Wazuh goes bork?
-
So I've got a simple 2 node Wazuh setup that suddenly stopped working over the weekend.
I had followed the setup instructions here with the initial setup on 4.1 https://documentation.wazuh.com/current/installation-guide/open-distro/distributed-deployment/step-by-step-installation/index.html and things were more or less running fine. Haven't done a whole lot with it but it's given some nice visibility.
Elasticsearch and Wazuh are each single node clusters with Kibana installed on the same system as Elasticsearch.
Everything seems to have stopped randomly over the weekend, I don't see anything in the logs but I've got the feeling that I'm probably overlooking something stupid.
Agents are still showing updates on the keepalive but I'm not getting any new events into the interface.
Ideas or guides on where to start?
