Redirect logs to a file

[nico-stefani]

Related issue
#27509

Description

This PR closes #27509. Adds a log file /var/log/wazuh-server/wazuh-server.log to redirect the output.

When the service is started with SysV init, this is the only log destination; when it is used with Systemd, it is also sent to the journal.

Logs/Alerts example

SysV init

root@bec51b3f194e:/workdir# service wazuh-server start
root@bec51b3f194e:/workdir# tail /var/log/wazuh-server/wazuh-server.log
2025/04/16 21:36:59 INFO: [Server] [Main] Starting wazuh-server-management-apid
2025/04/16 21:37:00 INFO: [Management API] Starting API
2025/04/16 21:37:01 INFO: [Server] [Main] Started wazuh-server-management-apid (pid: 190)
2025/04/16 21:37:01 INFO: [Management API] Updating RBAC information
2025/04/16 21:37:01 INFO: [Management API] Listening on 0.0.0.0:55000.
2025/04/16 21:37:01 DEBUG: [Management API] Connecting to the indexer client.
2025/04/16 21:37:01 INFO: [Management API] Populating installation UID...
2025/04/16 21:37:01 INFO: [Management API] Getting updates information...
2025/04/16 21:37:02 WARNING: [Management API] Cannot initialize the indexer client.
2025/04/16 21:37:02 INFO: [Management API] Sleeping 1.8626950219348126s until next try.

Systemd

root@vagrant:/vagrant# systemctl start wazuh-server
root@vagrant:/vagrant# tail /var/log/wazuh-server/wazuh-server.log
2025/04/16 21:29:51 INFO: [Communications API] Application startup complete.
2025/04/16 21:29:52 INFO: [Management API] Starting API
2025/04/16 21:29:53 INFO: [Server] [Main] Started wazuh-server-management-apid (pid: 7438)
2025/04/16 21:29:53 INFO: [Management API] Updating RBAC information
2025/04/16 21:29:53 DEBUG: [Management API] Connecting to the indexer client.
2025/04/16 21:29:53 INFO: [Management API] Listening on 0.0.0.0:55000.
2025/04/16 21:29:53 INFO: [Management API] Populating installation UID...
2025/04/16 21:29:53 INFO: [Management API] Getting updates information...
2025/04/16 21:29:54 WARNING: [Management API] Cannot initialize the indexer client.
2025/04/16 21:29:54 INFO: [Management API] Sleeping 1.971595444072484s until next try.
root@vagrant:/vagrant# journalctl -u wazuh-server -xe
Apr 16 21:29:54 vagrant sh[7339]: 2025/04/16 21:29:54 WARNING: [Management API] Cannot initialize the indexer client.
Apr 16 21:29:54 vagrant sh[7339]: 2025/04/16 21:29:54 INFO: [Management API] Sleeping 1.971595444072484s until next try.
Apr 16 21:29:56 vagrant sh[7339]: 2025/04/16 21:29:56 DEBUG: [Management API] Connecting to the indexer client.
Apr 16 21:29:56 vagrant sh[7339]: 2025/04/16 21:29:56 WARNING: [Management API] Cannot initialize the indexer client.
Apr 16 21:29:56 vagrant sh[7339]: 2025/04/16 21:29:56 INFO: [Management API] Sleeping 2.2764543848298615s until next try.
Apr 16 21:29:58 vagrant sh[7339]: 2025/04/16 21:29:58 DEBUG: [Management API] Connecting to the indexer client.
Apr 16 21:29:58 vagrant sh[7339]: 2025/04/16 21:29:58 WARNING: [Management API] Cannot initialize the indexer client.
Apr 16 21:29:58 vagrant sh[7339]: 2025/04/16 21:29:58 INFO: [Management API] Sleeping 4.986916714513575s until next try.
Apr 16 21:30:03 vagrant sh[7339]: 2025/04/16 21:30:03 INFO: [Server] [Main] Getting orders from indexer
Apr 16 21:30:03 vagrant sh[7339]: 2025/04/16 21:30:03 WARNING: [Server] [Main] Cannot initialize the indexer client.
Apr 16 21:30:03 vagrant sh[7339]: 2025/04/16 21:30:03 INFO: [Server] [Main] Sleeping 1.630045067971996s until next try.
Apr 16 21:30:03 vagrant sh[7339]: 2025/04/16 21:30:03 DEBUG: [Management API] Connecting to the indexer client.
Apr 16 21:30:03 vagrant sh[7339]: 2025/04/16 21:30:03 DEBUG: [Management API] Closing the indexer client session.
Apr 16 21:30:03 vagrant sh[7339]: 2025/04/16 21:30:03 ERROR: [Management API] Failed updating RBAC information: Error 2200 - Could not connect to the indexer: Cannot connect to host wazuh-indexer:9200 ssl:default>
Apr 16 21:30:03 vagrant sh[7339]: 2025/04/16 21:30:03 INFO: [Management API] Updating RBAC information
Apr 16 21:30:03 vagrant sh[7339]: 2025/04/16 21:30:03 DEBUG: [Management API] Connecting to the indexer client.
Apr 16 21:30:03 vagrant sh[7339]: 2025/04/16 21:30:03 WARNING: [Management API] Cannot initialize the indexer client.
Apr 16 21:30:03 vagrant sh[7339]: 2025/04/16 21:30:03 INFO: [Management API] Sleeping 1.9529511599254286s until next try.
Apr 16 21:30:05 vagrant sh[7339]: 2025/04/16 21:30:05 WARNING: [Server] [Main] Cannot initialize the indexer client.
Apr 16 21:30:05 vagrant sh[7339]: 2025/04/16 21:30:05 INFO: [Server] [Main] Sleeping 2.9246471652515798s until next try.
Apr 16 21:30:05 vagrant sh[7339]: 2025/04/16 21:30:05 DEBUG: [Management API] Connecting to the indexer client.
Apr 16 21:30:05 vagrant sh[7339]: 2025/04/16 21:30:05 WARNING: [Management API] Cannot initialize the indexer client.
Apr 16 21:30:05 vagrant sh[7339]: 2025/04/16 21:30:05 INFO: [Management API] Sleeping 2.887955744755147s until next try.
Apr 16 21:30:07 vagrant sh[7339]: 2025/04/16 21:30:07 WARNING: [Server] [Main] Cannot initialize the indexer client.
Apr 16 21:30:07 vagrant sh[7339]: 2025/04/16 21:30:07 INFO: [Server] [Main] Sleeping 4.936351832527314s until next try.
Apr 16 21:30:08 vagrant sh[7339]: 2025/04/16 21:30:08 DEBUG: [Management API] Connecting to the indexer client.
Apr 16 21:30:08 vagrant sh[7339]: 2025/04/16 21:30:08 WARNING: [Management API] Cannot initialize the indexer client.
Apr 16 21:30:08 vagrant sh[7339]: 2025/04/16 21:30:08 INFO: [Management API] Sleeping 4.7097308620336245s until next try.

[javiersanchz]

LGTM!

[fdalmaup]

LGTM