Our great sponsors
-
Wazuh
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
-
WorkOS
The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.
I created an issue on Github repo after finding a problem in wazuh-install.sh. While trying to troubleshoot, I saw that when cluster fails, the script runs the common rollback, basically removes the indexer installation. It is the reason of removal of the folder /var/log/wazuh-indexer.
So I created a PR to solve that issue: instead of rolling back whole wazuh-* installations, it just reverts to the backed up default state, then removes the backup.
Related posts
- Help: Dashboard installation failing with "can't read etc/opensearch_dashboards.yml no such file or directory"
- Is there a work around for the Wazuh-agent installer issue with Debian 12?
- Wazuh installation assistant - Indexer installation
- "INFO: Could not connect to API id [default]: 3099 - ERROR3099 - Invalid credentials" after fresh install
- Custom dashboard with custom visualization to completely replace wazuh dashboard?