Error logs found in wazuh-dashboard

[juliamagan]

Wazuh version	Install type	Platform
v4.3.0-rc7	Wazuh Dashboard	Demo evironment

In https://github.com/wazuh/wazuh-qa/issues/2856#issuecomment-1117049923 we have checked logs in /usr/share/wazuh-dashboard/data/wazuh/logs/wazuhapp.log and we could find the following logs:

{"date":"2022-05-03T16:48:32.479Z","level":"error","location":"monitoring:getApiInfo","message":"connect ECONNREFUSED 10.0.0.226:55000"}
{"date":"2022-05-03T16:48:55.348Z","level":"error","location":"monitoring:getApiInfo","message":"connect ECONNREFUSED 10.0.0.226:55000"}
{"date":"2022-05-03T17:10:01.102Z","level":"error","location":"cron-scheduler|SaveDocument","message":"resource_already_exists_exception"}
{"date":"2022-05-04T08:01:07.238Z","level":"error","location":"wazuh-api:makeRequest","data":{"title":"Bad Request","detail":"Error in wazuhdb request: Cannot execute SQL query","remediation":"Make sure the request is correct","dapi_errors":{"master":{"error":"Error in wazuhdb request: Cannot execute SQL query"}},"error":2003}}
{"date":"2022-05-04T08:01:12.512Z","level":"error","location":"wazuh-api:makeRequest","data":{"title":"Bad Request","detail":"Error in wazuhdb request: Cannot execute SQL query","remediation":"Make sure the request is correct","dapi_errors":{"master":{"error":"Error in wazuhdb request: Cannot execute SQL query"}},"error":2003}}
{"date":"2022-05-04T08:01:39.343Z","level":"error","location":"wazuh-api:makeRequest","data":{"title":"Bad Request","detail":"Error in wazuhdb request: Cannot execute SQL query","remediation":"Make sure the request is correct","dapi_errors":{"master":{"error":"Error in wazuhdb request: Cannot execute SQL query"}},"error":2003}}
{"date":"2022-05-04T10:05:22.699Z","level":"error","location":"wazuh-api:makeRequest","data":{"title":"Wazuh Internal Error","detail":"Timeout executing API request","dapi_errors":{"master":{"error":"Timeout executing API request","logfile":"WAZUH_HOME/logs/api.log"}},"error":3021}}

The only expected logs are:

{"date":"2022-05-04T08:01:07.238Z","level":"error","location":"wazuh-api:makeRequest","data":{"title":"Bad Request","detail":"Error in wazuhdb request: Cannot execute SQL query","remediation":"Make sure the request is correct","dapi_errors":{"master":{"error":"Error in wazuhdb request: Cannot execute SQL query"}},"error":2003}}
{"date":"2022-05-04T08:01:12.512Z","level":"error","location":"wazuh-api:makeRequest","data":{"title":"Bad Request","detail":"Error in wazuhdb request: Cannot execute SQL query","remediation":"Make sure the request is correct","dapi_errors":{"master":{"error":"Error in wazuhdb request: Cannot execute SQL query"}},"error":2003}}
{"date":"2022-05-04T08:01:39.343Z","level":"error","location":"wazuh-api:makeRequest","data":{"title":"Bad Request","detail":"Error in wazuhdb request: Cannot execute SQL query","remediation":"Make sure the request is correct","dapi_errors":{"master":{"error":"Error in wazuhdb request: Cannot execute SQL query"}},"error":2003}}

Due to https://github.com/wazuh/wazuh-kibana-app/issues/4088

You can see more logs here.

[AlexRuiz7]

We cannot see any problem with these logs. Please elaborate why these logs should not appear.

[juliamagan]

We are getting connection errors and problems with the cron-scheduler. However, these errors have not been found in testing of later versions, if you don't consider it important you could close this issue.

[sara-hann]

@AlexRuiz7 @juliamagan I am receiving the cronjob error too. When I try to sign into wazuh, I enter my credentials, then it runs the checks and just hangs.

{"date":"2022-07-11T04:00:00.947Z","level":"error","location":"cron-scheduler|SaveDocument","message":"resource_already_exists_exception"} {"date":"2022-07-18T04:00:00.735Z","level":"error","location":"cron-scheduler|SaveDocument","message":"resource_already_exists_exception"} {"date":"2022-07-25T04:00:02.573Z","level":"error","location":"cron-scheduler|SaveDocument","message":"resource_already_exists_exception"} {"date":"2022-07-29T21:07:09.543Z","level":"error","location":"wazuh-api:checkStoredAPI","message":"Request failed with status code 400"} {"date":"2022-07-29T21:07:25.965Z","level":"error","location":"wazuh-api:makeRequest","message":"connect ECONNREFUSED 127.0.0.1:55000"} {"date":"2022-07-29T21:23:42.557Z","level":"error","location":"wazuh-api:checkStoredAPI","message":"Request failed with status code 400"} {"date":"2022-07-29T21:29:19.922Z","level":"error","location":"wazuh-api:checkStoredAPI","message":"Request failed with status code 400"} {"date":"2022-07-29T21:29:27.351Z","level":"error","location":"wazuh-api:makeRequest","message":"connect ECONNREFUSED 127.0.0.1:55000"} {"date":"2022-08-01T04:00:00.547Z","level":"error","location":"cron-scheduler|SaveDocument","message":"resource_already_exists_exception"}

[AlexRuiz7]

Hello @juliamagan @sara-hann

The error error: 2022/06/06 8:46:0: cron-scheduler|SaveDocument: resource_already_exists_exception was fixed for Wazuh v4.3.5, in this issue https://github.com/wazuh/wazuh-kibana-app/issues/4203#issuecomment-1147273268

About the errors of the kind of ECONNREFUSED, they're common logs, as the app might encounter connection errors related to tons of different and external reasons, but we'll further investigate.

@sara-hann, please confirm that your version is prior to 4.3.5, so I can close this issue.