-
Notifications
You must be signed in to change notification settings - Fork 27
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Form input fields not showing in Wazuh Splunk app on CentOS 8 Stream #1307
Comments
Investigating the browser's developer console, I can see the following:
|
I just had this same issue of not seeing the input fields in a cluster deployment running on Centos 7 boxes. The error message from splunkd.log was:
After updating the permissions of /opt/splunk/var/lib/splunk/kvstore/mongo/splunk.key from 755 to 400, the dialog fields showed. I did not note the permissions before installing the App so I cannot say if the permissions for /opt/splunk/var/lib/splunk/kvstore/mongo/splunk.key changed when the Wazuh app for Splunk was installed. It has been included in the documentation. Let me know if this works for you. |
Description
Performing a single-instance deployment according to this documentation, if the Wazuh app is installed together with Splunk enterprise on CentOS 8 Stream, the form input fields where the credentials, port, and alias must be entered is not displayed
This behavior is not reproduced if the Wazuh app and Splunk enterprise are installed on CentOS 7
Wazuh app does not show form input fields:
Wazuh app show form input fields:
Steps to reproduce
Node1 CentOS 7 commands (192.168.57.102)
Node2 CentOS 8 Stream commands (192.168.57.104)
Regarding the alerts displayed on the health status of Splunk, the following is seen:
Ingestion Latency
Disk space
Screenshots
Wazuh app tab in CentOS 8 Stream:
Wazuh app tab in CentOS 7
Regards Raúl.
The text was updated successfully, but these errors were encountered: