--------------------------------
11/07/2023 15:08:47 INFO: Starting Wazuh installation assistant. Wazuh version: 4.5.0
11/07/2023 15:08:47 INFO: Verbose logging redirected to /var/log/wazuh-install.log
11/07/2023 15:08:55 DEBUG: Adding the Wazuh repository.
[wazuh]
gpgcheck=1
gpgkey=https://packages-dev.wazuh.com/key/GPG-KEY-WAZUH
enabled=1
name=EL-${releasever} - Wazuh
baseurl=https://packages-dev.wazuh.com/staging/yum/
protect=1
11/07/2023 15:08:55 INFO: Wazuh development repository added.
11/07/2023 15:08:55 INFO: --- Configuration files ---
11/07/2023 15:08:55 INFO: Generating configuration files.
11/07/2023 15:08:55 DEBUG: Creating the root certificate.
Generating a 2048 bit RSA private key
.....+++
................................................+++
writing new private key to '/tmp/wazuh-certificates//root-ca.key'
-----
Generating RSA private key, 2048 bit long modulus
...................................................+++
.........................................................................+++
e is 65537 (0x10001)
Signature ok
subject=/C=US/L=California/O=Wazuh/OU=Wazuh/CN=admin
Getting CA Private Key
11/07/2023 15:08:55 DEBUG: Creating the Wazuh indexer certificates.
Generating a 2048 bit RSA private key
..............+++
........+++
writing new private key to '/tmp/wazuh-certificates//wazuh-indexer-key.pem'
-----
Signature ok
subject=/C=US/L=California/O=Wazuh/OU=Wazuh/CN=wazuh-indexer
Getting CA Private Key
11/07/2023 15:08:56 DEBUG: Creating the Wazuh server certificates.
Generating a 2048 bit RSA private key
....+++
........................................+++
writing new private key to '/tmp/wazuh-certificates//wazuh-server-key.pem'
-----
Signature ok
subject=/C=US/L=California/O=Wazuh/OU=Wazuh/CN=wazuh-server
Getting CA Private Key
11/07/2023 15:08:56 DEBUG: Creating the Wazuh dashboard certificates.
Generating a 2048 bit RSA private key
...+++
.....................+++
writing new private key to '/tmp/wazuh-certificates//wazuh-dashboard-key.pem'
-----
Signature ok
subject=/C=US/L=California/O=Wazuh/OU=Wazuh/CN=wazuh-dashboard
Getting CA Private Key
11/07/2023 15:08:56 DEBUG: Generating random passwords.
11/07/2023 15:08:56 INFO: Created wazuh-install-files.tar. It contains the Wazuh cluster key, certificates, and passwords necessary for installation.
11/07/2023 15:08:56 INFO: --- Wazuh indexer ---
11/07/2023 15:08:56 INFO: Starting Wazuh indexer installation.
Loaded plugins: extras_suggestions, langpacks, priorities, update-motd
Resolving Dependencies
--> Running transaction check
---> Package wazuh-indexer.x86_64 0:4.5.0-0.0.0.2264 will be installed
--> Finished Dependency Resolution

Dependencies Resolved

================================================================================
 Package              Arch          Version                  Repository    Size
================================================================================
Installing:
 wazuh-indexer        x86_64        4.5.0-0.0.0.2264         wazuh        675 M

Transaction Summary
================================================================================
Install  1 Package

Total download size: 675 M
Installed size: 931 M
Downloading packages:
Running transaction check
Running transaction test
Transaction test succeeded
Running transaction
  Installing : wazuh-indexer-4.5.0-0.0.0.2264.x86_64                        1/1 
Created opensearch keystore in /etc/wazuh-indexer/opensearch.keystore
  Verifying  : wazuh-indexer-4.5.0-0.0.0.2264.x86_64                        1/1 

Installed:
  wazuh-indexer.x86_64 0:4.5.0-0.0.0.2264                                       

Complete!
11/07/2023 15:10:21 INFO: Wazuh indexer installation finished.
11/07/2023 15:10:21 DEBUG: Configuring Wazuh indexer.
11/07/2023 15:10:21 INFO: Wazuh indexer post-install configuration finished.
11/07/2023 15:10:21 INFO: Starting service wazuh-indexer.
Created symlink from /etc/systemd/system/multi-user.target.wants/wazuh-indexer.service to /usr/lib/systemd/system/wazuh-indexer.service.
11/07/2023 15:10:44 INFO: wazuh-indexer service started.
11/07/2023 15:10:44 INFO: Initializing Wazuh indexer cluster security settings.
**************************************************************************
** This tool will be deprecated in the next major release of OpenSearch **
** https://github.com/opensearch-project/security/issues/1755           **
**************************************************************************
Security Admin v7
Will connect to 127.0.0.1:9200 ... done
Connected as "CN=admin,OU=Wazuh,O=Wazuh,L=California,C=US"
OpenSearch Version: 2.6.0
Contacting opensearch cluster 'opensearch' and wait for YELLOW clusterstate ...
Clustername: wazuh-cluster
Clusterstate: GREEN
Number of nodes: 1
Number of data nodes: 1
.opendistro_security index does not exists, attempt to create it ... done (0-all replicas)
Populate config from /etc/wazuh-indexer/opensearch-security/
Will update '/config' with /etc/wazuh-indexer/opensearch-security/config.yml 
   SUCC: Configuration for 'config' created or updated
Will update '/roles' with /etc/wazuh-indexer/opensearch-security/roles.yml 
   SUCC: Configuration for 'roles' created or updated
Will update '/rolesmapping' with /etc/wazuh-indexer/opensearch-security/roles_mapping.yml 
   SUCC: Configuration for 'rolesmapping' created or updated
Will update '/internalusers' with /etc/wazuh-indexer/opensearch-security/internal_users.yml 
   SUCC: Configuration for 'internalusers' created or updated
Will update '/actiongroups' with /etc/wazuh-indexer/opensearch-security/action_groups.yml 
   SUCC: Configuration for 'actiongroups' created or updated
Will update '/tenants' with /etc/wazuh-indexer/opensearch-security/tenants.yml 
   SUCC: Configuration for 'tenants' created or updated
Will update '/nodesdn' with /etc/wazuh-indexer/opensearch-security/nodes_dn.yml 
   SUCC: Configuration for 'nodesdn' created or updated
Will update '/whitelist' with /etc/wazuh-indexer/opensearch-security/whitelist.yml 
   SUCC: Configuration for 'whitelist' created or updated
Will update '/audit' with /etc/wazuh-indexer/opensearch-security/audit.yml 
   SUCC: Configuration for 'audit' created or updated
Will update '/allowlist' with /etc/wazuh-indexer/opensearch-security/allowlist.yml 
   SUCC: Configuration for 'allowlist' created or updated
SUCC: Expected 10 config types for node {"updated_config_types":["allowlist","tenants","rolesmapping","nodesdn","audit","roles","whitelist","internalusers","actiongroups","config"],"updated_config_siz
e":10,"message":null} is 10 (["allowlist","tenants","rolesmapping","nodesdn","audit","roles","whitelist","internalusers","actiongroups","config"]) due to: null
Done with success
11/07/2023 15:10:54 INFO: Wazuh indexer cluster initialized.
11/07/2023 15:10:54 INFO: --- Wazuh server ---
11/07/2023 15:10:54 INFO: Starting the Wazuh manager installation.
Loaded plugins: extras_suggestions, langpacks, priorities, update-motd
Resolving Dependencies
--> Running transaction check
---> Package wazuh-manager.x86_64 0:4.5.0-0.0.0.2264 will be installed
--> Finished Dependency Resolution

Dependencies Resolved

================================================================================
 Package              Arch          Version                  Repository    Size
================================================================================
Installing:
 wazuh-manager        x86_64        4.5.0-0.0.0.2264         wazuh        165 M

Transaction Summary
================================================================================
Install  1 Package

Total download size: 165 M
Installed size: 601 M
Downloading packages:
Running transaction check
Running transaction test
Transaction test succeeded
Running transaction
  Installing : wazuh-manager-4.5.0-0.0.0.2264.x86_64                        1/1 
  Verifying  : wazuh-manager-4.5.0-0.0.0.2264.x86_64                        1/1 

Installed:
  wazuh-manager.x86_64 0:4.5.0-0.0.0.2264                                       

Complete!
11/07/2023 15:11:22 INFO: Wazuh manager installation finished.
11/07/2023 15:11:22 INFO: Starting service wazuh-manager.
Created symlink from /etc/systemd/system/multi-user.target.wants/wazuh-manager.service to /usr/lib/systemd/system/wazuh-manager.service.
11/07/2023 15:11:39 INFO: wazuh-manager service started.
11/07/2023 15:11:39 INFO: Starting Filebeat installation.
Existing lock /var/run/yum.pid: another copy is running as pid 10507.
Another app is currently holding the yum lock; waiting for it to exit...
  The other application is: yum
    Memory :  98 M RSS (421 MB VSZ)
    Started: Tue Jul 11 15:11:37 2023 - 00:03 ago
    State  : Running, pid: 10507
Another app is currently holding the yum lock; waiting for it to exit...
  The other application is: yum
    Memory : 158 M RSS (481 MB VSZ)
    Started: Tue Jul 11 15:11:37 2023 - 00:05 ago
    State  : Running, pid: 10507
Another app is currently holding the yum lock; waiting for it to exit...
  The other application is: yum
    Memory : 189 M RSS (513 MB VSZ)
    Started: Tue Jul 11 15:11:37 2023 - 00:07 ago
    State  : Running, pid: 10507
Another app is currently holding the yum lock; waiting for it to exit...
  The other application is: yum
    Memory : 176 M RSS (500 MB VSZ)
    Started: Tue Jul 11 15:11:37 2023 - 00:09 ago
    State  : Running, pid: 10507
Another app is currently holding the yum lock; waiting for it to exit...
  The other application is: yum
    Memory : 178 M RSS (502 MB VSZ)
    Started: Tue Jul 11 15:11:37 2023 - 00:11 ago
    State  : Running, pid: 10507
11/07/2023 15:12:08 INFO: Filebeat installation finished.
wazuh/
wazuh/module.yml
wazuh/archives/
wazuh/archives/config/
wazuh/archives/config/archives.yml
wazuh/archives/ingest/
wazuh/archives/ingest/pipeline.json
wazuh/archives/manifest.yml
wazuh/alerts/
wazuh/alerts/config/
wazuh/alerts/config/alerts.yml
wazuh/alerts/ingest/
wazuh/alerts/ingest/pipeline.json
wazuh/alerts/manifest.yml
wazuh/_meta/
wazuh/_meta/config.yml
wazuh/_meta/fields.yml
wazuh/_meta/docs.asciidoc
Created filebeat keystore
Successfully updated the keystore
Successfully updated the keystore
11/07/2023 15:12:08 INFO: Filebeat post-install configuration finished.
11/07/2023 15:12:08 INFO: Starting service filebeat.
Created symlink from /etc/systemd/system/multi-user.target.wants/filebeat.service to /usr/lib/systemd/system/filebeat.service.
11/07/2023 15:12:09 INFO: filebeat service started.
11/07/2023 15:12:09 INFO: --- Wazuh dashboard ---
11/07/2023 15:12:09 INFO: Starting Wazuh dashboard installation.
Loaded plugins: extras_suggestions, langpacks, priorities, update-motd
Resolving Dependencies
--> Running transaction check
---> Package wazuh-dashboard.x86_64 0:4.5.0-0.0.0.2264 will be installed
--> Finished Dependency Resolution

Dependencies Resolved

================================================================================
 Package               Arch         Version                   Repository   Size
================================================================================
Installing:
 wazuh-dashboard       x86_64       4.5.0-0.0.0.2264          wazuh       157 M

Transaction Summary
================================================================================
Install  1 Package

Total download size: 157 M
Installed size: 732 M
Downloading packages:
Running transaction check
Running transaction test
Transaction test succeeded
Running transaction
  Installing : wazuh-dashboard-4.5.0-0.0.0.2264.x86_64                      1/1 
  Verifying  : wazuh-dashboard-4.5.0-0.0.0.2264.x86_64                      1/1 

Installed:
  wazuh-dashboard.x86_64 0:4.5.0-0.0.0.2264                                     

Complete!
11/07/2023 15:13:19 INFO: Wazuh dashboard installation finished.
11/07/2023 15:13:19 DEBUG: Wazuh dashboard certificate setup finished.
11/07/2023 15:13:19 INFO: Wazuh dashboard post-install configuration finished.
11/07/2023 15:13:19 INFO: Starting service wazuh-dashboard.
Created symlink from /etc/systemd/system/multi-user.target.wants/wazuh-dashboard.service to /etc/systemd/system/wazuh-dashboard.service.
11/07/2023 15:13:19 INFO: wazuh-dashboard service started.
11/07/2023 15:13:19 DEBUG: Setting Wazuh indexer cluster passwords.
11/07/2023 15:13:23 DEBUG: Generating password hashes.
11/07/2023 15:13:34 DEBUG: Password hashes generated.
11/07/2023 15:13:34 DEBUG: Creating password backup.
mkdir: cannot create directory ���/etc/wazuh-indexer/backup���: File exists
**************************************************************************
** This tool will be deprecated in the next major release of OpenSearch **
** https://github.com/opensearch-project/security/issues/1755           **
**************************************************************************
Security Admin v7
Will connect to 127.0.0.1:9200 ... done
Connected as "CN=admin,OU=Wazuh,O=Wazuh,L=California,C=US"
OpenSearch Version: 2.6.0
Contacting opensearch cluster 'opensearch' and wait for YELLOW clusterstate ...
Clustername: wazuh-cluster
Clusterstate: GREEN
Number of nodes: 1
Number of data nodes: 1
.opendistro_security index already exists, so we do not need to create one.
Will retrieve '/config' into /etc/wazuh-indexer/backup/config.yml 
   SUCC: Configuration for 'config' stored in /etc/wazuh-indexer/backup/config.yml
Will retrieve '/roles' into /etc/wazuh-indexer/backup/roles.yml 
   SUCC: Configuration for 'roles' stored in /etc/wazuh-indexer/backup/roles.yml
Will retrieve '/rolesmapping' into /etc/wazuh-indexer/backup/roles_mapping.yml 
   SUCC: Configuration for 'rolesmapping' stored in /etc/wazuh-indexer/backup/roles_mapping.yml
Will retrieve '/internalusers' into /etc/wazuh-indexer/backup/internal_users.yml 
   SUCC: Configuration for 'internalusers' stored in /etc/wazuh-indexer/backup/internal_users.yml
Will retrieve '/actiongroups' into /etc/wazuh-indexer/backup/action_groups.yml 
   SUCC: Configuration for 'actiongroups' stored in /etc/wazuh-indexer/backup/action_groups.yml
Will retrieve '/tenants' into /etc/wazuh-indexer/backup/tenants.yml 
   SUCC: Configuration for 'tenants' stored in /etc/wazuh-indexer/backup/tenants.yml
Will retrieve '/nodesdn' into /etc/wazuh-indexer/backup/nodes_dn.yml 
   SUCC: Configuration for 'nodesdn' stored in /etc/wazuh-indexer/backup/nodes_dn.yml
Will retrieve '/whitelist' into /etc/wazuh-indexer/backup/whitelist.yml 
   SUCC: Configuration for 'whitelist' stored in /etc/wazuh-indexer/backup/whitelist.yml
Will retrieve '/allowlist' into /etc/wazuh-indexer/backup/allowlist.yml 
   SUCC: Configuration for 'allowlist' stored in /etc/wazuh-indexer/backup/allowlist.yml
Will retrieve '/audit' into /etc/wazuh-indexer/backup/audit.yml 
   SUCC: Configuration for 'audit' stored in /etc/wazuh-indexer/backup/audit.yml
11/07/2023 15:13:38 DEBUG: Password backup created in /etc/wazuh-indexer/backup.
Successfully updated the keystore
11/07/2023 15:13:38 DEBUG: filebeat started.
11/07/2023 15:13:39 DEBUG: wazuh-dashboard started.
11/07/2023 15:13:39 DEBUG: Loading new passwords changes.
**************************************************************************
** This tool will be deprecated in the next major release of OpenSearch **
** https://github.com/opensearch-project/security/issues/1755           **
**************************************************************************
Security Admin v7
Will connect to 127.0.0.1:9200 ... done
Connected as "CN=admin,OU=Wazuh,O=Wazuh,L=California,C=US"
OpenSearch Version: 2.6.0
Contacting opensearch cluster 'opensearch' and wait for YELLOW clusterstate ...
Clustername: wazuh-cluster
Clusterstate: GREEN
Number of nodes: 1
Number of data nodes: 1
.opendistro_security index already exists, so we do not need to create one.
Populate config from /tmp/unattended/unattended_installer
Force type: internalusers
Will update '/internalusers' with /etc/wazuh-indexer/backup/internal_users.yml 
   SUCC: Configuration for 'internalusers' created or updated
SUCC: Expected 1 config types for node {"updated_config_types":["internalusers"],"updated_config_size":1,"message":null} is 1 (["internalusers"]) due to: null
Done with success
11/07/2023 15:13:46 DEBUG: Passwords changed.
11/07/2023 15:13:53 INFO: Initializing Wazuh dashboard web application.
11/07/2023 15:13:55 INFO: Wazuh dashboard web application initialized.
11/07/2023 15:13:55 INFO: --- Summary ---
11/07/2023 15:13:55 INFO: You can access the web interface https://<wazuh-dashboard-ip>
    User: admin
    Password: kuhNhU?y3rG62Rap0NBm.yewc?DyxFEP
11/07/2023 15:13:55 INFO: Installation finished.