Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Agent does not reconnect after service restoration if both DNS and Wazuh fail #216

Open
mmccarn opened this issue Oct 14, 2024 · 0 comments
Assignees
Labels
level/task Task issue module/agent reporter/community Issue reported by the community type/bug Bug issue

Comments

@mmccarn
Copy link

mmccarn commented Oct 14, 2024

Wazuh version Component Install type Install method Platform
4.9.0-1 wazuh-agent Agent Packages macOS 14.6.1
4.9.0-1 wazuh-agent Agent Packages macOS 15.0.1
4.9.0-1 wazuh-agent Agent Packages Ubuntu 22.04.5 LTS
4.9.0-1 wazuh-agent Agent Packages Debian GNU/Linux 12
4.9.0-1 wazuh-agent Agent Packages Centos 7
4.9.0-1 wazuh-agent Agent Packages Microsoft Windows 10 Pro 10.0.19045.5011

Relevant Configuration Details

  • All-in-one Wazuh server (proxmox guest)
  • Local DNS (proxmox guest, same node as Wazuh server)
  • Agents configured to connect to Wazuh using DNS hostname

Incident Details

  • proxmox node failed
  • proxmox node rebooted
  • wazuh operation restored
  • physical agents, and agents from other nodes, did not reconnect
  • agents remained disconnected for over 24 hours
  • agents reconnected successfully using .../bin/wazuh-control restart

Questions

  • Should disconnected agents reset themselves periodically?
    • Is there a configuration option to enable this behavior, or a scheduled task I can create?
  • If this is something that deserves developer time, are there logs I should provide?

[edit - add Windows guest and correct spelling]

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
level/task Task issue module/agent reporter/community Issue reported by the community type/bug Bug issue
Projects
None yet
Development

No branches or pull requests

2 participants