All Apps and Add-ons

Can't save Wazuh API settings

dfumarola
New Member

Hi @wazuh community,

I'm trying to setup the Wazuh App and I'm facing an issue where I can't save my API settings via the UI.

I'm using the latest Wazuh App for our Splunk build, wazuhapp-splunk-3.11.4_8.0.1, and when I try to save the conf I get a 500 error locally when this check is run (hostname and password are omitted):

(from web_access.log)

/en-US/custom/SplunkAppForWazuh//manager/check_connection?ip=hxxps://X.Y.Z.T&port=55000&user=api_user&pass=********  HTTP/1.1" 500

(from web_service.log)

../../../var/log/splunk/web_service.log:2020-06-12 06:28:43,613 INFO [5ee358db8f7fdbf705c710] error:333 - GET /en-US/custom/SplunkAppForWazuh/manager/check_connection 127.0.0.1 8065
../../../var/log/splunk/web_service.log: File "<string>", line 351, in check_connection
../../../var/log/splunk/web_service.log: File "</opt/splunk/lib/python3.7/site-packages/decorator.py:decorator-gen-2800>", line 2, in check_connection
../../../var/log/splunk/web_service.log: File "</opt/splunk/lib/python3.7/site-packages/decorator.py:decorator-gen-2798>", line 2, in check_connection
../../../var/log/splunk/web_service.log: File "</opt/splunk/lib/python3.7/site-packages/decorator.py:decorator-gen-2797>", line 2, in check_connection
../../../var/log/splunk/web_service.log: File "</opt/splunk/lib/python3.7/site-packages/decorator.py:decorator-gen-2796>", line 2, in check_connection

My splunk instace run as a non-root.

I would appreciate any help provided

Labels (2)
Tags (1)
0 Karma
Get Updates on the Splunk Community!

Observe and Secure All Apps with Splunk

  Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

Splunk Decoded: Business Transactions vs Business IQ

It’s the morning of Black Friday, and your e-commerce site is handling 10x normal traffic. Orders are flowing, ...

Fastest way to demo Observability

I’ve been having a lot of fun learning about Kubernetes and Observability. I set myself an interesting ...