I never deployed this app before. I did a quick search and it is possible the Wazuh app ver. 3.10.2 that was deployed is for Splunk 8.0.
At this link you have the Wazuh app version to deploy to Splunk 7.3.0 -> https://github.com/wazuh/wazuh-splunk
I suggest to remove the current installation of Wazuh app and start splunk to make sure the kvstore is properly initialised, deploy the Wazuh app for Splunk 7.3.0 or you can troubleshoot the kvstore to identify the issue following this procedure.
https://docs.splunk.com/Documentation/Splunk/8.0.0/Admin/TroubleshootKVstore.
Also recommend you can run a backup of the kvstore once it is properly initialised to avoid lose data.
https://docs.splunk.com/Documentation/Splunk/8.0.0/Admin/BackupKVstore
And as the last try, I will try to resync the kvstore, but you can lose all the data that is kvstore, so be carefully if you choose this option, make sure you back it first.
... View more