ][2659] Runner completed: 20231025012507860546
2023-10-25 01:25:09,964 [salt.client.mixins:440 ][INFO ][2659] Runner completed: 20231025012508832648
2023-10-25 01:25:10,016 [salt.pillar :893 ][ERROR ][2659] Specified SLS 'data.' in environment 'base' is not available on the salt master
2023-10-25 01:25:10,016 [salt.template :62 ][ERROR ][2659] Template was specified incorrectly: False
2023-10-25 01:25:10,017 [salt.pillar :893 ][ERROR ][2659] Specified SLS 'zeeklogs' in environment 'base' is not available on the salt master
2023-10-25 01:25:10,018 [salt.template :62 ][ERROR ][2659] Template was specified incorrectly: False
2023-10-25 01:25:10,028 [salt.pillar :893 ][ERROR ][2659] Specified SLS 'global' in environment 'base' is not available on the salt master
2023-10-25 01:25:10,028 [salt.template :62 ][ERROR ][2659] Template was specified incorrectly: False
2023-10-25 01:25:10,052 [salt.pillar :1256][CRITICAL][2659] Pillar render error: Specified SLS 'data.' in environment 'base' is not available on the salt master
2023-10-25 01:25:10,052 [salt.pillar :1256][CRITICAL][2659] Pillar render error: Specified SLS 'zeeklogs' in environment 'base' is not available on the salt master
2023-10-25 01:25:10,052 [salt.pillar :1256][CRITICAL][2659] Pillar render error: Specified SLS 'global' in environment 'base' is not available on the salt master
2023-10-25 01:25:10,286 [salt.utils.job :86 ][INFO ][2656] Got return from securityonion_standalone for job 20231025012510285359
2023-10-25 01:25:12,493 [salt.channel.server:288 ][INFO ][2657] Authentication request from securityonion_standalone
2023-10-25 01:25:12,494 [salt.channel.server:564 ][INFO ][2657] Authentication accepted from securityonion_standalone
2023-10-25 01:25:13,909 [salt.client.mixins:440 ][INFO ][2655] Runner completed: 20231025012513853649
2023-10-25 01:25:15,855 [salt.client.mixins:440 ][INFO ][2655] Runner completed: 20231025012514870728
2023-10-25 01:25:15,907 [salt.pillar :893 ][ERROR ][2655] Specified SLS 'data.' in environment 'base' is not available on the salt master
2023-10-25 01:25:15,907 [salt.template :62 ][ERROR ][2655] Template was specified incorrectly: False
2023-10-25 01:25:15,908 [salt.pillar :893 ][ERROR ][2655] Specified SLS 'zeeklogs' in environment 'base' is not available on the salt master
2023-10-25 01:25:15,909 [salt.template :62 ][ERROR ][2655] Template was specified incorrectly: False
2023-10-25 01:25:15,919 [salt.pillar :893 ][ERROR ][2655] Specified SLS 'global' in environment 'base' is not available on the salt master
2023-10-25 01:25:15,919 [salt.template :62 ][ERROR ][2655] Template was specified incorrectly: False
2023-10-25 01:25:15,944 [salt.pillar :1256][CRITICAL][2655] Pillar render error: Specified SLS 'data.' in environment 'base' is not available on the salt master
2023-10-25 01:25:15,944 [salt.pillar :1256][CRITICAL][2655] Pillar render error: Specified SLS 'zeeklogs' in environment 'base' is not available on the salt master
2023-10-25 01:25:15,944 [salt.pillar :1256][CRITICAL][2655] Pillar render error: Specified SLS 'global' in environment 'base' is not available on the salt master
2023-10-25 01:25:16,151 [salt.utils.job :86 ][INFO ][2661] Got return from securityonion_standalone for job 20231025012516150127

Guidelines

• I have read the above statement and can confirm my post is relevant to Security Onion 2.4.

[cm-ops]

What does your salt-master service show? systemctl status salt-master