Zeek workers are stuck in initializing

[SliuzasLukas]

Hi,

Just wanted if this is normal behaviour. I ran docker logs so-zeek and got this output. Also running so-status zeek is shown as so-zeek │ running │ Up 17 minutes (healthy)

checking configurations ...
installing ...
removing old policies in /nsm/zeek/spool/installed-scripts-do-not-touch/site ...
removing old policies in /nsm/zeek/spool/installed-scripts-do-not-touch/auto ...
creating policy directories ...
installing site policies ...
generating cluster-layout.zeek ...
generating local-networks.zeek ...
generating zeekctl-config.zeek ...
generating zeekctl-config.sh ...
stopping ...
stopping workers ...
stopping proxy ...
stopping manager ...
stopping logger ...
starting ...
starting logger ...
starting manager ...
starting proxy ...
starting workers ...
(worker-1-1 still initializing)
(worker-1-2 still initializing)
(worker-1-3 still initializing)
(worker-1-4 still initializing)
(worker-1-5 still initializing)
(worker-1-6 still initializing)
(worker-1-7 still initializing)
(worker-1-8 still initializing)
(worker-1-9 still initializing)
(worker-1-10 still initializing)
(worker-1-11 still initializing)
(worker-1-12 still initializing)
(worker-1-13 still initializing)
(worker-1-14 still initializing)
(worker-1-15 still initializing)
(worker-1-16 still initializing)
(worker-1-17 still initializing)
(worker-1-18 still initializing)
(worker-1-19 still initializing)
(worker-1-20 still initializing)
(worker-1-21 still initializing)
(worker-1-22 still initializing)
(worker-1-23 still initializing)
Error: error occurred while trying to send mail: send-mail: /usr/sbin/sendmail not found

Error: error occurred while trying to send mail: send-mail: /usr/sbin/sendmail not found

Error: error occurred while trying to send mail: send-mail: /usr/sbin/sendmail not found

Error: error occurred while trying to send mail: send-mail: /usr/sbin/sendmail not found

Error: error occurred while trying to send mail: send-mail: /usr/sbin/sendmail not found

Error: error occurred while trying to send mail: send-mail: /usr/sbin/sendmail not found

Error: error occurred while trying to send mail: send-mail: /usr/sbin/sendmail not found

Error: error occurred while trying to send mail: send-mail: /usr/sbin/sendmail not found

Error: error occurred while trying to send mail: send-mail: /usr/sbin/sendmail not found

Error: error occurred while trying to send mail: send-mail: /usr/sbin/sendmail not found

Error: error occurred while trying to send mail: send-mail: /usr/sbin/sendmail not found

Error: error occurred while trying to send mail: send-mail: /usr/sbin/sendmail not found

Error: error occurred while trying to send mail: send-mail: /usr/sbin/sendmail not found

Error: error occurred while trying to send mail: send-mail: /usr/sbin/sendmail not found

Error: error occurred while trying to send mail: send-mail: /usr/sbin/sendmail not found

Error: error occurred while trying to send mail: send-mail: /usr/sbin/sendmail not found

Error: error occurred while trying to send mail: send-mail: /usr/sbin/sendmail not found

Error: error occurred while trying to send mail: send-mail: /usr/sbin/sendmail not found

Error: error occurred while trying to send mail: send-mail: /usr/sbin/sendmail not found

Error: error occurred while trying to send mail: send-mail: /usr/sbin/sendmail not found

Error: error occurred while trying to send mail: send-mail: /usr/sbin/sendmail not found

Error: error occurred while trying to send mail: send-mail: /usr/sbin/sendmail not found

Error: error occurred while trying to send mail: send-mail: /usr/sbin/sendmail not found

Error: error occurred while trying to send mail: send-mail: /usr/sbin/sendmail not found

Error: error occurred while trying to send mail: send-mail: /usr/sbin/sendmail not found

Error: error occurred while trying to send mail: send-mail: /usr/sbin/sendmail not found

checking configurations ...
installing ...
removing old policies in /nsm/zeek/spool/installed-scripts-do-not-touch/site ...
removing old policies in /nsm/zeek/spool/installed-scripts-do-not-touch/auto ...
creating policy directories ...
installing site policies ...
generating cluster-layout.zeek ...
generating local-networks.zeek ...
generating zeekctl-config.zeek ...
generating zeekctl-config.sh ...
stopping ...
stopping workers ...
creating crash report for previously crashed nodes: worker-1-1, worker-1-2, worker-1-3, worker-1-4, worker-1-5, worker-1-6, worker-1-7, worker-1-8, worker-1-9, worker-1-10, worker-1-11, worker-1-12, worker-1-13, worker-1-14, worker-1-15, worker-1-16, worker-1-17, worker-1-18, worker-1-19, worker-1-20, worker-1-21, worker-1-22, worker-1-23
stopping proxy ...
creating crash report for previously crashed nodes: proxy
stopping manager ...
creating crash report for previously crashed nodes: manager
stopping logger ...
creating crash report for previously crashed nodes: logger
starting ...
starting logger ...
starting manager ...
starting proxy ...
starting workers ...
(worker-1-1 still initializing)
(worker-1-2 still initializing)
(worker-1-3 still initializing)
(worker-1-4 still initializing)
(worker-1-5 still initializing)
(worker-1-6 still initializing)
(worker-1-7 still initializing)
(worker-1-8 still initializing)
(worker-1-9 still initializing)
(worker-1-10 still initializing)
(worker-1-11 still initializing)
(worker-1-12 still initializing)
(worker-1-13 still initializing)
(worker-1-14 still initializing)
(worker-1-15 still initializing)
(worker-1-16 still initializing)
(worker-1-17 still initializing)
(worker-1-18 still initializing)
(worker-1-19 still initializing)
(worker-1-20 still initializing)
(worker-1-21 still initializing)
(worker-1-22 still initializing)
(worker-1-23 still initializing)
Error: error occurred while trying to send mail: send-mail: /usr/sbin/sendmail not found

Error: error occurred while trying to send mail: send-mail: /usr/sbin/sendmail not found

Error: error occurred while trying to send mail: send-mail: /usr/sbin/sendmail not found

Error: error occurred while trying to send mail: send-mail: /usr/sbin/sendmail not found

Error: error occurred while trying to send mail: send-mail: /usr/sbin/sendmail not found

Error: error occurred while trying to send mail: send-mail: /usr/sbin/sendmail not found

Error: error occurred while trying to send mail: send-mail: /usr/sbin/sendmail not found

Error: error occurred while trying to send mail: send-mail: /usr/sbin/sendmail not found

Error: error occurred while trying to send mail: send-mail: /usr/sbin/sendmail not found

Error: error occurred while trying to send mail: send-mail: /usr/sbin/sendmail not found

Error: error occurred while trying to send mail: send-mail: /usr/sbin/sendmail not found

Error: error occurred while trying to send mail: send-mail: /usr/sbin/sendmail not found

Error: error occurred while trying to send mail: send-mail: /usr/sbin/sendmail not found

Error: error occurred while trying to send mail: send-mail: /usr/sbin/sendmail not found

Error: error occurred while trying to send mail: send-mail: /usr/sbin/sendmail not found

Error: error occurred while trying to send mail: send-mail: /usr/sbin/sendmail not found

Error: error occurred while trying to send mail: send-mail: /usr/sbin/sendmail not found

Error: error occurred while trying to send mail: send-mail: /usr/sbin/sendmail not found

Error: error occurred while trying to send mail: send-mail: /usr/sbin/sendmail not found

Error: error occurred while trying to send mail: send-mail: /usr/sbin/sendmail not found

Error: error occurred while trying to send mail: send-mail: /usr/sbin/sendmail not found

Error: error occurred while trying to send mail: send-mail: /usr/sbin/sendmail not found

Error: error occurred while trying to send mail: send-mail: /usr/sbin/sendmail not found

Error: error occurred while trying to send mail: send-mail: /usr/sbin/sendmail not found

Error: error occurred while trying to send mail: send-mail: /usr/sbin/sendmail not found

Error: error occurred while trying to send mail: send-mail: /usr/sbin/sendmail not found

checking configurations ...
installing ...
removing old policies in /nsm/zeek/spool/installed-scripts-do-not-touch/site ...
removing old policies in /nsm/zeek/spool/installed-scripts-do-not-touch/auto ...
creating policy directories ...
installing site policies ...
generating cluster-layout.zeek ...
generating local-networks.zeek ...
generating zeekctl-config.zeek ...
generating zeekctl-config.sh ...
stopping ...
stopping workers ...
creating crash report for previously crashed nodes: worker-1-1, worker-1-2, worker-1-3, worker-1-4, worker-1-5, worker-1-6, worker-1-7, worker-1-8, worker-1-9, worker-1-10, worker-1-11, worker-1-12, worker-1-13, worker-1-14, worker-1-15, worker-1-16, worker-1-17, worker-1-18, worker-1-19, worker-1-20, worker-1-21, worker-1-22, worker-1-23
stopping proxy ...
creating crash report for previously crashed nodes: proxy
stopping manager ...
creating crash report for previously crashed nodes: manager
stopping logger ...
creating crash report for previously crashed nodes: logger
starting ...
starting logger ...
starting manager ...
starting proxy ...
starting workers ...
(worker-1-1 still initializing)
(worker-1-2 still initializing)
(worker-1-3 still initializing)
(worker-1-4 still initializing)
(worker-1-5 still initializing)
(worker-1-6 still initializing)
(worker-1-7 still initializing)
(worker-1-8 still initializing)
(worker-1-9 still initializing)
(worker-1-10 still initializing)
(worker-1-11 still initializing)
(worker-1-12 still initializing)
(worker-1-13 still initializing)
(worker-1-14 still initializing)
(worker-1-15 still initializing)
(worker-1-16 still initializing)
(worker-1-17 still initializing)
(worker-1-18 still initializing)
(worker-1-19 still initializing)
(worker-1-20 still initializing)
(worker-1-21 still initializing)
(worker-1-22 still initializing)
(worker-1-23 still initializing)

[dougburks]

I'm not seeing that kind of output on my sensors. Have you made any changes to your Zeek configuration? If so, have you tried reverting those changes?