Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Release 4.5.3 - RC 1 - E2E UX tests - Deployment on docker #19101

Closed
1 of 2 tasks
havidarou opened this issue Sep 21, 2023 · 8 comments
Closed
1 of 2 tasks

Release 4.5.3 - RC 1 - E2E UX tests - Deployment on docker #19101

havidarou opened this issue Sep 21, 2023 · 8 comments
Assignees
@pro-akim
Labels
level/subtask type/test

Comments

@havidarou
Copy link
Member

havidarou commented Sep 21, 2023 •
edited by teddytpc1

End-to-End (E2E) Testing Guideline

  • Documentation: Always consult the development documentation for the current stage tag at this link. Be careful because some of the description steps might refer to a current version in production, always navigate using the current development documention for the stage under test.
  • Test Requirements: Ensure your test comprehensively includes a full stack and agent/s deployment as per the Deployment requirements, detailing the machine OS, installed version, and revision.
  • Deployment Options: While deployments can be local (using VMs, Vagrant, etc) or on the aws-dev account, opt for local deployments when feasible. For AWS access, coordinate with the CICD team through this link.
  • External Accounts: If tests require third-party accounts (e.g., GitHub, Azure, AWS, GCP), request the necessary access through the CICD team here.
  • Alerts: Every test should generate a minimum of one end-to-end alert, from the agent to the dashboard, irrespective of test type.
  • Multi-node Testing: For multi-node wazuh-manager tests, ensure agents are connected to both workers and the master node.
  • Package Verification: Use the pre-release package that matches the current TAG you're testing. Confirm its version and revision.
  • Filebeat Errors: If you encounter errors with Filebeat during testing, refer to this Slack discussion for insights and resolutions.
  • Known Issues: Familiarize yourself with previously reported issues in the Known Issues section. This helps in identifying already recognized errors during testing.
  • Reporting New Issues: Any new errors discovered during testing that aren't listed under Known Issues should be reported. Assign the issue to the corresponding team (QA if unsure), add the Release testing/publication objective and Very high priority. Communicate these to the team and QA via the c-release Slack channel.
  • Test Conduct: It's imperative to be thorough in your testing, offering enough detail for reviewers. Incomplete tests might necessitate a redo.
  • Documentation Feedback: Encountering documentation gaps, unclear guidelines, or anything that disrupts the testing or UX? Open an issue, especially if it's not listed under Known Issues.
  • Format: If this is your first time doing this, refer to the format (but not necessarily the content, as it may vary) of previous E2E tests, here you have an example Release 4.3.5 - Release Candidate 1 - E2E UX tests - Wazuh Indexer #13994.
  • Status and completion: Change the issue status within your team project accordingly. Once you finish testing and write the conclusions, move it to Pending review and notify the @wazuh/cicd team via Slack using the c-release channel. Beware that the reviewers might request additional information or task repetitions.
  • For reviewers: Please move the issue to Pending final review and notify via Slack using the same thread if everything is ok, otherwise, perform an issue update with the requested changes and move it to On hold, increase the review_cycles in the team project by one and notify the issue assignee via Slack using the same thread.

For the conclusions and the issue testing and updates, use the following legend:

Status legend

  • 🟢 All checks passed
  • 🟡 Found a known issue
  • 🔴 Found a new error

Deployment requirements

Component Installation Type OS
Indexer Deployment on docker Single node and multi node -
Server Deployment on docker Single node and multi node -
Dashboard Deployment on docker - -
Agent Wazuh WUI one-liner deploy using IP - Amazon Linux 2 aarch64

Test description

Test deployment of Docker repository.

  • Test the installation guide in detail for both a single-node and a multi-node Wazuh cluster
  • Test changing the passwords

Documentation: https://documentation-dev.wazuh.com/v4.5.3-rc1/deployment-options/docker/index.html

Known issues

Conclusions

Summarize the errors detected (Known Issues included). Illustrate using the table below, removing current examples:

Single-Node

Process Result Issue
Install required software and set-up the environment 🟢
Wazuh stack deployment using Docker 🔴 wazuh/wazuh-docker#1018, wazuh/wazuh-docker#1017
Wazuh Agent deployment through WUI 🟢
From an event in Wazuh Agent to an alert in Wazuh Dashboard 🟢
Change passwords - Indexer/Dashboard 🔴 wazuh/wazuh-docker#1015
Change passwords - API 🟢

Multi-Node

Process Result Issue
Install required software and set-up the environment 🟢
Wazuh stack deployment using Docker 🟢
Wazuh Agent deployment through WUI 🟢
From an event in Wazuh Agent to an alert in Wazuh Dashboard 🟢
Change passwords - Indexer/Dashboard 🔴 wazuh/wazuh-documentation#6551
Change passwords - API 🟢

Feedback

We value your feedback. Please provide insights on your testing experience.

  • Was the testing guideline clear? Were there any ambiguities?
    It was clear.
  • Did you face any challenges not covered by the guideline?
    No.
  • Suggestions for improvement:
    No suggestions.

Reviewers validation

The criteria for completing this task is based on the validation of the conclusions and the test results by all reviewers.

All the checkboxes below must be marked in order to close this issue.
@havidarou havidarou mentioned this issue Sep 21, 2023
Closed
@pro-akim pro-akim self-assigned this Sep 22, 2023
@pro-akim
Copy link
Member

pro-akim commented Sep 22, 2023 •
edited

Single-node deployment 🔴

Install required software and set-up the environment 🟢
  1. Increase max_map_count on your host (Linux)
root@ip-172-31-86-7:/home/ubuntu# sysctl -w vm.max_map_count=262144
vm.max_map_count = 262144
root@ip-172-31-86-7:/home/ubuntu# sysctl vm.max_map_count
vm.max_map_count = 262144
  1. Check architecture
root@ip-172-31-86-7:/home/ubuntu# uname -r
5.19.0-1025-aws
  1. Install the Docker engine
root@ip-172-31-86-7:/home/ubuntu# curl -sSL https://get.docker.com/ | sh
# Executing docker install script, commit: e5543d473431b782227f8908005543bb4389b8de
+ sh -c apt-get update -qq >/dev/null
+ sh -c DEBIAN_FRONTEND=noninteractive apt-get install -y -qq apt-transport-https ca-certificates curl >/dev/null
+ sh -c install -m 0755 -d /etc/apt/keyrings
+ sh -c curl -fsSL "https://download.docker.com/linux/ubuntu/gpg" | gpg --dearmor --yes -o /etc/apt/keyrings/docker.gpg
+ sh -c chmod a+r /etc/apt/keyrings/docker.gpg
+ sh -c echo "deb [arch=amd64 signed-by=/etc/apt/keyrings/docker.gpg] https://download.docker.com/linux/ubuntu jammy stable" > /etc/apt/sources.list.d/docker.list
+ sh -c apt-get update -qq >/dev/null
+ sh -c DEBIAN_FRONTEND=noninteractive apt-get install -y -qq docker-ce docker-ce-cli containerd.io docker-compose-plugin docker-ce-rootless-extras docker-buildx-plugin >/dev/null
+ sh -c docker version
Client: Docker Engine - Community
 Version:           24.0.6
 API version:       1.43
 Go version:        go1.20.7
 Git commit:        ed223bc
 Built:             Mon Sep  4 12:31:44 2023
 OS/Arch:           linux/amd64
 Context:           default

Server: Docker Engine - Community
 Engine:
  Version:          24.0.6
  API version:      1.43 (minimum version 1.12)
  Go version:       go1.20.7
  Git commit:       1a79695
  Built:            Mon Sep  4 12:31:44 2023
  OS/Arch:          linux/amd64
  Experimental:     false
 containerd:
  Version:          1.6.24
  GitCommit:        61f9fd88f79f081d64d6fa3bb1a0dc71ec870523
 runc:
  Version:          1.1.9
  GitCommit:        v1.1.9-0-gccaecfc
 docker-init:
  Version:          0.19.0
  GitCommit:        de40ad0

================================================================================

To run Docker as a non-privileged user, consider setting up the
Docker daemon in rootless mode for your user:

    dockerd-rootless-setuptool.sh install

Visit https://docs.docker.com/go/rootless/ to learn about rootless mode.


To run the Docker daemon as a fully privileged service, but granting non-root
users access, refer to https://docs.docker.com/go/daemon-access/

WARNING: Access to the remote API on a privileged Docker daemon is equivalent
         to root access on the host. Refer to the 'Docker daemon attack surface'
         documentation for details: https://docs.docker.com/go/attack-surface/

================================================================================
  1. Start the Docker engine
root@ip-172-31-86-7:/home/ubuntu# systemctl start docker
  1. Install the Docker compose
Install docker-compose
root@ip-172-31-86-7:/home/ubuntu# curl -L "https://github.com/docker/compose/releases/download/v2.12.2/docker-compose-$(uname -s)-$(uname -m)" -o /usr/local/bin/docker-compose
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
100 42.8M  100 42.8M    0     0  76.3M      0 --:--:-- --:--:-- --:--:--  214M
root@ip-172-31-86-7:/home/ubuntu# chmod +x /usr/local/bin/docker-compose
root@ip-172-31-86-7:/home/ubuntu# docker-compose --version
Docker Compose version v2.12.2
Wazuh stack deployment using Docker 🔴
  1. Clone the wazuh-docker repository
root@ip-172-31-86-7:/home/ubuntu# git clone https://github.com/wazuh/wazuh-docker.git -b v4.5.3-rc1
Cloning into 'wazuh-docker'...
remote: Enumerating objects: 11238, done.
remote: Counting objects: 100% (1277/1277), done.
remote: Compressing objects: 100% (637/637), done.
remote: Total 11238 (delta 685), reused 1119 (delta 570), pack-reused 9961
Receiving objects: 100% (11238/11238), 313.99 MiB | 39.08 MiB/s, done.
Resolving deltas: 100% (5758/5758), done.
Note: switching to '088b855f738f6321ff6af3a47a63cde09f40b4fe'.

You are in 'detached HEAD' state. You can look around, make experimental
changes and commit them, and you can discard any commits you make in this
state without impacting any branches by switching back to a branch.

If you want to create a new branch to retain commits you create, you may
do so (now or later) by using -c with the switch command. Example:

  git switch -c <new-branch-name>

Or undo this operation with:

  git switch -

Turn off this advice by setting config variable advice.detachedHead to false
  1. Generate certificates
root@ip-172-31-86-7:/home/ubuntu/wazuh-docker/single-node# nano generate-indexer-certs.yml 

# Wazuh App Copyright (C) 2017, Wazuh Inc. (License GPLv2)
version: '3'

services:
  generator:
    image: wazuh/wazuh-certs-generator:0.0.1
    hostname: wazuh-certs-generator
    volumes:
      - ./config/wazuh_indexer_ssl_certs/:/certificates/
      - ./config/certs.yml:/config/certs.yml
    environment:
      - HTTP_PROXY=ec2-100-24-58-22.compute-1.amazonaws.com
root@ip-172-31-86-7:/home/ubuntu/wazuh-docker/single-node# sudo docker-compose -f generate-indexer-certs.yml run --rm generator
[+] Running 1/0
 ⠿ Network single-node_default  Created                                                                                                                                                                       0.1s
[+] Running 5/5
 ⠿ generator Pulled                                                                                                                                                                                           3.3s
   ⠿ edaedc954fb5 Pull complete                                                                                                                                                                               2.0s
   ⠿ 573f4d11a520 Pull complete                                                                                                                                                                               3.0s
   ⠿ 8f200922197d Pull complete                                                                                                                                                                               3.0s
   ⠿ 55a86de68c5c Pull complete                                                                                                                                                                               3.1s
The tool to create the certificates exists in the in Packages bucket
22/09/2023 10:04:41 INFO: Admin certificates created.
22/09/2023 10:04:41 INFO: Wazuh indexer certificates created.
22/09/2023 10:04:41 INFO: Wazuh server certificates created.
22/09/2023 10:04:41 INFO: Wazuh dashboard certificates created.
Moving created certificates to the destination directory
Changing certificate permissions
Setting UID indexer and dashboard
Setting UID for wazuh manager and worker

root@ip-172-31-86-7:/home/ubuntu/wazuh-docker/single-node# ls -la config/wazuh_indexer_ssl_certs
total 56
dr-x------ 2 root            root            4096 Sep 22 10:04 .
drwxr-xr-x 6 root            root            4096 Sep 22 10:04 ..
-r-------- 1 ubuntu          ubuntu          1704 Sep 22 10:04 admin-key.pem
-r-------- 1 ubuntu          ubuntu          1119 Sep 22 10:04 admin.pem
-r-------- 1 systemd-resolve systemd-journal 1704 Sep 22 10:04 root-ca-manager.key
-r-------- 1 systemd-resolve systemd-journal 1204 Sep 22 10:04 root-ca-manager.pem
-r-------- 1 ubuntu          ubuntu          1704 Sep 22 10:04 root-ca.key
-r-------- 1 ubuntu          ubuntu          1204 Sep 22 10:04 root-ca.pem
-r-------- 1 ubuntu          ubuntu          1704 Sep 22 10:04 wazuh.dashboard-key.pem
-r-------- 1 ubuntu          ubuntu          1261 Sep 22 10:04 wazuh.dashboard.pem
-r-------- 1 ubuntu          ubuntu          1704 Sep 22 10:04 wazuh.indexer-key.pem
-r-------- 1 ubuntu          ubuntu          1257 Sep 22 10:04 wazuh.indexer.pem
-r-------- 1 ubuntu          ubuntu          1704 Sep 22 10:04 wazuh.manager-key.pem
-r-------- 1 ubuntu          ubuntu          1257 Sep 22 10:04 wazuh.manager.pem
  1. Generate custom images (because is a development release) and start Wazuh using docker-compose
root@ip-172-31-86-7:/home/ubuntu/wazuh-docker/single-node# cd ../ && sudo build-docker-images/build-images.sh && cd -
[+] Building 189.4s (80/80) FINISHED                                                                                                                                                                               
 => [wazuh/wazuh-indexer:4.5.3 internal] load build definition from Dockerfile                                                                                                                                0.1s
 => => transferring dockerfile: 2.38kB                                                                                                                                                                        0.0s
 => [wazuh/wazuh-indexer:4.5.3 internal] load .dockerignore                                                                                                                                                   0.1s
 => => transferring context: 2B                                                                                                                                                                               0.0s
 => [wazuh/wazuh-manager:4.5.3 internal] load build definition from Dockerfile                  has insecure file permissions                                                                                                              0.1s
 => => transferring dockerfile: 2.10kB                                                                                                                                                                        0.0s
 => [wazuh/wazuh-manager:4.5.3 internal] load .dockerignore                                                                                                                                                   0.1s
 => => transferring context: 2B                                                                                                                                                                               0.0s
 => [wazuh/wazuh-dashboard:4.5.3 internal] load .dockerignore                                                                                                                                                 0.1s
 => => transferring context: 2B                                                                                                                                                                               0.0s
 => [wazuh/wazuh-dashboard:4.5.3 internal] load build definition from Dockerfile                                                                                                                              0.1s
 => => transferring dockerfile: 3.61kB                                                                                                                                                                        0.0s
 => [wazuh/wazuh-manager:4.5.3 internal] load metadata for docker.io/library/ubuntu:focal                                                                                                                     0.4s
 => [wazuh/wazuh-dashboard:4.5.3 builder 1/9] FROM docker.io/library/ubuntu:focal@sha256:33a5cc25d22c45900796a1aca487ad7a7cb09f09ea00b779e3b2026b4fc2faba                                                     0.3s
 => => resolve docker.io/library/ubuntu:focal@sha256:33a5cc25d22c45900796a1aca487ad7a7cb09f09ea00b779e3b2026b4fc2faba                                                                                         0.0s
 => => sha256:33a5cc25d22c45900796a1aca487ad7a7cb09f09ea00b779e3b2026b4fc2faba 1.13kB / 1.13kB                                                                                                                0.0s
 => => sha256:3246518d9735254519e1b2ff35f95686e4a5011c90c85344c1f38df7bae9dd37 424B / 424B                                                                                                                    0.0s
 => => sha256:6df89402372646d400cf092016c28066391a26f5d46c00b1153e75003465484d 2.30kB / 2.30kB                                                                                                                0.0s
 => [wazuh/wazuh-indexer:4.5.3 internal] load build context                                                                                                                                                   0.0s
 => => transferring context: 20.13kB                                                                                                                                                                          0.0s
 => [wazuh/wazuh-manager:4.5.3 internal] load build context                                                                                                                                                   0.2s
 => => transferring context: 25.16kB                                                                                                                                                                          0.0s
 => [wazuh/wazuh-manager:4.5.3] https://raw.githubusercontent.com/wazuh/wazuh/4.5/extensions/elasticsearch/7.x/wazuh-template.json                                                                            0.3s
 => [wazuh/wazuh-dashboard:4.5.3 internal] load build context                                                                                                                                                 0.2s
 => => transferring context: 13.44kB                                                                                                                                                                          0.0s
 => [wazuh/wazuh-indexer:4.5.3 builder 2/9] RUN apt-get update -y && apt-get install curl openssl xz-utils -y                                                                                                29.9s
 => [wazuh/wazuh-dashboard:4.5.3 stage-1  2/13] RUN apt update && apt install -y libnss3-dev fonts-liberation libfontconfig1                                                                                 22.9s
 => [wazuh/wazuh-dashboard:4.5.3 builder  2/17] RUN apt-get update && apt install curl libcap2-bin xz-utils -y                                                                                               29.3s
 => [wazuh/wazuh-indexer:4.5.3 stage-1  2/14] RUN getent group wazuh-indexer || groupadd -r -g 1000 wazuh-indexer                                                                                             0.8s
 => [wazuh/wazuh-manager:4.5.3  2/17] RUN rm /bin/sh && ln -s /bin/bash /bin/sh                                                                                                                               0.8s
 => [wazuh/wazuh-indexer:4.5.3 stage-1  3/14] RUN useradd --system             --uid 1000             --no-create-home             --home-dir /usr/share/wazuh-indexer             --gid wazuh-indexer        1.2s
 => [wazuh/wazuh-manager:4.5.3  3/17] RUN apt-get update && apt install curl apt-transport-https lsb-release gnupg -y                                                                                        49.6s
 => [wazuh/wazuh-indexer:4.5.3 stage-1  4/14] WORKDIR /usr/share/wazuh-indexer                                                                                                                                0.1s
 => [wazuh/wazuh-indexer:4.5.3 stage-1  5/14] COPY config/entrypoint.sh /                                                                                                                                     0.1s
 => [wazuh/wazuh-indexer:4.5.3 stage-1  6/14] COPY config/securityadmin.sh /                                                                                                                                  0.1s
 => [wazuh/wazuh-indexer:4.5.3 stage-1  7/14] RUN chmod 700 /entrypoint.sh && chmod 700 /securityadmin.sh                                                                                                     1.1s
 => [wazuh/wazuh-indexer:4.5.3 stage-1  8/14] RUN chown 1000:1000 /*.sh                                                                                                                                       1.0s
 => [wazuh/wazuh-dashboard:4.5.3 stage-1  3/13] RUN getent group wazuh-dashboard || groupadd -r -g 1000 wazuh-dashboard                                                                                       0.6s
 => [wazuh/wazuh-dashboard:4.5.3 stage-1  4/13] RUN useradd --system             --uid 1000             --no-create-home             --home-dir /usr/share/wazuh-dashboard             --gid wazuh-dashboard  0.7s
 => [wazuh/wazuh-dashboard:4.5.3 stage-1  5/13] COPY config/entrypoint.sh /                                                                                                                                   0.1s
 => [wazuh/wazuh-dashboard:4.5.3 stage-1  6/13] COPY config/wazuh_app_config.sh /                                                                                                                             0.1s
 => [wazuh/wazuh-dashboard:4.5.3 stage-1  7/13] RUN chmod 700 /entrypoint.sh                                                                                                                                  0.5s
 => [wazuh/wazuh-dashboard:4.5.3 stage-1  8/13] RUN chmod 700 /wazuh_app_config.sh                                                                                                                            0.6s
 => [wazuh/wazuh-dashboard:4.5.3 stage-1  9/13] RUN chown 1000:1000 /*.sh                                                                                                                                     0.6s
 => [wazuh/wazuh-dashboard:4.5.3 builder  3/17] RUN mkdir -p /usr/share/wazuh-dashboard                                                                                                                       0.5s
 => [wazuh/wazuh-dashboard:4.5.3 builder  4/17] COPY config/dl_base.sh .                                                                                                                                      0.1s
 => [wazuh/wazuh-indexer:4.5.3 builder 3/9] COPY config/opensearch.yml /                                                                                                                                      0.1s
 => [wazuh/wazuh-dashboard:4.5.3 builder  5/17] RUN bash dl_base.sh                                                                                                                                          29.1s
 => [wazuh/wazuh-indexer:4.5.3 builder 4/9] COPY config/config.sh .                                                                                                                                           0.0s
 => [wazuh/wazuh-indexer:4.5.3 builder 5/9] COPY config/config.yml /                                                                                                                                          0.1s
 => [wazuh/wazuh-indexer:4.5.3 builder 6/9] COPY config/internal_users.yml /                                                                                                                                  0.1s
 => [wazuh/wazuh-indexer:4.5.3 builder 7/9] COPY config/roles_mapping.yml /                                                                                                                                   0.0s
 => [wazuh/wazuh-indexer:4.5.3 builder 8/9] COPY config/roles.yml /                                                                                                                                           0.1s
 => [wazuh/wazuh-indexer:4.5.3 builder 9/9] RUN bash config.sh                                                                                                                                              108.9s
 => [wazuh/wazuh-manager:4.5.3  4/17] COPY config/check_repository.sh /                                                                                                                                       8.5s
 => [wazuh/wazuh-manager:4.5.3  5/17] RUN chmod 775 /check_repository.sh                                                                                                                                      0.6s
 => [wazuh/wazuh-dashboard:4.5.3 builder  6/17] COPY config/config.sh .                                                                                                                                       0.2s
 => [wazuh/wazuh-dashboard:4.5.3 builder  7/17] COPY config/config.yml /                                                                                                                                      0.1s
 => [wazuh/wazuh-dashboard:4.5.3 builder  8/17] RUN bash config.sh                                                                                                                                            2.0s
 => [wazuh/wazuh-manager:4.5.3  6/17] RUN source /check_repository.sh                                                                                                                                         1.8s
 => [wazuh/wazuh-dashboard:4.5.3 builder  9/17] COPY config/install_wazuh_app.sh /                                                                                                                            0.2s
 => [wazuh/wazuh-manager:4.5.3  7/17] RUN apt-get update &&     apt-get install wazuh-manager=4.5.3-1                                                                                                        97.4s
 => [wazuh/wazuh-dashboard:4.5.3 builder 10/17] RUN chmod 775 /install_wazuh_app.sh                                                                                                                           0.6s
 => [wazuh/wazuh-dashboard:4.5.3 builder 11/17] RUN bash /install_wazuh_app.sh                                                                                                                               26.2s
 => [wazuh/wazuh-dashboard:4.5.3 builder 12/17] COPY config/opensearch_dashboards.yml /usr/share/wazuh-dashboard/config/                                                                                      3.2s
 => [wazuh/wazuh-dashboard:4.5.3 builder 13/17] COPY config/wazuh.yml /usr/share/wazuh-dashboard/data/wazuh/config/                                                                                           0.1s
 => [wazuh/wazuh-dashboard:4.5.3 builder 14/17] RUN chown 101:101 /usr/share/wazuh-dashboard/config/opensearch_dashboards.yml && chmod 664 /usr/share/wazuh-dashboard/config/opensearch_dashboards.yml        0.5s
 => [wazuh/wazuh-dashboard:4.5.3 builder 15/17] RUN mkdir -p /usr/share/wazuh-dashboard/data/wazuh && chown -R 101:101 /usr/share/wazuh-dashboard/data/wazuh && chmod -R 775 /usr/share/wazuh-dashboard/data  0.4s
 => [wazuh/wazuh-dashboard:4.5.3 builder 16/17] RUN mkdir -p /usr/share/wazuh-dashboard/data/wazuh/config && chown -R 101:101 /usr/share/wazuh-dashboard/data/wazuh/config && chmod -R 775 /usr/share/wazuh-  0.5s
 => [wazuh/wazuh-dashboard:4.5.3 builder 17/17] RUN mkdir -p /usr/share/wazuh-dashboard/data/wazuh/logs && chown -R 101:101 /usr/share/wazuh-dashboard/data/wazuh/logs && chmod -R 775 /usr/share/wazuh-dash  0.6s
 => [wazuh/wazuh-dashboard:4.5.3 stage-1 10/13] COPY --from=builder --chown=1000:1000 /usr/share/wazuh-dashboard /usr/share/wazuh-dashboard                                                                  21.1s
 => [wazuh/wazuh-dashboard:4.5.3 stage-1 11/13] RUN mkdir -p /usr/share/wazuh-dashboard/plugins/wazuh/public/assets/custom                                                                                    0.5s
 => [wazuh/wazuh-dashboard:4.5.3 stage-1 12/13] RUN chown 1000:1000 /usr/share/wazuh-dashboard/plugins/wazuh/public/assets/custom                                                                             0.5s
 => [wazuh/wazuh-dashboard:4.5.3 stage-1 13/13] WORKDIR /usr/share/wazuh-dashboard                                                                                                                            0.0s
 => [wazuh/wazuh-dashboard:4.5.3] exporting to image                                                                                                                                                         19.6s
 => => exporting layers                                                                                                                                                                                      19.4s
 => => writing image sha256:5245d1bead955aaf84d77b9d686c0260d501a343ceb4a672798517998ab32143                                                                                                                  0.0s
 => => naming to docker.io/wazuh/wazuh-dashboard:4.5.3                                                                                                                                                        0.2s
 => [wazuh/wazuh-indexer:4.5.3 stage-1  9/14] COPY --from=builder --chown=1000:1000 /debian/wazuh-indexer/usr/share/wazuh-indexer /usr/share/wazuh-indexer                                                    8.6s
 => [wazuh/wazuh-indexer:4.5.3 stage-1 10/14] COPY --from=builder --chown=0:0 /debian/wazuh-indexer/usr/lib/systemd /usr/lib/systemd                                                                          0.2s
 => [wazuh/wazuh-manager:4.5.3  8/17] RUN curl -L -O https://artifacts.elastic.co/downloads/beats/filebeat/filebeat-oss-7.10.2-amd64.deb &&    dpkg -i filebeat-oss-7.10.2-amd64.deb && rm -f filebeat-oss-7  3.3s
 => [wazuh/wazuh-indexer:4.5.3 stage-1 11/14] COPY --from=builder --chown=0:0 /debian/wazuh-indexer/usr/lib/sysctl.d /usr/lib/sysctl.d                                                                        0.1s
 => [wazuh/wazuh-indexer:4.5.3 stage-1 12/14] COPY --from=builder --chown=0:0 /debian/wazuh-indexer/usr/lib/tmpfiles.d /usr/lib/tmpfiles.d                                                                    0.1s
 => [wazuh/wazuh-indexer:4.5.3 stage-1 13/14] RUN chown -R 1000:1000 /usr/share/wazuh-indexer                                                                                                                13.3s
 => [wazuh/wazuh-manager:4.5.3  9/17] RUN curl --fail --silent -L https://github.com/just-containers/s6-overlay/releases/download/v2.2.0.3/s6-overlay-amd64.tar.gz     -o /tmp/s6-overlay-amd64.tar.gz &&     3.5s
 => [wazuh/wazuh-manager:4.5.3 10/17] COPY config/etc/ /etc/                                                                                                                                                  0.1s
 => [wazuh/wazuh-manager:4.5.3 11/17] COPY --chown=root:wazuh config/create_user.py /var/ossec/framework/scripts/create_user.py                                                                               0.1s
 => [wazuh/wazuh-manager:4.5.3 12/17] COPY config/filebeat.yml /etc/filebeat/                                                                                                                                 0.1s
 => [wazuh/wazuh-manager:4.5.3 13/17] RUN chmod go-w /etc/filebeat/filebeat.yml                                                                                                                               0.3s
 => [wazuh/wazuh-manager:4.5.3 14/17] ADD https://raw.githubusercontent.com/wazuh/wazuh/4.5/extensions/elasticsearch/7.x/wazuh-template.json /etc/filebeat                                                    0.1s
 => [wazuh/wazuh-manager:4.5.3 15/17] RUN chmod go-w /etc/filebeat/wazuh-template.json                                                                                                                        0.3s
 => [wazuh/wazuh-manager:4.5.3 16/17] COPY config/permanent_data.env config/permanent_data.sh /                                                                                                               0.1s
 => [wazuh/wazuh-manager:4.5.3 17/17] RUN chmod 755 /permanent_data.sh &&     sync && /permanent_data.sh &&     sync && rm /permanent_data.sh                                                                 0.9s
 => [wazuh/wazuh-manager:4.5.3] exporting to image                                                                                                                                                           21.0s
 => => exporting layers                                                                                                                                                                                      21.0s
 => => writing image sha256:321d8f8a1668b0a636d0d5bd76d5a28fe93f33a482e2f9d13aef4648f2f07111                                                                                                                  0.0s
 => => naming to docker.io/wazuh/wazuh-manager:4.5.3                                                                                                                                                          0.0s
 => [wazuh/wazuh-indexer:4.5.3 stage-1 14/14] RUN mkdir -p /var/lib/wazuh-indexer && chown 1000:1000 /var/lib/wazuh-indexer &&     mkdir -p /usr/share/wazuh-indexer/logs && chown 1000:1000 /usr/share/wazu  0.5s
 => [wazuh/wazuh-indexer:4.5.3] exporting to image                                                                                                                                                            9.9s
 => => exporting layers                                                                                                                                                                                       9.8s
 => => writing image sha256:f74da864d0b6e7ab4610300ba02bc0b630cb01cc00ee5361fd80fae02dd6e73d                                                                                                                  0.0s
 => => naming to docker.io/wazuh/wazuh-indexer:4.5.3                                                                                                                                                          0.0s
/home/ubuntu/wazuh-docker/single-node


root@ip-172-31-86-7:/home/ubuntu/wazuh-docker/single-node# sudo docker-compose up -d
[+] Running 17/17
 ⠿ Volume "single-node_wazuh_agentless"          Created                                                                                                                                                      0.0s
 ⠿ Volume "single-node_wazuh-indexer-data"       Created                                                                                                                                                      0.0s
 ⠿ Volume "single-node_wazuh_var_multigroups"    Created                                                                                                                                                      0.0s
 ⠿ Volume "single-node_wazuh_logs"               Created                                                                                                                                                      0.0s
 ⠿ Volume "single-node_wazuh_etc"                Created                                                                                                                                                      0.0s
 ⠿ Volume "single-node_wazuh-dashboard-config"   Created                                                                                                                                                      0.0s
 ⠿ Volume "single-node_wazuh_integrations"       Created                                                                                                                                                      0.0s
 ⠿ Volume "single-node_filebeat_etc"             Created                                                                                                                                                      0.0s
 ⠿ Volume "single-node_wazuh-dashboard-custom"   Created                                                                                                                                                      0.0s
 ⠿ Volume "single-node_filebeat_var"             Created                                                                                                                                                      0.0s
 ⠿ Volume "single-node_wazuh_wodles"             Created                                                                                                                                                      0.0s
 ⠿ Volume "single-node_wazuh_api_configuration"  Created                                                                                                                                                      0.0s
 ⠿ Volume "single-node_wazuh_queue"              Created                                                                                                                                                      0.0s
 ⠿ Volume "single-node_wazuh_active_response"    Created                                                                                                                                                      0.0s
 ⠿ Container single-node-wazuh.indexer-1         Started                                                                                                                                                      0.6s
 ⠿ Container single-node-wazuh.manager-1         Started                                                                                                                                                      0.9s
 ⠿ Container single-node-wazuh.dashboard-1       Started   
 
 
root@ip-172-31-86-7:/home/ubuntu/wazuh-docker/single-node# docker ps --format "table {{.Image}}\t{{.Status}}"
IMAGE                         STATUS
wazuh/wazuh-dashboard:4.5.3   Up 24 seconds
wazuh/wazuh-manager:4.5.3     Up 25 seconds
wazuh/wazuh-indexer:4.5.3     Up 25 seconds
  1. Check for errors/warnings in Wazuh Dashboard
root@ip-172-31-86-7:/home/ubuntu/wazuh-docker/single-node# sudo docker exec -it single-node-wazuh.dashboard-1 cat /usr/share/wazuh-dashboard/data/wazuh/logs/wazuhapp.log | grep -i -E "error|warn"
  1. Check for errors/warnings in Wazuh Indexer

New issues are opened for further research:

sudo docker exec -it single-node-wazuh.indexer-1 cat /var/log/wazuh-indexer/opensearch.log | grep -i -E "error|warn"
[2023-09-22T10:10:20,136][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/ldaptive-1.2.3.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,137][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/commons-cli-1.3.1.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,137][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/opensaml-saml-api-3.4.5.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,137][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/jjwt-api-0.10.8.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,137][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/httpclient-4.5.13.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,138][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/bcprov-jdk15on-1.67.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,138][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/netty-transport-native-unix-common-4.1.87.Final.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,138][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/rank-eval-client-2.6.0.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,139][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/jakarta.annotation-api-1.3.5.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,139][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/httpasyncclient-4.1.5.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,139][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/opensearch-security-2.6.0.0.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,140][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/java-saml-core-2.5.0.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,140][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/jakarta.activation-1.2.2.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,140][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/commons-lang3-3.4.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,141][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/cxf-rt-rs-security-jose-3.5.5.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,141][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/compiler-0.9.10.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,141][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/xmlschema-core-2.2.5.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,142][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/slf4j-api-1.7.30.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,149][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/json-path-2.4.0.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,150][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/opensaml-soap-impl-3.4.5.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,150][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/error_prone_annotations-2.3.4.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,151][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] Directory /usr/share/wazuh-indexer/lib has insecure file permissions (should be 0700)
[2023-09-22T10:10:20,151][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/lib/lucene-queryparser-9.5.0.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,151][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/lib/log4j-api-2.17.1.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,152][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/lib/opensearch-x-content-2.6.0.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,152][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/lib/lucene-join-9.5.0.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,152][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/lib/hppc-0.8.1.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,154][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/lib/java-version-checker-2.6.0.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,155][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/lib/jna-5.5.0.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,155][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/lib/opensearch-2.6.0.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,155][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/lib/lucene-queries-9.5.0.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,156][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/lib/snakeyaml-1.33.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,156][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/lib/t-digest-3.2.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,156][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] Directory /usr/share/wazuh-indexer/lib/tools has insecure file permissions (should be 0700)
[2023-09-22T10:10:20,157][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] Directory /usr/share/wazuh-indexer/lib/tools/keystore-cli has insecure file permissions (should be 0700)
[2023-09-22T10:10:20,157][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/lib/tools/keystore-cli/keystore-cli-2.6.0.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,157][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] Directory /usr/share/wazuh-indexer/lib/tools/plugin-cli has insecure file permissions (should be 0700)
[2023-09-22T10:10:20,158][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/lib/tools/plugin-cli/bc-fips-1.0.2.3.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,158][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/lib/tools/plugin-cli/bcpg-fips-1.0.7.1.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,159][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/lib/tools/plugin-cli/opensearch-plugin-cli-2.6.0.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,159][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] Directory /usr/share/wazuh-indexer/lib/tools/upgrade-cli has insecure file permissions (should be 0700)
[2023-09-22T10:10:20,160][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/lib/tools/upgrade-cli/jackson-databind-2.14.2.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,160][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/lib/tools/upgrade-cli/opensearch-upgrade-cli-2.6.0.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,160][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/lib/tools/upgrade-cli/jackson-annotations-2.14.2.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,161][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/lib/tools/upgrade-cli/jackson-core-2.14.2.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,161][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/lib/opensearch-core-2.6.0.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,161][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/lib/lucene-memory-9.5.0.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,169][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/lib/lucene-misc-9.5.0.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,170][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/lib/joda-time-2.12.2.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,170][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/lib/jackson-dataformat-smile-2.14.2.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,170][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/lib/jts-core-1.15.0.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,171][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/lib/jackson-dataformat-yaml-2.14.2.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,171][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/lib/HdrHistogram-2.1.12.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,171][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/lib/lucene-highlighter-9.5.0.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,172][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/lib/opensearch-secure-sm-2.6.0.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,172][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/lib/log4j-core-2.17.1.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,172][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/lib/lucene-suggest-9.5.0.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,173][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/lib/opensearch-common-2.6.0.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,173][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/lib/opensearch-launchers-2.6.0.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,173][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/lib/lucene-analysis-common-9.5.0.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,174][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/lib/lucene-spatial-extras-9.5.0.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,174][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/lib/lucene-backward-codecs-9.5.0.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,174][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/lib/opensearch-plugin-classloader-2.6.0.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,175][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/lib/jopt-simple-5.0.4.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,175][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/lib/lucene-core-9.5.0.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,176][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/lib/log4j-jul-2.17.1.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,176][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/lib/lucene-sandbox-9.5.0.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,176][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/lib/lucene-spatial3d-9.5.0.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,177][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/lib/jackson-core-2.14.2.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,177][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/lib/lucene-grouping-9.5.0.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,177][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/lib/jackson-dataformat-cbor-2.14.2.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,178][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/lib/opensearch-geo-2.6.0.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,178][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/lib/spatial4j-0.7.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,178][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/lib/opensearch-cli-2.6.0.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,179][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] Directory /usr/share/wazuh-indexer/jdk has insecure file permissions (should be 0700)
[2023-09-22T10:10:20,179][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/NOTICE has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,179][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/legal/jdk.dynalink/dynalink.md has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,180][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/legal/java.base/ADDITIONAL_LICENSE_INFO has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,180][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/legal/java.base/aes.md has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,181][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/legal/java.base/unicode.md has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,190][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/legal/java.base/asm.md has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,190][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/legal/java.base/ASSEMBLY_EXCEPTION has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,191][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/legal/java.base/public_suffix.md has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,191][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/legal/java.base/icu.md has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,192][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/legal/java.base/cldr.md has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,193][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/legal/java.base/LICENSE has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,193][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/legal/java.base/c-libutl.md has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,194][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/legal/jdk.internal.opt/jopt-simple.md has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,195][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/legal/jdk.javadoc/jqueryUI.md has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,195][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/legal/jdk.javadoc/jquery.md has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,195][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/legal/jdk.crypto.cryptoki/pkcs11cryptotoken.md has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,196][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/legal/jdk.crypto.cryptoki/pkcs11wrapper.md has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,196][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/legal/jdk.internal.le/jline.md has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,196][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/legal/java.xml/dom.md has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,197][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/legal/java.xml/xerces.md has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,197][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/legal/java.xml/xalan.md has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,198][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/legal/java.xml/bcel.md has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,198][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/legal/java.xml/jcup.md has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,198][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/legal/java.xml.crypto/santuario.md has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,199][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/legal/java.desktop/colorimaging.md has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,200][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/legal/java.desktop/xwd.md has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,201][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/legal/java.desktop/giflib.md has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,201][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/legal/java.desktop/mesa3d.md has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,201][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/legal/java.desktop/harfbuzz.md has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,202][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/legal/java.desktop/libpng.md has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,202][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/legal/java.desktop/jpeg.md has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,202][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/legal/java.desktop/lcms.md has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,204][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/legal/jdk.localedata/thaidict.md has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,204][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/legal/java.smartcardio/pcsclite.md has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,204][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/include/classfile_constants.h has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,213][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/include/jawt.h has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,214][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/include/linux/jawt_md.h has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,214][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/include/linux/jni_md.h has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,215][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/include/jvmti.h has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,215][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/include/jdwpTransport.h has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,215][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/include/jvmticmlr.h has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,216][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/include/jni.h has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,216][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/libawt_headless.so has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,216][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/libj2gss.so has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,217][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/libjawt.so has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,219][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/librmi.so has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,220][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/server/libjvm.so has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,221][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/server/libjsig.so has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,221][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/server/classes_nocoops.jsa has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,225][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/server/classes.jsa has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,228][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/ct.sym has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,229][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/jexec has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,229][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/libawt_xawt.so has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,230][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/libattach.so has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,230][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/classlist has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,231][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/libinstrument.so has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,232][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/libnet.so has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,232][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/libjsvml.so has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,232][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/jspawnhelper has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,233][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/jvm.cfg has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,233][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/libmlib_image.so has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,233][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/libjsig.so has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,234][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/libsyslookup.so has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,234][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/libj2pcsc.so has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,241][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/libfontmanager.so has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,242][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/libjdwp.so has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,242][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/libprefs.so has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,243][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/jfr/default.jfc has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,243][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/jfr/profile.jfc has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,243][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/libjli.so has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,244][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/modules has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,244][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/libmanagement_ext.so has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,245][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/libjavajpeg.so has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,245][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/libdt_socket.so has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,245][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/libjimage.so has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,246][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/libzip.so has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,246][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/security/cacerts has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,246][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/security/public_suffix_list.dat has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,247][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/security/blocked.certs has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,247][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/security/default.policy has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,248][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/libjsound.so has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,248][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/psfont.properties.ja has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,248][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/psfontj2d.properties has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,249][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/libmanagement.so has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,249][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/libverify.so has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,249][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/liblcms.so has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,250][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/libawt.so has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,250][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/libnio.so has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,252][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/libsaproc.so has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,254][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/libsctp.so has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,254][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/libextnet.so has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,254][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/libj2pkcs11.so has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,259][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/libjava.so has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,265][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/libjaas.so has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,266][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/libmanagement_agent.so has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,266][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/tzdb.dat has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,266][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/libsplashscreen.so has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,266][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/jrt-fs.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,266][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/man/man1/jmap.1 has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,267][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/man/man1/jstatd.1 has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,267][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/man/man1/javadoc.1 has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,267][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/man/man1/jconsole.1 has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,267][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/man/man1/keytool.1 has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,267][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/man/man1/jcmd.1 has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,268][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/man/man1/javac.1 has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,268][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/man/man1/jps.1 has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,268][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/man/man1/java.1 has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,268][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/man/man1/jarsigner.1 has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,268][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/man/man1/jmod.1 has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,269][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/man/man1/jstat.1 has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,277][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/man/man1/jar.1 has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,278][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/man/man1/javap.1 has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,278][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/man/man1/serialver.1 has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,278][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/man/man1/jpackage.1 has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,278][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/man/man1/rmiregistry.1 has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,278][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/man/man1/jlink.1 has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,279][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/man/man1/jshell.1 has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,279][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/man/man1/jhsdb.1 has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,279][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/man/man1/jrunscript.1 has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,279][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/man/man1/jdb.1 has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,279][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/man/man1/jdeps.1 has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,280][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/man/man1/jinfo.1 has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,280][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/man/man1/jfr.1 has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,280][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/man/man1/jdeprscan.1 has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,280][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/man/man1/jstack.1 has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,280][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/java.rmi.jmod has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,281][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/java.datatransfer.jmod has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,281][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/java.security.sasl.jmod has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,293][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/jdk.jdwp.agent.jmod has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,294][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/java.instrument.jmod has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,294][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/jdk.jsobject.jmod has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,294][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/java.sql.jmod has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,294][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/jdk.incubator.foreign.jmod has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,295][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/jdk.nio.mapmode.jmod has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,295][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/jdk.javadoc.jmod has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,295][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/java.compiler.jmod has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,295][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/jdk.internal.vm.ci.jmod has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,295][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/java.sql.rowset.jmod has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,295][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/jdk.crypto.ec.jmod has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,296][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/jdk.internal.le.jmod has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,296][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/jdk.management.jmod has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,296][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/jdk.charsets.jmod has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,296][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/jdk.security.auth.jmod has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,296][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/java.base.jmod has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,297][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/jdk.hotspot.agent.jmod has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,297][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/jdk.internal.opt.jmod has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,304][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/java.xml.crypto.jmod has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,305][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/jdk.management.jfr.jmod has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,305][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/java.desktop.jmod has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,305][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/jdk.accessibility.jmod has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,306][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/jdk.zipfs.jmod has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,306][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/jdk.httpserver.jmod has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,306][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/jdk.xml.dom.jmod has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,307][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/jdk.random.jmod has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,307][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/jdk.attach.jmod has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,308][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/java.security.jgss.jmod has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,308][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/jdk.jdeps.jmod has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,308][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/jdk.jpackage.jmod has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,309][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/jdk.internal.jvmstat.jmod has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,309][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/java.smartcardio.jmod has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,309][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/jdk.jconsole.jmod has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,310][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/jdk.jshell.jmod has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,310][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/java.management.rmi.jmod has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,310][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/java.management.jmod has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,311][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/jdk.jlink.jmod has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,311][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/jdk.localedata.jmod has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,311][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/jdk.net.jmod has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,312][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/jdk.internal.vm.compiler.jmod has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,312][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/java.transaction.xa.jmod has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,313][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/jdk.compiler.jmod has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,313][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/jdk.security.jgss.jmod has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,313][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/java.net.http.jmod has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,314][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/jdk.jcmd.jmod has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,314][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/java.xml.jmod has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,321][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/jdk.internal.ed.jmod has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,322][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/jdk.naming.dns.jmod has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,322][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/java.prefs.jmod has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,323][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/jdk.jfr.jmod has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,323][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/jdk.sctp.jmod has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,323][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/jdk.jdi.jmod has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,324][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/java.scripting.jmod has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,324][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/jdk.management.agent.jmod has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,324][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/jdk.unsupported.jmod has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,325][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/java.se.jmod has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,325][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/jdk.internal.vm.compiler.management.jmod has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,326][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/jdk.incubator.vector.jmod has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,326][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/jdk.crypto.cryptoki.jmod has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,326][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/jdk.naming.rmi.jmod has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,327][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/jdk.jartool.jmod has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,327][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/jdk.unsupported.desktop.jmod has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,327][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/jdk.dynalink.jmod has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,328][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/java.naming.jmod has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,328][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/jdk.jstatd.jmod has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,329][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/jdk.editpad.jmod has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,329][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/java.logging.jmod has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,329][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/conf/sdp/sdp.conf.template has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,330][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/conf/net.properties has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,330][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/conf/security/java.security has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,330][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/conf/security/java.policy has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,331][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/conf/security/policy/unlimited/default_US_export.policy has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,331][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/conf/security/policy/unlimited/default_local.policy has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,341][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/conf/security/policy/limited/default_US_export.policy has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,342][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/conf/security/policy/limited/default_local.policy has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,342][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/conf/security/policy/limited/exempt_local.policy has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,343][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/conf/security/policy/README.txt has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,343][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/conf/logging.properties has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,343][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/conf/sound.properties has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,344][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/conf/management/jmxremote.access has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,344][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/conf/management/jmxremote.password.template has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,345][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/conf/management/management.properties has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,345][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/bin/jdeps has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,345][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/bin/jps has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,346][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/bin/serialver has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,346][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/bin/jarsigner has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,346][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/bin/jimage has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,347][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/bin/javap has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,348][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/bin/jmap has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,348][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/bin/java has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,349][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/bin/keytool has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,349][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/bin/jdb has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,349][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/bin/javadoc has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,350][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/bin/jpackage has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,350][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/bin/jinfo has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,350][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/bin/jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,351][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/bin/jfr has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,351][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/bin/jstack has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,352][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/bin/jstat has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,352][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/bin/jlink has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,352][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/bin/javac has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,353][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/bin/rmiregistry has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,353][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/bin/jrunscript has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,353][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/bin/jmod has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,354][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/bin/jcmd has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,354][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/bin/jshell has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,355][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/bin/jconsole has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,355][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/bin/jhsdb has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,355][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/bin/jdeprscan has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,356][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/bin/jstatd has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,358][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/release has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,358][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] Directory /usr/share/wazuh-indexer/modules has insecure file permissions (should be 0700)
[2023-09-22T10:10:20,359][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] Directory /usr/share/wazuh-indexer/modules/parent-join has insecure file permissions (should be 0700)
[2023-09-22T10:10:20,359][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/parent-join/plugin-descriptor.properties has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,359][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/parent-join/parent-join-client-2.6.0.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,360][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] Directory /usr/share/wazuh-indexer/modules/systemd has insecure file permissions (should be 0700)
[2023-09-22T10:10:20,360][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/systemd/plugin-descriptor.properties has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,369][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/systemd/plugin-security.policy has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,370][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/systemd/systemd-2.6.0.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,370][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] Directory /usr/share/wazuh-indexer/modules/geo has insecure file permissions (should be 0700)
[2023-09-22T10:10:20,371][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/geo/plugin-descriptor.properties has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,372][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/geo/geo-2.6.0.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,373][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] Directory /usr/share/wazuh-indexer/modules/percolator has insecure file permissions (should be 0700)
[2023-09-22T10:10:20,373][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/percolator/plugin-descriptor.properties has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,373][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/percolator/percolator-client-2.6.0.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,374][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] Directory /usr/share/wazuh-indexer/modules/opensearch-dashboards has insecure file permissions (should be 0700)
[2023-09-22T10:10:20,374][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/opensearch-dashboards/httpcore-nio-4.4.15.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,374][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/opensearch-dashboards/commons-codec-1.15.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,375][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/opensearch-dashboards/plugin-descriptor.properties has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,375][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/opensearch-dashboards/commons-logging-1.2.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,375][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/opensearch-dashboards/opensearch-rest-client-2.6.0.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,376][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/opensearch-dashboards/reindex-client-2.6.0.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,376][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/opensearch-dashboards/httpcore-4.4.15.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,376][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/opensearch-dashboards/httpclient-4.5.13.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,377][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/opensearch-dashboards/httpasyncclient-4.1.5.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,377][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/opensearch-dashboards/opensearch-dashboards-2.6.0.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,377][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/opensearch-dashboards/opensearch-ssl-config-2.6.0.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,378][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] Directory /usr/share/wazuh-indexer/modules/transport-netty4 has insecure file permissions (should be 0700)
[2023-09-22T10:10:20,378][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/transport-netty4/netty-transport-4.1.87.Final.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,378][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/transport-netty4/plugin-descriptor.properties has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,379][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/transport-netty4/netty-resolver-4.1.87.Final.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,379][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/transport-netty4/netty-codec-4.1.87.Final.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,379][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/transport-netty4/netty-common-4.1.87.Final.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,380][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/transport-netty4/netty-handler-4.1.87.Final.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,380][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/transport-netty4/netty-buffer-4.1.87.Final.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,380][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/transport-netty4/netty-codec-http-4.1.87.Final.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,381][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/transport-netty4/plugin-security.policy has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,381][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/transport-netty4/transport-netty4-client-2.6.0.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,381][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/transport-netty4/netty-transport-native-unix-common-4.1.87.Final.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,382][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] Directory /usr/share/wazuh-indexer/modules/repository-url has insecure file permissions (should be 0700)
[2023-09-22T10:10:20,382][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/repository-url/plugin-descriptor.properties has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,382][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/repository-url/repository-url-2.6.0.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,383][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/repository-url/plugin-security.policy has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,393][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] Directory /usr/share/wazuh-indexer/modules/rank-eval has insecure file permissions (should be 0700)
[2023-09-22T10:10:20,394][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/rank-eval/plugin-descriptor.properties has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,394][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/rank-eval/rank-eval-client-2.6.0.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,394][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] Directory /usr/share/wazuh-indexer/modules/aggs-matrix-stats has insecure file permissions (should be 0700)
[2023-09-22T10:10:20,395][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/aggs-matrix-stats/plugin-descriptor.properties has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,395][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/aggs-matrix-stats/aggs-matrix-stats-client-2.6.0.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,395][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] Directory /usr/share/wazuh-indexer/modules/lang-expression has insecure file permissions (should be 0700)
[2023-09-22T10:10:20,396][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/lang-expression/plugin-descriptor.properties has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,396][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/lang-expression/asm-9.4.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,396][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/lang-expression/asm-tree-9.4.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,397][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/lang-expression/asm-commons-9.4.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,397][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/lang-expression/lucene-expressions-9.5.0.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,397][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/lang-expression/lang-expression-2.6.0.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,398][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/lang-expression/plugin-security.policy has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,399][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/lang-expression/antlr4-runtime-4.11.1.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,399][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] Directory /usr/share/wazuh-indexer/modules/lang-painless has insecure file permissions (should be 0700)
[2023-09-22T10:10:20,399][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/lang-painless/asm-analysis-9.4.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,400][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/lang-painless/asm-util-9.4.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,400][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/lang-painless/plugin-descriptor.properties has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,400][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/lang-painless/asm-9.4.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,401][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/lang-painless/asm-tree-9.4.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,401][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/lang-painless/opensearch-scripting-painless-spi-2.6.0.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,401][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/lang-painless/asm-commons-9.4.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,402][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/lang-painless/lang-painless-2.6.0.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,402][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/lang-painless/plugin-security.policy has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,402][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/lang-painless/antlr4-runtime-4.11.1.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,402][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] Directory /usr/share/wazuh-indexer/modules/lang-mustache has insecure file permissions (should be 0700)
[2023-09-22T10:10:20,403][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/lang-mustache/lang-mustache-client-2.6.0.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,403][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/lang-mustache/plugin-descriptor.properties has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,403][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/lang-mustache/plugin-security.policy has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,404][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/lang-mustache/compiler-0.9.10.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,404][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] Directory /usr/share/wazuh-indexer/modules/mapper-extras has insecure file permissions (should be 0700)
[2023-09-22T10:10:20,404][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/mapper-extras/plugin-descriptor.properties has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,405][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/mapper-extras/mapper-extras-client-2.6.0.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,405][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] Directory /usr/share/wazuh-indexer/modules/ingest-common has insecure file permissions (should be 0700)
[2023-09-22T10:10:20,405][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/ingest-common/plugin-descriptor.properties has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,406][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/ingest-common/joni-2.1.44.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,406][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/ingest-common/jcodings-1.0.58.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,407][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/ingest-common/opensearch-grok-2.6.0.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,407][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/ingest-common/ingest-common-2.6.0.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,408][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/ingest-common/opensearch-dissect-2.6.0.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,408][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] Directory /usr/share/wazuh-indexer/modules/analysis-common has insecure file permissions (should be 0700)
[2023-09-22T10:10:20,408][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/analysis-common/plugin-descriptor.properties has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,409][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/analysis-common/analysis-common-2.6.0.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,417][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] Directory /usr/share/wazuh-indexer/modules/reindex has insecure file permissions (should be 0700)
[2023-09-22T10:10:20,418][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] Directory /usr/share/wazuh-indexer/modules/reindex/parent-join has insecure file permissions (should be 0700)
[2023-09-22T10:10:20,418][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/reindex/parent-join/plugin-descriptor.properties has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,419][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/reindex/httpcore-nio-4.4.15.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,419][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/reindex/commons-codec-1.15.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,419][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/reindex/plugin-descriptor.properties has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,420][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/reindex/commons-logging-1.2.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,420][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] Directory /usr/share/wazuh-indexer/modules/reindex/transport-netty4 has insecure file permissions (should be 0700)
[2023-09-22T10:10:20,420][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/reindex/transport-netty4/plugin-descriptor.properties has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,421][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/reindex/transport-netty4/plugin-security.policy has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,421][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/reindex/opensearch-rest-client-2.6.0.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,421][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/reindex/reindex-client-2.6.0.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,422][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/reindex/httpcore-4.4.15.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,422][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/reindex/plugin-security.policy has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,422][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/reindex/httpclient-4.5.13.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,423][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/reindex/httpasyncclient-4.1.5.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,423][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/reindex/opensearch-ssl-config-2.6.0.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,423][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] Directory /usr/share/wazuh-indexer/modules/ingest-geoip has insecure file permissions (should be 0700)
[2023-09-22T10:10:20,424][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/ingest-geoip/maxmind-db-2.1.0.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,424][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/ingest-geoip/jackson-databind-2.14.2.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,424][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/ingest-geoip/plugin-descriptor.properties has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,425][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/ingest-geoip/geoip2-3.0.2.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,425][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/ingest-geoip/GeoLite2-Country.mmdb has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,425][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/ingest-geoip/GeoLite2-City.mmdb has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,426][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/ingest-geoip/ingest-geoip-2.6.0.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,426][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/ingest-geoip/jackson-annotations-2.14.2.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,426][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/ingest-geoip/plugin-security.policy has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,427][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/ingest-geoip/GeoLite2-ASN.mmdb has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,427][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] Directory /usr/share/wazuh-indexer/modules/ingest-user-agent has insecure file permissions (should be 0700)
[2023-09-22T10:10:20,429][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/ingest-user-agent/plugin-descriptor.properties has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,429][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/ingest-user-agent/ingest-user-agent-2.6.0.jar has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,430][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/LICENSE.txt has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,430][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/NOTICE.txt has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,430][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] Directory /usr/share/wazuh-indexer/bin has insecure file permissions (should be 0700)
[2023-09-22T10:10:20,431][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/bin/opensearch-keystore has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,431][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/bin/opensearch-cli has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,431][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/bin/opensearch-env has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,441][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/bin/opensearch-env-from-file has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,442][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/bin/opensearch-plugin has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,442][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] Directory /usr/share/wazuh-indexer/bin/opensearch-performance-analyzer has insecure file permissions (should be 0700)
[2023-09-22T10:10:20,443][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/bin/opensearch-performance-analyzer/performance-analyzer-agent-cli has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,443][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/bin/opensearch-performance-analyzer/performance-analyzer-agent has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,443][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/bin/opensearch-shard has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,444][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/bin/systemd-entrypoint has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,444][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/bin/opensearch has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,444][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/bin/opensearch-node has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,444][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/bin/opensearch-upgrade has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,445][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/opensearch-security/roles.yml has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,445][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/opensearch-security/internal_users.yml has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,445][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/opensearch-security/roles_mapping.yml has insecure file permissions (should be 0600)
[2023-09-22T10:10:20,446][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/VERSION has insecure file permissions (should be 0600)
[2023-09-22T10:10:43,864][WARN ][o.o.s.c.Salt             ] [wazuh.indexer] If you plan to use field masking pls configure compliance salt e1ukloTsQlOgPquJ to be a random string of 16 chars length identical on all nodes
[2023-09-22T10:10:43,966][ERROR][o.o.s.a.s.SinkProvider   ] [wazuh.indexer] Default endpoint could not be created, auditlog will not work properly.
[2023-09-22T10:10:43,970][WARN ][o.o.s.a.r.AuditMessageRouter] [wazuh.indexer] No default storage available, audit log may not work properly. Please check configuration.
[2023-09-22T10:10:48,773][WARN ][o.o.g.DanglingIndicesState] [wazuh.indexer] gateway.auto_import_dangling_indices is disabled, dangling indices will not be automatically detected or imported and must be managed manually
[2023-09-22T10:10:50,572][WARN ][o.o.p.c.s.h.ConfigOverridesClusterSettingHandler] [wazuh.indexer] Config override setting update called with empty string. Ignoring.
[2023-09-22T10:10:52,202][ERROR][o.o.s.a.BackendRegistry  ] [wazuh.indexer] Not yet initialized (you may need to run securityadmin)
[2023-09-22T10:10:52,516][ERROR][o.o.s.a.BackendRegistry  ] [wazuh.indexer] Not yet initialized (you may need to run securityadmin)
[2023-09-22T10:10:52,579][ERROR][o.o.s.a.BackendRegistry  ] [wazuh.indexer] Not yet initialized (you may need to run securityadmin)
[2023-09-22T10:10:52,608][ERROR][o.o.s.a.BackendRegistry  ] [wazuh.indexer] Not yet initialized (you may need to run securityadmin)
[2023-09-22T10:10:52,613][ERROR][o.o.s.a.BackendRegistry  ] [wazuh.indexer] Not yet initialized (you may need to run securityadmin)
  1. Check for errors/warnings in Wazuh Manager
root@ip-172-31-86-7:/home/ubuntu/wazuh-docker/single-node# # sudo docker exec -it single-node-wazuh.manager-1 cat /var/ossec/logs/ossec.log | grep -i -E "error|warn"
Wazuh Agent deployment through WUI 🟢

  1. Choose "deploy a new agent" in the UI

  2. Select the options that fit with my agent machine

1 aarch
2 config

  1. Copy/paste the command to deploy the agent (changing the package URL to the development package)
[root@ip-172-31-20-10 ec2-user]# sudo WAZUH_MANAGER='100.24.58.22' WAZUH_AGENT_GROUP='default' WAZUH_AGENT_NAME='amazonlinux-aarch64' yum install -y https://packages-dev.wazuh.com/pre-release/yum/wazuh-agent-4.5.3-1.aarch64.rpm
Loaded plugins: extras_suggestions, langpacks, priorities, update-motd
wazuh-agent-4.5.3-1.aarch64.rpm                                                                                                                                                             | 8.6 MB  00:00:00     
Examining /var/tmp/yum-root-rjSNW2/wazuh-agent-4.5.3-1.aarch64.rpm: wazuh-agent-4.5.3-1.aarch64
Marking /var/tmp/yum-root-rjSNW2/wazuh-agent-4.5.3-1.aarch64.rpm to be installed
Resolving Dependencies
--> Running transaction check
---> Package wazuh-agent.aarch64 0:4.5.3-1 will be installed
--> Finished Dependency Resolution

Dependencies Resolved

===================================================================================================================================================================================================================
 Package                                         Arch                                        Version                                        Repository                                                        Size
===================================================================================================================================================================================================================
Installing:
 wazuh-agent                                     aarch64                                     4.5.3-1                                        /wazuh-agent-4.5.3-1.aarch64                                      26 M

Transaction Summary
===================================================================================================================================================================================================================
Install  1 Package

Total size: 26 M
Installed size: 26 M
Downloading packages:
Running transaction check
Running transaction test
Transaction test succeeded
Running transaction
  Installing : wazuh-agent-4.5.3-1.aarch64                                                                                                                                                                     1/1 
  Verifying  : wazuh-agent-4.5.3-1.aarch64                                                                                                                                                                     1/1 

Installed:
  wazuh-agent.aarch64 0:4.5.3-1                                                                                                                                                                                    

Complete!
  1. Start the agent by copying/pasting the suggested command
[root@ip-172-31-20-10 ec2-user]# sudo systemctl daemon-reload
[root@ip-172-31-20-10 ec2-user]# sudo systemctl enable wazuh-agent
Created symlink from /etc/systemd/system/multi-user.target.wants/wazuh-agent.service to /usr/lib/systemd/system/wazuh-agent.service.
[root@ip-172-31-20-10 ec2-user]# sudo systemctl start wazuh-agent
  1. Check the status of the agent
[root@ip-172-31-20-10 ec2-user]# sudo systemctl status wazuh-agent
● wazuh-agent.service - Wazuh agent
   Loaded: loaded (/usr/lib/systemd/system/wazuh-agent.service; enabled; vendor preset: disabled)
   Active: active (running) since vie 2023-09-22 11:41:28 UTC; 1min 14s ago
  Process: 2211 ExecStart=/usr/bin/env /var/ossec/bin/wazuh-control start (code=exited, status=0/SUCCESS)
   CGroup: /system.slice/wazuh-agent.service
           ├─2845 /var/ossec/bin/wazuh-execd
           ├─2857 /var/ossec/bin/wazuh-agentd
           ├─2872 /var/ossec/bin/wazuh-syscheckd
           ├─2887 /var/ossec/bin/wazuh-logcollector
           └─2903 /var/ossec/bin/wazuh-modulesd

sep 22 11:41:21 ip-172-31-20-10.ec2.internal systemd[1]: Starting Wazuh agent...
sep 22 11:41:21 ip-172-31-20-10.ec2.internal env[2211]: Starting Wazuh v4.5.3...
sep 22 11:41:22 ip-172-31-20-10.ec2.internal env[2211]: Started wazuh-execd...
sep 22 11:41:23 ip-172-31-20-10.ec2.internal env[2211]: Started wazuh-agentd...
sep 22 11:41:24 ip-172-31-20-10.ec2.internal env[2211]: Started wazuh-syscheckd...
sep 22 11:41:25 ip-172-31-20-10.ec2.internal env[2211]: Started wazuh-logcollector...
sep 22 11:41:26 ip-172-31-20-10.ec2.internal env[2211]: Started wazuh-modulesd...
sep 22 11:41:28 ip-172-31-20-10.ec2.internal env[2211]: Completed.
sep 22 11:41:28 ip-172-31-20-10.ec2.internal systemd[1]: Started Wazuh agent.
  1. Check the connection with the Wazuh manager

3-agente

From an event in Wazuh Agent to an alert in Wazuh Dashboard 🟢
  1. Make a failed SSH login attempt on the VM running the Wazuh agent
akim@akim-PC:~/Desktop/personal$ for i in {1..8}; do ssh attacker-akim@ec2-54-90-95-59.compute-1.amazonaws.com; done
attacker-akim@ec2-54-90-95-59.compute-1.amazonaws.com: Permission denied (publickey,gssapi-keyex,gssapi-with-mic).
attacker-akim@ec2-54-90-95-59.compute-1.amazonaws.com: Permission denied (publickey,gssapi-keyex,gssapi-with-mic).
attacker-akim@ec2-54-90-95-59.compute-1.amazonaws.com: Permission denied (publickey,gssapi-keyex,gssapi-with-mic).
attacker-akim@ec2-54-90-95-59.compute-1.amazonaws.com: Permission denied (publickey,gssapi-keyex,gssapi-with-mic).
attacker-akim@ec2-54-90-95-59.compute-1.amazonaws.com: Permission denied (publickey,gssapi-keyex,gssapi-with-mic).
attacker-akim@ec2-54-90-95-59.compute-1.amazonaws.com: Permission denied (publickey,gssapi-keyex,gssapi-with-mic).
attacker-akim@ec2-54-90-95-59.compute-1.amazonaws.com: Permission denied (publickey,gssapi-keyex,gssapi-with-mic).
attacker-akim@ec2-54-90-95-59.compute-1.amazonaws.com: Permission denied (publickey,gssapi-keyex,gssapi-with-mic).
  1. Check the alert in Wazuh Dashboard

Checked (in single-node in a EC2 with better performance) :green_cicle:

image

Change passwords 🔴
Change Wazuh Indexer password 🔴

A new issue opened:

  1. Stop the services
  root@ip-172-31-86-7:/home/ubuntu/wazuh-docker/single-node# sudo docker-compose down
  [+] Running 4/4
  ⠿ Container single-node-wazuh.dashboard-1  Removed                                                                                                                                                          10.4s
  ⠿ Container single-node-wazuh.manager-1    Removed                                                                                                                                                           4.0s
  ⠿ Container single-node-wazuh.indexer-1    Removed                                                                                                                                                           0.6s
  ⠿ Network single-node_default              Removed
  1. Generate a hash of a new password
root@ip-172-31-71-197:/home/ubuntu/wazuh-docker/single-node# docker run --rm -ti wazuh/wazuh-indexer:4.5.3 bash /usr/share/wazuh-indexer/plugins/opensearch-security/tools/hash.sh
**************************************************************************
** This tool will be deprecated in the next major release of OpenSearch **
** https://github.com/opensearch-project/security/issues/1755           **
**************************************************************************
[Password:]
$2y$12$1.ZV4D5PLpnd4suwgTVPMuPjLMurh2Txy1dzBnsxockVqaprEmyi.
  1. Replace the new hash in the config/wazuh_indexer/internal_users.yml file
  admin:
    hash: "$2y$12$1.ZV4D5PLpnd4suwgTVPMuPjLMurh2Txy1dzBnsxockVqaprEmyi."
    reserved: true
    backend_roles:
    - "admin"
    description: "Demo admin user"

  kibanaserver:
    hash: "$2y$12$1.ZV4D5PLpnd4suwgTVPMuPjLMurh2Txy1dzBnsxockVqaprEmyi."
    reserved: true
    description: "Demo kibanaserver user"
  1. Replace the old password with the new one in the docker-compose.yml file in all INDEXER_PASSWORD occurrences
wazuh.manager:
  environment:
    - INDEXER_URL=https://wazuh.indexer:9200
    - INDEXER_USERNAME=admin
    - INDEXER_PASSWORD=Barcelona!*
    - FILEBEAT_SSL_VERIFICATION_MODE=full
    - SSL_CERTIFICATE_AUTHORITIES=/etc/ssl/root-ca.pem
    - SSL_CERTIFICATE=/etc/ssl/filebeat.pem
    - SSL_KEY=/etc/ssl/filebeat.key
    - API_USERNAME=wazuh-wui
    - API_PASSWORD=MyS3cr37P450r.*-

wazuh.dashboard:
    - INDEXER_USERNAME=admin
    - INDEXER_PASSWORD=Barcelona!*
    - WAZUH_API_URL=https://wazuh.manager
    - DASHBOARD_USERNAME=kibanaserver
    - DASHBOARD_PASSWORD=Barcelona!*        
    - API_USERNAME=wazuh-wui
    - API_PASSWORD=MyS3cr37P450r.*-
  1. Start services again
  root@ip-172-31-71-197:/home/ubuntu/wazuh-docker/single-node# docker-compose up -d
  [+] Running 4/4
   ⠿ Network single-node_default              Created                                                                                                                                                           0.1s
   ⠿ Container single-node-wazuh.manager-1    Started                                                                                                                                                           0.7s
   ⠿ Container single-node-wazuh.indexer-1    Started                                                                                                                                                           0.6s
   ⠿ Container single-node-wazuh.dashboard-1  Started
  1. Enter the Wazuh Indexer container
root@ip-172-31-71-197:/home/ubuntu/wazuh-docker/single-node# docker exec -it single-node-wazuh.indexer-1 bash
  1. Set the required environment variables to apply the new password
  wazuh-indexer@wazuh:~$ export INSTALLATION_DIR=/usr/share/wazuh-indexer
  wazuh-indexer@wazuh:~$ CACERT=$INSTALLATION_DIR/certs/root-ca.pem
  wazuh-indexer@wazuh:~$ KEY=$INSTALLATION_DIR/certs/admin-key.pem
  wazuh-indexer@wazuh:~$ CERT=$INSTALLATION_DIR/certs/admin.pem
  wazuh-indexer@wazuh:~$ export JAVA_HOME=/usr/share/wazuh-indexer/jdk
  1. Run the script to apply the changes
  wazuh-indexer@wazuh:~$ bash /usr/share/wazuh-indexer/plugins/opensearch-security/tools/securityadmin.sh -cd /usr/share/wazuh-indexer/opensearch-security/ -nhnv -cacert  $CACERT -cert $CERT -key $KEY -p 9200 -icl
  **************************************************************************
  ** This tool will be deprecated in the next major release of OpenSearch **
  ** https://github.com/opensearch-project/security/issues/1755           **
  **************************************************************************
  Security Admin v7
  Will connect to localhost:9200 ... done
  Connected as "CN=admin,OU=Wazuh,O=Wazuh,L=California,C=US"
  OpenSearch Version: 2.6.0
  Contacting opensearch cluster 'opensearch' and wait for YELLOW clusterstate ...
  Clustername: opensearch
  Clusterstate: GREEN
  Number of nodes: 1
  Number of data nodes: 1
  .opendistro_security index already exists, so we do not need to create one.
  Populate config from /usr/share/wazuh-indexer/opensearch-security/
  Will update '/config' with /usr/share/wazuh-indexer/opensearch-security/config.yml 
     SUCC: Configuration for 'config' created or updated
  Will update '/roles' with /usr/share/wazuh-indexer/opensearch-security/roles.yml 
     SUCC: Configuration for 'roles' created or updated
  Will update '/rolesmapping' with /usr/share/wazuh-indexer/opensearch-security/roles_mapping.yml 
     SUCC: Configuration for 'rolesmapping' created or updated
  Will update '/internalusers' with /usr/share/wazuh-indexer/opensearch-security/internal_users.yml 
     SUCC: Configuration for 'internalusers' created or updated
  Will update '/actiongroups' with /usr/share/wazuh-indexer/opensearch-security/action_groups.yml 
     SUCC: Configuration for 'actiongroups' created or updated
  Will update '/tenants' with /usr/share/wazuh-indexer/opensearch-security/tenants.yml 
     SUCC: Configuration for 'tenants' created or updated
  Will update '/nodesdn' with /usr/share/wazuh-indexer/opensearch-security/nodes_dn.yml 
     SUCC: Configuration for 'nodesdn' created or updated
  Will update '/whitelist' with /usr/share/wazuh-indexer/opensearch-security/whitelist.yml 
     SUCC: Configuration for 'whitelist' created or updated
  Will update '/audit' with /usr/share/wazuh-indexer/opensearch-security/audit.yml 
     SUCC: Configuration for 'audit' created or updated
  Will update '/allowlist' with /usr/share/wazuh-indexer/opensearch-security/allowlist.yml 
     SUCC: Configuration for 'allowlist' created or updated
  SUCC: Expected 10 config types for node {"updated_config_types":["allowlist","tenants","rolesmapping","nodesdn","audit","roles","whitelist","internalusers","actiongroups
","config"],"updated_config_size":10,"message":null} is 10 (["allowlist","tenants","rolesmapping","nodesdn","audit","roles","whitelist","internalusers","actiongroups","config"]) due to: null
  Done with success
  1. Enter the dashboard

6 password update fail

  • Indexer
wazuh-indexer@wazuh:~$ cat /var/log/wazuh-indexer/wazuh-cluster.log | grep -i -E "error|warn"
cat: /var/log/wazuh-indexer/wazuh-cluster.log: No such file or directory
  • Indices
root@ip-172-31-93-75:/home/ubuntu/wazuh-docker/single-node# curl https://ec2-3-88-190-235.compute-1.amazonaws.com:9200/_cat/indices/wazuh-alerts-* -u admin:murcia -k
green open wazuh-alerts-4.x-2023.09.22 ToeqcDWTS_CCfchP8TXngg 3 0 408 0 1.1mb 1.1mb
  • API
root@ip-172-31-93-75:/home/ubuntu/wazuh-docker/single-node# curl -k -X GET "https://ec2-3-88-190-235.compute-1.amazonaws.com:55000/" -H "Authorization: Bearer $(curl -u wazuh-wui:MyS3cr37P450r.*- -k -X POST 'https://ec2-3-88-190-235.compute-1.amazonaws.com:55000/security/user/authenticate?raw=true')"
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100   404  100   404    0     0    703      0 --:--:-- --:--:-- --:--:--   702
{"data": {"title": "Wazuh API REST", "api_version": "4.5.3", "revision": 40506, "license_name": "GPL 2.0", "license_url": "https://github.com/wazuh/wazuh/blob/v4.5.3/LICENSE", "hostname": "wazuh.manager", "timestamp": "2023-09-22T14:16:57Z"}, "error": 0}root@ip-172-31-93-75:/home/ubuntu/wazuh-docker/single-node#
  • Manager
root@wazuh:/# filebeat test output
elasticsearch: https://wazuh.indexer:9200...
  parse url... OK
  connection...
    parse host... OK
    dns lookup... OK
    addresses: 172.20.0.2
    dial up... OK
  TLS...
    security: server's certificate chain verification is enabled
    handshake... OK
    TLS version: TLSv1.3
    dial up... OK
  talk to server... OK
  version: 7.10.2
root@wazuh:/# cat /var/log/filebeat/filebeat | grep -i -E "error|warn"
root@wazuh:/# cat /var/ossec/logs/ossec.log | grep -i -E "error|warn"
2023/09/22 13:49:56 wazuh-remoted: WARNING: (1408): Invalid ID 001 for the source ip: '34.201.138.149' (name 'unknown').
2023/09/22 13:50:06 wazuh-remoted: WARNING: (1408): Invalid ID 001 for the source ip: '34.201.138.149' (name 'unknown').
2023/09/22 13:50:16 wazuh-remoted: WARNING: (1408): Invalid ID 001 for the source ip: '34.201.138.149' (name 'unknown').
2023/09/22 13:50:26 wazuh-remoted: WARNING: (1408): Invalid ID 001 for the source ip: '34.201.138.149' (name 'unknown').
2023/09/22 13:50:36 wazuh-remoted: WARNING: (1408): Invalid ID 001 for the source ip: '34.201.138.149' (name 'unknown').
2023/09/22 14:10:06 wazuh-authd: WARNING: Duplicate name 'amazonlinux-aarch64', rejecting enrollment. Agent '001' can't be replaced since it is not disconnected.
  • Dashboard
wazuh-dashboard@wazuh:~$ su journalctl -u wazuh-dashboard
Try 'su --help' for more information.
wazuh-dashboard@wazuh:~$ cat /usr/share/wazuh-dashboard/data/wazuh/logs/wazuhapp.log | grep -i -E "error|warn"
{"date":"2023-09-22T14:10:37.143Z","level":"error","location":"monitoring:getApiInfo","message":"connect ECONNREFUSED 172.20.0.3:55000"}
wazuh-dashboard@wazuh:~$
Change Wazuh Wazuh API users password 🟢
  1. Stop the services
root@ip-172-31-93-188:/home/ubuntu/wazuh-docker/single-node# docker-compose down
  1. Open the file config/wazuh_dashboard/wazuh.yml docker-compose.yml and modify the value of password parameter.
root@ip-172-31-93-188:/home/ubuntu/wazuh-docker/single-node# nano config/wazuh_dashboard/wazuh.yml
                                                                                   
hosts:
  - 1513629884013:
      url: "https://wazuh.manager"
      port: 55000
      username: wazuh-wui
      password: "Compostela24:*"
      run_as: false

root@ip-172-31-93-188:/home/ubuntu/wazuh-docker/single-node# nano docker-compose.yml


  wazuh.manager:
    environment:
      - INDEXER_URL=https://wazuh.indexer:9200
      - INDEXER_USERNAME=admin
      - INDEXER_PASSWORD=SecretPassword
      - FILEBEAT_SSL_VERIFICATION_MODE=full
      - SSL_CERTIFICATE_AUTHORITIES=/etc/ssl/root-ca.pem
      - SSL_CERTIFICATE=/etc/ssl/filebeat.pem
      - SSL_KEY=/etc/ssl/filebeat.key
      - API_USERNAME=wazuh-wui
      - API_PASSWORD=Compostela24:*


  wazuh.dashboard:
    image: wazuh/wazuh-dashboard:4.5.3
    hostname: wazuh.dashboard
    restart: always
    ports:
      - 443:5601
    environment:
      - INDEXER_USERNAME=admin
      - INDEXER_PASSWORD=SecretPassword
      - WAZUH_API_URL=https://wazuh.manager
      - DASHBOARD_USERNAME=kibanaserver
      - DASHBOARD_PASSWORD=kibanaserver
      - API_USERNAME=wazuh-wui
      - API_PASSWORD=Compostela24:*
  1. Recreate the Wazuh containers:
root@ip-172-31-93-188:/home/ubuntu/wazuh-docker/single-node# docker-compose up -d
[+] Running 3/0
 ⠿ Container single-node-wazuh.manager-1    Running                                                                                                                                                           0.0s
 ⠿ Container single-node-wazuh.indexer-1    Running                                                                                                                                                           0.0s
 ⠿ Container single-node-wazuh.dashboard-1  Running
  1. Testing API new password 🟢 :
root@ip-172-31-93-188:/home/ubuntu/wazuh-docker/single-node# curl -k -X GET "https://ec2-54-174-149-65.compute-1.amazonaws.com:55000/" -H "Authorization: Bearer $(curl -u wazuh-wui:Compostela24:* -k -X POST 'https://ec2-54-174-149-65.compute-1.amazonaws.com:55000/security/user/authenticate?raw=true')"

root@ip-172-31-93-188:/home/ubuntu/wazuh-docker/single-node# curl -k -X GET "https://ec2-54-174-149-65.compute-1.amazonaws.com:55000/" -H "Authorization: Bearer $(curl -u wazuh-wui:Compostela24:* -k -X POST 'https://ec2-54-174-149-65.compute-1.amazonaws.com:55000/security/user/authenticate?raw=true')"
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100   404  100   404    0     0    264      0  0:00:01  0:00:01 --:--:--   264
{"data": {"title": "Wazuh API REST", "api_version": "4.5.3", "revision": 40506, "license_name": "GPL 2.0", "license_url": "https://github.com/wazuh/wazuh/blob/v4.5.3/LICENSE", "hostname": "wazuh.manager", "timestamp": "2023-09-22T16:11:58Z"}, "error": 0}root@ip-172-31-93-188:/home/ubuntu/wazuh-docker/single-node#

@pro-akim
Copy link
Member

pro-akim commented Sep 25, 2023 •
edited

Multi-node deployment 🔴

Install required software and set-up the environment 🟢
  1. Increase max_map_count on your host (Linux)
root@ip-172-31-77-204:/home/ubuntu# sysctl -w vm.max_map_count=262144
vm.max_map_count = 262144
root@ip-172-31-77-204:/home/ubuntu# sysctl vm.max_map_count
vm.max_map_count = 262144
  1. Check architecture
root@ip-172-31-77-204:/home/ubuntu# uname -r
5.19.0-1025-aws
  1. Install the Docker engine
root@ip-172-31-77-204:/home/ubuntu# curl -sSL https://get.docker.com/ | sh
# Executing docker install script, commit: e5543d473431b782227f8908005543bb4389b8de
+ sh -c apt-get update -qq >/dev/null
+ sh -c DEBIAN_FRONTEND=noninteractive apt-get install -y -qq apt-transport-https ca-certificates curl >/dev/null
+ sh -c install -m 0755 -d /etc/apt/keyrings
+ sh -c curl -fsSL "https://download.docker.com/linux/ubuntu/gpg" | gpg --dearmor --yes -o /etc/apt/keyrings/docker.gpg
+ sh -c chmod a+r /etc/apt/keyrings/docker.gpg
+ sh -c echo "deb [arch=amd64 signed-by=/etc/apt/keyrings/docker.gpg] https://download.docker.com/linux/ubuntu jammy stable" > /etc/apt/sources.list.d/docker.list
+ sh -c apt-get update -qq >/dev/null
+ sh -c DEBIAN_FRONTEND=noninteractive apt-get install -y -qq docker-ce docker-ce-cli containerd.io docker-compose-plugin docker-ce-rootless-extras docker-buildx-plugin >/dev/null
+ sh -c docker version
Client: Docker Engine - Community
 Version:           24.0.6
 API version:       1.43
 Go version:        go1.20.7
 Git commit:        ed223bc
 Built:             Mon Sep  4 12:31:44 2023
 OS/Arch:           linux/amd64
 Context:           default

Server: Docker Engine - Community
 Engine:
  Version:          24.0.6
  API version:      1.43 (minimum version 1.12)
  Go version:       go1.20.7
  Git commit:       1a79695
  Built:            Mon Sep  4 12:31:44 2023
  OS/Arch:          linux/amd64
  Experimental:     false
 containerd:
  Version:          1.6.24
  GitCommit:        61f9fd88f79f081d64d6fa3bb1a0dc71ec870523
 runc:
  Version:          1.1.9
  GitCommit:        v1.1.9-0-gccaecfc
 docker-init:
  Version:          0.19.0
  GitCommit:        de40ad0

================================================================================

To run Docker as a non-privileged user, consider setting up the
Docker daemon in rootless mode for your user:

    dockerd-rootless-setuptool.sh install

Visit https://docs.docker.com/go/rootless/ to learn about rootless mode.


To run the Docker daemon as a fully privileged service, but granting non-root
users access, refer to https://docs.docker.com/go/daemon-access/

WARNING: Access to the remote API on a privileged Docker daemon is equivalent
         to root access on the host. Refer to the 'Docker daemon attack surface'
         documentation for details: https://docs.docker.com/go/attack-surface/

================================================================================
  1. Start the Docker engine
root@ip-172-31-77-204:/home/ubuntu# systemctl start docker
  1. Install the Docker compose
Install docker-compose
root@ip-172-31-77-204:/home/ubuntu# curl -L "https://github.com/docker/compose/releases/download/v2.12.2/docker-compose-$(uname -s)-$(uname -m)" -o /usr/local/bin/docker-compose
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
100 42.8M  100 42.8M    0     0   105M      0 --:--:-- --:--:-- --:--:--  105M


root@ip-172-31-77-204:/home/ubuntu# chmod +x /usr/local/bin/docker-compose
root@ip-172-31-77-204:/home/ubuntu# docker-compose --version
Docker Compose version v2.12.2
Wazuh stack deployment using Docker 🟢
  1. Clone the wazuh-docker repository
root@ip-172-31-77-204:/home/ubuntu# git clone https://github.com/wazuh/wazuh-docker.git -b v4.5.3-rc1
Cloning into 'wazuh-docker'...
remote: Enumerating objects: 11242, done.
remote: Counting objects: 100% (1281/1281), done.
remote: Compressing objects: 100% (639/639), done.
remote: Total 11242 (delta 686), reused 1122 (delta 571), pack-reused 9961
Receiving objects: 100% (11242/11242), 313.99 MiB | 66.08 MiB/s, done.
Resolving deltas: 100% (5759/5759), done.
Note: switching to '088b855f738f6321ff6af3a47a63cde09f40b4fe'.

You are in 'detached HEAD' state. You can look around, make experimental
changes and commit them, and you can discard any commits you make in this
state without impacting any branches by switching back to a branch.

If you want to create a new branch to retain commits you create, you may
do so (now or later) by using -c with the switch command. Example:

  git switch -c <new-branch-name>

Or undo this operation with:

  git switch -

Turn off this advice by setting config variable advice.detachedHead to false
  1. Generate certificates
root@ip-172-31-77-204:/home/ubuntu# cd wazuh-docker/multi-node/
root@ip-172-31-77-204:/home/ubuntu/wazuh-docker/multi-node# nano generate-indexer-certs.yml 


# Wazuh App Copyright (C) 2017, Wazuh Inc. (License GPLv2)
version: '3'

services:
  generator:
    image: wazuh/wazuh-certs-generator:0.0.1
    hostname: wazuh-certs-generator
    volumes:
      - ./config/wazuh_indexer_ssl_certs/:/certificates/
      - ./config/certs.yml:/config/certs.yml
    environment:
      - HTTP_PROXY=ec2-3-238-104-101.compute-1.amazonaws.com

root@ip-172-31-77-204:/home/ubuntu/wazuh-docker/multi-node# sudo docker-compose -f generate-indexer-certs.yml run --rm generator
[+] Running 1/0
 ⠿ Network multi-node_default  Created                                     0.1s
[+] Running 5/5
 ⠿ generator Pulled                                                        2.5s
   ⠿ edaedc954fb5 Pull complete                                            1.6s
   ⠿ 573f4d11a520 Pull complete                                            2.3s
   ⠿ 8f200922197d Pull complete                                            2.3s
   ⠿ 55a86de68c5c Pull complete                                            2.3s
The tool to create the certificates exists in the in Packages bucket
25/09/2023 08:08:33 INFO: Admin certificates created.
25/09/2023 08:08:33 INFO: Wazuh indexer certificates created.
25/09/2023 08:08:33 INFO: Wazuh server certificates created.
25/09/2023 08:08:33 INFO: Wazuh dashboard certificates created.
Moving created certificates to the destination directory
Changing certificate permissions
Setting UID indexer and dashboard
Setting UID for wazuh manager and worker


root@ip-172-31-77-204:/home/ubuntu/wazuh-docker/multi-node# ls -la config/wazuh_indexer_ssl_certs
total 80
dr-x------ 2 root            root            4096 Sep 25 08:08 .
drwxr-xr-x 7 root            root            4096 Sep 25 08:08 ..
-r-------- 1 ubuntu          ubuntu          1704 Sep 25 08:08 admin-key.pem
-r-------- 1 ubuntu          ubuntu          1119 Sep 25 08:08 admin.pem
-r-------- 1 systemd-resolve systemd-journal 1708 Sep 25 08:08 root-ca-manager.key
-r-------- 1 systemd-resolve systemd-journal 1204 Sep 25 08:08 root-ca-manager.pem
-r-------- 1 ubuntu          ubuntu          1708 Sep 25 08:08 root-ca.key
-r-------- 1 ubuntu          ubuntu          1204 Sep 25 08:08 root-ca.pem
-r-------- 1 ubuntu          ubuntu          1708 Sep 25 08:08 wazuh.dashboard-key.pem
-r-------- 1 ubuntu          ubuntu          1261 Sep 25 08:08 wazuh.dashboard.pem
-r-------- 1 ubuntu          ubuntu          1704 Sep 25 08:08 wazuh.master-key.pem
-r-------- 1 ubuntu          ubuntu          1253 Sep 25 08:08 wazuh.master.pem
-r-------- 1 ubuntu          ubuntu          1704 Sep 25 08:08 wazuh.worker-key.pem
-r-------- 1 ubuntu          ubuntu          1253 Sep 25 08:08 wazuh.worker.pem
-r-------- 1 ubuntu          ubuntu          1704 Sep 25 08:08 wazuh1.indexer-key.pem
-r-------- 1 ubuntu          ubuntu          1257 Sep 25 08:08 wazuh1.indexer.pem
-r-------- 1 ubuntu          ubuntu          1708 Sep 25 08:08 wazuh2.indexer-key.pem
-r-------- 1 ubuntu          ubuntu          1257 Sep 25 08:08 wazuh2.indexer.pem
-r-------- 1 ubuntu          ubuntu          1708 Sep 25 08:08 wazuh3.indexer-key.pem
-r-------- 1 ubuntu          ubuntu          1257 Sep 25 08:08 wazuh3.indexer.pem
root@ip-172-31-77-204:/home/ubuntu/wazuh-docker/multi-node#
  1. Generate custom images (because is a development release) and start Wazuh using docker-compose
root@ip-172-31-77-204:/home/ubuntu/wazuh-docker/multi-node# cd ../ && sudo build-docker-images/build-images.sh && cd -
[+] Building 113.5s (80/80) FINISHED                                                                                                                                                                               
 => [wazuh/wazuh-manager:4.5.3 internal] load build definition from Dockerfile                                                                                                                                0.1s
 => => transferring dockerfile: 2.10kB                                                                                                                                                                        0.0s
 => [wazuh/wazuh-manager:4.5.3 internal] load .dockerignore                                                                                                                                                   0.1s
 => => transferring context: 2B                                                                                                                                                                               0.0s
 => [wazuh/wazuh-dashboard:4.5.3 internal] load build definition from Dockerfile                                                                                                                              0.1s
 => => transferring dockerfile: 3.61kB                                                                                                                                                                        0.0s
 => [wazuh/wazuh-dashboard:4.5.3 internal] load .dockerignore                                                                                                                                                 0.1s
 => => transferring context: 2B                                                                                                                                                                               0.0s
 => [wazuh/wazuh-indexer:4.5.3 internal] load build definition from Dockerfile                                                                                                                                0.1s
 => => transferring dockerfile: 2.38kB                                                                                                                                                                        0.0s
 => [wazuh/wazuh-indexer:4.5.3 internal] load .dockerignore                                                                                                                                                   0.1s
 => => transferring context: 2B                                                                                                                                                                               0.0s
 => [wazuh/wazuh-manager:4.5.3 internal] load metadata for docker.io/library/ubuntu:focal                                                                                                                     0.4s
 => [wazuh/wazuh-manager:4.5.3 internal] load build context                                                                                                                                                   0.1s
 => => transferring context: 25.16kB                                                                                                                                                                          0.0s
 => [wazuh/wazuh-manager:4.5.3] https://raw.githubusercontent.com/wazuh/wazuh/4.5/extensions/elasticsearch/7.x/wazuh-template.json                                                                            0.1s
 => [wazuh/wazuh-dashboard:4.5.3  1/17] FROM docker.io/library/ubuntu:focal@sha256:33a5cc25d22c45900796a1aca487ad7a7cb09f09ea00b779e3b2026b4fc2faba                                                           0.1s
 => => resolve docker.io/library/ubuntu:focal@sha256:33a5cc25d22c45900796a1aca487ad7a7cb09f09ea00b779e3b2026b4fc2faba                                                                                         0.0s
 => => sha256:33a5cc25d22c45900796a1aca487ad7a7cb09f09ea00b779e3b2026b4fc2faba 1.13kB / 1.13kB                                                                                                                0.0s
 => => sha256:3246518d9735254519e1b2ff35f95686e4a5011c90c85344c1f38df7bae9dd37 424B / 424B                                                                                                                    0.0s
 => => sha256:6df89402372646d400cf092016c28066391a26f5d46c00b1153e75003465484d 2.30kB / 2.30kB                                                                                                                0.0s
 => [wazuh/wazuh-indexer:4.5.3 internal] load build context                                                                                                                                                   0.0s
 => => transferring context: 20.13kB                                                                                                                                                                          0.0s
 => [wazuh/wazuh-dashboard:4.5.3 internal] load build context                                                                                                                                                 0.1s
 => => transferring context: 13.44kB                                                                                                                                                                          0.0s
 => [wazuh/wazuh-manager:4.5.3  2/17] RUN rm /bin/sh && ln -s /bin/bash /bin/sh                                                                                                                               0.6s
 => [wazuh/wazuh-indexer:4.5.3 stage-1  2/14] RUN getent group wazuh-indexer || groupadd -r -g 1000 wazuh-indexer                                                                                             0.4s
 => [wazuh/wazuh-indexer:4.5.3 builder 2/9] RUN apt-get update -y && apt-get install curl openssl xz-utils -y                                                                                                12.5s
 => [wazuh/wazuh-dashboard:4.5.3 stage-1  2/13] RUN apt update && apt install -y libnss3-dev fonts-liberation libfontconfig1                                                                                 11.2s
 => [wazuh/wazuh-dashboard:4.5.3 builder  2/17] RUN apt-get update && apt install curl libcap2-bin xz-utils -y                                                                                               17.8s
 => [wazuh/wazuh-indexer:4.5.3 stage-1  3/14] RUN useradd --system             --uid 1000             --no-create-home             --home-dir /usr/share/wazuh-indexer             --gid wazuh-indexer        0.9s
 => [wazuh/wazuh-manager:4.5.3  3/17] RUN apt-get update && apt install curl apt-transport-https lsb-release gnupg -y                                                                                        21.8s
 => [wazuh/wazuh-indexer:4.5.3 stage-1  4/14] WORKDIR /usr/share/wazuh-indexer                                                                                                                                0.1s
 => [wazuh/wazuh-indexer:4.5.3 stage-1  5/14] COPY config/entrypoint.sh /                                                                                                                                     0.1s
 => [wazuh/wazuh-indexer:4.5.3 stage-1  6/14] COPY config/securityadmin.sh /                                                                                                                                  0.1s
 => [wazuh/wazuh-indexer:4.5.3 stage-1  7/14] RUN chmod 700 /entrypoint.sh && chmod 700 /securityadmin.sh                                                                                                     0.5s
 => [wazuh/wazuh-indexer:4.5.3 stage-1  8/14] RUN chown 1000:1000 /*.sh                                                                                                                                       0.8s
 => [wazuh/wazuh-dashboard:4.5.3 stage-1  3/13] RUN getent group wazuh-dashboard || groupadd -r -g 1000 wazuh-dashboard                                                                                       0.4s
 => [wazuh/wazuh-dashboard:4.5.3 stage-1  4/13] RUN useradd --system             --uid 1000             --no-create-home             --home-dir /usr/share/wazuh-dashboard             --gid wazuh-dashboard  0.5s
 => [wazuh/wazuh-dashboard:4.5.3 stage-1  5/13] COPY config/entrypoint.sh /                                                                                                                                   0.1s
 => [wazuh/wazuh-dashboard:4.5.3 stage-1  6/13] COPY config/wazuh_app_config.sh /                                                                                                                             0.1s
 => [wazuh/wazuh-dashboard:4.5.3 stage-1  7/13] RUN chmod 700 /entrypoint.sh                                                                                                                                  0.3s
 => [wazuh/wazuh-dashboard:4.5.3 stage-1  8/13] RUN chmod 700 /wazuh_app_config.sh                                                                                                                            0.6s
 => [wazuh/wazuh-indexer:4.5.3 builder 3/9] COPY config/opensearch.yml /                                                                                                                                      0.1s
 => [wazuh/wazuh-indexer:4.5.3 builder 4/9] COPY config/config.sh .                                                                                                                                           0.0s
 => [wazuh/wazuh-indexer:4.5.3 builder 5/9] COPY config/config.yml /                                                                                                                                          0.0s
 => [wazuh/wazuh-indexer:4.5.3 builder 6/9] COPY config/internal_users.yml /                                                                                                                                  0.1s
 => [wazuh/wazuh-indexer:4.5.3 builder 7/9] COPY config/roles_mapping.yml /                                                                                                                                   0.0s
 => [wazuh/wazuh-indexer:4.5.3 builder 8/9] COPY config/roles.yml /                                                                                                                                           0.0s
 => [wazuh/wazuh-indexer:4.5.3 builder 9/9] RUN bash config.sh                                                                                                                                               75.5s
 => [wazuh/wazuh-dashboard:4.5.3 stage-1  9/13] RUN chown 1000:1000 /*.sh                                                                                                                                     0.3s
 => [wazuh/wazuh-dashboard:4.5.3 builder  3/17] RUN mkdir -p /usr/share/wazuh-dashboard                                                                                                                       0.7s
 => [wazuh/wazuh-dashboard:4.5.3 builder  4/17] COPY config/dl_base.sh .                                                                                                                                      0.1s
 => [wazuh/wazuh-dashboard:4.5.3 builder  5/17] RUN bash dl_base.sh                                                                                                                                          28.2s
 => [wazuh/wazuh-manager:4.5.3  4/17] COPY config/check_repository.sh /                                                                                                                                       0.8s
 => [wazuh/wazuh-manager:4.5.3  5/17] RUN chmod 775 /check_repository.sh                                                                                                                                      1.4s
 => [wazuh/wazuh-manager:4.5.3  6/17] RUN source /check_repository.sh                                                                                                                                         3.4s
 => [wazuh/wazuh-manager:4.5.3  7/17] RUN apt-get update &&     apt-get install wazuh-manager=4.5.3-1                                                                                                        62.7s
 => [wazuh/wazuh-dashboard:4.5.3 builder  6/17] COPY config/config.sh .                                                                                                                                       4.4s
 => [wazuh/wazuh-dashboard:4.5.3 builder  7/17] COPY config/config.yml /                                                                                                                                      0.3s
 => [wazuh/wazuh-dashboard:4.5.3 builder  8/17] RUN bash config.sh                                                                                                                                            1.1s
 => [wazuh/wazuh-dashboard:4.5.3 builder  9/17] COPY config/install_wazuh_app.sh /                                                                                                                            0.0s
 => [wazuh/wazuh-dashboard:4.5.3 builder 10/17] RUN chmod 775 /install_wazuh_app.sh                                                                                                                           0.4s
 => [wazuh/wazuh-dashboard:4.5.3 builder 11/17] RUN bash /install_wazuh_app.sh                                                                                                                               10.8s
 => [wazuh/wazuh-dashboard:4.5.3 builder 12/17] COPY config/opensearch_dashboards.yml /usr/share/wazuh-dashboard/config/                                                                                      0.1s
 => [wazuh/wazuh-dashboard:4.5.3 builder 13/17] COPY config/wazuh.yml /usr/share/wazuh-dashboard/data/wazuh/config/                                                                                           0.1s
 => [wazuh/wazuh-dashboard:4.5.3 builder 14/17] RUN chown 101:101 /usr/share/wazuh-dashboard/config/opensearch_dashboards.yml && chmod 664 /usr/share/wazuh-dashboard/config/opensearch_dashboards.yml        0.3s
 => [wazuh/wazuh-dashboard:4.5.3 builder 15/17] RUN mkdir -p /usr/share/wazuh-dashboard/data/wazuh && chown -R 101:101 /usr/share/wazuh-dashboard/data/wazuh && chmod -R 775 /usr/share/wazuh-dashboard/data  0.5s
 => [wazuh/wazuh-dashboard:4.5.3 builder 16/17] RUN mkdir -p /usr/share/wazuh-dashboard/data/wazuh/config && chown -R 101:101 /usr/share/wazuh-dashboard/data/wazuh/config && chmod -R 775 /usr/share/wazuh-  0.5s
 => [wazuh/wazuh-dashboard:4.5.3 builder 17/17] RUN mkdir -p /usr/share/wazuh-dashboard/data/wazuh/logs && chown -R 101:101 /usr/share/wazuh-dashboard/data/wazuh/logs && chmod -R 775 /usr/share/wazuh-dash  0.5s
 => [wazuh/wazuh-dashboard:4.5.3 stage-1 10/13] COPY --from=builder --chown=1000:1000 /usr/share/wazuh-dashboard /usr/share/wazuh-dashboard                                                                  17.0s
 => [wazuh/wazuh-manager:4.5.3  8/17] RUN curl -L -O https://artifacts.elastic.co/downloads/beats/filebeat/filebeat-oss-7.10.2-amd64.deb &&    dpkg -i filebeat-oss-7.10.2-amd64.deb && rm -f filebeat-oss-7  8.4s
 => [wazuh/wazuh-dashboard:4.5.3 stage-1 11/13] RUN mkdir -p /usr/share/wazuh-dashboard/plugins/wazuh/public/assets/custom                                                                                    0.3s
 => [wazuh/wazuh-dashboard:4.5.3 stage-1 12/13] RUN chown 1000:1000 /usr/share/wazuh-dashboard/plugins/wazuh/public/assets/custom                                                                             0.7s
 => [wazuh/wazuh-indexer:4.5.3 stage-1  9/14] COPY --from=builder --chown=1000:1000 /debian/wazuh-indexer/usr/share/wazuh-indexer /usr/share/wazuh-indexer                                                    7.5s
 => [wazuh/wazuh-dashboard:4.5.3 stage-1 13/13] WORKDIR /usr/share/wazuh-dashboard                                                                                                                            0.2s
 => [wazuh/wazuh-dashboard:4.5.3] exporting to image                                                                                                                                                         10.6s
 => => exporting layers                                                                                                                                                                                      10.6s
 => => writing image sha256:39ac49b3a29fd872fc884e5e0860ae85b9e797a124eccfb1bf4ec9d74e5df24a                                                                                                                  0.0s
 => => naming to docker.io/wazuh/wazuh-dashboard:4.5.3                                                                                                                                                        0.0s
 => [wazuh/wazuh-manager:4.5.3  9/17] RUN curl --fail --silent -L https://github.com/just-containers/s6-overlay/releases/download/v2.2.0.3/s6-overlay-amd64.tar.gz     -o /tmp/s6-overlay-amd64.tar.gz &&     0.8s
 => [wazuh/wazuh-indexer:4.5.3 stage-1 10/14] COPY --from=builder --chown=0:0 /debian/wazuh-indexer/usr/lib/systemd /usr/lib/systemd                                                                          0.1s
 => [wazuh/wazuh-indexer:4.5.3 stage-1 11/14] COPY --from=builder --chown=0:0 /debian/wazuh-indexer/usr/lib/sysctl.d /usr/lib/sysctl.d                                                                        0.1s
 => [wazuh/wazuh-indexer:4.5.3 stage-1 12/14] COPY --from=builder --chown=0:0 /debian/wazuh-indexer/usr/lib/tmpfiles.d /usr/lib/tmpfiles.d                                                                    0.0s
 => [wazuh/wazuh-indexer:4.5.3 stage-1 13/14] RUN chown -R 1000:1000 /usr/share/wazuh-indexer                                                                                                                 8.3s
 => [wazuh/wazuh-manager:4.5.3 10/17] COPY config/etc/ /etc/                                                                                                                                                  0.1s
 => [wazuh/wazuh-manager:4.5.3 11/17] COPY --chown=root:wazuh config/create_user.py /var/ossec/framework/scripts/create_user.py                                                                               0.1s
 => [wazuh/wazuh-manager:4.5.3 12/17] COPY config/filebeat.yml /etc/filebeat/                                                                                                                                 0.1s
 => [wazuh/wazuh-manager:4.5.3 13/17] RUN chmod go-w /etc/filebeat/filebeat.yml                                                                                                                               0.3s
 => [wazuh/wazuh-manager:4.5.3 14/17] ADD https://raw.githubusercontent.com/wazuh/wazuh/4.5/extensions/elasticsearch/7.x/wazuh-template.json /etc/filebeat                                                    0.1s
 => [wazuh/wazuh-manager:4.5.3 15/17] RUN chmod go-w /etc/filebeat/wazuh-template.json                                                                                                                        1.6s
 => [wazuh/wazuh-manager:4.5.3 16/17] COPY config/permanent_data.env config/permanent_data.sh /                                                                                                               0.1s
 => [wazuh/wazuh-manager:4.5.3 17/17] RUN chmod 755 /permanent_data.sh &&     sync && /permanent_data.sh &&     sync && rm /permanent_data.sh                                                                 0.9s
 => [wazuh/wazuh-manager:4.5.3] exporting to image                                                                                                                                                            4.8s
 => => exporting layers                                                                                                                                                                                       4.8s
 => => writing image sha256:e24c97876e37b2d922cc1a2957d77b67d6347ffa4d3e7f5467bed194dc534ad4                                                                                                                  0.0s
 => => naming to docker.io/wazuh/wazuh-manager:4.5.3                                                                                                                                                          0.0s
 => [wazuh/wazuh-indexer:4.5.3 stage-1 14/14] RUN mkdir -p /var/lib/wazuh-indexer && chown 1000:1000 /var/lib/wazuh-indexer &&     mkdir -p /usr/share/wazuh-indexer/logs && chown 1000:1000 /usr/share/wazu  0.3s
 => [wazuh/wazuh-indexer:4.5.3] exporting to image                                                                                                                                                            4.8s
 => => exporting layers                                                                                                                                                                                       4.8s
 => => writing image sha256:3224bac62e47d2596ff34d6b1b26e66ffee5125094026c73ef11a74b4b3e452b                                                                                                                  0.0s
 => => naming to docker.io/wazuh/wazuh-indexer:4.5.3                                                                                                                                                          0.0s
/home/ubuntu/wazuh-docker/multi-node


root@ip-172-31-77-204:/home/ubuntu/wazuh-docker/multi-node# sudo docker-compose up -d
[+] Running 7/7
 ⠿ nginx Pulled                                                                                                                                                                                               3.3s
   ⠿ 7dbc1adf280e Pull complete                                                                                                                                                                               2.1s
   ⠿ a7184f3665ed Pull complete                                                                                                                                                                               2.9s
   ⠿ f144d5d97503 Pull complete                                                                                                                                                                               2.9s
   ⠿ 9097eea98b48 Pull complete                                                                                                                                                                               3.0s
   ⠿ 356d4b647b64 Pull complete                                                                                                                                                                               3.0s
   ⠿ 608e661a622a Pull complete                                                                                                                                                                               3.0s
[+] Running 34/34
 ⠿ Volume "multi-node_master-wazuh-active-response"    Created                                                                                                                                                0.0s
 ⠿ Volume "multi-node_worker-wazuh-etc"                Created                                                                                                                                                0.0s
 ⠿ Volume "multi-node_wazuh-indexer-data-3"            Created                                                                                                                                                0.0s
 ⠿ Volume "multi-node_worker-wazuh-active-response"    Created                                                                                                                                                0.0s
 ⠿ Volume "multi-node_master-wazuh-wodles"             Created                                                                                                                                                0.0s
 ⠿ Volume "multi-node_master-wazuh-etc"                Created                                                                                                                                                0.0s
 ⠿ Volume "multi-node_master-wazuh-var-multigroups"    Created                                                                                                                                                0.0s
 ⠿ Volume "multi-node_worker-wazuh-wodles"             Created                                                                                                                                                0.0s
 ⠿ Volume "multi-node_worker-filebeat-var"             Created                                                                                                                                                0.0s
 ⠿ Volume "multi-node_master-filebeat-etc"             Created                                                                                                                                                0.0s
 ⠿ Volume "multi-node_wazuh-indexer-data-1"            Created                                                                                                                                                0.0s
 ⠿ Volume "multi-node_master-wazuh-agentless"          Created                                                                                                                                                0.0s
 ⠿ Volume "multi-node_wazuh-dashboard-custom"          Created                                                                                                                                                0.0s
 ⠿ Volume "multi-node_master-wazuh-api-configuration"  Created                                                                                                                                                0.0s
 ⠿ Volume "multi-node_worker-wazuh-queue"              Created                                                                                                                                                0.0s
 ⠿ Volume "multi-node_worker-filebeat-etc"             Created                                                                                                                                                0.0s
 ⠿ Volume "multi-node_master-filebeat-var"             Created                                                                                                                                                0.0s
 ⠿ Volume "multi-node_wazuh-indexer-data-2"            Created                                                                                                                                                0.0s
 ⠿ Volume "multi-node_master-wazuh-logs"               Created                                                                                                                                                0.0s
 ⠿ Volume "multi-node_worker-wazuh-integrations"       Created                                                                                                                                                0.0s
 ⠿ Volume "multi-node_worker-wazuh-var-multigroups"    Created                                                                                                                                                0.0s
 ⠿ Volume "multi-node_master-wazuh-queue"              Created                                                                                                                                                0.0s
 ⠿ Volume "multi-node_master-wazuh-integrations"       Created                                                                                                                                                0.0s
 ⠿ Volume "multi-node_worker-wazuh-api-configuration"  Created                                                                                                                                                0.0s
 ⠿ Volume "multi-node_wazuh-dashboard-config"          Created                                                                                                                                                0.0s
 ⠿ Volume "multi-node_worker-wazuh-logs"               Created                                                                                                                                                0.0s
 ⠿ Volume "multi-node_worker-wazuh-agentless"          Created                                                                                                                                                0.0s
 ⠿ Container multi-node-wazuh3.indexer-1               Started                                                                                                                                                1.3s
 ⠿ Container multi-node-wazuh.worker-1                 Started                                                                                                                                                1.1s
 ⠿ Container multi-node-wazuh.master-1                 Started                                                                                                                                                1.4s
 ⠿ Container multi-node-wazuh2.indexer-1               Started                                                                                                                                                1.0s
 ⠿ Container multi-node-wazuh1.indexer-1               Started                                                                                                                                                1.1s
 ⠿ Container multi-node-wazuh.dashboard-1              Started                                                                                                                                                1.3s
 ⠿ Container multi-node-nginx-1                        Started 
 
 
root@ip-172-31-77-204:/home/ubuntu/wazuh-docker/multi-node# docker ps --format "table {{.Image}}\t{{.Status}}"
IMAGE                         STATUS
nginx:stable                  Up 17 seconds
wazuh/wazuh-dashboard:4.5.3   Up 17 seconds
wazuh/wazuh-manager:4.5.3     Up 18 seconds
wazuh/wazuh-indexer:4.5.3     Up 18 seconds
wazuh/wazuh-manager:4.5.3     Up 18 seconds
wazuh/wazuh-indexer:4.5.3     Up 18 seconds
wazuh/wazuh-indexer:4.5.3     Up 18 seconds
  1. Check for errors/warnings in Wazuh Dashboard
root@ip-172-31-77-204:/home/ubuntu/wazuh-docker/multi-node# sudo docker exec -it multi-node-wazuh.dashboard-1 cat /usr/share/wazuh-dashboard/data/wazuh/logs/wazuhapp.log | grep -i -E "error|warn"
Error response from daemon: No such container: single-node-wazuh.dashboard-1
  1. Check for errors/warnings in Wazuh Indexer
oot@ip-172-31-77-204:/home/ubuntu/wazuh-docker/multi-node# sudo docker exec -it multi-node-wazuh1.indexer-1 cat /var/log/wazuh-indexer/opensearch.log | grep -i -E "error|warn"
  1. Check for errors/warnings in Wazuh Master and Worker
root@ip-172-31-77-204:/home/ubuntu/wazuh-docker/multi-node# sudo docker exec -it multi-node-wazuh.master-1 cat /var/ossec/logs/ossec.log | grep -i -E "error|warn"
root@ip-172-31-77-204:/home/ubuntu/wazuh-docker/multi-node# sudo docker exec -it multi-node-wazuh.worker-1 cat /var/ossec/logs/ossec.log | grep -i -E "error|warn"
Wazuh Agent deployment through WUI 🟢

  1. Choose "deploy a new agent" in the UI

  2. Select the options that fit with my agent machine

image
image

  1. Copy/paste the command to deploy the agent (changing the package URL to the development package)
[ec2-user@ip-172-31-18-18 ~]$ sudo WAZUH_MANAGER='3.238.104.101' WAZUH_AGENT_GROUP='default' WAZUH_AGENT_NAME='amzlinuxagent' yum install -y https://packages-dev.wazuh.com/pre-release/yum/wazuh-agent-4.5.3-1.aarch64.rpm
Loaded plugins: extras_suggestions, langpacks, priorities, update-motd
wazuh-agent-4.5.3-1.aarch64.rpm                                                                                                                                                             | 8.6 MB  00:00:00     
Examining /var/tmp/yum-root-sFWzO1/wazuh-agent-4.5.3-1.aarch64.rpm: wazuh-agent-4.5.3-1.aarch64
Marking /var/tmp/yum-root-sFWzO1/wazuh-agent-4.5.3-1.aarch64.rpm to be installed
Resolving Dependencies
--> Running transaction check
---> Package wazuh-agent.aarch64 0:4.5.3-1 will be installed
--> Finished Dependency Resolution

Dependencies Resolved

===================================================================================================================================================================================================================
 Package                                         Arch                                        Version                                        Repository                                                        Size
===================================================================================================================================================================================================================
Installing:
 wazuh-agent                                     aarch64                                     4.5.3-1                                        /wazuh-agent-4.5.3-1.aarch64                                      26 M

Transaction Summary
===================================================================================================================================================================================================================
Install  1 Package

Total size: 26 M
Installed size: 26 M
Downloading packages:
Running transaction check
Running transaction test
Transaction test succeeded
Running transaction
  Installing : wazuh-agent-4.5.3-1.aarch64                                                                                                                                                                     1/1 
  Verifying  : wazuh-agent-4.5.3-1.aarch64                                                                                                                                                                     1/1 

Installed:
  wazuh-agent.aarch64 0:4.5.3-1                                                                                                                                                                                    

Complete!
  1. Start the agent by copying/pasting the suggested command
[ec2-user@ip-172-31-18-18 ~]$ sudo systemctl daemon-reload
[ec2-user@ip-172-31-18-18 ~]$ sudo systemctl enable wazuh-agent
Created symlink from /etc/systemd/system/multi-user.target.wants/wazuh-agent.service to /usr/lib/systemd/system/wazuh-agent.service.
[ec2-user@ip-172-31-18-18 ~]$ sudo systemctl start wazuh-agent
  1. Check the status of the agent
[ec2-user@ip-172-31-18-18 ~]$ sudo systemctl status wazuh-agent
● wazuh-agent.service - Wazuh agent
   Loaded: loaded (/usr/lib/systemd/system/wazuh-agent.service; enabled; vendor preset: disabled) 
   Active: active (running) since lun 2023-09-25 08:27:26 UTC; 28s ago
  Process: 2175 ExecStart=/usr/bin/env /var/ossec/bin/wazuh-control start (code=exited, status=0/SUCCESS)
   CGroup: /system.slice/wazuh-agent.service
           ├─2813 /var/ossec/bin/wazuh-execd
           ├─2825 /var/ossec/bin/wazuh-agentd
           ├─2840 /var/ossec/bin/wazuh-syscheckd
           ├─2854 /var/ossec/bin/wazuh-logcollector
           ├─2875 /var/ossec/bin/wazuh-modulesd
           ├─3032 sh -c  yum check-updates --security | grep "No packages"
           ├─3034 /usr/bin/python /usr/bin/yum check-updates --security
           └─3035 grep No packages

sep 25 08:27:19 ip-172-31-18-18.ec2.internal systemd[1]: Starting Wazuh agent...
sep 25 08:27:19 ip-172-31-18-18.ec2.internal env[2175]: Starting Wazuh v4.5.3...
sep 25 08:27:20 ip-172-31-18-18.ec2.internal env[2175]: Started wazuh-execd...
sep 25 08:27:21 ip-172-31-18-18.ec2.internal env[2175]: Started wazuh-agentd...
sep 25 08:27:22 ip-172-31-18-18.ec2.internal env[2175]: Started wazuh-syscheckd...
sep 25 08:27:23 ip-172-31-18-18.ec2.internal env[2175]: Started wazuh-logcollector...
sep 25 08:27:24 ip-172-31-18-18.ec2.internal env[2175]: Started wazuh-modulesd...
sep 25 08:27:26 ip-172-31-18-18.ec2.internal env[2175]: Completed.
sep 25 08:27:26 ip-172-31-18-18.ec2.internal systemd[1]: Started Wazuh agent.
[ec2-user@ip-172-31-18-18 ~]$
  1. Check the connection with the Wazuh manager and worker, work balancer check 🟢

Connecting Agents to worker1
docker worker1

Stoping worker1 node:

root@ip-172-31-75-22:/home/ubuntu/wazuh-docker/multi-node# docker stop multi-node-wazuh.worker-1

Automatically, the load balancer (nginx) addresses the agents to the manager node.
to manager

From an event in Wazuh Agent to an alert in Wazuh Dashboard 🟢
  1. Make a failed SSH login attempt on the VM running the Wazuh agent
akim@akim-PC:~/Desktop/personal$ for i in {1..8}; do ssh attacker-akim@ec2-54-90-95-59.compute-1.amazonaws.com; done
attacker-akim@ec2-54-90-95-59.compute-1.amazonaws.com: Permission denied (publickey,gssapi-keyex,gssapi-with-mic).
attacker-akim@ec2-54-90-95-59.compute-1.amazonaws.com: Permission denied (publickey,gssapi-keyex,gssapi-with-mic).
attacker-akim@ec2-54-90-95-59.compute-1.amazonaws.com: Permission denied (publickey,gssapi-keyex,gssapi-with-mic).
attacker-akim@ec2-54-90-95-59.compute-1.amazonaws.com: Permission denied (publickey,gssapi-keyex,gssapi-with-mic).
attacker-akim@ec2-54-90-95-59.compute-1.amazonaws.com: Permission denied (publickey,gssapi-keyex,gssapi-with-mic).
attacker-akim@ec2-54-90-95-59.compute-1.amazonaws.com: Permission denied (publickey,gssapi-keyex,gssapi-with-mic).
attacker-akim@ec2-54-90-95-59.compute-1.amazonaws.com: Permission denied (publickey,gssapi-keyex,gssapi-with-mic).
attacker-akim@ec2-54-90-95-59.compute-1.amazonaws.com: Permission denied (publickey,gssapi-keyex,gssapi-with-mic).
  1. Check the alert in Wazuh Dashboard

image

Change passwords 🔴
Change Wazuh Indexer password 🔴

New issue opened:

  1. Stop the services
root@ip-172-31-77-204:/home/ubuntu/wazuh-docker/multi-node# sudo docker-compose down
[+] Running 8/8
 ⠿ Container multi-node-wazuh3.indexer-1   Removed                                                                                                                                                            0.5s
 ⠿ Container multi-node-nginx-1            Removed                                                                                                                                                           10.4s
 ⠿ Container multi-node-wazuh2.indexer-1   Removed                                                                                                                                                            0.6s
 ⠿ Container multi-node-wazuh.dashboard-1  Removed                                                                                                                                                           10.3s
 ⠿ Container multi-node-wazuh.worker-1     Removed                                                                                                                                                            3.8s
 ⠿ Container multi-node-wazuh.master-1     Removed                                                                                                                                                            3.9s
 ⠿ Container multi-node-wazuh1.indexer-1   Removed                                                                                                                                                           10.4s
 ⠿ Network multi-node_default              Removed
  1. Generate a hash of a new password
root@ip-172-31-77-204:/home/ubuntu/wazuh-docker/multi-node# docker run --rm -ti wazuh/wazuh-indexer:4.5.3 bash /usr/share/wazuh-indexer/plugins/opensearch-security/tools/hash.sh
**************************************************************************
** This tool will be deprecated in the next major release of OpenSearch **
** https://github.com/opensearch-project/security/issues/1755           **
**************************************************************************
[Password:]
$2y$12$dV9ABNjt2KIa/hC5qq0JuebTvXJnpT8ZjMKFfdQjvr41nHcwJKtuW
  1. Replace the new hash in the config/wazuh_indexer/internal_users.yml file
admin:
  hash: "$2y$12$dV9ABNjt2KIa/hC5qq0JuebTvXJnpT8ZjMKFfdQjvr41nHcwJKtuW"
  reserved: true
  backend_roles:
  - "admin"
  description: "Demo admin user"

kibanaserver:
  hash: "$2y$12$dV9ABNjt2KIa/hC5qq0JuebTvXJnpT8ZjMKFfdQjvr41nHcwJKtuW"
  reserved: true
  description: "Demo kibanaserver user"
  1. Replace the old password with the new one in the docker-compose.yml file in all INDEXER_PASSWORD occurrences
wazuh.worker:

  environment:
    - INDEXER_URL=https://wazuh1.indexer:9200
    - INDEXER_USERNAME=admin
    - INDEXER_PASSWORD=Lugo    

wazuh.master:
  environment:
    - INDEXER_URL=https://wazuh1.indexer:9200
    - INDEXER_USERNAME=admin
    - INDEXER_PASSWORD=Lugo

wazuh.dashboard:
  environment:
    - OPENSEARCH_HOSTS="https://wazuh1.indexer:9200"
    - WAZUH_API_URL="https://wazuh.master"
    - API_USERNAME=wazuh-wui
    - API_PASSWORD=MyS3cr37P450r.*-
    - DASHBOARD_USERNAME=kibanaserver
    - DASHBOARD_PASSWORD=Lugo
  1. Start services again
root@ip-172-31-77-204:/home/ubuntu/wazuh-docker/multi-node# docker-compose up -d
[+] Running 8/8
 ⠿ Network multi-node_default              Created                                                                                                                                                            0.1s
 ⠿ Container multi-node-wazuh3.indexer-1   Started                                                                                                                                                            0.6s
 ⠿ Container multi-node-wazuh.master-1     Started                                                                                                                                                            0.9s
 ⠿ Container multi-node-wazuh.worker-1     Started                                                                                                                                                            0.8s
 ⠿ Container multi-node-wazuh1.indexer-1   Started                                                                                                                                                            0.9s
 ⠿ Container multi-node-wazuh2.indexer-1   Started                                                                                                                                                            0.7s
 ⠿ Container multi-node-wazuh.dashboard-1  Started                                                                                                                                                            1.2s
 ⠿ Container multi-node-nginx-1            Started
  1. Enter the Wazuh Indexer container
root@ip-172-31-86-7:/home/ubuntu/wazuh-docker/single-node# docker exec -it single-node-wazuh.indexer-1 bash
  1. Set the required environment variables to apply the new password
root@ip-172-31-77-204:/home/ubuntu/wazuh-docker/multi-node# docker exec -it multi-node-wazuh1.indexer-1 bash
wazuh-indexer@wazuh1:~$ export INSTALLATION_DIR=/usr/share/wazuh-indexer
wazuh-indexer@wazuh1:~$ CACERT=$INSTALLATION_DIR/certs/root-ca.pem
wazuh-indexer@wazuh1:~$ KEY=$INSTALLATION_DIR/certs/admin-key.pem
wazuh-indexer@wazuh1:~$ CERT=$INSTALLATION_DIR/certs/admin.pem
wazuh-indexer@wazuh1:~$ export JAVA_HOME=/usr/share/wazuh-indexer/jdk
wazuh-indexer@wazuh1:~$ exit
exit
root@ip-172-31-77-204:/home/ubuntu/wazuh-docker/multi-node# docker exec -it multi-node-wazuh2.indexer-1 bash
wazuh-indexer@wazuh2:~$ export INSTALLATION_DIR=/usr/share/wazuh-indexer
wazuh-indexer@wazuh2:~$ CACERT=$INSTALLATION_DIR/certs/root-ca.pem
wazuh-indexer@wazuh2:~$ KEY=$INSTALLATION_DIR/certs/admin-key.pem
wazuh-indexer@wazuh2:~$ CERT=$INSTALLATION_DIR/certs/admin.pem
wazuh-indexer@wazuh2:~$ export JAVA_HOME=/usr/share/wazuh-indexer/jdk
wazuh-indexer@wazuh2:~$ exit
exit
root@ip-172-31-77-204:/home/ubuntu/wazuh-docker/multi-node# docker exec -it multi-node-wazuh3.indexer-1 bash
wazuh-indexer@wazuh3:~$ export INSTALLATION_DIR=/usr/share/wazuh-indexer
wazuh-indexer@wazuh3:~$ CACERT=$INSTALLATION_DIR/certs/root-ca.pem
wazuh-indexer@wazuh3:~$ KEY=$INSTALLATION_DIR/certs/admin-key.pem
wazuh-indexer@wazuh3:~$ CERT=$INSTALLATION_DIR/certs/admin.pem
wazuh-indexer@wazuh3:~$ export JAVA_HOME=/usr/share/wazuh-indexer/jdk
wazuh-indexer@wazuh3:~$ exit
  1. Run the script to apply the changes

Following:

It did not work the solution provided by the issue. Official documentation does not have the accurate information to upgrade multinode password

root@ip-172-31-77-204:/home/ubuntu/wazuh-docker/multi-node# docker exec -it multi-node-wazuh1.indexer-1 bash /usr/share/wazuh-indexer/plugins/opensearch-security/tools/securityadmin.sh -cd /usr/share/wazuh-indexer/opensearch-security/ -nhnv -cacert  $CACERT -cert $CERT -key $KEY -p 9200 -icl 
**************************************************************************
** This tool will be deprecated in the next major release of OpenSearch **
** https://github.com/opensearch-project/security/issues/1755           **
**************************************************************************
WARNING: nor OPENSEARCH_JAVA_HOME nor JAVA_HOME is set, will use 

root@ip-172-31-77-204:/home/ubuntu/wazuh-docker/multi-node# docker exec -it multi-node-wazuh1.indexer-1 bash /usr/share/wazuh-indexer/plugins/opensearch-security/tools/securityadmin.sh -cd /usr/share/wazuh-indexer/opensearch-security/ -nhnv -cacert  $CACERT -cert $CERT -key $KEY -p 9200 -icl -h $HOST
+**************************************************************************
** This tool will be deprecated in the next major release of OpenSearch **
** https://github.com/opensearch-project/security/issues/1755           **
**************************************************************************
+WARNING: nor OPENSEARCH_JAVA_HOME nor JAVA_HOME is set, will use 

root@ip-172-31-77-204:/home/ubuntu/wazuh-docker/multi-node# docker exec -it multi-node-wazuh1.indexer-1 bash /usr/share/wazuh-indexer/plugins/opensearch-security/tools/securityadmin.sh -cd /usr/share/wazuh-indexer/opensearch-security/ -nhnv -cacert  $CACERT -cert $CERT -key $KEY -p 9200 -icl -h wazuh1-indexer
**************************************************************************
** This tool will be deprecated in the next major release of OpenSearch **
** https://github.com/opensearch-project/security/issues/1755           **
**************************************************************************
WARNING: nor OPENSEARCH_JAVA_HOME nor JAVA_HOME is set, will use 

root@ip-172-31-77-204:/home/ubuntu/wazuh-docker/multi-node# docker exec -it multi-node-wazuh1.indexer-1 bash /usr/share/wazuh-indexer/plugins/opensearch-security/tools/securityadmin.sh -cd /usr/share/wazuh-indexer/opensearch-security/ -nhnv -cacert  $CACERT -cert $CERT -key $KEY -p 9200 -icl -h wazuh1-indexer-1
**************************************************************************
** This tool will be deprecated in the next major release of OpenSearch **
** https://github.com/opensearch-project/security/issues/1755           **
**************************************************************************
WARNING: nor OPENSEARCH_JAVA_HOME nor JAVA_HOME is set, will use
Change Wazuh Wazuh API users password 🟢

Pre-check

root@ip-172-31-71-197:/home/ubuntu/wazuh-docker/multi-node# curl -k -X GET "https://ec2-44-210-70-22.compute-1.amazonaws.com:55000/" -H "Authorization: Bearer $(curl -u wazuh-wui:MyS3cr37P450r.*- -k -X POST 'https://ec2-44-210-70-22.compute-1.amazonaws.com:55000/security/user/authenticate?raw=true')"
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100   404  100   404    0     0    561      0 --:--:-- --:--:-- --:--:--   561
{"data": {"title": "Wazuh API REST", "api_version": "4.5.3", "revision": 40506, "license_name": "GPL 2.0", "license_url": "https://github.com/wazuh/wazuh/blob/v4.5.3/LICENSE", "hostname": "wazuh.master", "timestamp": "2023-09-25T09:40:20Z"}, "error": 0}root@ip-172-31-71-197:/home/ubuntu/wazuh-docker/multi-node# curl -k -X GET "https://ec2-44-210-70-22.compute-1.amazonaws.com:55000/" -H "Authorization: Bearer $(curl -u wazuh-wui:MyS3cr37P450r.*- -k -X POST 'https://ec2-44-210-70-22.compute-1.amazonaws.com:55000/security/user/authenticate?raw=true')"
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100   404  100   404    0     0    564      0 --:--:-- --:--:-- --:--:--   565
{"data": {"title": "Wazuh API REST", "api_version": "4.5.3", "revision": 40506, "license_name": "GPL 2.0", "license_url": "https://github.com/wazuh/wazuh/blob/v4.5.3/LICENSE", "hostname": "wazuh.master", "timestamp": "2023-09-25T09:40:25Z"}, "error": 0}root@ip-172-31-71-197:/home/ubuntu/wazuh-docker/multi-node#
  1. Stop the services
root@ip-172-31-71-197:/home/ubuntu/wazuh-docker/multi-node# docker-compose down
[+] Running 8/8
 ⠿ Container multi-node-nginx-1            Removed                                                                                                                                                            0.5s
 ⠿ Container multi-node-wazuh2.indexer-1   Removed                                                                                                                                                            0.8s
 ⠿ Container multi-node-wazuh3.indexer-1   Removed                                                                                                                                                            0.7s
 ⠿ Container multi-node-wazuh.dashboard-1  Removed                                                                                                                                                           10.3s
 ⠿ Container multi-node-wazuh.worker-1     Removed                                                                                                                                                            3.8s
 ⠿ Container multi-node-wazuh1.indexer-1   Removed                                                                                                                                                           10.5s
 ⠿ Container multi-node-wazuh.master-1     Removed                                                                                                                                                            4.0s
 ⠿ Network multi-node_default              Removed                                                                                                                                                            0.3s
  1. Open the file config/wazuh_dashboard/wazuh.yml docker-compose.yml and modify the value of password parameter.
root@ip-172-31-71-197:/home/ubuntu/wazuh-docker/multi-node# nano config/wazuh_dashboard/wazuh.yml
                         
hosts:
      url: "https://wazuh.manager"
      port: 55000
      username: wazuh-wui
      password: "Compostela24:*"
      run_as: false

root@ip-172-31-71-197:/home/ubuntu/wazuh-docker/multi-node# nano docker-compose.yml                                       


  wazuh.master:
    environment:
      - INDEXER_URL=https://wazuh.indexer:9200
      - INDEXER_USERNAME=admin
      - INDEXER_PASSWORD=SecretPassword
      - FILEBEAT_SSL_VERIFICATION_MODE=full
      - SSL_CERTIFICATE_AUTHORITIES=/etc/ssl/root-ca.pem
      - SSL_CERTIFICATE=/etc/ssl/filebeat.pem
      - SSL_KEY=/etc/ssl/filebeat.key
      - API_USERNAME=wazuh-wui
      - API_PASSWORD=Compostela24:*


  wazuh.dashboard:
    image: wazuh/wazuh-dashboard:4.5.3
    hostname: wazuh.dashboard
    restart: always
    ports:
      - 443:5601
    environment:
      - INDEXER_USERNAME=admin
      - INDEXER_PASSWORD=SecretPassword
      - WAZUH_API_URL=https://wazuh.manager
      - DASHBOARD_USERNAME=kibanaserver
      - DASHBOARD_PASSWORD=kibanaserver
      - API_USERNAME=wazuh-wui
      - API_PASSWORD=Compostela24:*
  1. Recreate the Wazuh containers:
root@ip-172-31-71-197:/home/ubuntu/wazuh-docker/multi-node# docker-compose up -d
[+] Running 8/8
 ⠿ Network multi-node_default              Created                                                                                                                                                            0.1s
 ⠿ Container multi-node-wazuh2.indexer-1   Started                                                                                                                                                            0.8s
 ⠿ Container multi-node-wazuh.master-1     Started                                                                                                                                                            1.0s
 ⠿ Container multi-node-wazuh.worker-1     Started                                                                                                                                                            0.9s
 ⠿ Container multi-node-wazuh3.indexer-1   Started                                                                                                                                                            0.8s
 ⠿ Container multi-node-wazuh1.indexer-1   Started                                                                                                                                                            0.9s
 ⠿ Container multi-node-wazuh.dashboard-1  Started                                                                                                                                                            1.4s
 ⠿ Container multi-node-nginx-1            Started
  1. Testing API new password 🟢 :
root@ip-172-31-71-197:/home/ubuntu/wazuh-docker/multi-node# curl -k -X GET "https://ec2-44-210-70-22.compute-1.amazonaws.com:55000/" -H "Authorization: Bearer $(curl -u wazuh-wui:Compostela24:* -k -X POST 'https://ec2-44-210-70-22.compute-1.amazonaws.com:55000/security/user/authenticate?raw=true')"
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100   404  100   404    0     0    501      0 --:--:-- --:--:-- --:--:--   501
{"data": {"title": "Wazuh API REST", "api_version": "4.5.3", "revision": 40506, "license_name": "GPL 2.0", "license_url": "https://github.com/wazuh/wazuh/blob/v4.5.3/LICENSE", "hostname": "wazuh.master", "timestamp": "2023-09-25T09:48:05Z"}, "error": 0}root@ip-172-31-71-197:/home/ubuntu/wazuh-docker/multi-node#

This was referenced Sep 25, 2023
Closed
Closed
@gdiazlo
Copy link
Member

gdiazlo commented Sep 25, 2023

I believe the logs for dashboard and indexer in docker can be checked using the docker logs command instead of checking the usual log files.

The logs from dashboard and indexer should lead us to the error in the procedure. Can you please share them in the issue?

@pro-akim
Copy link
Member

pro-akim commented Sep 25, 2023 •
edited

Update

@gdiazlo, attaching logs:

Docker logs:

Dashboard 
root@ip-172-31-94-119:/home/ubuntu/wazuh-docker/single-node# docker logs single-node-wazuh.dashboard-1
Created OpenSearch Dashboards keystore in /usr/share/wazuh-dashboard/config/opensearch_dashboards.keystore
Wazuh APP already configured
{"type":"log","@timestamp":"2023-09-25T14:23:35Z","tags":["info","plugins-service"],"pid":39,"message":"Plugin \"dataSourceManagement\" has been disabled since the following direct or transitive dependencies are missing or disabled: [dataSource]"}
{"type":"log","@timestamp":"2023-09-25T14:23:35Z","tags":["info","plugins-service"],"pid":39,"message":"Plugin \"dataSource\" is disabled."}
{"type":"log","@timestamp":"2023-09-25T14:23:35Z","tags":["info","plugins-service"],"pid":39,"message":"Plugin \"visTypeXy\" is disabled."}
{"type":"log","@timestamp":"2023-09-25T14:23:35Z","tags":["info","plugins-service"],"pid":39,"message":"Plugin \"mlCommonsDashboards\" is disabled."}
{"type":"log","@timestamp":"2023-09-25T14:23:35Z","tags":["warning","config","deprecation"],"pid":39,"message":"\"opensearch.requestHeadersWhitelist\" is deprecated and has been replaced by \"opensearch.requestHeadersAllowlist\""}
{"type":"log","@timestamp":"2023-09-25T14:23:35Z","tags":["info","plugins-system"],"pid":39,"message":"Setting up [45] plugins: [alertingDashboards,usageCollection,opensearchDashboardsUsageCollection,opensearchDashboardsLegacy,mapsLegacy,share,opensearchUiShared,legacyExport,embeddable,expressions,data,home,console,apmOss,management,indexPatternManagement,advancedSettings,savedObjects,reportsDashboards,indexManagementDashboards,dashboard,visualizations,visTypeVega,visTypeTimeline,timeline,visTypeTable,visTypeMarkdown,visBuilder,tileMap,regionMap,customImportMapDashboards,inputControlVis,ganttChartDashboards,visualize,notificationsDashboards,charts,visTypeVislib,visTypeTimeseries,visTypeTagcloud,visTypeMetric,discover,savedObjectsManagement,securityDashboards,wazuh,bfetch]"}
{"type":"log","@timestamp":"2023-09-25T14:23:37Z","tags":["info","savedobjects-service"],"pid":39,"message":"Waiting until all OpenSearch nodes are compatible with OpenSearch Dashboards before starting saved objects migrations..."}
{"type":"log","@timestamp":"2023-09-25T14:23:37Z","tags":["error","opensearch","data"],"pid":39,"message":"[ConnectionError]: connect ECONNREFUSED 172.19.0.2:9200"}
{"type":"log","@timestamp":"2023-09-25T14:23:37Z","tags":["error","savedobjects-service"],"pid":39,"message":"Unable to retrieve version information from OpenSearch nodes."}
{"type":"log","@timestamp":"2023-09-25T14:23:39Z","tags":["error","opensearch","data"],"pid":39,"message":"[ConnectionError]: connect ECONNREFUSED 172.19.0.2:9200"}
{"type":"log","@timestamp":"2023-09-25T14:23:42Z","tags":["error","opensearch","data"],"pid":39,"message":"[ConnectionError]: connect ECONNREFUSED 172.19.0.2:9200"}
{"type":"log","@timestamp":"2023-09-25T14:23:44Z","tags":["error","opensearch","data"],"pid":39,"message":"[ConnectionError]: connect ECONNREFUSED 172.19.0.2:9200"}
{"type":"log","@timestamp":"2023-09-25T14:23:47Z","tags":["error","opensearch","data"],"pid":39,"message":"[ConnectionError]: connect ECONNREFUSED 172.19.0.2:9200"}
{"type":"log","@timestamp":"2023-09-25T14:23:49Z","tags":["error","opensearch","data"],"pid":39,"message":"[ConnectionError]: connect ECONNREFUSED 172.19.0.2:9200"}
{"type":"log","@timestamp":"2023-09-25T14:23:52Z","tags":["error","opensearch","data"],"pid":39,"message":"[ConnectionError]: connect ECONNREFUSED 172.19.0.2:9200"}
{"type":"log","@timestamp":"2023-09-25T14:23:54Z","tags":["error","opensearch","data"],"pid":39,"message":"[ConnectionError]: connect ECONNREFUSED 172.19.0.2:9200"}
{"type":"log","@timestamp":"2023-09-25T14:23:57Z","tags":["error","opensearch","data"],"pid":39,"message":"[ConnectionError]: connect ECONNREFUSED 172.19.0.2:9200"}
{"type":"log","@timestamp":"2023-09-25T14:23:59Z","tags":["error","opensearch","data"],"pid":39,"message":"[ConnectionError]: connect ECONNREFUSED 172.19.0.2:9200"}
{"type":"log","@timestamp":"2023-09-25T14:24:02Z","tags":["error","opensearch","data"],"pid":39,"message":"[ConnectionError]: connect ECONNREFUSED 172.19.0.2:9200"}
{"type":"log","@timestamp":"2023-09-25T14:24:04Z","tags":["error","opensearch","data"],"pid":39,"message":"[ConnectionError]: connect ECONNREFUSED 172.19.0.2:9200"}
{"type":"log","@timestamp":"2023-09-25T14:24:07Z","tags":["error","opensearch","data"],"pid":39,"message":"[ConnectionError]: connect ECONNREFUSED 172.19.0.2:9200"}
{"type":"log","@timestamp":"2023-09-25T14:24:09Z","tags":["error","opensearch","data"],"pid":39,"message":"[ConnectionError]: connect ECONNREFUSED 172.19.0.2:9200"}
{"type":"log","@timestamp":"2023-09-25T14:24:12Z","tags":["error","opensearch","data"],"pid":39,"message":"[ConnectionError]: connect ECONNREFUSED 172.19.0.2:9200"}
{"type":"log","@timestamp":"2023-09-25T14:24:14Z","tags":["error","opensearch","data"],"pid":39,"message":"[ConnectionError]: connect ECONNREFUSED 172.19.0.2:9200"}
{"type":"log","@timestamp":"2023-09-25T14:24:17Z","tags":["error","opensearch","data"],"pid":39,"message":"[ResponseError]: Response Error"}
{"type":"log","@timestamp":"2023-09-25T14:24:20Z","tags":["error","opensearch","data"],"pid":39,"message":"[ResponseError]: Response Error"}
{"type":"log","@timestamp":"2023-09-25T14:24:22Z","tags":["error","opensearch","data"],"pid":39,"message":"[ResponseError]: Response Error"}
{"type":"log","@timestamp":"2023-09-25T14:24:25Z","tags":["error","opensearch","data"],"pid":39,"message":"[ResponseError]: Response Error"}
{"type":"log","@timestamp":"2023-09-25T14:24:27Z","tags":["error","opensearch","data"],"pid":39,"message":"[ResponseError]: Response Error"}
{"type":"log","@timestamp":"2023-09-25T14:24:30Z","tags":["error","opensearch","data"],"pid":39,"message":"[ResponseError]: Response Error"}
{"type":"log","@timestamp":"2023-09-25T14:24:32Z","tags":["error","opensearch","data"],"pid":39,"message":"[ResponseError]: Response Error"}
{"type":"log","@timestamp":"2023-09-25T14:24:35Z","tags":["error","opensearch","data"],"pid":39,"message":"[ResponseError]: Response Error"}
{"type":"log","@timestamp":"2023-09-25T14:24:37Z","tags":["error","opensearch","data"],"pid":39,"message":"[ResponseError]: Response Error"}
{"type":"log","@timestamp":"2023-09-25T14:24:40Z","tags":["error","opensearch","data"],"pid":39,"message":"[ResponseError]: Response Error"}
{"type":"log","@timestamp":"2023-09-25T14:24:42Z","tags":["error","opensearch","data"],"pid":39,"message":"[ResponseError]: Response Error"}
{"type":"log","@timestamp":"2023-09-25T14:24:45Z","tags":["error","opensearch","data"],"pid":39,"message":"[ResponseError]: Response Error"}
{"type":"log","@timestamp":"2023-09-25T14:24:47Z","tags":["error","opensearch","data"],"pid":39,"message":"[ResponseError]: Response Error"}
{"type":"log","@timestamp":"2023-09-25T14:24:50Z","tags":["error","opensearch","data"],"pid":39,"message":"[ResponseError]: Response Error"}
{"type":"log","@timestamp":"2023-09-25T14:24:52Z","tags":["error","opensearch","data"],"pid":39,"message":"[ResponseError]: Response Error"}
{"type":"log","@timestamp":"2023-09-25T14:24:55Z","tags":["info","savedobjects-service"],"pid":39,"message":"Starting saved objects migrations"}
{"type":"log","@timestamp":"2023-09-25T14:24:55Z","tags":["info","plugins-system"],"pid":39,"message":"Starting [45] plugins: [alertingDashboards,usageCollection,opensearchDashboardsUsageCollection,opensearchDashboardsLegacy,mapsLegacy,share,opensearchUiShared,legacyExport,embeddable,expressions,data,home,console,apmOss,management,indexPatternManagement,advancedSettings,savedObjects,reportsDashboards,indexManagementDashboards,dashboard,visualizations,visTypeVega,visTypeTimeline,timeline,visTypeTable,visTypeMarkdown,visBuilder,tileMap,regionMap,customImportMapDashboards,inputControlVis,ganttChartDashboards,visualize,notificationsDashboards,charts,visTypeVislib,visTypeTimeseries,visTypeTagcloud,visTypeMetric,discover,savedObjectsManagement,securityDashboards,wazuh,bfetch]"}
{"type":"log","@timestamp":"2023-09-25T14:24:56Z","tags":["listening","info"],"pid":39,"message":"Server running at https://0.0.0.0:5601"}
{"type":"log","@timestamp":"2023-09-25T14:24:56Z","tags":["info","http","server","OpenSearchDashboards"],"pid":39,"message":"http server running at https://0.0.0.0:5601"}
{"type":"log","@timestamp":"2023-09-25T14:24:58Z","tags":["error","http","server","OpenSearchDashboards"],"pid":39,"message":"Error: Authentication Exception\n    at SecurityClient.authinfo (/usr/share/wazuh-dashboard/plugins/securityDashboards/server/backend/opensearch_security_client.ts:115:13)\n    at processTicksAndRejections (internal/process/task_queues.js:95:5)\n    at /usr/share/wazuh-dashboard/plugins/securityDashboards/server/auth/types/authentication_type.ts:208:18\n    at Object.interceptAuth [as authenticate] (/usr/share/wazuh-dashboard/src/core/server/http/lifecycle/auth.js:112:22)\n    at exports.Manager.execute (/usr/share/wazuh-dashboard/node_modules/@hapi/hapi/lib/toolkit.js:60:28)\n    at module.exports.internals.Auth._authenticate (/usr/share/wazuh-dashboard/node_modules/@hapi/hapi/lib/auth.js:273:30)\n    at Request._lifecycle (/usr/share/wazuh-dashboard/node_modules/@hapi/hapi/lib/request.js:371:32)\n    at Request._execute (/usr/share/wazuh-dashboard/node_modules/@hapi/hapi/lib/request.js:281:9)"}
{"type":"error","@timestamp":"2023-09-25T14:24:57Z","tags":[],"pid":39,"level":"error","error":{"message":"Internal Server Error","name":"Error","stack":"Error: Internal Server Error\n    at HapiResponseAdapter.toInternalError (/usr/share/wazuh-dashboard/src/core/server/http/router/response_adapter.js:80:19)\n    at Object.interceptAuth [as authenticate] (/usr/share/wazuh-dashboard/src/core/server/http/lifecycle/auth.js:151:34)\n    at processTicksAndRejections (internal/process/task_queues.js:95:5)\n    at exports.Manager.execute (/usr/share/wazuh-dashboard/node_modules/@hapi/hapi/lib/toolkit.js:60:28)\n    at module.exports.internals.Auth._authenticate (/usr/share/wazuh-dashboard/node_modules/@hapi/hapi/lib/auth.js:273:30)\n    at Request._lifecycle (/usr/share/wazuh-dashboard/node_modules/@hapi/hapi/lib/request.js:371:32)\n    at Request._execute (/usr/share/wazuh-dashboard/node_modules/@hapi/hapi/lib/request.js:281:9)"},"url":"https://ec2-54-157-197-54.compute-1.amazonaws.com/app/wazuh","message":"Internal Server Error"}
{"type":"response","@timestamp":"2023-09-25T14:24:57Z","tags":[],"pid":39,"method":"get","statusCode":500,"req":{"url":"/app/wazuh","method":"get","headers":{"host":"ec2-54-157-197-54.compute-1.amazonaws.com","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/117.0","accept":"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate, br","connection":"keep-alive","upgrade-insecure-requests":"1","sec-fetch-dest":"document","sec-fetch-mode":"navigate","sec-fetch-site":"none","sec-fetch-user":"?1"},"remoteAddress":"90.168.145.212","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/117.0"},"res":{"statusCode":500,"responseTime":443,"contentLength":9},"message":"GET /app/wazuh 500 443ms - 9.0B"}
{"type":"log","@timestamp":"2023-09-25T14:25:00Z","tags":["error","http","server","OpenSearchDashboards"],"pid":39,"message":"Error: Authentication Exception\n    at SecurityClient.authinfo (/usr/share/wazuh-dashboard/plugins/securityDashboards/server/backend/opensearch_security_client.ts:115:13)\n    at processTicksAndRejections (internal/process/task_queues.js:95:5)\n    at /usr/share/wazuh-dashboard/plugins/securityDashboards/server/auth/types/authentication_type.ts:208:18\n    at Object.interceptAuth [as authenticate] (/usr/share/wazuh-dashboard/src/core/server/http/lifecycle/auth.js:112:22)\n    at exports.Manager.execute (/usr/share/wazuh-dashboard/node_modules/@hapi/hapi/lib/toolkit.js:60:28)\n    at module.exports.internals.Auth._authenticate (/usr/share/wazuh-dashboard/node_modules/@hapi/hapi/lib/auth.js:273:30)\n    at Request._lifecycle (/usr/share/wazuh-dashboard/node_modules/@hapi/hapi/lib/request.js:371:32)\n    at Request._execute (/usr/share/wazuh-dashboard/node_modules/@hapi/hapi/lib/request.js:281:9)"}
{"type":"error","@timestamp":"2023-09-25T14:25:00Z","tags":[],"pid":39,"level":"error","error":{"message":"Internal Server Error","name":"Error","stack":"Error: Internal Server Error\n    at HapiResponseAdapter.toInternalError (/usr/share/wazuh-dashboard/src/core/server/http/router/response_adapter.js:80:19)\n    at Object.interceptAuth [as authenticate] (/usr/share/wazuh-dashboard/src/core/server/http/lifecycle/auth.js:151:34)\n    at processTicksAndRejections (internal/process/task_queues.js:95:5)\n    at exports.Manager.execute (/usr/share/wazuh-dashboard/node_modules/@hapi/hapi/lib/toolkit.js:60:28)\n    at module.exports.internals.Auth._authenticate (/usr/share/wazuh-dashboard/node_modules/@hapi/hapi/lib/auth.js:273:30)\n    at Request._lifecycle (/usr/share/wazuh-dashboard/node_modules/@hapi/hapi/lib/request.js:371:32)\n    at Request._execute (/usr/share/wazuh-dashboard/node_modules/@hapi/hapi/lib/request.js:281:9)"},"url":"https://ec2-54-157-197-54.compute-1.amazonaws.com/app/wazuh","message":"Internal Server Error"}
{"type":"response","@timestamp":"2023-09-25T14:25:00Z","tags":[],"pid":39,"method":"get","statusCode":500,"req":{"url":"/app/wazuh","method":"get","headers":{"host":"ec2-54-157-197-54.compute-1.amazonaws.com","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/117.0","accept":"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate, br","connection":"keep-alive","upgrade-insecure-requests":"1","sec-fetch-dest":"document","sec-fetch-mode":"navigate","sec-fetch-site":"none","sec-fetch-user":"?1"},"remoteAddress":"90.168.145.212","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/117.0"},"res":{"statusCode":500,"responseTime":367,"contentLength":9},"message":"GET /app/wazuh 500 367ms - 9.0B"}
{"type":"log","@timestamp":"2023-09-25T14:25:01Z","tags":["error","http","server","OpenSearchDashboards"],"pid":39,"message":"Error: Authentication Exception\n    at SecurityClient.authinfo (/usr/share/wazuh-dashboard/plugins/securityDashboards/server/backend/opensearch_security_client.ts:115:13)\n    at processTicksAndRejections (internal/process/task_queues.js:95:5)\n    at /usr/share/wazuh-dashboard/plugins/securityDashboards/server/auth/types/authentication_type.ts:208:18\n    at Object.interceptAuth [as authenticate] (/usr/share/wazuh-dashboard/src/core/server/http/lifecycle/auth.js:112:22)\n    at exports.Manager.execute (/usr/share/wazuh-dashboard/node_modules/@hapi/hapi/lib/toolkit.js:60:28)\n    at module.exports.internals.Auth._authenticate (/usr/share/wazuh-dashboard/node_modules/@hapi/hapi/lib/auth.js:273:30)\n    at Request._lifecycle (/usr/share/wazuh-dashboard/node_modules/@hapi/hapi/lib/request.js:371:32)\n    at Request._execute (/usr/share/wazuh-dashboard/node_modules/@hapi/hapi/lib/request.js:281:9)"}
{"type":"error","@timestamp":"2023-09-25T14:25:01Z","tags":[],"pid":39,"level":"error","error":{"message":"Internal Server Error","name":"Error","stack":"Error: Internal Server Error\n    at HapiResponseAdapter.toInternalError (/usr/share/wazuh-dashboard/src/core/server/http/router/response_adapter.js:80:19)\n    at Object.interceptAuth [as authenticate] (/usr/share/wazuh-dashboard/src/core/server/http/lifecycle/auth.js:151:34)\n    at processTicksAndRejections (internal/process/task_queues.js:95:5)\n    at exports.Manager.execute (/usr/share/wazuh-dashboard/node_modules/@hapi/hapi/lib/toolkit.js:60:28)\n    at module.exports.internals.Auth._authenticate (/usr/share/wazuh-dashboard/node_modules/@hapi/hapi/lib/auth.js:273:30)\n    at Request._lifecycle (/usr/share/wazuh-dashboard/node_modules/@hapi/hapi/lib/request.js:371:32)\n    at Request._execute (/usr/share/wazuh-dashboard/node_modules/@hapi/hapi/lib/request.js:281:9)"},"url":"https://ec2-54-157-197-54.compute-1.amazonaws.com/app/wazuh","message":"Internal Server Error"}
{"type":"response","@timestamp":"2023-09-25T14:25:01Z","tags":[],"pid":39,"method":"get","statusCode":500,"req":{"url":"/app/wazuh","method":"get","headers":{"host":"ec2-54-157-197-54.compute-1.amazonaws.com","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/117.0","accept":"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate, br","connection":"keep-alive","upgrade-insecure-requests":"1","sec-fetch-dest":"document","sec-fetch-mode":"navigate","sec-fetch-site":"none","sec-fetch-user":"?1"},"remoteAddress":"90.168.145.212","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/117.0"},"res":{"statusCode":500,"responseTime":362,"contentLength":9},"message":"GET /app/wazuh 500 362ms - 9.0B"}
{"type":"log","@timestamp":"2023-09-25T14:25:25Z","tags":["error","http","server","OpenSearchDashboards"],"pid":39,"message":"Error: Authentication Exception\n    at SecurityClient.authinfo (/usr/share/wazuh-dashboard/plugins/securityDashboards/server/backend/opensearch_security_client.ts:115:13)\n    at processTicksAndRejections (internal/process/task_queues.js:95:5)\n    at /usr/share/wazuh-dashboard/plugins/securityDashboards/server/auth/types/authentication_type.ts:208:18\n    at Object.interceptAuth [as authenticate] (/usr/share/wazuh-dashboard/src/core/server/http/lifecycle/auth.js:112:22)\n    at exports.Manager.execute (/usr/share/wazuh-dashboard/node_modules/@hapi/hapi/lib/toolkit.js:60:28)\n    at module.exports.internals.Auth._authenticate (/usr/share/wazuh-dashboard/node_modules/@hapi/hapi/lib/auth.js:273:30)\n    at Request._lifecycle (/usr/share/wazuh-dashboard/node_modules/@hapi/hapi/lib/request.js:371:32)\n    at Request._execute (/usr/share/wazuh-dashboard/node_modules/@hapi/hapi/lib/request.js:281:9)"}
{"type":"error","@timestamp":"2023-09-25T14:25:24Z","tags":[],"pid":39,"level":"error","error":{"message":"Internal Server Error","name":"Error","stack":"Error: Internal Server Error\n    at HapiResponseAdapter.toInternalError (/usr/share/wazuh-dashboard/src/core/server/http/router/response_adapter.js:80:19)\n    at Object.interceptAuth [as authenticate] (/usr/share/wazuh-dashboard/src/core/server/http/lifecycle/auth.js:151:34)\n    at processTicksAndRejections (internal/process/task_queues.js:95:5)\n    at exports.Manager.execute (/usr/share/wazuh-dashboard/node_modules/@hapi/hapi/lib/toolkit.js:60:28)\n    at module.exports.internals.Auth._authenticate (/usr/share/wazuh-dashboard/node_modules/@hapi/hapi/lib/auth.js:273:30)\n    at Request._lifecycle (/usr/share/wazuh-dashboard/node_modules/@hapi/hapi/lib/request.js:371:32)\n    at Request._execute (/usr/share/wazuh-dashboard/node_modules/@hapi/hapi/lib/request.js:281:9)"},"url":"https://ec2-54-157-197-54.compute-1.amazonaws.com/app/wazuh","message":"Internal Server Error"}
{"type":"response","@timestamp":"2023-09-25T14:25:24Z","tags":[],"pid":39,"method":"get","statusCode":500,"req":{"url":"/app/wazuh","method":"get","headers":{"host":"ec2-54-157-197-54.compute-1.amazonaws.com","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/117.0","accept":"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate, br","connection":"keep-alive","upgrade-insecure-requests":"1","sec-fetch-dest":"document","sec-fetch-mode":"navigate","sec-fetch-site":"none","sec-fetch-user":"?1"},"remoteAddress":"90.168.145.212","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/117.0"},"res":{"statusCode":500,"responseTime":461,"contentLength":9},"message":"GET /app/wazuh 500 461ms - 9.0B"}

@pro-akim
Copy link
Member

pro-akim commented Sep 25, 2023 •
edited

Update

Docker logs:

Manager 
[s6-init] making user provided files available at /var/run/s6/etc...exited 0.
[s6-init] ensuring user provided files have correct perms...exited 0.
[fix-attrs.d] applying ownership & permissions fixes...
[fix-attrs.d] done.
[cont-init.d] executing container initialization scripts...
[cont-init.d] 0-wazuh-init: executing... 
/var/ossec/data_tmp/permanent/var/ossec/api/configuration/
The path /var/ossec/api/configuration is already mounted
/var/ossec/data_tmp/permanent/var/ossec/etc/
The path /var/ossec/etc is already mounted
/var/ossec/data_tmp/permanent/var/ossec/logs/
The path /var/ossec/logs is already mounted
/var/ossec/data_tmp/permanent/var/ossec/queue/
The path /var/ossec/queue is already mounted
/var/ossec/data_tmp/permanent/var/ossec/agentless/
The path /var/ossec/agentless is already mounted
/var/ossec/data_tmp/permanent/var/ossec/var/multigroups/
The path /var/ossec/var/multigroups is empty, skiped
/var/ossec/data_tmp/permanent/var/ossec/integrations/
The path /var/ossec/integrations is already mounted
/var/ossec/data_tmp/permanent/var/ossec/active-response/bin/
The path /var/ossec/active-response/bin is already mounted
/var/ossec/data_tmp/permanent/var/ossec/wodles/
The path /var/ossec/wodles is already mounted
/var/ossec/data_tmp/permanent/etc/filebeat/
The path /etc/filebeat is already mounted
Updating /var/ossec/etc/internal_options.conf
Updating /var/ossec/integrations/pagerduty
Updating /var/ossec/integrations/slack
Updating /var/ossec/integrations/slack.py
Updating /var/ossec/integrations/virustotal
Updating /var/ossec/integrations/virustotal.py
Updating /var/ossec/integrations/shuffle
Updating /var/ossec/integrations/shuffle.py
Updating /var/ossec/active-response/bin/default-firewall-drop
Updating /var/ossec/active-response/bin/disable-account
Updating /var/ossec/active-response/bin/firewalld-drop
Updating /var/ossec/active-response/bin/firewall-drop
Updating /var/ossec/active-response/bin/host-deny
Updating /var/ossec/active-response/bin/ip-customblock
Updating /var/ossec/active-response/bin/ipfw
Updating /var/ossec/active-response/bin/kaspersky.py
Updating /var/ossec/active-response/bin/kaspersky
Updating /var/ossec/active-response/bin/npf
Updating /var/ossec/active-response/bin/wazuh-slack
Updating /var/ossec/active-response/bin/pf
Updating /var/ossec/active-response/bin/restart-wazuh
Updating /var/ossec/active-response/bin/restart.sh
Updating /var/ossec/active-response/bin/route-null
Updating /var/ossec/agentless/sshlogin.exp
Updating /var/ossec/agentless/ssh_pixconfig_diff
Updating /var/ossec/agentless/ssh_asa-fwsmconfig_diff
Updating /var/ossec/agentless/ssh_integrity_check_bsd
Updating /var/ossec/agentless/main.exp
Updating /var/ossec/agentless/su.exp
Updating /var/ossec/agentless/ssh_integrity_check_linux
Updating /var/ossec/agentless/register_host.sh
Updating /var/ossec/agentless/ssh_generic_diff
Updating /var/ossec/agentless/ssh_foundry_diff
Updating /var/ossec/agentless/ssh_nopass.exp
Updating /var/ossec/agentless/ssh.exp
Updating /var/ossec/wodles/utils.py
Updating /var/ossec/wodles/aws/aws-s3
Updating /var/ossec/wodles/aws/aws-s3.py
Updating /var/ossec/wodles/azure/azure-logs
Updating /var/ossec/wodles/azure/azure-logs.py
Updating /var/ossec/wodles/docker/DockerListener
Updating /var/ossec/wodles/docker/DockerListener.py
Updating /var/ossec/wodles/gcloud/gcloud
Updating /var/ossec/wodles/gcloud/gcloud.py
Updating /var/ossec/wodles/gcloud/integration.py
Updating /var/ossec/wodles/gcloud/tools.py
Identified Wazuh configuration files to mount...
'/wazuh-config-mount/etc/ossec.conf' -> '/var/ossec/etc/ossec.conf'
[cont-init.d] 0-wazuh-init: exited 0.
[cont-init.d] 1-config-filebeat: executing... 
[cont-init.d] 1-config-filebeat: exited 0.
[cont-init.d] 2-manager: executing... 
Starting Wazuh v4.5.3...
Started wazuh-apid...
Started wazuh-csyslogd...
Started wazuh-dbd...
Started wazuh-integratord...
Started wazuh-agentlessd...
Started wazuh-authd...
Started wazuh-db...
Started wazuh-execd...
Started wazuh-analysisd...
Started wazuh-syscheckd...
Started wazuh-remoted...
Started wazuh-logcollector...
Started wazuh-monitord...
Started wazuh-modulesd...
Completed.
[cont-init.d] 2-manager: exited 0.
[cont-init.d] done.
[services.d] starting services
2023/09/25 14:23:56 sca: INFO: Loaded policy '/var/ossec/ruleset/sca/cis_ubuntu20-04.yml'
2023/09/25 14:23:56 sca: INFO: Starting Security Configuration Assessment scan.
2023/09/25 14:23:56 wazuh-modulesd:control: INFO: Starting control thread.
2023/09/25 14:23:56 wazuh-modulesd:download: INFO: Module started.
2023/09/25 14:23:56 wazuh-modulesd:task-manager: INFO: (8200): Module Task Manager started.
2023/09/25 14:23:56 wazuh-modulesd:syscollector: INFO: Module started.
2023/09/25 14:23:56 wazuh-modulesd:syscollector: INFO: Starting evaluation.
2023/09/25 14:23:56 sca: INFO: Starting evaluation of policy: '/var/ossec/ruleset/sca/cis_ubuntu20-04.yml'
2023/09/25 14:23:56 wazuh-modulesd:syscollector: INFO: Evaluation finished.
2023/09/25 14:23:57 wazuh-syscheckd: INFO: (6009): File integrity monitoring scan ended.
[services.d] done.
2023/09/25 14:24:11 sca: INFO: Evaluation finished for policy '/var/ossec/ruleset/sca/cis_ubuntu20-04.yml'
2023/09/25 14:24:11 sca: INFO: Security Configuration Assessment scan finished. Duration: 15 seconds.
2023/09/25 14:24:20 rootcheck: INFO: Ending rootcheck scan.
Indexer 
[2023-09-25T14:23:33,212][INFO ][o.o.n.Node               ] [wazuh.indexer] version[2.6.0], pid[1], build[rpm/7203a5af21a8a009aece1474446b437a3c674db6/2023-02-24T18:57:04.388618985Z], OS[Linux/5.19.0-1025-aws/amd64], JVM[Eclipse Adoptium/OpenJDK 64-Bit Server VM/17.0.6/17.0.6+10]
[2023-09-25T14:23:33,223][INFO ][o.o.n.Node               ] [wazuh.indexer] JVM home [/usr/share/wazuh-indexer/jdk], using bundled JDK [true]
[2023-09-25T14:23:33,229][INFO ][o.o.n.Node               ] [wazuh.indexer] JVM arguments [-Xshare:auto, -Dopensearch.networkaddress.cache.ttl=60, -Dopensearch.networkaddress.cache.negative.ttl=10, -XX:+AlwaysPreTouch, -Xss1m, -Djava.awt.headless=true, -Dfile.encoding=UTF-8, -Djna.nosys=true, -XX:-OmitStackTraceInFastThrow, -XX:+ShowCodeDetailsInExceptionMessages, -Dio.netty.noUnsafe=true, -Dio.netty.noKeySetOptimization=true, -Dio.netty.recycler.maxCapacityPerThread=0, -Dio.netty.allocator.numDirectArenas=0, -Dlog4j.shutdownHookEnabled=false, -Dlog4j2.disable.jmx=true, -Djava.locale.providers=SPI,COMPAT, -XX:+UseG1GC, -XX:G1ReservePercent=25, -XX:InitiatingHeapOccupancyPercent=30, -Djava.io.tmpdir=/tmp/opensearch-14367554318238361272, -XX:+HeapDumpOnOutOfMemoryError, -XX:HeapDumpPath=/var/lib/wazuh-indexer, -XX:ErrorFile=/var/log/wazuh-indexer/hs_err_pid%p.log, -Xlog:gc*,gc+age=trace,safepoint:file=/var/log/wazuh-indexer/gc.log:utctime,pid,tags:filecount=32,filesize=64m, -Dclk.tck=100, -Djdk.attach.allowAttachSelf=true, -Djava.security.policy=file:///etc/wazuh-indexer/opensearch-performance-analyzer/opensearch_security.policy, --add-opens=jdk.attach/sun.tools.attach=ALL-UNNAMED, -Xms512m, -Xmx512m, -XX:MaxDirectMemorySize=268435456, -Dopensearch.path.home=/usr/share/wazuh-indexer, -Dopensearch.path.conf=/usr/share/wazuh-indexer, -Dopensearch.distribution.type=rpm, -Dopensearch.bundled_jdk=true]
[2023-09-25T14:23:38,176][WARN ][stderr                   ] [wazuh.indexer] SLF4J: Failed to load class "org.slf4j.impl.StaticLoggerBinder".
[2023-09-25T14:23:38,178][WARN ][stderr                   ] [wazuh.indexer] SLF4J: Defaulting to no-operation (NOP) logger implementation
[2023-09-25T14:23:38,186][WARN ][stderr                   ] [wazuh.indexer] SLF4J: See http://www.slf4j.org/codes.html#StaticLoggerBinder for further details.
[2023-09-25T14:23:38,240][INFO ][o.o.s.s.t.SSLConfig      ] [wazuh.indexer] SSL dual mode is disabled
[2023-09-25T14:23:38,241][INFO ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] OpenSearch Config path is /usr/share/wazuh-indexer
[2023-09-25T14:23:39,172][INFO ][o.o.s.s.DefaultSecurityKeyStore] [wazuh.indexer] JVM supports TLSv1.3
[2023-09-25T14:23:39,182][INFO ][o.o.s.s.DefaultSecurityKeyStore] [wazuh.indexer] Config directory is /usr/share/wazuh-indexer/, from there the key- and truststore files are resolved relatively
[2023-09-25T14:23:41,083][INFO ][o.o.s.s.DefaultSecurityKeyStore] [wazuh.indexer] TLS Transport Client Provider : JDK
[2023-09-25T14:23:41,084][INFO ][o.o.s.s.DefaultSecurityKeyStore] [wazuh.indexer] TLS Transport Server Provider : JDK
[2023-09-25T14:23:41,085][INFO ][o.o.s.s.DefaultSecurityKeyStore] [wazuh.indexer] TLS HTTP Provider             : JDK
[2023-09-25T14:23:41,086][INFO ][o.o.s.s.DefaultSecurityKeyStore] [wazuh.indexer] Enabled TLS protocols for transport layer : [TLSv1.3, TLSv1.2]
[2023-09-25T14:23:41,086][INFO ][o.o.s.s.DefaultSecurityKeyStore] [wazuh.indexer] Enabled TLS protocols for HTTP layer      : [TLSv1.3, TLSv1.2]
[2023-09-25T14:23:41,129][INFO ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] Clustername: opensearch
[2023-09-25T14:23:41,415][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] Directory /usr/share/wazuh-indexer/.cache has insecure file permissions (should be 0700)
[2023-09-25T14:23:41,416][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] Directory /usr/share/wazuh-indexer/.cache/JNA has insecure file permissions (should be 0700)
[2023-09-25T14:23:41,417][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] Directory /usr/share/wazuh-indexer/.cache/JNA/temp has insecure file permissions (should be 0700)
[2023-09-25T14:23:41,418][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/opensearch.yml has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,418][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] Directory /usr/share/wazuh-indexer/logs has insecure file permissions (should be 0700)
[2023-09-25T14:23:41,420][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] Directory /usr/share/wazuh-indexer/performance-analyzer-rca has insecure file permissions (should be 0700)
[2023-09-25T14:23:41,422][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] Directory /usr/share/wazuh-indexer/performance-analyzer-rca/config has insecure file permissions (should be 0700)
[2023-09-25T14:23:41,422][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/performance-analyzer-rca/config/rca_idle_cluster_manager.conf has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,423][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/performance-analyzer-rca/config/log4j2.xml has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,424][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/performance-analyzer-rca/config/plugin-stats-metadata has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,425][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/performance-analyzer-rca/config/opensearch_security.policy has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,425][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/performance-analyzer-rca/config/rca.conf has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,427][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/performance-analyzer-rca/config/performance-analyzer.properties has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,428][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/performance-analyzer-rca/config/supervisord.conf has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,428][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/performance-analyzer-rca/config/rca_cluster_manager.conf has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,429][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/performance-analyzer-rca/config/agent-stats-metadata has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,429][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] Directory /usr/share/wazuh-indexer/performance-analyzer-rca/lib has insecure file permissions (should be 0700)
[2023-09-25T14:23:41,430][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/performance-analyzer-rca/lib/jackson-databind-2.14.1.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,431][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/performance-analyzer-rca/lib/failureaccess-1.0.1.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,431][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/performance-analyzer-rca/lib/error_prone_annotations-2.14.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,432][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/performance-analyzer-rca/lib/netty-resolver-4.1.86.Final.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,433][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/performance-analyzer-rca/lib/perfmark-api-0.25.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,434][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/performance-analyzer-rca/lib/log4j-api-2.17.1.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,443][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/performance-analyzer-rca/lib/netty-buffer-4.1.86.Final.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,444][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/performance-analyzer-rca/lib/bcutil-jdk15on-1.70.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,445][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/performance-analyzer-rca/lib/jackson-annotations-2.14.1.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,447][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/performance-analyzer-rca/lib/grpc-core-1.52.1.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,448][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/performance-analyzer-rca/lib/jooq-3.10.8.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,449][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/performance-analyzer-rca/lib/javax.annotation-api-1.3.2.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,450][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/performance-analyzer-rca/lib/netty-handler-proxy-4.1.86.Final.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,451][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/performance-analyzer-rca/lib/protobuf-java-3.21.12.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,452][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/performance-analyzer-rca/lib/netty-transport-native-unix-common-4.1.86.Final.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,453][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/performance-analyzer-rca/lib/netty-common-4.1.86.Final.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,453][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/performance-analyzer-rca/lib/bcpkix-jdk15on-1.70.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,454][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/performance-analyzer-rca/lib/proto-google-common-protos-2.9.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,454][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/performance-analyzer-rca/lib/jsr305-3.0.2.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,455][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/performance-analyzer-rca/lib/checker-qual-3.12.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,456][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/performance-analyzer-rca/lib/netty-codec-http-4.1.86.Final.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,458][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/performance-analyzer-rca/lib/netty-codec-4.1.86.Final.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,459][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/performance-analyzer-rca/lib/grpc-api-1.52.1.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,460][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/performance-analyzer-rca/lib/performance-analyzer-rca-2.6.0.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,460][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/performance-analyzer-rca/lib/jackson-core-2.14.1.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,462][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/performance-analyzer-rca/lib/listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,463][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/performance-analyzer-rca/lib/grpc-stub-1.52.1.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,464][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/performance-analyzer-rca/lib/animal-sniffer-annotations-1.21.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,464][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/performance-analyzer-rca/lib/grpc-protobuf-lite-1.52.1.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,465][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/performance-analyzer-rca/lib/commons-io-2.7.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,473][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/performance-analyzer-rca/lib/log4j-core-2.17.1.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,473][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/performance-analyzer-rca/lib/commons-lang3-3.9.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,476][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/performance-analyzer-rca/lib/bcprov-jdk15on-1.70.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,476][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/performance-analyzer-rca/lib/j2objc-annotations-1.3.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,477][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/performance-analyzer-rca/lib/netty-transport-4.1.86.Final.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,477][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/performance-analyzer-rca/lib/grpc-netty-1.52.1.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,478][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/performance-analyzer-rca/lib/gson-2.9.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,479][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/performance-analyzer-rca/lib/sqlite-jdbc-3.32.3.2.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,480][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/performance-analyzer-rca/lib/grpc-protobuf-1.52.1.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,481][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/performance-analyzer-rca/lib/annotations-4.1.1.4.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,481][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/performance-analyzer-rca/lib/netty-handler-4.1.86.Final.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,482][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/performance-analyzer-rca/lib/netty-codec-socks-4.1.86.Final.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,483][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/performance-analyzer-rca/lib/grpc-context-1.52.1.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,483][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/performance-analyzer-rca/lib/netty-codec-http2-4.1.86.Final.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,484][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/performance-analyzer-rca/lib/guava-31.1-android.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,485][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] Directory /usr/share/wazuh-indexer/performance-analyzer-rca/bin has insecure file permissions (should be 0700)
[2023-09-25T14:23:41,485][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/performance-analyzer-rca/bin/performance-analyzer-rca has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,488][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/performance-analyzer-rca/bin/performance-analyzer-agent has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,489][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] Directory /usr/share/wazuh-indexer/plugins has insecure file permissions (should be 0700)
[2023-09-25T14:23:41,489][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] Directory /usr/share/wazuh-indexer/plugins/opensearch-sql has insecure file permissions (should be 0700)
[2023-09-25T14:23:41,495][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-sql/antlr4-runtime-4.7.1.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,496][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-sql/failureaccess-1.0.1.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,496][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-sql/httpcore-nio-4.4.15.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,496][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-sql/antlr4-4.7.1.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,497][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-sql/javax.json-1.0.4.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,497][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-sql/spring-context-5.3.22.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,498][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-sql/protocol-2.6.0.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,498][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-sql/jackson-databind-2.14.2.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,498][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-sql/plugin-descriptor.properties has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,499][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-sql/opensearch-ml-client-2.6.0.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,499][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-sql/gson-2.8.9.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,499][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-sql/spring-jcl-5.3.22.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,500][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-sql/vavr-match-0.10.2.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,500][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-sql/druid-1.0.15.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,502][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-sql/spring-beans-5.3.22.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,503][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-sql/common-2.6.0.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,503][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-sql/jsr305-3.0.2.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,504][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-sql/kotlin-stdlib-1.6.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,504][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-sql/sql-2.6.0.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,505][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-sql/checker-qual-3.12.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,505][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-sql/prometheus-2.6.0.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,505][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-sql/parent-join-client-2.6.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,506][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-sql/kotlin-stdlib-jdk7-1.4.30.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,506][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-sql/kotlin-reflect-1.4.30.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,509][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-sql/antlr-runtime-3.5.2.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,517][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-sql/opensearch-rest-client-2.6.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,517][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-sql/okhttp-aws-signer-1.0.2.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,518][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-sql/slf4j-api-1.7.36.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,518][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-sql/commons-codec-1.13.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,519][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-sql/spring-core-5.3.22.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,520][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-sql/presto-matching-0.240.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,521][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-sql/commons-math3-3.6.1.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,523][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-sql/listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,523][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-sql/opensearch-sql-2.6.0.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,524][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-sql/reindex-client-2.6.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,525][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-sql/core-2.6.0.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,525][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-sql/resilience4j-retry-1.5.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,527][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-sql/httpcore-4.4.15.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,527][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-sql/j2objc-annotations-1.3.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,529][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-sql/icu4j-58.2.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,531][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-sql/jackson-annotations-2.14.2.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,531][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-sql/ppl-2.6.0.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,533][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-sql/org.abego.treelayout.core-1.0.3.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,534][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-sql/kotlin-stdlib-common-1.6.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,535][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-sql/legacy-2.6.0.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,536][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-sql/annotations-13.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,540][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-sql/LICENSE.txt has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,548][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-sql/okio-jvm-2.8.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,549][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-sql/plugin-security.policy has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,549][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-sql/resilience4j-core-1.5.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,550][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-sql/NOTICE.txt has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,552][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-sql/spring-expression-5.3.22.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,552][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-sql/httpclient-4.5.13.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,552][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-sql/json-20180813.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,553][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-sql/error_prone_annotations-2.7.1.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,553][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-sql/vavr-0.10.2.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,554][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-sql/commons-lang3-3.10.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,554][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-sql/httpasyncclient-4.1.5.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,555][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-sql/geo-2.6.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,555][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-sql/okhttp-4.9.3.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,556][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-sql/ST4-4.0.8.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,556][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-sql/opensearch-ssl-config-2.6.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,556][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-sql/spring-aop-5.3.22.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,557][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-sql/guava-31.0.1-jre.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,557][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-sql/opensearch-2.6.0.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,557][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] Directory /usr/share/wazuh-indexer/plugins/opensearch-job-scheduler has insecure file permissions (should be 0700)
[2023-09-25T14:23:41,558][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-job-scheduler/plugin-descriptor.properties has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,559][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-job-scheduler/opensearch-job-scheduler-spi-2.6.0.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,559][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-job-scheduler/opensearch-job-scheduler-2.6.0.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,559][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] Directory /usr/share/wazuh-indexer/plugins/opensearch-ml has insecure file permissions (should be 0700)
[2023-09-25T14:23:41,560][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-ml/jline-style-3.21.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,560][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-ml/tribuo-regression-sgd-4.2.1.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,561][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-ml/failureaccess-1.0.1.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,561][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-ml/tribuo-classification-core-4.2.1.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,561][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-ml/httpcore-nio-4.4.15.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,562][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-ml/randomcutforest-core-3.0-rc3.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,569][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-ml/tribuo-clustering-core-4.2.1.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,569][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-ml/tribuo-common-sgd-4.2.1.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,570][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-ml/tribuo-regression-core-4.2.1.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,570][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-ml/commons-collections-3.2.2.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,571][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-ml/commons-codec-1.15.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,571][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-ml/opensearch-ml-2.6.0.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,571][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-ml/tribuo-data-4.2.1.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,572][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-ml/tribuo-common-tree-4.2.1.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,572][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-ml/jackson-databind-2.14.2.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,572][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-ml/log4j-slf4j-impl-2.19.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,573][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-ml/plugin-descriptor.properties has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,574][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-ml/tokenizers-0.19.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,574][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-ml/commons-text-1.10.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,574][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-ml/pytorch-engine-0.19.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,575][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-ml/commons-logging-1.2.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,575][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-ml/jline-reader-3.21.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,576][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-ml/pytorch-model-zoo-0.19.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,576][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-ml/commons-collections4-4.4.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,576][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-ml/protostuff-runtime-1.8.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,577][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-ml/randomcutforest-parkservices-3.0-rc3.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,577][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-ml/jline-terminal-3.21.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,578][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-ml/opensearch-ml-common-2.6.0.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,578][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-ml/tribuo-util-infotheory-4.2.1.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,578][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-ml/api-0.19.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,579][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-ml/protostuff-api-1.8.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,579][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-ml/jsr305-3.0.2.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,580][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-ml/checker-qual-3.12.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,580][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-ml/reflections-0.9.12.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,581][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-ml/tribuo-util-onnx-4.2.1.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,581][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-ml/opencsv-5.4.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,581][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-ml/opensearch-rest-client-2.6.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,582][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-ml/tribuo-anomaly-core-4.2.1.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,582][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-ml/slf4j-api-1.7.36.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,583][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-ml/commons-beanutils-1.9.4.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,583][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-ml/commons-math3-3.6.1.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,583][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-ml/tribuo-common-libsvm-4.2.1.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,584][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-ml/tribuo-core-4.2.1.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,584][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-ml/listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,585][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-ml/jline-builtins-3.21.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,585][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-ml/opensearch-ml-algorithms-2.6.0.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,586][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-ml/commons-compress-1.21.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,586][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-ml/jansi-2.4.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,586][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-ml/olcut-config-protobuf-5.2.1.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,587][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-ml/javassist-3.26.0-GA.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,587][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-ml/commons-io-2.11.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,588][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-ml/libsvm-3.25.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,588][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-ml/httpcore-4.4.15.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,588][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-ml/jline-terminal-jansi-3.21.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,593][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-ml/j2objc-annotations-1.3.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,593][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-ml/onnxruntime-engine-0.19.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,594][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-ml/randomcutforest-testutils-3.0-rc3.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,594][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-ml/tribuo-anomaly-libsvm-4.2.1.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,594][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-ml/jackson-annotations-2.14.2.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,595][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-ml/tribuo-math-4.2.1.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,601][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-ml/tribuo-classification-sgd-4.2.1.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,602][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-ml/olcut-core-5.2.1.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,602][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-ml/onnxruntime_gpu-1.13.1.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,603][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-ml/protostuff-core-1.8.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,603][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-ml/plugin-security.policy has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,604][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-ml/tribuo-util-tokenization-4.2.1.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,604][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-ml/common-utils-2.6.0.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,605][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-ml/protobuf-java-3.21.9.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,605][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-ml/httpclient-4.5.13.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,605][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-ml/error_prone_annotations-2.7.1.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,606][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-ml/commons-lang3-3.10.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,606][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-ml/httpasyncclient-4.1.5.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,607][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-ml/tribuo-clustering-kmeans-4.2.1.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,607][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-ml/guava-31.0.1-jre.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,608][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-ml/gson-2.9.1.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,608][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-ml/protostuff-collectionschema-1.8.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,609][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] Directory /usr/share/wazuh-indexer/plugins/opensearch-anomaly-detection has insecure file permissions (should be 0700)
[2023-09-25T14:23:41,615][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-anomaly-detection/jackson-databind-2.14.1.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,615][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-anomaly-detection/org.jacoco.agent-0.8.5.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,616][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-anomaly-detection/failureaccess-1.0.1.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,616][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-anomaly-detection/httpcore-nio-4.4.15.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,616][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-anomaly-detection/randomcutforest-core-3.0-rc3.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,617][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-anomaly-detection/commons-codec-1.15.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,617][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-anomaly-detection/plugin-descriptor.properties has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,618][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-anomaly-detection/jackson-annotations-2.14.1.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,618][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-anomaly-detection/commons-lang3-3.12.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,619][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-anomaly-detection/gson-2.8.9.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,620][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-anomaly-detection/commons-logging-1.2.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,620][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-anomaly-detection/protostuff-runtime-1.8.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,621][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-anomaly-detection/randomcutforest-serialization-3.0-rc3.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,623][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-anomaly-detection/randomcutforest-parkservices-3.0-rc3.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,624][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-anomaly-detection/sketches-core-0.13.4.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,624][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-anomaly-detection/commons-lang-2.6.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,626][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-anomaly-detection/protostuff-api-1.8.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,626][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-anomaly-detection/memory-0.12.2.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,627][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-anomaly-detection/opensearch-rest-client-2.6.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,628][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-anomaly-detection/commons-pool2-2.10.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,628][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-anomaly-detection/commons-math3-3.6.1.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,630][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-anomaly-detection/opensearch-anomaly-detection-2.6.0.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,631][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-anomaly-detection/httpcore-4.4.15.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,633][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-anomaly-detection/org.jacoco.ant-0.8.5.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,641][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-anomaly-detection/protostuff-core-1.8.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,644][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-anomaly-detection/plugin-security.policy has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,644][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-anomaly-detection/common-utils-2.6.0.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,653][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-anomaly-detection/javassist-3.28.0-GA.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,654][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-anomaly-detection/httpclient-4.5.13.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,657][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-anomaly-detection/httpasyncclient-4.1.5.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,657][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-anomaly-detection/guava-31.0.1-jre.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,658][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-anomaly-detection/protostuff-collectionschema-1.8.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,658][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] Directory /usr/share/wazuh-indexer/plugins/opensearch-observability has insecure file permissions (should be 0700)
[2023-09-25T14:23:41,658][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-observability/jackson-databind-2.14.1.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,665][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-observability/plugin-descriptor.properties has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,669][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-observability/jackson-annotations-2.14.1.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,670][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-observability/kotlin-stdlib-1.6.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,670][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-observability/json-flattener-0.15.1.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,671][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-observability/json-base-2.2.1.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,671][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-observability/opensearch-observability-2.6.0.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,672][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-observability/kotlin-stdlib-common-1.6.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,672][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-observability/plugin-security.policy has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,674][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-observability/common-utils-2.6.0.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,675][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-observability/json-20220924.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,675][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-observability/kotlinx-coroutines-core-jvm-1.3.9.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,676][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-observability/guava-31.0.1-jre.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,681][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] Directory /usr/share/wazuh-indexer/plugins/opensearch-notifications-core has insecure file permissions (should be 0700)
[2023-09-25T14:23:41,682][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-notifications-core/aws-java-sdk-sns-1.12.48.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,689][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-notifications-core/jackson-databind-2.14.2.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,690][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-notifications-core/plugin-descriptor.properties has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,690][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-notifications-core/aws-java-sdk-core-1.12.48.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,690][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-notifications-core/aws-java-sdk-sts-1.12.48.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,691][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-notifications-core/commons-logging-1.2.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,691][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-notifications-core/activation-1.1.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,692][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-notifications-core/opensearch-notifications-core-spi-2.6.0.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,696][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-notifications-core/opensearch-notifications-core-2.6.0.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,697][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-notifications-core/aws-java-sdk-ses-1.12.48.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,698][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-notifications-core/kotlin-stdlib-common-1.6.10.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,698][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-notifications-core/kotlin-stdlib-1.6.10.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,698][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-notifications-core/httpcore-4.4.15.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,699][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-notifications-core/javax.mail-1.6.2.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,700][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-notifications-core/jackson-annotations-2.14.2.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,700][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-notifications-core/plugin-security.policy has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,701][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-notifications-core/httpclient-4.5.13.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,701][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] Directory /usr/share/wazuh-indexer/plugins/opensearch-notifications has insecure file permissions (should be 0700)
[2023-09-25T14:23:41,705][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-notifications/opensearch-notifications-2.6.0.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,708][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-notifications/kotlinx-coroutines-core-jvm-1.4.3.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,708][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-notifications/plugin-descriptor.properties has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,714][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-notifications/kotlin-stdlib-common-1.6.10.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,718][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-notifications/plugin-security.policy has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,721][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-notifications/common-utils-2.6.0.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,725][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] Directory /usr/share/wazuh-indexer/plugins/opensearch-geospatial has insecure file permissions (should be 0700)
[2023-09-25T14:23:41,728][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-geospatial/plugin-descriptor.properties has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,736][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-geospatial/commons-lang3-3.12.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,737][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-geospatial/h3-2.6.0.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,738][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-geospatial/opensearch-geospatial-2.6.0.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,738][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-geospatial/LICENSE.txt has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,739][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-geospatial/NOTICE.txt has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,745][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-geospatial/geo-2.6.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,749][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] Directory /usr/share/wazuh-indexer/plugins/opensearch-knn has insecure file permissions (should be 0700)
[2023-09-25T14:23:41,749][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-knn/failureaccess-1.0.1.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,750][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-knn/plugin-descriptor.properties has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,750][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-knn/commons-lang-2.6.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,750][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-knn/guava-30.0-jre.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,753][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] Directory /usr/share/wazuh-indexer/plugins/opensearch-knn/lib has insecure file permissions (should be 0700)
[2023-09-25T14:23:41,753][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-knn/lib/libopensearchknn_common.so has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,753][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-knn/lib/libopensearchknn_faiss.so has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,754][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-knn/lib/libopensearchknn_nmslib.so has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,754][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-knn/lib/libgomp.so.1 has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,757][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-knn/opensearch-knn-2.6.0.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,758][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-knn/LICENSE.txt has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,758][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-knn/plugin-security.policy has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,759][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-knn/NOTICE.txt has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,760][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] Directory /usr/share/wazuh-indexer/plugins/opensearch-asynchronous-search has insecure file permissions (should be 0700)
[2023-09-25T14:23:41,760][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-asynchronous-search/plugin-descriptor.properties has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,761][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-asynchronous-search/plugin-security.policy has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,761][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-asynchronous-search/common-utils-2.6.0.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,769][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-asynchronous-search/opensearch-asynchronous-search-2.6.0.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,773][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] Directory /usr/share/wazuh-indexer/plugins/opensearch-security-analytics has insecure file permissions (should be 0700)
[2023-09-25T14:23:41,774][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security-analytics/httpcore-nio-4.4.15.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,777][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security-analytics/commons-codec-1.15.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,777][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security-analytics/opensearch-security-analytics-2.6.0.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,778][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security-analytics/cron-utils-9.1.6.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,778][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security-analytics/plugin-descriptor.properties has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,778][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security-analytics/commons-lang3-3.12.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,784][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security-analytics/commons-logging-1.2.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,787][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security-analytics/opensearch-rest-client-2.6.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,788][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security-analytics/antlr4-runtime-4.10.1.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,798][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security-analytics/kotlin-stdlib-1.6.10.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,799][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security-analytics/httpcore-4.4.15.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,799][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security-analytics/plugin-security.policy has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,800][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security-analytics/common-utils-2.6.0.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,800][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security-analytics/httpclient-4.5.13.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,801][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security-analytics/httpasyncclient-4.1.5.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,801][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] Directory /usr/share/wazuh-indexer/plugins/opensearch-alerting has insecure file permissions (should be 0700)
[2023-09-25T14:23:41,803][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-alerting/google-java-format-1.10.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,803][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-alerting/failureaccess-1.0.1.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,804][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-alerting/httpcore-nio-4.4.15.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,804][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-alerting/kotlinx-coroutines-core-1.1.1.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,805][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-alerting/commons-collections-3.2.2.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,806][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-alerting/cron-utils-9.1.6.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,807][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-alerting/plugin-descriptor.properties has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,808][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-alerting/commons-validator-1.7.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,809][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-alerting/kotlin-stdlib-jdk8-1.6.10.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,811][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-alerting/commons-logging-1.2.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,811][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-alerting/guava-30.0-jre.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,812][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-alerting/jsr305-3.0.2.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,813][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-alerting/kotlinx-coroutines-core-common-1.1.1.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,814][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-alerting/opensearch-rest-client-2.6.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,815][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-alerting/commons-codec-1.13.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,816][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-alerting/commons-beanutils-1.9.4.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,817][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-alerting/listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,818][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-alerting/checker-qual-3.5.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,819][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-alerting/kotlin-stdlib-common-1.6.10.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,821][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-alerting/percolator-client-2.6.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,825][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-alerting/kotlin-stdlib-jdk7-1.6.10.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,826][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-alerting/javassist-3.27.0-GA.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,827][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-alerting/alerting-core-2.6.0.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,827][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-alerting/kotlin-stdlib-1.6.10.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,828][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-alerting/httpcore-4.4.15.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,830][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-alerting/j2objc-annotations-1.3.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,831][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-alerting/commons-digester-2.1.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,833][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-alerting/ipaddress-5.3.3.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,835][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-alerting/opensearch-alerting-2.6.0.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,837][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-alerting/annotations-13.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,841][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-alerting/javax.el-3.0.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,841][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-alerting/plugin-security.policy has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,843][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-alerting/common-utils-2.6.0.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,847][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-alerting/httpclient-4.5.13.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,847][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-alerting/httpasyncclient-4.1.5.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,848][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-alerting/slf4j-api-1.7.30.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,848][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-alerting/error_prone_annotations-2.3.4.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,852][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] Directory /usr/share/wazuh-indexer/plugins/opensearch-performance-analyzer has insecure file permissions (should be 0700)
[2023-09-25T14:23:41,854][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-performance-analyzer/jackson-databind-2.14.1.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,857][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-performance-analyzer/netty-transport-4.1.87.Final.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,858][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-performance-analyzer/failureaccess-1.0.1.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,858][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-performance-analyzer/perfmark-api-0.25.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,858][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-performance-analyzer/bcutil-jdk15on-1.70.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,859][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-performance-analyzer/plugin-descriptor.properties has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,859][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-performance-analyzer/jackson-annotations-2.14.1.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,860][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-performance-analyzer/commons-lang3-3.12.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,860][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-performance-analyzer/grpc-core-1.52.1.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,864][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-performance-analyzer/jooq-3.10.8.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,864][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-performance-analyzer/javax.annotation-api-1.3.2.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,864][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-performance-analyzer/opensearch-performance-analyzer-2.6.0.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,865][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-performance-analyzer/protobuf-java-3.21.12.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,865][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-performance-analyzer/netty-handler-proxy-4.1.87.Final.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,868][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-performance-analyzer/error_prone_annotations-2.9.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,868][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-performance-analyzer/netty-codec-socks-4.1.87.Final.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,869][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-performance-analyzer/bcpkix-jdk15on-1.70.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,870][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-performance-analyzer/netty-resolver-4.1.87.Final.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,870][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-performance-analyzer/proto-google-common-protos-2.9.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,871][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-performance-analyzer/jsr305-3.0.2.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,871][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-performance-analyzer/netty-codec-4.1.87.Final.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,871][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-performance-analyzer/netty-common-4.1.87.Final.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,872][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-performance-analyzer/grpc-api-1.52.1.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,893][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-performance-analyzer/listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,895][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-performance-analyzer/grpc-stub-1.52.1.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,899][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-performance-analyzer/animal-sniffer-annotations-1.21.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,900][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-performance-analyzer/grpc-protobuf-lite-1.52.1.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,900][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-performance-analyzer/commons-io-2.7.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,900][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-performance-analyzer/netty-handler-4.1.87.Final.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,901][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-performance-analyzer/netty-codec-http2-4.1.87.Final.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,909][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-performance-analyzer/bcprov-jdk15on-1.70.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,909][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-performance-analyzer/j2objc-annotations-1.3.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,910][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-performance-analyzer/jackson-module-paranamer-2.14.1.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,910][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-performance-analyzer/guava-31.1-jre.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,910][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-performance-analyzer/netty-buffer-4.1.87.Final.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,911][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-performance-analyzer/netty-codec-http-4.1.87.Final.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,911][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-performance-analyzer/plugin-security.policy has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,912][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-performance-analyzer/grpc-netty-1.52.1.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,912][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-performance-analyzer/performanceanalyzer-rca-2.6.0.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,912][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-performance-analyzer/gson-2.9.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,913][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-performance-analyzer/sqlite-jdbc-3.32.3.2.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,913][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-performance-analyzer/grpc-protobuf-1.52.1.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,913][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-performance-analyzer/annotations-4.1.1.4.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,914][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-performance-analyzer/netty-transport-native-unix-common-4.1.87.Final.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,914][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-performance-analyzer/grpc-context-1.52.1.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,914][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-performance-analyzer/checker-qual-3.29.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,915][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] Directory /usr/share/wazuh-indexer/plugins/opensearch-neural-search has insecure file permissions (should be 0700)
[2023-09-25T14:23:41,922][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-neural-search/plugin-descriptor.properties has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,924][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-neural-search/opensearch-ml-client-2.6.0.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,925][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-neural-search/LICENSE.txt has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,925][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-neural-search/plugin-security.policy has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,926][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-neural-search/NOTICE.txt has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,926][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-neural-search/commons-lang3-3.10.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,926][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-neural-search/opensearch-neural-search-2.6.0.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,933][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] Directory /usr/share/wazuh-indexer/plugins/opensearch-index-management has insecure file permissions (should be 0700)
[2023-09-25T14:23:41,933][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-index-management/plugin-descriptor.properties has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,934][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-index-management/opensearch-index-management-2.6.0.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,934][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-index-management/commons-codec-1.13.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,935][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-index-management/kotlin-stdlib-common-1.6.10.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,935][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-index-management/kotlin-stdlib-jdk7-1.6.10.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,935][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-index-management/opensearch-index-management-spi-2.6.0.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,936][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-index-management/kotlin-stdlib-1.6.10.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,936][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-index-management/httpcore-4.4.15.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,936][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-index-management/ipaddress-5.3.3.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,937][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-index-management/annotations-13.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,937][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-index-management/plugin-security.policy has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,938][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-index-management/common-utils-2.6.0.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,939][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-index-management/httpclient-4.5.13.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,941][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-index-management/kotlinx-coroutines-core-jvm-1.3.9.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,942][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] Directory /usr/share/wazuh-indexer/plugins/opensearch-cross-cluster-replication has insecure file permissions (should be 0700)
[2023-09-25T14:23:41,942][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-cross-cluster-replication/plugin-descriptor.properties has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,942][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-cross-cluster-replication/kotlinx-coroutines-core-jvm-1.6.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,943][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-cross-cluster-replication/kotlin-stdlib-jdk7-1.6.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,946][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-cross-cluster-replication/kotlin-stdlib-jdk8-1.6.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,946][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-cross-cluster-replication/kotlin-stdlib-1.6.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,947][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-cross-cluster-replication/ipaddress-5.3.3.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,947][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-cross-cluster-replication/kotlin-stdlib-common-1.6.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,948][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-cross-cluster-replication/annotations-13.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,948][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-cross-cluster-replication/common-utils-2.6.0.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,949][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-cross-cluster-replication/opensearch-cross-cluster-replication-2.6.0.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,949][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] Directory /usr/share/wazuh-indexer/plugins/opensearch-reports-scheduler has insecure file permissions (should be 0700)
[2023-09-25T14:23:41,952][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-reports-scheduler/jackson-databind-2.14.1.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,952][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-reports-scheduler/opensearch-reports-scheduler-2.6.0.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,953][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-reports-scheduler/plugin-descriptor.properties has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,953][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-reports-scheduler/jackson-annotations-2.14.1.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,954][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-reports-scheduler/gson-2.8.9.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,954][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-reports-scheduler/kotlin-stdlib-1.6.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,954][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-reports-scheduler/json-flattener-0.15.1.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,955][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-reports-scheduler/json-base-2.2.1.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,955][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-reports-scheduler/kotlin-test-1.6.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,955][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-reports-scheduler/kotlin-stdlib-common-1.6.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,956][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-reports-scheduler/plugin-security.policy has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,956][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-reports-scheduler/common-utils-2.6.0.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,956][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-reports-scheduler/json-20180813.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,957][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-reports-scheduler/kotlinx-coroutines-core-jvm-1.3.9.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,957][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-reports-scheduler/jsoup-1.15.3.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,957][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-reports-scheduler/guava-31.0.1-jre.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,958][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] Directory /usr/share/wazuh-indexer/plugins/opensearch-security has insecure file permissions (should be 0700)
[2023-09-25T14:23:41,959][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/xmlsec-2.2.3.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,965][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/netty-transport-4.1.87.Final.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,965][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/failureaccess-1.0.1.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,965][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/httpcore-nio-4.4.15.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,966][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/woodstox-core-6.4.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,968][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/jjwt-impl-0.10.8.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,969][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/jakarta.xml.bind-api-2.3.3.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,969][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/java-support-7.5.1.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,970][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/cryptacular-1.2.4.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,970][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/commons-collections-3.2.2.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,975][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/opensaml-soap-api-3.4.5.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,975][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/lang-mustache-client-2.6.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,976][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/metrics-core-3.1.2.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,976][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/jackson-databind-2.14.2.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,977][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/stax2-api-4.2.1.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,978][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/plugin-descriptor.properties has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,981][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/commons-text-1.10.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,981][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/opensaml-core-3.4.5.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,981][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/minimal-json-0.9.5.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,982][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/mapper-extras-client-2.6.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,982][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/opensaml-xmlsec-impl-3.4.5.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,983][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/commons-logging-1.2.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,994][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/asm-9.1.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,995][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/opensaml-security-api-3.4.5.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,995][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/jjwt-jackson-0.10.8.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,996][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/bcpkix-jdk15on-1.70.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,996][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/cxf-core-3.5.5.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:41,996][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/java-saml-2.5.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,000][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/netty-resolver-4.1.87.Final.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,001][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/snappy-java-1.1.8.1.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,003][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/guava-30.0-jre.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,004][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/jsr305-3.0.2.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,013][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] Directory /usr/share/wazuh-indexer/plugins/opensearch-security/tools has insecure file permissions (should be 0700)
[2023-09-25T14:23:42,014][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/tools/wazuh-certs-tool.sh has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,016][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/tools/hash.sh has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,018][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/tools/securityadmin.sh has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,021][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/tools/wazuh-passwords-tool.sh has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,021][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/tools/audit_config_migrater.sh has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,029][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/tools/SECURITY_ADMIN_TESTS.md has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,029][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/parent-join-client-2.6.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,030][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/netty-codec-4.1.87.Final.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,030][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/opensaml-saml-impl-3.4.5.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,032][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/accessors-smart-2.4.7.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,032][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/json-smart-2.4.7.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,033][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/opensaml-messaging-api-3.4.5.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,033][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/kafka-clients-3.0.2.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,041][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/opensaml-profile-api-3.4.5.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,042][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/netty-common-4.1.87.Final.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,042][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/opensearch-rest-client-2.6.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,043][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,043][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/opensaml-xmlsec-api-3.4.5.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,043][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/checker-qual-3.5.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,044][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/opensearch-rest-high-level-client-2.6.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,044][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/jaxb-runtime-2.3.4.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,045][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/opensaml-security-impl-3.4.5.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,045][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/httpclient-cache-4.5.13.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,045][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/netty-handler-4.1.87.Final.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,046][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/cxf-rt-rs-json-basic-3.5.5.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,046][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/zstd-jni-1.5.0-2.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,046][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/httpcore-4.4.15.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,047][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/j2objc-annotations-1.3.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,048][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/cxf-rt-security-3.5.5.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,049][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/eventbus-3.2.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,049][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/commons-codec-1.14.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,050][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/commons-lang-2.4.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,050][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/jackson-annotations-2.14.2.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,050][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/netty-buffer-4.1.87.Final.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,051][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/lz4-java-1.7.1.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,057][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/zjsonpatch-0.4.4.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,057][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/opensaml-storage-api-3.4.5.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,062][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/json-flattener-0.5.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,062][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/txw2-2.3.4.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,063][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/istack-commons-runtime-3.0.12.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,063][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/aggs-matrix-stats-client-2.6.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,063][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/netty-codec-http-4.1.87.Final.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,064][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/plugin-security.policy has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,064][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/transport-netty4-client-2.6.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,064][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/ldaptive-1.2.3.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,065][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/commons-cli-1.3.1.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,065][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/opensaml-saml-api-3.4.5.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,065][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/jjwt-api-0.10.8.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,066][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/httpclient-4.5.13.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,066][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/bcprov-jdk15on-1.67.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,066][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/netty-transport-native-unix-common-4.1.87.Final.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,067][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/rank-eval-client-2.6.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,067][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/jakarta.annotation-api-1.3.5.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,067][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/httpasyncclient-4.1.5.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,068][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/opensearch-security-2.6.0.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,073][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/java-saml-core-2.5.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,073][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/jakarta.activation-1.2.2.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,074][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/commons-lang3-3.4.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,074][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/cxf-rt-rs-security-jose-3.5.5.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,075][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/compiler-0.9.10.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,076][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/xmlschema-core-2.2.5.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,076][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/slf4j-api-1.7.30.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,076][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/json-path-2.4.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,077][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/opensaml-soap-impl-3.4.5.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,081][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/plugins/opensearch-security/error_prone_annotations-2.3.4.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,081][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] Directory /usr/share/wazuh-indexer/lib has insecure file permissions (should be 0700)
[2023-09-25T14:23:42,082][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/lib/lucene-queryparser-9.5.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,082][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/lib/log4j-api-2.17.1.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,082][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/lib/opensearch-x-content-2.6.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,089][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/lib/lucene-join-9.5.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,090][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/lib/hppc-0.8.1.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,091][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/lib/java-version-checker-2.6.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,091][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/lib/jna-5.5.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,092][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/lib/opensearch-2.6.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,092][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/lib/lucene-queries-9.5.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,092][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/lib/snakeyaml-1.33.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,093][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/lib/t-digest-3.2.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,094][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] Directory /usr/share/wazuh-indexer/lib/tools has insecure file permissions (should be 0700)
[2023-09-25T14:23:42,094][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] Directory /usr/share/wazuh-indexer/lib/tools/keystore-cli has insecure file permissions (should be 0700)
[2023-09-25T14:23:42,094][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/lib/tools/keystore-cli/keystore-cli-2.6.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,095][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] Directory /usr/share/wazuh-indexer/lib/tools/plugin-cli has insecure file permissions (should be 0700)
[2023-09-25T14:23:42,095][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/lib/tools/plugin-cli/bc-fips-1.0.2.3.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,095][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/lib/tools/plugin-cli/bcpg-fips-1.0.7.1.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,096][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/lib/tools/plugin-cli/opensearch-plugin-cli-2.6.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,096][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] Directory /usr/share/wazuh-indexer/lib/tools/upgrade-cli has insecure file permissions (should be 0700)
[2023-09-25T14:23:42,096][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/lib/tools/upgrade-cli/jackson-databind-2.14.2.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,097][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/lib/tools/upgrade-cli/opensearch-upgrade-cli-2.6.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,097][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/lib/tools/upgrade-cli/jackson-annotations-2.14.2.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,097][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/lib/tools/upgrade-cli/jackson-core-2.14.2.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,098][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/lib/opensearch-core-2.6.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,098][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/lib/lucene-memory-9.5.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,098][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/lib/lucene-misc-9.5.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,105][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/lib/joda-time-2.12.2.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,106][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/lib/jackson-dataformat-smile-2.14.2.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,106][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/lib/jts-core-1.15.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,106][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/lib/jackson-dataformat-yaml-2.14.2.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,107][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/lib/HdrHistogram-2.1.12.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,108][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/lib/lucene-highlighter-9.5.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,108][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/lib/opensearch-secure-sm-2.6.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,108][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/lib/log4j-core-2.17.1.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,109][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/lib/lucene-suggest-9.5.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,109][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/lib/opensearch-common-2.6.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,109][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/lib/opensearch-launchers-2.6.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,110][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/lib/lucene-analysis-common-9.5.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,110][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/lib/lucene-spatial-extras-9.5.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,110][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/lib/lucene-backward-codecs-9.5.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,114][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/lib/opensearch-plugin-classloader-2.6.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,114][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/lib/jopt-simple-5.0.4.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,115][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/lib/lucene-core-9.5.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,115][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/lib/log4j-jul-2.17.1.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,115][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/lib/lucene-sandbox-9.5.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,116][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/lib/lucene-spatial3d-9.5.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,116][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/lib/jackson-core-2.14.2.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,118][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/lib/lucene-grouping-9.5.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,119][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/lib/jackson-dataformat-cbor-2.14.2.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,120][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/lib/opensearch-geo-2.6.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,120][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/lib/spatial4j-0.7.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,121][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/lib/opensearch-cli-2.6.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,121][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] Directory /usr/share/wazuh-indexer/jdk has insecure file permissions (should be 0700)
[2023-09-25T14:23:42,121][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/NOTICE has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,125][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/legal/jdk.dynalink/dynalink.md has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,127][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/legal/java.base/ADDITIONAL_LICENSE_INFO has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,127][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/legal/java.base/aes.md has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,129][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/legal/java.base/unicode.md has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,129][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/legal/java.base/asm.md has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,130][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/legal/java.base/ASSEMBLY_EXCEPTION has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,130][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/legal/java.base/public_suffix.md has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,133][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/legal/java.base/icu.md has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,134][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/legal/java.base/cldr.md has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,135][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/legal/java.base/LICENSE has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,136][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/legal/java.base/c-libutl.md has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,136][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/legal/jdk.internal.opt/jopt-simple.md has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,147][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/legal/jdk.javadoc/jqueryUI.md has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,147][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/legal/jdk.javadoc/jquery.md has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,148][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/legal/jdk.crypto.cryptoki/pkcs11cryptotoken.md has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,149][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/legal/jdk.crypto.cryptoki/pkcs11wrapper.md has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,158][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/legal/jdk.internal.le/jline.md has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,161][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/legal/java.xml/dom.md has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,161][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/legal/java.xml/xerces.md has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,163][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/legal/java.xml/xalan.md has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,163][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/legal/java.xml/bcel.md has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,164][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/legal/java.xml/jcup.md has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,165][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/legal/java.xml.crypto/santuario.md has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,165][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/legal/java.desktop/colorimaging.md has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,166][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/legal/java.desktop/xwd.md has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,167][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/legal/java.desktop/giflib.md has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,167][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/legal/java.desktop/mesa3d.md has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,171][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/legal/java.desktop/harfbuzz.md has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,171][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/legal/java.desktop/libpng.md has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,171][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/legal/java.desktop/jpeg.md has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,172][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/legal/java.desktop/lcms.md has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,172][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/legal/jdk.localedata/thaidict.md has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,172][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/legal/java.smartcardio/pcsclite.md has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,173][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/include/classfile_constants.h has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,175][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/include/jawt.h has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,177][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/include/linux/jawt_md.h has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,178][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/include/linux/jni_md.h has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,180][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/include/jvmti.h has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,180][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/include/jdwpTransport.h has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,191][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/include/jvmticmlr.h has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,194][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/include/jni.h has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,195][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/libawt_headless.so has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,203][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/libj2gss.so has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,203][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/libjawt.so has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,204][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/librmi.so has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,204][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/server/libjvm.so has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,209][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/server/libjsig.so has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,209][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/server/classes_nocoops.jsa has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,210][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/server/classes.jsa has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,210][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/ct.sym has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,210][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/jexec has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,211][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/libawt_xawt.so has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,211][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/libattach.so has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,211][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/classlist has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,212][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/libinstrument.so has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,212][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/libnet.so has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,212][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/libjsvml.so has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,213][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/jspawnhelper has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,216][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/jvm.cfg has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,225][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/libmlib_image.so has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,228][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/libjsig.so has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,229][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/libsyslookup.so has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,229][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/libj2pcsc.so has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,230][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/libfontmanager.so has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,232][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/libjdwp.so has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,234][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/libprefs.so has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,234][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/jfr/default.jfc has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,235][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/jfr/profile.jfc has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,236][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/libjli.so has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,236][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/modules has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,237][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/libmanagement_ext.so has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,240][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/libjavajpeg.so has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,241][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/libdt_socket.so has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,241][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/libjimage.so has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,241][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/libzip.so has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,242][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/security/cacerts has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,242][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/security/public_suffix_list.dat has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,244][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/security/blocked.certs has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,253][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/security/default.policy has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,254][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/libjsound.so has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,254][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/psfont.properties.ja has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,255][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/psfontj2d.properties has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,255][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/libmanagement.so has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,255][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/libverify.so has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,256][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/liblcms.so has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,256][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/libawt.so has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,256][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/libnio.so has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,258][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/libsaproc.so has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,259][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/libsctp.so has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,259][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/libextnet.so has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,259][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/libj2pkcs11.so has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,263][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/libjava.so has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,263][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/libjaas.so has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,264][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/libmanagement_agent.so has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,268][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/tzdb.dat has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,269][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/libsplashscreen.so has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,273][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/lib/jrt-fs.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,273][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/man/man1/jmap.1 has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,274][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/man/man1/jstatd.1 has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,274][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/man/man1/javadoc.1 has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,274][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/man/man1/jconsole.1 has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,275][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/man/man1/keytool.1 has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,275][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/man/man1/jcmd.1 has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,284][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/man/man1/javac.1 has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,285][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/man/man1/jps.1 has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,286][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/man/man1/java.1 has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,286][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/man/man1/jarsigner.1 has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,286][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/man/man1/jmod.1 has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,293][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/man/man1/jstat.1 has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,305][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/man/man1/jar.1 has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,305][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/man/man1/javap.1 has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,306][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/man/man1/serialver.1 has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,306][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/man/man1/jpackage.1 has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,306][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/man/man1/rmiregistry.1 has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,307][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/man/man1/jlink.1 has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,307][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/man/man1/jshell.1 has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,307][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/man/man1/jhsdb.1 has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,312][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/man/man1/jrunscript.1 has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,313][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/man/man1/jdb.1 has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,313][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/man/man1/jdeps.1 has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,314][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/man/man1/jinfo.1 has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,314][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/man/man1/jfr.1 has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,314][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/man/man1/jdeprscan.1 has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,314][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/man/man1/jstack.1 has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,315][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/java.rmi.jmod has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,317][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/java.datatransfer.jmod has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,317][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/java.security.sasl.jmod has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,318][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/jdk.jdwp.agent.jmod has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,318][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/java.instrument.jmod has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,319][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/jdk.jsobject.jmod has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,319][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/java.sql.jmod has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,325][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/jdk.incubator.foreign.jmod has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,325][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/jdk.nio.mapmode.jmod has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,326][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/jdk.javadoc.jmod has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,330][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/java.compiler.jmod has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,341][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/jdk.internal.vm.ci.jmod has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,342][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/java.sql.rowset.jmod has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,342][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/jdk.crypto.ec.jmod has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,343][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/jdk.internal.le.jmod has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,343][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/jdk.management.jmod has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,343][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/jdk.charsets.jmod has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,343][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/jdk.security.auth.jmod has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,344][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/java.base.jmod has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,344][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/jdk.hotspot.agent.jmod has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,344][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/jdk.internal.opt.jmod has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,345][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/java.xml.crypto.jmod has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,345][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/jdk.management.jfr.jmod has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,345][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/java.desktop.jmod has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,346][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/jdk.accessibility.jmod has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,346][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/jdk.zipfs.jmod has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,348][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/jdk.httpserver.jmod has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,349][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/jdk.xml.dom.jmod has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,349][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/jdk.random.jmod has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,349][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/jdk.attach.jmod has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,350][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/java.security.jgss.jmod has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,350][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/jdk.jdeps.jmod has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,353][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/jdk.jpackage.jmod has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,354][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/jdk.internal.jvmstat.jmod has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,354][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/java.smartcardio.jmod has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,354][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/jdk.jconsole.jmod has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,356][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/jdk.jshell.jmod has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,358][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/java.management.rmi.jmod has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,360][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/java.management.jmod has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,361][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/jdk.jlink.jmod has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,361][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/jdk.localedata.jmod has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,361][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/jdk.net.jmod has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,362][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/jdk.internal.vm.compiler.jmod has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,362][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/java.transaction.xa.jmod has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,369][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/jdk.compiler.jmod has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,369][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/jdk.security.jgss.jmod has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,370][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/java.net.http.jmod has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,370][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/jdk.jcmd.jmod has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,370][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/java.xml.jmod has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,371][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/jdk.internal.ed.jmod has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,371][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/jdk.naming.dns.jmod has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,371][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/java.prefs.jmod has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,372][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/jdk.jfr.jmod has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,377][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/jdk.sctp.jmod has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,377][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/jdk.jdi.jmod has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,378][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/java.scripting.jmod has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,378][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/jdk.management.agent.jmod has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,379][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/jdk.unsupported.jmod has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,379][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/java.se.jmod has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,380][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/jdk.internal.vm.compiler.management.jmod has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,381][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/jdk.incubator.vector.jmod has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,382][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/jdk.crypto.cryptoki.jmod has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,384][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/jdk.naming.rmi.jmod has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,384][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/jdk.jartool.jmod has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,384][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/jdk.unsupported.desktop.jmod has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,385][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/jdk.dynalink.jmod has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,385][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/java.naming.jmod has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,385][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/jdk.jstatd.jmod has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,386][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/jdk.editpad.jmod has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,393][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/jmods/java.logging.jmod has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,393][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/conf/sdp/sdp.conf.template has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,394][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/conf/net.properties has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,397][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/conf/security/java.security has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,397][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/conf/security/java.policy has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,398][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/conf/security/policy/unlimited/default_US_export.policy has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,398][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/conf/security/policy/unlimited/default_local.policy has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,398][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/conf/security/policy/limited/default_US_export.policy has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,399][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/conf/security/policy/limited/default_local.policy has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,399][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/conf/security/policy/limited/exempt_local.policy has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,399][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/conf/security/policy/README.txt has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,400][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/conf/logging.properties has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,400][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/conf/sound.properties has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,400][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/conf/management/jmxremote.access has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,400][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/conf/management/jmxremote.password.template has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,401][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/conf/management/management.properties has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,401][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/bin/jdeps has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,401][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/bin/jps has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,402][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/bin/serialver has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,402][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/bin/jarsigner has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,402][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/bin/jimage has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,403][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/bin/javap has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,403][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/bin/jmap has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,404][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/bin/java has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,404][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/bin/keytool has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,405][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/bin/jdb has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,405][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/bin/javadoc has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,406][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/bin/jpackage has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,406][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/bin/jinfo has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,413][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/bin/jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,431][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/bin/jfr has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,433][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/bin/jstack has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,434][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/bin/jstat has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,441][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/bin/jlink has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,449][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/bin/javac has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,449][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/bin/rmiregistry has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,450][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/bin/jrunscript has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,450][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/bin/jmod has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,450][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/bin/jcmd has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,451][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/bin/jshell has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,451][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/bin/jconsole has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,451][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/bin/jhsdb has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,452][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/bin/jdeprscan has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,452][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/bin/jstatd has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,452][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/jdk/release has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,454][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] Directory /usr/share/wazuh-indexer/modules has insecure file permissions (should be 0700)
[2023-09-25T14:23:42,454][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] Directory /usr/share/wazuh-indexer/modules/parent-join has insecure file permissions (should be 0700)
[2023-09-25T14:23:42,459][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/parent-join/plugin-descriptor.properties has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,460][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/parent-join/parent-join-client-2.6.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,467][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] Directory /usr/share/wazuh-indexer/modules/systemd has insecure file permissions (should be 0700)
[2023-09-25T14:23:42,467][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/systemd/plugin-descriptor.properties has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,468][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/systemd/plugin-security.policy has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,468][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/systemd/systemd-2.6.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,468][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] Directory /usr/share/wazuh-indexer/modules/geo has insecure file permissions (should be 0700)
[2023-09-25T14:23:42,468][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/geo/plugin-descriptor.properties has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,472][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/geo/geo-2.6.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,473][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] Directory /usr/share/wazuh-indexer/modules/percolator has insecure file permissions (should be 0700)
[2023-09-25T14:23:42,473][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/percolator/plugin-descriptor.properties has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,473][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/percolator/percolator-client-2.6.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,474][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] Directory /usr/share/wazuh-indexer/modules/opensearch-dashboards has insecure file permissions (should be 0700)
[2023-09-25T14:23:42,474][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/opensearch-dashboards/httpcore-nio-4.4.15.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,475][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/opensearch-dashboards/commons-codec-1.15.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,485][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/opensearch-dashboards/plugin-descriptor.properties has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,494][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/opensearch-dashboards/commons-logging-1.2.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,495][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/opensearch-dashboards/opensearch-rest-client-2.6.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,495][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/opensearch-dashboards/reindex-client-2.6.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,495][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/opensearch-dashboards/httpcore-4.4.15.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,496][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/opensearch-dashboards/httpclient-4.5.13.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,496][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/opensearch-dashboards/httpasyncclient-4.1.5.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,496][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/opensearch-dashboards/opensearch-dashboards-2.6.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,496][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/opensearch-dashboards/opensearch-ssl-config-2.6.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,497][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] Directory /usr/share/wazuh-indexer/modules/transport-netty4 has insecure file permissions (should be 0700)
[2023-09-25T14:23:42,497][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/transport-netty4/netty-transport-4.1.87.Final.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,497][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/transport-netty4/plugin-descriptor.properties has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,498][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/transport-netty4/netty-resolver-4.1.87.Final.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,498][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/transport-netty4/netty-codec-4.1.87.Final.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,499][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/transport-netty4/netty-common-4.1.87.Final.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,499][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/transport-netty4/netty-handler-4.1.87.Final.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,499][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/transport-netty4/netty-buffer-4.1.87.Final.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,499][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/transport-netty4/netty-codec-http-4.1.87.Final.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,499][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/transport-netty4/plugin-security.policy has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,500][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/transport-netty4/transport-netty4-client-2.6.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,500][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/transport-netty4/netty-transport-native-unix-common-4.1.87.Final.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,500][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] Directory /usr/share/wazuh-indexer/modules/repository-url has insecure file permissions (should be 0700)
[2023-09-25T14:23:42,500][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/repository-url/plugin-descriptor.properties has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,500][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/repository-url/repository-url-2.6.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,501][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/repository-url/plugin-security.policy has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,501][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] Directory /usr/share/wazuh-indexer/modules/rank-eval has insecure file permissions (should be 0700)
[2023-09-25T14:23:42,501][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/rank-eval/plugin-descriptor.properties has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,501][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/rank-eval/rank-eval-client-2.6.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,501][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] Directory /usr/share/wazuh-indexer/modules/aggs-matrix-stats has insecure file permissions (should be 0700)
[2023-09-25T14:23:42,501][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/aggs-matrix-stats/plugin-descriptor.properties has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,502][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/aggs-matrix-stats/aggs-matrix-stats-client-2.6.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,502][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] Directory /usr/share/wazuh-indexer/modules/lang-expression has insecure file permissions (should be 0700)
[2023-09-25T14:23:42,502][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/lang-expression/plugin-descriptor.properties has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,502][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/lang-expression/asm-9.4.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,502][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/lang-expression/asm-tree-9.4.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,503][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/lang-expression/asm-commons-9.4.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,503][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/lang-expression/lucene-expressions-9.5.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,503][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/lang-expression/lang-expression-2.6.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,503][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/lang-expression/plugin-security.policy has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,503][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/lang-expression/antlr4-runtime-4.11.1.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,517][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] Directory /usr/share/wazuh-indexer/modules/lang-painless has insecure file permissions (should be 0700)
[2023-09-25T14:23:42,518][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/lang-painless/asm-analysis-9.4.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,518][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/lang-painless/asm-util-9.4.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,518][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/lang-painless/plugin-descriptor.properties has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,519][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/lang-painless/asm-9.4.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,519][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/lang-painless/asm-tree-9.4.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,519][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/lang-painless/opensearch-scripting-painless-spi-2.6.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,520][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/lang-painless/asm-commons-9.4.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,520][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/lang-painless/lang-painless-2.6.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,525][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/lang-painless/plugin-security.policy has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,525][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/lang-painless/antlr4-runtime-4.11.1.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,525][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] Directory /usr/share/wazuh-indexer/modules/lang-mustache has insecure file permissions (should be 0700)
[2023-09-25T14:23:42,526][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/lang-mustache/lang-mustache-client-2.6.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,526][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/lang-mustache/plugin-descriptor.properties has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,527][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/lang-mustache/plugin-security.policy has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,527][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/lang-mustache/compiler-0.9.10.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,527][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] Directory /usr/share/wazuh-indexer/modules/mapper-extras has insecure file permissions (should be 0700)
[2023-09-25T14:23:42,528][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/mapper-extras/plugin-descriptor.properties has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,528][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/mapper-extras/mapper-extras-client-2.6.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,528][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] Directory /usr/share/wazuh-indexer/modules/ingest-common has insecure file permissions (should be 0700)
[2023-09-25T14:23:42,529][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/ingest-common/plugin-descriptor.properties has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,529][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/ingest-common/joni-2.1.44.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,529][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/ingest-common/jcodings-1.0.58.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,530][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/ingest-common/opensearch-grok-2.6.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,530][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/ingest-common/ingest-common-2.6.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,533][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/ingest-common/opensearch-dissect-2.6.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,533][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] Directory /usr/share/wazuh-indexer/modules/analysis-common has insecure file permissions (should be 0700)
[2023-09-25T14:23:42,533][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/analysis-common/plugin-descriptor.properties has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,534][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/analysis-common/analysis-common-2.6.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,534][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] Directory /usr/share/wazuh-indexer/modules/reindex has insecure file permissions (should be 0700)
[2023-09-25T14:23:42,534][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] Directory /usr/share/wazuh-indexer/modules/reindex/parent-join has insecure file permissions (should be 0700)
[2023-09-25T14:23:42,535][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/reindex/parent-join/plugin-descriptor.properties has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,535][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/reindex/httpcore-nio-4.4.15.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,544][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/reindex/commons-codec-1.15.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,545][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/reindex/plugin-descriptor.properties has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,545][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/reindex/commons-logging-1.2.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,546][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] Directory /usr/share/wazuh-indexer/modules/reindex/transport-netty4 has insecure file permissions (should be 0700)
[2023-09-25T14:23:42,546][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/reindex/transport-netty4/plugin-descriptor.properties has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,547][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/reindex/transport-netty4/plugin-security.policy has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,547][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/reindex/opensearch-rest-client-2.6.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,547][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/reindex/reindex-client-2.6.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,548][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/reindex/httpcore-4.4.15.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,548][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/reindex/plugin-security.policy has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,549][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/reindex/httpclient-4.5.13.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,549][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/reindex/httpasyncclient-4.1.5.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,549][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/reindex/opensearch-ssl-config-2.6.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,549][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] Directory /usr/share/wazuh-indexer/modules/ingest-geoip has insecure file permissions (should be 0700)
[2023-09-25T14:23:42,550][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/ingest-geoip/maxmind-db-2.1.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,550][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/ingest-geoip/jackson-databind-2.14.2.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,550][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/ingest-geoip/plugin-descriptor.properties has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,551][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/ingest-geoip/geoip2-3.0.2.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,551][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/ingest-geoip/GeoLite2-Country.mmdb has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,551][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/ingest-geoip/GeoLite2-City.mmdb has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,552][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/ingest-geoip/ingest-geoip-2.6.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,552][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/ingest-geoip/jackson-annotations-2.14.2.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,552][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/ingest-geoip/plugin-security.policy has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,553][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/ingest-geoip/GeoLite2-ASN.mmdb has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,553][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] Directory /usr/share/wazuh-indexer/modules/ingest-user-agent has insecure file permissions (should be 0700)
[2023-09-25T14:23:42,554][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/ingest-user-agent/plugin-descriptor.properties has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,554][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/modules/ingest-user-agent/ingest-user-agent-2.6.0.jar has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,554][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/LICENSE.txt has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,555][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/NOTICE.txt has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,555][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] Directory /usr/share/wazuh-indexer/bin has insecure file permissions (should be 0700)
[2023-09-25T14:23:42,555][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/bin/opensearch-keystore has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,555][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/bin/opensearch-cli has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,556][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/bin/opensearch-env has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,556][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/bin/opensearch-env-from-file has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,557][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/bin/opensearch-plugin has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,557][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] Directory /usr/share/wazuh-indexer/bin/opensearch-performance-analyzer has insecure file permissions (should be 0700)
[2023-09-25T14:23:42,557][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/bin/opensearch-performance-analyzer/performance-analyzer-agent-cli has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,565][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/bin/opensearch-performance-analyzer/performance-analyzer-agent has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,565][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/bin/opensearch-shard has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,566][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/bin/systemd-entrypoint has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,566][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/bin/opensearch has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,566][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/bin/opensearch-node has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,567][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/bin/opensearch-upgrade has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,567][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/opensearch-security/roles.yml has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,567][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/opensearch-security/internal_users.yml has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,568][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/opensearch-security/roles_mapping.yml has insecure file permissions (should be 0600)
[2023-09-25T14:23:42,568][WARN ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] File /usr/share/wazuh-indexer/VERSION has insecure file permissions (should be 0600)
[2023-09-25T14:23:53,408][INFO ][o.o.p.c.PluginSettings   ] [wazuh.indexer] Trying to create directory /dev/shm/performanceanalyzer/.
[2023-09-25T14:23:53,413][INFO ][o.o.p.c.PluginSettings   ] [wazuh.indexer] Config: metricsLocation: /dev/shm/performanceanalyzer/, metricsDeletionInterval: 1, httpsEnabled: false, cleanup-metrics-db-files: true, batch-metrics-retention-period-minutes: 7, rpc-port: 9650, webservice-port 9600
[2023-09-25T14:23:54,914][INFO ][o.o.i.r.ReindexPlugin    ] [wazuh.indexer] ReindexPlugin reloadSPI called
[2023-09-25T14:23:54,917][INFO ][o.o.i.r.ReindexPlugin    ] [wazuh.indexer] Unable to find any implementation for RemoteReindexExtension
[2023-09-25T14:23:55,010][INFO ][o.o.j.JobSchedulerPlugin ] [wazuh.indexer] Loaded scheduler extension: opendistro_anomaly_detector, index: .opendistro-anomaly-detector-jobs
[2023-09-25T14:23:55,090][INFO ][o.o.j.JobSchedulerPlugin ] [wazuh.indexer] Loaded scheduler extension: reports-scheduler, index: .opendistro-reports-definitions
[2023-09-25T14:23:55,091][INFO ][o.o.j.JobSchedulerPlugin ] [wazuh.indexer] Loaded scheduler extension: opendistro-index-management, index: .opendistro-ism-config
[2023-09-25T14:23:55,170][INFO ][o.o.j.JobSchedulerPlugin ] [wazuh.indexer] Loaded scheduler extension: observability, index: .opensearch-observability-job
[2023-09-25T14:23:55,181][INFO ][o.o.p.PluginsService     ] [wazuh.indexer] loaded module [aggs-matrix-stats]
[2023-09-25T14:23:55,189][INFO ][o.o.p.PluginsService     ] [wazuh.indexer] loaded module [analysis-common]
[2023-09-25T14:23:55,189][INFO ][o.o.p.PluginsService     ] [wazuh.indexer] loaded module [geo]
[2023-09-25T14:23:55,189][INFO ][o.o.p.PluginsService     ] [wazuh.indexer] loaded module [ingest-common]
[2023-09-25T14:23:55,189][INFO ][o.o.p.PluginsService     ] [wazuh.indexer] loaded module [ingest-geoip]
[2023-09-25T14:23:55,189][INFO ][o.o.p.PluginsService     ] [wazuh.indexer] loaded module [ingest-user-agent]
[2023-09-25T14:23:55,189][INFO ][o.o.p.PluginsService     ] [wazuh.indexer] loaded module [lang-expression]
[2023-09-25T14:23:55,190][INFO ][o.o.p.PluginsService     ] [wazuh.indexer] loaded module [lang-mustache]
[2023-09-25T14:23:55,190][INFO ][o.o.p.PluginsService     ] [wazuh.indexer] loaded module [lang-painless]
[2023-09-25T14:23:55,190][INFO ][o.o.p.PluginsService     ] [wazuh.indexer] loaded module [mapper-extras]
[2023-09-25T14:23:55,191][INFO ][o.o.p.PluginsService     ] [wazuh.indexer] loaded module [opensearch-dashboards]
[2023-09-25T14:23:55,191][INFO ][o.o.p.PluginsService     ] [wazuh.indexer] loaded module [parent-join]
[2023-09-25T14:23:55,191][INFO ][o.o.p.PluginsService     ] [wazuh.indexer] loaded module [percolator]
[2023-09-25T14:23:55,191][INFO ][o.o.p.PluginsService     ] [wazuh.indexer] loaded module [rank-eval]
[2023-09-25T14:23:55,191][INFO ][o.o.p.PluginsService     ] [wazuh.indexer] loaded module [reindex]
[2023-09-25T14:23:55,191][INFO ][o.o.p.PluginsService     ] [wazuh.indexer] loaded module [repository-url]
[2023-09-25T14:23:55,192][INFO ][o.o.p.PluginsService     ] [wazuh.indexer] loaded module [systemd]
[2023-09-25T14:23:55,192][INFO ][o.o.p.PluginsService     ] [wazuh.indexer] loaded module [transport-netty4]
[2023-09-25T14:23:55,193][INFO ][o.o.p.PluginsService     ] [wazuh.indexer] loaded plugin [opensearch-alerting]
[2023-09-25T14:23:55,193][INFO ][o.o.p.PluginsService     ] [wazuh.indexer] loaded plugin [opensearch-anomaly-detection]
[2023-09-25T14:23:55,193][INFO ][o.o.p.PluginsService     ] [wazuh.indexer] loaded plugin [opensearch-asynchronous-search]
[2023-09-25T14:23:55,194][INFO ][o.o.p.PluginsService     ] [wazuh.indexer] loaded plugin [opensearch-cross-cluster-replication]
[2023-09-25T14:23:55,194][INFO ][o.o.p.PluginsService     ] [wazuh.indexer] loaded plugin [opensearch-geospatial]
[2023-09-25T14:23:55,195][INFO ][o.o.p.PluginsService     ] [wazuh.indexer] loaded plugin [opensearch-index-management]
[2023-09-25T14:23:55,195][INFO ][o.o.p.PluginsService     ] [wazuh.indexer] loaded plugin [opensearch-job-scheduler]
[2023-09-25T14:23:55,195][INFO ][o.o.p.PluginsService     ] [wazuh.indexer] loaded plugin [opensearch-knn]
[2023-09-25T14:23:55,195][INFO ][o.o.p.PluginsService     ] [wazuh.indexer] loaded plugin [opensearch-ml]
[2023-09-25T14:23:55,195][INFO ][o.o.p.PluginsService     ] [wazuh.indexer] loaded plugin [opensearch-neural-search]
[2023-09-25T14:23:55,196][INFO ][o.o.p.PluginsService     ] [wazuh.indexer] loaded plugin [opensearch-notifications]
[2023-09-25T14:23:55,196][INFO ][o.o.p.PluginsService     ] [wazuh.indexer] loaded plugin [opensearch-notifications-core]
[2023-09-25T14:23:55,200][INFO ][o.o.p.PluginsService     ] [wazuh.indexer] loaded plugin [opensearch-observability]
[2023-09-25T14:23:55,201][INFO ][o.o.p.PluginsService     ] [wazuh.indexer] loaded plugin [opensearch-performance-analyzer]
[2023-09-25T14:23:55,201][INFO ][o.o.p.PluginsService     ] [wazuh.indexer] loaded plugin [opensearch-reports-scheduler]
[2023-09-25T14:23:55,201][INFO ][o.o.p.PluginsService     ] [wazuh.indexer] loaded plugin [opensearch-security]
[2023-09-25T14:23:55,201][INFO ][o.o.p.PluginsService     ] [wazuh.indexer] loaded plugin [opensearch-security-analytics]
[2023-09-25T14:23:55,202][INFO ][o.o.p.PluginsService     ] [wazuh.indexer] loaded plugin [opensearch-sql]
[2023-09-25T14:23:55,365][INFO ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] Disabled https compression by default to mitigate BREACH attacks. You can enable it by setting 'http.compression: true' in opensearch.yml
[2023-09-25T14:23:55,454][INFO ][o.o.e.NodeEnvironment    ] [wazuh.indexer] using [1] data paths, mounts [[/var/lib/wazuh-indexer (/dev/root)]], net usable_space [18.7gb], net total_space [28.8gb], types [ext4]
[2023-09-25T14:23:55,461][INFO ][o.o.e.NodeEnvironment    ] [wazuh.indexer] heap size [512mb], compressed ordinary object pointers [true]
[2023-09-25T14:23:56,187][INFO ][o.o.n.Node               ] [wazuh.indexer] node name [wazuh.indexer], node ID [Hk5hYDO0Ttul8UHkicndug], cluster name [opensearch], roles [ingest, remote_cluster_client, data, cluster_manager]
[2023-09-25T14:24:08,385][WARN ][o.o.s.c.Salt             ] [wazuh.indexer] If you plan to use field masking pls configure compliance salt e1ukloTsQlOgPquJ to be a random string of 16 chars length identical on all nodes
[2023-09-25T14:24:08,431][ERROR][o.o.s.a.s.SinkProvider   ] [wazuh.indexer] Default endpoint could not be created, auditlog will not work properly.
[2023-09-25T14:24:08,434][WARN ][o.o.s.a.r.AuditMessageRouter] [wazuh.indexer] No default storage available, audit log may not work properly. Please check configuration.
[2023-09-25T14:24:08,434][INFO ][o.o.s.a.i.AuditLogImpl   ] [wazuh.indexer] Message routing enabled: false
[2023-09-25T14:24:08,483][INFO ][o.o.s.f.SecurityFilter   ] [wazuh.indexer] <NONE> indices are made immutable.
[2023-09-25T14:24:08,985][INFO ][o.o.a.b.ADCircuitBreakerService] [wazuh.indexer] Registered memory breaker.
[2023-09-25T14:24:09,517][INFO ][o.o.m.b.MLCircuitBreakerService] [wazuh.indexer] Registered ML memory breaker.
[2023-09-25T14:24:09,517][INFO ][o.o.m.b.MLCircuitBreakerService] [wazuh.indexer] Registered ML disk breaker.
[2023-09-25T14:24:09,520][INFO ][o.o.m.b.MLCircuitBreakerService] [wazuh.indexer] Registered ML native memory breaker.
[2023-09-25T14:24:09,684][INFO ][o.r.Reflections          ] [wazuh.indexer] Reflections took 70 ms to scan 1 urls, producing 13 keys and 33 values 
[2023-09-25T14:24:10,994][INFO ][o.o.t.NettyAllocator     ] [wazuh.indexer] creating NettyAllocator with the following configs: [name=unpooled, suggested_max_allocation_size=256kb, factors={opensearch.unsafe.use_unpooled_allocator=null, g1gc_enabled=true, g1gc_region_size=1mb, heap_size=512mb}]
[2023-09-25T14:24:11,134][INFO ][o.o.d.DiscoveryModule    ] [wazuh.indexer] using discovery type [single-node] and seed hosts providers [settings]
[2023-09-25T14:24:11,854][WARN ][o.o.g.DanglingIndicesState] [wazuh.indexer] gateway.auto_import_dangling_indices is disabled, dangling indices will not be automatically detected or imported and must be managed manually
[2023-09-25T14:24:13,093][INFO ][o.o.p.h.c.PerformanceAnalyzerConfigAction] [wazuh.indexer] PerformanceAnalyzer Enabled: false
[2023-09-25T14:24:13,251][INFO ][o.o.n.Node               ] [wazuh.indexer] initialized
[2023-09-25T14:24:13,254][INFO ][o.o.n.Node               ] [wazuh.indexer] starting ...
[2023-09-25T14:24:13,595][INFO ][o.o.t.TransportService   ] [wazuh.indexer] publish_address {172.19.0.2:9300}, bound_addresses {0.0.0.0:9300}
[2023-09-25T14:24:14,333][INFO ][o.o.c.c.Coordinator      ] [wazuh.indexer] cluster UUID [wzc2Q0rQTPGdyXzToaTiUg]
[2023-09-25T14:24:14,565][INFO ][o.o.c.s.MasterService    ] [wazuh.indexer] elected-as-cluster-manager ([1] nodes joined)[{wazuh.indexer}{Hk5hYDO0Ttul8UHkicndug}{Akc-SuwATUGxl-H4SO0T2g}{172.19.0.2}{172.19.0.2:9300}{dimr}{shard_indexing_pressure_enabled=true} elect leader, _BECOME_CLUSTER_MANAGER_TASK_, _FINISH_ELECTION_], term: 2, version: 40, delta: cluster-manager node changed {previous [], current [{wazuh.indexer}{Hk5hYDO0Ttul8UHkicndug}{Akc-SuwATUGxl-H4SO0T2g}{172.19.0.2}{172.19.0.2:9300}{dimr}{shard_indexing_pressure_enabled=true}]}
[2023-09-25T14:24:14,750][INFO ][o.o.c.s.ClusterApplierService] [wazuh.indexer] cluster-manager node changed {previous [], current [{wazuh.indexer}{Hk5hYDO0Ttul8UHkicndug}{Akc-SuwATUGxl-H4SO0T2g}{172.19.0.2}{172.19.0.2:9300}{dimr}{shard_indexing_pressure_enabled=true}]}, term: 2, version: 40, reason: Publication{term=2, version=40}
[2023-09-25T14:24:14,797][INFO ][o.o.a.c.ADClusterEventListener] [wazuh.indexer] Cluster is not recovered yet.
[2023-09-25T14:24:14,814][INFO ][o.o.a.u.d.DestinationMigrationCoordinator] [wazuh.indexer] Detected cluster change event for destination migration
[2023-09-25T14:24:14,871][INFO ][o.o.i.i.ManagedIndexCoordinator] [wazuh.indexer] Cache cluster manager node onClusterManager time: 1695651854870
[2023-09-25T14:24:14,903][WARN ][o.o.p.c.s.h.ConfigOverridesClusterSettingHandler] [wazuh.indexer] Config override setting update called with empty string. Ignoring.
[2023-09-25T14:24:14,944][INFO ][o.o.d.PeerFinder         ] [wazuh.indexer] setting findPeersInterval to [1s] as node commission status = [true] for local node [{wazuh.indexer}{Hk5hYDO0Ttul8UHkicndug}{Akc-SuwATUGxl-H4SO0T2g}{172.19.0.2}{172.19.0.2:9300}{dimr}{shard_indexing_pressure_enabled=true}]
[2023-09-25T14:24:14,953][INFO ][o.o.h.AbstractHttpServerTransport] [wazuh.indexer] publish_address {172.19.0.2:9200}, bound_addresses {0.0.0.0:9200}
[2023-09-25T14:24:14,953][INFO ][o.o.n.Node               ] [wazuh.indexer] started
[2023-09-25T14:24:14,954][INFO ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] Node started
[2023-09-25T14:24:14,954][INFO ][o.o.s.c.ConfigurationRepository] [wazuh.indexer] Will attempt to create index .opendistro_security and default configs if they are absent
[2023-09-25T14:24:14,973][INFO ][o.o.s.OpenSearchSecurityPlugin] [wazuh.indexer] 0 OpenSearch Security modules loaded so far: []
[2023-09-25T14:24:14,976][INFO ][o.o.s.c.ConfigurationRepository] [wazuh.indexer] Background init thread started. Install default config?: true
[2023-09-25T14:24:15,150][INFO ][o.o.c.s.ClusterSettings  ] [wazuh.indexer] updating [plugins.index_state_management.template_migration.control] from [0] to [-1]
[2023-09-25T14:24:15,235][INFO ][o.o.a.c.HashRing         ] [wazuh.indexer] Node added: [Hk5hYDO0Ttul8UHkicndug]
[2023-09-25T14:24:15,240][INFO ][o.o.a.c.HashRing         ] [wazuh.indexer] Add data node to AD version hash ring: Hk5hYDO0Ttul8UHkicndug
[2023-09-25T14:24:15,242][INFO ][o.o.a.c.HashRing         ] [wazuh.indexer] All nodes with known AD version: {Hk5hYDO0Ttul8UHkicndug=ADNodeInfo{version=2.6.0, isEligibleDataNode=true}}
[2023-09-25T14:24:15,243][INFO ][o.o.a.c.HashRing         ] [wazuh.indexer] Rebuild AD hash ring for realtime AD with cooldown, nodeChangeEvents size 0
[2023-09-25T14:24:15,244][INFO ][o.o.a.c.HashRing         ] [wazuh.indexer] Build AD version hash ring successfully
[2023-09-25T14:24:15,245][INFO ][o.o.a.c.ADDataMigrator   ] [wazuh.indexer] Start migrating AD data
[2023-09-25T14:24:15,245][INFO ][o.o.a.u.d.DestinationMigrationCoordinator] [wazuh.indexer] Detected cluster change event for destination migration
[2023-09-25T14:24:15,245][INFO ][o.o.a.c.ADDataMigrator   ] [wazuh.indexer] AD job index doesn't exist, no need to migrate
[2023-09-25T14:24:15,253][INFO ][o.o.a.c.ADClusterEventListener] [wazuh.indexer] Init AD version hash ring successfully
[2023-09-25T14:24:15,290][INFO ][o.o.g.GatewayService     ] [wazuh.indexer] recovered [6] indices into cluster_state
[2023-09-25T14:24:15,295][WARN ][o.o.o.i.ObservabilityIndex] [wazuh.indexer] message: index [.opensearch-observability/lo632EYMTfiDpPPdNLqlZA] already exists
[2023-09-25T14:24:15,297][INFO ][o.o.o.i.ObservabilityTracesIndex] [wazuh.indexer] observability:createMappingTemplate sso_trace_template API called
[2023-09-25T14:24:15,301][INFO ][o.o.s.c.ConfigurationRepository] [wazuh.indexer] Index .opendistro_security already exists
[2023-09-25T14:24:15,302][INFO ][o.o.s.c.ConfigurationRepository] [wazuh.indexer] Node started, try to initialize it. Wait for at least yellow cluster state....
[2023-09-25T14:24:15,497][INFO ][o.o.p.PluginsService     ] [wazuh.indexer] PluginService:onIndexModule index:[wazuh-alerts-4.x-2023.09.25/Bw1VVjEfS1WXdQYlSLw2zA]
[2023-09-25T14:24:15,725][INFO ][o.o.p.PluginsService     ] [wazuh.indexer] PluginService:onIndexModule index:[.opendistro_security/JBdqSQAsS5eDcVx2EBhSYQ]
[2023-09-25T14:24:15,739][INFO ][o.o.p.PluginsService     ] [wazuh.indexer] PluginService:onIndexModule index:[wazuh-monitoring-2023.39w/wr6alq8fTLqzupUPKeuqhg]
[2023-09-25T14:24:15,760][INFO ][o.o.p.PluginsService     ] [wazuh.indexer] PluginService:onIndexModule index:[wazuh-statistics-2023.39w/Ahj39CU0T-qmzYr2Df4lLg]
[2023-09-25T14:24:15,865][INFO ][o.o.a.u.d.DestinationMigrationCoordinator] [wazuh.indexer] Detected cluster change event for destination migration
[2023-09-25T14:24:15,903][INFO ][o.o.p.PluginsService     ] [wazuh.indexer] PluginService:onIndexModule index:[validate-template-e7kepwivr5oeltjt2vxtfa/oc_wW1w8RW2b2T0rvoOrJQ]
[2023-09-25T14:24:16,014][INFO ][o.o.c.m.MetadataIndexTemplateService] [wazuh.indexer] updating index template [sso_trace_template] for index patterns [sso_traces-*-*]
[2023-09-25T14:24:16,098][INFO ][o.o.a.u.d.DestinationMigrationCoordinator] [wazuh.indexer] Detected cluster change event for destination migration
[2023-09-25T14:24:16,116][INFO ][o.o.o.i.ObservabilityTracesIndex] [wazuh.indexer] observability:Mapping Template sso_trace_template creation Acknowledged
[2023-09-25T14:24:16,117][INFO ][o.o.o.i.ObservabilityMetricsIndex] [wazuh.indexer] observability:createMappingTemplate sso_metric_template API called
[2023-09-25T14:24:16,208][INFO ][o.o.a.u.d.DestinationMigrationCoordinator] [wazuh.indexer] Detected cluster change event for destination migration
[2023-09-25T14:24:16,219][INFO ][o.o.s.s.ConfigHelper     ] [wazuh.indexer] Will update 'config' with /usr/share/wazuh-indexer/opensearch-security/config.yml and populate it with empty doc if file missing and populateEmptyIfFileMissing=false
[2023-09-25T14:24:16,234][INFO ][o.o.p.PluginsService     ] [wazuh.indexer] PluginService:onIndexModule index:[validate-template-f_alwsnfrnausdxly0gv3q/BT8UfC9AQzKohlSPZy6AdA]
[2023-09-25T14:24:16,292][INFO ][o.o.c.m.MetadataIndexTemplateService] [wazuh.indexer] updating index template [sso_metric_template] for index patterns [sso_metrics-*-*]
[2023-09-25T14:24:16,368][INFO ][o.o.a.u.d.DestinationMigrationCoordinator] [wazuh.indexer] Detected cluster change event for destination migration
[2023-09-25T14:24:16,372][INFO ][o.o.o.i.ObservabilityMetricsIndex] [wazuh.indexer] observability:Mapping Template sso_metric_template creation Acknowledged
[2023-09-25T14:24:16,491][INFO ][o.o.p.PluginsService     ] [wazuh.indexer] PluginService:onIndexModule index:[.kibana_1/Eg23zwu7QQii3NOcqYYxNA]
[2023-09-25T14:24:16,539][INFO ][o.o.s.s.ConfigHelper     ] [wazuh.indexer] Index .opendistro_security already contains doc with id config, skipping update.
[2023-09-25T14:24:16,540][INFO ][o.o.s.s.ConfigHelper     ] [wazuh.indexer] Will update 'roles' with /usr/share/wazuh-indexer/opensearch-security/roles.yml and populate it with empty doc if file missing and populateEmptyIfFileMissing=false
[2023-09-25T14:24:16,547][INFO ][o.o.s.s.ConfigHelper     ] [wazuh.indexer] Index .opendistro_security already contains doc with id roles, skipping update.
[2023-09-25T14:24:16,548][INFO ][o.o.s.s.ConfigHelper     ] [wazuh.indexer] Will update 'rolesmapping' with /usr/share/wazuh-indexer/opensearch-security/roles_mapping.yml and populate it with empty doc if file missing and populateEmptyIfFileMissing=false
[2023-09-25T14:24:16,558][INFO ][o.o.p.PluginsService     ] [wazuh.indexer] PluginService:onIndexModule index:[.opensearch-observability/lo632EYMTfiDpPPdNLqlZA]
[2023-09-25T14:24:16,559][INFO ][o.o.s.s.ConfigHelper     ] [wazuh.indexer] Index .opendistro_security already contains doc with id rolesmapping, skipping update.
[2023-09-25T14:24:16,569][INFO ][o.o.s.s.ConfigHelper     ] [wazuh.indexer] Will update 'internalusers' with /usr/share/wazuh-indexer/opensearch-security/internal_users.yml and populate it with empty doc if file missing and populateEmptyIfFileMissing=false
[2023-09-25T14:24:16,582][INFO ][o.o.s.s.ConfigHelper     ] [wazuh.indexer] Index .opendistro_security already contains doc with id internalusers, skipping update.
[2023-09-25T14:24:16,583][INFO ][o.o.s.s.ConfigHelper     ] [wazuh.indexer] Will update 'actiongroups' with /usr/share/wazuh-indexer/opensearch-security/action_groups.yml and populate it with empty doc if file missing and populateEmptyIfFileMissing=false
[2023-09-25T14:24:16,596][INFO ][o.o.s.s.ConfigHelper     ] [wazuh.indexer] Index .opendistro_security already contains doc with id actiongroups, skipping update.
[2023-09-25T14:24:16,597][INFO ][o.o.s.s.ConfigHelper     ] [wazuh.indexer] Will update 'tenants' with /usr/share/wazuh-indexer/opensearch-security/tenants.yml and populate it with empty doc if file missing and populateEmptyIfFileMissing=false
[2023-09-25T14:24:16,606][INFO ][o.o.s.s.ConfigHelper     ] [wazuh.indexer] Index .opendistro_security already contains doc with id tenants, skipping update.
[2023-09-25T14:24:16,607][INFO ][o.o.s.s.ConfigHelper     ] [wazuh.indexer] Will update 'nodesdn' with /usr/share/wazuh-indexer/opensearch-security/nodes_dn.yml and populate it with empty doc if file missing and populateEmptyIfFileMissing=true
[2023-09-25T14:24:16,613][INFO ][o.o.s.s.ConfigHelper     ] [wazuh.indexer] Index .opendistro_security already contains doc with id nodesdn, skipping update.
[2023-09-25T14:24:16,613][INFO ][o.o.s.s.ConfigHelper     ] [wazuh.indexer] Will update 'whitelist' with /usr/share/wazuh-indexer/opensearch-security/whitelist.yml and populate it with empty doc if file missing and populateEmptyIfFileMissing=true
[2023-09-25T14:24:16,623][INFO ][o.o.s.s.ConfigHelper     ] [wazuh.indexer] Index .opendistro_security already contains doc with id whitelist, skipping update.
[2023-09-25T14:24:16,629][INFO ][o.o.s.s.ConfigHelper     ] [wazuh.indexer] Will update 'allowlist' with /usr/share/wazuh-indexer/opensearch-security/allowlist.yml and populate it with empty doc if file missing and populateEmptyIfFileMissing=true
[2023-09-25T14:24:16,632][INFO ][o.o.s.s.ConfigHelper     ] [wazuh.indexer] Index .opendistro_security already contains doc with id allowlist, skipping update.
[2023-09-25T14:24:16,633][INFO ][o.o.s.s.ConfigHelper     ] [wazuh.indexer] Will update 'audit' with /usr/share/wazuh-indexer/opensearch-security/audit.yml and populate it with empty doc if file missing and populateEmptyIfFileMissing=false
[2023-09-25T14:24:16,640][ERROR][o.o.s.a.BackendRegistry  ] [wazuh.indexer] Not yet initialized (you may need to run securityadmin)
[2023-09-25T14:24:16,646][INFO ][o.o.a.u.d.DestinationMigrationCoordinator] [wazuh.indexer] Detected cluster change event for destination migration
[2023-09-25T14:24:16,703][INFO ][o.o.a.u.d.DestinationMigrationCoordinator] [wazuh.indexer] Detected cluster change event for destination migration
[2023-09-25T14:24:16,731][INFO ][o.o.s.s.ConfigHelper     ] [wazuh.indexer] Index .opendistro_security already contains doc with id audit, skipping update.
[2023-09-25T14:24:16,790][INFO ][o.o.a.u.d.DestinationMigrationCoordinator] [wazuh.indexer] Detected cluster change event for destination migration
[2023-09-25T14:24:16,846][INFO ][o.o.a.u.d.DestinationMigrationCoordinator] [wazuh.indexer] Detected cluster change event for destination migration
[2023-09-25T14:24:17,012][INFO ][o.o.c.r.a.AllocationService] [wazuh.indexer] Cluster health status changed from [RED] to [GREEN] (reason: [shards started [[.kibana_1][0]]]).
[2023-09-25T14:24:17,097][INFO ][o.o.a.u.d.DestinationMigrationCoordinator] [wazuh.indexer] Detected cluster change event for destination migration
[2023-09-25T14:24:17,124][INFO ][stdout                   ] [wazuh.indexer] [FINE] No subscribers registered for event class org.opensearch.security.securityconf.DynamicConfigFactory$NodesDnModelImpl
[2023-09-25T14:24:17,125][INFO ][stdout                   ] [wazuh.indexer] [FINE] No subscribers registered for event class org.greenrobot.eventbus.NoSubscriberEvent
[2023-09-25T14:24:17,126][INFO ][o.o.s.a.i.AuditLogImpl   ] [wazuh.indexer] Auditing on REST API is enabled.
[2023-09-25T14:24:17,126][INFO ][o.o.s.a.i.AuditLogImpl   ] [wazuh.indexer] [AUTHENTICATED, GRANTED_PRIVILEGES] are excluded from REST API auditing.
[2023-09-25T14:24:17,126][INFO ][o.o.s.a.i.AuditLogImpl   ] [wazuh.indexer] Auditing on Transport API is enabled.
[2023-09-25T14:24:17,127][INFO ][o.o.s.a.i.AuditLogImpl   ] [wazuh.indexer] [AUTHENTICATED, GRANTED_PRIVILEGES] are excluded from Transport API auditing.
[2023-09-25T14:24:17,127][INFO ][o.o.s.a.i.AuditLogImpl   ] [wazuh.indexer] Auditing of request body is enabled.
[2023-09-25T14:24:17,127][INFO ][o.o.s.a.i.AuditLogImpl   ] [wazuh.indexer] Bulk requests resolution is disabled during request auditing.
[2023-09-25T14:24:17,127][INFO ][o.o.s.a.i.AuditLogImpl   ] [wazuh.indexer] Index resolution is enabled during request auditing.
[2023-09-25T14:24:17,128][INFO ][o.o.s.a.i.AuditLogImpl   ] [wazuh.indexer] Sensitive headers auditing is enabled.
[2023-09-25T14:24:17,128][INFO ][o.o.s.a.i.AuditLogImpl   ] [wazuh.indexer] Auditing requests from kibanaserver users is disabled.
[2023-09-25T14:24:17,128][INFO ][o.o.s.a.i.AuditLogImpl   ] [wazuh.indexer] Auditing of external configuration is disabled.
[2023-09-25T14:24:17,129][INFO ][o.o.s.a.i.AuditLogImpl   ] [wazuh.indexer] Auditing of internal configuration is enabled.
[2023-09-25T14:24:17,129][INFO ][o.o.s.a.i.AuditLogImpl   ] [wazuh.indexer] Auditing only metadata information for read request is enabled.
[2023-09-25T14:24:17,129][INFO ][o.o.s.a.i.AuditLogImpl   ] [wazuh.indexer] Auditing will watch {} for read requests.
[2023-09-25T14:24:17,129][INFO ][o.o.s.a.i.AuditLogImpl   ] [wazuh.indexer] Auditing read operation requests from kibanaserver users is disabled.
[2023-09-25T14:24:17,130][INFO ][o.o.s.a.i.AuditLogImpl   ] [wazuh.indexer] Auditing only metadata information for write request is enabled.
[2023-09-25T14:24:17,130][INFO ][o.o.s.a.i.AuditLogImpl   ] [wazuh.indexer] Auditing diffs for write requests is disabled.
[2023-09-25T14:24:17,130][INFO ][o.o.s.a.i.AuditLogImpl   ] [wazuh.indexer] Auditing write operation requests from kibanaserver users is disabled.
[2023-09-25T14:24:17,130][INFO ][o.o.s.a.i.AuditLogImpl   ] [wazuh.indexer] Auditing will watch <NONE> for write requests.
[2023-09-25T14:24:17,130][INFO ][o.o.s.a.i.AuditLogImpl   ] [wazuh.indexer] .opendistro_security is used as internal security index.
[2023-09-25T14:24:17,131][INFO ][o.o.s.a.i.AuditLogImpl   ] [wazuh.indexer] Internal index used for posting audit logs is null
[2023-09-25T14:24:17,131][INFO ][o.o.s.c.ConfigurationRepository] [wazuh.indexer] Hot-reloading of audit configuration is enabled
[2023-09-25T14:24:17,132][INFO ][o.o.s.c.ConfigurationRepository] [wazuh.indexer] Node 'wazuh.indexer' initialized
[2023-09-25T14:24:17,767][WARN ][o.o.s.a.BackendRegistry  ] [wazuh.indexer] Authentication finally failed for kibanaserver from 172.19.0.4:46296
[2023-09-25T14:24:20,027][WARN ][o.o.s.a.BackendRegistry  ] [wazuh.indexer] Authentication finally failed for kibanaserver from 172.19.0.4:46296
[2023-09-25T14:24:21,331][WARN ][o.o.s.a.BackendRegistry  ] [wazuh.indexer] Authentication finally failed for admin from 172.19.0.3:33270
[2023-09-25T14:24:22,542][WARN ][o.o.s.a.BackendRegistry  ] [wazuh.indexer] Authentication finally failed for kibanaserver from 172.19.0.4:46296
[2023-09-25T14:24:25,060][WARN ][o.o.s.a.BackendRegistry  ] [wazuh.indexer] Authentication finally failed for kibanaserver from 172.19.0.4:46296
[2023-09-25T14:24:27,551][WARN ][o.o.s.a.BackendRegistry  ] [wazuh.indexer] Authentication finally failed for kibanaserver from 172.19.0.4:46296
[2023-09-25T14:24:30,075][WARN ][o.o.s.a.BackendRegistry  ] [wazuh.indexer] Authentication finally failed for kibanaserver from 172.19.0.4:46296
[2023-09-25T14:24:32,561][WARN ][o.o.s.a.BackendRegistry  ] [wazuh.indexer] Authentication finally failed for kibanaserver from 172.19.0.4:46296
[2023-09-25T14:24:35,131][WARN ][o.o.s.a.BackendRegistry  ] [wazuh.indexer] Authentication finally failed for kibanaserver from 172.19.0.4:46296
[2023-09-25T14:24:36,671][WARN ][o.o.s.a.BackendRegistry  ] [wazuh.indexer] Authentication finally failed for admin from 172.19.0.3:33270
[2023-09-25T14:24:37,714][WARN ][o.o.s.a.BackendRegistry  ] [wazuh.indexer] Authentication finally failed for kibanaserver from 172.19.0.4:46296
[2023-09-25T14:24:40,074][WARN ][o.o.s.a.BackendRegistry  ] [wazuh.indexer] Authentication finally failed for kibanaserver from 172.19.0.4:46296
[2023-09-25T14:24:42,512][WARN ][o.o.s.a.BackendRegistry  ] [wazuh.indexer] Authentication finally failed for kibanaserver from 172.19.0.4:46296
[2023-09-25T14:24:45,037][WARN ][o.o.s.a.BackendRegistry  ] [wazuh.indexer] Authentication finally failed for kibanaserver from 172.19.0.4:46296
[2023-09-25T14:24:47,575][WARN ][o.o.s.a.BackendRegistry  ] [wazuh.indexer] Authentication finally failed for kibanaserver from 172.19.0.4:46296
[2023-09-25T14:24:50,200][WARN ][o.o.s.a.BackendRegistry  ] [wazuh.indexer] Authentication finally failed for kibanaserver from 172.19.0.4:46296
[2023-09-25T14:24:52,573][WARN ][o.o.s.a.BackendRegistry  ] [wazuh.indexer] Authentication finally failed for kibanaserver from 172.19.0.4:46296
[2023-09-25T14:24:53,056][INFO ][stdout                   ] [wazuh.indexer] [FINE] No subscribers registered for event class org.opensearch.security.securityconf.DynamicConfigFactory$NodesDnModelImpl
[2023-09-25T14:24:53,057][INFO ][stdout                   ] [wazuh.indexer] [FINE] No subscribers registered for event class org.greenrobot.eventbus.NoSubscriberEvent
[2023-09-25T14:24:53,057][INFO ][o.o.s.a.i.AuditLogImpl   ] [wazuh.indexer] Auditing on REST API is enabled.
[2023-09-25T14:24:53,058][INFO ][o.o.s.a.i.AuditLogImpl   ] [wazuh.indexer] [AUTHENTICATED, GRANTED_PRIVILEGES] are excluded from REST API auditing.
[2023-09-25T14:24:53,061][INFO ][o.o.s.a.i.AuditLogImpl   ] [wazuh.indexer] Auditing on Transport API is enabled.
[2023-09-25T14:24:53,061][INFO ][o.o.s.a.i.AuditLogImpl   ] [wazuh.indexer] [AUTHENTICATED, GRANTED_PRIVILEGES] are excluded from Transport API auditing.
[2023-09-25T14:24:53,061][INFO ][o.o.s.a.i.AuditLogImpl   ] [wazuh.indexer] Auditing of request body is enabled.
[2023-09-25T14:24:53,061][INFO ][o.o.s.a.i.AuditLogImpl   ] [wazuh.indexer] Bulk requests resolution is disabled during request auditing.
[2023-09-25T14:24:53,061][INFO ][o.o.s.a.i.AuditLogImpl   ] [wazuh.indexer] Index resolution is enabled during request auditing.
[2023-09-25T14:24:53,061][INFO ][o.o.s.a.i.AuditLogImpl   ] [wazuh.indexer] Sensitive headers auditing is enabled.
[2023-09-25T14:24:53,061][INFO ][o.o.s.a.i.AuditLogImpl   ] [wazuh.indexer] Auditing requests from kibanaserver users is disabled.
[2023-09-25T14:24:53,061][INFO ][o.o.s.a.i.AuditLogImpl   ] [wazuh.indexer] Auditing of external configuration is disabled.
[2023-09-25T14:24:53,061][INFO ][o.o.s.a.i.AuditLogImpl   ] [wazuh.indexer] Auditing of internal configuration is enabled.
[2023-09-25T14:24:53,061][INFO ][o.o.s.a.i.AuditLogImpl   ] [wazuh.indexer] Auditing only metadata information for read request is enabled.
[2023-09-25T14:24:53,061][INFO ][o.o.s.a.i.AuditLogImpl   ] [wazuh.indexer] Auditing will watch {} for read requests.
[2023-09-25T14:24:53,061][INFO ][o.o.s.a.i.AuditLogImpl   ] [wazuh.indexer] Auditing read operation requests from kibanaserver users is disabled.
[2023-09-25T14:24:53,062][INFO ][o.o.s.a.i.AuditLogImpl   ] [wazuh.indexer] Auditing only metadata information for write request is enabled.
[2023-09-25T14:24:53,062][INFO ][o.o.s.a.i.AuditLogImpl   ] [wazuh.indexer] Auditing diffs for write requests is disabled.
[2023-09-25T14:24:53,062][INFO ][o.o.s.a.i.AuditLogImpl   ] [wazuh.indexer] Auditing write operation requests from kibanaserver users is disabled.
[2023-09-25T14:24:53,062][INFO ][o.o.s.a.i.AuditLogImpl   ] [wazuh.indexer] Auditing will watch <NONE> for write requests.
[2023-09-25T14:24:53,062][INFO ][o.o.s.a.i.AuditLogImpl   ] [wazuh.indexer] .opendistro_security is used as internal security index.
[2023-09-25T14:24:53,062][INFO ][o.o.s.a.i.AuditLogImpl   ] [wazuh.indexer] Internal index used for posting audit logs is null
[2023-09-25T14:24:56,315][INFO ][o.o.p.PluginsService     ] [wazuh.indexer] PluginService:onIndexModule index:[meoQqmkOTPCUgAMqMTFURA/iOFguhBTSfqDejTL_c0r3Q]
[2023-09-25T14:24:56,343][INFO ][o.o.p.PluginsService     ] [wazuh.indexer] PluginService:onIndexModule index:[BPdQmITNRDSWJP-5Uerj3A/7BrfA9bvRLmmpW4Qr_myOg]
[2023-09-25T14:24:57,661][INFO ][o.o.c.m.MetadataUpdateSettingsService] [wazuh.indexer] updating number_of_replicas to [0] for indices [wazuh-monitoring-2023.39w]
[2023-09-25T14:24:57,756][INFO ][o.o.p.PluginsService     ] [wazuh.indexer] PluginService:onIndexModule index:[wazuh-monitoring-2023.39w/wr6alq8fTLqzupUPKeuqhg]
[2023-09-25T14:24:57,779][INFO ][o.o.c.m.MetadataMappingService] [wazuh.indexer] [wazuh-monitoring-2023.39w/wr6alq8fTLqzupUPKeuqhg] update_mapping [_doc]
[2023-09-25T14:24:57,830][INFO ][o.o.a.u.d.DestinationMigrationCoordinator] [wazuh.indexer] Detected cluster change event for destination migration
[2023-09-25T14:24:58,248][WARN ][o.o.s.a.BackendRegistry  ] [wazuh.indexer] Authentication finally failed for admin from 172.19.0.4:59364
[2023-09-25T14:25:00,434][WARN ][o.o.s.a.BackendRegistry  ] [wazuh.indexer] Authentication finally failed for admin from 172.19.0.4:59364
[2023-09-25T14:25:01,946][WARN ][o.o.s.a.BackendRegistry  ] [wazuh.indexer] Authentication finally failed for admin from 172.19.0.4:59364
[2023-09-25T14:25:08,839][INFO ][o.o.p.PluginsService     ] [wazuh.indexer] PluginService:onIndexModule index:[CUPq_slpR1-11F2AWeyl1g/fC_zyz0AR0SlABLDtjkPgQ]
[2023-09-25T14:25:08,880][INFO ][o.o.c.m.MetadataIndexTemplateService] [wazuh.indexer] adding template [wazuh] for index patterns [wazuh-alerts-4.x-*, wazuh-archives-4.x-*]
[2023-09-25T14:25:08,945][INFO ][o.o.a.u.d.DestinationMigrationCoordinator] [wazuh.indexer] Detected cluster change event for destination migration
[2023-09-25T14:25:14,874][INFO ][o.o.i.i.ManagedIndexCoordinator] [wazuh.indexer] Performing move cluster state metadata.
[2023-09-25T14:25:14,875][INFO ][o.o.i.i.MetadataService  ] [wazuh.indexer] ISM config index not exist, so we cancel the metadata migration job.
[2023-09-25T14:25:25,215][WARN ][o.o.s.a.BackendRegistry  ] [wazuh.indexer] Authentication finally failed for admin from 172.19.0.4:59364
[2023-09-25T14:26:14,874][INFO ][o.o.i.i.ManagedIndexCoordinator] [wazuh.indexer] Cancel background move metadata process.
[2023-09-25T14:26:14,877][INFO ][o.o.i.i.ManagedIndexCoordinator] [wazuh.indexer] Performing move cluster state metadata.
[2023-09-25T14:26:14,880][INFO ][o.o.i.i.MetadataService  ] [wazuh.indexer] Move metadata has finished.
[2023-09-25T14:26:45,731][WARN ][o.o.s.a.BackendRegistry  ] [wazuh.indexer] Authentication finally failed for admin from 172.19.0.4:51258

@teddytpc1
Copy link
Member

teddytpc1 commented Sep 26, 2023 •
edited

Hi, @pro-akim.
The warnings and errors should be reported or related to an existing or known issue. e.g:

  • "insecure file permissions" warnings.
  • "Default endpoint could not be created, auditlog will not work properly" error.

Also, we need more detail for this issue: wazuh/wazuh-documentation#6551.

This was referenced Sep 26, 2023
Closed
Closed
@pro-akim
Copy link
Member

Update

New issues opened in relation to log warning/error messages
Information extended wazuh/wazuh-documentation#6551

@fcaffieri
Copy link
Member

LGTM

@rauldpm rauldpm mentioned this issue Oct 11, 2023
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@pro-akim pro-akim

Labels
level/subtask type/test
Projects
No open projects
Release 4.5.3
Status: Done
Milestone
No milestone
Development

No branches or pull requests
5 participants
@gdiazlo @havidarou @teddytpc1 @fcaffieri @pro-akim