Wazuh logcollector: ERROR: (1611): Failed to get the message from the journal #26687
Replies: 1 comment
-
UpdateThe first problem (empty dashboard) is fixed. The second problem however still persists on the linux endpoint |
Beta Was this translation helpful? Give feedback.
-
After installing wazuh I added an agent to an endpoint.
However, on the dashboard when I go to the details of this endpoint, I find no logs there and all the sections empty (Mitre Attack, compliance, FIM, Event count evolution).
After that I took a look at the logs of the agent on the enpoint (/var/logs/ossec/ossec.log) and I found the following error : ERROR: (1611): Failed to get the message from the journal.
Any help would me appreciated.
Context:
Wazuh version: 4.9.1
Wazuh Installation: Distributed Installation.
Wazuh server OS: Ubuntu Server 24.04.1 LTS
Wazuh agent OS: Ubuntu 22.04.5
Beta Was this translation helpful? Give feedback.
All reactions