Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Agents disconnect from manager without reason #8490

Open
okynos opened this issue May 3, 2021 · 0 comments
Open

Agents disconnect from manager without reason #8490

okynos opened this issue May 3, 2021 · 0 comments

Comments

@okynos
Copy link
Contributor

okynos commented May 3, 2021

Wazuh version Component Install type Install method Platform
v4.1.5 remoted Manager and Agent Packages CentOS 7

We have detected that Remoted or agentd lost their connection with each other in specific cases.
The agent seems that can't connect to the manager within 5 hours.
Here we put all the obtained data from the agent and manager.

Suspicious logs that repeats 7 times inside the manager log:

2021/05/02 14:32:03 ossec-remoted: INFO: (1409): Authentication file changed. Updating.
2021/05/02 14:32:03 ossec-remoted: INFO: (1410): Reading authentication keys file.

Evidences:
Manager memory decreases during hours (RSS) -> image
Same behaviour at agent side same hours (CPU) -> image

The rest of the information:
agent_centos_2.tar.gz
agent_ubuntu_3.tar.gz
manager_centos_1.tar.gz

Regards.

@okynos okynos changed the title [Development] Agents disconnect from manager without reason Agents disconnect from manager without reason May 3, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant