Integrating graylog with wazuh cluster

Graylog Central (peer support)
1

Before you post: Your responses to these questions will help the community help you. Please complete this template if you’re asking a support question.
Don’t forget to select tags to help index your topic!

1. Describe your incident:

Dear community,
i am integrating graylog with wazuh cluster, i finished installation process however i was not able to log to the dashboard and below log is resulted
2023-02-01T14:38:12.596+08:00 ERROR [VersionProbe] Unable to retrieve version from Elasticsearch node: Hostname ingest-hodor-02 not verified:
certificate: sha256/D36y/uQsI1XpAauCaivwfxez54ICoNa6+9MUib9fmJE=
DN: CN=ingest-hodor-02, OU=Wazuh, O=Wazuh, L=California, C=US
subjectAltNames: [192.168.3.3]. - Hostname ingest-hodor-02 not verified:
certificate: ****************************************************
DN: CN=ingest-hodor-02, OU=Wazuh, O=Wazuh, L=California, C=US

2. Describe your environment:

  • OS Information:

PRETTY_NAME=“Ubuntu 22.04.1 LTS”
NAME=“Ubuntu”
VERSION_ID=“22.04”
VERSION=“22.04.1 LTS (Jammy Jellyfish)”
VERSION_CODENAME=jammy
ID=ubuntu
ID_LIKE=debian

UBUNTU_CODENAME=jammy

  • Package Version:

  • Service logs, configurations, and environment variables:

3. What steps have you already taken to try and solve the problem?

4. How can the community help?

2

Hello && Welcome @dracarys

What I noticed was Hostname ingest-hodor-02 not verified:

  1. Ensure you cettificate are correct when usinghtem for Graylog found here
  2. Ensure the correct certificate ar ein the Keystore, some members us JAAV default keystore called " cacerts", or copy that one and create you own. Make sure you configure Graylog to use the NEW keystore.
-Djavax.net.ssl.trustStore=/path/to/new_keystore.jks
3

Thank you Gsmith
will be checking and revert if not applied

4

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.