You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Description
In an environment configured as Cross Cluster Search where we have 2 remote clusters (remote1_prod, remote2_prod), when the health check is done we have the error:
This was working without issues in Wazuh 4.1.5, and when we upgraded to 4.2.5 this started to happen.
Steps to reproduce
Install Wazuh 4.1.5 and configure an environment of Elasticsearch Cross Cluster search.
Upgrade the environment to 4.2.5
Execute the Wazuh App Health Check.
Expected Result
All health checks ok.
Actual Result
Error in templates for the index patterns of the remote clusters.
Troubleshooting
Tried adding the index patterns to the template and that is not possible because the : are not accepted:
Tried with this configurations in the Wazuh App:
But without success, same error.
Thank you in advance!
The text was updated successfully, but these errors were encountered:
From Wazuh app version 4.2.0, the configuration for checks.template and checks.fields was unified under the checks.pattern. This does some environments can't pass the Alerts index pattern in the health check due to the template check. The PR that unified the check was #3311.
There is a PR that runs the check depending on the app configuration #3783. The planning is this change be available in Wazuh app 4.3.0.
Description
In an environment configured as Cross Cluster Search where we have 2 remote clusters (
remote1_prod
,remote2_prod
), when the health check is done we have the error:This was working without issues in Wazuh 4.1.5, and when we upgraded to 4.2.5 this started to happen.
Steps to reproduce
Expected Result
Actual Result
Troubleshooting
:
are not accepted:But without success, same error.
Thank you in advance!
The text was updated successfully, but these errors were encountered: