Release 4.7.0 - Alpha 1 - Specific systems #19695
Assignees
Labels
Comments
2 tasks
juliamagan
changed the title
Analysis report - OVA 🟡OVA - System info 🟢
OVA - Users 🟢[root@wazuh-server wazuh-user]# grep -R "wazuh" /etc/group
wheel:x:10:wazuh-user
wazuh-user:x:1000:
wazuh-indexer:x:993:
wazuh:x:992:wazuh
wazuh-dashboard:x:991:wazuh-dashboard[root@wazuh-server wazuh-user]# grep -R "wazuh" /etc/passwd
wazuh-user:x:1000:1000::/home/wazuh-user:/bin/bash
wazuh-indexer:x:995:993:wazuh-indexer user:/usr/share/wazuh-indexer:/sbin/nologin
wazuh:x:994:992::/var/ossec:/sbin/nologin
wazuh-dashboard:x:993:991::/usr/share/wazuh-dashboard/:/sbin/nologinOVA - WUI 🟢
OVA - Logs 🟡Wazuh dashboard - journalctl 🟢Wazuh indexer - journalctl 🟡Wazuh indexer - /var/logs/wazuh-indexer 🟢Wazuh server - /var/ossec/logs 🟢OVA - Filebeat test 🟢[root@wazuh-server wazuh-user]# filebeat test output
elasticsearch: https://127.0.0.1:9200...
parse url... OK
connection...
parse host... OK
dns lookup... OK
addresses: 127.0.0.1
dial up... OK
TLS...
security: server's certificate chain verification is enabled
handshake... OK
TLS version: TLSv1.2
dial up... OK
talk to server... OK
version: 7.10.2OVA - Wazuh indexer cluster 🟢[root@wazuh-server wazuh-user]# curl -k -u admin:admin https://127.0.0.1:9200
{
"name" : "node-1",
"cluster_name" : "wazuh-cluster",
"cluster_uuid" : "vQRGIiPtRlu8yp16OJPGLQ",
"version" : {
"number" : "7.10.2",
"build_type" : "rpm",
"build_hash" : "db90a415ff2fd428b4f7b3f800a51dc229287cb4",
"build_date" : "2023-06-03T06:24:25.112415503Z",
"build_snapshot" : false,
"lucene_version" : "9.6.0",
"minimum_wire_compatibility_version" : "7.10.0",
"minimum_index_compatibility_version" : "7.0.0"
},
"tagline" : "The OpenSearch Project: https://opensearch.org/"
}[root@wazuh-server wazuh-user]# curl -k -u admin:admin https://127.0.0.1:9200/_cat/nodes?v
ip heap.percent ram.percent cpu load_1m load_5m load_15m node.role node.roles cluster_manager name
127.0.0.1 1 66 1 0.40 0.18 0.19 dimr cluster_manager,data,ingest,remote_cluster_client * node-1[root@wazuh-server wazuh-user]# curl -k -u admin:admin https://127.0.0.1:9200/_cluster/health?pretty
{
"cluster_name" : "wazuh-cluster",
"status" : "green",
"timed_out" : false,
"number_of_nodes" : 1,
"number_of_data_nodes" : 1,
"discovered_master" : true,
"discovered_cluster_manager" : true,
"active_primary_shards" : 11,
"active_shards" : 11,
"relocating_shards" : 0,
"initializing_shards" : 0,
"unassigned_shards" : 0,
"delayed_unassigned_shards" : 0,
"number_of_pending_tasks" : 0,
"number_of_in_flight_fetch" : 0,
"task_max_waiting_in_queue_millis" : 0,
"active_shards_percent_as_number" : 100.0
}OVA - No root SSH access 🟢Agent - system info 🟢
root@ubuntu-agent1:/home/vagrant# cat /etc/os-release
NAME="Ubuntu"
VERSION="20.04.5 LTS (Focal Fossa)"
ID=ubuntu
ID_LIKE=debian
PRETTY_NAME="Ubuntu 20.04.5 LTS"
VERSION_ID="20.04"
HOME_URL="https://www.ubuntu.com/"
SUPPORT_URL="https://help.ubuntu.com/"
BUG_REPORT_URL="https://bugs.launchpad.net/ubuntu/"
PRIVACY_POLICY_URL="https://www.ubuntu.com/legal/terms-and-policies/privacy-policy"
VERSION_CODENAME=focal
UBUNTU_CODENAME=focalAgent - Install 🟢
Indexer - journalctl Warnings related to
|
Analysis report - AIX 🟢System info 🟢Installation 🟢
Generate alerts (TCP & UDP) 🟢
Removal 🟢Upgrade 4.5.3 -> 4.7.0 🟢
Check users and groups 🟢 |
Analysis report - HP-UX 🟢System Info 🟢Installation 🟢
Generate Alerts 🟢
Removal 🟢Check users and groups 🟢Upgrade 4.5.3 -> 4.7.0 🟢
Size of Agent is similar to 4.6.0, but it was reported a big increase in comparison to older versions.
|
Analysis report - Solaris 11 SPARC 🟡System info 🟢Install 🟢
Alert 🟢
Remove 🟢Upgrade 4.5.3 -> 4.7.0 🟡Agent 4.5.3 could not be installed
Users and groups 🟢Install of 4.5.3 Agent failed after removing 4.7.0 Agent
|
Analysis report - Solaris 10 SPARC 🟢System info 🟢Install 🟢
Wazuh manager - Agent install 🟢
Remove 🟢
Upgrade 4.5.3 -> 4.7.0 🟢
Wazuh manager - Agent upgrade 🟢Files remains after remove the agent |
Analysis report - CentOS 7 PPC64LE 🟢Deployment + Install 🟢
Alerts 🟢Check User and Groups 🟢Check Errors or Warnings in logs 🟢Removal 🟢Upgrade 🟢
|
Analysis report - AMI 🟡AMI - Agent connection and workload 🟢
This was tested as part of Special systems, since the AMI was the Wazuh Manager AMI - WUI 🟢
AMI - Logs 🟡Wazuh dashboard - journalctl 🟢Wazuh indexer - journalctl 🟡Wazuh indexer - /var/logs/wazuh-indexer 🟡Wazuh server - /var/ossec/logs 🟢AMI - Filebeat test 🟢AMI - Wazuh Indexer Cluster 🟢AMI - Users 🟢AMI - Versions 🟢AMI - Processes 🟢Indexer - journalctl Warnings related to
|
Analysis report - Debian Stretch PPC64EL 🟢System infoInstall
TCP and alertsUDP and alertsErrors and warningsSystem usersUninstallUpgrade |
|
@pro-akim needs to add update 4.5.3 to 4.7.0, not 4.6.0 to 4.7.0; modify it on AIX, HP-UX, Solaris 10 Sparc, and CentOS 7 PPC64LE. |
UpdateChanges done, moved to pending review |
|
LGTM! |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Packages tests metrics information
Build packages
Test packages
PPC64EL packages
OVA/AMI specific tests
Status legend:
⚫ - Pending/In progress
⚪ - Skipped
🔴 - New issue related to the step
🟡 - Known issue related to the step
🟢 - No issues related
Auditor's validation
In order to close and proceed with the release or the next candidate version, the following auditors must give the green light to this RC.
Conclusion 🟡
Solaris11 update could not be tested. Same issue was previously reported.
Solaris10 unwanted files could be seen after remove the agent.
OVA and AMI logs have showed known error and warning messages
HP-UX Agent pack size is increased as 4.6.0
The text was updated successfully, but these errors were encountered: