R2.html

------------------------------Captured stderr call------------------------------
2022-02-02 17:09:09,615 - wazuh_testing - DEBUG - Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-02 17:09:09,618 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-02 17:09:09,619 - wazuh_testing - DEBUG - Starting file composer for wazuh-agent1 and path: /var/ossec/logs/ossec.log. Composite file in /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-agent1_ossec.log.tmp 2022-02-02 17:09:09,621 - wazuh_testing - DEBUG - Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-02 17:09:09,624 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-02 17:09:09,625 - wazuh_testing - DEBUG - Starting file composer for wazuh-manager and path: /var/ossec/logs/ossec.log. Composite file in /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-manager_ossec.log.tmp 2022-02-02 17:09:09,628 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-manager and message: .*Agent 001 query: (.+) save2 2022-02-02 17:09:09,629 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-agent1 and message: .*Sending integrity control message: (.+)$ 2022-02-02 17:09:11,630 - wazuh_testing - DEBUG - 2022/02/02 21:07:48 wazuh-db[3328] wdb.c:918 at wdb_commit_old(): DEBUG: Agent '001' database commited. Time: 3.531 ms. 2022-02-02 17:09:11,631 - wazuh_testing - DEBUG - 2022/02/02 21:07:52 wazuh-db[3328] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.18.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.18.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.13.0-27-generic |#29~20.04.1-Ubuntu SMP Fri Jan 14 00:32:30 UTC 2022 |x86_64","os_arch":"x86_64"} 2022-02-02 17:09:11,631 - wazuh_testing - DEBUG - 2022/02/02 21:07:53 wazuh-modulesd:syscollector: INFO: Stop received for Syscollector. 2022-02-02 17:09:11,631 - wazuh_testing - DEBUG - 2022/02/02 21:07:54 wazuh-agentd: ERROR: (1137): Lost connection with manager. Setting lock. 2022-02-02 17:09:11,631 - wazuh_testing - DEBUG - 2022/02/02 21:07:53 wazuh-db[3328] main.c:352 at run_worker(): DEBUG: Client 22 disconnected. 2022-02-02 17:09:11,632 - wazuh_testing - DEBUG - 2022/02/02 21:07:53 wazuh-monitord: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:09:11,632 - wazuh_testing - DEBUG - 2022/02/02 21:07:54 wazuh-agentd: INFO: Closing connection to server (wazuh-manager/172.18.0.2:1514/tcp). 2022-02-02 17:09:11,632 - wazuh_testing - DEBUG - 2022/02/02 21:07:54 wazuh-logcollector: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:09:11,632 - wazuh_testing - DEBUG - 2022/02/02 21:07:54 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.18.0.2:1514/tcp). 2022-02-02 17:09:11,632 - wazuh_testing - DEBUG - 2022/02/02 21:07:54 wazuh-remoted: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:09:11,632 - wazuh_testing - DEBUG - 2022/02/02 21:07:54 wazuh-agentd: ERROR: (1216): Unable to connect to '172.18.0.2:1514/tcp': 'Connection refused'. 2022-02-02 17:09:11,632 - wazuh_testing - DEBUG - 2022/02/02 21:07:54 wazuh-db[3328] main.c:352 at run_worker(): DEBUG: Client 30 disconnected. 2022-02-02 17:09:11,632 - wazuh_testing - DEBUG - 2022/02/02 21:07:55 wazuh-syscheckd[5749] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-02 17:09:11,632 - wazuh_testing - DEBUG - 2022/02/02 21:07:54 wazuh-db[3328] main.c:352 at run_worker(): DEBUG: Client 19 disconnected. 2022-02-02 17:09:11,633 - wazuh_testing - DEBUG - 2022/02/02 21:07:55 wazuh-syscheckd[5749] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1643832475}} 2022-02-02 17:09:11,633 - wazuh_testing - DEBUG - 2022/02/02 21:07:54 wazuh-db[3328] main.c:352 at run_worker(): DEBUG: Client 16 disconnected. 2022-02-02 17:09:11,633 - wazuh_testing - DEBUG - 2022/02/02 21:07:55 wazuh-syscheckd[5749] wait_op.c:101 at os_wait(): WARNING: Process locked due to agent is offline. Waiting for connection... 2022-02-02 17:09:11,633 - wazuh_testing - DEBUG - 2022/02/02 21:07:54 wazuh-db[3328] main.c:352 at run_worker(): DEBUG: Client 11 disconnected. 2022-02-02 17:09:11,633 - wazuh_testing - DEBUG - 2022/02/02 21:08:04 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.18.0.2:1514/tcp). 2022-02-02 17:09:11,633 - wazuh_testing - DEBUG - 2022/02/02 21:07:54 wazuh-syscheckd[3498] sig_op.c:49 at HandleSIG(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:09:11,633 - wazuh_testing - DEBUG - 2022/02/02 21:08:04 wazuh-agentd: ERROR: (1216): Unable to connect to '172.18.0.2:1514/tcp': 'Connection refused'. 2022-02-02 17:09:11,634 - wazuh_testing - DEBUG - 2022/02/02 21:07:54 wazuh-analysisd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:09:11,634 - wazuh_testing - DEBUG - 2022/02/02 21:08:14 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.18.0.2:1514/tcp). 2022-02-02 17:09:11,634 - wazuh_testing - DEBUG - 2022/02/02 21:07:54 wazuh-db[3328] main.c:352 at run_worker(): DEBUG: Client 45 disconnected. 2022-02-02 17:09:11,634 - wazuh_testing - DEBUG - 2022/02/02 21:08:14 wazuh-agentd: ERROR: (1216): Unable to connect to '172.18.0.2:1514/tcp': 'Connection refused'. 2022-02-02 17:09:11,634 - wazuh_testing - DEBUG - 2022/02/02 21:07:54 wazuh-db[3328] main.c:352 at run_worker(): DEBUG: Client 44 disconnected. 2022-02-02 17:09:11,634 - wazuh_testing - DEBUG - 2022/02/02 21:08:24 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.18.0.2:1514/tcp). 2022-02-02 17:09:11,634 - wazuh_testing - DEBUG - 2022/02/02 21:07:54 wazuh-db[3328] main.c:352 at run_worker(): DEBUG: Client 43 disconnected. 2022-02-02 17:09:11,635 - wazuh_testing - DEBUG - 2022/02/02 21:08:24 wazuh-agentd: INFO: (4102): Connected to the server (wazuh-manager/172.18.0.2:1514/tcp). 2022-02-02 17:09:11,635 - wazuh_testing - DEBUG - 2022/02/02 21:07:54 wazuh-db[3328] main.c:352 at run_worker(): DEBUG: Client 42 disconnected. 2022-02-02 17:09:11,635 - wazuh_testing - DEBUG - 2022/02/02 21:08:24 wazuh-agentd: INFO: Server responded. Releasing lock. 2022-02-02 17:09:11,635 - wazuh_testing - DEBUG - 2022/02/02 21:07:54 wazuh-db[3328] main.c:352 at run_worker(): DEBUG: Client 39 disconnected. 2022-02-02 17:09:11,635 - wazuh_testing - DEBUG - 2022/02/02 21:08:25 wazuh-syscheckd[5749] wait_op.c:116 at os_wait(): INFO: Agent is now online. Process unlocked, continuing... 2022-02-02 17:09:11,635 - wazuh_testing - DEBUG - 2022/02/02 21:07:54 wazuh-db[3328] main.c:352 at run_worker(): DEBUG: Client 41 disconnected. 2022-02-02 17:09:11,636 - wazuh_testing - DEBUG - 2022/02/02 21:08:25 wazuh-syscheckd[5749] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-02 17:09:11,636 - wazuh_testing - DEBUG - 2022/02/02 21:07:54 wazuh-db[3328] main.c:352 at run_worker(): DEBUG: Client 35 disconnected. 2022-02-02 17:09:11,636 - wazuh_testing - DEBUG - 2022/02/02 21:08:25 wazuh-syscheckd[5749] fim_db.c:436 at fim_db_check_transaction(): DEBUG: Database transaction completed. 2022-02-02 17:09:11,636 - wazuh_testing - DEBUG - 2022/02/02 21:07:54 wazuh-db[3328] main.c:352 at run_worker(): DEBUG: Client 40 disconnected. 2022-02-02 17:09:11,636 - wazuh_testing - DEBUG - 2022/02/02 21:08:25 wazuh-syscheckd[5749] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-02 17:09:11,636 - wazuh_testing - DEBUG - 2022/02/02 21:08:25 wazuh-syscheckd[5749] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-02 17:09:11,636 - wazuh_testing - DEBUG - 2022/02/02 21:07:54 wazuh-db[3328] main.c:352 at run_worker(): DEBUG: Client 38 disconnected. 2022-02-02 17:09:11,637 - wazuh_testing - DEBUG - 2022/02/02 21:08:25 wazuh-syscheckd[5749] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-02 17:09:11,637 - wazuh_testing - DEBUG - 2022/02/02 21:07:54 wazuh-db[3328] main.c:352 at run_worker(): DEBUG: Client 33 disconnected. 2022-02-02 17:09:11,637 - wazuh_testing - DEBUG - 2022/02/02 21:08:25 wazuh-syscheckd[5749] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-02 17:09:11,637 - wazuh_testing - DEBUG - 2022/02/02 21:07:54 wazuh-db[3328] main.c:352 at run_worker(): DEBUG: Client 37 disconnected. 2022-02-02 17:09:11,637 - wazuh_testing - DEBUG - 2022/02/02 21:08:26 wazuh-syscheckd[5749] create_db.c:109 at fim_delete_file_event(): DEBUG: (6220): Sending delete message for file: '/testdir1/testdir1.txt' 2022-02-02 17:09:11,637 - wazuh_testing - DEBUG - 2022/02/02 21:07:54 wazuh-db[3328] main.c:352 at run_worker(): DEBUG: Client 26 disconnected. 2022-02-02 17:09:11,638 - wazuh_testing - DEBUG - 2022/02/02 21:07:54 wazuh-db[3328] main.c:352 at run_worker(): DEBUG: Client 34 disconnected. 2022-02-02 17:09:11,638 - wazuh_testing - DEBUG - 2022/02/02 21:08:26 wazuh-syscheckd[5749] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"event","data":{"path":"/testdir1/testdir1.txt","version":2,"mode":"scheduled","type":"deleted","timestamp":1643832453,"attributes":{"type":"file","size":0,"perm":"rw-r--r--","uid":"0","gid":"0","user_name":"root","group_name":"root","inode":7239424,"mtime":1643832442,"hash_md5":"d41d8cd98f00b204e9800998ecf8427e","hash_sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","hash_sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","checksum":"45ed4613c41158e75a585f5458f4a5dc09763ed4"}}} 2022-02-02 17:09:11,638 - wazuh_testing - DEBUG - 2022/02/02 21:08:26 wazuh-syscheckd[5749] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-02 17:09:11,638 - wazuh_testing - DEBUG - 2022/02/02 21:07:54 wazuh-db[3328] main.c:352 at run_worker(): DEBUG: Client 36 disconnected. 2022-02-02 17:09:11,638 - wazuh_testing - DEBUG - 2022/02/02 21:08:26 wazuh-syscheckd[5749] create_db.c:220 at fim_scan(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-02 17:09:11,638 - wazuh_testing - DEBUG - 2022/02/02 21:07:54 wazuh-db[3328] main.c:352 at run_worker(): DEBUG: Client 25 disconnected. 2022-02-02 17:09:11,638 - wazuh_testing - DEBUG - 2022/02/02 21:08:26 wazuh-syscheckd[5749] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-02 17:09:11,639 - wazuh_testing - DEBUG - 2022/02/02 21:07:54 wazuh-db[3328] main.c:352 at run_worker(): DEBUG: Client 23 disconnected. 2022-02-02 17:09:11,639 - wazuh_testing - DEBUG - 2022/02/02 21:08:26 wazuh-syscheckd[5749] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1643832506}} 2022-02-02 17:09:11,639 - wazuh_testing - DEBUG - 2022/02/02 21:08:26 wazuh-syscheckd[5749] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 31.196 sec (1.172 clock sec) 2022-02-02 17:09:11,639 - wazuh_testing - DEBUG - 2022/02/02 21:07:54 wazuh-db[3328] main.c:352 at run_worker(): DEBUG: Client 29 disconnected. 2022-02-02 17:09:11,639 - wazuh_testing - DEBUG - 2022/02/02 21:08:26 wazuh-syscheckd[5749] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1620, path count: 1626 2022-02-02 17:09:11,639 - wazuh_testing - DEBUG - 2022/02/02 21:07:54 wazuh-db[3328] main.c:352 at run_worker(): DEBUG: Client 20 disconnected. 2022-02-02 17:09:11,639 - wazuh_testing - DEBUG - 2022/02/02 21:08:47 wazuh-syscheckd[5749] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-02 17:09:11,640 - wazuh_testing - DEBUG - 2022/02/02 21:07:54 wazuh-db[3328] main.c:352 at run_worker(): DEBUG: Client 18 disconnected. 2022-02-02 17:09:11,640 - wazuh_testing - DEBUG - 2022/02/02 21:08:47 wazuh-syscheckd[5749] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1643832527}} 2022-02-02 17:09:11,640 - wazuh_testing - DEBUG - 2022/02/02 21:07:54 wazuh-db[3328] main.c:352 at run_worker(): DEBUG: Client 32 disconnected. 2022-02-02 17:09:11,640 - wazuh_testing - DEBUG - 2022/02/02 21:08:47 wazuh-syscheckd[5749] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-02 17:09:11,640 - wazuh_testing - DEBUG - 2022/02/02 21:08:47 wazuh-syscheckd[5749] fim_db.c:436 at fim_db_check_transaction(): DEBUG: Database transaction completed. 2022-02-02 17:09:11,640 - wazuh_testing - DEBUG - 2022/02/02 21:07:54 wazuh-db[3328] main.c:352 at run_worker(): DEBUG: Client 12 disconnected. 2022-02-02 17:09:11,641 - wazuh_testing - DEBUG - 2022/02/02 21:08:47 wazuh-syscheckd[5749] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-02 17:09:11,641 - wazuh_testing - DEBUG - 2022/02/02 21:07:54 wazuh-db[3328] main.c:352 at run_worker(): DEBUG: Client 21 disconnected. 2022-02-02 17:09:11,641 - wazuh_testing - DEBUG - 2022/02/02 21:07:54 wazuh-db[3328] main.c:352 at run_worker(): DEBUG: Client 28 disconnected. 2022-02-02 17:09:11,641 - wazuh_testing - DEBUG - 2022/02/02 21:08:47 wazuh-syscheckd[5749] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-02 17:09:11,641 - wazuh_testing - DEBUG - 2022/02/02 21:07:54 wazuh-db[3328] main.c:352 at run_worker(): DEBUG: Client 27 disconnected. 2022-02-02 17:09:11,641 - wazuh_testing - DEBUG - 2022/02/02 21:08:47 wazuh-syscheckd[5749] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-02 17:09:11,641 - wazuh_testing - DEBUG - 2022/02/02 21:07:54 wazuh-db[3328] main.c:352 at run_worker(): DEBUG: Client 17 disconnected. 2022-02-02 17:09:11,641 - wazuh_testing - DEBUG - 2022/02/02 21:07:54 wazuh-db[3328] main.c:352 at run_worker(): DEBUG: Client 13 disconnected. 2022-02-02 17:09:11,642 - wazuh_testing - DEBUG - 2022/02/02 21:08:47 wazuh-syscheckd[5749] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-02 17:09:11,642 - wazuh_testing - DEBUG - 2022/02/02 21:07:54 wazuh-db[3328] main.c:352 at run_worker(): DEBUG: Client 31 disconnected. 2022-02-02 17:09:11,642 - wazuh_testing - DEBUG - 2022/02/02 21:07:54 wazuh-db[3328] main.c:352 at run_worker(): DEBUG: Client 10 disconnected. 2022-02-02 17:09:11,642 - wazuh_testing - DEBUG - 2022/02/02 21:08:48 wazuh-syscheckd[5749] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-02 17:09:11,642 - wazuh_testing - DEBUG - 2022/02/02 21:07:54 wazuh-db[3328] main.c:352 at run_worker(): DEBUG: Client 6 disconnected. 2022-02-02 17:09:11,642 - wazuh_testing - DEBUG - 2022/02/02 21:08:48 wazuh-syscheckd[5749] create_db.c:220 at fim_scan(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-02 17:09:11,642 - wazuh_testing - DEBUG - 2022/02/02 21:07:54 wazuh-execd: INFO: (1314): Shutdown received. Deleting responses. 2022-02-02 17:09:11,642 - wazuh_testing - DEBUG - 2022/02/02 21:07:54 wazuh-execd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:09:11,642 - wazuh_testing - DEBUG - 2022/02/02 21:08:48 wazuh-syscheckd[5749] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-02 17:09:11,643 - wazuh_testing - DEBUG - 2022/02/02 21:07:54 wazuh-db[3328] main.c:468 at handler(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:09:11,643 - wazuh_testing - DEBUG - 2022/02/02 21:08:48 wazuh-syscheckd[5749] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1643832528}} 2022-02-02 17:09:11,643 - wazuh_testing - DEBUG - 2022/02/02 21:07:55 wazuh-db[3328] wdb.c:872 at wdb_close_all(): DEBUG: Closing all databases... 2022-02-02 17:09:11,643 - wazuh_testing - DEBUG - 2022/02/02 21:07:55 wazuh-db[3328] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent 001 2022-02-02 17:09:11,643 - wazuh_testing - DEBUG - 2022/02/02 21:08:48 wazuh-syscheckd[5749] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 1.196 sec (1.192 clock sec) 2022-02-02 17:09:11,643 - wazuh_testing - DEBUG - 2022/02/02 21:07:55 wazuh-db[3328] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent 000 2022-02-02 17:09:11,643 - wazuh_testing - DEBUG - 2022/02/02 21:07:55 wazuh-db[3328] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent mitre 2022-02-02 17:09:11,643 - wazuh_testing - DEBUG - 2022/02/02 21:08:48 wazuh-syscheckd[5749] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1620, path count: 1626 2022-02-02 17:09:11,644 - wazuh_testing - DEBUG - 2022/02/02 21:07:55 wazuh-db[3328] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent global 2022-02-02 17:09:11,644 - wazuh_testing - DEBUG - 2022/02/02 21:09:01 wazuh-logcollector: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:09:11,644 - wazuh_testing - DEBUG - 2022/02/02 21:07:55 wazuh-db[3328] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent tasks 2022-02-02 17:09:11,644 - wazuh_testing - DEBUG - 2022/02/02 21:09:02 wazuh-syscheckd[5749] sig_op.c:49 at HandleSIG(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:09:11,645 - wazuh_testing - DEBUG - 2022/02/02 21:07:55 wazuh-db[3328] main.c:231 at main(): DEBUG: Template file removed again: queue/db/.template.db 2022-02-02 17:09:11,645 - wazuh_testing - DEBUG - 2022/02/02 21:09:02 wazuh-agentd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:09:11,645 - wazuh_testing - DEBUG - 2022/02/02 21:09:02 wazuh-execd: INFO: (1314): Shutdown received. Deleting responses. 2022-02-02 17:09:11,645 - wazuh_testing - DEBUG - 2022/02/02 21:07:55 wazuh-authd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:09:11,645 - wazuh_testing - DEBUG - 2022/02/02 21:09:02 wazuh-execd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:09:11,645 - wazuh_testing - DEBUG - 2022/02/02 21:07:56 wazuh-authd: INFO: Exiting... 2022-02-02 17:09:11,646 - wazuh_testing - DEBUG - 2022/02/02 21:09:03 wazuh-syscheckd[6361] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-02 17:09:11,646 - wazuh_testing - DEBUG - 2022/02/02 21:08:08 wazuh-db[4267] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-02 17:09:11,646 - wazuh_testing - DEBUG - 2022/02/02 21:09:03 wazuh-syscheckd[6361] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-02 17:09:11,646 - wazuh_testing - DEBUG - 2022/02/02 21:08:08 wazuh-db[4267] main.c:101 at main(): DEBUG: Wazuh home directory: /var/ossec 2022-02-02 17:09:11,646 - wazuh_testing - DEBUG - 2022/02/02 21:09:03 wazuh-syscheckd[6361] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-02 17:09:11,647 - wazuh_testing - DEBUG - 2022/02/02 21:09:03 wazuh-syscheckd[6361] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-02 17:09:11,647 - wazuh_testing - DEBUG - 2022/02/02 21:08:09 wazuh-syscheckd[4271] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-02 17:09:11,647 - wazuh_testing - DEBUG - 2022/02/02 21:09:03 wazuh-syscheckd[6361] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-02 17:09:11,647 - wazuh_testing - DEBUG - 2022/02/02 21:09:03 wazuh-syscheckd[6361] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-02 17:09:11,647 - wazuh_testing - DEBUG - 2022/02/02 21:08:09 wazuh-syscheckd[4271] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-02 17:09:11,647 - wazuh_testing - DEBUG - 2022/02/02 21:09:03 wazuh-syscheckd[6361] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-02 17:09:11,648 - wazuh_testing - DEBUG - 2022/02/02 21:08:09 wazuh-syscheckd[4271] syscheck-config.c:122 at organize_syscheck_dirs(): DEBUG: No directory entries to organize in syscheck configuration. 2022-02-02 17:09:11,648 - wazuh_testing - DEBUG - 2022/02/02 21:09:03 wazuh-syscheckd[6361] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ 2022-02-02 17:09:11,648 - wazuh_testing - DEBUG - 2022/02/02 21:08:16 wazuh-csyslogd: INFO: Remote syslog server not configured. Clean exit. 2022-02-02 17:09:11,648 - wazuh_testing - DEBUG - 2022/02/02 21:09:03 wazuh-syscheckd[6361] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ OK? 2022-02-02 17:09:11,648 - wazuh_testing - DEBUG - 2022/02/02 21:08:16 wazuh-dbd: INFO: Database not configured. Clean exit. 2022-02-02 17:09:11,648 - wazuh_testing - DEBUG - 2022/02/02 21:09:03 wazuh-syscheckd[6361] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-02 17:09:11,648 - wazuh_testing - DEBUG - 2022/02/02 21:08:16 wazuh-integratord: INFO: Remote integrations not configured. Clean exit. 2022-02-02 17:09:11,649 - wazuh_testing - DEBUG - 2022/02/02 21:08:16 wazuh-agentlessd: INFO: Not configured. Exiting. 2022-02-02 17:09:11,649 - wazuh_testing - DEBUG - 2022/02/02 21:09:03 wazuh-syscheckd[6361] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-02 17:09:11,649 - wazuh_testing - DEBUG - 2022/02/02 21:08:16 wazuh-authd: INFO: Started (pid: 4337). 2022-02-02 17:09:11,649 - wazuh_testing - DEBUG - 2022/02/02 21:08:16 wazuh-authd: INFO: Accepting connections on port 1515. No password required. 2022-02-02 17:09:11,649 - wazuh_testing - DEBUG - 2022/02/02 21:09:03 wazuh-syscheckd[6361] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-02 17:09:11,649 - wazuh_testing - DEBUG - 2022/02/02 21:08:16 wazuh-authd: INFO: Setting network timeout to 1.000000 sec. 2022-02-02 17:09:11,649 - wazuh_testing - DEBUG - 2022/02/02 21:09:03 wazuh-syscheckd[6361] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-02 17:09:11,650 - wazuh_testing - DEBUG - 2022/02/02 21:08:16 wazuh-db[4348] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-02 17:09:11,650 - wazuh_testing - DEBUG - 2022/02/02 21:08:16 wazuh-db[4348] main.c:101 at main(): DEBUG: Wazuh home directory: /var/ossec 2022-02-02 17:09:11,650 - wazuh_testing - DEBUG - 2022/02/02 21:09:03 wazuh-syscheckd[6361] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-02 17:09:11,650 - wazuh_testing - DEBUG - 2022/02/02 21:08:16 wazuh-db[4348] main.c:122 at main(): DEBUG: Template file removed: /var/ossec/queue/db/.template.db 2022-02-02 17:09:11,650 - wazuh_testing - DEBUG - 2022/02/02 21:09:03 wazuh-syscheckd[6361] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-02 17:09:11,650 - wazuh_testing - DEBUG - 2022/02/02 21:08:16 wazuh-db[4348] main.c:178 at main(): INFO: Started (pid: 4350). 2022-02-02 17:09:11,651 - wazuh_testing - DEBUG - 2022/02/02 21:08:17 wazuh-execd: INFO: (1350): Active response disabled. 2022-02-02 17:09:11,651 - wazuh_testing - DEBUG - 2022/02/02 21:09:03 wazuh-syscheckd[6361] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-02 17:09:11,651 - wazuh_testing - DEBUG - 2022/02/02 21:08:17 wazuh-execd: INFO: Started (pid: 4373). 2022-02-02 17:09:11,651 - wazuh_testing - DEBUG - 2022/02/02 21:09:03 wazuh-syscheckd[6361] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-02 17:09:11,651 - wazuh_testing - DEBUG - 2022/02/02 21:08:18 wazuh-syscheckd[4394] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-02 17:09:11,651 - wazuh_testing - DEBUG - 2022/02/02 21:09:03 wazuh-execd: INFO: Started (pid: 6374). 2022-02-02 17:09:11,651 - wazuh_testing - DEBUG - 2022/02/02 21:08:18 wazuh-syscheckd[4394] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-02 17:09:11,651 - wazuh_testing - DEBUG - 2022/02/02 21:09:03 wazuh-agentd: INFO: (1410): Reading authentication keys file. 2022-02-02 17:09:11,651 - wazuh_testing - DEBUG - 2022/02/02 21:08:18 wazuh-syscheckd[4394] syscheck-config.c:122 at organize_syscheck_dirs(): DEBUG: No directory entries to organize in syscheck configuration. 2022-02-02 17:09:11,652 - wazuh_testing - DEBUG - 2022/02/02 21:09:03 wazuh-agentd: INFO: Using notify time: 10 and max time to reconnect: 60 2022-02-02 17:09:11,652 - wazuh_testing - DEBUG - 2022/02/02 21:08:18 wazuh-syscheckd[4394] main.c:118 at main(): INFO: (6678): No directory provided for syscheck to monitor. 2022-02-02 17:09:11,652 - wazuh_testing - DEBUG - 2022/02/02 21:09:03 wazuh-agentd: INFO: Version detected -> Linux |wazuh-agent1 |5.13.0-27-generic |#29~20.04.1-Ubuntu SMP Fri Jan 14 00:32:30 UTC 2022 |x86_64 [Debian GNU/Linux|debian: 10 (buster)] - Wazuh v4.2.5 2022-02-02 17:09:11,652 - wazuh_testing - DEBUG - 2022/02/02 21:09:03 wazuh-agentd: INFO: Started (pid: 6382). 2022-02-02 17:09:11,652 - wazuh_testing - DEBUG - 2022/02/02 21:08:18 wazuh-syscheckd[4394] main.c:136 at main(): INFO: (6001): File integrity monitoring disabled. 2022-02-02 17:09:11,652 - wazuh_testing - DEBUG - 2022/02/02 21:09:03 wazuh-agentd: INFO: Server IP Address: wazuh-manager/172.18.0.2 2022-02-02 17:09:11,652 - wazuh_testing - DEBUG - 2022/02/02 21:08:18 rootcheck[4394] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled. 2022-02-02 17:09:11,653 - wazuh_testing - DEBUG - 2022/02/02 21:09:03 wazuh-agentd: INFO: Using AES as encryption method. 2022-02-02 17:09:11,653 - wazuh_testing - DEBUG - 2022/02/02 21:08:18 wazuh-syscheckd[4394] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:09:11,653 - wazuh_testing - DEBUG - 2022/02/02 21:09:03 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.18.0.2:1514/tcp). 2022-02-02 17:09:11,653 - wazuh_testing - DEBUG - 2022/02/02 21:08:18 wazuh-syscheckd[4394] syscom.c:123 at syscom_main(): DEBUG: (6284): Local requests thread ready. 2022-02-02 17:09:11,653 - wazuh_testing - DEBUG - 2022/02/02 21:09:03 wazuh-agentd: INFO: (4102): Connected to the server (wazuh-manager/172.18.0.2:1514/tcp). 2022-02-02 17:09:11,653 - wazuh_testing - DEBUG - 2022/02/02 21:09:04 wazuh-syscheckd[6394] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-02 17:09:11,653 - wazuh_testing - DEBUG - 2022/02/02 21:08:18 wazuh-syscheckd[4394] mq_op.c:47 at StartMQ(): DEBUG: Connected succesfully to 'queue/sockets/queue' after 0 attempts 2022-02-02 17:09:11,654 - wazuh_testing - DEBUG - 2022/02/02 21:09:04 wazuh-syscheckd[6394] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-02 17:09:11,654 - wazuh_testing - DEBUG - 2022/02/02 21:09:04 wazuh-syscheckd[6394] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-02 17:09:11,654 - wazuh_testing - DEBUG - 2022/02/02 21:08:18 wazuh-syscheckd[4394] mq_op.c:48 at StartMQ(): DEBUG: (unix_domain) Maximum send buffer set to: '212992'. 2022-02-02 17:09:11,654 - wazuh_testing - DEBUG - 2022/02/02 21:09:04 wazuh-syscheckd[6394] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-02 17:09:11,654 - wazuh_testing - DEBUG - 2022/02/02 21:09:04 wazuh-syscheckd[6394] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-02 17:09:11,655 - wazuh_testing - DEBUG - 2022/02/02 21:09:04 wazuh-syscheckd[6394] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-02 17:09:11,655 - wazuh_testing - DEBUG - 2022/02/02 21:08:18 wazuh-syscheckd[4394] main.c:185 at main(): INFO: Started (pid: 4396). 2022-02-02 17:09:11,655 - wazuh_testing - DEBUG - 2022/02/02 21:09:04 wazuh-syscheckd[6394] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-02 17:09:11,655 - wazuh_testing - DEBUG - 2022/02/02 21:09:04 wazuh-syscheckd[6394] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ 2022-02-02 17:09:11,655 - wazuh_testing - DEBUG - 2022/02/02 21:08:18 wazuh-syscheckd[4394] main.c:215 at main(): DEBUG: (6357): Maximum disk quota size limit configured to '1048576 KB'. 2022-02-02 17:09:11,656 - wazuh_testing - DEBUG - 2022/02/02 21:09:04 wazuh-syscheckd[6394] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ OK? 2022-02-02 17:09:11,656 - wazuh_testing - DEBUG - 2022/02/02 21:08:18 wazuh-remoted: INFO: Started (pid: 4408). Listening on port 1514/TCP (secure). 2022-02-02 17:09:11,656 - wazuh_testing - DEBUG - 2022/02/02 21:08:18 wazuh-db[4348] main.c:290 at run_dealer(): DEBUG: New client connected (6). 2022-02-02 17:09:11,656 - wazuh_testing - DEBUG - 2022/02/02 21:09:04 wazuh-syscheckd[6394] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-02 17:09:11,656 - wazuh_testing - DEBUG - 2022/02/02 21:08:18 wazuh-db[4348] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: reset-agents-connection synced 2022-02-02 17:09:11,657 - wazuh_testing - DEBUG - 2022/02/02 21:09:04 wazuh-syscheckd[6394] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-02 17:09:11,657 - wazuh_testing - DEBUG - 2022/02/02 21:08:18 wazuh-db[4348] main.c:352 at run_worker(): DEBUG: Client 6 disconnected. 2022-02-02 17:09:11,657 - wazuh_testing - DEBUG - 2022/02/02 21:09:04 wazuh-syscheckd[6394] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-02 17:09:11,658 - wazuh_testing - DEBUG - 2022/02/02 21:08:18 wazuh-remoted: INFO: (1410): Reading authentication keys file. 2022-02-02 17:09:11,658 - wazuh_testing - DEBUG - 2022/02/02 21:09:04 wazuh-syscheckd[6394] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-02 17:09:11,658 - wazuh_testing - DEBUG - 2022/02/02 21:09:04 wazuh-syscheckd[6394] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-02 17:09:11,658 - wazuh_testing - DEBUG - 2022/02/02 21:08:18 wazuh-syscheckd[4394] run_check.c:194 at start_daemon(): DEBUG: (6320): Setting process priority to: '10' 2022-02-02 17:09:11,659 - wazuh_testing - DEBUG - 2022/02/02 21:09:04 wazuh-syscheckd[6394] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-02 17:09:11,659 - wazuh_testing - DEBUG - 2022/02/02 21:08:18 wazuh-syscheckd[4394] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:09:11,659 - wazuh_testing - DEBUG - 2022/02/02 21:09:04 wazuh-syscheckd[6394] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-02 17:09:11,659 - wazuh_testing - DEBUG - 2022/02/02 21:08:18 wazuh-syscheckd[4394] run_check.c:229 at start_daemon(): INFO: (6000): Starting daemon... 2022-02-02 17:09:11,660 - wazuh_testing - DEBUG - 2022/02/02 21:09:04 wazuh-syscheckd[6394] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-02 17:09:11,660 - wazuh_testing - DEBUG - 2022/02/02 21:08:18 wazuh-syscheckd[4394] run_check.c:232 at start_daemon(): INFO: (6010): File integrity monitoring scan frequency: 43200 seconds 2022-02-02 17:09:11,660 - wazuh_testing - DEBUG - 2022/02/02 21:09:04 rootcheck[6394] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled. 2022-02-02 17:09:11,661 - wazuh_testing - DEBUG - 2022/02/02 21:08:18 wazuh-syscheckd[4394] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-02 17:09:11,661 - wazuh_testing - DEBUG - 2022/02/02 21:09:04 wazuh-syscheckd[6394] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:09:11,661 - wazuh_testing - DEBUG - 2022/02/02 21:08:18 wazuh-syscheckd[4394] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1643832498}} 2022-02-02 17:09:11,661 - wazuh_testing - DEBUG - 2022/02/02 21:09:04 wazuh-syscheckd[6394] syscom.c:123 at syscom_main(): DEBUG: (6284): Local requests thread ready. 2022-02-02 17:09:11,662 - wazuh_testing - DEBUG - 2022/02/02 21:08:18 wazuh-syscheckd[4394] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-02 17:09:11,662 - wazuh_testing - DEBUG - 2022/02/02 21:08:18 wazuh-syscheckd[4394] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-02 17:09:11,662 - wazuh_testing - DEBUG - 2022/02/02 21:09:04 wazuh-syscheckd[6394] mq_op.c:47 at StartMQ(): DEBUG: Connected succesfully to 'queue/sockets/queue' after 0 attempts 2022-02-02 17:09:11,662 - wazuh_testing - DEBUG - 2022/02/02 21:08:18 wazuh-syscheckd[4394] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-02 17:09:11,662 - wazuh_testing - DEBUG - 2022/02/02 21:09:04 wazuh-syscheckd[6394] mq_op.c:48 at StartMQ(): DEBUG: (unix_domain) Maximum send buffer set to: '212992'. 2022-02-02 17:09:11,663 - wazuh_testing - DEBUG - 2022/02/02 21:08:18 wazuh-syscheckd[4394] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1643832498}} 2022-02-02 17:09:11,663 - wazuh_testing - DEBUG - 2022/02/02 21:09:04 wazuh-syscheckd[6394] main.c:185 at main(): INFO: Started (pid: 6396). 2022-02-02 17:09:11,663 - wazuh_testing - DEBUG - 2022/02/02 21:08:18 wazuh-syscheckd[4394] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.000 sec (0.000 clock sec) 2022-02-02 17:09:11,663 - wazuh_testing - DEBUG - 2022/02/02 21:09:04 wazuh-syscheckd[6394] main.c:193 at main(): INFO: (6003): Monitoring path: '/bin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:09:11,663 - wazuh_testing - DEBUG - 2022/02/02 21:08:18 wazuh-syscheckd[4394] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 0, path count: 0 2022-02-02 17:09:11,664 - wazuh_testing - DEBUG - 2022/02/02 21:09:04 wazuh-syscheckd[6394] main.c:193 at main(): INFO: (6003): Monitoring path: '/boot', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:09:11,664 - wazuh_testing - DEBUG - 2022/02/02 21:08:18 wazuh-syscheckd[4394] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:09:11,664 - wazuh_testing - DEBUG - 2022/02/02 21:09:04 wazuh-syscheckd[6394] main.c:193 at main(): INFO: (6003): Monitoring path: '/etc', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:09:11,664 - wazuh_testing - DEBUG - 2022/02/02 21:08:18 wazuh-syscheckd[4394] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:09:11,664 - wazuh_testing - DEBUG - 2022/02/02 21:08:18 wazuh-syscheckd[4394] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:09:11,664 - wazuh_testing - DEBUG - 2022/02/02 21:09:04 wazuh-syscheckd[6394] main.c:193 at main(): INFO: (6003): Monitoring path: '/sbin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:09:11,665 - wazuh_testing - DEBUG - 2022/02/02 21:08:18 wazuh-syscheckd[4394] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. 2022-02-02 17:09:11,665 - wazuh_testing - DEBUG - 2022/02/02 21:09:04 wazuh-syscheckd[6394] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir1', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:09:11,665 - wazuh_testing - DEBUG - 2022/02/02 21:08:18 wazuh-syscheckd[4394] run_check.c:568 at symlink_checker_thread(): DEBUG: (6033): Starting symbolic link updater. Interval '600'. 2022-02-02 17:09:11,665 - wazuh_testing - DEBUG - 2022/02/02 21:09:04 wazuh-syscheckd[6394] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir2', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | realtime'. 2022-02-02 17:09:11,665 - wazuh_testing - DEBUG - 2022/02/02 21:08:18 wazuh-syscheckd[4394] run_check.c:82 at fim_send_sync_msg(): DEBUG: (6317): Sending integrity control message: {"component":"fim_file","type":"integrity_clear","data":{"id":1643832498,"version":2}} 2022-02-02 17:09:11,665 - wazuh_testing - DEBUG - 2022/02/02 21:09:04 wazuh-syscheckd[6394] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir3', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | whodata'. 2022-02-02 17:09:11,666 - wazuh_testing - DEBUG - 2022/02/02 21:08:18 wazuh-syscheckd[4394] fim_sync.c:70 at fim_run_integrity(): DEBUG: Finished calculating FIM integrity. Time: 0.000 seconds. 2022-02-02 17:09:11,666 - wazuh_testing - DEBUG - 2022/02/02 21:09:04 wazuh-syscheckd[6394] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/bin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:09:11,666 - wazuh_testing - DEBUG - 2022/02/02 21:08:19 wazuh-analysisd: INFO: Total rules enabled: '3882' 2022-02-02 17:09:11,666 - wazuh_testing - DEBUG - 2022/02/02 21:09:04 wazuh-syscheckd[6394] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/sbin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:09:11,666 - wazuh_testing - DEBUG - 2022/02/02 21:08:19 wazuh-analysisd: INFO: Started (pid: 4387). 2022-02-02 17:09:11,666 - wazuh_testing - DEBUG - 2022/02/02 21:09:04 wazuh-syscheckd[6394] main.c:215 at main(): DEBUG: (6357): Maximum disk quota size limit configured to '1048576 KB'. 2022-02-02 17:09:11,666 - wazuh_testing - DEBUG - 2022/02/02 21:08:19 wazuh-db[4348] main.c:290 at run_dealer(): DEBUG: New client connected (6). 2022-02-02 17:09:11,667 - wazuh_testing - DEBUG - 2022/02/02 21:09:04 wazuh-syscheckd[6394] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mtab' 2022-02-02 17:09:11,667 - wazuh_testing - DEBUG - 2022/02/02 21:08:19 wazuh-analysisd: INFO: (7200): Logtest started 2022-02-02 17:09:11,667 - wazuh_testing - DEBUG - 2022/02/02 21:09:04 wazuh-syscheckd[6394] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/hosts.deny' 2022-02-02 17:09:11,667 - wazuh_testing - DEBUG - 2022/02/02 21:08:19 wazuh-db[4348] main.c:290 at run_dealer(): DEBUG: New client connected (12). 2022-02-02 17:09:11,667 - wazuh_testing - DEBUG - 2022/02/02 21:09:04 wazuh-syscheckd[6394] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mail/statistics' 2022-02-02 17:09:11,668 - wazuh_testing - DEBUG - 2022/02/02 21:09:04 wazuh-syscheckd[6394] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random-seed' 2022-02-02 17:09:11,668 - wazuh_testing - DEBUG - 2022/02/02 21:08:19 wazuh-db[4348] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 000 query: syscheck scan_info_update start_scan 1643832498 2022-02-02 17:09:11,668 - wazuh_testing - DEBUG - 2022/02/02 21:09:04 wazuh-syscheckd[6394] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random.seed' 2022-02-02 17:09:11,668 - wazuh_testing - DEBUG - 2022/02/02 21:09:04 wazuh-syscheckd[6394] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/adjtime' 2022-02-02 17:09:11,669 - wazuh_testing - DEBUG - 2022/02/02 21:08:19 wazuh-db[4348] main.c:290 at run_dealer(): DEBUG: New client connected (13). 2022-02-02 17:09:11,669 - wazuh_testing - DEBUG - 2022/02/02 21:09:04 wazuh-syscheckd[6394] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/httpd/logs' 2022-02-02 17:09:11,669 - wazuh_testing - DEBUG - 2022/02/02 21:09:04 wazuh-syscheckd[6394] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/utmpx' 2022-02-02 17:09:11,669 - wazuh_testing - DEBUG - 2022/02/02 21:09:04 wazuh-syscheckd[6394] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/wtmpx' 2022-02-02 17:09:11,669 - wazuh_testing - DEBUG - 2022/02/02 21:08:19 wazuh-db[4348] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 000 query: syscheck scan_info_update end_scan 1643832498 2022-02-02 17:09:11,670 - wazuh_testing - DEBUG - 2022/02/02 21:09:04 wazuh-syscheckd[6394] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/cups/certs' 2022-02-02 17:09:11,670 - wazuh_testing - DEBUG - 2022/02/02 21:08:19 wazuh-db[4348] main.c:290 at run_dealer(): DEBUG: New client connected (14). 2022-02-02 17:09:11,670 - wazuh_testing - DEBUG - 2022/02/02 21:09:04 wazuh-syscheckd[6394] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/dumpdates' 2022-02-02 17:09:11,670 - wazuh_testing - DEBUG - 2022/02/02 21:09:04 wazuh-syscheckd[6394] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/svc/volatile' 2022-02-02 17:09:11,670 - wazuh_testing - DEBUG - 2022/02/02 21:08:19 wazuh-db[4348] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 000 query: fim_file integrity_clear {"id":1643832498,"version":2} 2022-02-02 17:09:11,671 - wazuh_testing - DEBUG - 2022/02/02 21:09:04 wazuh-syscheckd[6394] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/security' 2022-02-02 17:09:11,671 - wazuh_testing - DEBUG - 2022/02/02 21:09:04 wazuh-syscheckd[6394] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/debug' 2022-02-02 17:09:11,671 - wazuh_testing - DEBUG - 2022/02/02 21:08:19 wazuh-logcollector: INFO: (1950): Analyzing file: '/var/ossec/logs/active-responses.log'. 2022-02-02 17:09:11,671 - wazuh_testing - DEBUG - 2022/02/02 21:09:04 wazuh-syscheckd[6394] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/dev/core' 2022-02-02 17:09:11,672 - wazuh_testing - DEBUG - 2022/02/02 21:09:04 wazuh-syscheckd[6394] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '^/proc' 2022-02-02 17:09:11,672 - wazuh_testing - DEBUG - 2022/02/02 21:08:19 wazuh-logcollector: INFO: (1950): Analyzing file: '/var/log/dpkg.log'. 2022-02-02 17:09:11,673 - wazuh_testing - DEBUG - 2022/02/02 21:09:04 wazuh-syscheckd[6394] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '.log$|.swp$' 2022-02-02 17:09:11,673 - wazuh_testing - DEBUG - 2022/02/02 21:08:19 wazuh-logcollector: INFO: Started (pid: 4564). 2022-02-02 17:09:11,674 - wazuh_testing - DEBUG - 2022/02/02 21:08:20 wazuh-monitord: INFO: Started (pid: 4583). 2022-02-02 17:09:11,674 - wazuh_testing - DEBUG - 2022/02/02 21:09:04 wazuh-syscheckd[6394] main.c:235 at main(): INFO: (6004): No diff for file: '/etc/ssl/private.key' 2022-02-02 17:09:11,675 - wazuh_testing - DEBUG - 2022/02/02 21:08:21 wazuh-modulesd: INFO: Started (pid: 4595). 2022-02-02 17:09:11,676 - wazuh_testing - DEBUG - 2022/02/02 21:08:21 wazuh-modulesd:agent-upgrade: INFO: (8153): Module Agent Upgrade started. 2022-02-02 17:09:11,676 - wazuh_testing - DEBUG - 2022/02/02 21:09:04 wazuh-syscheckd[6394] main.c:245 at main(): INFO: (6016): Directory set for real time monitoring: '/testdir2'. 2022-02-02 17:09:11,676 - wazuh_testing - DEBUG - 2022/02/02 21:08:21 wazuh-modulesd:ciscat: INFO: Module disabled. Exiting... 2022-02-02 17:09:11,677 - wazuh_testing - DEBUG - 2022/02/02 21:08:21 wazuh-modulesd:osquery: INFO: Module disabled. Exiting... 2022-02-02 17:09:11,677 - wazuh_testing - DEBUG - 2022/02/02 21:09:04 wazuh-syscheckd[6394] syscheck_audit.c:243 at audit_init(): WARNING: (6924): Who-data engine cannot start because Auditd is not running. 2022-02-02 17:09:11,677 - wazuh_testing - DEBUG - 2022/02/02 21:08:21 wazuh-modulesd:syscollector: INFO: Module disabled. Exiting... 2022-02-02 17:09:11,677 - wazuh_testing - DEBUG - 2022/02/02 21:08:21 sca: INFO: Module disabled. Exiting. 2022-02-02 17:09:11,678 - wazuh_testing - DEBUG - 2022/02/02 21:09:04 wazuh-syscheckd[6394] main.c:264 at main(): WARNING: (6913): Who-data engine could not start. Switching who-data to real-time. 2022-02-02 17:09:11,678 - wazuh_testing - DEBUG - 2022/02/02 21:08:21 wazuh-modulesd:database: INFO: Module started. 2022-02-02 17:09:11,678 - wazuh_testing - DEBUG - 2022/02/02 21:08:21 wazuh-modulesd:download: INFO: Module started. 2022-02-02 17:09:11,678 - wazuh_testing - DEBUG - 2022/02/02 21:09:04 wazuh-syscheckd[6394] run_check.c:194 at start_daemon(): DEBUG: (6320): Setting process priority to: '10' 2022-02-02 17:09:11,679 - wazuh_testing - DEBUG - 2022/02/02 21:08:21 wazuh-modulesd:control: INFO: Starting control thread. 2022-02-02 17:09:11,679 - wazuh_testing - DEBUG - 2022/02/02 21:08:21 wazuh-db[4348] main.c:290 at run_dealer(): DEBUG: New client connected (15). 2022-02-02 17:09:11,679 - wazuh_testing - DEBUG - 2022/02/02 21:09:04 wazuh-syscheckd[6394] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:09:11,679 - wazuh_testing - DEBUG - 2022/02/02 21:08:21 wazuh-db[4348] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-name {"id":0,"name":"wazuh-manager"} 2022-02-02 17:09:11,680 - wazuh_testing - DEBUG - 2022/02/02 21:08:21 wazuh-modulesd:task-manager: INFO: (8200): Module Task Manager started. 2022-02-02 17:09:11,680 - wazuh_testing - DEBUG - 2022/02/02 21:08:21 wazuh-db[4348] main.c:290 at run_dealer(): DEBUG: New client connected (16). 2022-02-02 17:09:11,680 - wazuh_testing - DEBUG - 2022/02/02 21:09:04 wazuh-syscheckd[6394] run_check.c:229 at start_daemon(): INFO: (6000): Starting daemon... 2022-02-02 17:09:11,680 - wazuh_testing - DEBUG - 2022/02/02 21:09:04 wazuh-syscheckd[6394] run_check.c:232 at start_daemon(): INFO: (6010): File integrity monitoring scan frequency: 20 seconds 2022-02-02 17:09:11,680 - wazuh_testing - DEBUG - 2022/02/02 21:08:21 wazuh-db[4348] wdb_parser.c:928 at wdb_parse(): DEBUG: Task query: set_timeout {"now":1643832501,"interval":900} 2022-02-02 17:09:11,681 - wazuh_testing - DEBUG - 2022/02/02 21:09:04 wazuh-syscheckd[6394] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-02 17:09:11,681 - wazuh_testing - DEBUG - 2022/02/02 21:08:21 wazuh-db[4348] main.c:352 at run_worker(): DEBUG: Client 16 disconnected. 2022-02-02 17:09:11,681 - wazuh_testing - DEBUG - 2022/02/02 21:09:04 wazuh-syscheckd[6394] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1643832544}} 2022-02-02 17:09:11,681 - wazuh_testing - DEBUG - 2022/02/02 21:08:21 wazuh-db[4348] main.c:290 at run_dealer(): DEBUG: New client connected (19). 2022-02-02 17:09:11,681 - wazuh_testing - DEBUG - 2022/02/02 21:09:04 wazuh-syscheckd[6394] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-02 17:09:11,681 - wazuh_testing - DEBUG - 2022/02/02 21:08:21 wazuh-db[4348] wdb_parser.c:928 at wdb_parse(): DEBUG: Task query: delete_old {"timestamp":1643227701} 2022-02-02 17:09:11,682 - wazuh_testing - DEBUG - 2022/02/02 21:09:04 wazuh-syscheckd[6394] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-02 17:09:11,682 - wazuh_testing - DEBUG - 2022/02/02 21:08:21 wazuh-db[4348] main.c:352 at run_worker(): DEBUG: Client 19 disconnected. 2022-02-02 17:09:11,682 - wazuh_testing - DEBUG - 2022/02/02 21:09:04 wazuh-syscheckd[6394] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-02 17:09:11,682 - wazuh_testing - DEBUG - 2022/02/02 21:08:21 wazuh-db[4348] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":0,"version":"Wazuh v4.2.5","manager_host":"wazuh-manager","node_name":"wazuh-master","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-manager |5.13.0-27-generic |#29~20.04.1-Ubuntu SMP Fri Jan 14 00:32:30 UTC 2022 |x86_64","os_arch":"x86_64"} 2022-02-02 17:09:11,682 - wazuh_testing - DEBUG - 2022/02/02 21:09:04 wazuh-syscheckd[6394] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-02 17:09:11,683 - wazuh_testing - DEBUG - 2022/02/02 21:08:21 wazuh-db[4348] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: insert-agent {"id":1,"name":"wazuh-agent1","register_ip":"any","internal_key":"1111111111111111111111111111111111111111111111111111111111111111","group":"default","date_add":0} 2022-02-02 17:09:11,683 - wazuh_testing - DEBUG - 2022/02/02 21:09:04 wazuh-syscheckd[6394] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-02 17:09:11,683 - wazuh_testing - DEBUG - 2022/02/02 21:08:21 wazuh-db[4348] wdb_global.c:89 at wdb_global_insert_agent(): DEBUG: SQLite: UNIQUE constraint failed: agent.id 2022-02-02 17:09:11,683 - wazuh_testing - DEBUG - 2022/02/02 21:08:21 wazuh-db[4348] wdb_parser.c:4784 at wdb_parse_global_insert_agent(): DEBUG: Global DB Cannot execute SQL query; err database queue/db/global.db: UNIQUE constraint failed: agent.id 2022-02-02 17:09:11,683 - wazuh_testing - DEBUG - 2022/02/02 21:09:05 wazuh-logcollector: INFO: (1950): Analyzing file: '/var/ossec/logs/active-responses.log'. 2022-02-02 17:09:11,684 - wazuh_testing - DEBUG - 2022/02/02 21:08:21 wazuh-db[4348] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-group {"id":1,"group":"default"} 2022-02-02 17:09:11,684 - wazuh_testing - DEBUG - 2022/02/02 21:09:05 wazuh-logcollector: ERROR: (1103): Could not open file '/var/log/secure' due to [(2)-(No such file or directory)]. 2022-02-02 17:09:11,684 - wazuh_testing - DEBUG - 2022/02/02 21:08:21 wazuh-db[4348] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: delete-agent-belong 1 2022-02-02 17:09:11,684 - wazuh_testing - DEBUG - 2022/02/02 21:09:05 wazuh-logcollector: INFO: (1950): Analyzing file: '/var/log/secure'. 2022-02-02 17:09:11,684 - wazuh_testing - DEBUG - 2022/02/02 21:08:21 wazuh-db[4348] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: find-group default 2022-02-02 17:09:11,685 - wazuh_testing - DEBUG - 2022/02/02 21:09:05 wazuh-logcollector: INFO: Started (pid: 6408). 2022-02-02 17:09:11,685 - wazuh_testing - DEBUG - 2022/02/02 21:08:21 wazuh-db[4348] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: insert-agent-belong {"id_group":1,"id_agent":1} 2022-02-02 17:09:11,685 - wazuh_testing - DEBUG - 2022/02/02 21:09:05 wazuh-syscheckd[6394] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-02 17:09:11,685 - wazuh_testing - DEBUG - 2022/02/02 21:08:21 wazuh-db[4348] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: get-all-agents last_id 0 2022-02-02 17:09:11,686 - wazuh_testing - DEBUG - 2022/02/02 21:08:21 wazuh-db[4348] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: select-groups 2022-02-02 17:09:11,686 - wazuh_testing - DEBUG - 2022/02/02 21:09:05 wazuh-syscheckd[6394] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-02 17:09:11,687 - wazuh_testing - DEBUG - 2022/02/02 21:08:21 wazuh-db[4348] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: find-group default 2022-02-02 17:09:11,687 - wazuh_testing - DEBUG - 2022/02/02 21:09:05 wazuh-syscheckd[6394] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1643832545}} 2022-02-02 17:09:11,687 - wazuh_testing - DEBUG - 2022/02/02 21:08:21 wazuh-db[4348] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: get-all-agents last_id 0 2022-02-02 17:09:11,688 - wazuh_testing - DEBUG - 2022/02/02 21:09:05 wazuh-syscheckd[6394] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 1.271 sec (1.266 clock sec) 2022-02-02 17:09:11,688 - wazuh_testing - DEBUG - 2022/02/02 21:08:21 wazuh-db[4348] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: select-agent-group 1 2022-02-02 17:09:11,689 - wazuh_testing - DEBUG - 2022/02/02 21:09:05 wazuh-syscheckd[6394] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1621, path count: 1627 2022-02-02 17:09:11,689 - wazuh_testing - DEBUG - 2022/02/02 21:08:21 wazuh-db[4348] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: delete-agent-belong 1 2022-02-02 17:09:11,689 - wazuh_testing - DEBUG - 2022/02/02 21:09:05 wazuh-syscheckd[6394] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:09:11,691 - wazuh_testing - DEBUG - 2022/02/02 21:08:21 wazuh-db[4348] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: find-group default 2022-02-02 17:09:11,691 - wazuh_testing - DEBUG - 2022/02/02 21:09:05 wazuh-syscheckd[6394] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:09:11,692 - wazuh_testing - DEBUG - 2022/02/02 21:09:05 wazuh-syscheckd[6394] run_check.c:387 at fim_run_realtime(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-02 17:09:11,692 - wazuh_testing - DEBUG - 2022/02/02 21:08:21 wazuh-db[4348] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: insert-agent-belong {"id_group":1,"id_agent":1} 2022-02-02 17:09:11,692 - wazuh_testing - DEBUG - 2022/02/02 21:09:05 wazuh-syscheckd[6394] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:09:11,693 - wazuh_testing - DEBUG - 2022/02/02 21:08:21 wazuh-db[4348] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: select-agent-name 1 2022-02-02 17:09:11,693 - wazuh_testing - DEBUG - 2022/02/02 21:09:05 wazuh-syscheckd[6394] run_check.c:543 at log_realtime_status(): INFO: (6012): Real-time file integrity monitoring started. 2022-02-02 17:09:11,693 - wazuh_testing - DEBUG - 2022/02/02 21:08:21 wazuh-db[4348] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: select-agent-name 1 2022-02-02 17:09:11,693 - wazuh_testing - DEBUG - 2022/02/02 21:09:05 wazuh-syscheckd[6394] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. 2022-02-02 17:09:11,694 - wazuh_testing - DEBUG - 2022/02/02 21:09:05 wazuh-syscheckd[6394] run_check.c:568 at symlink_checker_thread(): DEBUG: (6033): Starting symbolic link updater. Interval '600'. 2022-02-02 17:09:11,694 - wazuh_testing - DEBUG - 2022/02/02 21:08:24 wazuh-db[4348] main.c:290 at run_dealer(): DEBUG: New client connected (16). 2022-02-02 17:09:11,694 - wazuh_testing - DEBUG - 2022/02/02 21:09:05 wazuh-syscheckd[6394] run_check.c:82 at fim_send_sync_msg(): DEBUG: (6317): Sending integrity control message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1643832545,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"abb0300e10326ad6aa649e14569d554dbe54491d"}} 2022-02-02 17:09:11,694 - wazuh_testing - DEBUG - 2022/02/02 21:08:24 wazuh-db[4348] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-keepalive {"id":1,"connection_status":"pending","sync_status":"synced"} 2022-02-02 17:09:11,695 - wazuh_testing - DEBUG - 2022/02/02 21:08:24 wazuh-db[4348] main.c:290 at run_dealer(): DEBUG: New client connected (18). 2022-02-02 17:09:11,695 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-agent1 and message: .*Sending integrity control message: (.+)$ 2022-02-02 17:09:11,696 - wazuh_testing - DEBUG - 2022/02/02 21:08:24 wazuh-db[4348] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.18.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.18.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.13.0-27-generic |#29~20.04.1-Ubuntu SMP Fri Jan 14 00:32:30 UTC 2022 |x86_64","os_arch":"x86_64"} 2022-02-02 17:09:11,696 - wazuh_testing - DEBUG - 2022/02/02 21:08:25 wazuh-db[4348] main.c:290 at run_dealer(): DEBUG: New client connected (19). 2022-02-02 17:09:11,697 - wazuh_testing - DEBUG - 2022/02/02 21:08:25 wazuh-db[4348] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1643832475 2022-02-02 17:09:11,698 - wazuh_testing - DEBUG - 2022/02/02 21:08:26 wazuh-db[4348] main.c:290 at run_dealer(): DEBUG: New client connected (20). 2022-02-02 17:09:11,698 - wazuh_testing - DEBUG - 2022/02/02 21:08:26 wazuh-db[4348] main.c:290 at run_dealer(): DEBUG: New client connected (21). 2022-02-02 17:09:11,699 - wazuh_testing - DEBUG - 2022/02/02 21:08:26 wazuh-db[4348] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck delete /testdir1/testdir1.txt 2022-02-02 17:09:11,700 - wazuh_testing - DEBUG - 2022/02/02 21:08:26 wazuh-db[4348] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update end_scan 1643832506 2022-02-02 17:09:11,700 - wazuh_testing - DEBUG - 2022/02/02 21:08:26 wazuh-db[4348] main.c:290 at run_dealer(): DEBUG: New client connected (23). 2022-02-02 17:09:11,701 - wazuh_testing - DEBUG - 2022/02/02 21:08:26 wazuh-db[4348] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: get-labels 1 2022-02-02 17:09:11,701 - wazuh_testing - DEBUG - 2022/02/02 21:08:30 wazuh-db[4348] wdb.c:918 at wdb_commit_old(): DEBUG: Agent 'mitre' database commited. Time: 0.032 ms. 2022-02-02 17:09:11,702 - wazuh_testing - DEBUG - 2022/02/02 21:08:32 wazuh-db[4348] wdb.c:918 at wdb_commit_old(): DEBUG: Agent 'tasks' database commited. Time: 0.043 ms. 2022-02-02 17:09:11,703 - wazuh_testing - DEBUG - 2022/02/02 21:08:34 wazuh-db[4348] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.18.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.18.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.13.0-27-generic |#29~20.04.1-Ubuntu SMP Fri Jan 14 00:32:30 UTC 2022 |x86_64","os_arch":"x86_64"} 2022-02-02 17:09:11,703 - wazuh_testing - DEBUG - 2022/02/02 21:08:44 wazuh-db[4348] main.c:290 at run_dealer(): DEBUG: New client connected (22). 2022-02-02 17:09:11,704 - wazuh_testing - DEBUG - 2022/02/02 21:08:44 wazuh-db[4348] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.18.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.18.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.13.0-27-generic |#29~20.04.1-Ubuntu SMP Fri Jan 14 00:32:30 UTC 2022 |x86_64","os_arch":"x86_64"} 2022-02-02 17:09:11,705 - wazuh_testing - DEBUG - 2022/02/02 21:08:47 wazuh-db[4348] main.c:290 at run_dealer(): DEBUG: New client connected (24). 2022-02-02 17:09:11,705 - wazuh_testing - DEBUG - 2022/02/02 21:08:47 wazuh-db[4348] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1643832527 2022-02-02 17:09:11,706 - wazuh_testing - DEBUG - 2022/02/02 21:08:48 wazuh-db[4348] main.c:290 at run_dealer(): DEBUG: New client connected (25). 2022-02-02 17:09:11,707 - wazuh_testing - DEBUG - 2022/02/02 21:08:48 wazuh-db[4348] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update end_scan 1643832528 2022-02-02 17:09:11,707 - wazuh_testing - DEBUG - 2022/02/02 21:08:51 wazuh-db[4348] main.c:290 at run_dealer(): DEBUG: New client connected (26). 2022-02-02 17:09:11,708 - wazuh_testing - DEBUG - 2022/02/02 21:08:51 wazuh-db[4348] wdb_parser.c:928 at wdb_parse(): DEBUG: Task query: upgrade_cancel_tasks {"node":"wazuh-master"} 2022-02-02 17:09:11,710 - wazuh_testing - DEBUG - 2022/02/02 21:08:51 wazuh-db[4348] main.c:352 at run_worker(): DEBUG: Client 26 disconnected. 2022-02-02 17:09:11,713 - wazuh_testing - DEBUG - 2022/02/02 21:08:54 wazuh-db[4348] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.18.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.18.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.13.0-27-generic |#29~20.04.1-Ubuntu SMP Fri Jan 14 00:32:30 UTC 2022 |x86_64","os_arch":"x86_64"} 2022-02-02 17:09:11,716 - wazuh_testing - DEBUG - 2022/02/02 21:09:02 wazuh-db[4348] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-connection-status {"id":1,"connection_status":"disconnected","sync_status":"synced"} 2022-02-02 17:09:11,717 - wazuh_testing - DEBUG - 2022/02/02 21:09:02 wazuh-db[4348] main.c:290 at run_dealer(): DEBUG: New client connected (26). 2022-02-02 17:09:11,717 - wazuh_testing - DEBUG - 2022/02/02 21:09:02 wazuh-db[4348] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: get-labels 1 2022-02-02 17:09:11,718 - wazuh_testing - DEBUG - 2022/02/02 21:09:02 wazuh-db[4348] wdb.c:918 at wdb_commit_old(): DEBUG: Agent 'tasks' database commited. Time: 0.085 ms. 2022-02-02 17:09:11,719 - wazuh_testing - DEBUG - 2022/02/02 21:09:03 wazuh-db[4348] main.c:290 at run_dealer(): DEBUG: New client connected (27). 2022-02-02 17:09:11,719 - wazuh_testing - DEBUG - 2022/02/02 21:09:03 wazuh-db[4348] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-keepalive {"id":1,"connection_status":"pending","sync_status":"synced"} 2022-02-02 17:09:11,720 - wazuh_testing - DEBUG - 2022/02/02 21:09:07 wazuh-db[4348] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.18.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.18.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.13.0-27-generic |#29~20.04.1-Ubuntu SMP Fri Jan 14 00:32:30 UTC 2022 |x86_64","os_arch":"x86_64"} 2022-02-02 17:09:11,721 - wazuh_testing - DEBUG - 2022/02/02 21:09:07 wazuh-db[4348] main.c:290 at run_dealer(): DEBUG: New client connected (28). 2022-02-02 17:09:11,722 - wazuh_testing - DEBUG - 2022/02/02 21:09:07 wazuh-db[4348] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1643832544 2022-02-02 17:09:11,722 - wazuh_testing - DEBUG - 2022/02/02 21:09:07 wazuh-db[4348] main.c:290 at run_dealer(): DEBUG: New client connected (30). 2022-02-02 17:09:11,723 - wazuh_testing - DEBUG - 2022/02/02 21:09:07 wazuh-db[4348] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update end_scan 1643832545 2022-02-02 17:09:11,723 - wazuh_testing - DEBUG - 2022/02/02 21:09:07 wazuh-db[4348] main.c:290 at run_dealer(): DEBUG: New client connected (31). 2022-02-02 17:09:11,724 - wazuh_testing - DEBUG - 2022/02/02 21:09:07 wazuh-db[4348] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_global {"id":1643832545,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"abb0300e10326ad6aa649e14569d554dbe54491d"} 2022-02-02 17:09:11,725 - wazuh_testing - DEBUG - 2022/02/02 21:09:07 wazuh-db[4348] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 1.734 ms. 2022-02-02 17:09:11,726 - wazuh_testing - DEBUG - 2022/02/02 21:09:07 wazuh-db[4348] main.c:290 at run_dealer(): DEBUG: New client connected (29). 2022-02-02 17:09:11,727 - wazuh_testing - DEBUG - 2022/02/02 21:09:07 wazuh-db[4348] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643832545,"version":2,"begin":"/bin/bash","end":"/sbin/chcpu","tail":"/sbin/ctrlaltdel","checksum":"2678c972016eb9b2978d2d495f53f99563497651"} 2022-02-02 17:09:11,728 - wazuh_testing - DEBUG - 2022/02/02 21:09:07 wazuh-db[4348] main.c:290 at run_dealer(): DEBUG: New client connected (32). 2022-02-02 17:09:11,728 - wazuh_testing - DEBUG - 2022/02/02 21:09:07 wazuh-db[4348] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643832545,"version":2,"begin":"/sbin/ctrlaltdel","end":"/usr/sbin/zic","checksum":"a5e44d24102e496df86cded551a692f10f07c13b"} 2022-02-02 17:09:11,729 - wazuh_testing - DEBUG - 2022/02/02 21:09:07 wazuh-db[4348] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.515 ms. 2022-02-02 17:09:11,729 - wazuh_testing - DEBUG - 2022/02/02 21:09:07 wazuh-db[4348] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.657 ms. 2022-02-02 17:09:11,730 - wazuh_testing - DEBUG - 2022/02/02 21:09:07 wazuh-db[4348] main.c:290 at run_dealer(): DEBUG: New client connected (33). 2022-02-02 17:09:11,731 - wazuh_testing - DEBUG - 2022/02/02 21:09:07 wazuh-db[4348] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643832545,"version":2,"begin":"/sbin/ctrlaltdel","end":"/usr/bin/pdb","tail":"/usr/bin/pdb2","checksum":"c08f4e3bb83efc2d99e0d23209d10c14306a32c2"} 2022-02-02 17:09:11,731 - wazuh_testing - DEBUG - 2022/02/02 21:09:07 wazuh-db[4348] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.670 ms. 2022-02-02 17:09:11,732 - wazuh_testing - DEBUG - 2022/02/02 21:09:07 wazuh-db[4348] main.c:290 at run_dealer(): DEBUG: New client connected (34). 2022-02-02 17:09:11,733 - wazuh_testing - DEBUG - 2022/02/02 21:09:07 wazuh-db[4348] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643832545,"version":2,"begin":"/usr/bin/pdb2","end":"/usr/sbin/zic","checksum":"f28534dbcbabe145177a8e0c707d9da341991c1f"} 2022-02-02 17:09:11,733 - wazuh_testing - DEBUG - 2022/02/02 21:09:07 wazuh-db[4348] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.888 ms. 2022-02-02 17:09:11,734 - wazuh_testing - DEBUG - 2022/02/02 21:09:07 wazuh-db[4348] main.c:290 at run_dealer(): DEBUG: New client connected (35). 2022-02-02 17:09:11,735 - wazuh_testing - DEBUG - 2022/02/02 21:09:07 wazuh-db[4348] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643832545,"version":2,"begin":"/sbin/ctrlaltdel","end":"/usr/bin/dpkg-divert","tail":"/usr/bin/dpkg-genbuildinfo","checksum":"27f7b9f49007531537164bfeedb7d14fb260020d"} 2022-02-02 17:09:11,736 - wazuh_testing - DEBUG - 2022/02/02 21:09:07 wazuh-db[4348] main.c:290 at run_dealer(): DEBUG: New client connected (36). 2022-02-02 17:09:11,737 - wazuh_testing - DEBUG - 2022/02/02 21:09:07 wazuh-db[4348] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643832545,"version":2,"begin":"/usr/bin/dpkg-genbuildinfo","end":"/usr/bin/pdb","checksum":"449176f3ac058628fcde8cdfbd7a7d029ac13e05"} 2022-02-02 17:09:11,738 - wazuh_testing - DEBUG - 2022/02/02 21:09:07 wazuh-db[4348] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.372 ms. 2022-02-02 17:09:11,739 - wazuh_testing - DEBUG - 2022/02/02 21:09:07 wazuh-db[4348] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.345 ms. 2022-02-02 17:09:11,740 - wazuh_testing - DEBUG - 2022/02/02 21:09:07 wazuh-db[4348] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643832545,"version":2,"begin":"/sbin/ctrlaltdel","end":"/usr/bin/apt-extracttemplates","tail":"/usr/bin/apt-ftparchive","checksum":"0a6d05e17f868ff0a90e18ed47645bb69493d2a5"} 2022-02-02 17:09:11,741 - wazuh_testing - DEBUG - 2022/02/02 21:09:07 wazuh-db[4348] main.c:290 at run_dealer(): DEBUG: New client connected (37). 2022-02-02 17:09:11,742 - wazuh_testing - DEBUG - 2022/02/02 21:09:07 wazuh-db[4348] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.262 ms. 2022-02-02 17:09:11,743 - wazuh_testing - DEBUG - 2022/02/02 21:09:07 wazuh-db[4348] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643832545,"version":2,"begin":"/usr/bin/apt-ftparchive","end":"/usr/bin/dpkg-divert","checksum":"84aaf018d588e1d99c714364b63c94e1d4eb4bf2"} 2022-02-02 17:09:11,743 - wazuh_testing - DEBUG - 2022/02/02 21:09:07 wazuh-db[4348] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.219 ms. 2022-02-02 17:09:11,744 - wazuh_testing - DEBUG - 2022/02/02 21:09:07 wazuh-db[4348] main.c:290 at run_dealer(): DEBUG: New client connected (38). 2022-02-02 17:09:11,745 - wazuh_testing - DEBUG - 2022/02/02 21:09:07 wazuh-db[4348] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643832545,"version":2,"begin":"/sbin/ctrlaltdel","end":"/sbin/mkhomedir_helper","tail":"/sbin/mkswap","checksum":"f4094767b5033606e4a60c0075f429a93f720519"} 2022-02-02 17:09:11,745 - wazuh_testing - DEBUG - 2022/02/02 21:09:07 wazuh-db[4348] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.160 ms. 2022-02-02 17:09:11,746 - wazuh_testing - DEBUG - 2022/02/02 21:09:08 wazuh-db[4348] main.c:290 at run_dealer(): DEBUG: New client connected (39). 2022-02-02 17:09:11,747 - wazuh_testing - DEBUG - 2022/02/02 21:09:08 wazuh-db[4348] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643832545,"version":2,"begin":"/sbin/mkswap","end":"/usr/bin/apt-extracttemplates","checksum":"697b6737161f73616de653cf59a2a508f20c408c"} 2022-02-02 17:09:11,747 - wazuh_testing - DEBUG - 2022/02/02 21:09:08 wazuh-db[4348] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.120 ms. 2022-02-02 17:09:11,748 - wazuh_testing - DEBUG - 2022/02/02 21:09:08 wazuh-db[4348] main.c:290 at run_dealer(): DEBUG: New client connected (40). 2022-02-02 17:09:11,749 - wazuh_testing - DEBUG - 2022/02/02 21:09:08 wazuh-db[4348] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643832545,"version":2,"begin":"/sbin/mkswap","end":"/sbin/start-stop-daemon","tail":"/sbin/sulogin","checksum":"205673eafd86478a9bae30a249a954bab122f47f"} 2022-02-02 17:09:11,750 - wazuh_testing - DEBUG - 2022/02/02 21:09:08 wazuh-db[4348] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.099 ms. 2022-02-02 17:09:11,753 - wazuh_testing - DEBUG - 2022/02/02 21:09:08 wazuh-db[4348] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643832545,"version":2,"begin":"/sbin/sulogin","end":"/usr/bin/apt-extracttemplates","checksum":"78684db5804bcf7c1f8036a89406255e845626b7"} 2022-02-02 17:09:11,754 - wazuh_testing - DEBUG - 2022/02/02 21:09:08 wazuh-db[4348] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.075 ms. 2022-02-02 17:09:11,754 - wazuh_testing - DEBUG - 2022/02/02 21:09:08 wazuh-db[4348] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643832545,"version":2,"begin":"/sbin/sulogin","end":"/sbin/wipefs","tail":"/sbin/zramctl","checksum":"157570556203dc9b1df7834dbf4e4a20ab33cfca"} 2022-02-02 17:09:11,755 - wazuh_testing - DEBUG - 2022/02/02 21:09:08 wazuh-db[4348] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.063 ms. 2022-02-02 17:09:11,755 - wazuh_testing - DEBUG - 2022/02/02 21:09:08 wazuh-db[4348] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643832545,"version":2,"begin":"/sbin/zramctl","end":"/usr/bin/apt-extracttemplates","checksum":"4f29948ae258e456cd388d6cd87c8896be5570b3"} 2022-02-02 17:09:11,756 - wazuh_testing - DEBUG - 2022/02/02 21:09:08 wazuh-db[4348] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.082 ms. 2022-02-02 17:09:11,757 - wazuh_testing - DEBUG - 2022/02/02 21:09:08 wazuh-db[4348] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643832545,"version":2,"begin":"/sbin/zramctl","end":"/usr/bin/aclocal-1.16","tail":"/usr/bin/addpart","checksum":"4a91605da510c9e95199fb2fe4119300b7833337"} 2022-02-02 17:09:11,757 - wazuh_testing - DEBUG - 2022/02/02 21:09:08 wazuh-db[4348] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.050 ms. 2022-02-02 17:09:11,758 - wazuh_testing - DEBUG - 2022/02/02 21:09:08 wazuh-db[4348] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643832545,"version":2,"begin":"/usr/bin/addpart","end":"/usr/bin/apt-extracttemplates","checksum":"95a692828de0dea4b6ca328f569037eaa082ab85"} 2022-02-02 17:09:11,759 - wazuh_testing - DEBUG - 2022/02/02 21:09:08 wazuh-db[4348] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.044 ms. 2022-02-02 17:09:11,760 - wazuh_testing - DEBUG - 2022/02/02 21:09:08 wazuh-db[4348] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643832545,"version":2,"begin":"/sbin/zramctl","end":"/usr/bin/2to3-2.7","tail":"/usr/bin/[","checksum":"67a52aac581c8115d218509db7562b17a3189994"} 2022-02-02 17:09:11,761 - wazuh_testing - DEBUG - 2022/02/02 21:09:08 wazuh-db[4348] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.068 ms. 2022-02-02 17:09:11,762 - wazuh_testing - DEBUG - 2022/02/02 21:09:08 wazuh-db[4348] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643832545,"version":2,"begin":"/usr/bin/[","end":"/usr/bin/aclocal-1.16","checksum":"ab72adc86d2a1f2e36162f60b40bf10d71afc73a"} 2022-02-02 17:09:11,762 - wazuh_testing - DEBUG - 2022/02/02 21:09:08 wazuh-db[4348] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.089 ms. 2022-02-02 17:09:11,763 - wazuh_testing - DEBUG - 2022/02/02 21:09:08 wazuh-db[4348] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643832545,"version":2,"begin":"/sbin/zramctl","end":"/sbin/zramctl","tail":"/testdir1/testdir1.txt","checksum":"9562865780448bda22ecac2d749c5a2d5657b106"} 2022-02-02 17:09:11,765 - wazuh_testing - DEBUG - 2022/02/02 21:09:08 wazuh-db[4348] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.077 ms. 2022-02-02 17:09:11,766 - wazuh_testing - DEBUG - 2022/02/02 21:09:09 wazuh-db[4348] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643832545,"version":2,"begin":"/testdir1/testdir1.txt","end":"/usr/bin/2to3-2.7","checksum":"9bf54a7f6559d0b65eebd6506c41d68d4720aee2"} 2022-02-02 17:09:11,767 - wazuh_testing - DEBUG - 2022/02/02 21:09:09 wazuh-db[4348] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.056 ms. 2022-02-02 17:09:11,768 - wazuh_testing - DEBUG - 2022/02/02 21:09:09 wazuh-db[4348] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643832545,"version":2,"begin":"/testdir1/testdir1.txt","end":"/testdir1/testdir1.txt","tail":"/usr/bin/2to3-2.7","checksum":"619f9f714d212920344bdf82604988b711fc7139"} 2022-02-02 17:09:11,770 - wazuh_testing - DEBUG - 2022/02/02 21:09:09 wazuh-db[4348] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643832545,"version":2,"begin":"/usr/bin/2to3-2.7","end":"/usr/bin/2to3-2.7","checksum":"4288e49f7e69481516baa382943d5a652f7e069b"} 2022-02-02 17:09:11,771 - wazuh_testing - DEBUG - 2022/02/02 21:09:09 wazuh-db[4348] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.051 ms. 2022-02-02 17:09:11,772 - wazuh_testing - DEBUG - 2022/02/02 21:09:09 wazuh-db[4348] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file save2 {"path":"/testdir1/testdir1.txt","timestamp":1643832544,"version":2,"attributes":{"type":"file","size":0,"perm":"rw-r--r--","uid":"0","gid":"0","user_name":"root","group_name":"root","inode":7236635,"mtime":1643832534,"hash_md5":"d41d8cd98f00b204e9800998ecf8427e","hash_sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","hash_sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","checksum":"614a0585d25990a662ec6fada0113a778f7a1e71"}} 2022-02-02 17:09:11,774 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-manager and message: .*Agent 001 query: (.+) save2 2022-02-02 17:09:12,633 - wazuh_testing - DEBUG - Cleaning temporal files... 2022-02-02 17:09:12,634 - wazuh_testing - DEBUG - Checking results... 2022-02-02 17:09:12,635 - wazuh_testing - DEBUG - Received from wazuh-agent1 the expected message: 2022/02/02 21:09:05 wazuh-syscheckd[6394] run_check.c:82 at fim_send_sync_msg(): DEBUG: (6317): Sending integrity control message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1643832545,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"abb0300e10326ad6aa649e14569d554dbe54491d"}} 2022-02-02 17:09:12,636 - wazuh_testing - DEBUG - Received from wazuh-manager the expected message: 2022/02/02 21:09:09 wazuh-db[4348] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file save2 {"path":"/testdir1/testdir1.txt","timestamp":1643832544,"version":2,"attributes":{"type":"file","size":0,"perm":"rw-r--r--","uid":"0","gid":"0","user_name":"root","group_name":"root","inode":7236635,"mtime":1643832534,"hash_md5":"d41d8cd98f00b204e9800998ecf8427e","hash_sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","hash_sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","checksum":"614a0585d25990a662ec6fada0113a778f7a1e71"}} 2022-02-02 17:09:39,565 - wazuh_testing - DEBUG - Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-02 17:09:39,567 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-02 17:09:39,568 - wazuh_testing - DEBUG - Starting file composer for wazuh-agent1 and path: /var/ossec/logs/ossec.log. Composite file in /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-agent1_ossec.log.tmp 2022-02-02 17:09:39,572 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-agent1 and message: .*Initializing FIM Integrity Synchronization check. (.+)$ 2022-02-02 17:09:41,574 - wazuh_testing - DEBUG - 2022/02/02 21:09:25 wazuh-logcollector: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:09:41,574 - wazuh_testing - DEBUG - 2022/02/02 21:09:25 wazuh-syscheckd[6394] sig_op.c:49 at HandleSIG(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:09:41,575 - wazuh_testing - DEBUG - 2022/02/02 21:09:25 wazuh-agentd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:09:41,575 - wazuh_testing - DEBUG - 2022/02/02 21:09:25 wazuh-execd: INFO: (1314): Shutdown received. Deleting responses. 2022-02-02 17:09:41,575 - wazuh_testing - DEBUG - 2022/02/02 21:09:25 wazuh-execd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:09:41,575 - wazuh_testing - DEBUG - 2022/02/02 21:09:32 wazuh-syscheckd[6815] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-02 17:09:41,575 - wazuh_testing - DEBUG - 2022/02/02 21:09:32 wazuh-syscheckd[6815] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-02 17:09:41,576 - wazuh_testing - DEBUG - 2022/02/02 21:09:32 wazuh-syscheckd[6815] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-02 17:09:41,576 - wazuh_testing - DEBUG - 2022/02/02 21:09:32 wazuh-syscheckd[6815] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-02 17:09:41,576 - wazuh_testing - DEBUG - 2022/02/02 21:09:32 wazuh-syscheckd[6815] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-02 17:09:41,576 - wazuh_testing - DEBUG - 2022/02/02 21:09:32 wazuh-syscheckd[6815] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-02 17:09:41,577 - wazuh_testing - DEBUG - 2022/02/02 21:09:32 wazuh-syscheckd[6815] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-02 17:09:41,577 - wazuh_testing - DEBUG - 2022/02/02 21:09:32 wazuh-syscheckd[6815] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ 2022-02-02 17:09:41,577 - wazuh_testing - DEBUG - 2022/02/02 21:09:32 wazuh-syscheckd[6815] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ OK? 2022-02-02 17:09:41,577 - wazuh_testing - DEBUG - 2022/02/02 21:09:32 wazuh-syscheckd[6815] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-02 17:09:41,578 - wazuh_testing - DEBUG - 2022/02/02 21:09:32 wazuh-syscheckd[6815] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-02 17:09:41,578 - wazuh_testing - DEBUG - 2022/02/02 21:09:32 wazuh-syscheckd[6815] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-02 17:09:41,578 - wazuh_testing - DEBUG - 2022/02/02 21:09:32 wazuh-syscheckd[6815] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-02 17:09:41,578 - wazuh_testing - DEBUG - 2022/02/02 21:09:32 wazuh-syscheckd[6815] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-02 17:09:41,579 - wazuh_testing - DEBUG - 2022/02/02 21:09:32 wazuh-syscheckd[6815] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-02 17:09:41,579 - wazuh_testing - DEBUG - 2022/02/02 21:09:32 wazuh-syscheckd[6815] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-02 17:09:41,579 - wazuh_testing - DEBUG - 2022/02/02 21:09:32 wazuh-syscheckd[6815] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-02 17:09:41,580 - wazuh_testing - DEBUG - 2022/02/02 21:09:32 wazuh-execd: INFO: Started (pid: 6828). 2022-02-02 17:09:41,580 - wazuh_testing - DEBUG - 2022/02/02 21:09:33 wazuh-agentd: INFO: (1410): Reading authentication keys file. 2022-02-02 17:09:41,580 - wazuh_testing - DEBUG - 2022/02/02 21:09:33 wazuh-agentd: INFO: Using notify time: 10 and max time to reconnect: 60 2022-02-02 17:09:41,581 - wazuh_testing - DEBUG - 2022/02/02 21:09:33 wazuh-agentd: INFO: Version detected -> Linux |wazuh-agent1 |5.13.0-27-generic |#29~20.04.1-Ubuntu SMP Fri Jan 14 00:32:30 UTC 2022 |x86_64 [Debian GNU/Linux|debian: 10 (buster)] - Wazuh v4.2.5 2022-02-02 17:09:41,581 - wazuh_testing - DEBUG - 2022/02/02 21:09:33 wazuh-agentd: INFO: Started (pid: 6839). 2022-02-02 17:09:41,581 - wazuh_testing - DEBUG - 2022/02/02 21:09:33 wazuh-agentd: INFO: Server IP Address: wazuh-manager/172.18.0.2 2022-02-02 17:09:41,581 - wazuh_testing - DEBUG - 2022/02/02 21:09:33 wazuh-agentd: INFO: Using AES as encryption method. 2022-02-02 17:09:41,582 - wazuh_testing - DEBUG - 2022/02/02 21:09:33 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.18.0.2:1514/tcp). 2022-02-02 17:09:41,582 - wazuh_testing - DEBUG - 2022/02/02 21:09:33 wazuh-agentd: INFO: (4102): Connected to the server (wazuh-manager/172.18.0.2:1514/tcp). 2022-02-02 17:09:41,582 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-02 17:09:41,582 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-02 17:09:41,583 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-02 17:09:41,583 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-02 17:09:41,583 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-02 17:09:41,583 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-02 17:09:41,584 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-02 17:09:41,584 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ 2022-02-02 17:09:41,584 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ OK? 2022-02-02 17:09:41,585 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-02 17:09:41,585 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-02 17:09:41,585 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-02 17:09:41,586 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-02 17:09:41,586 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-02 17:09:41,586 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-02 17:09:41,587 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-02 17:09:41,587 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-02 17:09:41,587 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 rootcheck[6851] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled. 2022-02-02 17:09:41,588 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:09:41,588 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] syscom.c:123 at syscom_main(): DEBUG: (6284): Local requests thread ready. 2022-02-02 17:09:41,588 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] mq_op.c:47 at StartMQ(): DEBUG: Connected succesfully to 'queue/sockets/queue' after 0 attempts 2022-02-02 17:09:41,589 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] mq_op.c:48 at StartMQ(): DEBUG: (unix_domain) Maximum send buffer set to: '212992'. 2022-02-02 17:09:41,589 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] main.c:185 at main(): INFO: Started (pid: 6853). 2022-02-02 17:09:41,589 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] main.c:193 at main(): INFO: (6003): Monitoring path: '/bin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:09:41,590 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] main.c:193 at main(): INFO: (6003): Monitoring path: '/boot', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:09:41,590 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] main.c:193 at main(): INFO: (6003): Monitoring path: '/etc', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:09:41,590 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] main.c:193 at main(): INFO: (6003): Monitoring path: '/sbin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:09:41,591 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir1', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:09:41,591 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir2', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | realtime'. 2022-02-02 17:09:41,591 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir3', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | whodata'. 2022-02-02 17:09:41,592 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/bin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:09:41,592 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/sbin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:09:41,593 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] main.c:215 at main(): DEBUG: (6357): Maximum disk quota size limit configured to '1048576 KB'. 2022-02-02 17:09:41,593 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mtab' 2022-02-02 17:09:41,594 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/hosts.deny' 2022-02-02 17:09:41,594 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mail/statistics' 2022-02-02 17:09:41,595 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random-seed' 2022-02-02 17:09:41,595 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random.seed' 2022-02-02 17:09:41,596 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/adjtime' 2022-02-02 17:09:41,596 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/httpd/logs' 2022-02-02 17:09:41,597 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/utmpx' 2022-02-02 17:09:41,598 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/wtmpx' 2022-02-02 17:09:41,598 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/cups/certs' 2022-02-02 17:09:41,599 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/dumpdates' 2022-02-02 17:09:41,600 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/svc/volatile' 2022-02-02 17:09:41,600 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/security' 2022-02-02 17:09:41,601 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/debug' 2022-02-02 17:09:41,601 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/dev/core' 2022-02-02 17:09:41,602 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '^/proc' 2022-02-02 17:09:41,602 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '.log$|.swp$' 2022-02-02 17:09:41,603 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] main.c:235 at main(): INFO: (6004): No diff for file: '/etc/ssl/private.key' 2022-02-02 17:09:41,603 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] main.c:245 at main(): INFO: (6016): Directory set for real time monitoring: '/testdir2'. 2022-02-02 17:09:41,603 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] syscheck_audit.c:243 at audit_init(): WARNING: (6924): Who-data engine cannot start because Auditd is not running. 2022-02-02 17:09:41,604 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] main.c:264 at main(): WARNING: (6913): Who-data engine could not start. Switching who-data to real-time. 2022-02-02 17:09:41,605 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] run_check.c:194 at start_daemon(): DEBUG: (6320): Setting process priority to: '10' 2022-02-02 17:09:41,605 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:09:41,606 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] run_check.c:229 at start_daemon(): INFO: (6000): Starting daemon... 2022-02-02 17:09:41,606 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] run_check.c:232 at start_daemon(): INFO: (6010): File integrity monitoring scan frequency: 20 seconds 2022-02-02 17:09:41,607 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-02 17:09:41,607 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1643832574}} 2022-02-02 17:09:41,608 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-02 17:09:41,608 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-02 17:09:41,609 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-02 17:09:41,609 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-02 17:09:41,610 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-02 17:09:41,611 - wazuh_testing - DEBUG - 2022/02/02 21:09:35 wazuh-logcollector: INFO: (1950): Analyzing file: '/var/ossec/logs/active-responses.log'. 2022-02-02 17:09:41,611 - wazuh_testing - DEBUG - 2022/02/02 21:09:35 wazuh-logcollector: ERROR: (1103): Could not open file '/var/log/secure' due to [(2)-(No such file or directory)]. 2022-02-02 17:09:41,612 - wazuh_testing - DEBUG - 2022/02/02 21:09:35 wazuh-logcollector: INFO: (1950): Analyzing file: '/var/log/secure'. 2022-02-02 17:09:41,613 - wazuh_testing - DEBUG - 2022/02/02 21:09:35 wazuh-logcollector: INFO: Started (pid: 6865). 2022-02-02 17:09:41,613 - wazuh_testing - DEBUG - 2022/02/02 21:09:35 wazuh-syscheckd[6851] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-02 17:09:41,614 - wazuh_testing - DEBUG - 2022/02/02 21:09:35 wazuh-syscheckd[6851] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-02 17:09:41,615 - wazuh_testing - DEBUG - 2022/02/02 21:09:35 wazuh-syscheckd[6851] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1643832575}} 2022-02-02 17:09:41,615 - wazuh_testing - DEBUG - 2022/02/02 21:09:35 wazuh-syscheckd[6851] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 1.330 sec (1.325 clock sec) 2022-02-02 17:09:41,616 - wazuh_testing - DEBUG - 2022/02/02 21:09:35 wazuh-syscheckd[6851] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1621, path count: 1627 2022-02-02 17:09:41,617 - wazuh_testing - DEBUG - 2022/02/02 21:09:35 wazuh-syscheckd[6851] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:09:41,617 - wazuh_testing - DEBUG - 2022/02/02 21:09:35 wazuh-syscheckd[6851] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:09:41,618 - wazuh_testing - DEBUG - 2022/02/02 21:09:35 wazuh-syscheckd[6851] run_check.c:387 at fim_run_realtime(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-02 17:09:41,619 - wazuh_testing - DEBUG - 2022/02/02 21:09:35 wazuh-syscheckd[6851] run_check.c:543 at log_realtime_status(): INFO: (6012): Real-time file integrity monitoring started. 2022-02-02 17:09:41,619 - wazuh_testing - DEBUG - 2022/02/02 21:09:35 wazuh-syscheckd[6851] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:09:41,621 - wazuh_testing - DEBUG - 2022/02/02 21:09:35 wazuh-syscheckd[6851] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. 2022-02-02 17:09:41,622 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-agent1 and message: .*Initializing FIM Integrity Synchronization check. (.+)$ 2022-02-02 17:09:42,573 - wazuh_testing - DEBUG - Cleaning temporal files... 2022-02-02 17:09:42,573 - wazuh_testing - DEBUG - Checking results... 2022-02-02 17:09:42,575 - wazuh_testing - DEBUG - Received from wazuh-agent1 the expected message: 2022/02/02 21:09:35 wazuh-syscheckd[6851] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds.
-------------------------------Captured log call--------------------------------
DEBUG testinfra:base.py:277 RUN CommandResult(command=b"ansible --tree /tmp/tmp17nhmqjn -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m command --args 'mkdir testdir1' wazuh-agent1", exit_status=0, stdout=b'wazuh-agent1 | CHANGED | rc=0 >>\n\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('command', 'mkdir testdir1', {'check': False, 'become': False}): {'changed': True, 'cmd': ['mkdir', 'testdir1'], 'delta': '0:00:00.801078', 'end': '2022-02-02 21:08:51.994452', 'msg': '', 'rc': 0, 'start': '2022-02-02 21:08:51.193374', 'stderr': '', 'stderr_lines': [], 'stdout': '', 'stdout_lines': []} DEBUG testinfra:base.py:277 RUN CommandResult(command=b"ansible --tree /tmp/tmpyist4dco -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m command --args 'touch testdir1/testdir1.txt' wazuh-agent1", exit_status=0, stdout=b'wazuh-agent1 | CHANGED | rc=0 >>\n\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('command', 'touch testdir1/testdir1.txt', {'check': False, 'become': False}): {'changed': True, 'cmd': ['touch', 'testdir1/testdir1.txt'], 'delta': '0:00:00.705340', 'end': '2022-02-02 21:08:54.896612', 'msg': '', 'rc': 0, 'start': '2022-02-02 21:08:54.191272', 'stderr': '', 'stderr_lines': [], 'stdout': '', 'stdout_lines': []} DEBUG testinfra:base.py:277 RUN CommandResult(command=b"ansible --tree /tmp/tmprab0bfi5 -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m service --args 'name=wazuh-agent state=restarted' wazuh-agent1", exit_status=0, stdout=b'wazuh-agent1 | CHANGED => {\n "changed": true,\n "name": "wazuh-agent",\n "state": "started"\n}\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('service', 'name=wazuh-agent state=restarted', {'check': False, 'become': False}): {'changed': True, 'name': 'wazuh-agent', 'state': 'started'} DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:1006 Cleaning temporal files... DEBUG wazuh_testing:monitoring.py:995 Checking results... DEBUG wazuh_testing:monitoring.py:1001 Received from wazuh-agent1 the expected message: 2022/02/02 21:09:05 wazuh-syscheckd[6394] run_check.c:82 at fim_send_sync_msg(): DEBUG: (6317): Sending integrity control message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1643832545,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"abb0300e10326ad6aa649e14569d554dbe54491d"}} DEBUG wazuh_testing:monitoring.py:1001 Received from wazuh-manager the expected message: 2022/02/02 21:09:09 wazuh-db[4348] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file save2 {"path":"/testdir1/testdir1.txt","timestamp":1643832544,"version":2,"attributes":{"type":"file","size":0,"perm":"rw-r--r--","uid":"0","gid":"0","user_name":"root","group_name":"root","inode":7236635,"mtime":1643832534,"hash_md5":"d41d8cd98f00b204e9800998ecf8427e","hash_sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","hash_sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","checksum":"614a0585d25990a662ec6fada0113a778f7a1e71"}} DEBUG testinfra:base.py:277 RUN CommandResult(command=b'ansible --tree /tmp/tmp8h5xbr2y -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m copy --args \'dest=/var/ossec/logs/ossec.log content=\'"\'"\'\'"\'"\' force=yes\' wazuh-manager', exit_status=0, stdout=b'wazuh-manager | CHANGED => {\n "changed": true,\n "checksum": "da39a3ee5e6b4b0d3255bfef95601890afd80709",\n "dest": "/var/ossec/logs/ossec.log",\n "gid": 999,\n "group": "ossec",\n "md5sum": "d41d8cd98f00b204e9800998ecf8427e",\n "mode": "0660",\n "owner": "ossec",\n "size": 0,\n "src": "/root/.ansible/tmp/ansible-tmp-1643832553.733636-68625-94599958727268/source",\n "state": "file",\n "uid": 999\n}\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('copy', "dest=/var/ossec/logs/ossec.log content='' force=yes", {'check': False, 'become': False}): {'changed': True, 'checksum': 'da39a3ee5e6b4b0d3255bfef95601890afd80709', 'dest': '/var/ossec/logs/ossec.log', 'gid': 999, 'group': 'ossec', 'md5sum': 'd41d8cd98f00b204e9800998ecf8427e', 'mode': '0660', 'owner': 'ossec', 'size': 0, 'src': '/root/.ansible/tmp/ansible-tmp-1643832553.733636-68625-94599958727268/source', 'state': 'file', 'uid': 999} DEBUG testinfra:base.py:277 RUN CommandResult(command=b'ansible --tree /tmp/tmppca74y0o -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m copy --args \'dest=/var/ossec/logs/ossec.log content=\'"\'"\'\'"\'"\' force=yes\' wazuh-agent1', exit_status=0, stdout=b'wazuh-agent1 | CHANGED => {\n "changed": true,\n "checksum": "da39a3ee5e6b4b0d3255bfef95601890afd80709",\n "dest": "/var/ossec/logs/ossec.log",\n "gid": 999,\n "group": "ossec",\n "md5sum": "d41d8cd98f00b204e9800998ecf8427e",\n "mode": "0660",\n "owner": "ossec",\n "size": 0,\n "src": "/root/.ansible/tmp/ansible-tmp-1643832558.6859903-69014-168077828446396/source",\n "state": "file",\n "uid": 999\n}\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('copy', "dest=/var/ossec/logs/ossec.log content='' force=yes", {'check': False, 'become': False}): {'changed': True, 'checksum': 'da39a3ee5e6b4b0d3255bfef95601890afd80709', 'dest': '/var/ossec/logs/ossec.log', 'gid': 999, 'group': 'ossec', 'md5sum': 'd41d8cd98f00b204e9800998ecf8427e', 'mode': '0660', 'owner': 'ossec', 'size': 0, 'src': '/root/.ansible/tmp/ansible-tmp-1643832558.6859903-69014-168077828446396/source', 'state': 'file', 'uid': 999} DEBUG testinfra:base.py:277 RUN CommandResult(command=b"ansible --tree /tmp/tmppdnvxs4q -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m command --args '/var/ossec/bin/wazuh-control stop' wazuh-agent1", exit_status=0, stdout=b'wazuh-agent1 | CHANGED | rc=0 >>\nKilling wazuh-modulesd... \nKilling wazuh-logcollector... \nKilling wazuh-syscheckd... \nKilling wazuh-agentd... \nKilling wazuh-execd... \nWazuh v4.2.5 Stopped\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('command', '/var/ossec/bin/wazuh-control stop', {'check': False, 'become': False}): {'changed': True, 'cmd': ['/var/ossec/bin/wazuh-control', 'stop'], 'delta': '0:00:01.366303', 'end': '2022-02-02 21:09:25.928050', 'msg': '', 'rc': 0, 'start': '2022-02-02 21:09:24.561747', 'stderr': '', 'stderr_lines': [], 'stdout': 'Killing wazuh-modulesd... \n' 'Killing wazuh-logcollector... \n' 'Killing wazuh-syscheckd... \n' 'Killing wazuh-agentd... \n' 'Killing wazuh-execd... \n' 'Wazuh v4.2.5 Stopped', 'stdout_lines': ['Killing wazuh-modulesd... ', 'Killing wazuh-logcollector... ', 'Killing wazuh-syscheckd... ', 'Killing wazuh-agentd... ', 'Killing wazuh-execd... ', 'Wazuh v4.2.5 Stopped']} DEBUG testinfra:base.py:277 RUN CommandResult(command=b"ansible --tree /tmp/tmps3t7e_ap -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m command --args 'touch testdir1/testdir1.txt' wazuh-agent1", exit_status=0, stdout=b'wazuh-agent1 | CHANGED | rc=0 >>\n\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('command', 'touch testdir1/testdir1.txt', {'check': False, 'become': False}): {'changed': True, 'cmd': ['touch', 'testdir1/testdir1.txt'], 'delta': '0:00:00.838768', 'end': '2022-02-02 21:09:29.052170', 'msg': '', 'rc': 0, 'start': '2022-02-02 21:09:28.213402', 'stderr': '', 'stderr_lines': [], 'stdout': '', 'stdout_lines': []} DEBUG testinfra:base.py:277 RUN CommandResult(command=b"ansible --tree /tmp/tmpio2msluj -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m command --args '/var/ossec/bin/wazuh-control start' wazuh-agent1", exit_status=0, stdout=b"wazuh-agent1 | CHANGED | rc=0 >>\nStarting Wazuh v4.2.5...\nStarted wazuh-execd...\nStarted wazuh-agentd...\nStarted wazuh-syscheckd...\nStarted wazuh-logcollector...\nStarted wazuh-modulesd...\nCompleted.2022/02/02 21:09:32 wazuh-syscheckd[6815] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized\n2022/02/02 21:09:32 wazuh-syscheckd[6815] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf'\n2022/02/02 21:09:32 wazuh-syscheckd[6815] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)].\n2022/02/02 21:09:32 wazuh-syscheckd[6815] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)].\n2022/02/02 21:09:32 wazuh-syscheckd[6815] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc\n2022/02/02 21:09:32 wazuh-syscheckd[6815] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK?\n2022/02/02 21:09:32 wazuh-syscheckd[6815] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0\n2022/02/02 21:09:32 wazuh-syscheckd[6815] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$\n2022/02/02 21:09:32 wazuh-syscheckd[6815] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ OK?\n2022/02/02 21:09:32 wazuh-syscheckd[6815] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1\n2022/02/02 21:09:32 wazuh-syscheckd[6815] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf]\n2022/02/02 21:09:32 wazuh-syscheckd[6815] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile().\n2022/02/02 21:09:32 wazuh-syscheckd[6815] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10]\n2022/02/02 21:09:32 wazuh-syscheckd[6815] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes.\n2022/02/02 21:09:32 wazuh-syscheckd[6815] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile().\n2022/02/02 21:09:32 wazuh-syscheckd[6815] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10]\n2022/02/02 21:09:32 wazuh-syscheckd[6815] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes.\n2022/02/02 21:09:34 wazuh-syscheckd[6851] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized\n2022/02/02 21:09:34 wazuh-syscheckd[6851] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf'\n2022/02/02 21:09:34 wazuh-syscheckd[6851] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)].\n2022/02/02 21:09:34 wazuh-syscheckd[6851] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)].\n2022/02/02 21:09:34 wazuh-syscheckd[6851] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc\n2022/02/02 21:09:34 wazuh-syscheckd[6851] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK?\n2022/02/02 21:09:34 wazuh-syscheckd[6851] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0\n2022/02/02 21:09:34 wazuh-syscheckd[6851] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$\n2022/02/02 21:09:34 wazuh-syscheckd[6851] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ OK?\n2022/02/02 21:09:34 wazuh-syscheckd[6851] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1\n2022/02/02 21:09:34 wazuh-syscheckd[6851] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf]\n2022/02/02 21:09:34 wazuh-syscheckd[6851] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile().\n2022/02/02 21:09:34 wazuh-syscheckd[6851] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10]\n2022/02/02 21:09:34 wazuh-syscheckd[6851] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes.\n2022/02/02 21:09:34 wazuh-syscheckd[6851] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile().\n2022/02/02 21:09:34 wazuh-syscheckd[6851] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10]\n2022/02/02 21:09:34 wazuh-syscheckd[6851] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes.\n2022/02/02 21:09:34 rootcheck[6851] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled.\n", stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('command', '/var/ossec/bin/wazuh-control start', {'check': False, 'become': False}): {'changed': True, 'cmd': ['/var/ossec/bin/wazuh-control', 'start'], 'delta': '0:00:07.907335', 'end': '2022-02-02 21:09:39.284120', 'msg': '', 'rc': 0, 'start': '2022-02-02 21:09:31.376785', 'stderr': '2022/02/02 21:09:32 wazuh-syscheckd[6815] debug_op.c:70 at _log(): ' 'DEBUG: Logging module auto-initialized\n' '2022/02/02 21:09:32 wazuh-syscheckd[6815] config.c:87 at ' 'Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: ' "'etc/ossec.conf'\n" '2022/02/02 21:09:32 wazuh-syscheckd[6815] syscheck-config.c:1218 ' 'at read_attr(): DEBUG: Could not check the real path of ' "'/testdir2' due to [(2)-(No such file or directory)].\n" '2022/02/02 21:09:32 wazuh-syscheckd[6815] syscheck-config.c:1218 ' 'at read_attr(): DEBUG: Could not check the real path of ' "'/testdir3' due to [(2)-(No such file or directory)].\n" '2022/02/02 21:09:32 wazuh-syscheckd[6815] syscheck-config.c:2520 ' 'at process_option_regex(): DEBUG: Found ignore regex node ^/proc\n' '2022/02/02 21:09:32 wazuh-syscheckd[6815] syscheck-config.c:2527 ' 'at process_option_regex(): DEBUG: Found ignore regex node ^/proc ' 'OK?\n' '2022/02/02 21:09:32 wazuh-syscheckd[6815] syscheck-config.c:2528 ' 'at process_option_regex(): DEBUG: Found ignore regex size 0\n' '2022/02/02 21:09:32 wazuh-syscheckd[6815] syscheck-config.c:2520 ' 'at process_option_regex(): DEBUG: Found ignore regex node ' '.log$|.swp$\n' '2022/02/02 21:09:32 wazuh-syscheckd[6815] syscheck-config.c:2527 ' 'at process_option_regex(): DEBUG: Found ignore regex node ' '.log$|.swp$ OK?\n' '2022/02/02 21:09:32 wazuh-syscheckd[6815] syscheck-config.c:2528 ' 'at process_option_regex(): DEBUG: Found ignore regex size 1\n' '2022/02/02 21:09:32 wazuh-syscheckd[6815] config.c:95 at ' 'Read_Syscheck_Config(): DEBUG: (6208): Reading Client ' 'Configuration [etc/ossec.conf]\n' '2022/02/02 21:09:32 wazuh-syscheckd[6815] agent_op.c:208 at ' 'os_read_agent_profile(): DEBUG: Calling os_read_agent_profile().\n' '2022/02/02 21:09:32 wazuh-syscheckd[6815] agent_op.c:227 at ' 'os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, ' 'debian10]\n' '2022/02/02 21:09:32 wazuh-syscheckd[6815] config.c:375 at ' 'ReadConfig(): DEBUG: agent_config element does not have any ' 'attributes.\n' '2022/02/02 21:09:32 wazuh-syscheckd[6815] agent_op.c:208 at ' 'os_read_agent_profile(): DEBUG: Calling os_read_agent_profile().\n' '2022/02/02 21:09:32 wazuh-syscheckd[6815] agent_op.c:227 at ' 'os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, ' 'debian10]\n' '2022/02/02 21:09:32 wazuh-syscheckd[6815] config.c:375 at ' 'ReadConfig(): DEBUG: agent_config element does not have any ' 'attributes.\n' '2022/02/02 21:09:34 wazuh-syscheckd[6851] debug_op.c:70 at _log(): ' 'DEBUG: Logging module auto-initialized\n' '2022/02/02 21:09:34 wazuh-syscheckd[6851] config.c:87 at ' 'Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: ' "'etc/ossec.conf'\n" '2022/02/02 21:09:34 wazuh-syscheckd[6851] syscheck-config.c:1218 ' 'at read_attr(): DEBUG: Could not check the real path of ' "'/testdir2' due to [(2)-(No such file or directory)].\n" '2022/02/02 21:09:34 wazuh-syscheckd[6851] syscheck-config.c:1218 ' 'at read_attr(): DEBUG: Could not check the real path of ' "'/testdir3' due to [(2)-(No such file or directory)].\n" '2022/02/02 21:09:34 wazuh-syscheckd[6851] syscheck-config.c:2520 ' 'at process_option_regex(): DEBUG: Found ignore regex node ^/proc\n' '2022/02/02 21:09:34 wazuh-syscheckd[6851] syscheck-config.c:2527 ' 'at process_option_regex(): DEBUG: Found ignore regex node ^/proc ' 'OK?\n' '2022/02/02 21:09:34 wazuh-syscheckd[6851] syscheck-config.c:2528 ' 'at process_option_regex(): DEBUG: Found ignore regex size 0\n' '2022/02/02 21:09:34 wazuh-syscheckd[6851] syscheck-config.c:2520 ' 'at process_option_regex(): DEBUG: Found ignore regex node ' '.log$|.swp$\n' '2022/02/02 21:09:34 wazuh-syscheckd[6851] syscheck-config.c:2527 ' 'at process_option_regex(): DEBUG: Found ignore regex node ' '.log$|.swp$ OK?\n' '2022/02/02 21:09:34 wazuh-syscheckd[6851] syscheck-config.c:2528 ' 'at process_option_regex(): DEBUG: Found ignore regex size 1\n' '2022/02/02 21:09:34 wazuh-syscheckd[6851] config.c:95 at ' 'Read_Syscheck_Config(): DEBUG: (6208): Reading Client ' 'Configuration [etc/ossec.conf]\n' '2022/02/02 21:09:34 wazuh-syscheckd[6851] agent_op.c:208 at ' 'os_read_agent_profile(): DEBUG: Calling os_read_agent_profile().\n' '2022/02/02 21:09:34 wazuh-syscheckd[6851] agent_op.c:227 at ' 'os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, ' 'debian10]\n' '2022/02/02 21:09:34 wazuh-syscheckd[6851] config.c:375 at ' 'ReadConfig(): DEBUG: agent_config element does not have any ' 'attributes.\n' '2022/02/02 21:09:34 wazuh-syscheckd[6851] agent_op.c:208 at ' 'os_read_agent_profile(): DEBUG: Calling os_read_agent_profile().\n' '2022/02/02 21:09:34 wazuh-syscheckd[6851] agent_op.c:227 at ' 'os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, ' 'debian10]\n' '2022/02/02 21:09:34 wazuh-syscheckd[6851] config.c:375 at ' 'ReadConfig(): DEBUG: agent_config element does not have any ' 'attributes.\n' '2022/02/02 21:09:34 rootcheck[6851] rootcheck.c:202 at ' 'rootcheck_init(): INFO: Rootcheck disabled.', 'stderr_lines': ['2022/02/02 21:09:32 wazuh-syscheckd[6815] debug_op.c:70 at ' '_log(): DEBUG: Logging module auto-initialized', '2022/02/02 21:09:32 wazuh-syscheckd[6815] config.c:87 at ' 'Read_Syscheck_Config(): DEBUG: (6287): Reading ' "configuration file: 'etc/ossec.conf'", '2022/02/02 21:09:32 wazuh-syscheckd[6815] ' 'syscheck-config.c:1218 at read_attr(): DEBUG: Could not ' "check the real path of '/testdir2' due to [(2)-(No such " 'file or directory)].', '2022/02/02 21:09:32 wazuh-syscheckd[6815] ' 'syscheck-config.c:1218 at read_attr(): DEBUG: Could not ' "check the real path of '/testdir3' due to [(2)-(No such " 'file or directory)].', '2022/02/02 21:09:32 wazuh-syscheckd[6815] ' 'syscheck-config.c:2520 at process_option_regex(): DEBUG: ' 'Found ignore regex node ^/proc', '2022/02/02 21:09:32 wazuh-syscheckd[6815] ' 'syscheck-config.c:2527 at process_option_regex(): DEBUG: ' 'Found ignore regex node ^/proc OK?', '2022/02/02 21:09:32 wazuh-syscheckd[6815] ' 'syscheck-config.c:2528 at process_option_regex(): DEBUG: ' 'Found ignore regex size 0', '2022/02/02 21:09:32 wazuh-syscheckd[6815] ' 'syscheck-config.c:2520 at process_option_regex(): DEBUG: ' 'Found ignore regex node .log$|.swp$', '2022/02/02 21:09:32 wazuh-syscheckd[6815] ' 'syscheck-config.c:2527 at process_option_regex(): DEBUG: ' 'Found ignore regex node .log$|.swp$ OK?', '2022/02/02 21:09:32 wazuh-syscheckd[6815] ' 'syscheck-config.c:2528 at process_option_regex(): DEBUG: ' 'Found ignore regex size 1', '2022/02/02 21:09:32 wazuh-syscheckd[6815] config.c:95 at ' 'Read_Syscheck_Config(): DEBUG: (6208): Reading Client ' 'Configuration [etc/ossec.conf]', '2022/02/02 21:09:32 wazuh-syscheckd[6815] agent_op.c:208 at ' 'os_read_agent_profile(): DEBUG: Calling ' 'os_read_agent_profile().', '2022/02/02 21:09:32 wazuh-syscheckd[6815] agent_op.c:227 at ' 'os_read_agent_profile(): DEBUG: os_read_agent_profile() = ' '[debian, debian10]', '2022/02/02 21:09:32 wazuh-syscheckd[6815] config.c:375 at ' 'ReadConfig(): DEBUG: agent_config element does not have any ' 'attributes.', '2022/02/02 21:09:32 wazuh-syscheckd[6815] agent_op.c:208 at ' 'os_read_agent_profile(): DEBUG: Calling ' 'os_read_agent_profile().', '2022/02/02 21:09:32 wazuh-syscheckd[6815] agent_op.c:227 at ' 'os_read_agent_profile(): DEBUG: os_read_agent_profile() = ' '[debian, debian10]', '2022/02/02 21:09:32 wazuh-syscheckd[6815] config.c:375 at ' 'ReadConfig(): DEBUG: agent_config element does not have any ' 'attributes.', '2022/02/02 21:09:34 wazuh-syscheckd[6851] debug_op.c:70 at ' '_log(): DEBUG: Logging module auto-initialized', '2022/02/02 21:09:34 wazuh-syscheckd[6851] config.c:87 at ' 'Read_Syscheck_Config(): DEBUG: (6287): Reading ' "configuration file: 'etc/ossec.conf'", '2022/02/02 21:09:34 wazuh-syscheckd[6851] ' 'syscheck-config.c:1218 at read_attr(): DEBUG: Could not ' "check the real path of '/testdir2' due to [(2)-(No such " 'file or directory)].', '2022/02/02 21:09:34 wazuh-syscheckd[6851] ' 'syscheck-config.c:1218 at read_attr(): DEBUG: Could not ' "check the real path of '/testdir3' due to [(2)-(No such " 'file or directory)].', '2022/02/02 21:09:34 wazuh-syscheckd[6851] ' 'syscheck-config.c:2520 at process_option_regex(): DEBUG: ' 'Found ignore regex node ^/proc', '2022/02/02 21:09:34 wazuh-syscheckd[6851] ' 'syscheck-config.c:2527 at process_option_regex(): DEBUG: ' 'Found ignore regex node ^/proc OK?', '2022/02/02 21:09:34 wazuh-syscheckd[6851] ' 'syscheck-config.c:2528 at process_option_regex(): DEBUG: ' 'Found ignore regex size 0', '2022/02/02 21:09:34 wazuh-syscheckd[6851] ' 'syscheck-config.c:2520 at process_option_regex(): DEBUG: ' 'Found ignore regex node .log$|.swp$', '2022/02/02 21:09:34 wazuh-syscheckd[6851] ' 'syscheck-config.c:2527 at process_option_regex(): DEBUG: ' 'Found ignore regex node .log$|.swp$ OK?', '2022/02/02 21:09:34 wazuh-syscheckd[6851] ' 'syscheck-config.c:2528 at process_option_regex(): DEBUG: ' 'Found ignore regex size 1', '2022/02/02 21:09:34 wazuh-syscheckd[6851] config.c:95 at ' 'Read_Syscheck_Config(): DEBUG: (6208): Reading Client ' 'Configuration [etc/ossec.conf]', '2022/02/02 21:09:34 wazuh-syscheckd[6851] agent_op.c:208 at ' 'os_read_agent_profile(): DEBUG: Calling ' 'os_read_agent_profile().', '2022/02/02 21:09:34 wazuh-syscheckd[6851] agent_op.c:227 at ' 'os_read_agent_profile(): DEBUG: os_read_agent_profile() = ' '[debian, debian10]', '2022/02/02 21:09:34 wazuh-syscheckd[6851] config.c:375 at ' 'ReadConfig(): DEBUG: agent_config element does not have any ' 'attributes.', '2022/02/02 21:09:34 wazuh-syscheckd[6851] agent_op.c:208 at ' 'os_read_agent_profile(): DEBUG: Calling ' 'os_read_agent_profile().', '2022/02/02 21:09:34 wazuh-syscheckd[6851] agent_op.c:227 at ' 'os_read_agent_profile(): DEBUG: os_read_agent_profile() = ' '[debian, debian10]', '2022/02/02 21:09:34 wazuh-syscheckd[6851] config.c:375 at ' 'ReadConfig(): DEBUG: agent_config element does not have any ' 'attributes.', '2022/02/02 21:09:34 rootcheck[6851] rootcheck.c:202 at ' 'rootcheck_init(): INFO: Rootcheck disabled.'], 'stdout': 'Starting Wazuh v4.2.5...\n' 'Started wazuh-execd...\n' 'Started wazuh-agentd...\n' 'Started wazuh-syscheckd...\n' 'Started wazuh-logcollector...\n' 'Started wazuh-modulesd...\n' 'Completed.', 'stdout_lines': ['Starting Wazuh v4.2.5...', 'Started wazuh-execd...', 'Started wazuh-agentd...', 'Started wazuh-syscheckd...', 'Started wazuh-logcollector...', 'Started wazuh-modulesd...', 'Completed.']} DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:1006 Cleaning temporal files... DEBUG wazuh_testing:monitoring.py:995 Checking results... DEBUG wazuh_testing:monitoring.py:1001 Received from wazuh-agent1 the expected message: 2022/02/02 21:09:35 wazuh-syscheckd[6851] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. DEBUG testinfra:base.py:277 RUN CommandResult(command=b"ansible --tree /tmp/tmppac49x_s -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m command --args 'rm -rf testdir1' wazuh-agent1", exit_status=0, stdout=b'wazuh-agent1 | CHANGED | rc=0 >>\n\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('command', 'rm -rf testdir1', {'check': False, 'become': False}): {'changed': True, 'cmd': ['rm', '-rf', 'testdir1'], 'delta': '0:00:00.843505', 'end': '2022-02-02 21:09:45.427248', 'msg': '', 'rc': 0, 'start': '2022-02-02 21:09:44.583743', 'stderr': '', 'stderr_lines': [], 'stdout': '', 'stdout_lines': []}

------------------------------Captured stderr call------------------------------
2022-02-02 17:10:07,582 - wazuh_testing - DEBUG - Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-02 17:10:07,585 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-02 17:10:07,586 - wazuh_testing - DEBUG - Starting file composer for wazuh-agent1 and path: /var/ossec/logs/ossec.log. Composite file in /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-agent1_ossec.log.tmp 2022-02-02 17:10:07,586 - wazuh_testing - DEBUG - Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-02 17:10:07,589 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-02 17:10:07,590 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-agent1 and message: .*Sending integrity control message: (.+)$ 2022-02-02 17:10:07,593 - wazuh_testing - DEBUG - Starting file composer for wazuh-manager and path: /var/ossec/logs/ossec.log. Composite file in /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-manager_ossec.log.tmp 2022-02-02 17:10:07,595 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-manager and message: .*Agent 001 query: (.+) save2 2022-02-02 17:10:09,592 - wazuh_testing - DEBUG - 2022/02/02 21:09:25 wazuh-logcollector: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:10:09,593 - wazuh_testing - DEBUG - 2022/02/02 21:09:25 wazuh-syscheckd[6394] sig_op.c:49 at HandleSIG(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:10:09,593 - wazuh_testing - DEBUG - 2022/02/02 21:09:25 wazuh-agentd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:10:09,593 - wazuh_testing - DEBUG - 2022/02/02 21:09:25 wazuh-execd: INFO: (1314): Shutdown received. Deleting responses. 2022-02-02 17:10:09,593 - wazuh_testing - DEBUG - 2022/02/02 21:09:25 wazuh-execd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:10:09,593 - wazuh_testing - DEBUG - 2022/02/02 21:09:32 wazuh-syscheckd[6815] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-02 17:10:09,594 - wazuh_testing - DEBUG - 2022/02/02 21:09:32 wazuh-syscheckd[6815] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-02 17:10:09,594 - wazuh_testing - DEBUG - 2022/02/02 21:09:32 wazuh-syscheckd[6815] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-02 17:10:09,594 - wazuh_testing - DEBUG - 2022/02/02 21:09:32 wazuh-syscheckd[6815] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-02 17:10:09,595 - wazuh_testing - DEBUG - 2022/02/02 21:09:32 wazuh-syscheckd[6815] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-02 17:10:09,595 - wazuh_testing - DEBUG - 2022/02/02 21:09:32 wazuh-syscheckd[6815] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-02 17:10:09,595 - wazuh_testing - DEBUG - 2022/02/02 21:09:32 wazuh-syscheckd[6815] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-02 17:10:09,595 - wazuh_testing - DEBUG - 2022/02/02 21:09:32 wazuh-syscheckd[6815] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ 2022-02-02 17:10:09,596 - wazuh_testing - DEBUG - 2022/02/02 21:09:32 wazuh-syscheckd[6815] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ OK? 2022-02-02 17:10:09,596 - wazuh_testing - DEBUG - 2022/02/02 21:09:32 wazuh-syscheckd[6815] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-02 17:10:09,596 - wazuh_testing - DEBUG - 2022/02/02 21:09:32 wazuh-syscheckd[6815] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-02 17:10:09,596 - wazuh_testing - DEBUG - 2022/02/02 21:09:32 wazuh-syscheckd[6815] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-02 17:10:09,597 - wazuh_testing - DEBUG - 2022/02/02 21:09:32 wazuh-syscheckd[6815] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-02 17:10:09,597 - wazuh_testing - DEBUG - 2022/02/02 21:09:32 wazuh-syscheckd[6815] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-02 17:10:09,597 - wazuh_testing - DEBUG - 2022/02/02 21:09:32 wazuh-syscheckd[6815] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-02 17:10:09,597 - wazuh_testing - DEBUG - 2022/02/02 21:09:32 wazuh-syscheckd[6815] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-02 17:10:09,597 - wazuh_testing - DEBUG - 2022/02/02 21:09:19 wazuh-db[4348] wdb.c:918 at wdb_commit_old(): DEBUG: Agent 'global' database commited. Time: 4.250 ms. 2022-02-02 17:10:09,598 - wazuh_testing - DEBUG - 2022/02/02 21:09:32 wazuh-syscheckd[6815] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-02 17:10:09,598 - wazuh_testing - DEBUG - 2022/02/02 21:09:32 wazuh-execd: INFO: Started (pid: 6828). 2022-02-02 17:10:09,598 - wazuh_testing - DEBUG - 2022/02/02 21:09:33 wazuh-agentd: INFO: (1410): Reading authentication keys file. 2022-02-02 17:10:09,598 - wazuh_testing - DEBUG - 2022/02/02 21:09:20 wazuh-db[4348] wdb.c:918 at wdb_commit_old(): DEBUG: Agent '001' database commited. Time: 2.847 ms. 2022-02-02 17:10:09,598 - wazuh_testing - DEBUG - 2022/02/02 21:09:33 wazuh-agentd: INFO: Using notify time: 10 and max time to reconnect: 60 2022-02-02 17:10:09,598 - wazuh_testing - DEBUG - 2022/02/02 21:09:33 wazuh-agentd: INFO: Version detected -> Linux |wazuh-agent1 |5.13.0-27-generic |#29~20.04.1-Ubuntu SMP Fri Jan 14 00:32:30 UTC 2022 |x86_64 [Debian GNU/Linux|debian: 10 (buster)] - Wazuh v4.2.5 2022-02-02 17:10:09,599 - wazuh_testing - DEBUG - 2022/02/02 21:09:33 wazuh-agentd: INFO: Started (pid: 6839). 2022-02-02 17:10:09,599 - wazuh_testing - DEBUG - 2022/02/02 21:09:33 wazuh-agentd: INFO: Server IP Address: wazuh-manager/172.18.0.2 2022-02-02 17:10:09,599 - wazuh_testing - DEBUG - 2022/02/02 21:09:33 wazuh-agentd: INFO: Using AES as encryption method. 2022-02-02 17:10:09,599 - wazuh_testing - DEBUG - 2022/02/02 21:09:33 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.18.0.2:1514/tcp). 2022-02-02 17:10:09,599 - wazuh_testing - DEBUG - 2022/02/02 21:09:33 wazuh-agentd: INFO: (4102): Connected to the server (wazuh-manager/172.18.0.2:1514/tcp). 2022-02-02 17:10:09,599 - wazuh_testing - DEBUG - 2022/02/02 21:09:23 wazuh-db[4348] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.18.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.18.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.13.0-27-generic |#29~20.04.1-Ubuntu SMP Fri Jan 14 00:32:30 UTC 2022 |x86_64","os_arch":"x86_64"} 2022-02-02 17:10:09,600 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-02 17:10:09,600 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-02 17:10:09,600 - wazuh_testing - DEBUG - 2022/02/02 21:09:25 wazuh-db[4348] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-connection-status {"id":1,"connection_status":"disconnected","sync_status":"synced"} 2022-02-02 17:10:09,600 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-02 17:10:09,600 - wazuh_testing - DEBUG - 2022/02/02 21:09:25 wazuh-db[4348] main.c:290 at run_dealer(): DEBUG: New client connected (41). 2022-02-02 17:10:09,600 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-02 17:10:09,600 - wazuh_testing - DEBUG - 2022/02/02 21:09:25 wazuh-db[4348] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: get-labels 1 2022-02-02 17:10:09,601 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-02 17:10:09,601 - wazuh_testing - DEBUG - 2022/02/02 21:09:33 wazuh-db[4348] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-keepalive {"id":1,"connection_status":"pending","sync_status":"synced"} 2022-02-02 17:10:09,601 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-02 17:10:09,601 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-02 17:10:09,602 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ 2022-02-02 17:10:09,602 - wazuh_testing - DEBUG - 2022/02/02 21:09:37 wazuh-db[4348] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.18.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.18.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.13.0-27-generic |#29~20.04.1-Ubuntu SMP Fri Jan 14 00:32:30 UTC 2022 |x86_64","os_arch":"x86_64"} 2022-02-02 17:10:09,602 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ OK? 2022-02-02 17:10:09,602 - wazuh_testing - DEBUG - 2022/02/02 21:09:37 wazuh-db[4348] main.c:290 at run_dealer(): DEBUG: New client connected (42). 2022-02-02 17:10:09,603 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-02 17:10:09,603 - wazuh_testing - DEBUG - 2022/02/02 21:09:37 wazuh-db[4348] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1643832574 2022-02-02 17:10:09,603 - wazuh_testing - DEBUG - 2022/02/02 21:09:37 wazuh-db[4348] main.c:290 at run_dealer(): DEBUG: New client connected (44). 2022-02-02 17:10:09,603 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-02 17:10:09,604 - wazuh_testing - DEBUG - 2022/02/02 21:09:37 wazuh-db[4348] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update end_scan 1643832575 2022-02-02 17:10:09,604 - wazuh_testing - DEBUG - 2022/02/02 21:09:37 wazuh-db[4348] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_global {"id":1643832575,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"f7785416950c8fc925cfeed344f5d33170e71546"} 2022-02-02 17:10:09,604 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-02 17:10:09,605 - wazuh_testing - DEBUG - 2022/02/02 21:09:37 wazuh-db[4348] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 1.130 ms. 2022-02-02 17:10:09,605 - wazuh_testing - DEBUG - 2022/02/02 21:09:37 wazuh-db[4348] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643832575,"version":2,"begin":"/bin/bash","end":"/sbin/chcpu","tail":"/sbin/ctrlaltdel","checksum":"2678c972016eb9b2978d2d495f53f99563497651"} 2022-02-02 17:10:09,605 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-02 17:10:09,606 - wazuh_testing - DEBUG - 2022/02/02 21:09:37 wazuh-db[4348] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643832575,"version":2,"begin":"/sbin/ctrlaltdel","end":"/usr/sbin/zic","checksum":"ff5a08b32060f29dc3de14f2a1085c0f39eb6475"} 2022-02-02 17:10:09,606 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-02 17:10:09,606 - wazuh_testing - DEBUG - 2022/02/02 21:09:37 wazuh-db[4348] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.612 ms. 2022-02-02 17:10:09,606 - wazuh_testing - DEBUG - 2022/02/02 21:09:37 wazuh-db[4348] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.808 ms. 2022-02-02 17:10:09,606 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-02 17:10:09,607 - wazuh_testing - DEBUG - 2022/02/02 21:09:37 wazuh-db[4348] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643832575,"version":2,"begin":"/sbin/ctrlaltdel","end":"/usr/bin/pdb","tail":"/usr/bin/pdb2","checksum":"7f4920c7c065353c2d5ec397ec4fbeadab7beefa"} 2022-02-02 17:10:09,607 - wazuh_testing - DEBUG - 2022/02/02 21:09:37 wazuh-db[4348] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643832575,"version":2,"begin":"/usr/bin/pdb2","end":"/usr/sbin/zic","checksum":"f28534dbcbabe145177a8e0c707d9da341991c1f"} 2022-02-02 17:10:09,607 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-02 17:10:09,607 - wazuh_testing - DEBUG - 2022/02/02 21:09:37 wazuh-db[4348] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.302 ms. 2022-02-02 17:10:09,608 - wazuh_testing - DEBUG - 2022/02/02 21:09:37 wazuh-db[4348] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.652 ms. 2022-02-02 17:10:09,608 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-02 17:10:09,608 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 rootcheck[6851] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled. 2022-02-02 17:10:09,608 - wazuh_testing - DEBUG - 2022/02/02 21:09:37 wazuh-db[4348] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643832575,"version":2,"begin":"/sbin/ctrlaltdel","end":"/usr/bin/dpkg-divert","tail":"/usr/bin/dpkg-genbuildinfo","checksum":"016813e1bc1ac6dcee7409d7f16792e7562f3a1a"} 2022-02-02 17:10:09,608 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:10:09,608 - wazuh_testing - DEBUG - 2022/02/02 21:09:37 wazuh-db[4348] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.262 ms. 2022-02-02 17:10:09,609 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] syscom.c:123 at syscom_main(): DEBUG: (6284): Local requests thread ready. 2022-02-02 17:10:09,609 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] mq_op.c:47 at StartMQ(): DEBUG: Connected succesfully to 'queue/sockets/queue' after 0 attempts 2022-02-02 17:10:09,609 - wazuh_testing - DEBUG - 2022/02/02 21:09:37 wazuh-db[4348] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643832575,"version":2,"begin":"/usr/bin/dpkg-genbuildinfo","end":"/usr/bin/pdb","checksum":"449176f3ac058628fcde8cdfbd7a7d029ac13e05"} 2022-02-02 17:10:09,609 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] mq_op.c:48 at StartMQ(): DEBUG: (unix_domain) Maximum send buffer set to: '212992'. 2022-02-02 17:10:09,609 - wazuh_testing - DEBUG - 2022/02/02 21:09:37 wazuh-db[4348] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.232 ms. 2022-02-02 17:10:09,609 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] main.c:185 at main(): INFO: Started (pid: 6853). 2022-02-02 17:10:09,610 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] main.c:193 at main(): INFO: (6003): Monitoring path: '/bin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:10:09,610 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] main.c:193 at main(): INFO: (6003): Monitoring path: '/boot', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:10:09,610 - wazuh_testing - DEBUG - 2022/02/02 21:09:37 wazuh-db[4348] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643832575,"version":2,"begin":"/usr/bin/apt-ftparchive","end":"/usr/bin/dpkg-divert","checksum":"84aaf018d588e1d99c714364b63c94e1d4eb4bf2"} 2022-02-02 17:10:09,610 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] main.c:193 at main(): INFO: (6003): Monitoring path: '/etc', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:10:09,610 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] main.c:193 at main(): INFO: (6003): Monitoring path: '/sbin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:10:09,610 - wazuh_testing - DEBUG - 2022/02/02 21:09:37 wazuh-db[4348] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643832575,"version":2,"begin":"/sbin/ctrlaltdel","end":"/usr/bin/apt-extracttemplates","tail":"/usr/bin/apt-ftparchive","checksum":"002e81b63fca34f4a2cc2346b51bdc0777b0b5b0"} 2022-02-02 17:10:09,611 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir1', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:10:09,611 - wazuh_testing - DEBUG - 2022/02/02 21:09:37 wazuh-db[4348] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.154 ms. 2022-02-02 17:10:09,611 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir2', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | realtime'. 2022-02-02 17:10:09,611 - wazuh_testing - DEBUG - 2022/02/02 21:09:37 wazuh-db[4348] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.200 ms. 2022-02-02 17:10:09,611 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir3', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | whodata'. 2022-02-02 17:10:09,611 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/bin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:10:09,612 - wazuh_testing - DEBUG - 2022/02/02 21:09:37 wazuh-db[4348] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643832575,"version":2,"begin":"/sbin/ctrlaltdel","end":"/sbin/mkhomedir_helper","tail":"/sbin/mkswap","checksum":"f4094767b5033606e4a60c0075f429a93f720519"} 2022-02-02 17:10:09,612 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/sbin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:10:09,612 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] main.c:215 at main(): DEBUG: (6357): Maximum disk quota size limit configured to '1048576 KB'. 2022-02-02 17:10:09,612 - wazuh_testing - DEBUG - 2022/02/02 21:09:37 wazuh-db[4348] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.140 ms. 2022-02-02 17:10:09,612 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mtab' 2022-02-02 17:10:09,612 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/hosts.deny' 2022-02-02 17:10:09,612 - wazuh_testing - DEBUG - 2022/02/02 21:09:38 wazuh-db[4348] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643832575,"version":2,"begin":"/sbin/mkswap","end":"/usr/bin/apt-extracttemplates","checksum":"2c2f379278a86039620aba29541d4506e696ad55"} 2022-02-02 17:10:09,613 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mail/statistics' 2022-02-02 17:10:09,613 - wazuh_testing - DEBUG - 2022/02/02 21:09:38 wazuh-db[4348] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.159 ms. 2022-02-02 17:10:09,613 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random-seed' 2022-02-02 17:10:09,613 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random.seed' 2022-02-02 17:10:09,613 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/adjtime' 2022-02-02 17:10:09,613 - wazuh_testing - DEBUG - 2022/02/02 21:09:38 wazuh-db[4348] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643832575,"version":2,"begin":"/sbin/mkswap","end":"/sbin/start-stop-daemon","tail":"/sbin/sulogin","checksum":"205673eafd86478a9bae30a249a954bab122f47f"} 2022-02-02 17:10:09,613 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/httpd/logs' 2022-02-02 17:10:09,614 - wazuh_testing - DEBUG - 2022/02/02 21:09:38 wazuh-db[4348] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.148 ms. 2022-02-02 17:10:09,614 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/utmpx' 2022-02-02 17:10:09,614 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/wtmpx' 2022-02-02 17:10:09,614 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/cups/certs' 2022-02-02 17:10:09,614 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/dumpdates' 2022-02-02 17:10:09,615 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/svc/volatile' 2022-02-02 17:10:09,615 - wazuh_testing - DEBUG - 2022/02/02 21:09:38 wazuh-db[4348] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643832575,"version":2,"begin":"/sbin/sulogin","end":"/usr/bin/apt-extracttemplates","checksum":"431cc83ca10479240d08763bf0d7f1f25586c5fc"} 2022-02-02 17:10:09,615 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/security' 2022-02-02 17:10:09,615 - wazuh_testing - DEBUG - 2022/02/02 21:09:38 wazuh-db[4348] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.131 ms. 2022-02-02 17:10:09,615 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/debug' 2022-02-02 17:10:09,615 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/dev/core' 2022-02-02 17:10:09,615 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '^/proc' 2022-02-02 17:10:09,616 - wazuh_testing - DEBUG - 2022/02/02 21:09:38 wazuh-db[4348] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643832575,"version":2,"begin":"/sbin/sulogin","end":"/sbin/wipefs","tail":"/sbin/zramctl","checksum":"157570556203dc9b1df7834dbf4e4a20ab33cfca"} 2022-02-02 17:10:09,616 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '.log$|.swp$' 2022-02-02 17:10:09,616 - wazuh_testing - DEBUG - 2022/02/02 21:09:38 wazuh-db[4348] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.085 ms. 2022-02-02 17:10:09,616 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] main.c:235 at main(): INFO: (6004): No diff for file: '/etc/ssl/private.key' 2022-02-02 17:10:09,616 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] main.c:245 at main(): INFO: (6016): Directory set for real time monitoring: '/testdir2'. 2022-02-02 17:10:09,616 - wazuh_testing - DEBUG - 2022/02/02 21:09:38 wazuh-db[4348] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643832575,"version":2,"begin":"/sbin/zramctl","end":"/usr/bin/apt-extracttemplates","checksum":"88021789a92f3335df16ecdd09b6dfd5ad96158b"} 2022-02-02 17:10:09,616 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] syscheck_audit.c:243 at audit_init(): WARNING: (6924): Who-data engine cannot start because Auditd is not running. 2022-02-02 17:10:09,617 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] main.c:264 at main(): WARNING: (6913): Who-data engine could not start. Switching who-data to real-time. 2022-02-02 17:10:09,617 - wazuh_testing - DEBUG - 2022/02/02 21:09:38 wazuh-db[4348] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.079 ms. 2022-02-02 17:10:09,617 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] run_check.c:194 at start_daemon(): DEBUG: (6320): Setting process priority to: '10' 2022-02-02 17:10:09,617 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:10:09,617 - wazuh_testing - DEBUG - 2022/02/02 21:09:38 wazuh-db[4348] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643832575,"version":2,"begin":"/sbin/zramctl","end":"/usr/bin/aclocal-1.16","tail":"/usr/bin/addpart","checksum":"9597b7c25a9d3d843a6670f11795b931f7bc5d54"} 2022-02-02 17:10:09,617 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] run_check.c:229 at start_daemon(): INFO: (6000): Starting daemon... 2022-02-02 17:10:09,618 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] run_check.c:232 at start_daemon(): INFO: (6010): File integrity monitoring scan frequency: 20 seconds 2022-02-02 17:10:09,618 - wazuh_testing - DEBUG - 2022/02/02 21:09:38 wazuh-db[4348] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.041 ms. 2022-02-02 17:10:09,618 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-02 17:10:09,618 - wazuh_testing - DEBUG - 2022/02/02 21:09:38 wazuh-db[4348] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643832575,"version":2,"begin":"/usr/bin/addpart","end":"/usr/bin/apt-extracttemplates","checksum":"95a692828de0dea4b6ca328f569037eaa082ab85"} 2022-02-02 17:10:09,618 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1643832574}} 2022-02-02 17:10:09,619 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-02 17:10:09,619 - wazuh_testing - DEBUG - 2022/02/02 21:09:38 wazuh-db[4348] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.048 ms. 2022-02-02 17:10:09,619 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-02 17:10:09,619 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-02 17:10:09,619 - wazuh_testing - DEBUG - 2022/02/02 21:09:38 wazuh-db[4348] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643832575,"version":2,"begin":"/sbin/zramctl","end":"/usr/bin/2to3-2.7","tail":"/usr/bin/[","checksum":"a9db264f0a681752aa73dac28c2b01c159b412d9"} 2022-02-02 17:10:09,620 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-02 17:10:09,620 - wazuh_testing - DEBUG - 2022/02/02 21:09:38 wazuh-db[4348] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643832575,"version":2,"begin":"/usr/bin/[","end":"/usr/bin/aclocal-1.16","checksum":"ab72adc86d2a1f2e36162f60b40bf10d71afc73a"} 2022-02-02 17:10:09,620 - wazuh_testing - DEBUG - 2022/02/02 21:09:38 wazuh-db[4348] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.114 ms. 2022-02-02 17:10:09,620 - wazuh_testing - DEBUG - 2022/02/02 21:09:34 wazuh-syscheckd[6851] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-02 17:10:09,620 - wazuh_testing - DEBUG - 2022/02/02 21:09:38 wazuh-db[4348] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.115 ms. 2022-02-02 17:10:09,621 - wazuh_testing - DEBUG - 2022/02/02 21:09:35 wazuh-logcollector: INFO: (1950): Analyzing file: '/var/ossec/logs/active-responses.log'. 2022-02-02 17:10:09,621 - wazuh_testing - DEBUG - 2022/02/02 21:09:38 wazuh-db[4348] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643832575,"version":2,"begin":"/sbin/zramctl","end":"/sbin/zramctl","tail":"/testdir1/testdir1.txt","checksum":"9562865780448bda22ecac2d749c5a2d5657b106"} 2022-02-02 17:10:09,621 - wazuh_testing - DEBUG - 2022/02/02 21:09:38 wazuh-db[4348] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.087 ms. 2022-02-02 17:10:09,622 - wazuh_testing - DEBUG - 2022/02/02 21:09:35 wazuh-logcollector: ERROR: (1103): Could not open file '/var/log/secure' due to [(2)-(No such file or directory)]. 2022-02-02 17:10:09,622 - wazuh_testing - DEBUG - 2022/02/02 21:09:39 wazuh-db[4348] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643832575,"version":2,"begin":"/testdir1/testdir1.txt","end":"/usr/bin/2to3-2.7","checksum":"857d385e870208bc7706902338c64add332099c2"} 2022-02-02 17:10:09,622 - wazuh_testing - DEBUG - 2022/02/02 21:09:39 wazuh-db[4348] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.078 ms. 2022-02-02 17:10:09,622 - wazuh_testing - DEBUG - 2022/02/02 21:09:35 wazuh-logcollector: INFO: (1950): Analyzing file: '/var/log/secure'. 2022-02-02 17:10:09,622 - wazuh_testing - DEBUG - 2022/02/02 21:09:39 wazuh-db[4348] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643832575,"version":2,"begin":"/testdir1/testdir1.txt","end":"/testdir1/testdir1.txt","tail":"/usr/bin/2to3-2.7","checksum":"638581c4955b5b1dba41ff426c42725ae30cab7d"} 2022-02-02 17:10:09,623 - wazuh_testing - DEBUG - 2022/02/02 21:09:39 wazuh-db[4348] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.089 ms. 2022-02-02 17:10:09,623 - wazuh_testing - DEBUG - 2022/02/02 21:09:35 wazuh-logcollector: INFO: Started (pid: 6865). 2022-02-02 17:10:09,623 - wazuh_testing - DEBUG - 2022/02/02 21:09:39 wazuh-db[4348] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643832575,"version":2,"begin":"/usr/bin/2to3-2.7","end":"/usr/bin/2to3-2.7","checksum":"4288e49f7e69481516baa382943d5a652f7e069b"} 2022-02-02 17:10:09,623 - wazuh_testing - DEBUG - 2022/02/02 21:09:39 wazuh-db[4348] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.059 ms. 2022-02-02 17:10:09,623 - wazuh_testing - DEBUG - 2022/02/02 21:09:39 wazuh-db[4348] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file save2 {"path":"/testdir1/testdir1.txt","timestamp":1643832574,"version":2,"attributes":{"type":"file","size":0,"perm":"rw-r--r--","uid":"0","gid":"0","user_name":"root","group_name":"root","inode":7236635,"mtime":1643832569,"hash_md5":"d41d8cd98f00b204e9800998ecf8427e","hash_sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","hash_sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","checksum":"7654bfbc685ed5678daadfdb9cf6b3f18769daea"}} 2022-02-02 17:10:09,623 - wazuh_testing - DEBUG - 2022/02/02 21:09:35 wazuh-syscheckd[6851] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-02 17:10:09,625 - wazuh_testing - DEBUG - 2022/02/02 21:09:35 wazuh-syscheckd[6851] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-02 17:10:09,625 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-manager and message: .*Agent 001 query: (.+) save2 2022-02-02 17:10:09,626 - wazuh_testing - DEBUG - 2022/02/02 21:09:35 wazuh-syscheckd[6851] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1643832575}} 2022-02-02 17:10:09,626 - wazuh_testing - DEBUG - 2022/02/02 21:09:35 wazuh-syscheckd[6851] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 1.330 sec (1.325 clock sec) 2022-02-02 17:10:09,627 - wazuh_testing - DEBUG - 2022/02/02 21:09:35 wazuh-syscheckd[6851] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1621, path count: 1627 2022-02-02 17:10:09,628 - wazuh_testing - DEBUG - 2022/02/02 21:09:35 wazuh-syscheckd[6851] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:10:09,628 - wazuh_testing - DEBUG - 2022/02/02 21:09:35 wazuh-syscheckd[6851] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:10:09,629 - wazuh_testing - DEBUG - 2022/02/02 21:09:35 wazuh-syscheckd[6851] run_check.c:387 at fim_run_realtime(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-02 17:10:09,630 - wazuh_testing - DEBUG - 2022/02/02 21:09:35 wazuh-syscheckd[6851] run_check.c:543 at log_realtime_status(): INFO: (6012): Real-time file integrity monitoring started. 2022-02-02 17:10:09,630 - wazuh_testing - DEBUG - 2022/02/02 21:09:35 wazuh-syscheckd[6851] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:10:09,631 - wazuh_testing - DEBUG - 2022/02/02 21:09:35 wazuh-syscheckd[6851] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. 2022-02-02 17:10:09,631 - wazuh_testing - DEBUG - 2022/02/02 21:09:35 wazuh-syscheckd[6851] run_check.c:568 at symlink_checker_thread(): DEBUG: (6033): Starting symbolic link updater. Interval '600'. 2022-02-02 17:10:09,632 - wazuh_testing - DEBUG - 2022/02/02 21:09:35 wazuh-syscheckd[6851] run_check.c:82 at fim_send_sync_msg(): DEBUG: (6317): Sending integrity control message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1643832575,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"f7785416950c8fc925cfeed344f5d33170e71546"}} 2022-02-02 17:10:09,633 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-agent1 and message: .*Sending integrity control message: (.+)$ 2022-02-02 17:10:10,598 - wazuh_testing - DEBUG - Cleaning temporal files... 2022-02-02 17:10:10,599 - wazuh_testing - DEBUG - Checking results... 2022-02-02 17:10:10,600 - wazuh_testing - DEBUG - Received from wazuh-manager the expected message: 2022/02/02 21:09:39 wazuh-db[4348] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file save2 {"path":"/testdir1/testdir1.txt","timestamp":1643832574,"version":2,"attributes":{"type":"file","size":0,"perm":"rw-r--r--","uid":"0","gid":"0","user_name":"root","group_name":"root","inode":7236635,"mtime":1643832569,"hash_md5":"d41d8cd98f00b204e9800998ecf8427e","hash_sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","hash_sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","checksum":"7654bfbc685ed5678daadfdb9cf6b3f18769daea"}} 2022-02-02 17:10:10,601 - wazuh_testing - DEBUG - Received from wazuh-agent1 the expected message: 2022/02/02 21:09:35 wazuh-syscheckd[6851] run_check.c:82 at fim_send_sync_msg(): DEBUG: (6317): Sending integrity control message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1643832575,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"f7785416950c8fc925cfeed344f5d33170e71546"}} 2022-02-02 17:10:57,747 - wazuh_testing - DEBUG - Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-02 17:10:57,749 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-02 17:10:57,749 - wazuh_testing - DEBUG - Starting file composer for wazuh-manager and path: /var/ossec/logs/ossec.log. Composite file in /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-manager_ossec.log.tmp 2022-02-02 17:10:57,754 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-manager and message: .*Initializing FIM Integrity Synchronization check. (.+)$ 2022-02-02 17:10:59,757 - wazuh_testing - DEBUG - 2022/02/02 21:10:16 wazuh-db[4348] wdb.c:918 at wdb_commit_old(): DEBUG: Agent '001' database commited. Time: 4.285 ms. 2022-02-02 17:10:59,758 - wazuh_testing - DEBUG - 2022/02/02 21:10:21 wazuh-db[4348] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.18.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.18.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.13.0-27-generic |#29~20.04.1-Ubuntu SMP Fri Jan 14 00:32:30 UTC 2022 |x86_64","os_arch":"x86_64"} 2022-02-02 17:10:59,758 - wazuh_testing - DEBUG - 2022/02/02 21:10:23 wazuh-modulesd:syscollector: INFO: Stop received for Syscollector. 2022-02-02 17:10:59,758 - wazuh_testing - DEBUG - 2022/02/02 21:10:23 wazuh-db[4348] main.c:352 at run_worker(): DEBUG: Client 15 disconnected. 2022-02-02 17:10:59,758 - wazuh_testing - DEBUG - 2022/02/02 21:10:23 wazuh-monitord: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:10:59,759 - wazuh_testing - DEBUG - 2022/02/02 21:10:23 wazuh-logcollector: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:10:59,759 - wazuh_testing - DEBUG - 2022/02/02 21:10:23 wazuh-remoted: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:10:59,759 - wazuh_testing - DEBUG - 2022/02/02 21:10:23 wazuh-db[4348] main.c:352 at run_worker(): DEBUG: Client 27 disconnected. 2022-02-02 17:10:59,759 - wazuh_testing - DEBUG - 2022/02/02 21:10:23 wazuh-db[4348] main.c:352 at run_worker(): DEBUG: Client 22 disconnected. 2022-02-02 17:10:59,759 - wazuh_testing - DEBUG - 2022/02/02 21:10:23 wazuh-db[4348] main.c:352 at run_worker(): DEBUG: Client 16 disconnected. 2022-02-02 17:10:59,759 - wazuh_testing - DEBUG - 2022/02/02 21:10:23 wazuh-db[4348] main.c:352 at run_worker(): DEBUG: Client 18 disconnected. 2022-02-02 17:10:59,760 - wazuh_testing - DEBUG - 2022/02/02 21:10:23 wazuh-syscheckd[4394] sig_op.c:49 at HandleSIG(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:10:59,760 - wazuh_testing - DEBUG - 2022/02/02 21:10:24 wazuh-analysisd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:10:59,760 - wazuh_testing - DEBUG - 2022/02/02 21:10:24 wazuh-db[4348] main.c:352 at run_worker(): DEBUG: Client 46 disconnected. 2022-02-02 17:10:59,760 - wazuh_testing - DEBUG - 2022/02/02 21:10:24 wazuh-db[4348] main.c:352 at run_worker(): DEBUG: Client 43 disconnected. 2022-02-02 17:10:59,760 - wazuh_testing - DEBUG - 2022/02/02 21:10:24 wazuh-db[4348] main.c:352 at run_worker(): DEBUG: Client 44 disconnected. 2022-02-02 17:10:59,760 - wazuh_testing - DEBUG - 2022/02/02 21:10:24 wazuh-db[4348] main.c:352 at run_worker(): DEBUG: Client 42 disconnected. 2022-02-02 17:10:59,761 - wazuh_testing - DEBUG - 2022/02/02 21:10:24 wazuh-db[4348] main.c:352 at run_worker(): DEBUG: Client 41 disconnected. 2022-02-02 17:10:59,761 - wazuh_testing - DEBUG - 2022/02/02 21:10:24 wazuh-db[4348] main.c:352 at run_worker(): DEBUG: Client 40 disconnected. 2022-02-02 17:10:59,761 - wazuh_testing - DEBUG - 2022/02/02 21:10:24 wazuh-db[4348] main.c:352 at run_worker(): DEBUG: Client 39 disconnected. 2022-02-02 17:10:59,761 - wazuh_testing - DEBUG - 2022/02/02 21:10:24 wazuh-db[4348] main.c:352 at run_worker(): DEBUG: Client 37 disconnected. 2022-02-02 17:10:59,761 - wazuh_testing - DEBUG - 2022/02/02 21:10:24 wazuh-db[4348] main.c:352 at run_worker(): DEBUG: Client 35 disconnected. 2022-02-02 17:10:59,761 - wazuh_testing - DEBUG - 2022/02/02 21:10:24 wazuh-db[4348] main.c:352 at run_worker(): DEBUG: Client 38 disconnected. 2022-02-02 17:10:59,762 - wazuh_testing - DEBUG - 2022/02/02 21:10:24 wazuh-db[4348] main.c:352 at run_worker(): DEBUG: Client 31 disconnected. 2022-02-02 17:10:59,762 - wazuh_testing - DEBUG - 2022/02/02 21:10:24 wazuh-db[4348] main.c:352 at run_worker(): DEBUG: Client 32 disconnected. 2022-02-02 17:10:59,762 - wazuh_testing - DEBUG - 2022/02/02 21:10:24 wazuh-db[4348] main.c:352 at run_worker(): DEBUG: Client 33 disconnected. 2022-02-02 17:10:59,762 - wazuh_testing - DEBUG - 2022/02/02 21:10:24 wazuh-db[4348] main.c:352 at run_worker(): DEBUG: Client 29 disconnected. 2022-02-02 17:10:59,762 - wazuh_testing - DEBUG - 2022/02/02 21:10:24 wazuh-db[4348] main.c:352 at run_worker(): DEBUG: Client 36 disconnected. 2022-02-02 17:10:59,763 - wazuh_testing - DEBUG - 2022/02/02 21:10:24 wazuh-db[4348] main.c:352 at run_worker(): DEBUG: Client 34 disconnected. 2022-02-02 17:10:59,763 - wazuh_testing - DEBUG - 2022/02/02 21:10:24 wazuh-db[4348] main.c:352 at run_worker(): DEBUG: Client 30 disconnected. 2022-02-02 17:10:59,763 - wazuh_testing - DEBUG - 2022/02/02 21:10:24 wazuh-db[4348] main.c:352 at run_worker(): DEBUG: Client 28 disconnected. 2022-02-02 17:10:59,763 - wazuh_testing - DEBUG - 2022/02/02 21:10:24 wazuh-db[4348] main.c:352 at run_worker(): DEBUG: Client 20 disconnected. 2022-02-02 17:10:59,763 - wazuh_testing - DEBUG - 2022/02/02 21:10:24 wazuh-db[4348] main.c:352 at run_worker(): DEBUG: Client 19 disconnected. 2022-02-02 17:10:59,764 - wazuh_testing - DEBUG - 2022/02/02 21:10:24 wazuh-db[4348] main.c:352 at run_worker(): DEBUG: Client 24 disconnected. 2022-02-02 17:10:59,764 - wazuh_testing - DEBUG - 2022/02/02 21:10:24 wazuh-db[4348] main.c:352 at run_worker(): DEBUG: Client 14 disconnected. 2022-02-02 17:10:59,764 - wazuh_testing - DEBUG - 2022/02/02 21:10:24 wazuh-db[4348] main.c:352 at run_worker(): DEBUG: Client 21 disconnected. 2022-02-02 17:10:59,764 - wazuh_testing - DEBUG - 2022/02/02 21:10:24 wazuh-db[4348] main.c:352 at run_worker(): DEBUG: Client 26 disconnected. 2022-02-02 17:10:59,764 - wazuh_testing - DEBUG - 2022/02/02 21:10:24 wazuh-db[4348] main.c:352 at run_worker(): DEBUG: Client 25 disconnected. 2022-02-02 17:10:59,765 - wazuh_testing - DEBUG - 2022/02/02 21:10:24 wazuh-db[4348] main.c:352 at run_worker(): DEBUG: Client 12 disconnected. 2022-02-02 17:10:59,765 - wazuh_testing - DEBUG - 2022/02/02 21:10:24 wazuh-db[4348] main.c:352 at run_worker(): DEBUG: Client 23 disconnected. 2022-02-02 17:10:59,765 - wazuh_testing - DEBUG - 2022/02/02 21:10:24 wazuh-db[4348] main.c:352 at run_worker(): DEBUG: Client 13 disconnected. 2022-02-02 17:10:59,765 - wazuh_testing - DEBUG - 2022/02/02 21:10:24 wazuh-db[4348] main.c:352 at run_worker(): DEBUG: Client 6 disconnected. 2022-02-02 17:10:59,765 - wazuh_testing - DEBUG - 2022/02/02 21:10:24 wazuh-execd: INFO: (1314): Shutdown received. Deleting responses. 2022-02-02 17:10:59,766 - wazuh_testing - DEBUG - 2022/02/02 21:10:24 wazuh-execd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:10:59,766 - wazuh_testing - DEBUG - 2022/02/02 21:10:24 wazuh-db[4348] main.c:468 at handler(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:10:59,766 - wazuh_testing - DEBUG - 2022/02/02 21:10:25 wazuh-db[4348] wdb.c:872 at wdb_close_all(): DEBUG: Closing all databases... 2022-02-02 17:10:59,766 - wazuh_testing - DEBUG - 2022/02/02 21:10:25 wazuh-db[4348] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent 001 2022-02-02 17:10:59,767 - wazuh_testing - DEBUG - 2022/02/02 21:10:25 wazuh-db[4348] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent 000 2022-02-02 17:10:59,767 - wazuh_testing - DEBUG - 2022/02/02 21:10:25 wazuh-db[4348] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent global 2022-02-02 17:10:59,767 - wazuh_testing - DEBUG - 2022/02/02 21:10:25 wazuh-db[4348] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent mitre 2022-02-02 17:10:59,767 - wazuh_testing - DEBUG - 2022/02/02 21:10:25 wazuh-db[4348] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent tasks 2022-02-02 17:10:59,767 - wazuh_testing - DEBUG - 2022/02/02 21:10:25 wazuh-db[4348] main.c:231 at main(): DEBUG: Template file removed again: queue/db/.template.db 2022-02-02 17:10:59,768 - wazuh_testing - DEBUG - 2022/02/02 21:10:25 wazuh-authd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:10:59,768 - wazuh_testing - DEBUG - 2022/02/02 21:10:25 wazuh-authd: INFO: Exiting... 2022-02-02 17:10:59,768 - wazuh_testing - DEBUG - 2022/02/02 21:10:39 wazuh-db[5293] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-02 17:10:59,769 - wazuh_testing - DEBUG - 2022/02/02 21:10:39 wazuh-db[5293] main.c:101 at main(): DEBUG: Wazuh home directory: /var/ossec 2022-02-02 17:10:59,769 - wazuh_testing - DEBUG - 2022/02/02 21:10:40 wazuh-syscheckd[5297] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-02 17:10:59,770 - wazuh_testing - DEBUG - 2022/02/02 21:10:40 wazuh-syscheckd[5297] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-02 17:10:59,770 - wazuh_testing - DEBUG - 2022/02/02 21:10:40 wazuh-syscheckd[5297] syscheck-config.c:122 at organize_syscheck_dirs(): DEBUG: No directory entries to organize in syscheck configuration. 2022-02-02 17:10:59,771 - wazuh_testing - DEBUG - 2022/02/02 21:10:47 wazuh-csyslogd: INFO: Remote syslog server not configured. Clean exit. 2022-02-02 17:10:59,771 - wazuh_testing - DEBUG - 2022/02/02 21:10:47 wazuh-dbd: INFO: Database not configured. Clean exit. 2022-02-02 17:10:59,771 - wazuh_testing - DEBUG - 2022/02/02 21:10:47 wazuh-integratord: INFO: Remote integrations not configured. Clean exit. 2022-02-02 17:10:59,772 - wazuh_testing - DEBUG - 2022/02/02 21:10:47 wazuh-agentlessd: INFO: Not configured. Exiting. 2022-02-02 17:10:59,773 - wazuh_testing - DEBUG - 2022/02/02 21:10:47 wazuh-authd: INFO: Started (pid: 5363). 2022-02-02 17:10:59,773 - wazuh_testing - DEBUG - 2022/02/02 21:10:47 wazuh-authd: INFO: Accepting connections on port 1515. No password required. 2022-02-02 17:10:59,774 - wazuh_testing - DEBUG - 2022/02/02 21:10:47 wazuh-authd: INFO: Setting network timeout to 1.000000 sec. 2022-02-02 17:10:59,774 - wazuh_testing - DEBUG - 2022/02/02 21:10:47 wazuh-db[5374] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-02 17:10:59,775 - wazuh_testing - DEBUG - 2022/02/02 21:10:47 wazuh-db[5374] main.c:101 at main(): DEBUG: Wazuh home directory: /var/ossec 2022-02-02 17:10:59,776 - wazuh_testing - DEBUG - 2022/02/02 21:10:47 wazuh-db[5374] main.c:122 at main(): DEBUG: Template file removed: /var/ossec/queue/db/.template.db 2022-02-02 17:10:59,776 - wazuh_testing - DEBUG - 2022/02/02 21:10:47 wazuh-db[5374] main.c:178 at main(): INFO: Started (pid: 5376). 2022-02-02 17:10:59,777 - wazuh_testing - DEBUG - 2022/02/02 21:10:48 wazuh-execd: INFO: (1350): Active response disabled. 2022-02-02 17:10:59,777 - wazuh_testing - DEBUG - 2022/02/02 21:10:48 wazuh-execd: INFO: Started (pid: 5399). 2022-02-02 17:10:59,778 - wazuh_testing - DEBUG - 2022/02/02 21:10:49 wazuh-syscheckd[5420] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-02 17:10:59,778 - wazuh_testing - DEBUG - 2022/02/02 21:10:49 wazuh-syscheckd[5420] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-02 17:10:59,779 - wazuh_testing - DEBUG - 2022/02/02 21:10:49 wazuh-syscheckd[5420] syscheck-config.c:122 at organize_syscheck_dirs(): DEBUG: No directory entries to organize in syscheck configuration. 2022-02-02 17:10:59,780 - wazuh_testing - DEBUG - 2022/02/02 21:10:49 wazuh-syscheckd[5420] main.c:118 at main(): INFO: (6678): No directory provided for syscheck to monitor. 2022-02-02 17:10:59,780 - wazuh_testing - DEBUG - 2022/02/02 21:10:49 wazuh-syscheckd[5420] main.c:136 at main(): INFO: (6001): File integrity monitoring disabled. 2022-02-02 17:10:59,781 - wazuh_testing - DEBUG - 2022/02/02 21:10:49 rootcheck[5420] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled. 2022-02-02 17:10:59,781 - wazuh_testing - DEBUG - 2022/02/02 21:10:49 wazuh-syscheckd[5420] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:10:59,782 - wazuh_testing - DEBUG - 2022/02/02 21:10:49 wazuh-syscheckd[5420] syscom.c:123 at syscom_main(): DEBUG: (6284): Local requests thread ready. 2022-02-02 17:10:59,783 - wazuh_testing - DEBUG - 2022/02/02 21:10:49 wazuh-syscheckd[5420] mq_op.c:47 at StartMQ(): DEBUG: Connected succesfully to 'queue/sockets/queue' after 0 attempts 2022-02-02 17:10:59,783 - wazuh_testing - DEBUG - 2022/02/02 21:10:49 wazuh-syscheckd[5420] mq_op.c:48 at StartMQ(): DEBUG: (unix_domain) Maximum send buffer set to: '212992'. 2022-02-02 17:10:59,784 - wazuh_testing - DEBUG - 2022/02/02 21:10:49 wazuh-syscheckd[5420] main.c:185 at main(): INFO: Started (pid: 5422). 2022-02-02 17:10:59,784 - wazuh_testing - DEBUG - 2022/02/02 21:10:49 wazuh-syscheckd[5420] main.c:215 at main(): DEBUG: (6357): Maximum disk quota size limit configured to '1048576 KB'. 2022-02-02 17:10:59,785 - wazuh_testing - DEBUG - 2022/02/02 21:10:49 wazuh-syscheckd[5420] run_check.c:194 at start_daemon(): DEBUG: (6320): Setting process priority to: '10' 2022-02-02 17:10:59,785 - wazuh_testing - DEBUG - 2022/02/02 21:10:49 wazuh-syscheckd[5420] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:10:59,786 - wazuh_testing - DEBUG - 2022/02/02 21:10:49 wazuh-syscheckd[5420] run_check.c:229 at start_daemon(): INFO: (6000): Starting daemon... 2022-02-02 17:10:59,786 - wazuh_testing - DEBUG - 2022/02/02 21:10:49 wazuh-syscheckd[5420] run_check.c:232 at start_daemon(): INFO: (6010): File integrity monitoring scan frequency: 43200 seconds 2022-02-02 17:10:59,787 - wazuh_testing - DEBUG - 2022/02/02 21:10:49 wazuh-syscheckd[5420] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-02 17:10:59,788 - wazuh_testing - DEBUG - 2022/02/02 21:10:49 wazuh-syscheckd[5420] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1643832649}} 2022-02-02 17:10:59,788 - wazuh_testing - DEBUG - 2022/02/02 21:10:49 wazuh-syscheckd[5420] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-02 17:10:59,789 - wazuh_testing - DEBUG - 2022/02/02 21:10:49 wazuh-syscheckd[5420] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-02 17:10:59,789 - wazuh_testing - DEBUG - 2022/02/02 21:10:49 wazuh-syscheckd[5420] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-02 17:10:59,790 - wazuh_testing - DEBUG - 2022/02/02 21:10:49 wazuh-syscheckd[5420] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1643832649}} 2022-02-02 17:10:59,790 - wazuh_testing - DEBUG - 2022/02/02 21:10:49 wazuh-syscheckd[5420] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.000 sec (0.000 clock sec) 2022-02-02 17:10:59,791 - wazuh_testing - DEBUG - 2022/02/02 21:10:49 wazuh-syscheckd[5420] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 0, path count: 0 2022-02-02 17:10:59,791 - wazuh_testing - DEBUG - 2022/02/02 21:10:49 wazuh-syscheckd[5420] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:10:59,792 - wazuh_testing - DEBUG - 2022/02/02 21:10:49 wazuh-syscheckd[5420] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:10:59,793 - wazuh_testing - DEBUG - 2022/02/02 21:10:49 wazuh-syscheckd[5420] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:10:59,793 - wazuh_testing - DEBUG - 2022/02/02 21:10:49 wazuh-syscheckd[5420] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. 2022-02-02 17:10:59,794 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-manager and message: .*Initializing FIM Integrity Synchronization check. (.+)$ 2022-02-02 17:11:00,757 - wazuh_testing - DEBUG - Cleaning temporal files... 2022-02-02 17:11:00,757 - wazuh_testing - DEBUG - Checking results... 2022-02-02 17:11:00,759 - wazuh_testing - DEBUG - Received from wazuh-manager the expected message: 2022/02/02 21:10:49 wazuh-syscheckd[5420] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds.
-------------------------------Captured log call--------------------------------
DEBUG testinfra:base.py:277 RUN CommandResult(command=b"ansible --tree /tmp/tmpcivl5bno -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m command --args 'mkdir testdir1' wazuh-agent1", exit_status=0, stdout=b'wazuh-agent1 | CHANGED | rc=0 >>\n\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('command', 'mkdir testdir1', {'check': False, 'become': False}): {'changed': True, 'cmd': ['mkdir', 'testdir1'], 'delta': '0:00:00.805561', 'end': '2022-02-02 21:09:48.511391', 'msg': '', 'rc': 0, 'start': '2022-02-02 21:09:47.705830', 'stderr': '', 'stderr_lines': [], 'stdout': '', 'stdout_lines': []} DEBUG testinfra:base.py:277 RUN CommandResult(command=b"ansible --tree /tmp/tmpjf6_kc8z -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m command --args 'touch testdir1/testdir1.txt' wazuh-agent1", exit_status=0, stdout=b'wazuh-agent1 | CHANGED | rc=0 >>\n\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('command', 'touch testdir1/testdir1.txt', {'check': False, 'become': False}): {'changed': True, 'cmd': ['touch', 'testdir1/testdir1.txt'], 'delta': '0:00:00.868444', 'end': '2022-02-02 21:09:51.727480', 'msg': '', 'rc': 0, 'start': '2022-02-02 21:09:50.859036', 'stderr': '', 'stderr_lines': [], 'stdout': '', 'stdout_lines': []} DEBUG testinfra:base.py:277 RUN CommandResult(command=b"ansible --tree /tmp/tmpouh2e4rr -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m service --args 'name=wazuh-agent state=restarted' wazuh-agent1", exit_status=0, stdout=b'wazuh-agent1 | CHANGED => {\n "changed": true,\n "name": "wazuh-agent",\n "state": "started"\n}\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('service', 'name=wazuh-agent state=restarted', {'check': False, 'become': False}): {'changed': True, 'name': 'wazuh-agent', 'state': 'started'} DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:1006 Cleaning temporal files... DEBUG wazuh_testing:monitoring.py:995 Checking results... DEBUG wazuh_testing:monitoring.py:1001 Received from wazuh-manager the expected message: 2022/02/02 21:09:39 wazuh-db[4348] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file save2 {"path":"/testdir1/testdir1.txt","timestamp":1643832574,"version":2,"attributes":{"type":"file","size":0,"perm":"rw-r--r--","uid":"0","gid":"0","user_name":"root","group_name":"root","inode":7236635,"mtime":1643832569,"hash_md5":"d41d8cd98f00b204e9800998ecf8427e","hash_sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","hash_sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","checksum":"7654bfbc685ed5678daadfdb9cf6b3f18769daea"}} DEBUG wazuh_testing:monitoring.py:1001 Received from wazuh-agent1 the expected message: 2022/02/02 21:09:35 wazuh-syscheckd[6851] run_check.c:82 at fim_send_sync_msg(): DEBUG: (6317): Sending integrity control message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1643832575,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"f7785416950c8fc925cfeed344f5d33170e71546"}} DEBUG testinfra:base.py:277 RUN CommandResult(command=b'ansible --tree /tmp/tmprhpila_h -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m copy --args \'dest=/var/ossec/logs/ossec.log content=\'"\'"\'\'"\'"\' force=yes\' wazuh-manager', exit_status=0, stdout=b'wazuh-manager | CHANGED => {\n "changed": true,\n "checksum": "da39a3ee5e6b4b0d3255bfef95601890afd80709",\n "dest": "/var/ossec/logs/ossec.log",\n "gid": 999,\n "group": "ossec",\n "md5sum": "d41d8cd98f00b204e9800998ecf8427e",\n "mode": "0660",\n "owner": "ossec",\n "size": 0,\n "src": "/root/.ansible/tmp/ansible-tmp-1643832611.607828-72112-5504648942225/source",\n "state": "file",\n "uid": 999\n}\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('copy', "dest=/var/ossec/logs/ossec.log content='' force=yes", {'check': False, 'become': False}): {'changed': True, 'checksum': 'da39a3ee5e6b4b0d3255bfef95601890afd80709', 'dest': '/var/ossec/logs/ossec.log', 'gid': 999, 'group': 'ossec', 'md5sum': 'd41d8cd98f00b204e9800998ecf8427e', 'mode': '0660', 'owner': 'ossec', 'size': 0, 'src': '/root/.ansible/tmp/ansible-tmp-1643832611.607828-72112-5504648942225/source', 'state': 'file', 'uid': 999} DEBUG testinfra:base.py:277 RUN CommandResult(command=b'ansible --tree /tmp/tmphy4iejtp -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m copy --args \'dest=/var/ossec/logs/ossec.log content=\'"\'"\'\'"\'"\' force=yes\' wazuh-agent1', exit_status=0, stdout=b'wazuh-agent1 | CHANGED => {\n "changed": true,\n "checksum": "da39a3ee5e6b4b0d3255bfef95601890afd80709",\n "dest": "/var/ossec/logs/ossec.log",\n "gid": 999,\n "group": "ossec",\n "md5sum": "d41d8cd98f00b204e9800998ecf8427e",\n "mode": "0660",\n "owner": "ossec",\n "size": 0,\n "src": "/root/.ansible/tmp/ansible-tmp-1643832616.548455-72513-182705726277251/source",\n "state": "file",\n "uid": 999\n}\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('copy', "dest=/var/ossec/logs/ossec.log content='' force=yes", {'check': False, 'become': False}): {'changed': True, 'checksum': 'da39a3ee5e6b4b0d3255bfef95601890afd80709', 'dest': '/var/ossec/logs/ossec.log', 'gid': 999, 'group': 'ossec', 'md5sum': 'd41d8cd98f00b204e9800998ecf8427e', 'mode': '0660', 'owner': 'ossec', 'size': 0, 'src': '/root/.ansible/tmp/ansible-tmp-1643832616.548455-72513-182705726277251/source', 'state': 'file', 'uid': 999} DEBUG testinfra:base.py:277 RUN CommandResult(command=b"ansible --tree /tmp/tmpfto9t598 -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m command --args '/var/ossec/bin/wazuh-control stop' wazuh-manager", exit_status=0, stdout=b'wazuh-manager | CHANGED | rc=0 >>\nKilling wazuh-clusterd...\nKilling wazuh-modulesd...\nKilling wazuh-monitord...\nKilling wazuh-logcollector...\nKilling wazuh-remoted...\nKilling wazuh-syscheckd...\nKilling wazuh-analysisd...\nwazuh-maild not running...\nKilling wazuh-execd...\nKilling wazuh-db...\nKilling wazuh-authd...\nwazuh-agentlessd not running...\nwazuh-integratord not running...\nwazuh-dbd not running...\nwazuh-csyslogd not running...\nKilling wazuh-apid...\nWazuh v4.2.5 Stopped\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('command', '/var/ossec/bin/wazuh-control stop', {'check': False, 'become': False}): {'changed': True, 'cmd': ['/var/ossec/bin/wazuh-control', 'stop'], 'delta': '0:00:03.850311', 'end': '2022-02-02 21:10:26.430113', 'msg': '', 'rc': 0, 'start': '2022-02-02 21:10:22.579802', 'stderr': '', 'stderr_lines': [], 'stdout': 'Killing wazuh-clusterd...\n' 'Killing wazuh-modulesd...\n' 'Killing wazuh-monitord...\n' 'Killing wazuh-logcollector...\n' 'Killing wazuh-remoted...\n' 'Killing wazuh-syscheckd...\n' 'Killing wazuh-analysisd...\n' 'wazuh-maild not running...\n' 'Killing wazuh-execd...\n' 'Killing wazuh-db...\n' 'Killing wazuh-authd...\n' 'wazuh-agentlessd not running...\n' 'wazuh-integratord not running...\n' 'wazuh-dbd not running...\n' 'wazuh-csyslogd not running...\n' 'Killing wazuh-apid...\n' 'Wazuh v4.2.5 Stopped', 'stdout_lines': ['Killing wazuh-clusterd...', 'Killing wazuh-modulesd...', 'Killing wazuh-monitord...', 'Killing wazuh-logcollector...', 'Killing wazuh-remoted...', 'Killing wazuh-syscheckd...', 'Killing wazuh-analysisd...', 'wazuh-maild not running...', 'Killing wazuh-execd...', 'Killing wazuh-db...', 'Killing wazuh-authd...', 'wazuh-agentlessd not running...', 'wazuh-integratord not running...', 'wazuh-dbd not running...', 'wazuh-csyslogd not running...', 'Killing wazuh-apid...', 'Wazuh v4.2.5 Stopped']} DEBUG testinfra:base.py:277 RUN CommandResult(command=b"ansible --tree /tmp/tmp6p5t2hft -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m command --args 'touch testdir1/testdir1.txt' wazuh-agent1", exit_status=0, stdout=b'wazuh-agent1 | CHANGED | rc=0 >>\n\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('command', 'touch testdir1/testdir1.txt', {'check': False, 'become': False}): {'changed': True, 'cmd': ['touch', 'testdir1/testdir1.txt'], 'delta': '0:00:01.799243', 'end': '2022-02-02 21:10:30.532496', 'msg': '', 'rc': 0, 'start': '2022-02-02 21:10:28.733253', 'stderr': '', 'stderr_lines': [], 'stdout': '', 'stdout_lines': []} DEBUG testinfra:base.py:277 RUN CommandResult(command=b"ansible --tree /tmp/tmpnnxpbs1p -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m command --args '/var/ossec/bin/wazuh-control start' wazuh-manager", exit_status=0, stdout=b"wazuh-manager | CHANGED | rc=0 >>\nStarting Wazuh v4.2.5...\nStarted wazuh-apid...\nStarted wazuh-csyslogd...\nStarted wazuh-dbd...\nStarted wazuh-integratord...\nStarted wazuh-agentlessd...\nStarted wazuh-authd...\nStarted wazuh-db...\nStarted wazuh-execd...\nStarted wazuh-analysisd...\nStarted wazuh-syscheckd...\nStarted wazuh-remoted...\nStarted wazuh-logcollector...\nStarted wazuh-monitord...\nStarted wazuh-modulesd...\nStarted wazuh-clusterd...\nCompleted.2022/02/02 21:10:39 wazuh-db[5293] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized\n2022/02/02 21:10:39 wazuh-db[5293] main.c:101 at main(): DEBUG: Wazuh home directory: /var/ossec\n2022/02/02 21:10:40 wazuh-syscheckd[5297] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized\n2022/02/02 21:10:40 wazuh-syscheckd[5297] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf'\n2022/02/02 21:10:40 wazuh-syscheckd[5297] syscheck-config.c:122 at organize_syscheck_dirs(): DEBUG: No directory entries to organize in syscheck configuration.\n2022/02/02 21:10:47 wazuh-integratord: INFO: Remote integrations not configured. Clean exit.\n2022/02/02 21:10:47 wazuh-db[5374] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized\n2022/02/02 21:10:47 wazuh-db[5374] main.c:101 at main(): DEBUG: Wazuh home directory: /var/ossec\n2022/02/02 21:10:49 wazuh-syscheckd[5420] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized\n2022/02/02 21:10:49 wazuh-syscheckd[5420] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf'\n2022/02/02 21:10:49 wazuh-syscheckd[5420] syscheck-config.c:122 at organize_syscheck_dirs(): DEBUG: No directory entries to organize in syscheck configuration.\n2022/02/02 21:10:49 wazuh-syscheckd[5420] main.c:118 at main(): INFO: (6678): No directory provided for syscheck to monitor.\n2022/02/02 21:10:49 wazuh-syscheckd[5420] main.c:136 at main(): INFO: (6001): File integrity monitoring disabled.\n2022/02/02 21:10:49 rootcheck[5420] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled.\n", stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('command', '/var/ossec/bin/wazuh-control start', {'check': False, 'become': False}): {'changed': True, 'cmd': ['/var/ossec/bin/wazuh-control', 'start'], 'delta': '0:00:24.586494', 'end': '2022-02-02 21:10:57.429903', 'msg': '', 'rc': 0, 'start': '2022-02-02 21:10:32.843409', 'stderr': '2022/02/02 21:10:39 wazuh-db[5293] debug_op.c:70 at _log(): DEBUG: ' 'Logging module auto-initialized\n' '2022/02/02 21:10:39 wazuh-db[5293] main.c:101 at main(): DEBUG: ' 'Wazuh home directory: /var/ossec\n' '2022/02/02 21:10:40 wazuh-syscheckd[5297] debug_op.c:70 at _log(): ' 'DEBUG: Logging module auto-initialized\n' '2022/02/02 21:10:40 wazuh-syscheckd[5297] config.c:87 at ' 'Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: ' "'etc/ossec.conf'\n" '2022/02/02 21:10:40 wazuh-syscheckd[5297] syscheck-config.c:122 at ' 'organize_syscheck_dirs(): DEBUG: No directory entries to organize ' 'in syscheck configuration.\n' '2022/02/02 21:10:47 wazuh-integratord: INFO: Remote integrations ' 'not configured. Clean exit.\n' '2022/02/02 21:10:47 wazuh-db[5374] debug_op.c:70 at _log(): DEBUG: ' 'Logging module auto-initialized\n' '2022/02/02 21:10:47 wazuh-db[5374] main.c:101 at main(): DEBUG: ' 'Wazuh home directory: /var/ossec\n' '2022/02/02 21:10:49 wazuh-syscheckd[5420] debug_op.c:70 at _log(): ' 'DEBUG: Logging module auto-initialized\n' '2022/02/02 21:10:49 wazuh-syscheckd[5420] config.c:87 at ' 'Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: ' "'etc/ossec.conf'\n" '2022/02/02 21:10:49 wazuh-syscheckd[5420] syscheck-config.c:122 at ' 'organize_syscheck_dirs(): DEBUG: No directory entries to organize ' 'in syscheck configuration.\n' '2022/02/02 21:10:49 wazuh-syscheckd[5420] main.c:118 at main(): ' 'INFO: (6678): No directory provided for syscheck to monitor.\n' '2022/02/02 21:10:49 wazuh-syscheckd[5420] main.c:136 at main(): ' 'INFO: (6001): File integrity monitoring disabled.\n' '2022/02/02 21:10:49 rootcheck[5420] rootcheck.c:202 at ' 'rootcheck_init(): INFO: Rootcheck disabled.', 'stderr_lines': ['2022/02/02 21:10:39 wazuh-db[5293] debug_op.c:70 at _log(): ' 'DEBUG: Logging module auto-initialized', '2022/02/02 21:10:39 wazuh-db[5293] main.c:101 at main(): ' 'DEBUG: Wazuh home directory: /var/ossec', '2022/02/02 21:10:40 wazuh-syscheckd[5297] debug_op.c:70 at ' '_log(): DEBUG: Logging module auto-initialized', '2022/02/02 21:10:40 wazuh-syscheckd[5297] config.c:87 at ' 'Read_Syscheck_Config(): DEBUG: (6287): Reading ' "configuration file: 'etc/ossec.conf'", '2022/02/02 21:10:40 wazuh-syscheckd[5297] ' 'syscheck-config.c:122 at organize_syscheck_dirs(): DEBUG: ' 'No directory entries to organize in syscheck configuration.', '2022/02/02 21:10:47 wazuh-integratord: INFO: Remote ' 'integrations not configured. Clean exit.', '2022/02/02 21:10:47 wazuh-db[5374] debug_op.c:70 at _log(): ' 'DEBUG: Logging module auto-initialized', '2022/02/02 21:10:47 wazuh-db[5374] main.c:101 at main(): ' 'DEBUG: Wazuh home directory: /var/ossec', '2022/02/02 21:10:49 wazuh-syscheckd[5420] debug_op.c:70 at ' '_log(): DEBUG: Logging module auto-initialized', '2022/02/02 21:10:49 wazuh-syscheckd[5420] config.c:87 at ' 'Read_Syscheck_Config(): DEBUG: (6287): Reading ' "configuration file: 'etc/ossec.conf'", '2022/02/02 21:10:49 wazuh-syscheckd[5420] ' 'syscheck-config.c:122 at organize_syscheck_dirs(): DEBUG: ' 'No directory entries to organize in syscheck configuration.', '2022/02/02 21:10:49 wazuh-syscheckd[5420] main.c:118 at ' 'main(): INFO: (6678): No directory provided for syscheck to ' 'monitor.', '2022/02/02 21:10:49 wazuh-syscheckd[5420] main.c:136 at ' 'main(): INFO: (6001): File integrity monitoring disabled.', '2022/02/02 21:10:49 rootcheck[5420] rootcheck.c:202 at ' 'rootcheck_init(): INFO: Rootcheck disabled.'], 'stdout': 'Starting Wazuh v4.2.5...\n' 'Started wazuh-apid...\n' 'Started wazuh-csyslogd...\n' 'Started wazuh-dbd...\n' 'Started wazuh-integratord...\n' 'Started wazuh-agentlessd...\n' 'Started wazuh-authd...\n' 'Started wazuh-db...\n' 'Started wazuh-execd...\n' 'Started wazuh-analysisd...\n' 'Started wazuh-syscheckd...\n' 'Started wazuh-remoted...\n' 'Started wazuh-logcollector...\n' 'Started wazuh-monitord...\n' 'Started wazuh-modulesd...\n' 'Started wazuh-clusterd...\n' 'Completed.', 'stdout_lines': ['Starting Wazuh v4.2.5...', 'Started wazuh-apid...', 'Started wazuh-csyslogd...', 'Started wazuh-dbd...', 'Started wazuh-integratord...', 'Started wazuh-agentlessd...', 'Started wazuh-authd...', 'Started wazuh-db...', 'Started wazuh-execd...', 'Started wazuh-analysisd...', 'Started wazuh-syscheckd...', 'Started wazuh-remoted...', 'Started wazuh-logcollector...', 'Started wazuh-monitord...', 'Started wazuh-modulesd...', 'Started wazuh-clusterd...', 'Completed.']} DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:1006 Cleaning temporal files... DEBUG wazuh_testing:monitoring.py:995 Checking results... DEBUG wazuh_testing:monitoring.py:1001 Received from wazuh-manager the expected message: 2022/02/02 21:10:49 wazuh-syscheckd[5420] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. DEBUG testinfra:base.py:277 RUN CommandResult(command=b"ansible --tree /tmp/tmpz86ahysq -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m command --args 'rm -rf testdir1' wazuh-agent1", exit_status=0, stdout=b'wazuh-agent1 | CHANGED | rc=0 >>\n\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('command', 'rm -rf testdir1', {'check': False, 'become': False}): {'changed': True, 'cmd': ['rm', '-rf', 'testdir1'], 'delta': '0:00:00.668189', 'end': '2022-02-02 21:11:03.475010', 'msg': '', 'rc': 0, 'start': '2022-02-02 21:11:02.806821', 'stderr': '', 'stderr_lines': [], 'stdout': '', 'stdout_lines': []}

------------------------------Captured stderr call------------------------------
2022-02-02 17:11:25,608 - wazuh_testing - DEBUG - Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-02 17:11:25,609 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-02 17:11:25,611 - wazuh_testing - DEBUG - Starting file composer for wazuh-agent1 and path: /var/ossec/logs/ossec.log. Composite file in /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-agent1_ossec.log.tmp 2022-02-02 17:11:25,611 - wazuh_testing - DEBUG - Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-02 17:11:25,612 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-agent1 and message: .*Sending integrity control message: (.+)$ 2022-02-02 17:11:25,612 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-02 17:11:25,614 - wazuh_testing - DEBUG - Starting file composer for wazuh-manager and path: /var/ossec/logs/ossec.log. Composite file in /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-manager_ossec.log.tmp 2022-02-02 17:11:25,615 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-manager and message: .*Agent 001 query: (.+) save2 2022-02-02 17:11:27,614 - wazuh_testing - DEBUG - 2022/02/02 21:10:23 wazuh-agentd: ERROR: (1137): Lost connection with manager. Setting lock. 2022-02-02 17:11:27,614 - wazuh_testing - DEBUG - 2022/02/02 21:10:23 wazuh-agentd: INFO: Closing connection to server (wazuh-manager/172.18.0.2:1514/tcp). 2022-02-02 17:11:27,615 - wazuh_testing - DEBUG - 2022/02/02 21:10:23 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.18.0.2:1514/tcp). 2022-02-02 17:11:27,615 - wazuh_testing - DEBUG - 2022/02/02 21:10:23 wazuh-agentd: ERROR: (1216): Unable to connect to '172.18.0.2:1514/tcp': 'Connection refused'. 2022-02-02 17:11:27,615 - wazuh_testing - DEBUG - 2022/02/02 21:10:24 wazuh-syscheckd[7346] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-02 17:11:27,615 - wazuh_testing - DEBUG - 2022/02/02 21:10:24 wazuh-syscheckd[7346] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1643832624}} 2022-02-02 17:11:27,616 - wazuh_testing - DEBUG - 2022/02/02 21:10:24 wazuh-syscheckd[7346] wait_op.c:101 at os_wait(): WARNING: Process locked due to agent is offline. Waiting for connection... 2022-02-02 17:11:27,616 - wazuh_testing - DEBUG - 2022/02/02 21:10:33 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.18.0.2:1514/tcp). 2022-02-02 17:11:27,616 - wazuh_testing - DEBUG - 2022/02/02 21:10:33 wazuh-agentd: ERROR: (1216): Unable to connect to '172.18.0.2:1514/tcp': 'Connection refused'. 2022-02-02 17:11:27,617 - wazuh_testing - DEBUG - 2022/02/02 21:10:43 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.18.0.2:1514/tcp). 2022-02-02 17:11:27,617 - wazuh_testing - DEBUG - 2022/02/02 21:10:43 wazuh-agentd: ERROR: (1216): Unable to connect to '172.18.0.2:1514/tcp': 'Connection refused'. 2022-02-02 17:11:27,617 - wazuh_testing - DEBUG - 2022/02/02 21:10:53 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.18.0.2:1514/tcp). 2022-02-02 17:11:27,617 - wazuh_testing - DEBUG - 2022/02/02 21:10:16 wazuh-db[4348] wdb.c:918 at wdb_commit_old(): DEBUG: Agent '001' database commited. Time: 4.285 ms. 2022-02-02 17:11:27,617 - wazuh_testing - DEBUG - 2022/02/02 21:10:53 wazuh-agentd: INFO: (4102): Connected to the server (wazuh-manager/172.18.0.2:1514/tcp). 2022-02-02 17:11:27,618 - wazuh_testing - DEBUG - 2022/02/02 21:10:53 wazuh-agentd: INFO: Server responded. Releasing lock. 2022-02-02 17:11:27,618 - wazuh_testing - DEBUG - 2022/02/02 21:10:54 wazuh-syscheckd[7346] wait_op.c:116 at os_wait(): INFO: Agent is now online. Process unlocked, continuing... 2022-02-02 17:11:27,618 - wazuh_testing - DEBUG - 2022/02/02 21:10:21 wazuh-db[4348] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.18.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.18.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.13.0-27-generic |#29~20.04.1-Ubuntu SMP Fri Jan 14 00:32:30 UTC 2022 |x86_64","os_arch":"x86_64"} 2022-02-02 17:11:27,618 - wazuh_testing - DEBUG - 2022/02/02 21:10:23 wazuh-modulesd:syscollector: INFO: Stop received for Syscollector. 2022-02-02 17:11:27,618 - wazuh_testing - DEBUG - 2022/02/02 21:10:23 wazuh-db[4348] main.c:352 at run_worker(): DEBUG: Client 15 disconnected. 2022-02-02 17:11:27,619 - wazuh_testing - DEBUG - 2022/02/02 21:10:23 wazuh-monitord: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:11:27,619 - wazuh_testing - DEBUG - 2022/02/02 21:10:23 wazuh-logcollector: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:11:27,619 - wazuh_testing - DEBUG - 2022/02/02 21:10:23 wazuh-remoted: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:11:27,619 - wazuh_testing - DEBUG - 2022/02/02 21:10:54 wazuh-syscheckd[7346] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-02 17:11:27,619 - wazuh_testing - DEBUG - 2022/02/02 21:10:23 wazuh-db[4348] main.c:352 at run_worker(): DEBUG: Client 27 disconnected. 2022-02-02 17:11:27,619 - wazuh_testing - DEBUG - 2022/02/02 21:10:23 wazuh-db[4348] main.c:352 at run_worker(): DEBUG: Client 22 disconnected. 2022-02-02 17:11:27,620 - wazuh_testing - DEBUG - 2022/02/02 21:10:23 wazuh-db[4348] main.c:352 at run_worker(): DEBUG: Client 16 disconnected. 2022-02-02 17:11:27,620 - wazuh_testing - DEBUG - 2022/02/02 21:10:54 wazuh-syscheckd[7346] fim_db.c:436 at fim_db_check_transaction(): DEBUG: Database transaction completed. 2022-02-02 17:11:27,620 - wazuh_testing - DEBUG - 2022/02/02 21:10:54 wazuh-syscheckd[7346] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-02 17:11:27,620 - wazuh_testing - DEBUG - 2022/02/02 21:10:23 wazuh-db[4348] main.c:352 at run_worker(): DEBUG: Client 18 disconnected. 2022-02-02 17:11:27,620 - wazuh_testing - DEBUG - 2022/02/02 21:10:23 wazuh-syscheckd[4394] sig_op.c:49 at HandleSIG(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:11:27,621 - wazuh_testing - DEBUG - 2022/02/02 21:10:54 wazuh-syscheckd[7346] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-02 17:11:27,621 - wazuh_testing - DEBUG - 2022/02/02 21:10:24 wazuh-analysisd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:11:27,621 - wazuh_testing - DEBUG - 2022/02/02 21:10:24 wazuh-db[4348] main.c:352 at run_worker(): DEBUG: Client 46 disconnected. 2022-02-02 17:11:27,621 - wazuh_testing - DEBUG - 2022/02/02 21:10:24 wazuh-db[4348] main.c:352 at run_worker(): DEBUG: Client 43 disconnected. 2022-02-02 17:11:27,621 - wazuh_testing - DEBUG - 2022/02/02 21:10:24 wazuh-db[4348] main.c:352 at run_worker(): DEBUG: Client 44 disconnected. 2022-02-02 17:11:27,622 - wazuh_testing - DEBUG - 2022/02/02 21:10:24 wazuh-db[4348] main.c:352 at run_worker(): DEBUG: Client 42 disconnected. 2022-02-02 17:11:27,622 - wazuh_testing - DEBUG - 2022/02/02 21:10:24 wazuh-db[4348] main.c:352 at run_worker(): DEBUG: Client 41 disconnected. 2022-02-02 17:11:27,622 - wazuh_testing - DEBUG - 2022/02/02 21:10:24 wazuh-db[4348] main.c:352 at run_worker(): DEBUG: Client 40 disconnected. 2022-02-02 17:11:27,622 - wazuh_testing - DEBUG - 2022/02/02 21:10:24 wazuh-db[4348] main.c:352 at run_worker(): DEBUG: Client 39 disconnected. 2022-02-02 17:11:27,623 - wazuh_testing - DEBUG - 2022/02/02 21:10:54 wazuh-syscheckd[7346] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"event","data":{"path":"/testdir1/testdir1.txt","version":2,"mode":"scheduled","type":"modified","timestamp":1643832654,"attributes":{"type":"file","size":0,"perm":"rw-r--r--","uid":"0","gid":"0","user_name":"root","group_name":"root","inode":7239426,"mtime":1643832629,"hash_md5":"d41d8cd98f00b204e9800998ecf8427e","hash_sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","hash_sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","checksum":"811936a24b11d05f358fe406a8b9230e16071f82"},"changed_attributes":["mtime"],"old_attributes":{"type":"file","size":0,"perm":"rw-r--r--","uid":"0","gid":"0","user_name":"root","group_name":"root","inode":7239426,"mtime":1643832591,"hash_md5":"d41d8cd98f00b204e9800998ecf8427e","hash_sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","hash_sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","checksum":"275b40b20af629d4f3bc98b486795f88e3443246"}}} 2022-02-02 17:11:27,623 - wazuh_testing - DEBUG - 2022/02/02 21:10:24 wazuh-db[4348] main.c:352 at run_worker(): DEBUG: Client 37 disconnected. 2022-02-02 17:11:27,623 - wazuh_testing - DEBUG - 2022/02/02 21:10:24 wazuh-db[4348] main.c:352 at run_worker(): DEBUG: Client 35 disconnected. 2022-02-02 17:11:27,623 - wazuh_testing - DEBUG - 2022/02/02 21:10:54 wazuh-syscheckd[7346] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-02 17:11:27,623 - wazuh_testing - DEBUG - 2022/02/02 21:10:24 wazuh-db[4348] main.c:352 at run_worker(): DEBUG: Client 38 disconnected. 2022-02-02 17:11:27,623 - wazuh_testing - DEBUG - 2022/02/02 21:10:24 wazuh-db[4348] main.c:352 at run_worker(): DEBUG: Client 31 disconnected. 2022-02-02 17:11:27,623 - wazuh_testing - DEBUG - 2022/02/02 21:10:54 wazuh-syscheckd[7346] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-02 17:11:27,624 - wazuh_testing - DEBUG - 2022/02/02 21:10:24 wazuh-db[4348] main.c:352 at run_worker(): DEBUG: Client 32 disconnected. 2022-02-02 17:11:27,624 - wazuh_testing - DEBUG - 2022/02/02 21:10:55 wazuh-syscheckd[7346] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-02 17:11:27,624 - wazuh_testing - DEBUG - 2022/02/02 21:10:24 wazuh-db[4348] main.c:352 at run_worker(): DEBUG: Client 33 disconnected. 2022-02-02 17:11:27,624 - wazuh_testing - DEBUG - 2022/02/02 21:10:55 wazuh-syscheckd[7346] create_db.c:220 at fim_scan(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-02 17:11:27,624 - wazuh_testing - DEBUG - 2022/02/02 21:10:24 wazuh-db[4348] main.c:352 at run_worker(): DEBUG: Client 29 disconnected. 2022-02-02 17:11:27,624 - wazuh_testing - DEBUG - 2022/02/02 21:10:24 wazuh-db[4348] main.c:352 at run_worker(): DEBUG: Client 36 disconnected. 2022-02-02 17:11:27,624 - wazuh_testing - DEBUG - 2022/02/02 21:10:55 wazuh-syscheckd[7346] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-02 17:11:27,625 - wazuh_testing - DEBUG - 2022/02/02 21:10:24 wazuh-db[4348] main.c:352 at run_worker(): DEBUG: Client 34 disconnected. 2022-02-02 17:11:27,625 - wazuh_testing - DEBUG - 2022/02/02 21:10:55 wazuh-syscheckd[7346] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1643832655}} 2022-02-02 17:11:27,625 - wazuh_testing - DEBUG - 2022/02/02 21:10:24 wazuh-db[4348] main.c:352 at run_worker(): DEBUG: Client 30 disconnected. 2022-02-02 17:11:27,625 - wazuh_testing - DEBUG - 2022/02/02 21:10:55 wazuh-syscheckd[7346] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 31.227 sec (1.188 clock sec) 2022-02-02 17:11:27,625 - wazuh_testing - DEBUG - 2022/02/02 21:10:24 wazuh-db[4348] main.c:352 at run_worker(): DEBUG: Client 28 disconnected. 2022-02-02 17:11:27,625 - wazuh_testing - DEBUG - 2022/02/02 21:10:24 wazuh-db[4348] main.c:352 at run_worker(): DEBUG: Client 20 disconnected. 2022-02-02 17:11:27,625 - wazuh_testing - DEBUG - 2022/02/02 21:10:55 wazuh-syscheckd[7346] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1621, path count: 1627 2022-02-02 17:11:27,626 - wazuh_testing - DEBUG - 2022/02/02 21:10:24 wazuh-db[4348] main.c:352 at run_worker(): DEBUG: Client 19 disconnected. 2022-02-02 17:11:27,626 - wazuh_testing - DEBUG - 2022/02/02 21:11:16 wazuh-logcollector: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:11:27,626 - wazuh_testing - DEBUG - 2022/02/02 21:10:24 wazuh-db[4348] main.c:352 at run_worker(): DEBUG: Client 24 disconnected. 2022-02-02 17:11:27,626 - wazuh_testing - DEBUG - 2022/02/02 21:11:16 wazuh-syscheckd[7346] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-02 17:11:27,626 - wazuh_testing - DEBUG - 2022/02/02 21:10:24 wazuh-db[4348] main.c:352 at run_worker(): DEBUG: Client 14 disconnected. 2022-02-02 17:11:27,626 - wazuh_testing - DEBUG - 2022/02/02 21:11:16 wazuh-syscheckd[7346] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1643832676}} 2022-02-02 17:11:27,626 - wazuh_testing - DEBUG - 2022/02/02 21:10:24 wazuh-db[4348] main.c:352 at run_worker(): DEBUG: Client 21 disconnected. 2022-02-02 17:11:27,627 - wazuh_testing - DEBUG - 2022/02/02 21:10:24 wazuh-db[4348] main.c:352 at run_worker(): DEBUG: Client 26 disconnected. 2022-02-02 17:11:27,627 - wazuh_testing - DEBUG - 2022/02/02 21:11:16 wazuh-syscheckd[7346] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-02 17:11:27,627 - wazuh_testing - DEBUG - 2022/02/02 21:10:24 wazuh-db[4348] main.c:352 at run_worker(): DEBUG: Client 25 disconnected. 2022-02-02 17:11:27,627 - wazuh_testing - DEBUG - 2022/02/02 21:11:16 wazuh-syscheckd[7346] fim_db.c:436 at fim_db_check_transaction(): DEBUG: Database transaction completed. 2022-02-02 17:11:27,627 - wazuh_testing - DEBUG - 2022/02/02 21:10:24 wazuh-db[4348] main.c:352 at run_worker(): DEBUG: Client 12 disconnected. 2022-02-02 17:11:27,627 - wazuh_testing - DEBUG - 2022/02/02 21:11:16 wazuh-syscheckd[7346] sig_op.c:49 at HandleSIG(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:11:27,628 - wazuh_testing - DEBUG - 2022/02/02 21:10:24 wazuh-db[4348] main.c:352 at run_worker(): DEBUG: Client 23 disconnected. 2022-02-02 17:11:27,628 - wazuh_testing - DEBUG - 2022/02/02 21:11:16 wazuh-agentd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:11:27,628 - wazuh_testing - DEBUG - 2022/02/02 21:10:24 wazuh-db[4348] main.c:352 at run_worker(): DEBUG: Client 13 disconnected. 2022-02-02 17:11:27,628 - wazuh_testing - DEBUG - 2022/02/02 21:11:17 wazuh-execd: INFO: (1314): Shutdown received. Deleting responses. 2022-02-02 17:11:27,628 - wazuh_testing - DEBUG - 2022/02/02 21:10:24 wazuh-db[4348] main.c:352 at run_worker(): DEBUG: Client 6 disconnected. 2022-02-02 17:11:27,628 - wazuh_testing - DEBUG - 2022/02/02 21:10:24 wazuh-execd: INFO: (1314): Shutdown received. Deleting responses. 2022-02-02 17:11:27,628 - wazuh_testing - DEBUG - 2022/02/02 21:11:17 wazuh-execd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:11:27,629 - wazuh_testing - DEBUG - 2022/02/02 21:10:24 wazuh-execd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:11:27,629 - wazuh_testing - DEBUG - 2022/02/02 21:10:24 wazuh-db[4348] main.c:468 at handler(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:11:27,629 - wazuh_testing - DEBUG - 2022/02/02 21:11:18 wazuh-syscheckd[7961] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-02 17:11:27,629 - wazuh_testing - DEBUG - 2022/02/02 21:10:25 wazuh-db[4348] wdb.c:872 at wdb_close_all(): DEBUG: Closing all databases... 2022-02-02 17:11:27,629 - wazuh_testing - DEBUG - 2022/02/02 21:10:25 wazuh-db[4348] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent 001 2022-02-02 17:11:27,629 - wazuh_testing - DEBUG - 2022/02/02 21:11:18 wazuh-syscheckd[7961] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-02 17:11:27,629 - wazuh_testing - DEBUG - 2022/02/02 21:10:25 wazuh-db[4348] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent 000 2022-02-02 17:11:27,629 - wazuh_testing - DEBUG - 2022/02/02 21:11:18 wazuh-syscheckd[7961] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-02 17:11:27,629 - wazuh_testing - DEBUG - 2022/02/02 21:10:25 wazuh-db[4348] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent global 2022-02-02 17:11:27,630 - wazuh_testing - DEBUG - 2022/02/02 21:10:25 wazuh-db[4348] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent mitre 2022-02-02 17:11:27,630 - wazuh_testing - DEBUG - 2022/02/02 21:11:18 wazuh-syscheckd[7961] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-02 17:11:27,630 - wazuh_testing - DEBUG - 2022/02/02 21:10:25 wazuh-db[4348] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent tasks 2022-02-02 17:11:27,630 - wazuh_testing - DEBUG - 2022/02/02 21:10:25 wazuh-db[4348] main.c:231 at main(): DEBUG: Template file removed again: queue/db/.template.db 2022-02-02 17:11:27,630 - wazuh_testing - DEBUG - 2022/02/02 21:11:18 wazuh-syscheckd[7961] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-02 17:11:27,630 - wazuh_testing - DEBUG - 2022/02/02 21:10:25 wazuh-authd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:11:27,630 - wazuh_testing - DEBUG - 2022/02/02 21:10:25 wazuh-authd: INFO: Exiting... 2022-02-02 17:11:27,631 - wazuh_testing - DEBUG - 2022/02/02 21:11:18 wazuh-syscheckd[7961] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-02 17:11:27,631 - wazuh_testing - DEBUG - 2022/02/02 21:10:39 wazuh-db[5293] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-02 17:11:27,631 - wazuh_testing - DEBUG - 2022/02/02 21:11:18 wazuh-syscheckd[7961] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-02 17:11:27,631 - wazuh_testing - DEBUG - 2022/02/02 21:10:39 wazuh-db[5293] main.c:101 at main(): DEBUG: Wazuh home directory: /var/ossec 2022-02-02 17:11:27,631 - wazuh_testing - DEBUG - 2022/02/02 21:10:40 wazuh-syscheckd[5297] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-02 17:11:27,631 - wazuh_testing - DEBUG - 2022/02/02 21:11:18 wazuh-syscheckd[7961] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ 2022-02-02 17:11:27,631 - wazuh_testing - DEBUG - 2022/02/02 21:10:40 wazuh-syscheckd[5297] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-02 17:11:27,632 - wazuh_testing - DEBUG - 2022/02/02 21:10:40 wazuh-syscheckd[5297] syscheck-config.c:122 at organize_syscheck_dirs(): DEBUG: No directory entries to organize in syscheck configuration. 2022-02-02 17:11:27,632 - wazuh_testing - DEBUG - 2022/02/02 21:11:18 wazuh-syscheckd[7961] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ OK? 2022-02-02 17:11:27,632 - wazuh_testing - DEBUG - 2022/02/02 21:10:47 wazuh-csyslogd: INFO: Remote syslog server not configured. Clean exit. 2022-02-02 17:11:27,632 - wazuh_testing - DEBUG - 2022/02/02 21:11:18 wazuh-syscheckd[7961] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-02 17:11:27,632 - wazuh_testing - DEBUG - 2022/02/02 21:10:47 wazuh-dbd: INFO: Database not configured. Clean exit. 2022-02-02 17:11:27,632 - wazuh_testing - DEBUG - 2022/02/02 21:10:47 wazuh-integratord: INFO: Remote integrations not configured. Clean exit. 2022-02-02 17:11:27,632 - wazuh_testing - DEBUG - 2022/02/02 21:11:18 wazuh-syscheckd[7961] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-02 17:11:27,632 - wazuh_testing - DEBUG - 2022/02/02 21:10:47 wazuh-agentlessd: INFO: Not configured. Exiting. 2022-02-02 17:11:27,633 - wazuh_testing - DEBUG - 2022/02/02 21:10:47 wazuh-authd: INFO: Started (pid: 5363). 2022-02-02 17:11:27,633 - wazuh_testing - DEBUG - 2022/02/02 21:11:18 wazuh-syscheckd[7961] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-02 17:11:27,633 - wazuh_testing - DEBUG - 2022/02/02 21:10:47 wazuh-authd: INFO: Accepting connections on port 1515. No password required. 2022-02-02 17:11:27,633 - wazuh_testing - DEBUG - 2022/02/02 21:11:18 wazuh-syscheckd[7961] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-02 17:11:27,633 - wazuh_testing - DEBUG - 2022/02/02 21:10:47 wazuh-authd: INFO: Setting network timeout to 1.000000 sec. 2022-02-02 17:11:27,634 - wazuh_testing - DEBUG - 2022/02/02 21:11:18 wazuh-syscheckd[7961] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-02 17:11:27,634 - wazuh_testing - DEBUG - 2022/02/02 21:11:18 wazuh-syscheckd[7961] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-02 17:11:27,634 - wazuh_testing - DEBUG - 2022/02/02 21:10:47 wazuh-db[5374] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-02 17:11:27,634 - wazuh_testing - DEBUG - 2022/02/02 21:10:47 wazuh-db[5374] main.c:101 at main(): DEBUG: Wazuh home directory: /var/ossec 2022-02-02 17:11:27,634 - wazuh_testing - DEBUG - 2022/02/02 21:11:18 wazuh-syscheckd[7961] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-02 17:11:27,634 - wazuh_testing - DEBUG - 2022/02/02 21:10:47 wazuh-db[5374] main.c:122 at main(): DEBUG: Template file removed: /var/ossec/queue/db/.template.db 2022-02-02 17:11:27,635 - wazuh_testing - DEBUG - 2022/02/02 21:11:18 wazuh-syscheckd[7961] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-02 17:11:27,635 - wazuh_testing - DEBUG - 2022/02/02 21:10:47 wazuh-db[5374] main.c:178 at main(): INFO: Started (pid: 5376). 2022-02-02 17:11:27,635 - wazuh_testing - DEBUG - 2022/02/02 21:10:48 wazuh-execd: INFO: (1350): Active response disabled. 2022-02-02 17:11:27,635 - wazuh_testing - DEBUG - 2022/02/02 21:11:18 wazuh-execd: INFO: Started (pid: 7974). 2022-02-02 17:11:27,635 - wazuh_testing - DEBUG - 2022/02/02 21:10:48 wazuh-execd: INFO: Started (pid: 5399). 2022-02-02 17:11:27,635 - wazuh_testing - DEBUG - 2022/02/02 21:10:49 wazuh-syscheckd[5420] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-02 17:11:27,635 - wazuh_testing - DEBUG - 2022/02/02 21:11:19 wazuh-agentd: INFO: (1410): Reading authentication keys file. 2022-02-02 17:11:27,636 - wazuh_testing - DEBUG - 2022/02/02 21:10:49 wazuh-syscheckd[5420] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-02 17:11:27,636 - wazuh_testing - DEBUG - 2022/02/02 21:11:19 wazuh-agentd: INFO: Using notify time: 10 and max time to reconnect: 60 2022-02-02 17:11:27,636 - wazuh_testing - DEBUG - 2022/02/02 21:10:49 wazuh-syscheckd[5420] syscheck-config.c:122 at organize_syscheck_dirs(): DEBUG: No directory entries to organize in syscheck configuration. 2022-02-02 17:11:27,636 - wazuh_testing - DEBUG - 2022/02/02 21:11:19 wazuh-agentd: INFO: Version detected -> Linux |wazuh-agent1 |5.13.0-27-generic |#29~20.04.1-Ubuntu SMP Fri Jan 14 00:32:30 UTC 2022 |x86_64 [Debian GNU/Linux|debian: 10 (buster)] - Wazuh v4.2.5 2022-02-02 17:11:27,637 - wazuh_testing - DEBUG - 2022/02/02 21:10:49 wazuh-syscheckd[5420] main.c:118 at main(): INFO: (6678): No directory provided for syscheck to monitor. 2022-02-02 17:11:27,637 - wazuh_testing - DEBUG - 2022/02/02 21:11:19 wazuh-agentd: INFO: Started (pid: 7985). 2022-02-02 17:11:27,637 - wazuh_testing - DEBUG - 2022/02/02 21:10:49 wazuh-syscheckd[5420] main.c:136 at main(): INFO: (6001): File integrity monitoring disabled. 2022-02-02 17:11:27,637 - wazuh_testing - DEBUG - 2022/02/02 21:11:19 wazuh-agentd: INFO: Server IP Address: wazuh-manager/172.18.0.2 2022-02-02 17:11:27,637 - wazuh_testing - DEBUG - 2022/02/02 21:10:49 rootcheck[5420] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled. 2022-02-02 17:11:27,638 - wazuh_testing - DEBUG - 2022/02/02 21:10:49 wazuh-syscheckd[5420] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:11:27,638 - wazuh_testing - DEBUG - 2022/02/02 21:11:19 wazuh-agentd: INFO: Using AES as encryption method. 2022-02-02 17:11:27,638 - wazuh_testing - DEBUG - 2022/02/02 21:10:49 wazuh-syscheckd[5420] syscom.c:123 at syscom_main(): DEBUG: (6284): Local requests thread ready. 2022-02-02 17:11:27,638 - wazuh_testing - DEBUG - 2022/02/02 21:11:19 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.18.0.2:1514/tcp). 2022-02-02 17:11:27,639 - wazuh_testing - DEBUG - 2022/02/02 21:11:19 wazuh-agentd: INFO: (4102): Connected to the server (wazuh-manager/172.18.0.2:1514/tcp). 2022-02-02 17:11:27,639 - wazuh_testing - DEBUG - 2022/02/02 21:10:49 wazuh-syscheckd[5420] mq_op.c:47 at StartMQ(): DEBUG: Connected succesfully to 'queue/sockets/queue' after 0 attempts 2022-02-02 17:11:27,639 - wazuh_testing - DEBUG - 2022/02/02 21:11:20 wazuh-syscheckd[7997] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-02 17:11:27,640 - wazuh_testing - DEBUG - 2022/02/02 21:10:49 wazuh-syscheckd[5420] mq_op.c:48 at StartMQ(): DEBUG: (unix_domain) Maximum send buffer set to: '212992'. 2022-02-02 17:11:27,640 - wazuh_testing - DEBUG - 2022/02/02 21:11:20 wazuh-syscheckd[7997] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-02 17:11:27,641 - wazuh_testing - DEBUG - 2022/02/02 21:11:20 wazuh-syscheckd[7997] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-02 17:11:27,641 - wazuh_testing - DEBUG - 2022/02/02 21:11:20 wazuh-syscheckd[7997] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-02 17:11:27,641 - wazuh_testing - DEBUG - 2022/02/02 21:10:49 wazuh-syscheckd[5420] main.c:185 at main(): INFO: Started (pid: 5422). 2022-02-02 17:11:27,642 - wazuh_testing - DEBUG - 2022/02/02 21:11:20 wazuh-syscheckd[7997] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-02 17:11:27,642 - wazuh_testing - DEBUG - 2022/02/02 21:11:20 wazuh-syscheckd[7997] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-02 17:11:27,642 - wazuh_testing - DEBUG - 2022/02/02 21:10:49 wazuh-syscheckd[5420] main.c:215 at main(): DEBUG: (6357): Maximum disk quota size limit configured to '1048576 KB'. 2022-02-02 17:11:27,643 - wazuh_testing - DEBUG - 2022/02/02 21:11:20 wazuh-syscheckd[7997] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-02 17:11:27,643 - wazuh_testing - DEBUG - 2022/02/02 21:11:20 wazuh-syscheckd[7997] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ 2022-02-02 17:11:27,643 - wazuh_testing - DEBUG - 2022/02/02 21:10:49 wazuh-syscheckd[5420] run_check.c:194 at start_daemon(): DEBUG: (6320): Setting process priority to: '10' 2022-02-02 17:11:27,644 - wazuh_testing - DEBUG - 2022/02/02 21:11:20 wazuh-syscheckd[7997] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ OK? 2022-02-02 17:11:27,644 - wazuh_testing - DEBUG - 2022/02/02 21:11:20 wazuh-syscheckd[7997] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-02 17:11:27,645 - wazuh_testing - DEBUG - 2022/02/02 21:10:49 wazuh-syscheckd[5420] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:11:27,645 - wazuh_testing - DEBUG - 2022/02/02 21:11:20 wazuh-syscheckd[7997] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-02 17:11:27,646 - wazuh_testing - DEBUG - 2022/02/02 21:11:20 wazuh-syscheckd[7997] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-02 17:11:27,646 - wazuh_testing - DEBUG - 2022/02/02 21:10:49 wazuh-syscheckd[5420] run_check.c:229 at start_daemon(): INFO: (6000): Starting daemon... 2022-02-02 17:11:27,646 - wazuh_testing - DEBUG - 2022/02/02 21:11:20 wazuh-syscheckd[7997] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-02 17:11:27,646 - wazuh_testing - DEBUG - 2022/02/02 21:10:49 wazuh-syscheckd[5420] run_check.c:232 at start_daemon(): INFO: (6010): File integrity monitoring scan frequency: 43200 seconds 2022-02-02 17:11:27,647 - wazuh_testing - DEBUG - 2022/02/02 21:11:20 wazuh-syscheckd[7997] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-02 17:11:27,647 - wazuh_testing - DEBUG - 2022/02/02 21:10:49 wazuh-syscheckd[5420] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-02 17:11:27,647 - wazuh_testing - DEBUG - 2022/02/02 21:11:20 wazuh-syscheckd[7997] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-02 17:11:27,647 - wazuh_testing - DEBUG - 2022/02/02 21:10:49 wazuh-syscheckd[5420] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1643832649}} 2022-02-02 17:11:27,648 - wazuh_testing - DEBUG - 2022/02/02 21:11:20 wazuh-syscheckd[7997] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-02 17:11:27,648 - wazuh_testing - DEBUG - 2022/02/02 21:10:49 wazuh-syscheckd[5420] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-02 17:11:27,648 - wazuh_testing - DEBUG - 2022/02/02 21:11:20 wazuh-syscheckd[7997] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-02 17:11:27,648 - wazuh_testing - DEBUG - 2022/02/02 21:10:49 wazuh-syscheckd[5420] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-02 17:11:27,649 - wazuh_testing - DEBUG - 2022/02/02 21:10:49 wazuh-syscheckd[5420] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-02 17:11:27,649 - wazuh_testing - DEBUG - 2022/02/02 21:11:20 rootcheck[7997] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled. 2022-02-02 17:11:27,650 - wazuh_testing - DEBUG - 2022/02/02 21:10:49 wazuh-syscheckd[5420] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1643832649}} 2022-02-02 17:11:27,650 - wazuh_testing - DEBUG - 2022/02/02 21:11:20 wazuh-syscheckd[7997] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:11:27,650 - wazuh_testing - DEBUG - 2022/02/02 21:10:49 wazuh-syscheckd[5420] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.000 sec (0.000 clock sec) 2022-02-02 17:11:27,650 - wazuh_testing - DEBUG - 2022/02/02 21:11:20 wazuh-syscheckd[7997] syscom.c:123 at syscom_main(): DEBUG: (6284): Local requests thread ready. 2022-02-02 17:11:27,651 - wazuh_testing - DEBUG - 2022/02/02 21:10:49 wazuh-syscheckd[5420] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 0, path count: 0 2022-02-02 17:11:27,651 - wazuh_testing - DEBUG - 2022/02/02 21:10:49 wazuh-syscheckd[5420] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:11:27,651 - wazuh_testing - DEBUG - 2022/02/02 21:11:20 wazuh-syscheckd[7997] mq_op.c:47 at StartMQ(): DEBUG: Connected succesfully to 'queue/sockets/queue' after 0 attempts 2022-02-02 17:11:27,651 - wazuh_testing - DEBUG - 2022/02/02 21:10:49 wazuh-syscheckd[5420] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:11:27,652 - wazuh_testing - DEBUG - 2022/02/02 21:11:20 wazuh-syscheckd[7997] mq_op.c:48 at StartMQ(): DEBUG: (unix_domain) Maximum send buffer set to: '212992'. 2022-02-02 17:11:27,652 - wazuh_testing - DEBUG - 2022/02/02 21:10:49 wazuh-syscheckd[5420] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:11:27,652 - wazuh_testing - DEBUG - 2022/02/02 21:10:49 wazuh-syscheckd[5420] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. 2022-02-02 17:11:27,652 - wazuh_testing - DEBUG - 2022/02/02 21:11:20 wazuh-syscheckd[7997] main.c:185 at main(): INFO: Started (pid: 7999). 2022-02-02 17:11:27,652 - wazuh_testing - DEBUG - 2022/02/02 21:10:49 wazuh-syscheckd[5420] run_check.c:568 at symlink_checker_thread(): DEBUG: (6033): Starting symbolic link updater. Interval '600'. 2022-02-02 17:11:27,653 - wazuh_testing - DEBUG - 2022/02/02 21:10:49 wazuh-syscheckd[5420] run_check.c:82 at fim_send_sync_msg(): DEBUG: (6317): Sending integrity control message: {"component":"fim_file","type":"integrity_clear","data":{"id":1643832649,"version":2}} 2022-02-02 17:11:27,653 - wazuh_testing - DEBUG - 2022/02/02 21:11:20 wazuh-syscheckd[7997] main.c:193 at main(): INFO: (6003): Monitoring path: '/bin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:11:27,653 - wazuh_testing - DEBUG - 2022/02/02 21:10:49 wazuh-syscheckd[5420] fim_sync.c:70 at fim_run_integrity(): DEBUG: Finished calculating FIM integrity. Time: 0.000 seconds. 2022-02-02 17:11:27,653 - wazuh_testing - DEBUG - 2022/02/02 21:10:50 wazuh-analysisd: INFO: Total rules enabled: '3882' 2022-02-02 17:11:27,653 - wazuh_testing - DEBUG - 2022/02/02 21:11:20 wazuh-syscheckd[7997] main.c:193 at main(): INFO: (6003): Monitoring path: '/boot', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:11:27,654 - wazuh_testing - DEBUG - 2022/02/02 21:10:50 wazuh-analysisd: INFO: Started (pid: 5413). 2022-02-02 17:11:27,654 - wazuh_testing - DEBUG - 2022/02/02 21:10:50 wazuh-db[5374] main.c:290 at run_dealer(): DEBUG: New client connected (6). 2022-02-02 17:11:27,654 - wazuh_testing - DEBUG - 2022/02/02 21:11:20 wazuh-syscheckd[7997] main.c:193 at main(): INFO: (6003): Monitoring path: '/etc', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:11:27,654 - wazuh_testing - DEBUG - 2022/02/02 21:10:50 wazuh-analysisd: INFO: (7200): Logtest started 2022-02-02 17:11:27,655 - wazuh_testing - DEBUG - 2022/02/02 21:10:50 wazuh-db[5374] main.c:290 at run_dealer(): DEBUG: New client connected (10). 2022-02-02 17:11:27,655 - wazuh_testing - DEBUG - 2022/02/02 21:11:20 wazuh-syscheckd[7997] main.c:193 at main(): INFO: (6003): Monitoring path: '/sbin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:11:27,655 - wazuh_testing - DEBUG - 2022/02/02 21:10:50 wazuh-db[5374] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 000 query: syscheck scan_info_update start_scan 1643832649 2022-02-02 17:11:27,655 - wazuh_testing - DEBUG - 2022/02/02 21:10:50 wazuh-db[5374] main.c:290 at run_dealer(): DEBUG: New client connected (11). 2022-02-02 17:11:27,655 - wazuh_testing - DEBUG - 2022/02/02 21:11:20 wazuh-syscheckd[7997] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir1', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:11:27,656 - wazuh_testing - DEBUG - 2022/02/02 21:10:50 wazuh-db[5374] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 000 query: syscheck scan_info_update end_scan 1643832649 2022-02-02 17:11:27,656 - wazuh_testing - DEBUG - 2022/02/02 21:10:50 wazuh-db[5374] main.c:290 at run_dealer(): DEBUG: New client connected (13). 2022-02-02 17:11:27,656 - wazuh_testing - DEBUG - 2022/02/02 21:11:20 wazuh-syscheckd[7997] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir2', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | realtime'. 2022-02-02 17:11:27,657 - wazuh_testing - DEBUG - 2022/02/02 21:10:50 wazuh-db[5374] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 000 query: fim_file integrity_clear {"id":1643832649,"version":2} 2022-02-02 17:11:27,657 - wazuh_testing - DEBUG - 2022/02/02 21:11:20 wazuh-syscheckd[7997] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir3', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | whodata'. 2022-02-02 17:11:27,657 - wazuh_testing - DEBUG - 2022/02/02 21:10:50 wazuh-remoted: INFO: Started (pid: 5561). Listening on port 1514/TCP (secure). 2022-02-02 17:11:27,658 - wazuh_testing - DEBUG - 2022/02/02 21:10:50 wazuh-db[5374] main.c:290 at run_dealer(): DEBUG: New client connected (12). 2022-02-02 17:11:27,658 - wazuh_testing - DEBUG - 2022/02/02 21:11:20 wazuh-syscheckd[7997] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/bin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:11:27,658 - wazuh_testing - DEBUG - 2022/02/02 21:10:50 wazuh-db[5374] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: reset-agents-connection synced 2022-02-02 17:11:27,659 - wazuh_testing - DEBUG - 2022/02/02 21:10:50 wazuh-db[5374] main.c:352 at run_worker(): DEBUG: Client 12 disconnected. 2022-02-02 17:11:27,659 - wazuh_testing - DEBUG - 2022/02/02 21:10:50 wazuh-remoted: INFO: (1410): Reading authentication keys file. 2022-02-02 17:11:27,659 - wazuh_testing - DEBUG - 2022/02/02 21:11:20 wazuh-syscheckd[7997] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/sbin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:11:27,660 - wazuh_testing - DEBUG - 2022/02/02 21:10:51 wazuh-logcollector: INFO: (1950): Analyzing file: '/var/ossec/logs/active-responses.log'. 2022-02-02 17:11:27,660 - wazuh_testing - DEBUG - 2022/02/02 21:10:51 wazuh-logcollector: INFO: (1950): Analyzing file: '/var/log/dpkg.log'. 2022-02-02 17:11:27,660 - wazuh_testing - DEBUG - 2022/02/02 21:11:20 wazuh-syscheckd[7997] main.c:215 at main(): DEBUG: (6357): Maximum disk quota size limit configured to '1048576 KB'. 2022-02-02 17:11:27,661 - wazuh_testing - DEBUG - 2022/02/02 21:10:51 wazuh-logcollector: INFO: Started (pid: 5593). 2022-02-02 17:11:27,661 - wazuh_testing - DEBUG - 2022/02/02 21:10:52 wazuh-monitord: INFO: Started (pid: 5612). 2022-02-02 17:11:27,661 - wazuh_testing - DEBUG - 2022/02/02 21:11:20 wazuh-syscheckd[7997] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mtab' 2022-02-02 17:11:27,661 - wazuh_testing - DEBUG - 2022/02/02 21:10:53 wazuh-db[5374] main.c:290 at run_dealer(): DEBUG: New client connected (12). 2022-02-02 17:11:27,662 - wazuh_testing - DEBUG - 2022/02/02 21:11:20 wazuh-syscheckd[7997] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/hosts.deny' 2022-02-02 17:11:27,662 - wazuh_testing - DEBUG - 2022/02/02 21:10:53 wazuh-db[5374] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-keepalive {"id":1,"connection_status":"pending","sync_status":"synced"} 2022-02-02 17:11:27,662 - wazuh_testing - DEBUG - 2022/02/02 21:11:20 wazuh-syscheckd[7997] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mail/statistics' 2022-02-02 17:11:27,662 - wazuh_testing - DEBUG - 2022/02/02 21:10:53 wazuh-db[5374] main.c:290 at run_dealer(): DEBUG: New client connected (16). 2022-02-02 17:11:27,663 - wazuh_testing - DEBUG - 2022/02/02 21:11:20 wazuh-syscheckd[7997] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random-seed' 2022-02-02 17:11:27,663 - wazuh_testing - DEBUG - 2022/02/02 21:10:53 wazuh-db[5374] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.18.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.18.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.13.0-27-generic |#29~20.04.1-Ubuntu SMP Fri Jan 14 00:32:30 UTC 2022 |x86_64","os_arch":"x86_64"} 2022-02-02 17:11:27,664 - wazuh_testing - DEBUG - 2022/02/02 21:11:20 wazuh-syscheckd[7997] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random.seed' 2022-02-02 17:11:27,664 - wazuh_testing - DEBUG - 2022/02/02 21:10:53 wazuh-modulesd: INFO: Started (pid: 5624). 2022-02-02 17:11:27,664 - wazuh_testing - DEBUG - 2022/02/02 21:10:53 wazuh-modulesd:agent-upgrade: INFO: (8153): Module Agent Upgrade started. 2022-02-02 17:11:27,665 - wazuh_testing - DEBUG - 2022/02/02 21:11:20 wazuh-syscheckd[7997] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/adjtime' 2022-02-02 17:11:27,665 - wazuh_testing - DEBUG - 2022/02/02 21:10:53 wazuh-modulesd:ciscat: INFO: Module disabled. Exiting... 2022-02-02 17:11:27,665 - wazuh_testing - DEBUG - 2022/02/02 21:10:53 wazuh-modulesd:osquery: INFO: Module disabled. Exiting... 2022-02-02 17:11:27,665 - wazuh_testing - DEBUG - 2022/02/02 21:11:20 wazuh-syscheckd[7997] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/httpd/logs' 2022-02-02 17:11:27,665 - wazuh_testing - DEBUG - 2022/02/02 21:10:53 wazuh-modulesd:syscollector: INFO: Module disabled. Exiting... 2022-02-02 17:11:27,666 - wazuh_testing - DEBUG - 2022/02/02 21:10:53 sca: INFO: Module disabled. Exiting. 2022-02-02 17:11:27,666 - wazuh_testing - DEBUG - 2022/02/02 21:11:20 wazuh-syscheckd[7997] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/utmpx' 2022-02-02 17:11:27,666 - wazuh_testing - DEBUG - 2022/02/02 21:10:53 wazuh-modulesd:database: INFO: Module started. 2022-02-02 17:11:27,667 - wazuh_testing - DEBUG - 2022/02/02 21:10:53 wazuh-modulesd:download: INFO: Module started. 2022-02-02 17:11:27,667 - wazuh_testing - DEBUG - 2022/02/02 21:11:20 wazuh-syscheckd[7997] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/wtmpx' 2022-02-02 17:11:27,668 - wazuh_testing - DEBUG - 2022/02/02 21:11:20 wazuh-syscheckd[7997] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/cups/certs' 2022-02-02 17:11:27,668 - wazuh_testing - DEBUG - 2022/02/02 21:11:20 wazuh-syscheckd[7997] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/dumpdates' 2022-02-02 17:11:27,668 - wazuh_testing - DEBUG - 2022/02/02 21:10:53 wazuh-db[5374] main.c:290 at run_dealer(): DEBUG: New client connected (17). 2022-02-02 17:11:27,669 - wazuh_testing - DEBUG - 2022/02/02 21:11:20 wazuh-syscheckd[7997] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/svc/volatile' 2022-02-02 17:11:27,669 - wazuh_testing - DEBUG - 2022/02/02 21:11:20 wazuh-syscheckd[7997] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/security' 2022-02-02 17:11:27,670 - wazuh_testing - DEBUG - 2022/02/02 21:10:53 wazuh-db[5374] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-name {"id":0,"name":"wazuh-manager"} 2022-02-02 17:11:27,670 - wazuh_testing - DEBUG - 2022/02/02 21:11:20 wazuh-syscheckd[7997] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/debug' 2022-02-02 17:11:27,670 - wazuh_testing - DEBUG - 2022/02/02 21:11:20 wazuh-syscheckd[7997] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/dev/core' 2022-02-02 17:11:27,670 - wazuh_testing - DEBUG - 2022/02/02 21:10:53 wazuh-modulesd:control: INFO: Starting control thread. 2022-02-02 17:11:27,671 - wazuh_testing - DEBUG - 2022/02/02 21:11:20 wazuh-syscheckd[7997] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '^/proc' 2022-02-02 17:11:27,671 - wazuh_testing - DEBUG - 2022/02/02 21:10:53 wazuh-modulesd:task-manager: INFO: (8200): Module Task Manager started. 2022-02-02 17:11:27,672 - wazuh_testing - DEBUG - 2022/02/02 21:11:20 wazuh-syscheckd[7997] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '.log$|.swp$' 2022-02-02 17:11:27,672 - wazuh_testing - DEBUG - 2022/02/02 21:10:53 wazuh-db[5374] main.c:290 at run_dealer(): DEBUG: New client connected (18). 2022-02-02 17:11:27,673 - wazuh_testing - DEBUG - 2022/02/02 21:10:53 wazuh-db[5374] wdb_parser.c:928 at wdb_parse(): DEBUG: Task query: set_timeout {"now":1643832653,"interval":900} 2022-02-02 17:11:27,673 - wazuh_testing - DEBUG - 2022/02/02 21:11:20 wazuh-syscheckd[7997] main.c:235 at main(): INFO: (6004): No diff for file: '/etc/ssl/private.key' 2022-02-02 17:11:27,674 - wazuh_testing - DEBUG - 2022/02/02 21:10:53 wazuh-db[5374] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":0,"version":"Wazuh v4.2.5","manager_host":"wazuh-manager","node_name":"wazuh-master","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-manager |5.13.0-27-generic |#29~20.04.1-Ubuntu SMP Fri Jan 14 00:32:30 UTC 2022 |x86_64","os_arch":"x86_64"} 2022-02-02 17:11:27,674 - wazuh_testing - DEBUG - 2022/02/02 21:11:20 wazuh-syscheckd[7997] main.c:245 at main(): INFO: (6016): Directory set for real time monitoring: '/testdir2'. 2022-02-02 17:11:27,674 - wazuh_testing - DEBUG - 2022/02/02 21:10:53 wazuh-db[5374] main.c:352 at run_worker(): DEBUG: Client 18 disconnected. 2022-02-02 17:11:27,675 - wazuh_testing - DEBUG - 2022/02/02 21:10:53 wazuh-db[5374] main.c:290 at run_dealer(): DEBUG: New client connected (18). 2022-02-02 17:11:27,675 - wazuh_testing - DEBUG - 2022/02/02 21:11:20 wazuh-syscheckd[7997] syscheck_audit.c:243 at audit_init(): WARNING: (6924): Who-data engine cannot start because Auditd is not running. 2022-02-02 17:11:27,675 - wazuh_testing - DEBUG - 2022/02/02 21:10:53 wazuh-db[5374] wdb_parser.c:928 at wdb_parse(): DEBUG: Task query: delete_old {"timestamp":1643227853} 2022-02-02 17:11:27,675 - wazuh_testing - DEBUG - 2022/02/02 21:11:20 wazuh-syscheckd[7997] main.c:264 at main(): WARNING: (6913): Who-data engine could not start. Switching who-data to real-time. 2022-02-02 17:11:27,676 - wazuh_testing - DEBUG - 2022/02/02 21:11:20 wazuh-syscheckd[7997] run_check.c:194 at start_daemon(): DEBUG: (6320): Setting process priority to: '10' 2022-02-02 17:11:27,676 - wazuh_testing - DEBUG - 2022/02/02 21:11:20 wazuh-syscheckd[7997] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:11:27,676 - wazuh_testing - DEBUG - 2022/02/02 21:10:53 wazuh-db[5374] main.c:352 at run_worker(): DEBUG: Client 18 disconnected. 2022-02-02 17:11:27,677 - wazuh_testing - DEBUG - 2022/02/02 21:11:20 wazuh-syscheckd[7997] run_check.c:229 at start_daemon(): INFO: (6000): Starting daemon... 2022-02-02 17:11:27,677 - wazuh_testing - DEBUG - 2022/02/02 21:10:53 wazuh-db[5374] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: insert-agent {"id":1,"name":"wazuh-agent1","register_ip":"any","internal_key":"1111111111111111111111111111111111111111111111111111111111111111","group":"default","date_add":0} 2022-02-02 17:11:27,677 - wazuh_testing - DEBUG - 2022/02/02 21:11:20 wazuh-syscheckd[7997] run_check.c:232 at start_daemon(): INFO: (6010): File integrity monitoring scan frequency: 20 seconds 2022-02-02 17:11:27,677 - wazuh_testing - DEBUG - 2022/02/02 21:10:53 wazuh-db[5374] wdb_global.c:89 at wdb_global_insert_agent(): DEBUG: SQLite: UNIQUE constraint failed: agent.id 2022-02-02 17:11:27,677 - wazuh_testing - DEBUG - 2022/02/02 21:11:20 wazuh-syscheckd[7997] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-02 17:11:27,678 - wazuh_testing - DEBUG - 2022/02/02 21:10:53 wazuh-db[5374] wdb_parser.c:4784 at wdb_parse_global_insert_agent(): DEBUG: Global DB Cannot execute SQL query; err database queue/db/global.db: UNIQUE constraint failed: agent.id 2022-02-02 17:11:27,678 - wazuh_testing - DEBUG - 2022/02/02 21:11:20 wazuh-syscheckd[7997] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1643832680}} 2022-02-02 17:11:27,678 - wazuh_testing - DEBUG - 2022/02/02 21:10:53 wazuh-db[5374] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-group {"id":1,"group":"default"} 2022-02-02 17:11:27,678 - wazuh_testing - DEBUG - 2022/02/02 21:11:20 wazuh-syscheckd[7997] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-02 17:11:27,678 - wazuh_testing - DEBUG - 2022/02/02 21:10:53 wazuh-db[5374] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: delete-agent-belong 1 2022-02-02 17:11:27,679 - wazuh_testing - DEBUG - 2022/02/02 21:11:20 wazuh-syscheckd[7997] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-02 17:11:27,679 - wazuh_testing - DEBUG - 2022/02/02 21:10:53 wazuh-db[5374] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: find-group default 2022-02-02 17:11:27,679 - wazuh_testing - DEBUG - 2022/02/02 21:11:20 wazuh-syscheckd[7997] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-02 17:11:27,679 - wazuh_testing - DEBUG - 2022/02/02 21:10:53 wazuh-db[5374] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: insert-agent-belong {"id_group":1,"id_agent":1} 2022-02-02 17:11:27,679 - wazuh_testing - DEBUG - 2022/02/02 21:11:20 wazuh-syscheckd[7997] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-02 17:11:27,680 - wazuh_testing - DEBUG - 2022/02/02 21:10:53 wazuh-db[5374] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: get-all-agents last_id 0 2022-02-02 17:11:27,680 - wazuh_testing - DEBUG - 2022/02/02 21:11:20 wazuh-syscheckd[7997] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-02 17:11:27,680 - wazuh_testing - DEBUG - 2022/02/02 21:10:53 wazuh-db[5374] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: select-groups 2022-02-02 17:11:27,680 - wazuh_testing - DEBUG - 2022/02/02 21:11:21 wazuh-logcollector: INFO: (1950): Analyzing file: '/var/ossec/logs/active-responses.log'. 2022-02-02 17:11:27,680 - wazuh_testing - DEBUG - 2022/02/02 21:10:53 wazuh-db[5374] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: find-group default 2022-02-02 17:11:27,680 - wazuh_testing - DEBUG - 2022/02/02 21:11:21 wazuh-logcollector: ERROR: (1103): Could not open file '/var/log/secure' due to [(2)-(No such file or directory)]. 2022-02-02 17:11:27,681 - wazuh_testing - DEBUG - 2022/02/02 21:10:53 wazuh-db[5374] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: get-all-agents last_id 0 2022-02-02 17:11:27,681 - wazuh_testing - DEBUG - 2022/02/02 21:11:21 wazuh-logcollector: INFO: (1950): Analyzing file: '/var/log/secure'. 2022-02-02 17:11:27,681 - wazuh_testing - DEBUG - 2022/02/02 21:10:53 wazuh-db[5374] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: select-agent-group 1 2022-02-02 17:11:27,681 - wazuh_testing - DEBUG - 2022/02/02 21:11:21 wazuh-logcollector: INFO: Started (pid: 8011). 2022-02-02 17:11:27,681 - wazuh_testing - DEBUG - 2022/02/02 21:10:53 wazuh-db[5374] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: delete-agent-belong 1 2022-02-02 17:11:27,682 - wazuh_testing - DEBUG - 2022/02/02 21:11:21 wazuh-syscheckd[7997] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-02 17:11:27,682 - wazuh_testing - DEBUG - 2022/02/02 21:10:53 wazuh-db[5374] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: find-group default 2022-02-02 17:11:27,682 - wazuh_testing - DEBUG - 2022/02/02 21:11:21 wazuh-syscheckd[7997] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-02 17:11:27,682 - wazuh_testing - DEBUG - 2022/02/02 21:10:53 wazuh-db[5374] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: insert-agent-belong {"id_group":1,"id_agent":1} 2022-02-02 17:11:27,682 - wazuh_testing - DEBUG - 2022/02/02 21:11:21 wazuh-syscheckd[7997] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1643832681}} 2022-02-02 17:11:27,683 - wazuh_testing - DEBUG - 2022/02/02 21:10:53 wazuh-db[5374] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: select-agent-name 1 2022-02-02 17:11:27,683 - wazuh_testing - DEBUG - 2022/02/02 21:11:21 wazuh-syscheckd[7997] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 1.236 sec (1.225 clock sec) 2022-02-02 17:11:27,683 - wazuh_testing - DEBUG - 2022/02/02 21:10:53 wazuh-db[5374] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: select-agent-name 1 2022-02-02 17:11:27,683 - wazuh_testing - DEBUG - 2022/02/02 21:11:21 wazuh-syscheckd[7997] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1621, path count: 1627 2022-02-02 17:11:27,683 - wazuh_testing - DEBUG - 2022/02/02 21:10:54 wazuh-db[5374] main.c:290 at run_dealer(): DEBUG: New client connected (18). 2022-02-02 17:11:27,684 - wazuh_testing - DEBUG - 2022/02/02 21:11:21 wazuh-syscheckd[7997] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:11:27,684 - wazuh_testing - DEBUG - 2022/02/02 21:10:54 wazuh-db[5374] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1643832624 2022-02-02 17:11:27,684 - wazuh_testing - DEBUG - 2022/02/02 21:11:21 wazuh-syscheckd[7997] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:11:27,684 - wazuh_testing - DEBUG - 2022/02/02 21:11:21 wazuh-syscheckd[7997] run_check.c:387 at fim_run_realtime(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-02 17:11:27,685 - wazuh_testing - DEBUG - 2022/02/02 21:10:54 wazuh-db[5374] main.c:290 at run_dealer(): DEBUG: New client connected (20). 2022-02-02 17:11:27,685 - wazuh_testing - DEBUG - 2022/02/02 21:11:21 wazuh-syscheckd[7997] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:11:27,685 - wazuh_testing - DEBUG - 2022/02/02 21:10:54 wazuh-db[5374] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck save2 {"path":"/testdir1/testdir1.txt","version":2,"timestamp":1643832654,"attributes":{"type":"file","size":0,"perm":"rw-r--r--","uid":"0","gid":"0","user_name":"root","group_name":"root","inode":7239426,"mtime":1643832629,"hash_md5":"d41d8cd98f00b204e9800998ecf8427e","hash_sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","hash_sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","checksum":"811936a24b11d05f358fe406a8b9230e16071f82"}} 2022-02-02 17:11:27,685 - wazuh_testing - DEBUG - 2022/02/02 21:11:21 wazuh-syscheckd[7997] run_check.c:543 at log_realtime_status(): INFO: (6012): Real-time file integrity monitoring started. 2022-02-02 17:11:27,686 - wazuh_testing - DEBUG - 2022/02/02 21:11:21 wazuh-syscheckd[7997] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. 2022-02-02 17:11:27,686 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-manager and message: .*Agent 001 query: (.+) save2 2022-02-02 17:11:27,686 - wazuh_testing - DEBUG - 2022/02/02 21:11:21 wazuh-syscheckd[7997] run_check.c:568 at symlink_checker_thread(): DEBUG: (6033): Starting symbolic link updater. Interval '600'. 2022-02-02 17:11:27,687 - wazuh_testing - DEBUG - 2022/02/02 21:11:21 wazuh-syscheckd[7997] run_check.c:82 at fim_send_sync_msg(): DEBUG: (6317): Sending integrity control message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1643832681,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"87f2a6c0758ba3d0bc2f123ec536ff651201af66"}} 2022-02-02 17:11:27,687 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-agent1 and message: .*Sending integrity control message: (.+)$ 2022-02-02 17:11:28,621 - wazuh_testing - DEBUG - Cleaning temporal files... 2022-02-02 17:11:28,622 - wazuh_testing - DEBUG - Checking results... 2022-02-02 17:11:28,623 - wazuh_testing - DEBUG - Received from wazuh-manager the expected message: 2022/02/02 21:10:54 wazuh-db[5374] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck save2 {"path":"/testdir1/testdir1.txt","version":2,"timestamp":1643832654,"attributes":{"type":"file","size":0,"perm":"rw-r--r--","uid":"0","gid":"0","user_name":"root","group_name":"root","inode":7239426,"mtime":1643832629,"hash_md5":"d41d8cd98f00b204e9800998ecf8427e","hash_sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","hash_sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","checksum":"811936a24b11d05f358fe406a8b9230e16071f82"}} 2022-02-02 17:11:28,623 - wazuh_testing - DEBUG - Received from wazuh-agent1 the expected message: 2022/02/02 21:11:21 wazuh-syscheckd[7997] run_check.c:82 at fim_send_sync_msg(): DEBUG: (6317): Sending integrity control message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1643832681,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"87f2a6c0758ba3d0bc2f123ec536ff651201af66"}} 2022-02-02 17:11:58,367 - wazuh_testing - DEBUG - Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-02 17:11:58,369 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-02 17:11:58,370 - wazuh_testing - DEBUG - Starting file composer for wazuh-agent1 and path: /var/ossec/logs/ossec.log. Composite file in /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-agent1_ossec.log.tmp 2022-02-02 17:11:58,373 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-agent1 and message: .*Initializing FIM Integrity Synchronization check. (.+)$ 2022-02-02 17:12:00,376 - wazuh_testing - DEBUG - 2022/02/02 21:11:41 wazuh-logcollector: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:12:00,376 - wazuh_testing - DEBUG - 2022/02/02 21:11:41 wazuh-syscheckd[7997] sig_op.c:49 at HandleSIG(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:12:00,377 - wazuh_testing - DEBUG - 2022/02/02 21:11:41 wazuh-agentd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:12:00,377 - wazuh_testing - DEBUG - 2022/02/02 21:11:41 wazuh-execd: INFO: (1314): Shutdown received. Deleting responses. 2022-02-02 17:12:00,377 - wazuh_testing - DEBUG - 2022/02/02 21:11:41 wazuh-execd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:12:00,377 - wazuh_testing - DEBUG - 2022/02/02 21:11:50 wazuh-syscheckd[8487] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-02 17:12:00,378 - wazuh_testing - DEBUG - 2022/02/02 21:11:50 wazuh-syscheckd[8487] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-02 17:12:00,378 - wazuh_testing - DEBUG - 2022/02/02 21:11:50 wazuh-syscheckd[8487] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-02 17:12:00,379 - wazuh_testing - DEBUG - 2022/02/02 21:11:50 wazuh-syscheckd[8487] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-02 17:12:00,379 - wazuh_testing - DEBUG - 2022/02/02 21:11:50 wazuh-syscheckd[8487] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-02 17:12:00,379 - wazuh_testing - DEBUG - 2022/02/02 21:11:50 wazuh-syscheckd[8487] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-02 17:12:00,379 - wazuh_testing - DEBUG - 2022/02/02 21:11:50 wazuh-syscheckd[8487] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-02 17:12:00,379 - wazuh_testing - DEBUG - 2022/02/02 21:11:50 wazuh-syscheckd[8487] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ 2022-02-02 17:12:00,379 - wazuh_testing - DEBUG - 2022/02/02 21:11:50 wazuh-syscheckd[8487] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ OK? 2022-02-02 17:12:00,380 - wazuh_testing - DEBUG - 2022/02/02 21:11:50 wazuh-syscheckd[8487] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-02 17:12:00,380 - wazuh_testing - DEBUG - 2022/02/02 21:11:50 wazuh-syscheckd[8487] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-02 17:12:00,380 - wazuh_testing - DEBUG - 2022/02/02 21:11:50 wazuh-syscheckd[8487] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-02 17:12:00,380 - wazuh_testing - DEBUG - 2022/02/02 21:11:50 wazuh-syscheckd[8487] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-02 17:12:00,380 - wazuh_testing - DEBUG - 2022/02/02 21:11:50 wazuh-syscheckd[8487] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-02 17:12:00,381 - wazuh_testing - DEBUG - 2022/02/02 21:11:50 wazuh-syscheckd[8487] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-02 17:12:00,381 - wazuh_testing - DEBUG - 2022/02/02 21:11:50 wazuh-syscheckd[8487] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-02 17:12:00,381 - wazuh_testing - DEBUG - 2022/02/02 21:11:50 wazuh-syscheckd[8487] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-02 17:12:00,381 - wazuh_testing - DEBUG - 2022/02/02 21:11:50 wazuh-execd: INFO: Started (pid: 8500). 2022-02-02 17:12:00,381 - wazuh_testing - DEBUG - 2022/02/02 21:11:51 wazuh-agentd: INFO: (1410): Reading authentication keys file. 2022-02-02 17:12:00,381 - wazuh_testing - DEBUG - 2022/02/02 21:11:51 wazuh-agentd: INFO: Using notify time: 10 and max time to reconnect: 60 2022-02-02 17:12:00,382 - wazuh_testing - DEBUG - 2022/02/02 21:11:51 wazuh-agentd: INFO: Version detected -> Linux |wazuh-agent1 |5.13.0-27-generic |#29~20.04.1-Ubuntu SMP Fri Jan 14 00:32:30 UTC 2022 |x86_64 [Debian GNU/Linux|debian: 10 (buster)] - Wazuh v4.2.5 2022-02-02 17:12:00,382 - wazuh_testing - DEBUG - 2022/02/02 21:11:51 wazuh-agentd: INFO: Started (pid: 8511). 2022-02-02 17:12:00,382 - wazuh_testing - DEBUG - 2022/02/02 21:11:51 wazuh-agentd: INFO: Server IP Address: wazuh-manager/172.18.0.2 2022-02-02 17:12:00,382 - wazuh_testing - DEBUG - 2022/02/02 21:11:51 wazuh-agentd: INFO: Using AES as encryption method. 2022-02-02 17:12:00,382 - wazuh_testing - DEBUG - 2022/02/02 21:11:51 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.18.0.2:1514/tcp). 2022-02-02 17:12:00,383 - wazuh_testing - DEBUG - 2022/02/02 21:11:51 wazuh-agentd: INFO: (4102): Connected to the server (wazuh-manager/172.18.0.2:1514/tcp). 2022-02-02 17:12:00,383 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-02 17:12:00,383 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-02 17:12:00,383 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-02 17:12:00,384 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-02 17:12:00,384 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-02 17:12:00,384 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-02 17:12:00,384 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-02 17:12:00,384 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ 2022-02-02 17:12:00,385 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ OK? 2022-02-02 17:12:00,385 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-02 17:12:00,385 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-02 17:12:00,385 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-02 17:12:00,386 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-02 17:12:00,386 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-02 17:12:00,387 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-02 17:12:00,387 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-02 17:12:00,387 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-02 17:12:00,388 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 rootcheck[8523] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled. 2022-02-02 17:12:00,388 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:12:00,389 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] syscom.c:123 at syscom_main(): DEBUG: (6284): Local requests thread ready. 2022-02-02 17:12:00,389 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] mq_op.c:47 at StartMQ(): DEBUG: Connected succesfully to 'queue/sockets/queue' after 0 attempts 2022-02-02 17:12:00,389 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] mq_op.c:48 at StartMQ(): DEBUG: (unix_domain) Maximum send buffer set to: '212992'. 2022-02-02 17:12:00,389 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] main.c:185 at main(): INFO: Started (pid: 8525). 2022-02-02 17:12:00,389 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] main.c:193 at main(): INFO: (6003): Monitoring path: '/bin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:12:00,389 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] main.c:193 at main(): INFO: (6003): Monitoring path: '/boot', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:12:00,390 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] main.c:193 at main(): INFO: (6003): Monitoring path: '/etc', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:12:00,390 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] main.c:193 at main(): INFO: (6003): Monitoring path: '/sbin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:12:00,390 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir1', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:12:00,390 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir2', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | realtime'. 2022-02-02 17:12:00,391 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir3', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | whodata'. 2022-02-02 17:12:00,391 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/bin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:12:00,391 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/sbin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:12:00,391 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] main.c:215 at main(): DEBUG: (6357): Maximum disk quota size limit configured to '1048576 KB'. 2022-02-02 17:12:00,391 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mtab' 2022-02-02 17:12:00,392 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/hosts.deny' 2022-02-02 17:12:00,392 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mail/statistics' 2022-02-02 17:12:00,392 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random-seed' 2022-02-02 17:12:00,392 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random.seed' 2022-02-02 17:12:00,393 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/adjtime' 2022-02-02 17:12:00,393 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/httpd/logs' 2022-02-02 17:12:00,393 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/utmpx' 2022-02-02 17:12:00,393 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/wtmpx' 2022-02-02 17:12:00,394 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/cups/certs' 2022-02-02 17:12:00,394 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/dumpdates' 2022-02-02 17:12:00,394 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/svc/volatile' 2022-02-02 17:12:00,394 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/security' 2022-02-02 17:12:00,394 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/debug' 2022-02-02 17:12:00,395 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/dev/core' 2022-02-02 17:12:00,395 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '^/proc' 2022-02-02 17:12:00,395 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '.log$|.swp$' 2022-02-02 17:12:00,395 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] main.c:235 at main(): INFO: (6004): No diff for file: '/etc/ssl/private.key' 2022-02-02 17:12:00,396 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] main.c:245 at main(): INFO: (6016): Directory set for real time monitoring: '/testdir2'. 2022-02-02 17:12:00,396 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] syscheck_audit.c:243 at audit_init(): WARNING: (6924): Who-data engine cannot start because Auditd is not running. 2022-02-02 17:12:00,396 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] main.c:264 at main(): WARNING: (6913): Who-data engine could not start. Switching who-data to real-time. 2022-02-02 17:12:00,396 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] run_check.c:194 at start_daemon(): DEBUG: (6320): Setting process priority to: '10' 2022-02-02 17:12:00,397 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:12:00,397 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] run_check.c:229 at start_daemon(): INFO: (6000): Starting daemon... 2022-02-02 17:12:00,397 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] run_check.c:232 at start_daemon(): INFO: (6010): File integrity monitoring scan frequency: 20 seconds 2022-02-02 17:12:00,397 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-02 17:12:00,398 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1643832713}} 2022-02-02 17:12:00,398 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-02 17:12:00,398 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-02 17:12:00,398 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-02 17:12:00,399 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-02 17:12:00,399 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-02 17:12:00,399 - wazuh_testing - DEBUG - 2022/02/02 21:11:54 wazuh-syscheckd[8523] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-02 17:12:00,399 - wazuh_testing - DEBUG - 2022/02/02 21:11:54 wazuh-syscheckd[8523] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-02 17:12:00,400 - wazuh_testing - DEBUG - 2022/02/02 21:11:54 wazuh-syscheckd[8523] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1643832714}} 2022-02-02 17:12:00,400 - wazuh_testing - DEBUG - 2022/02/02 21:11:54 wazuh-syscheckd[8523] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.967 sec (0.965 clock sec) 2022-02-02 17:12:00,400 - wazuh_testing - DEBUG - 2022/02/02 21:11:54 wazuh-syscheckd[8523] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1622, path count: 1628 2022-02-02 17:12:00,401 - wazuh_testing - DEBUG - 2022/02/02 21:11:54 wazuh-syscheckd[8523] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:12:00,401 - wazuh_testing - DEBUG - 2022/02/02 21:11:54 wazuh-syscheckd[8523] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:12:00,401 - wazuh_testing - DEBUG - 2022/02/02 21:11:54 wazuh-syscheckd[8523] run_check.c:387 at fim_run_realtime(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-02 17:12:00,401 - wazuh_testing - DEBUG - 2022/02/02 21:11:54 wazuh-syscheckd[8523] run_check.c:543 at log_realtime_status(): INFO: (6012): Real-time file integrity monitoring started. 2022-02-02 17:12:00,402 - wazuh_testing - DEBUG - 2022/02/02 21:11:54 wazuh-syscheckd[8523] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:12:00,402 - wazuh_testing - DEBUG - 2022/02/02 21:11:54 wazuh-syscheckd[8523] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. 2022-02-02 17:12:00,403 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-agent1 and message: .*Initializing FIM Integrity Synchronization check. (.+)$ 2022-02-02 17:12:01,378 - wazuh_testing - DEBUG - Cleaning temporal files... 2022-02-02 17:12:01,379 - wazuh_testing - DEBUG - Checking results... 2022-02-02 17:12:01,381 - wazuh_testing - DEBUG - Received from wazuh-agent1 the expected message: 2022/02/02 21:11:54 wazuh-syscheckd[8523] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds.
-------------------------------Captured log call--------------------------------
DEBUG testinfra:base.py:277 RUN CommandResult(command=b"ansible --tree /tmp/tmp07lg8pvb -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m command --args 'mkdir testdir1' wazuh-agent1", exit_status=0, stdout=b'wazuh-agent1 | CHANGED | rc=0 >>\n\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('command', 'mkdir testdir1', {'check': False, 'become': False}): {'changed': True, 'cmd': ['mkdir', 'testdir1'], 'delta': '0:00:00.763081', 'end': '2022-02-02 21:11:06.499036', 'msg': '', 'rc': 0, 'start': '2022-02-02 21:11:05.735955', 'stderr': '', 'stderr_lines': [], 'stdout': '', 'stdout_lines': []} DEBUG testinfra:base.py:277 RUN CommandResult(command=b"ansible --tree /tmp/tmpcsifww56 -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m command --args 'touch testdir1/testdir1.txt' wazuh-agent1", exit_status=0, stdout=b'wazuh-agent1 | CHANGED | rc=0 >>\n\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('command', 'touch testdir1/testdir1.txt', {'check': False, 'become': False}): {'changed': True, 'cmd': ['touch', 'testdir1/testdir1.txt'], 'delta': '0:00:00.908005', 'end': '2022-02-02 21:11:09.656044', 'msg': '', 'rc': 0, 'start': '2022-02-02 21:11:08.748039', 'stderr': '', 'stderr_lines': [], 'stdout': '', 'stdout_lines': []} DEBUG testinfra:base.py:277 RUN CommandResult(command=b"ansible --tree /tmp/tmpm95q74_r -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m service --args 'name=wazuh-agent state=restarted' wazuh-agent1", exit_status=0, stdout=b'wazuh-agent1 | CHANGED => {\n "changed": true,\n "name": "wazuh-agent",\n "state": "started"\n}\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('service', 'name=wazuh-agent state=restarted', {'check': False, 'become': False}): {'changed': True, 'name': 'wazuh-agent', 'state': 'started'} DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:1006 Cleaning temporal files... DEBUG wazuh_testing:monitoring.py:995 Checking results... DEBUG wazuh_testing:monitoring.py:1001 Received from wazuh-manager the expected message: 2022/02/02 21:10:54 wazuh-db[5374] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck save2 {"path":"/testdir1/testdir1.txt","version":2,"timestamp":1643832654,"attributes":{"type":"file","size":0,"perm":"rw-r--r--","uid":"0","gid":"0","user_name":"root","group_name":"root","inode":7239426,"mtime":1643832629,"hash_md5":"d41d8cd98f00b204e9800998ecf8427e","hash_sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","hash_sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","checksum":"811936a24b11d05f358fe406a8b9230e16071f82"}} DEBUG wazuh_testing:monitoring.py:1001 Received from wazuh-agent1 the expected message: 2022/02/02 21:11:21 wazuh-syscheckd[7997] run_check.c:82 at fim_send_sync_msg(): DEBUG: (6317): Sending integrity control message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1643832681,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"87f2a6c0758ba3d0bc2f123ec536ff651201af66"}} DEBUG testinfra:base.py:277 RUN CommandResult(command=b'ansible --tree /tmp/tmprnqqv7d6 -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m copy --args \'dest=/var/ossec/logs/ossec.log content=\'"\'"\'\'"\'"\' force=yes\' wazuh-manager', exit_status=0, stdout=b'wazuh-manager | CHANGED => {\n "changed": true,\n "checksum": "da39a3ee5e6b4b0d3255bfef95601890afd80709",\n "dest": "/var/ossec/logs/ossec.log",\n "gid": 999,\n "group": "ossec",\n "md5sum": "d41d8cd98f00b204e9800998ecf8427e",\n "mode": "0660",\n "owner": "ossec",\n "size": 0,\n "src": "/root/.ansible/tmp/ansible-tmp-1643832689.7219555-76088-130084023172482/source",\n "state": "file",\n "uid": 999\n}\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('copy', "dest=/var/ossec/logs/ossec.log content='' force=yes", {'check': False, 'become': False}): {'changed': True, 'checksum': 'da39a3ee5e6b4b0d3255bfef95601890afd80709', 'dest': '/var/ossec/logs/ossec.log', 'gid': 999, 'group': 'ossec', 'md5sum': 'd41d8cd98f00b204e9800998ecf8427e', 'mode': '0660', 'owner': 'ossec', 'size': 0, 'src': '/root/.ansible/tmp/ansible-tmp-1643832689.7219555-76088-130084023172482/source', 'state': 'file', 'uid': 999} DEBUG testinfra:base.py:277 RUN CommandResult(command=b'ansible --tree /tmp/tmpvxk00vq3 -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m copy --args \'dest=/var/ossec/logs/ossec.log content=\'"\'"\'\'"\'"\' force=yes\' wazuh-agent1', exit_status=0, stdout=b'wazuh-agent1 | CHANGED => {\n "changed": true,\n "checksum": "da39a3ee5e6b4b0d3255bfef95601890afd80709",\n "dest": "/var/ossec/logs/ossec.log",\n "gid": 999,\n "group": "ossec",\n "md5sum": "d41d8cd98f00b204e9800998ecf8427e",\n "mode": "0660",\n "owner": "ossec",\n "size": 0,\n "src": "/root/.ansible/tmp/ansible-tmp-1643832694.8905385-76485-116108708741764/source",\n "state": "file",\n "uid": 999\n}\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('copy', "dest=/var/ossec/logs/ossec.log content='' force=yes", {'check': False, 'become': False}): {'changed': True, 'checksum': 'da39a3ee5e6b4b0d3255bfef95601890afd80709', 'dest': '/var/ossec/logs/ossec.log', 'gid': 999, 'group': 'ossec', 'md5sum': 'd41d8cd98f00b204e9800998ecf8427e', 'mode': '0660', 'owner': 'ossec', 'size': 0, 'src': '/root/.ansible/tmp/ansible-tmp-1643832694.8905385-76485-116108708741764/source', 'state': 'file', 'uid': 999} DEBUG testinfra:base.py:277 RUN CommandResult(command=b"ansible --tree /tmp/tmpqwk61_wa -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m command --args '/var/ossec/bin/wazuh-control stop' wazuh-agent1", exit_status=0, stdout=b'wazuh-agent1 | CHANGED | rc=0 >>\nKilling wazuh-modulesd... \nKilling wazuh-logcollector... \nKilling wazuh-syscheckd... \nKilling wazuh-agentd... \nKilling wazuh-execd... \nWazuh v4.2.5 Stopped\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('command', '/var/ossec/bin/wazuh-control stop', {'check': False, 'become': False}): {'changed': True, 'cmd': ['/var/ossec/bin/wazuh-control', 'stop'], 'delta': '0:00:01.447150', 'end': '2022-02-02 21:11:42.061721', 'msg': '', 'rc': 0, 'start': '2022-02-02 21:11:40.614571', 'stderr': '', 'stderr_lines': [], 'stdout': 'Killing wazuh-modulesd... \n' 'Killing wazuh-logcollector... \n' 'Killing wazuh-syscheckd... \n' 'Killing wazuh-agentd... \n' 'Killing wazuh-execd... \n' 'Wazuh v4.2.5 Stopped', 'stdout_lines': ['Killing wazuh-modulesd... ', 'Killing wazuh-logcollector... ', 'Killing wazuh-syscheckd... ', 'Killing wazuh-agentd... ', 'Killing wazuh-execd... ', 'Wazuh v4.2.5 Stopped']} DEBUG testinfra:base.py:277 RUN CommandResult(command=b"ansible --tree /tmp/tmpqsan9fsr -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m copy --args 'src=/tmp/tmpp27cn4pk dest=testdir1 owner=wazuh group=wazuh mode=0775' wazuh-agent1", exit_status=2, stdout=b'wazuh-agent1 | FAILED! => {\n "changed": false,\n "checksum": "9eab19985b11b15f91f936e463ea74f1dfe88e32",\n "gid": 0,\n "group": "root",\n "mode": "0644",\n "msg": "chown failed: failed to look up user wazuh",\n "owner": "root",\n "path": "./testdir1/tmpp27cn4pk",\n "size": 8,\n "state": "file",\n "uid": 0\n}\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('copy', 'src=/tmp/tmpp27cn4pk dest=testdir1 owner=wazuh group=wazuh mode=0775', {'check': False, 'become': False}): {'changed': False, 'checksum': '9eab19985b11b15f91f936e463ea74f1dfe88e32', 'gid': 0, 'group': 'root', 'mode': '0644', 'msg': 'chown failed: failed to look up user wazuh', 'owner': 'root', 'path': './testdir1/tmpp27cn4pk', 'size': 8, 'state': 'file', 'uid': 0} DEBUG testinfra:base.py:277 RUN CommandResult(command=b"ansible --tree /tmp/tmphrq39jnb -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m command --args '/var/ossec/bin/wazuh-control start' wazuh-agent1", exit_status=0, stdout=b"wazuh-agent1 | CHANGED | rc=0 >>\nStarting Wazuh v4.2.5...\nStarted wazuh-execd...\nStarted wazuh-agentd...\nStarted wazuh-syscheckd...\nStarted wazuh-logcollector...\nStarted wazuh-modulesd...\nCompleted.2022/02/02 21:11:50 wazuh-syscheckd[8487] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized\n2022/02/02 21:11:50 wazuh-syscheckd[8487] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf'\n2022/02/02 21:11:50 wazuh-syscheckd[8487] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)].\n2022/02/02 21:11:50 wazuh-syscheckd[8487] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)].\n2022/02/02 21:11:50 wazuh-syscheckd[8487] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc\n2022/02/02 21:11:50 wazuh-syscheckd[8487] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK?\n2022/02/02 21:11:50 wazuh-syscheckd[8487] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0\n2022/02/02 21:11:50 wazuh-syscheckd[8487] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$\n2022/02/02 21:11:50 wazuh-syscheckd[8487] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ OK?\n2022/02/02 21:11:50 wazuh-syscheckd[8487] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1\n2022/02/02 21:11:50 wazuh-syscheckd[8487] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf]\n2022/02/02 21:11:50 wazuh-syscheckd[8487] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile().\n2022/02/02 21:11:50 wazuh-syscheckd[8487] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10]\n2022/02/02 21:11:50 wazuh-syscheckd[8487] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes.\n2022/02/02 21:11:50 wazuh-syscheckd[8487] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile().\n2022/02/02 21:11:50 wazuh-syscheckd[8487] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10]\n2022/02/02 21:11:50 wazuh-syscheckd[8487] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes.\n2022/02/02 21:11:53 wazuh-syscheckd[8523] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized\n2022/02/02 21:11:53 wazuh-syscheckd[8523] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf'\n2022/02/02 21:11:53 wazuh-syscheckd[8523] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)].\n2022/02/02 21:11:53 wazuh-syscheckd[8523] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)].\n2022/02/02 21:11:53 wazuh-syscheckd[8523] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc\n2022/02/02 21:11:53 wazuh-syscheckd[8523] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK?\n2022/02/02 21:11:53 wazuh-syscheckd[8523] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0\n2022/02/02 21:11:53 wazuh-syscheckd[8523] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$\n2022/02/02 21:11:53 wazuh-syscheckd[8523] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ OK?\n2022/02/02 21:11:53 wazuh-syscheckd[8523] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1\n2022/02/02 21:11:53 wazuh-syscheckd[8523] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf]\n2022/02/02 21:11:53 wazuh-syscheckd[8523] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile().\n2022/02/02 21:11:53 wazuh-syscheckd[8523] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10]\n2022/02/02 21:11:53 wazuh-syscheckd[8523] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes.\n2022/02/02 21:11:53 wazuh-syscheckd[8523] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile().\n2022/02/02 21:11:53 wazuh-syscheckd[8523] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10]\n2022/02/02 21:11:53 wazuh-syscheckd[8523] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes.\n2022/02/02 21:11:53 rootcheck[8523] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled.\n", stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('command', '/var/ossec/bin/wazuh-control start', {'check': False, 'become': False}): {'changed': True, 'cmd': ['/var/ossec/bin/wazuh-control', 'start'], 'delta': '0:00:07.966129', 'end': '2022-02-02 21:11:58.065478', 'msg': '', 'rc': 0, 'start': '2022-02-02 21:11:50.099349', 'stderr': '2022/02/02 21:11:50 wazuh-syscheckd[8487] debug_op.c:70 at _log(): ' 'DEBUG: Logging module auto-initialized\n' '2022/02/02 21:11:50 wazuh-syscheckd[8487] config.c:87 at ' 'Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: ' "'etc/ossec.conf'\n" '2022/02/02 21:11:50 wazuh-syscheckd[8487] syscheck-config.c:1218 ' 'at read_attr(): DEBUG: Could not check the real path of ' "'/testdir2' due to [(2)-(No such file or directory)].\n" '2022/02/02 21:11:50 wazuh-syscheckd[8487] syscheck-config.c:1218 ' 'at read_attr(): DEBUG: Could not check the real path of ' "'/testdir3' due to [(2)-(No such file or directory)].\n" '2022/02/02 21:11:50 wazuh-syscheckd[8487] syscheck-config.c:2520 ' 'at process_option_regex(): DEBUG: Found ignore regex node ^/proc\n' '2022/02/02 21:11:50 wazuh-syscheckd[8487] syscheck-config.c:2527 ' 'at process_option_regex(): DEBUG: Found ignore regex node ^/proc ' 'OK?\n' '2022/02/02 21:11:50 wazuh-syscheckd[8487] syscheck-config.c:2528 ' 'at process_option_regex(): DEBUG: Found ignore regex size 0\n' '2022/02/02 21:11:50 wazuh-syscheckd[8487] syscheck-config.c:2520 ' 'at process_option_regex(): DEBUG: Found ignore regex node ' '.log$|.swp$\n' '2022/02/02 21:11:50 wazuh-syscheckd[8487] syscheck-config.c:2527 ' 'at process_option_regex(): DEBUG: Found ignore regex node ' '.log$|.swp$ OK?\n' '2022/02/02 21:11:50 wazuh-syscheckd[8487] syscheck-config.c:2528 ' 'at process_option_regex(): DEBUG: Found ignore regex size 1\n' '2022/02/02 21:11:50 wazuh-syscheckd[8487] config.c:95 at ' 'Read_Syscheck_Config(): DEBUG: (6208): Reading Client ' 'Configuration [etc/ossec.conf]\n' '2022/02/02 21:11:50 wazuh-syscheckd[8487] agent_op.c:208 at ' 'os_read_agent_profile(): DEBUG: Calling os_read_agent_profile().\n' '2022/02/02 21:11:50 wazuh-syscheckd[8487] agent_op.c:227 at ' 'os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, ' 'debian10]\n' '2022/02/02 21:11:50 wazuh-syscheckd[8487] config.c:375 at ' 'ReadConfig(): DEBUG: agent_config element does not have any ' 'attributes.\n' '2022/02/02 21:11:50 wazuh-syscheckd[8487] agent_op.c:208 at ' 'os_read_agent_profile(): DEBUG: Calling os_read_agent_profile().\n' '2022/02/02 21:11:50 wazuh-syscheckd[8487] agent_op.c:227 at ' 'os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, ' 'debian10]\n' '2022/02/02 21:11:50 wazuh-syscheckd[8487] config.c:375 at ' 'ReadConfig(): DEBUG: agent_config element does not have any ' 'attributes.\n' '2022/02/02 21:11:53 wazuh-syscheckd[8523] debug_op.c:70 at _log(): ' 'DEBUG: Logging module auto-initialized\n' '2022/02/02 21:11:53 wazuh-syscheckd[8523] config.c:87 at ' 'Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: ' "'etc/ossec.conf'\n" '2022/02/02 21:11:53 wazuh-syscheckd[8523] syscheck-config.c:1218 ' 'at read_attr(): DEBUG: Could not check the real path of ' "'/testdir2' due to [(2)-(No such file or directory)].\n" '2022/02/02 21:11:53 wazuh-syscheckd[8523] syscheck-config.c:1218 ' 'at read_attr(): DEBUG: Could not check the real path of ' "'/testdir3' due to [(2)-(No such file or directory)].\n" '2022/02/02 21:11:53 wazuh-syscheckd[8523] syscheck-config.c:2520 ' 'at process_option_regex(): DEBUG: Found ignore regex node ^/proc\n' '2022/02/02 21:11:53 wazuh-syscheckd[8523] syscheck-config.c:2527 ' 'at process_option_regex(): DEBUG: Found ignore regex node ^/proc ' 'OK?\n' '2022/02/02 21:11:53 wazuh-syscheckd[8523] syscheck-config.c:2528 ' 'at process_option_regex(): DEBUG: Found ignore regex size 0\n' '2022/02/02 21:11:53 wazuh-syscheckd[8523] syscheck-config.c:2520 ' 'at process_option_regex(): DEBUG: Found ignore regex node ' '.log$|.swp$\n' '2022/02/02 21:11:53 wazuh-syscheckd[8523] syscheck-config.c:2527 ' 'at process_option_regex(): DEBUG: Found ignore regex node ' '.log$|.swp$ OK?\n' '2022/02/02 21:11:53 wazuh-syscheckd[8523] syscheck-config.c:2528 ' 'at process_option_regex(): DEBUG: Found ignore regex size 1\n' '2022/02/02 21:11:53 wazuh-syscheckd[8523] config.c:95 at ' 'Read_Syscheck_Config(): DEBUG: (6208): Reading Client ' 'Configuration [etc/ossec.conf]\n' '2022/02/02 21:11:53 wazuh-syscheckd[8523] agent_op.c:208 at ' 'os_read_agent_profile(): DEBUG: Calling os_read_agent_profile().\n' '2022/02/02 21:11:53 wazuh-syscheckd[8523] agent_op.c:227 at ' 'os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, ' 'debian10]\n' '2022/02/02 21:11:53 wazuh-syscheckd[8523] config.c:375 at ' 'ReadConfig(): DEBUG: agent_config element does not have any ' 'attributes.\n' '2022/02/02 21:11:53 wazuh-syscheckd[8523] agent_op.c:208 at ' 'os_read_agent_profile(): DEBUG: Calling os_read_agent_profile().\n' '2022/02/02 21:11:53 wazuh-syscheckd[8523] agent_op.c:227 at ' 'os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, ' 'debian10]\n' '2022/02/02 21:11:53 wazuh-syscheckd[8523] config.c:375 at ' 'ReadConfig(): DEBUG: agent_config element does not have any ' 'attributes.\n' '2022/02/02 21:11:53 rootcheck[8523] rootcheck.c:202 at ' 'rootcheck_init(): INFO: Rootcheck disabled.', 'stderr_lines': ['2022/02/02 21:11:50 wazuh-syscheckd[8487] debug_op.c:70 at ' '_log(): DEBUG: Logging module auto-initialized', '2022/02/02 21:11:50 wazuh-syscheckd[8487] config.c:87 at ' 'Read_Syscheck_Config(): DEBUG: (6287): Reading ' "configuration file: 'etc/ossec.conf'", '2022/02/02 21:11:50 wazuh-syscheckd[8487] ' 'syscheck-config.c:1218 at read_attr(): DEBUG: Could not ' "check the real path of '/testdir2' due to [(2)-(No such " 'file or directory)].', '2022/02/02 21:11:50 wazuh-syscheckd[8487] ' 'syscheck-config.c:1218 at read_attr(): DEBUG: Could not ' "check the real path of '/testdir3' due to [(2)-(No such " 'file or directory)].', '2022/02/02 21:11:50 wazuh-syscheckd[8487] ' 'syscheck-config.c:2520 at process_option_regex(): DEBUG: ' 'Found ignore regex node ^/proc', '2022/02/02 21:11:50 wazuh-syscheckd[8487] ' 'syscheck-config.c:2527 at process_option_regex(): DEBUG: ' 'Found ignore regex node ^/proc OK?', '2022/02/02 21:11:50 wazuh-syscheckd[8487] ' 'syscheck-config.c:2528 at process_option_regex(): DEBUG: ' 'Found ignore regex size 0', '2022/02/02 21:11:50 wazuh-syscheckd[8487] ' 'syscheck-config.c:2520 at process_option_regex(): DEBUG: ' 'Found ignore regex node .log$|.swp$', '2022/02/02 21:11:50 wazuh-syscheckd[8487] ' 'syscheck-config.c:2527 at process_option_regex(): DEBUG: ' 'Found ignore regex node .log$|.swp$ OK?', '2022/02/02 21:11:50 wazuh-syscheckd[8487] ' 'syscheck-config.c:2528 at process_option_regex(): DEBUG: ' 'Found ignore regex size 1', '2022/02/02 21:11:50 wazuh-syscheckd[8487] config.c:95 at ' 'Read_Syscheck_Config(): DEBUG: (6208): Reading Client ' 'Configuration [etc/ossec.conf]', '2022/02/02 21:11:50 wazuh-syscheckd[8487] agent_op.c:208 at ' 'os_read_agent_profile(): DEBUG: Calling ' 'os_read_agent_profile().', '2022/02/02 21:11:50 wazuh-syscheckd[8487] agent_op.c:227 at ' 'os_read_agent_profile(): DEBUG: os_read_agent_profile() = ' '[debian, debian10]', '2022/02/02 21:11:50 wazuh-syscheckd[8487] config.c:375 at ' 'ReadConfig(): DEBUG: agent_config element does not have any ' 'attributes.', '2022/02/02 21:11:50 wazuh-syscheckd[8487] agent_op.c:208 at ' 'os_read_agent_profile(): DEBUG: Calling ' 'os_read_agent_profile().', '2022/02/02 21:11:50 wazuh-syscheckd[8487] agent_op.c:227 at ' 'os_read_agent_profile(): DEBUG: os_read_agent_profile() = ' '[debian, debian10]', '2022/02/02 21:11:50 wazuh-syscheckd[8487] config.c:375 at ' 'ReadConfig(): DEBUG: agent_config element does not have any ' 'attributes.', '2022/02/02 21:11:53 wazuh-syscheckd[8523] debug_op.c:70 at ' '_log(): DEBUG: Logging module auto-initialized', '2022/02/02 21:11:53 wazuh-syscheckd[8523] config.c:87 at ' 'Read_Syscheck_Config(): DEBUG: (6287): Reading ' "configuration file: 'etc/ossec.conf'", '2022/02/02 21:11:53 wazuh-syscheckd[8523] ' 'syscheck-config.c:1218 at read_attr(): DEBUG: Could not ' "check the real path of '/testdir2' due to [(2)-(No such " 'file or directory)].', '2022/02/02 21:11:53 wazuh-syscheckd[8523] ' 'syscheck-config.c:1218 at read_attr(): DEBUG: Could not ' "check the real path of '/testdir3' due to [(2)-(No such " 'file or directory)].', '2022/02/02 21:11:53 wazuh-syscheckd[8523] ' 'syscheck-config.c:2520 at process_option_regex(): DEBUG: ' 'Found ignore regex node ^/proc', '2022/02/02 21:11:53 wazuh-syscheckd[8523] ' 'syscheck-config.c:2527 at process_option_regex(): DEBUG: ' 'Found ignore regex node ^/proc OK?', '2022/02/02 21:11:53 wazuh-syscheckd[8523] ' 'syscheck-config.c:2528 at process_option_regex(): DEBUG: ' 'Found ignore regex size 0', '2022/02/02 21:11:53 wazuh-syscheckd[8523] ' 'syscheck-config.c:2520 at process_option_regex(): DEBUG: ' 'Found ignore regex node .log$|.swp$', '2022/02/02 21:11:53 wazuh-syscheckd[8523] ' 'syscheck-config.c:2527 at process_option_regex(): DEBUG: ' 'Found ignore regex node .log$|.swp$ OK?', '2022/02/02 21:11:53 wazuh-syscheckd[8523] ' 'syscheck-config.c:2528 at process_option_regex(): DEBUG: ' 'Found ignore regex size 1', '2022/02/02 21:11:53 wazuh-syscheckd[8523] config.c:95 at ' 'Read_Syscheck_Config(): DEBUG: (6208): Reading Client ' 'Configuration [etc/ossec.conf]', '2022/02/02 21:11:53 wazuh-syscheckd[8523] agent_op.c:208 at ' 'os_read_agent_profile(): DEBUG: Calling ' 'os_read_agent_profile().', '2022/02/02 21:11:53 wazuh-syscheckd[8523] agent_op.c:227 at ' 'os_read_agent_profile(): DEBUG: os_read_agent_profile() = ' '[debian, debian10]', '2022/02/02 21:11:53 wazuh-syscheckd[8523] config.c:375 at ' 'ReadConfig(): DEBUG: agent_config element does not have any ' 'attributes.', '2022/02/02 21:11:53 wazuh-syscheckd[8523] agent_op.c:208 at ' 'os_read_agent_profile(): DEBUG: Calling ' 'os_read_agent_profile().', '2022/02/02 21:11:53 wazuh-syscheckd[8523] agent_op.c:227 at ' 'os_read_agent_profile(): DEBUG: os_read_agent_profile() = ' '[debian, debian10]', '2022/02/02 21:11:53 wazuh-syscheckd[8523] config.c:375 at ' 'ReadConfig(): DEBUG: agent_config element does not have any ' 'attributes.', '2022/02/02 21:11:53 rootcheck[8523] rootcheck.c:202 at ' 'rootcheck_init(): INFO: Rootcheck disabled.'], 'stdout': 'Starting Wazuh v4.2.5...\n' 'Started wazuh-execd...\n' 'Started wazuh-agentd...\n' 'Started wazuh-syscheckd...\n' 'Started wazuh-logcollector...\n' 'Started wazuh-modulesd...\n' 'Completed.', 'stdout_lines': ['Starting Wazuh v4.2.5...', 'Started wazuh-execd...', 'Started wazuh-agentd...', 'Started wazuh-syscheckd...', 'Started wazuh-logcollector...', 'Started wazuh-modulesd...', 'Completed.']} DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:1006 Cleaning temporal files... DEBUG wazuh_testing:monitoring.py:995 Checking results... DEBUG wazuh_testing:monitoring.py:1001 Received from wazuh-agent1 the expected message: 2022/02/02 21:11:54 wazuh-syscheckd[8523] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. DEBUG testinfra:base.py:277 RUN CommandResult(command=b"ansible --tree /tmp/tmprm8e2p3b -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m command --args 'rm -rf testdir1' wazuh-agent1", exit_status=0, stdout=b'wazuh-agent1 | CHANGED | rc=0 >>\n\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('command', 'rm -rf testdir1', {'check': False, 'become': False}): {'changed': True, 'cmd': ['rm', '-rf', 'testdir1'], 'delta': '0:00:00.840932', 'end': '2022-02-02 21:12:04.064108', 'msg': '', 'rc': 0, 'start': '2022-02-02 21:12:03.223176', 'stderr': '', 'stderr_lines': [], 'stdout': '', 'stdout_lines': []}

------------------------------Captured stderr call------------------------------
2022-02-02 17:12:25,810 - wazuh_testing - DEBUG - Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-02 17:12:25,814 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-02 17:12:25,817 - wazuh_testing - DEBUG - Starting file composer for wazuh-agent1 and path: /var/ossec/logs/ossec.log. Composite file in /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-agent1_ossec.log.tmp 2022-02-02 17:12:25,818 - wazuh_testing - DEBUG - Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-02 17:12:25,819 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-agent1 and message: .*Sending integrity control message: (.+)$ 2022-02-02 17:12:25,820 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-02 17:12:25,821 - wazuh_testing - DEBUG - Starting file composer for wazuh-manager and path: /var/ossec/logs/ossec.log. Composite file in /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-manager_ossec.log.tmp 2022-02-02 17:12:25,823 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-manager and message: .*Agent 001 query: (.+) save2 2022-02-02 17:12:27,821 - wazuh_testing - DEBUG - 2022/02/02 21:11:41 wazuh-logcollector: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:12:27,821 - wazuh_testing - DEBUG - 2022/02/02 21:11:41 wazuh-syscheckd[7997] sig_op.c:49 at HandleSIG(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:12:27,822 - wazuh_testing - DEBUG - 2022/02/02 21:11:41 wazuh-agentd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:12:27,822 - wazuh_testing - DEBUG - 2022/02/02 21:11:41 wazuh-execd: INFO: (1314): Shutdown received. Deleting responses. 2022-02-02 17:12:27,822 - wazuh_testing - DEBUG - 2022/02/02 21:11:41 wazuh-execd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:12:27,822 - wazuh_testing - DEBUG - 2022/02/02 21:11:50 wazuh-syscheckd[8487] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-02 17:12:27,822 - wazuh_testing - DEBUG - 2022/02/02 21:11:50 wazuh-syscheckd[8487] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-02 17:12:27,823 - wazuh_testing - DEBUG - 2022/02/02 21:11:50 wazuh-syscheckd[8487] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-02 17:12:27,823 - wazuh_testing - DEBUG - 2022/02/02 21:11:50 wazuh-syscheckd[8487] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-02 17:12:27,823 - wazuh_testing - DEBUG - 2022/02/02 21:11:50 wazuh-syscheckd[8487] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-02 17:12:27,823 - wazuh_testing - DEBUG - 2022/02/02 21:11:50 wazuh-syscheckd[8487] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-02 17:12:27,823 - wazuh_testing - DEBUG - 2022/02/02 21:11:50 wazuh-syscheckd[8487] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-02 17:12:27,823 - wazuh_testing - DEBUG - 2022/02/02 21:11:50 wazuh-syscheckd[8487] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ 2022-02-02 17:12:27,823 - wazuh_testing - DEBUG - 2022/02/02 21:11:50 wazuh-syscheckd[8487] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ OK? 2022-02-02 17:12:27,824 - wazuh_testing - DEBUG - 2022/02/02 21:11:50 wazuh-syscheckd[8487] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-02 17:12:27,824 - wazuh_testing - DEBUG - 2022/02/02 21:11:50 wazuh-syscheckd[8487] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-02 17:12:27,824 - wazuh_testing - DEBUG - 2022/02/02 21:11:50 wazuh-syscheckd[8487] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-02 17:12:27,824 - wazuh_testing - DEBUG - 2022/02/02 21:11:50 wazuh-syscheckd[8487] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-02 17:12:27,824 - wazuh_testing - DEBUG - 2022/02/02 21:11:50 wazuh-syscheckd[8487] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-02 17:12:27,825 - wazuh_testing - DEBUG - 2022/02/02 21:11:50 wazuh-syscheckd[8487] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-02 17:12:27,825 - wazuh_testing - DEBUG - 2022/02/02 21:11:50 wazuh-syscheckd[8487] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-02 17:12:27,825 - wazuh_testing - DEBUG - 2022/02/02 21:11:50 wazuh-syscheckd[8487] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-02 17:12:27,826 - wazuh_testing - DEBUG - 2022/02/02 21:11:50 wazuh-execd: INFO: Started (pid: 8500). 2022-02-02 17:12:27,826 - wazuh_testing - DEBUG - 2022/02/02 21:11:51 wazuh-agentd: INFO: (1410): Reading authentication keys file. 2022-02-02 17:12:27,826 - wazuh_testing - DEBUG - 2022/02/02 21:11:34 wazuh-db[5374] wdb.c:918 at wdb_commit_old(): DEBUG: Agent 'tasks' database commited. Time: 0.054 ms. 2022-02-02 17:12:27,827 - wazuh_testing - DEBUG - 2022/02/02 21:11:51 wazuh-agentd: INFO: Using notify time: 10 and max time to reconnect: 60 2022-02-02 17:12:27,827 - wazuh_testing - DEBUG - 2022/02/02 21:11:36 wazuh-db[5374] wdb.c:918 at wdb_commit_old(): DEBUG: Agent '001' database commited. Time: 2.726 ms. 2022-02-02 17:12:27,827 - wazuh_testing - DEBUG - 2022/02/02 21:11:51 wazuh-agentd: INFO: Version detected -> Linux |wazuh-agent1 |5.13.0-27-generic |#29~20.04.1-Ubuntu SMP Fri Jan 14 00:32:30 UTC 2022 |x86_64 [Debian GNU/Linux|debian: 10 (buster)] - Wazuh v4.2.5 2022-02-02 17:12:27,828 - wazuh_testing - DEBUG - 2022/02/02 21:11:51 wazuh-agentd: INFO: Started (pid: 8511). 2022-02-02 17:12:27,828 - wazuh_testing - DEBUG - 2022/02/02 21:11:51 wazuh-agentd: INFO: Server IP Address: wazuh-manager/172.18.0.2 2022-02-02 17:12:27,828 - wazuh_testing - DEBUG - 2022/02/02 21:11:51 wazuh-agentd: INFO: Using AES as encryption method. 2022-02-02 17:12:27,828 - wazuh_testing - DEBUG - 2022/02/02 21:11:51 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.18.0.2:1514/tcp). 2022-02-02 17:12:27,828 - wazuh_testing - DEBUG - 2022/02/02 21:11:39 wazuh-db[5374] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.18.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.18.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.13.0-27-generic |#29~20.04.1-Ubuntu SMP Fri Jan 14 00:32:30 UTC 2022 |x86_64","os_arch":"x86_64"} 2022-02-02 17:12:27,829 - wazuh_testing - DEBUG - 2022/02/02 21:11:51 wazuh-agentd: INFO: (4102): Connected to the server (wazuh-manager/172.18.0.2:1514/tcp). 2022-02-02 17:12:27,829 - wazuh_testing - DEBUG - 2022/02/02 21:11:41 wazuh-db[5374] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-connection-status {"id":1,"connection_status":"disconnected","sync_status":"synced"} 2022-02-02 17:12:27,829 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-02 17:12:27,829 - wazuh_testing - DEBUG - 2022/02/02 21:11:41 wazuh-db[5374] main.c:290 at run_dealer(): DEBUG: New client connected (40). 2022-02-02 17:12:27,829 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-02 17:12:27,829 - wazuh_testing - DEBUG - 2022/02/02 21:11:41 wazuh-db[5374] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: get-labels 1 2022-02-02 17:12:27,830 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-02 17:12:27,830 - wazuh_testing - DEBUG - 2022/02/02 21:11:51 wazuh-db[5374] wdb.c:918 at wdb_commit_old(): DEBUG: Agent 'global' database commited. Time: 3.239 ms. 2022-02-02 17:12:27,830 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-02 17:12:27,830 - wazuh_testing - DEBUG - 2022/02/02 21:11:51 wazuh-db[5374] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-keepalive {"id":1,"connection_status":"pending","sync_status":"synced"} 2022-02-02 17:12:27,830 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-02 17:12:27,830 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-02 17:12:27,831 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-02 17:12:27,831 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ 2022-02-02 17:12:27,831 - wazuh_testing - DEBUG - 2022/02/02 21:11:56 wazuh-db[5374] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.18.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.18.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.13.0-27-generic |#29~20.04.1-Ubuntu SMP Fri Jan 14 00:32:30 UTC 2022 |x86_64","os_arch":"x86_64"} 2022-02-02 17:12:27,831 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ OK? 2022-02-02 17:12:27,831 - wazuh_testing - DEBUG - 2022/02/02 21:11:56 wazuh-db[5374] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1643832713 2022-02-02 17:12:27,831 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-02 17:12:27,832 - wazuh_testing - DEBUG - 2022/02/02 21:11:56 wazuh-db[5374] main.c:290 at run_dealer(): DEBUG: New client connected (41). 2022-02-02 17:12:27,832 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-02 17:12:27,832 - wazuh_testing - DEBUG - 2022/02/02 21:11:56 wazuh-db[5374] main.c:290 at run_dealer(): DEBUG: New client connected (42). 2022-02-02 17:12:27,832 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-02 17:12:27,832 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-02 17:12:27,832 - wazuh_testing - DEBUG - 2022/02/02 21:11:56 wazuh-db[5374] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update end_scan 1643832714 2022-02-02 17:12:27,832 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-02 17:12:27,833 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-02 17:12:27,833 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-02 17:12:27,833 - wazuh_testing - DEBUG - 2022/02/02 21:11:56 wazuh-db[5374] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_global {"id":1643832714,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"f6ee106c9b45dc5a0925ca87946152c4f8414a4b"} 2022-02-02 17:12:27,833 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-02 17:12:27,833 - wazuh_testing - DEBUG - 2022/02/02 21:11:56 wazuh-db[5374] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 1.836 ms. 2022-02-02 17:12:27,833 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 rootcheck[8523] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled. 2022-02-02 17:12:27,834 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:12:27,834 - wazuh_testing - DEBUG - 2022/02/02 21:11:56 wazuh-db[5374] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643832714,"version":2,"begin":"/bin/bash","end":"/sbin/ctrlaltdel","tail":"/sbin/debugfs","checksum":"feb60a0fa04532d7be172177aefd751f47716ee5"} 2022-02-02 17:12:27,834 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] syscom.c:123 at syscom_main(): DEBUG: (6284): Local requests thread ready. 2022-02-02 17:12:27,835 - wazuh_testing - DEBUG - 2022/02/02 21:11:56 wazuh-db[5374] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643832714,"version":2,"begin":"/sbin/debugfs","end":"/usr/sbin/zic","checksum":"c445c56b2356e9e1eb2f655328f97424f75a4d35"} 2022-02-02 17:12:27,835 - wazuh_testing - DEBUG - 2022/02/02 21:11:56 wazuh-db[5374] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.605 ms. 2022-02-02 17:12:27,835 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] mq_op.c:47 at StartMQ(): DEBUG: Connected succesfully to 'queue/sockets/queue' after 0 attempts 2022-02-02 17:12:27,835 - wazuh_testing - DEBUG - 2022/02/02 21:11:56 wazuh-db[5374] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.551 ms. 2022-02-02 17:12:27,835 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] mq_op.c:48 at StartMQ(): DEBUG: (unix_domain) Maximum send buffer set to: '212992'. 2022-02-02 17:12:27,835 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] main.c:185 at main(): INFO: Started (pid: 8525). 2022-02-02 17:12:27,836 - wazuh_testing - DEBUG - 2022/02/02 21:11:56 wazuh-db[5374] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643832714,"version":2,"begin":"/sbin/debugfs","end":"/usr/bin/pdb","tail":"/usr/bin/pdb2","checksum":"97c0fd41097f7034783f7cea3f4d94b49a1a1472"} 2022-02-02 17:12:27,836 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] main.c:193 at main(): INFO: (6003): Monitoring path: '/bin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:12:27,836 - wazuh_testing - DEBUG - 2022/02/02 21:11:56 wazuh-db[5374] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.452 ms. 2022-02-02 17:12:27,836 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] main.c:193 at main(): INFO: (6003): Monitoring path: '/boot', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:12:27,836 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] main.c:193 at main(): INFO: (6003): Monitoring path: '/etc', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:12:27,836 - wazuh_testing - DEBUG - 2022/02/02 21:11:56 wazuh-db[5374] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643832714,"version":2,"begin":"/usr/bin/pdb2","end":"/usr/sbin/zic","checksum":"f28534dbcbabe145177a8e0c707d9da341991c1f"} 2022-02-02 17:12:27,837 - wazuh_testing - DEBUG - 2022/02/02 21:11:56 wazuh-db[5374] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.419 ms. 2022-02-02 17:12:27,837 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] main.c:193 at main(): INFO: (6003): Monitoring path: '/sbin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:12:27,837 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir1', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:12:27,837 - wazuh_testing - DEBUG - 2022/02/02 21:11:56 wazuh-db[5374] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643832714,"version":2,"begin":"/sbin/debugfs","end":"/usr/bin/dpkg-divert","tail":"/usr/bin/dpkg-genbuildinfo","checksum":"31a6629eaf81c84a6258e2bdc037801a47dd711a"} 2022-02-02 17:12:27,837 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir2', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | realtime'. 2022-02-02 17:12:27,838 - wazuh_testing - DEBUG - 2022/02/02 21:11:56 wazuh-db[5374] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643832714,"version":2,"begin":"/usr/bin/dpkg-genbuildinfo","end":"/usr/bin/pdb","checksum":"449176f3ac058628fcde8cdfbd7a7d029ac13e05"} 2022-02-02 17:12:27,838 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir3', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | whodata'. 2022-02-02 17:12:27,838 - wazuh_testing - DEBUG - 2022/02/02 21:11:56 wazuh-db[5374] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.270 ms. 2022-02-02 17:12:27,838 - wazuh_testing - DEBUG - 2022/02/02 21:11:56 wazuh-db[5374] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.398 ms. 2022-02-02 17:12:27,838 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/bin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:12:27,839 - wazuh_testing - DEBUG - 2022/02/02 21:11:56 wazuh-db[5374] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643832714,"version":2,"begin":"/sbin/debugfs","end":"/usr/bin/apt-extracttemplates","tail":"/usr/bin/apt-ftparchive","checksum":"397e91cc27008f97227c7802e3b64e1208a9cdc4"} 2022-02-02 17:12:27,839 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/sbin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:12:27,839 - wazuh_testing - DEBUG - 2022/02/02 21:11:56 wazuh-db[5374] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643832714,"version":2,"begin":"/usr/bin/apt-ftparchive","end":"/usr/bin/dpkg-divert","checksum":"84aaf018d588e1d99c714364b63c94e1d4eb4bf2"} 2022-02-02 17:12:27,839 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] main.c:215 at main(): DEBUG: (6357): Maximum disk quota size limit configured to '1048576 KB'. 2022-02-02 17:12:27,839 - wazuh_testing - DEBUG - 2022/02/02 21:11:56 wazuh-db[5374] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.207 ms. 2022-02-02 17:12:27,839 - wazuh_testing - DEBUG - 2022/02/02 21:11:56 wazuh-db[5374] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.133 ms. 2022-02-02 17:12:27,839 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mtab' 2022-02-02 17:12:27,840 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/hosts.deny' 2022-02-02 17:12:27,840 - wazuh_testing - DEBUG - 2022/02/02 21:11:56 wazuh-db[5374] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643832714,"version":2,"begin":"/sbin/debugfs","end":"/sbin/mkswap","tail":"/sbin/nameif","checksum":"7f903b5a93e8d84c29c51eef17b4981268b3b3e9"} 2022-02-02 17:12:27,840 - wazuh_testing - DEBUG - 2022/02/02 21:11:56 wazuh-db[5374] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.082 ms. 2022-02-02 17:12:27,840 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mail/statistics' 2022-02-02 17:12:27,840 - wazuh_testing - DEBUG - 2022/02/02 21:11:57 wazuh-db[5374] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643832714,"version":2,"begin":"/sbin/nameif","end":"/usr/bin/apt-extracttemplates","checksum":"41cf06daf926f8635fb6e027a052a0f7188c750e"} 2022-02-02 17:12:27,840 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random-seed' 2022-02-02 17:12:27,840 - wazuh_testing - DEBUG - 2022/02/02 21:11:57 wazuh-db[5374] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.156 ms. 2022-02-02 17:12:27,840 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random.seed' 2022-02-02 17:12:27,841 - wazuh_testing - DEBUG - 2022/02/02 21:11:57 wazuh-db[5374] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643832714,"version":2,"begin":"/sbin/nameif","end":"/sbin/sulogin","tail":"/sbin/swaplabel","checksum":"49ff201d0c750613490261cc0532e1c4d1912000"} 2022-02-02 17:12:27,841 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/adjtime' 2022-02-02 17:12:27,841 - wazuh_testing - DEBUG - 2022/02/02 21:11:57 wazuh-db[5374] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.159 ms. 2022-02-02 17:12:27,841 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/httpd/logs' 2022-02-02 17:12:27,841 - wazuh_testing - DEBUG - 2022/02/02 21:11:57 wazuh-db[5374] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643832714,"version":2,"begin":"/sbin/swaplabel","end":"/usr/bin/apt-extracttemplates","checksum":"26e3e29d25add4695308dc074f1110a832e8f494"} 2022-02-02 17:12:27,841 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/utmpx' 2022-02-02 17:12:27,841 - wazuh_testing - DEBUG - 2022/02/02 21:11:57 wazuh-db[5374] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.173 ms. 2022-02-02 17:12:27,842 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/wtmpx' 2022-02-02 17:12:27,842 - wazuh_testing - DEBUG - 2022/02/02 21:11:57 wazuh-db[5374] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643832714,"version":2,"begin":"/sbin/swaplabel","end":"/sbin/zramctl","tail":"/testdir1/testdir1.txt","checksum":"0dcfb498562418787b543857febcbed14ea706ac"} 2022-02-02 17:12:27,842 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/cups/certs' 2022-02-02 17:12:27,842 - wazuh_testing - DEBUG - 2022/02/02 21:11:57 wazuh-db[5374] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.070 ms. 2022-02-02 17:12:27,842 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/dumpdates' 2022-02-02 17:12:27,842 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/svc/volatile' 2022-02-02 17:12:27,842 - wazuh_testing - DEBUG - 2022/02/02 21:11:57 wazuh-db[5374] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643832714,"version":2,"begin":"/testdir1/testdir1.txt","end":"/usr/bin/apt-extracttemplates","checksum":"656373c3df78bc80ee689ea8bfa661ec11c263e2"} 2022-02-02 17:12:27,843 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/security' 2022-02-02 17:12:27,843 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/debug' 2022-02-02 17:12:27,843 - wazuh_testing - DEBUG - 2022/02/02 21:11:57 wazuh-db[5374] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.078 ms. 2022-02-02 17:12:27,844 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/dev/core' 2022-02-02 17:12:27,844 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '^/proc' 2022-02-02 17:12:27,844 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '.log$|.swp$' 2022-02-02 17:12:27,844 - wazuh_testing - DEBUG - 2022/02/02 21:11:57 wazuh-db[5374] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643832714,"version":2,"begin":"/testdir1/testdir1.txt","end":"/usr/bin/aclocal-1.16","tail":"/usr/bin/addpart","checksum":"d273bb8bfbc3af29bb13af33ef985eebdb6c5df3"} 2022-02-02 17:12:27,845 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] main.c:235 at main(): INFO: (6004): No diff for file: '/etc/ssl/private.key' 2022-02-02 17:12:27,845 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] main.c:245 at main(): INFO: (6016): Directory set for real time monitoring: '/testdir2'. 2022-02-02 17:12:27,845 - wazuh_testing - DEBUG - 2022/02/02 21:11:57 wazuh-db[5374] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.049 ms. 2022-02-02 17:12:27,845 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] syscheck_audit.c:243 at audit_init(): WARNING: (6924): Who-data engine cannot start because Auditd is not running. 2022-02-02 17:12:27,846 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] main.c:264 at main(): WARNING: (6913): Who-data engine could not start. Switching who-data to real-time. 2022-02-02 17:12:27,846 - wazuh_testing - DEBUG - 2022/02/02 21:11:57 wazuh-db[5374] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643832714,"version":2,"begin":"/usr/bin/addpart","end":"/usr/bin/apt-extracttemplates","checksum":"95a692828de0dea4b6ca328f569037eaa082ab85"} 2022-02-02 17:12:27,846 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] run_check.c:194 at start_daemon(): DEBUG: (6320): Setting process priority to: '10' 2022-02-02 17:12:27,846 - wazuh_testing - DEBUG - 2022/02/02 21:11:57 wazuh-db[5374] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.069 ms. 2022-02-02 17:12:27,847 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:12:27,847 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] run_check.c:229 at start_daemon(): INFO: (6000): Starting daemon... 2022-02-02 17:12:27,847 - wazuh_testing - DEBUG - 2022/02/02 21:11:57 wazuh-db[5374] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643832714,"version":2,"begin":"/testdir1/testdir1.txt","end":"/usr/bin/2to3-2.7","tail":"/usr/bin/[","checksum":"6e041a233f25c5cb7466e5738d1cd5a8c4bcea47"} 2022-02-02 17:12:27,848 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] run_check.c:232 at start_daemon(): INFO: (6010): File integrity monitoring scan frequency: 20 seconds 2022-02-02 17:12:27,848 - wazuh_testing - DEBUG - 2022/02/02 21:11:57 wazuh-db[5374] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.070 ms. 2022-02-02 17:12:27,848 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-02 17:12:27,848 - wazuh_testing - DEBUG - 2022/02/02 21:11:57 wazuh-db[5374] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643832714,"version":2,"begin":"/usr/bin/[","end":"/usr/bin/aclocal-1.16","checksum":"ab72adc86d2a1f2e36162f60b40bf10d71afc73a"} 2022-02-02 17:12:27,849 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1643832713}} 2022-02-02 17:12:27,849 - wazuh_testing - DEBUG - 2022/02/02 21:11:57 wazuh-db[5374] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.036 ms. 2022-02-02 17:12:27,849 - wazuh_testing - DEBUG - 2022/02/02 21:11:57 wazuh-db[5374] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643832714,"version":2,"begin":"/testdir1/testdir1.txt","end":"/testdir1/testdir1.txt","tail":"/testdir1/tmpp27cn4pk","checksum":"0c56d34fccb50b498508c3f84ed4131d89ab0916"} 2022-02-02 17:12:27,850 - wazuh_testing - DEBUG - 2022/02/02 21:11:57 wazuh-db[5374] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.039 ms. 2022-02-02 17:12:27,850 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-02 17:12:27,850 - wazuh_testing - DEBUG - 2022/02/02 21:11:58 wazuh-db[5374] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643832714,"version":2,"begin":"/testdir1/tmpp27cn4pk","end":"/usr/bin/2to3-2.7","checksum":"6925ba8fce3a72aa4da39784339aa68d4c6d6e59"} 2022-02-02 17:12:27,850 - wazuh_testing - DEBUG - 2022/02/02 21:11:58 wazuh-db[5374] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.105 ms. 2022-02-02 17:12:27,851 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-02 17:12:27,851 - wazuh_testing - DEBUG - 2022/02/02 21:11:58 wazuh-db[5374] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643832714,"version":2,"begin":"/testdir1/tmpp27cn4pk","end":"/testdir1/tmpp27cn4pk","tail":"/usr/bin/2to3-2.7","checksum":"734f08781983f0837bff9376b792347bc8ced3e6"} 2022-02-02 17:12:27,851 - wazuh_testing - DEBUG - 2022/02/02 21:11:58 wazuh-db[5374] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643832714,"version":2,"begin":"/usr/bin/2to3-2.7","end":"/usr/bin/2to3-2.7","checksum":"4288e49f7e69481516baa382943d5a652f7e069b"} 2022-02-02 17:12:27,852 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-02 17:12:27,852 - wazuh_testing - DEBUG - 2022/02/02 21:11:58 wazuh-db[5374] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.048 ms. 2022-02-02 17:12:27,852 - wazuh_testing - DEBUG - 2022/02/02 21:11:58 wazuh-db[5374] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file save2 {"path":"/testdir1/tmpp27cn4pk","timestamp":1643832713,"version":2,"attributes":{"type":"file","size":8,"perm":"rw-r--r--","uid":"0","gid":"0","user_name":"root","group_name":"root","inode":7239393,"mtime":1643832706,"hash_md5":"e770e54c4c42d3307c141c0c8948992a","hash_sha1":"9eab19985b11b15f91f936e463ea74f1dfe88e32","hash_sha256":"b1893f8d4b1596c20d6f83a784b2b0468c22fb83ce4ff2033ff86a37865d41d8","checksum":"db49f2d1b3adc18dedba735f999f31244a570111"}} 2022-02-02 17:12:27,852 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-02 17:12:27,853 - wazuh_testing - DEBUG - 2022/02/02 21:11:53 wazuh-syscheckd[8523] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-02 17:12:27,854 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-manager and message: .*Agent 001 query: (.+) save2 2022-02-02 17:12:27,854 - wazuh_testing - DEBUG - 2022/02/02 21:11:54 wazuh-syscheckd[8523] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-02 17:12:27,854 - wazuh_testing - DEBUG - 2022/02/02 21:11:54 wazuh-syscheckd[8523] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-02 17:12:27,855 - wazuh_testing - DEBUG - 2022/02/02 21:11:54 wazuh-syscheckd[8523] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1643832714}} 2022-02-02 17:12:27,855 - wazuh_testing - DEBUG - 2022/02/02 21:11:54 wazuh-syscheckd[8523] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.967 sec (0.965 clock sec) 2022-02-02 17:12:27,855 - wazuh_testing - DEBUG - 2022/02/02 21:11:54 wazuh-syscheckd[8523] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1622, path count: 1628 2022-02-02 17:12:27,856 - wazuh_testing - DEBUG - 2022/02/02 21:11:54 wazuh-syscheckd[8523] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:12:27,856 - wazuh_testing - DEBUG - 2022/02/02 21:11:54 wazuh-syscheckd[8523] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:12:27,856 - wazuh_testing - DEBUG - 2022/02/02 21:11:54 wazuh-syscheckd[8523] run_check.c:387 at fim_run_realtime(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-02 17:12:27,857 - wazuh_testing - DEBUG - 2022/02/02 21:11:54 wazuh-syscheckd[8523] run_check.c:543 at log_realtime_status(): INFO: (6012): Real-time file integrity monitoring started. 2022-02-02 17:12:27,857 - wazuh_testing - DEBUG - 2022/02/02 21:11:54 wazuh-syscheckd[8523] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:12:27,858 - wazuh_testing - DEBUG - 2022/02/02 21:11:54 wazuh-syscheckd[8523] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. 2022-02-02 17:12:27,859 - wazuh_testing - DEBUG - 2022/02/02 21:11:54 wazuh-syscheckd[8523] run_check.c:568 at symlink_checker_thread(): DEBUG: (6033): Starting symbolic link updater. Interval '600'. 2022-02-02 17:12:27,859 - wazuh_testing - DEBUG - 2022/02/02 21:11:54 wazuh-syscheckd[8523] run_check.c:82 at fim_send_sync_msg(): DEBUG: (6317): Sending integrity control message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1643832714,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"f6ee106c9b45dc5a0925ca87946152c4f8414a4b"}} 2022-02-02 17:12:27,860 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-agent1 and message: .*Sending integrity control message: (.+)$ 2022-02-02 17:12:28,830 - wazuh_testing - DEBUG - Cleaning temporal files... 2022-02-02 17:12:28,830 - wazuh_testing - DEBUG - Checking results... 2022-02-02 17:12:28,832 - wazuh_testing - DEBUG - Received from wazuh-manager the expected message: 2022/02/02 21:11:58 wazuh-db[5374] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file save2 {"path":"/testdir1/tmpp27cn4pk","timestamp":1643832713,"version":2,"attributes":{"type":"file","size":8,"perm":"rw-r--r--","uid":"0","gid":"0","user_name":"root","group_name":"root","inode":7239393,"mtime":1643832706,"hash_md5":"e770e54c4c42d3307c141c0c8948992a","hash_sha1":"9eab19985b11b15f91f936e463ea74f1dfe88e32","hash_sha256":"b1893f8d4b1596c20d6f83a784b2b0468c22fb83ce4ff2033ff86a37865d41d8","checksum":"db49f2d1b3adc18dedba735f999f31244a570111"}} 2022-02-02 17:12:28,832 - wazuh_testing - DEBUG - Received from wazuh-agent1 the expected message: 2022/02/02 21:11:54 wazuh-syscheckd[8523] run_check.c:82 at fim_send_sync_msg(): DEBUG: (6317): Sending integrity control message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1643832714,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"f6ee106c9b45dc5a0925ca87946152c4f8414a4b"}} 2022-02-02 17:13:13,721 - wazuh_testing - DEBUG - Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-02 17:13:13,725 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-02 17:13:13,725 - wazuh_testing - DEBUG - Starting file composer for wazuh-manager and path: /var/ossec/logs/ossec.log. Composite file in /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-manager_ossec.log.tmp 2022-02-02 17:13:13,728 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-manager and message: .*Initializing FIM Integrity Synchronization check. (.+)$ 2022-02-02 17:13:15,730 - wazuh_testing - DEBUG - 2022/02/02 21:12:34 wazuh-db[5374] wdb.c:918 at wdb_commit_old(): DEBUG: Agent '001' database commited. Time: 17.487 ms. 2022-02-02 17:13:15,731 - wazuh_testing - DEBUG - 2022/02/02 21:12:39 wazuh-db[5374] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.18.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.18.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.13.0-27-generic |#29~20.04.1-Ubuntu SMP Fri Jan 14 00:32:30 UTC 2022 |x86_64","os_arch":"x86_64"} 2022-02-02 17:13:15,731 - wazuh_testing - DEBUG - 2022/02/02 21:12:41 wazuh-modulesd:syscollector: INFO: Stop received for Syscollector. 2022-02-02 17:13:15,731 - wazuh_testing - DEBUG - 2022/02/02 21:12:41 wazuh-db[5374] main.c:352 at run_worker(): DEBUG: Client 17 disconnected. 2022-02-02 17:13:15,732 - wazuh_testing - DEBUG - 2022/02/02 21:12:41 wazuh-monitord: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:13:15,732 - wazuh_testing - DEBUG - 2022/02/02 21:12:42 wazuh-logcollector: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:13:15,732 - wazuh_testing - DEBUG - 2022/02/02 21:12:42 wazuh-remoted: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:13:15,732 - wazuh_testing - DEBUG - 2022/02/02 21:12:42 wazuh-db[5374] main.c:352 at run_worker(): DEBUG: Client 26 disconnected. 2022-02-02 17:13:15,732 - wazuh_testing - DEBUG - 2022/02/02 21:12:42 wazuh-db[5374] main.c:352 at run_worker(): DEBUG: Client 21 disconnected. 2022-02-02 17:13:15,732 - wazuh_testing - DEBUG - 2022/02/02 21:12:42 wazuh-db[5374] main.c:352 at run_worker(): DEBUG: Client 12 disconnected. 2022-02-02 17:13:15,732 - wazuh_testing - DEBUG - 2022/02/02 21:12:42 wazuh-db[5374] main.c:352 at run_worker(): DEBUG: Client 16 disconnected. 2022-02-02 17:13:15,733 - wazuh_testing - DEBUG - 2022/02/02 21:12:42 wazuh-syscheckd[5420] sig_op.c:49 at HandleSIG(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:13:15,733 - wazuh_testing - DEBUG - 2022/02/02 21:12:42 wazuh-analysisd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:13:15,733 - wazuh_testing - DEBUG - 2022/02/02 21:12:42 wazuh-db[5374] main.c:352 at run_worker(): DEBUG: Client 44 disconnected. 2022-02-02 17:13:15,733 - wazuh_testing - DEBUG - 2022/02/02 21:12:42 wazuh-db[5374] main.c:352 at run_worker(): DEBUG: Client 46 disconnected. 2022-02-02 17:13:15,733 - wazuh_testing - DEBUG - 2022/02/02 21:12:42 wazuh-db[5374] main.c:352 at run_worker(): DEBUG: Client 42 disconnected. 2022-02-02 17:13:15,733 - wazuh_testing - DEBUG - 2022/02/02 21:12:42 wazuh-db[5374] main.c:352 at run_worker(): DEBUG: Client 43 disconnected. 2022-02-02 17:13:15,734 - wazuh_testing - DEBUG - 2022/02/02 21:12:42 wazuh-db[5374] main.c:352 at run_worker(): DEBUG: Client 38 disconnected. 2022-02-02 17:13:15,734 - wazuh_testing - DEBUG - 2022/02/02 21:12:42 wazuh-db[5374] main.c:352 at run_worker(): DEBUG: Client 40 disconnected. 2022-02-02 17:13:15,734 - wazuh_testing - DEBUG - 2022/02/02 21:12:42 wazuh-db[5374] main.c:352 at run_worker(): DEBUG: Client 37 disconnected. 2022-02-02 17:13:15,734 - wazuh_testing - DEBUG - 2022/02/02 21:12:42 wazuh-db[5374] main.c:352 at run_worker(): DEBUG: Client 41 disconnected. 2022-02-02 17:13:15,735 - wazuh_testing - DEBUG - 2022/02/02 21:12:42 wazuh-db[5374] main.c:352 at run_worker(): DEBUG: Client 36 disconnected. 2022-02-02 17:13:15,735 - wazuh_testing - DEBUG - 2022/02/02 21:12:42 wazuh-db[5374] main.c:352 at run_worker(): DEBUG: Client 35 disconnected. 2022-02-02 17:13:15,735 - wazuh_testing - DEBUG - 2022/02/02 21:12:42 wazuh-db[5374] main.c:352 at run_worker(): DEBUG: Client 29 disconnected. 2022-02-02 17:13:15,735 - wazuh_testing - DEBUG - 2022/02/02 21:12:42 wazuh-db[5374] main.c:352 at run_worker(): DEBUG: Client 30 disconnected. 2022-02-02 17:13:15,735 - wazuh_testing - DEBUG - 2022/02/02 21:12:42 wazuh-db[5374] main.c:352 at run_worker(): DEBUG: Client 33 disconnected. 2022-02-02 17:13:15,736 - wazuh_testing - DEBUG - 2022/02/02 21:12:42 wazuh-db[5374] main.c:352 at run_worker(): DEBUG: Client 32 disconnected. 2022-02-02 17:13:15,736 - wazuh_testing - DEBUG - 2022/02/02 21:12:42 wazuh-db[5374] main.c:352 at run_worker(): DEBUG: Client 39 disconnected. 2022-02-02 17:13:15,736 - wazuh_testing - DEBUG - 2022/02/02 21:12:42 wazuh-db[5374] main.c:352 at run_worker(): DEBUG: Client 24 disconnected. 2022-02-02 17:13:15,736 - wazuh_testing - DEBUG - 2022/02/02 21:12:42 wazuh-db[5374] main.c:352 at run_worker(): DEBUG: Client 23 disconnected. 2022-02-02 17:13:15,736 - wazuh_testing - DEBUG - 2022/02/02 21:12:42 wazuh-db[5374] main.c:352 at run_worker(): DEBUG: Client 34 disconnected. 2022-02-02 17:13:15,737 - wazuh_testing - DEBUG - 2022/02/02 21:12:42 wazuh-db[5374] main.c:352 at run_worker(): DEBUG: Client 27 disconnected. 2022-02-02 17:13:15,737 - wazuh_testing - DEBUG - 2022/02/02 21:12:42 wazuh-db[5374] main.c:352 at run_worker(): DEBUG: Client 25 disconnected. 2022-02-02 17:13:15,737 - wazuh_testing - DEBUG - 2022/02/02 21:12:42 wazuh-db[5374] main.c:352 at run_worker(): DEBUG: Client 31 disconnected. 2022-02-02 17:13:15,737 - wazuh_testing - DEBUG - 2022/02/02 21:12:42 wazuh-db[5374] main.c:352 at run_worker(): DEBUG: Client 18 disconnected. 2022-02-02 17:13:15,738 - wazuh_testing - DEBUG - 2022/02/02 21:12:42 wazuh-db[5374] main.c:352 at run_worker(): DEBUG: Client 22 disconnected. 2022-02-02 17:13:15,738 - wazuh_testing - DEBUG - 2022/02/02 21:12:42 wazuh-db[5374] main.c:352 at run_worker(): DEBUG: Client 20 disconnected. 2022-02-02 17:13:15,738 - wazuh_testing - DEBUG - 2022/02/02 21:12:42 wazuh-db[5374] main.c:352 at run_worker(): DEBUG: Client 13 disconnected. 2022-02-02 17:13:15,738 - wazuh_testing - DEBUG - 2022/02/02 21:12:42 wazuh-db[5374] main.c:352 at run_worker(): DEBUG: Client 11 disconnected. 2022-02-02 17:13:15,739 - wazuh_testing - DEBUG - 2022/02/02 21:12:42 wazuh-db[5374] main.c:352 at run_worker(): DEBUG: Client 10 disconnected. 2022-02-02 17:13:15,739 - wazuh_testing - DEBUG - 2022/02/02 21:12:42 wazuh-db[5374] main.c:352 at run_worker(): DEBUG: Client 28 disconnected. 2022-02-02 17:13:15,739 - wazuh_testing - DEBUG - 2022/02/02 21:12:42 wazuh-db[5374] main.c:352 at run_worker(): DEBUG: Client 6 disconnected. 2022-02-02 17:13:15,739 - wazuh_testing - DEBUG - 2022/02/02 21:12:42 wazuh-execd: INFO: (1314): Shutdown received. Deleting responses. 2022-02-02 17:13:15,740 - wazuh_testing - DEBUG - 2022/02/02 21:12:42 wazuh-execd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:13:15,740 - wazuh_testing - DEBUG - 2022/02/02 21:12:42 wazuh-db[5374] main.c:468 at handler(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:13:15,740 - wazuh_testing - DEBUG - 2022/02/02 21:12:43 wazuh-db[5374] wdb.c:872 at wdb_close_all(): DEBUG: Closing all databases... 2022-02-02 17:13:15,741 - wazuh_testing - DEBUG - 2022/02/02 21:12:43 wazuh-db[5374] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent 001 2022-02-02 17:13:15,741 - wazuh_testing - DEBUG - 2022/02/02 21:12:43 wazuh-db[5374] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent 000 2022-02-02 17:13:15,741 - wazuh_testing - DEBUG - 2022/02/02 21:12:43 wazuh-db[5374] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent mitre 2022-02-02 17:13:15,741 - wazuh_testing - DEBUG - 2022/02/02 21:12:43 wazuh-db[5374] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent global 2022-02-02 17:13:15,742 - wazuh_testing - DEBUG - 2022/02/02 21:12:43 wazuh-db[5374] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent tasks 2022-02-02 17:13:15,742 - wazuh_testing - DEBUG - 2022/02/02 21:12:43 wazuh-db[5374] main.c:231 at main(): DEBUG: Template file removed again: queue/db/.template.db 2022-02-02 17:13:15,742 - wazuh_testing - DEBUG - 2022/02/02 21:12:43 wazuh-authd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:13:15,742 - wazuh_testing - DEBUG - 2022/02/02 21:12:43 wazuh-authd: INFO: Exiting... 2022-02-02 17:13:15,742 - wazuh_testing - DEBUG - 2022/02/02 21:12:58 wazuh-db[6257] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-02 17:13:15,742 - wazuh_testing - DEBUG - 2022/02/02 21:12:58 wazuh-db[6257] main.c:101 at main(): DEBUG: Wazuh home directory: /var/ossec 2022-02-02 17:13:15,743 - wazuh_testing - DEBUG - 2022/02/02 21:12:59 wazuh-syscheckd[6261] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-02 17:13:15,743 - wazuh_testing - DEBUG - 2022/02/02 21:12:59 wazuh-syscheckd[6261] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-02 17:13:15,743 - wazuh_testing - DEBUG - 2022/02/02 21:12:59 wazuh-syscheckd[6261] syscheck-config.c:122 at organize_syscheck_dirs(): DEBUG: No directory entries to organize in syscheck configuration. 2022-02-02 17:13:15,743 - wazuh_testing - DEBUG - 2022/02/02 21:13:06 wazuh-csyslogd: INFO: Remote syslog server not configured. Clean exit. 2022-02-02 17:13:15,744 - wazuh_testing - DEBUG - 2022/02/02 21:13:06 wazuh-dbd: INFO: Database not configured. Clean exit. 2022-02-02 17:13:15,744 - wazuh_testing - DEBUG - 2022/02/02 21:13:06 wazuh-integratord: INFO: Remote integrations not configured. Clean exit. 2022-02-02 17:13:15,744 - wazuh_testing - DEBUG - 2022/02/02 21:13:06 wazuh-agentlessd: INFO: Not configured. Exiting. 2022-02-02 17:13:15,744 - wazuh_testing - DEBUG - 2022/02/02 21:13:06 wazuh-authd: INFO: Started (pid: 6327). 2022-02-02 17:13:15,745 - wazuh_testing - DEBUG - 2022/02/02 21:13:06 wazuh-authd: INFO: Accepting connections on port 1515. No password required. 2022-02-02 17:13:15,745 - wazuh_testing - DEBUG - 2022/02/02 21:13:06 wazuh-authd: INFO: Setting network timeout to 1.000000 sec. 2022-02-02 17:13:15,746 - wazuh_testing - DEBUG - 2022/02/02 21:13:06 wazuh-db[6338] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-02 17:13:15,747 - wazuh_testing - DEBUG - 2022/02/02 21:13:06 wazuh-db[6338] main.c:101 at main(): DEBUG: Wazuh home directory: /var/ossec 2022-02-02 17:13:15,747 - wazuh_testing - DEBUG - 2022/02/02 21:13:06 wazuh-db[6338] main.c:122 at main(): DEBUG: Template file removed: /var/ossec/queue/db/.template.db 2022-02-02 17:13:15,748 - wazuh_testing - DEBUG - 2022/02/02 21:13:06 wazuh-db[6338] main.c:178 at main(): INFO: Started (pid: 6340). 2022-02-02 17:13:15,748 - wazuh_testing - DEBUG - 2022/02/02 21:13:07 wazuh-execd: INFO: (1350): Active response disabled. 2022-02-02 17:13:15,749 - wazuh_testing - DEBUG - 2022/02/02 21:13:07 wazuh-execd: INFO: Started (pid: 6363). 2022-02-02 17:13:15,749 - wazuh_testing - DEBUG - 2022/02/02 21:13:08 wazuh-syscheckd[6384] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-02 17:13:15,750 - wazuh_testing - DEBUG - 2022/02/02 21:13:08 wazuh-syscheckd[6384] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-02 17:13:15,750 - wazuh_testing - DEBUG - 2022/02/02 21:13:08 wazuh-syscheckd[6384] syscheck-config.c:122 at organize_syscheck_dirs(): DEBUG: No directory entries to organize in syscheck configuration. 2022-02-02 17:13:15,751 - wazuh_testing - DEBUG - 2022/02/02 21:13:08 wazuh-syscheckd[6384] main.c:118 at main(): INFO: (6678): No directory provided for syscheck to monitor. 2022-02-02 17:13:15,752 - wazuh_testing - DEBUG - 2022/02/02 21:13:08 wazuh-syscheckd[6384] main.c:136 at main(): INFO: (6001): File integrity monitoring disabled. 2022-02-02 17:13:15,753 - wazuh_testing - DEBUG - 2022/02/02 21:13:08 rootcheck[6384] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled. 2022-02-02 17:13:15,753 - wazuh_testing - DEBUG - 2022/02/02 21:13:08 wazuh-syscheckd[6384] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:13:15,754 - wazuh_testing - DEBUG - 2022/02/02 21:13:08 wazuh-syscheckd[6384] syscom.c:123 at syscom_main(): DEBUG: (6284): Local requests thread ready. 2022-02-02 17:13:15,755 - wazuh_testing - DEBUG - 2022/02/02 21:13:08 wazuh-syscheckd[6384] mq_op.c:47 at StartMQ(): DEBUG: Connected succesfully to 'queue/sockets/queue' after 0 attempts 2022-02-02 17:13:15,756 - wazuh_testing - DEBUG - 2022/02/02 21:13:08 wazuh-syscheckd[6384] mq_op.c:48 at StartMQ(): DEBUG: (unix_domain) Maximum send buffer set to: '212992'. 2022-02-02 17:13:15,756 - wazuh_testing - DEBUG - 2022/02/02 21:13:08 wazuh-syscheckd[6384] main.c:185 at main(): INFO: Started (pid: 6386). 2022-02-02 17:13:15,757 - wazuh_testing - DEBUG - 2022/02/02 21:13:08 wazuh-syscheckd[6384] main.c:215 at main(): DEBUG: (6357): Maximum disk quota size limit configured to '1048576 KB'. 2022-02-02 17:13:15,758 - wazuh_testing - DEBUG - 2022/02/02 21:13:08 wazuh-remoted: INFO: Started (pid: 6397). Listening on port 1514/TCP (secure). 2022-02-02 17:13:15,759 - wazuh_testing - DEBUG - 2022/02/02 21:13:08 wazuh-db[6338] main.c:290 at run_dealer(): DEBUG: New client connected (6). 2022-02-02 17:13:15,759 - wazuh_testing - DEBUG - 2022/02/02 21:13:08 wazuh-db[6338] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: reset-agents-connection synced 2022-02-02 17:13:15,760 - wazuh_testing - DEBUG - 2022/02/02 21:13:08 wazuh-db[6338] main.c:352 at run_worker(): DEBUG: Client 6 disconnected. 2022-02-02 17:13:15,760 - wazuh_testing - DEBUG - 2022/02/02 21:13:08 wazuh-remoted: INFO: (1410): Reading authentication keys file. 2022-02-02 17:13:15,760 - wazuh_testing - DEBUG - 2022/02/02 21:13:08 wazuh-syscheckd[6384] run_check.c:194 at start_daemon(): DEBUG: (6320): Setting process priority to: '10' 2022-02-02 17:13:15,761 - wazuh_testing - DEBUG - 2022/02/02 21:13:08 wazuh-syscheckd[6384] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:13:15,761 - wazuh_testing - DEBUG - 2022/02/02 21:13:08 wazuh-syscheckd[6384] run_check.c:229 at start_daemon(): INFO: (6000): Starting daemon... 2022-02-02 17:13:15,762 - wazuh_testing - DEBUG - 2022/02/02 21:13:08 wazuh-syscheckd[6384] run_check.c:232 at start_daemon(): INFO: (6010): File integrity monitoring scan frequency: 43200 seconds 2022-02-02 17:13:15,762 - wazuh_testing - DEBUG - 2022/02/02 21:13:08 wazuh-syscheckd[6384] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-02 17:13:15,763 - wazuh_testing - DEBUG - 2022/02/02 21:13:08 wazuh-syscheckd[6384] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1643832788}} 2022-02-02 17:13:15,763 - wazuh_testing - DEBUG - 2022/02/02 21:13:08 wazuh-syscheckd[6384] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-02 17:13:15,764 - wazuh_testing - DEBUG - 2022/02/02 21:13:08 wazuh-syscheckd[6384] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-02 17:13:15,764 - wazuh_testing - DEBUG - 2022/02/02 21:13:08 wazuh-syscheckd[6384] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-02 17:13:15,765 - wazuh_testing - DEBUG - 2022/02/02 21:13:08 wazuh-syscheckd[6384] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1643832788}} 2022-02-02 17:13:15,765 - wazuh_testing - DEBUG - 2022/02/02 21:13:08 wazuh-syscheckd[6384] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.000 sec (0.001 clock sec) 2022-02-02 17:13:15,766 - wazuh_testing - DEBUG - 2022/02/02 21:13:08 wazuh-syscheckd[6384] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 0, path count: 0 2022-02-02 17:13:15,766 - wazuh_testing - DEBUG - 2022/02/02 21:13:08 wazuh-syscheckd[6384] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:13:15,767 - wazuh_testing - DEBUG - 2022/02/02 21:13:08 wazuh-syscheckd[6384] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:13:15,767 - wazuh_testing - DEBUG - 2022/02/02 21:13:08 wazuh-syscheckd[6384] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:13:15,768 - wazuh_testing - DEBUG - 2022/02/02 21:13:08 wazuh-syscheckd[6384] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. 2022-02-02 17:13:15,769 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-manager and message: .*Initializing FIM Integrity Synchronization check. (.+)$ 2022-02-02 17:13:16,732 - wazuh_testing - DEBUG - Cleaning temporal files... 2022-02-02 17:13:16,733 - wazuh_testing - DEBUG - Checking results... 2022-02-02 17:13:16,734 - wazuh_testing - DEBUG - Received from wazuh-manager the expected message: 2022/02/02 21:13:08 wazuh-syscheckd[6384] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds.
-------------------------------Captured log call--------------------------------
DEBUG testinfra:base.py:277 RUN CommandResult(command=b"ansible --tree /tmp/tmpra_njzgf -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m command --args 'mkdir testdir1' wazuh-agent1", exit_status=0, stdout=b'wazuh-agent1 | CHANGED | rc=0 >>\n\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('command', 'mkdir testdir1', {'check': False, 'become': False}): {'changed': True, 'cmd': ['mkdir', 'testdir1'], 'delta': '0:00:00.811566', 'end': '2022-02-02 21:12:07.173916', 'msg': '', 'rc': 0, 'start': '2022-02-02 21:12:06.362350', 'stderr': '', 'stderr_lines': [], 'stdout': '', 'stdout_lines': []} DEBUG testinfra:base.py:277 RUN CommandResult(command=b"ansible --tree /tmp/tmpfpxqgwdn -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m command --args 'touch testdir1/testdir1.txt' wazuh-agent1", exit_status=0, stdout=b'wazuh-agent1 | CHANGED | rc=0 >>\n\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('command', 'touch testdir1/testdir1.txt', {'check': False, 'become': False}): {'changed': True, 'cmd': ['touch', 'testdir1/testdir1.txt'], 'delta': '0:00:00.716907', 'end': '2022-02-02 21:12:10.211481', 'msg': '', 'rc': 0, 'start': '2022-02-02 21:12:09.494574', 'stderr': '', 'stderr_lines': [], 'stdout': '', 'stdout_lines': []} DEBUG testinfra:base.py:277 RUN CommandResult(command=b"ansible --tree /tmp/tmps2i3l78h -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m service --args 'name=wazuh-agent state=restarted' wazuh-agent1", exit_status=0, stdout=b'wazuh-agent1 | CHANGED => {\n "changed": true,\n "name": "wazuh-agent",\n "state": "started"\n}\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('service', 'name=wazuh-agent state=restarted', {'check': False, 'become': False}): {'changed': True, 'name': 'wazuh-agent', 'state': 'started'} DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:1006 Cleaning temporal files... DEBUG wazuh_testing:monitoring.py:995 Checking results... DEBUG wazuh_testing:monitoring.py:1001 Received from wazuh-manager the expected message: 2022/02/02 21:11:58 wazuh-db[5374] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file save2 {"path":"/testdir1/tmpp27cn4pk","timestamp":1643832713,"version":2,"attributes":{"type":"file","size":8,"perm":"rw-r--r--","uid":"0","gid":"0","user_name":"root","group_name":"root","inode":7239393,"mtime":1643832706,"hash_md5":"e770e54c4c42d3307c141c0c8948992a","hash_sha1":"9eab19985b11b15f91f936e463ea74f1dfe88e32","hash_sha256":"b1893f8d4b1596c20d6f83a784b2b0468c22fb83ce4ff2033ff86a37865d41d8","checksum":"db49f2d1b3adc18dedba735f999f31244a570111"}} DEBUG wazuh_testing:monitoring.py:1001 Received from wazuh-agent1 the expected message: 2022/02/02 21:11:54 wazuh-syscheckd[8523] run_check.c:82 at fim_send_sync_msg(): DEBUG: (6317): Sending integrity control message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1643832714,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"f6ee106c9b45dc5a0925ca87946152c4f8414a4b"}} DEBUG testinfra:base.py:277 RUN CommandResult(command=b'ansible --tree /tmp/tmpuguyukng -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m copy --args \'dest=/var/ossec/logs/ossec.log content=\'"\'"\'\'"\'"\' force=yes\' wazuh-manager', exit_status=0, stdout=b'wazuh-manager | CHANGED => {\n "changed": true,\n "checksum": "da39a3ee5e6b4b0d3255bfef95601890afd80709",\n "dest": "/var/ossec/logs/ossec.log",\n "gid": 999,\n "group": "ossec",\n "md5sum": "d41d8cd98f00b204e9800998ecf8427e",\n "mode": "0660",\n "owner": "ossec",\n "size": 0,\n "src": "/root/.ansible/tmp/ansible-tmp-1643832749.9523346-79991-35056080347481/source",\n "state": "file",\n "uid": 999\n}\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('copy', "dest=/var/ossec/logs/ossec.log content='' force=yes", {'check': False, 'become': False}): {'changed': True, 'checksum': 'da39a3ee5e6b4b0d3255bfef95601890afd80709', 'dest': '/var/ossec/logs/ossec.log', 'gid': 999, 'group': 'ossec', 'md5sum': 'd41d8cd98f00b204e9800998ecf8427e', 'mode': '0660', 'owner': 'ossec', 'size': 0, 'src': '/root/.ansible/tmp/ansible-tmp-1643832749.9523346-79991-35056080347481/source', 'state': 'file', 'uid': 999} DEBUG testinfra:base.py:277 RUN CommandResult(command=b'ansible --tree /tmp/tmpu0oyfm2q -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m copy --args \'dest=/var/ossec/logs/ossec.log content=\'"\'"\'\'"\'"\' force=yes\' wazuh-agent1', exit_status=0, stdout=b'wazuh-agent1 | CHANGED => {\n "changed": true,\n "checksum": "da39a3ee5e6b4b0d3255bfef95601890afd80709",\n "dest": "/var/ossec/logs/ossec.log",\n "gid": 999,\n "group": "ossec",\n "md5sum": "d41d8cd98f00b204e9800998ecf8427e",\n "mode": "0660",\n "owner": "ossec",\n "size": 0,\n "src": "/root/.ansible/tmp/ansible-tmp-1643832754.776393-80381-278915219227511/source",\n "state": "file",\n "uid": 999\n}\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('copy', "dest=/var/ossec/logs/ossec.log content='' force=yes", {'check': False, 'become': False}): {'changed': True, 'checksum': 'da39a3ee5e6b4b0d3255bfef95601890afd80709', 'dest': '/var/ossec/logs/ossec.log', 'gid': 999, 'group': 'ossec', 'md5sum': 'd41d8cd98f00b204e9800998ecf8427e', 'mode': '0660', 'owner': 'ossec', 'size': 0, 'src': '/root/.ansible/tmp/ansible-tmp-1643832754.776393-80381-278915219227511/source', 'state': 'file', 'uid': 999} DEBUG testinfra:base.py:277 RUN CommandResult(command=b"ansible --tree /tmp/tmp8_4qglfk -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m command --args '/var/ossec/bin/wazuh-control stop' wazuh-manager", exit_status=0, stdout=b'wazuh-manager | CHANGED | rc=0 >>\nKilling wazuh-clusterd...\nKilling wazuh-modulesd...\nKilling wazuh-monitord...\nKilling wazuh-logcollector...\nKilling wazuh-remoted...\nKilling wazuh-syscheckd...\nKilling wazuh-analysisd...\nwazuh-maild not running...\nKilling wazuh-execd...\nKilling wazuh-db...\nKilling wazuh-authd...\nwazuh-agentlessd not running...\nwazuh-integratord not running...\nwazuh-dbd not running...\nwazuh-csyslogd not running...\nKilling wazuh-apid...\nWazuh v4.2.5 Stopped\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('command', '/var/ossec/bin/wazuh-control stop', {'check': False, 'become': False}): {'changed': True, 'cmd': ['/var/ossec/bin/wazuh-control', 'stop'], 'delta': '0:00:03.401186', 'end': '2022-02-02 21:12:44.305354', 'msg': '', 'rc': 0, 'start': '2022-02-02 21:12:40.904168', 'stderr': '', 'stderr_lines': [], 'stdout': 'Killing wazuh-clusterd...\n' 'Killing wazuh-modulesd...\n' 'Killing wazuh-monitord...\n' 'Killing wazuh-logcollector...\n' 'Killing wazuh-remoted...\n' 'Killing wazuh-syscheckd...\n' 'Killing wazuh-analysisd...\n' 'wazuh-maild not running...\n' 'Killing wazuh-execd...\n' 'Killing wazuh-db...\n' 'Killing wazuh-authd...\n' 'wazuh-agentlessd not running...\n' 'wazuh-integratord not running...\n' 'wazuh-dbd not running...\n' 'wazuh-csyslogd not running...\n' 'Killing wazuh-apid...\n' 'Wazuh v4.2.5 Stopped', 'stdout_lines': ['Killing wazuh-clusterd...', 'Killing wazuh-modulesd...', 'Killing wazuh-monitord...', 'Killing wazuh-logcollector...', 'Killing wazuh-remoted...', 'Killing wazuh-syscheckd...', 'Killing wazuh-analysisd...', 'wazuh-maild not running...', 'Killing wazuh-execd...', 'Killing wazuh-db...', 'Killing wazuh-authd...', 'wazuh-agentlessd not running...', 'wazuh-integratord not running...', 'wazuh-dbd not running...', 'wazuh-csyslogd not running...', 'Killing wazuh-apid...', 'Wazuh v4.2.5 Stopped']} DEBUG testinfra:base.py:277 RUN CommandResult(command=b"ansible --tree /tmp/tmplk0qi0tr -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m copy --args 'src=/tmp/tmp9og3znp5 dest=testdir1 owner=wazuh group=wazuh mode=0775' wazuh-agent1", exit_status=2, stdout=b'wazuh-agent1 | FAILED! => {\n "changed": false,\n "checksum": "9eab19985b11b15f91f936e463ea74f1dfe88e32",\n "gid": 0,\n "group": "root",\n "mode": "0644",\n "msg": "chown failed: failed to look up user wazuh",\n "owner": "root",\n "path": "./testdir1/tmp9og3znp5",\n "size": 8,\n "state": "file",\n "uid": 0\n}\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('copy', 'src=/tmp/tmp9og3znp5 dest=testdir1 owner=wazuh group=wazuh mode=0775', {'check': False, 'become': False}): {'changed': False, 'checksum': '9eab19985b11b15f91f936e463ea74f1dfe88e32', 'gid': 0, 'group': 'root', 'mode': '0644', 'msg': 'chown failed: failed to look up user wazuh', 'owner': 'root', 'path': './testdir1/tmp9og3znp5', 'size': 8, 'state': 'file', 'uid': 0} DEBUG testinfra:base.py:277 RUN CommandResult(command=b"ansible --tree /tmp/tmpdrgnv6ey -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m command --args '/var/ossec/bin/wazuh-control start' wazuh-manager", exit_status=0, stdout=b"wazuh-manager | CHANGED | rc=0 >>\nStarting Wazuh v4.2.5...\nStarted wazuh-apid...\nStarted wazuh-csyslogd...\nStarted wazuh-dbd...\nStarted wazuh-integratord...\nStarted wazuh-agentlessd...\nStarted wazuh-authd...\nStarted wazuh-db...\nStarted wazuh-execd...\nStarted wazuh-analysisd...\nStarted wazuh-syscheckd...\nStarted wazuh-remoted...\nStarted wazuh-logcollector...\nStarted wazuh-monitord...\nStarted wazuh-modulesd...\nStarted wazuh-clusterd...\nCompleted.2022/02/02 21:12:58 wazuh-db[6257] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized\n2022/02/02 21:12:58 wazuh-db[6257] main.c:101 at main(): DEBUG: Wazuh home directory: /var/ossec\n2022/02/02 21:12:59 wazuh-syscheckd[6261] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized\n2022/02/02 21:12:59 wazuh-syscheckd[6261] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf'\n2022/02/02 21:12:59 wazuh-syscheckd[6261] syscheck-config.c:122 at organize_syscheck_dirs(): DEBUG: No directory entries to organize in syscheck configuration.\n2022/02/02 21:13:06 wazuh-integratord: INFO: Remote integrations not configured. Clean exit.\n2022/02/02 21:13:06 wazuh-db[6338] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized\n2022/02/02 21:13:06 wazuh-db[6338] main.c:101 at main(): DEBUG: Wazuh home directory: /var/ossec\n2022/02/02 21:13:08 wazuh-syscheckd[6384] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized\n2022/02/02 21:13:08 wazuh-syscheckd[6384] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf'\n2022/02/02 21:13:08 wazuh-syscheckd[6384] syscheck-config.c:122 at organize_syscheck_dirs(): DEBUG: No directory entries to organize in syscheck configuration.\n2022/02/02 21:13:08 wazuh-syscheckd[6384] main.c:118 at main(): INFO: (6678): No directory provided for syscheck to monitor.\n2022/02/02 21:13:08 wazuh-syscheckd[6384] main.c:136 at main(): INFO: (6001): File integrity monitoring disabled.\n2022/02/02 21:13:08 rootcheck[6384] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled.\n", stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('command', '/var/ossec/bin/wazuh-control start', {'check': False, 'become': False}): {'changed': True, 'cmd': ['/var/ossec/bin/wazuh-control', 'start'], 'delta': '0:00:21.360257', 'end': '2022-02-02 21:13:13.439353', 'msg': '', 'rc': 0, 'start': '2022-02-02 21:12:52.079096', 'stderr': '2022/02/02 21:12:58 wazuh-db[6257] debug_op.c:70 at _log(): DEBUG: ' 'Logging module auto-initialized\n' '2022/02/02 21:12:58 wazuh-db[6257] main.c:101 at main(): DEBUG: ' 'Wazuh home directory: /var/ossec\n' '2022/02/02 21:12:59 wazuh-syscheckd[6261] debug_op.c:70 at _log(): ' 'DEBUG: Logging module auto-initialized\n' '2022/02/02 21:12:59 wazuh-syscheckd[6261] config.c:87 at ' 'Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: ' "'etc/ossec.conf'\n" '2022/02/02 21:12:59 wazuh-syscheckd[6261] syscheck-config.c:122 at ' 'organize_syscheck_dirs(): DEBUG: No directory entries to organize ' 'in syscheck configuration.\n' '2022/02/02 21:13:06 wazuh-integratord: INFO: Remote integrations ' 'not configured. Clean exit.\n' '2022/02/02 21:13:06 wazuh-db[6338] debug_op.c:70 at _log(): DEBUG: ' 'Logging module auto-initialized\n' '2022/02/02 21:13:06 wazuh-db[6338] main.c:101 at main(): DEBUG: ' 'Wazuh home directory: /var/ossec\n' '2022/02/02 21:13:08 wazuh-syscheckd[6384] debug_op.c:70 at _log(): ' 'DEBUG: Logging module auto-initialized\n' '2022/02/02 21:13:08 wazuh-syscheckd[6384] config.c:87 at ' 'Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: ' "'etc/ossec.conf'\n" '2022/02/02 21:13:08 wazuh-syscheckd[6384] syscheck-config.c:122 at ' 'organize_syscheck_dirs(): DEBUG: No directory entries to organize ' 'in syscheck configuration.\n' '2022/02/02 21:13:08 wazuh-syscheckd[6384] main.c:118 at main(): ' 'INFO: (6678): No directory provided for syscheck to monitor.\n' '2022/02/02 21:13:08 wazuh-syscheckd[6384] main.c:136 at main(): ' 'INFO: (6001): File integrity monitoring disabled.\n' '2022/02/02 21:13:08 rootcheck[6384] rootcheck.c:202 at ' 'rootcheck_init(): INFO: Rootcheck disabled.', 'stderr_lines': ['2022/02/02 21:12:58 wazuh-db[6257] debug_op.c:70 at _log(): ' 'DEBUG: Logging module auto-initialized', '2022/02/02 21:12:58 wazuh-db[6257] main.c:101 at main(): ' 'DEBUG: Wazuh home directory: /var/ossec', '2022/02/02 21:12:59 wazuh-syscheckd[6261] debug_op.c:70 at ' '_log(): DEBUG: Logging module auto-initialized', '2022/02/02 21:12:59 wazuh-syscheckd[6261] config.c:87 at ' 'Read_Syscheck_Config(): DEBUG: (6287): Reading ' "configuration file: 'etc/ossec.conf'", '2022/02/02 21:12:59 wazuh-syscheckd[6261] ' 'syscheck-config.c:122 at organize_syscheck_dirs(): DEBUG: ' 'No directory entries to organize in syscheck configuration.', '2022/02/02 21:13:06 wazuh-integratord: INFO: Remote ' 'integrations not configured. Clean exit.', '2022/02/02 21:13:06 wazuh-db[6338] debug_op.c:70 at _log(): ' 'DEBUG: Logging module auto-initialized', '2022/02/02 21:13:06 wazuh-db[6338] main.c:101 at main(): ' 'DEBUG: Wazuh home directory: /var/ossec', '2022/02/02 21:13:08 wazuh-syscheckd[6384] debug_op.c:70 at ' '_log(): DEBUG: Logging module auto-initialized', '2022/02/02 21:13:08 wazuh-syscheckd[6384] config.c:87 at ' 'Read_Syscheck_Config(): DEBUG: (6287): Reading ' "configuration file: 'etc/ossec.conf'", '2022/02/02 21:13:08 wazuh-syscheckd[6384] ' 'syscheck-config.c:122 at organize_syscheck_dirs(): DEBUG: ' 'No directory entries to organize in syscheck configuration.', '2022/02/02 21:13:08 wazuh-syscheckd[6384] main.c:118 at ' 'main(): INFO: (6678): No directory provided for syscheck to ' 'monitor.', '2022/02/02 21:13:08 wazuh-syscheckd[6384] main.c:136 at ' 'main(): INFO: (6001): File integrity monitoring disabled.', '2022/02/02 21:13:08 rootcheck[6384] rootcheck.c:202 at ' 'rootcheck_init(): INFO: Rootcheck disabled.'], 'stdout': 'Starting Wazuh v4.2.5...\n' 'Started wazuh-apid...\n' 'Started wazuh-csyslogd...\n' 'Started wazuh-dbd...\n' 'Started wazuh-integratord...\n' 'Started wazuh-agentlessd...\n' 'Started wazuh-authd...\n' 'Started wazuh-db...\n' 'Started wazuh-execd...\n' 'Started wazuh-analysisd...\n' 'Started wazuh-syscheckd...\n' 'Started wazuh-remoted...\n' 'Started wazuh-logcollector...\n' 'Started wazuh-monitord...\n' 'Started wazuh-modulesd...\n' 'Started wazuh-clusterd...\n' 'Completed.', 'stdout_lines': ['Starting Wazuh v4.2.5...', 'Started wazuh-apid...', 'Started wazuh-csyslogd...', 'Started wazuh-dbd...', 'Started wazuh-integratord...', 'Started wazuh-agentlessd...', 'Started wazuh-authd...', 'Started wazuh-db...', 'Started wazuh-execd...', 'Started wazuh-analysisd...', 'Started wazuh-syscheckd...', 'Started wazuh-remoted...', 'Started wazuh-logcollector...', 'Started wazuh-monitord...', 'Started wazuh-modulesd...', 'Started wazuh-clusterd...', 'Completed.']} DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:1006 Cleaning temporal files... DEBUG wazuh_testing:monitoring.py:995 Checking results... DEBUG wazuh_testing:monitoring.py:1001 Received from wazuh-manager the expected message: 2022/02/02 21:13:08 wazuh-syscheckd[6384] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. DEBUG testinfra:base.py:277 RUN CommandResult(command=b"ansible --tree /tmp/tmph3v8q5pc -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m command --args 'rm -rf testdir1' wazuh-agent1", exit_status=0, stdout=b'wazuh-agent1 | CHANGED | rc=0 >>\n\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('command', 'rm -rf testdir1', {'check': False, 'become': False}): {'changed': True, 'cmd': ['rm', '-rf', 'testdir1'], 'delta': '0:00:01.755470', 'end': '2022-02-02 21:13:20.585493', 'msg': '', 'rc': 0, 'start': '2022-02-02 21:13:18.830023', 'stderr': '', 'stderr_lines': [], 'stdout': '', 'stdout_lines': []}

------------------------------Captured stderr call------------------------------
2022-02-02 17:13:40,346 - wazuh_testing - DEBUG - Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-02 17:13:40,349 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-02 17:13:40,350 - wazuh_testing - DEBUG - Starting file composer for wazuh-agent1 and path: /var/ossec/logs/ossec.log. Composite file in /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-agent1_ossec.log.tmp 2022-02-02 17:13:40,352 - wazuh_testing - DEBUG - Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-02 17:13:40,355 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-agent1 and message: .*Sending integrity control message: (.+)$ 2022-02-02 17:13:40,356 - wazuh_testing - DEBUG - Starting file composer for wazuh-manager and path: /var/ossec/logs/ossec.log. Composite file in /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-manager_ossec.log.tmp 2022-02-02 17:13:40,356 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-02 17:13:40,358 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-manager and message: .*Agent 001 query: (.+) save2 2022-02-02 17:13:42,357 - wazuh_testing - DEBUG - 2022/02/02 21:12:42 wazuh-agentd: ERROR: (1137): Lost connection with manager. Setting lock. 2022-02-02 17:13:42,358 - wazuh_testing - DEBUG - 2022/02/02 21:12:42 wazuh-agentd: INFO: Closing connection to server (wazuh-manager/172.18.0.2:1514/tcp). 2022-02-02 17:13:42,358 - wazuh_testing - DEBUG - 2022/02/02 21:12:42 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.18.0.2:1514/tcp). 2022-02-02 17:13:42,358 - wazuh_testing - DEBUG - 2022/02/02 21:12:42 wazuh-agentd: ERROR: (1216): Unable to connect to '172.18.0.2:1514/tcp': 'Connection refused'. 2022-02-02 17:13:42,358 - wazuh_testing - DEBUG - 2022/02/02 21:12:42 wazuh-syscheckd[9022] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-02 17:13:42,359 - wazuh_testing - DEBUG - 2022/02/02 21:12:42 wazuh-syscheckd[9022] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1643832762}} 2022-02-02 17:13:42,359 - wazuh_testing - DEBUG - 2022/02/02 21:12:42 wazuh-syscheckd[9022] wait_op.c:101 at os_wait(): WARNING: Process locked due to agent is offline. Waiting for connection... 2022-02-02 17:13:42,359 - wazuh_testing - DEBUG - 2022/02/02 21:12:52 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.18.0.2:1514/tcp). 2022-02-02 17:13:42,360 - wazuh_testing - DEBUG - 2022/02/02 21:12:52 wazuh-agentd: ERROR: (1216): Unable to connect to '172.18.0.2:1514/tcp': 'Connection refused'. 2022-02-02 17:13:42,360 - wazuh_testing - DEBUG - 2022/02/02 21:13:02 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.18.0.2:1514/tcp). 2022-02-02 17:13:42,360 - wazuh_testing - DEBUG - 2022/02/02 21:13:02 wazuh-agentd: ERROR: (1216): Unable to connect to '172.18.0.2:1514/tcp': 'Connection refused'. 2022-02-02 17:13:42,360 - wazuh_testing - DEBUG - 2022/02/02 21:13:12 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.18.0.2:1514/tcp). 2022-02-02 17:13:42,361 - wazuh_testing - DEBUG - 2022/02/02 21:13:12 wazuh-agentd: INFO: (4102): Connected to the server (wazuh-manager/172.18.0.2:1514/tcp). 2022-02-02 17:13:42,361 - wazuh_testing - DEBUG - 2022/02/02 21:12:34 wazuh-db[5374] wdb.c:918 at wdb_commit_old(): DEBUG: Agent '001' database commited. Time: 17.487 ms. 2022-02-02 17:13:42,361 - wazuh_testing - DEBUG - 2022/02/02 21:13:12 wazuh-agentd: INFO: Server responded. Releasing lock. 2022-02-02 17:13:42,361 - wazuh_testing - DEBUG - 2022/02/02 21:13:12 wazuh-syscheckd[9022] wait_op.c:116 at os_wait(): INFO: Agent is now online. Process unlocked, continuing... 2022-02-02 17:13:42,361 - wazuh_testing - DEBUG - 2022/02/02 21:13:12 wazuh-syscheckd[9022] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-02 17:13:42,362 - wazuh_testing - DEBUG - 2022/02/02 21:13:12 wazuh-syscheckd[9022] fim_db.c:436 at fim_db_check_transaction(): DEBUG: Database transaction completed. 2022-02-02 17:13:42,362 - wazuh_testing - DEBUG - 2022/02/02 21:13:12 wazuh-syscheckd[9022] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-02 17:13:42,362 - wazuh_testing - DEBUG - 2022/02/02 21:12:39 wazuh-db[5374] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.18.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.18.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.13.0-27-generic |#29~20.04.1-Ubuntu SMP Fri Jan 14 00:32:30 UTC 2022 |x86_64","os_arch":"x86_64"} 2022-02-02 17:13:42,362 - wazuh_testing - DEBUG - 2022/02/02 21:13:12 wazuh-syscheckd[9022] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-02 17:13:42,362 - wazuh_testing - DEBUG - 2022/02/02 21:12:41 wazuh-modulesd:syscollector: INFO: Stop received for Syscollector. 2022-02-02 17:13:42,363 - wazuh_testing - DEBUG - 2022/02/02 21:12:41 wazuh-db[5374] main.c:352 at run_worker(): DEBUG: Client 17 disconnected. 2022-02-02 17:13:42,363 - wazuh_testing - DEBUG - 2022/02/02 21:13:13 wazuh-syscheckd[9022] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"event","data":{"path":"/testdir1/tmp9og3znp5","version":2,"mode":"scheduled","type":"added","timestamp":1643832793,"attributes":{"type":"file","size":8,"perm":"rw-r--r--","uid":"0","gid":"0","user_name":"root","group_name":"root","inode":7239367,"mtime":1643832768,"hash_md5":"e770e54c4c42d3307c141c0c8948992a","hash_sha1":"9eab19985b11b15f91f936e463ea74f1dfe88e32","hash_sha256":"b1893f8d4b1596c20d6f83a784b2b0468c22fb83ce4ff2033ff86a37865d41d8","checksum":"1e366f6f1e86c31955a907fa28d0a5d8ec541437"}}} 2022-02-02 17:13:42,363 - wazuh_testing - DEBUG - 2022/02/02 21:12:41 wazuh-monitord: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:13:42,363 - wazuh_testing - DEBUG - 2022/02/02 21:13:13 wazuh-syscheckd[9022] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-02 17:13:42,363 - wazuh_testing - DEBUG - 2022/02/02 21:12:42 wazuh-logcollector: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:13:42,364 - wazuh_testing - DEBUG - 2022/02/02 21:13:13 wazuh-syscheckd[9022] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-02 17:13:42,364 - wazuh_testing - DEBUG - 2022/02/02 21:12:42 wazuh-remoted: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:13:42,364 - wazuh_testing - DEBUG - 2022/02/02 21:13:14 wazuh-syscheckd[9022] fim_db.c:436 at fim_db_check_transaction(): DEBUG: Database transaction completed. 2022-02-02 17:13:42,364 - wazuh_testing - DEBUG - 2022/02/02 21:12:42 wazuh-db[5374] main.c:352 at run_worker(): DEBUG: Client 26 disconnected. 2022-02-02 17:13:42,364 - wazuh_testing - DEBUG - 2022/02/02 21:13:14 wazuh-syscheckd[9022] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-02 17:13:42,364 - wazuh_testing - DEBUG - 2022/02/02 21:12:42 wazuh-db[5374] main.c:352 at run_worker(): DEBUG: Client 21 disconnected. 2022-02-02 17:13:42,365 - wazuh_testing - DEBUG - 2022/02/02 21:13:14 wazuh-syscheckd[9022] create_db.c:220 at fim_scan(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-02 17:13:42,365 - wazuh_testing - DEBUG - 2022/02/02 21:12:42 wazuh-db[5374] main.c:352 at run_worker(): DEBUG: Client 12 disconnected. 2022-02-02 17:13:42,365 - wazuh_testing - DEBUG - 2022/02/02 21:13:14 wazuh-syscheckd[9022] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-02 17:13:42,365 - wazuh_testing - DEBUG - 2022/02/02 21:12:42 wazuh-db[5374] main.c:352 at run_worker(): DEBUG: Client 16 disconnected. 2022-02-02 17:13:42,365 - wazuh_testing - DEBUG - 2022/02/02 21:13:14 wazuh-syscheckd[9022] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1643832794}} 2022-02-02 17:13:42,365 - wazuh_testing - DEBUG - 2022/02/02 21:12:42 wazuh-syscheckd[5420] sig_op.c:49 at HandleSIG(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:13:42,366 - wazuh_testing - DEBUG - 2022/02/02 21:13:14 wazuh-syscheckd[9022] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 31.306 sec (1.247 clock sec) 2022-02-02 17:13:42,366 - wazuh_testing - DEBUG - 2022/02/02 21:12:42 wazuh-analysisd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:13:42,366 - wazuh_testing - DEBUG - 2022/02/02 21:12:42 wazuh-db[5374] main.c:352 at run_worker(): DEBUG: Client 44 disconnected. 2022-02-02 17:13:42,366 - wazuh_testing - DEBUG - 2022/02/02 21:13:14 wazuh-syscheckd[9022] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1622, path count: 1628 2022-02-02 17:13:42,366 - wazuh_testing - DEBUG - 2022/02/02 21:12:42 wazuh-db[5374] main.c:352 at run_worker(): DEBUG: Client 46 disconnected. 2022-02-02 17:13:42,366 - wazuh_testing - DEBUG - 2022/02/02 21:13:33 wazuh-logcollector: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:13:42,366 - wazuh_testing - DEBUG - 2022/02/02 21:12:42 wazuh-db[5374] main.c:352 at run_worker(): DEBUG: Client 42 disconnected. 2022-02-02 17:13:42,366 - wazuh_testing - DEBUG - 2022/02/02 21:12:42 wazuh-db[5374] main.c:352 at run_worker(): DEBUG: Client 43 disconnected. 2022-02-02 17:13:42,366 - wazuh_testing - DEBUG - 2022/02/02 21:13:33 wazuh-syscheckd[9022] sig_op.c:49 at HandleSIG(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:13:42,367 - wazuh_testing - DEBUG - 2022/02/02 21:12:42 wazuh-db[5374] main.c:352 at run_worker(): DEBUG: Client 38 disconnected. 2022-02-02 17:13:42,367 - wazuh_testing - DEBUG - 2022/02/02 21:13:33 wazuh-agentd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:13:42,367 - wazuh_testing - DEBUG - 2022/02/02 21:12:42 wazuh-db[5374] main.c:352 at run_worker(): DEBUG: Client 40 disconnected. 2022-02-02 17:13:42,367 - wazuh_testing - DEBUG - 2022/02/02 21:13:34 wazuh-execd: INFO: (1314): Shutdown received. Deleting responses. 2022-02-02 17:13:42,367 - wazuh_testing - DEBUG - 2022/02/02 21:12:42 wazuh-db[5374] main.c:352 at run_worker(): DEBUG: Client 37 disconnected. 2022-02-02 17:13:42,367 - wazuh_testing - DEBUG - 2022/02/02 21:13:34 wazuh-execd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:13:42,367 - wazuh_testing - DEBUG - 2022/02/02 21:12:42 wazuh-db[5374] main.c:352 at run_worker(): DEBUG: Client 41 disconnected. 2022-02-02 17:13:42,367 - wazuh_testing - DEBUG - 2022/02/02 21:13:34 wazuh-syscheckd[9714] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-02 17:13:42,367 - wazuh_testing - DEBUG - 2022/02/02 21:12:42 wazuh-db[5374] main.c:352 at run_worker(): DEBUG: Client 36 disconnected. 2022-02-02 17:13:42,367 - wazuh_testing - DEBUG - 2022/02/02 21:13:34 wazuh-syscheckd[9714] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-02 17:13:42,367 - wazuh_testing - DEBUG - 2022/02/02 21:12:42 wazuh-db[5374] main.c:352 at run_worker(): DEBUG: Client 35 disconnected. 2022-02-02 17:13:42,367 - wazuh_testing - DEBUG - 2022/02/02 21:13:34 wazuh-syscheckd[9714] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-02 17:13:42,368 - wazuh_testing - DEBUG - 2022/02/02 21:12:42 wazuh-db[5374] main.c:352 at run_worker(): DEBUG: Client 29 disconnected. 2022-02-02 17:13:42,368 - wazuh_testing - DEBUG - 2022/02/02 21:13:34 wazuh-syscheckd[9714] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-02 17:13:42,368 - wazuh_testing - DEBUG - 2022/02/02 21:12:42 wazuh-db[5374] main.c:352 at run_worker(): DEBUG: Client 30 disconnected. 2022-02-02 17:13:42,368 - wazuh_testing - DEBUG - 2022/02/02 21:13:34 wazuh-syscheckd[9714] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-02 17:13:42,368 - wazuh_testing - DEBUG - 2022/02/02 21:12:42 wazuh-db[5374] main.c:352 at run_worker(): DEBUG: Client 33 disconnected. 2022-02-02 17:13:42,368 - wazuh_testing - DEBUG - 2022/02/02 21:13:34 wazuh-syscheckd[9714] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-02 17:13:42,368 - wazuh_testing - DEBUG - 2022/02/02 21:12:42 wazuh-db[5374] main.c:352 at run_worker(): DEBUG: Client 32 disconnected. 2022-02-02 17:13:42,368 - wazuh_testing - DEBUG - 2022/02/02 21:13:34 wazuh-syscheckd[9714] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-02 17:13:42,368 - wazuh_testing - DEBUG - 2022/02/02 21:12:42 wazuh-db[5374] main.c:352 at run_worker(): DEBUG: Client 39 disconnected. 2022-02-02 17:13:42,368 - wazuh_testing - DEBUG - 2022/02/02 21:13:34 wazuh-syscheckd[9714] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ 2022-02-02 17:13:42,368 - wazuh_testing - DEBUG - 2022/02/02 21:12:42 wazuh-db[5374] main.c:352 at run_worker(): DEBUG: Client 24 disconnected. 2022-02-02 17:13:42,368 - wazuh_testing - DEBUG - 2022/02/02 21:13:34 wazuh-syscheckd[9714] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ OK? 2022-02-02 17:13:42,369 - wazuh_testing - DEBUG - 2022/02/02 21:12:42 wazuh-db[5374] main.c:352 at run_worker(): DEBUG: Client 23 disconnected. 2022-02-02 17:13:42,369 - wazuh_testing - DEBUG - 2022/02/02 21:13:34 wazuh-syscheckd[9714] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-02 17:13:42,369 - wazuh_testing - DEBUG - 2022/02/02 21:12:42 wazuh-db[5374] main.c:352 at run_worker(): DEBUG: Client 34 disconnected. 2022-02-02 17:13:42,369 - wazuh_testing - DEBUG - 2022/02/02 21:13:34 wazuh-syscheckd[9714] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-02 17:13:42,369 - wazuh_testing - DEBUG - 2022/02/02 21:12:42 wazuh-db[5374] main.c:352 at run_worker(): DEBUG: Client 27 disconnected. 2022-02-02 17:13:42,369 - wazuh_testing - DEBUG - 2022/02/02 21:13:34 wazuh-syscheckd[9714] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-02 17:13:42,369 - wazuh_testing - DEBUG - 2022/02/02 21:12:42 wazuh-db[5374] main.c:352 at run_worker(): DEBUG: Client 25 disconnected. 2022-02-02 17:13:42,369 - wazuh_testing - DEBUG - 2022/02/02 21:13:34 wazuh-syscheckd[9714] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-02 17:13:42,369 - wazuh_testing - DEBUG - 2022/02/02 21:12:42 wazuh-db[5374] main.c:352 at run_worker(): DEBUG: Client 31 disconnected. 2022-02-02 17:13:42,369 - wazuh_testing - DEBUG - 2022/02/02 21:13:34 wazuh-syscheckd[9714] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-02 17:13:42,370 - wazuh_testing - DEBUG - 2022/02/02 21:12:42 wazuh-db[5374] main.c:352 at run_worker(): DEBUG: Client 18 disconnected. 2022-02-02 17:13:42,370 - wazuh_testing - DEBUG - 2022/02/02 21:13:34 wazuh-syscheckd[9714] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-02 17:13:42,370 - wazuh_testing - DEBUG - 2022/02/02 21:12:42 wazuh-db[5374] main.c:352 at run_worker(): DEBUG: Client 22 disconnected. 2022-02-02 17:13:42,370 - wazuh_testing - DEBUG - 2022/02/02 21:13:34 wazuh-syscheckd[9714] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-02 17:13:42,370 - wazuh_testing - DEBUG - 2022/02/02 21:12:42 wazuh-db[5374] main.c:352 at run_worker(): DEBUG: Client 20 disconnected. 2022-02-02 17:13:42,370 - wazuh_testing - DEBUG - 2022/02/02 21:13:34 wazuh-syscheckd[9714] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-02 17:13:42,370 - wazuh_testing - DEBUG - 2022/02/02 21:12:42 wazuh-db[5374] main.c:352 at run_worker(): DEBUG: Client 13 disconnected. 2022-02-02 17:13:42,370 - wazuh_testing - DEBUG - 2022/02/02 21:13:34 wazuh-execd: INFO: Started (pid: 9727). 2022-02-02 17:13:42,370 - wazuh_testing - DEBUG - 2022/02/02 21:12:42 wazuh-db[5374] main.c:352 at run_worker(): DEBUG: Client 11 disconnected. 2022-02-02 17:13:42,370 - wazuh_testing - DEBUG - 2022/02/02 21:13:35 wazuh-agentd: INFO: (1410): Reading authentication keys file. 2022-02-02 17:13:42,370 - wazuh_testing - DEBUG - 2022/02/02 21:12:42 wazuh-db[5374] main.c:352 at run_worker(): DEBUG: Client 10 disconnected. 2022-02-02 17:13:42,371 - wazuh_testing - DEBUG - 2022/02/02 21:13:35 wazuh-agentd: INFO: Using notify time: 10 and max time to reconnect: 60 2022-02-02 17:13:42,371 - wazuh_testing - DEBUG - 2022/02/02 21:12:42 wazuh-db[5374] main.c:352 at run_worker(): DEBUG: Client 28 disconnected. 2022-02-02 17:13:42,371 - wazuh_testing - DEBUG - 2022/02/02 21:13:35 wazuh-agentd: INFO: Version detected -> Linux |wazuh-agent1 |5.13.0-27-generic |#29~20.04.1-Ubuntu SMP Fri Jan 14 00:32:30 UTC 2022 |x86_64 [Debian GNU/Linux|debian: 10 (buster)] - Wazuh v4.2.5 2022-02-02 17:13:42,371 - wazuh_testing - DEBUG - 2022/02/02 21:12:42 wazuh-db[5374] main.c:352 at run_worker(): DEBUG: Client 6 disconnected. 2022-02-02 17:13:42,371 - wazuh_testing - DEBUG - 2022/02/02 21:13:35 wazuh-agentd: INFO: Started (pid: 9735). 2022-02-02 17:13:42,371 - wazuh_testing - DEBUG - 2022/02/02 21:12:42 wazuh-execd: INFO: (1314): Shutdown received. Deleting responses. 2022-02-02 17:13:42,371 - wazuh_testing - DEBUG - 2022/02/02 21:13:35 wazuh-agentd: INFO: Server IP Address: wazuh-manager/172.18.0.2 2022-02-02 17:13:42,371 - wazuh_testing - DEBUG - 2022/02/02 21:12:42 wazuh-execd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:13:42,371 - wazuh_testing - DEBUG - 2022/02/02 21:13:35 wazuh-agentd: INFO: Using AES as encryption method. 2022-02-02 17:13:42,371 - wazuh_testing - DEBUG - 2022/02/02 21:12:42 wazuh-db[5374] main.c:468 at handler(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:13:42,372 - wazuh_testing - DEBUG - 2022/02/02 21:13:35 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.18.0.2:1514/tcp). 2022-02-02 17:13:42,372 - wazuh_testing - DEBUG - 2022/02/02 21:12:43 wazuh-db[5374] wdb.c:872 at wdb_close_all(): DEBUG: Closing all databases... 2022-02-02 17:13:42,372 - wazuh_testing - DEBUG - 2022/02/02 21:13:35 wazuh-agentd: INFO: (4102): Connected to the server (wazuh-manager/172.18.0.2:1514/tcp). 2022-02-02 17:13:42,372 - wazuh_testing - DEBUG - 2022/02/02 21:12:43 wazuh-db[5374] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent 001 2022-02-02 17:13:42,372 - wazuh_testing - DEBUG - 2022/02/02 21:13:36 wazuh-syscheckd[9747] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-02 17:13:42,372 - wazuh_testing - DEBUG - 2022/02/02 21:12:43 wazuh-db[5374] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent 000 2022-02-02 17:13:42,372 - wazuh_testing - DEBUG - 2022/02/02 21:13:36 wazuh-syscheckd[9747] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-02 17:13:42,372 - wazuh_testing - DEBUG - 2022/02/02 21:13:36 wazuh-syscheckd[9747] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-02 17:13:42,372 - wazuh_testing - DEBUG - 2022/02/02 21:12:43 wazuh-db[5374] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent mitre 2022-02-02 17:13:42,373 - wazuh_testing - DEBUG - 2022/02/02 21:13:36 wazuh-syscheckd[9747] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-02 17:13:42,373 - wazuh_testing - DEBUG - 2022/02/02 21:13:36 wazuh-syscheckd[9747] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-02 17:13:42,373 - wazuh_testing - DEBUG - 2022/02/02 21:12:43 wazuh-db[5374] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent global 2022-02-02 17:13:42,373 - wazuh_testing - DEBUG - 2022/02/02 21:13:36 wazuh-syscheckd[9747] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-02 17:13:42,373 - wazuh_testing - DEBUG - 2022/02/02 21:12:43 wazuh-db[5374] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent tasks 2022-02-02 17:13:42,374 - wazuh_testing - DEBUG - 2022/02/02 21:13:36 wazuh-syscheckd[9747] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-02 17:13:42,374 - wazuh_testing - DEBUG - 2022/02/02 21:12:43 wazuh-db[5374] main.c:231 at main(): DEBUG: Template file removed again: queue/db/.template.db 2022-02-02 17:13:42,374 - wazuh_testing - DEBUG - 2022/02/02 21:13:36 wazuh-syscheckd[9747] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ 2022-02-02 17:13:42,374 - wazuh_testing - DEBUG - 2022/02/02 21:12:43 wazuh-authd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:13:42,375 - wazuh_testing - DEBUG - 2022/02/02 21:13:36 wazuh-syscheckd[9747] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ OK? 2022-02-02 17:13:42,375 - wazuh_testing - DEBUG - 2022/02/02 21:13:36 wazuh-syscheckd[9747] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-02 17:13:42,375 - wazuh_testing - DEBUG - 2022/02/02 21:12:43 wazuh-authd: INFO: Exiting... 2022-02-02 17:13:42,375 - wazuh_testing - DEBUG - 2022/02/02 21:13:36 wazuh-syscheckd[9747] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-02 17:13:42,375 - wazuh_testing - DEBUG - 2022/02/02 21:13:36 wazuh-syscheckd[9747] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-02 17:13:42,375 - wazuh_testing - DEBUG - 2022/02/02 21:12:58 wazuh-db[6257] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-02 17:13:42,375 - wazuh_testing - DEBUG - 2022/02/02 21:13:36 wazuh-syscheckd[9747] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-02 17:13:42,376 - wazuh_testing - DEBUG - 2022/02/02 21:13:36 wazuh-syscheckd[9747] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-02 17:13:42,376 - wazuh_testing - DEBUG - 2022/02/02 21:12:58 wazuh-db[6257] main.c:101 at main(): DEBUG: Wazuh home directory: /var/ossec 2022-02-02 17:13:42,376 - wazuh_testing - DEBUG - 2022/02/02 21:13:36 wazuh-syscheckd[9747] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-02 17:13:42,376 - wazuh_testing - DEBUG - 2022/02/02 21:12:59 wazuh-syscheckd[6261] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-02 17:13:42,376 - wazuh_testing - DEBUG - 2022/02/02 21:13:36 wazuh-syscheckd[9747] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-02 17:13:42,376 - wazuh_testing - DEBUG - 2022/02/02 21:12:59 wazuh-syscheckd[6261] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-02 17:13:42,376 - wazuh_testing - DEBUG - 2022/02/02 21:13:36 wazuh-syscheckd[9747] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-02 17:13:42,376 - wazuh_testing - DEBUG - 2022/02/02 21:12:59 wazuh-syscheckd[6261] syscheck-config.c:122 at organize_syscheck_dirs(): DEBUG: No directory entries to organize in syscheck configuration. 2022-02-02 17:13:42,377 - wazuh_testing - DEBUG - 2022/02/02 21:13:36 rootcheck[9747] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled. 2022-02-02 17:13:42,377 - wazuh_testing - DEBUG - 2022/02/02 21:13:06 wazuh-csyslogd: INFO: Remote syslog server not configured. Clean exit. 2022-02-02 17:13:42,377 - wazuh_testing - DEBUG - 2022/02/02 21:13:36 wazuh-syscheckd[9747] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:13:42,377 - wazuh_testing - DEBUG - 2022/02/02 21:13:06 wazuh-dbd: INFO: Database not configured. Clean exit. 2022-02-02 17:13:42,377 - wazuh_testing - DEBUG - 2022/02/02 21:13:36 wazuh-syscheckd[9747] syscom.c:123 at syscom_main(): DEBUG: (6284): Local requests thread ready. 2022-02-02 17:13:42,377 - wazuh_testing - DEBUG - 2022/02/02 21:13:06 wazuh-integratord: INFO: Remote integrations not configured. Clean exit. 2022-02-02 17:13:42,377 - wazuh_testing - DEBUG - 2022/02/02 21:13:06 wazuh-agentlessd: INFO: Not configured. Exiting. 2022-02-02 17:13:42,377 - wazuh_testing - DEBUG - 2022/02/02 21:13:36 wazuh-syscheckd[9747] mq_op.c:47 at StartMQ(): DEBUG: Connected succesfully to 'queue/sockets/queue' after 0 attempts 2022-02-02 17:13:42,377 - wazuh_testing - DEBUG - 2022/02/02 21:13:06 wazuh-authd: INFO: Started (pid: 6327). 2022-02-02 17:13:42,378 - wazuh_testing - DEBUG - 2022/02/02 21:13:36 wazuh-syscheckd[9747] mq_op.c:48 at StartMQ(): DEBUG: (unix_domain) Maximum send buffer set to: '212992'. 2022-02-02 17:13:42,378 - wazuh_testing - DEBUG - 2022/02/02 21:13:06 wazuh-authd: INFO: Accepting connections on port 1515. No password required. 2022-02-02 17:13:42,378 - wazuh_testing - DEBUG - 2022/02/02 21:13:36 wazuh-syscheckd[9747] main.c:185 at main(): INFO: Started (pid: 9749). 2022-02-02 17:13:42,378 - wazuh_testing - DEBUG - 2022/02/02 21:13:06 wazuh-authd: INFO: Setting network timeout to 1.000000 sec. 2022-02-02 17:13:42,378 - wazuh_testing - DEBUG - 2022/02/02 21:13:36 wazuh-syscheckd[9747] main.c:193 at main(): INFO: (6003): Monitoring path: '/bin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:13:42,378 - wazuh_testing - DEBUG - 2022/02/02 21:13:06 wazuh-db[6338] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-02 17:13:42,378 - wazuh_testing - DEBUG - 2022/02/02 21:13:36 wazuh-syscheckd[9747] main.c:193 at main(): INFO: (6003): Monitoring path: '/boot', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:13:42,378 - wazuh_testing - DEBUG - 2022/02/02 21:13:06 wazuh-db[6338] main.c:101 at main(): DEBUG: Wazuh home directory: /var/ossec 2022-02-02 17:13:42,378 - wazuh_testing - DEBUG - 2022/02/02 21:13:06 wazuh-db[6338] main.c:122 at main(): DEBUG: Template file removed: /var/ossec/queue/db/.template.db 2022-02-02 17:13:42,378 - wazuh_testing - DEBUG - 2022/02/02 21:13:36 wazuh-syscheckd[9747] main.c:193 at main(): INFO: (6003): Monitoring path: '/etc', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:13:42,379 - wazuh_testing - DEBUG - 2022/02/02 21:13:06 wazuh-db[6338] main.c:178 at main(): INFO: Started (pid: 6340). 2022-02-02 17:13:42,379 - wazuh_testing - DEBUG - 2022/02/02 21:13:36 wazuh-syscheckd[9747] main.c:193 at main(): INFO: (6003): Monitoring path: '/sbin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:13:42,379 - wazuh_testing - DEBUG - 2022/02/02 21:13:07 wazuh-execd: INFO: (1350): Active response disabled. 2022-02-02 17:13:42,379 - wazuh_testing - DEBUG - 2022/02/02 21:13:36 wazuh-syscheckd[9747] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir1', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:13:42,379 - wazuh_testing - DEBUG - 2022/02/02 21:13:07 wazuh-execd: INFO: Started (pid: 6363). 2022-02-02 17:13:42,379 - wazuh_testing - DEBUG - 2022/02/02 21:13:36 wazuh-syscheckd[9747] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir2', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | realtime'. 2022-02-02 17:13:42,379 - wazuh_testing - DEBUG - 2022/02/02 21:13:08 wazuh-syscheckd[6384] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-02 17:13:42,380 - wazuh_testing - DEBUG - 2022/02/02 21:13:08 wazuh-syscheckd[6384] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-02 17:13:42,380 - wazuh_testing - DEBUG - 2022/02/02 21:13:36 wazuh-syscheckd[9747] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir3', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | whodata'. 2022-02-02 17:13:42,380 - wazuh_testing - DEBUG - 2022/02/02 21:13:08 wazuh-syscheckd[6384] syscheck-config.c:122 at organize_syscheck_dirs(): DEBUG: No directory entries to organize in syscheck configuration. 2022-02-02 17:13:42,380 - wazuh_testing - DEBUG - 2022/02/02 21:13:36 wazuh-syscheckd[9747] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/bin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:13:42,380 - wazuh_testing - DEBUG - 2022/02/02 21:13:08 wazuh-syscheckd[6384] main.c:118 at main(): INFO: (6678): No directory provided for syscheck to monitor. 2022-02-02 17:13:42,380 - wazuh_testing - DEBUG - 2022/02/02 21:13:36 wazuh-syscheckd[9747] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/sbin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:13:42,380 - wazuh_testing - DEBUG - 2022/02/02 21:13:08 wazuh-syscheckd[6384] main.c:136 at main(): INFO: (6001): File integrity monitoring disabled. 2022-02-02 17:13:42,380 - wazuh_testing - DEBUG - 2022/02/02 21:13:36 wazuh-syscheckd[9747] main.c:215 at main(): DEBUG: (6357): Maximum disk quota size limit configured to '1048576 KB'. 2022-02-02 17:13:42,380 - wazuh_testing - DEBUG - 2022/02/02 21:13:08 rootcheck[6384] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled. 2022-02-02 17:13:42,381 - wazuh_testing - DEBUG - 2022/02/02 21:13:36 wazuh-syscheckd[9747] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mtab' 2022-02-02 17:13:42,381 - wazuh_testing - DEBUG - 2022/02/02 21:13:08 wazuh-syscheckd[6384] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:13:42,381 - wazuh_testing - DEBUG - 2022/02/02 21:13:36 wazuh-syscheckd[9747] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/hosts.deny' 2022-02-02 17:13:42,381 - wazuh_testing - DEBUG - 2022/02/02 21:13:08 wazuh-syscheckd[6384] syscom.c:123 at syscom_main(): DEBUG: (6284): Local requests thread ready. 2022-02-02 17:13:42,381 - wazuh_testing - DEBUG - 2022/02/02 21:13:36 wazuh-syscheckd[9747] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mail/statistics' 2022-02-02 17:13:42,381 - wazuh_testing - DEBUG - 2022/02/02 21:13:08 wazuh-syscheckd[6384] mq_op.c:47 at StartMQ(): DEBUG: Connected succesfully to 'queue/sockets/queue' after 0 attempts 2022-02-02 17:13:42,381 - wazuh_testing - DEBUG - 2022/02/02 21:13:36 wazuh-syscheckd[9747] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random-seed' 2022-02-02 17:13:42,381 - wazuh_testing - DEBUG - 2022/02/02 21:13:08 wazuh-syscheckd[6384] mq_op.c:48 at StartMQ(): DEBUG: (unix_domain) Maximum send buffer set to: '212992'. 2022-02-02 17:13:42,382 - wazuh_testing - DEBUG - 2022/02/02 21:13:08 wazuh-syscheckd[6384] main.c:185 at main(): INFO: Started (pid: 6386). 2022-02-02 17:13:42,382 - wazuh_testing - DEBUG - 2022/02/02 21:13:36 wazuh-syscheckd[9747] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random.seed' 2022-02-02 17:13:42,382 - wazuh_testing - DEBUG - 2022/02/02 21:13:08 wazuh-syscheckd[6384] main.c:215 at main(): DEBUG: (6357): Maximum disk quota size limit configured to '1048576 KB'. 2022-02-02 17:13:42,382 - wazuh_testing - DEBUG - 2022/02/02 21:13:36 wazuh-syscheckd[9747] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/adjtime' 2022-02-02 17:13:42,382 - wazuh_testing - DEBUG - 2022/02/02 21:13:08 wazuh-remoted: INFO: Started (pid: 6397). Listening on port 1514/TCP (secure). 2022-02-02 17:13:42,382 - wazuh_testing - DEBUG - 2022/02/02 21:13:36 wazuh-syscheckd[9747] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/httpd/logs' 2022-02-02 17:13:42,382 - wazuh_testing - DEBUG - 2022/02/02 21:13:08 wazuh-db[6338] main.c:290 at run_dealer(): DEBUG: New client connected (6). 2022-02-02 17:13:42,383 - wazuh_testing - DEBUG - 2022/02/02 21:13:36 wazuh-syscheckd[9747] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/utmpx' 2022-02-02 17:13:42,383 - wazuh_testing - DEBUG - 2022/02/02 21:13:08 wazuh-db[6338] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: reset-agents-connection synced 2022-02-02 17:13:42,383 - wazuh_testing - DEBUG - 2022/02/02 21:13:08 wazuh-db[6338] main.c:352 at run_worker(): DEBUG: Client 6 disconnected. 2022-02-02 17:13:42,383 - wazuh_testing - DEBUG - 2022/02/02 21:13:36 wazuh-syscheckd[9747] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/wtmpx' 2022-02-02 17:13:42,383 - wazuh_testing - DEBUG - 2022/02/02 21:13:08 wazuh-remoted: INFO: (1410): Reading authentication keys file. 2022-02-02 17:13:42,383 - wazuh_testing - DEBUG - 2022/02/02 21:13:36 wazuh-syscheckd[9747] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/cups/certs' 2022-02-02 17:13:42,383 - wazuh_testing - DEBUG - 2022/02/02 21:13:08 wazuh-syscheckd[6384] run_check.c:194 at start_daemon(): DEBUG: (6320): Setting process priority to: '10' 2022-02-02 17:13:42,383 - wazuh_testing - DEBUG - 2022/02/02 21:13:36 wazuh-syscheckd[9747] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/dumpdates' 2022-02-02 17:13:42,384 - wazuh_testing - DEBUG - 2022/02/02 21:13:08 wazuh-syscheckd[6384] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:13:42,384 - wazuh_testing - DEBUG - 2022/02/02 21:13:36 wazuh-syscheckd[9747] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/svc/volatile' 2022-02-02 17:13:42,384 - wazuh_testing - DEBUG - 2022/02/02 21:13:08 wazuh-syscheckd[6384] run_check.c:229 at start_daemon(): INFO: (6000): Starting daemon... 2022-02-02 17:13:42,384 - wazuh_testing - DEBUG - 2022/02/02 21:13:08 wazuh-syscheckd[6384] run_check.c:232 at start_daemon(): INFO: (6010): File integrity monitoring scan frequency: 43200 seconds 2022-02-02 17:13:42,384 - wazuh_testing - DEBUG - 2022/02/02 21:13:36 wazuh-syscheckd[9747] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/security' 2022-02-02 17:13:42,384 - wazuh_testing - DEBUG - 2022/02/02 21:13:08 wazuh-syscheckd[6384] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-02 17:13:42,385 - wazuh_testing - DEBUG - 2022/02/02 21:13:36 wazuh-syscheckd[9747] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/debug' 2022-02-02 17:13:42,385 - wazuh_testing - DEBUG - 2022/02/02 21:13:08 wazuh-syscheckd[6384] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1643832788}} 2022-02-02 17:13:42,385 - wazuh_testing - DEBUG - 2022/02/02 21:13:08 wazuh-syscheckd[6384] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-02 17:13:42,385 - wazuh_testing - DEBUG - 2022/02/02 21:13:36 wazuh-syscheckd[9747] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/dev/core' 2022-02-02 17:13:42,385 - wazuh_testing - DEBUG - 2022/02/02 21:13:08 wazuh-syscheckd[6384] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-02 17:13:42,385 - wazuh_testing - DEBUG - 2022/02/02 21:13:36 wazuh-syscheckd[9747] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '^/proc' 2022-02-02 17:13:42,386 - wazuh_testing - DEBUG - 2022/02/02 21:13:08 wazuh-syscheckd[6384] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-02 17:13:42,386 - wazuh_testing - DEBUG - 2022/02/02 21:13:08 wazuh-syscheckd[6384] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1643832788}} 2022-02-02 17:13:42,386 - wazuh_testing - DEBUG - 2022/02/02 21:13:36 wazuh-syscheckd[9747] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '.log$|.swp$' 2022-02-02 17:13:42,386 - wazuh_testing - DEBUG - 2022/02/02 21:13:08 wazuh-syscheckd[6384] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.000 sec (0.001 clock sec) 2022-02-02 17:13:42,387 - wazuh_testing - DEBUG - 2022/02/02 21:13:08 wazuh-syscheckd[6384] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 0, path count: 0 2022-02-02 17:13:42,387 - wazuh_testing - DEBUG - 2022/02/02 21:13:36 wazuh-syscheckd[9747] main.c:235 at main(): INFO: (6004): No diff for file: '/etc/ssl/private.key' 2022-02-02 17:13:42,387 - wazuh_testing - DEBUG - 2022/02/02 21:13:08 wazuh-syscheckd[6384] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:13:42,388 - wazuh_testing - DEBUG - 2022/02/02 21:13:36 wazuh-syscheckd[9747] main.c:245 at main(): INFO: (6016): Directory set for real time monitoring: '/testdir2'. 2022-02-02 17:13:42,388 - wazuh_testing - DEBUG - 2022/02/02 21:13:08 wazuh-syscheckd[6384] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:13:42,388 - wazuh_testing - DEBUG - 2022/02/02 21:13:08 wazuh-syscheckd[6384] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:13:42,388 - wazuh_testing - DEBUG - 2022/02/02 21:13:36 wazuh-syscheckd[9747] syscheck_audit.c:243 at audit_init(): WARNING: (6924): Who-data engine cannot start because Auditd is not running. 2022-02-02 17:13:42,389 - wazuh_testing - DEBUG - 2022/02/02 21:13:08 wazuh-syscheckd[6384] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. 2022-02-02 17:13:42,389 - wazuh_testing - DEBUG - 2022/02/02 21:13:08 wazuh-syscheckd[6384] run_check.c:568 at symlink_checker_thread(): DEBUG: (6033): Starting symbolic link updater. Interval '600'. 2022-02-02 17:13:42,389 - wazuh_testing - DEBUG - 2022/02/02 21:13:36 wazuh-syscheckd[9747] main.c:264 at main(): WARNING: (6913): Who-data engine could not start. Switching who-data to real-time. 2022-02-02 17:13:42,389 - wazuh_testing - DEBUG - 2022/02/02 21:13:08 wazuh-syscheckd[6384] run_check.c:82 at fim_send_sync_msg(): DEBUG: (6317): Sending integrity control message: {"component":"fim_file","type":"integrity_clear","data":{"id":1643832788,"version":2}} 2022-02-02 17:13:42,389 - wazuh_testing - DEBUG - 2022/02/02 21:13:36 wazuh-syscheckd[9747] run_check.c:194 at start_daemon(): DEBUG: (6320): Setting process priority to: '10' 2022-02-02 17:13:42,390 - wazuh_testing - DEBUG - 2022/02/02 21:13:08 wazuh-syscheckd[6384] fim_sync.c:70 at fim_run_integrity(): DEBUG: Finished calculating FIM integrity. Time: 0.000 seconds. 2022-02-02 17:13:42,390 - wazuh_testing - DEBUG - 2022/02/02 21:13:36 wazuh-syscheckd[9747] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:13:42,390 - wazuh_testing - DEBUG - 2022/02/02 21:13:09 wazuh-analysisd: INFO: Total rules enabled: '3882' 2022-02-02 17:13:42,390 - wazuh_testing - DEBUG - 2022/02/02 21:13:09 wazuh-analysisd: INFO: Started (pid: 6377). 2022-02-02 17:13:42,390 - wazuh_testing - DEBUG - 2022/02/02 21:13:36 wazuh-syscheckd[9747] run_check.c:229 at start_daemon(): INFO: (6000): Starting daemon... 2022-02-02 17:13:42,390 - wazuh_testing - DEBUG - 2022/02/02 21:13:09 wazuh-db[6338] main.c:290 at run_dealer(): DEBUG: New client connected (6). 2022-02-02 17:13:42,391 - wazuh_testing - DEBUG - 2022/02/02 21:13:09 wazuh-analysisd: INFO: (7200): Logtest started 2022-02-02 17:13:42,391 - wazuh_testing - DEBUG - 2022/02/02 21:13:36 wazuh-syscheckd[9747] run_check.c:232 at start_daemon(): INFO: (6010): File integrity monitoring scan frequency: 20 seconds 2022-02-02 17:13:42,391 - wazuh_testing - DEBUG - 2022/02/02 21:13:09 wazuh-db[6338] main.c:290 at run_dealer(): DEBUG: New client connected (12). 2022-02-02 17:13:42,391 - wazuh_testing - DEBUG - 2022/02/02 21:13:09 wazuh-db[6338] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 000 query: syscheck scan_info_update start_scan 1643832788 2022-02-02 17:13:42,391 - wazuh_testing - DEBUG - 2022/02/02 21:13:36 wazuh-syscheckd[9747] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-02 17:13:42,391 - wazuh_testing - DEBUG - 2022/02/02 21:13:09 wazuh-db[6338] main.c:290 at run_dealer(): DEBUG: New client connected (13). 2022-02-02 17:13:42,392 - wazuh_testing - DEBUG - 2022/02/02 21:13:36 wazuh-syscheckd[9747] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1643832816}} 2022-02-02 17:13:42,392 - wazuh_testing - DEBUG - 2022/02/02 21:13:09 wazuh-db[6338] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 000 query: syscheck scan_info_update end_scan 1643832788 2022-02-02 17:13:42,392 - wazuh_testing - DEBUG - 2022/02/02 21:13:09 wazuh-db[6338] main.c:290 at run_dealer(): DEBUG: New client connected (14). 2022-02-02 17:13:42,392 - wazuh_testing - DEBUG - 2022/02/02 21:13:36 wazuh-syscheckd[9747] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-02 17:13:42,392 - wazuh_testing - DEBUG - 2022/02/02 21:13:09 wazuh-db[6338] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 000 query: fim_file integrity_clear {"id":1643832788,"version":2} 2022-02-02 17:13:42,393 - wazuh_testing - DEBUG - 2022/02/02 21:13:36 wazuh-syscheckd[9747] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-02 17:13:42,393 - wazuh_testing - DEBUG - 2022/02/02 21:13:09 wazuh-logcollector: INFO: (1950): Analyzing file: '/var/ossec/logs/active-responses.log'. 2022-02-02 17:13:42,393 - wazuh_testing - DEBUG - 2022/02/02 21:13:36 wazuh-syscheckd[9747] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-02 17:13:42,393 - wazuh_testing - DEBUG - 2022/02/02 21:13:09 wazuh-logcollector: INFO: (1950): Analyzing file: '/var/log/dpkg.log'. 2022-02-02 17:13:42,393 - wazuh_testing - DEBUG - 2022/02/02 21:13:09 wazuh-logcollector: INFO: Started (pid: 6555). 2022-02-02 17:13:42,393 - wazuh_testing - DEBUG - 2022/02/02 21:13:36 wazuh-syscheckd[9747] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-02 17:13:42,394 - wazuh_testing - DEBUG - 2022/02/02 21:13:09 wazuh-monitord: INFO: Started (pid: 6571). 2022-02-02 17:13:42,394 - wazuh_testing - DEBUG - 2022/02/02 21:13:09 wazuh-modulesd: INFO: Started (pid: 6580). 2022-02-02 17:13:42,394 - wazuh_testing - DEBUG - 2022/02/02 21:13:36 wazuh-syscheckd[9747] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-02 17:13:42,394 - wazuh_testing - DEBUG - 2022/02/02 21:13:09 wazuh-modulesd:agent-upgrade: INFO: (8153): Module Agent Upgrade started. 2022-02-02 17:13:42,394 - wazuh_testing - DEBUG - 2022/02/02 21:13:37 wazuh-logcollector: INFO: (1950): Analyzing file: '/var/ossec/logs/active-responses.log'. 2022-02-02 17:13:42,394 - wazuh_testing - DEBUG - 2022/02/02 21:13:09 wazuh-modulesd:ciscat: INFO: Module disabled. Exiting... 2022-02-02 17:13:42,395 - wazuh_testing - DEBUG - 2022/02/02 21:13:09 wazuh-modulesd:osquery: INFO: Module disabled. Exiting... 2022-02-02 17:13:42,395 - wazuh_testing - DEBUG - 2022/02/02 21:13:37 wazuh-logcollector: ERROR: (1103): Could not open file '/var/log/secure' due to [(2)-(No such file or directory)]. 2022-02-02 17:13:42,395 - wazuh_testing - DEBUG - 2022/02/02 21:13:09 wazuh-modulesd:syscollector: INFO: Module disabled. Exiting... 2022-02-02 17:13:42,395 - wazuh_testing - DEBUG - 2022/02/02 21:13:37 wazuh-logcollector: INFO: (1950): Analyzing file: '/var/log/secure'. 2022-02-02 17:13:42,395 - wazuh_testing - DEBUG - 2022/02/02 21:13:09 sca: INFO: Module disabled. Exiting. 2022-02-02 17:13:42,396 - wazuh_testing - DEBUG - 2022/02/02 21:13:09 wazuh-modulesd:database: INFO: Module started. 2022-02-02 17:13:42,396 - wazuh_testing - DEBUG - 2022/02/02 21:13:37 wazuh-logcollector: INFO: Started (pid: 9761). 2022-02-02 17:13:42,396 - wazuh_testing - DEBUG - 2022/02/02 21:13:09 wazuh-modulesd:download: INFO: Module started. 2022-02-02 17:13:42,396 - wazuh_testing - DEBUG - 2022/02/02 21:13:37 wazuh-modulesd: INFO: Started (pid: 9775). 2022-02-02 17:13:42,396 - wazuh_testing - DEBUG - 2022/02/02 21:13:09 wazuh-db[6338] main.c:290 at run_dealer(): DEBUG: New client connected (15). 2022-02-02 17:13:42,397 - wazuh_testing - DEBUG - 2022/02/02 21:13:37 wazuh-modulesd:agent-upgrade: INFO: (8153): Module Agent Upgrade started. 2022-02-02 17:13:42,397 - wazuh_testing - DEBUG - 2022/02/02 21:13:09 wazuh-db[6338] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-name {"id":0,"name":"wazuh-manager"} 2022-02-02 17:13:42,397 - wazuh_testing - DEBUG - 2022/02/02 21:13:37 wazuh-modulesd:control: INFO: Starting control thread. 2022-02-02 17:13:42,398 - wazuh_testing - DEBUG - 2022/02/02 21:13:09 wazuh-modulesd:control: INFO: Starting control thread. 2022-02-02 17:13:42,398 - wazuh_testing - DEBUG - 2022/02/02 21:13:37 wazuh-syscheckd[9747] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-02 17:13:42,399 - wazuh_testing - DEBUG - 2022/02/02 21:13:37 wazuh-syscheckd[9747] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-02 17:13:42,399 - wazuh_testing - DEBUG - 2022/02/02 21:13:09 wazuh-modulesd:task-manager: INFO: (8200): Module Task Manager started. 2022-02-02 17:13:42,399 - wazuh_testing - DEBUG - 2022/02/02 21:13:37 wazuh-syscheckd[9747] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1643832817}} 2022-02-02 17:13:42,399 - wazuh_testing - DEBUG - 2022/02/02 21:13:09 wazuh-db[6338] main.c:290 at run_dealer(): DEBUG: New client connected (16). 2022-02-02 17:13:42,399 - wazuh_testing - DEBUG - 2022/02/02 21:13:37 wazuh-syscheckd[9747] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 1.323 sec (1.311 clock sec) 2022-02-02 17:13:42,400 - wazuh_testing - DEBUG - 2022/02/02 21:13:37 wazuh-syscheckd[9747] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1621, path count: 1627 2022-02-02 17:13:42,400 - wazuh_testing - DEBUG - 2022/02/02 21:13:09 wazuh-db[6338] wdb_parser.c:928 at wdb_parse(): DEBUG: Task query: set_timeout {"now":1643832789,"interval":900} 2022-02-02 17:13:42,400 - wazuh_testing - DEBUG - 2022/02/02 21:13:37 wazuh-syscheckd[9747] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:13:42,400 - wazuh_testing - DEBUG - 2022/02/02 21:13:09 wazuh-db[6338] main.c:352 at run_worker(): DEBUG: Client 16 disconnected. 2022-02-02 17:13:42,401 - wazuh_testing - DEBUG - 2022/02/02 21:13:37 wazuh-syscheckd[9747] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:13:42,401 - wazuh_testing - DEBUG - 2022/02/02 21:13:09 wazuh-db[6338] main.c:290 at run_dealer(): DEBUG: New client connected (19). 2022-02-02 17:13:42,401 - wazuh_testing - DEBUG - 2022/02/02 21:13:37 wazuh-syscheckd[9747] run_check.c:387 at fim_run_realtime(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-02 17:13:42,401 - wazuh_testing - DEBUG - 2022/02/02 21:13:09 wazuh-db[6338] wdb_parser.c:928 at wdb_parse(): DEBUG: Task query: delete_old {"timestamp":1643227989} 2022-02-02 17:13:42,402 - wazuh_testing - DEBUG - 2022/02/02 21:13:09 wazuh-db[6338] main.c:352 at run_worker(): DEBUG: Client 19 disconnected. 2022-02-02 17:13:42,402 - wazuh_testing - DEBUG - 2022/02/02 21:13:37 wazuh-syscheckd[9747] run_check.c:543 at log_realtime_status(): INFO: (6012): Real-time file integrity monitoring started. 2022-02-02 17:13:42,403 - wazuh_testing - DEBUG - 2022/02/02 21:13:09 wazuh-db[6338] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":0,"version":"Wazuh v4.2.5","manager_host":"wazuh-manager","node_name":"wazuh-master","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-manager |5.13.0-27-generic |#29~20.04.1-Ubuntu SMP Fri Jan 14 00:32:30 UTC 2022 |x86_64","os_arch":"x86_64"} 2022-02-02 17:13:42,403 - wazuh_testing - DEBUG - 2022/02/02 21:13:37 wazuh-syscheckd[9747] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:13:42,403 - wazuh_testing - DEBUG - 2022/02/02 21:13:09 wazuh-db[6338] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: insert-agent {"id":1,"name":"wazuh-agent1","register_ip":"any","internal_key":"1111111111111111111111111111111111111111111111111111111111111111","group":"default","date_add":0} 2022-02-02 17:13:42,404 - wazuh_testing - DEBUG - 2022/02/02 21:13:37 wazuh-syscheckd[9747] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. 2022-02-02 17:13:42,404 - wazuh_testing - DEBUG - 2022/02/02 21:13:09 wazuh-db[6338] wdb_global.c:89 at wdb_global_insert_agent(): DEBUG: SQLite: UNIQUE constraint failed: agent.id 2022-02-02 17:13:42,404 - wazuh_testing - DEBUG - 2022/02/02 21:13:37 wazuh-syscheckd[9747] run_check.c:568 at symlink_checker_thread(): DEBUG: (6033): Starting symbolic link updater. Interval '600'. 2022-02-02 17:13:42,405 - wazuh_testing - DEBUG - 2022/02/02 21:13:09 wazuh-db[6338] wdb_parser.c:4784 at wdb_parse_global_insert_agent(): DEBUG: Global DB Cannot execute SQL query; err database queue/db/global.db: UNIQUE constraint failed: agent.id 2022-02-02 17:13:42,405 - wazuh_testing - DEBUG - 2022/02/02 21:13:37 wazuh-syscheckd[9747] run_check.c:82 at fim_send_sync_msg(): DEBUG: (6317): Sending integrity control message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1643832817,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"ad12ec2d50375d976b9fff41dee3598b7548bc24"}} 2022-02-02 17:13:42,405 - wazuh_testing - DEBUG - 2022/02/02 21:13:09 wazuh-db[6338] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-group {"id":1,"group":"default"} 2022-02-02 17:13:42,406 - wazuh_testing - DEBUG - 2022/02/02 21:13:09 wazuh-db[6338] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: delete-agent-belong 1 2022-02-02 17:13:42,406 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-agent1 and message: .*Sending integrity control message: (.+)$ 2022-02-02 17:13:42,406 - wazuh_testing - DEBUG - 2022/02/02 21:13:09 wazuh-db[6338] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: find-group default 2022-02-02 17:13:42,407 - wazuh_testing - DEBUG - 2022/02/02 21:13:09 wazuh-db[6338] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: insert-agent-belong {"id_group":1,"id_agent":1} 2022-02-02 17:13:42,408 - wazuh_testing - DEBUG - 2022/02/02 21:13:09 wazuh-db[6338] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: get-all-agents last_id 0 2022-02-02 17:13:42,409 - wazuh_testing - DEBUG - 2022/02/02 21:13:09 wazuh-db[6338] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: select-groups 2022-02-02 17:13:42,409 - wazuh_testing - DEBUG - 2022/02/02 21:13:09 wazuh-db[6338] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: find-group default 2022-02-02 17:13:42,411 - wazuh_testing - DEBUG - 2022/02/02 21:13:09 wazuh-db[6338] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: get-all-agents last_id 0 2022-02-02 17:13:42,412 - wazuh_testing - DEBUG - 2022/02/02 21:13:09 wazuh-db[6338] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: select-agent-group 1 2022-02-02 17:13:42,413 - wazuh_testing - DEBUG - 2022/02/02 21:13:09 wazuh-db[6338] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: delete-agent-belong 1 2022-02-02 17:13:42,414 - wazuh_testing - DEBUG - 2022/02/02 21:13:09 wazuh-db[6338] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: find-group default 2022-02-02 17:13:42,414 - wazuh_testing - DEBUG - 2022/02/02 21:13:09 wazuh-db[6338] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: insert-agent-belong {"id_group":1,"id_agent":1} 2022-02-02 17:13:42,415 - wazuh_testing - DEBUG - 2022/02/02 21:13:09 wazuh-db[6338] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: select-agent-name 1 2022-02-02 17:13:42,416 - wazuh_testing - DEBUG - 2022/02/02 21:13:09 wazuh-db[6338] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: select-agent-name 1 2022-02-02 17:13:42,417 - wazuh_testing - DEBUG - 2022/02/02 21:13:12 wazuh-db[6338] main.c:290 at run_dealer(): DEBUG: New client connected (16). 2022-02-02 17:13:42,417 - wazuh_testing - DEBUG - 2022/02/02 21:13:12 wazuh-db[6338] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-keepalive {"id":1,"connection_status":"pending","sync_status":"synced"} 2022-02-02 17:13:42,418 - wazuh_testing - DEBUG - 2022/02/02 21:13:12 wazuh-db[6338] main.c:290 at run_dealer(): DEBUG: New client connected (18). 2022-02-02 17:13:42,419 - wazuh_testing - DEBUG - 2022/02/02 21:13:12 wazuh-db[6338] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.18.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.18.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.13.0-27-generic |#29~20.04.1-Ubuntu SMP Fri Jan 14 00:32:30 UTC 2022 |x86_64","os_arch":"x86_64"} 2022-02-02 17:13:42,419 - wazuh_testing - DEBUG - 2022/02/02 21:13:12 wazuh-db[6338] main.c:290 at run_dealer(): DEBUG: New client connected (19). 2022-02-02 17:13:42,420 - wazuh_testing - DEBUG - 2022/02/02 21:13:12 wazuh-db[6338] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1643832762 2022-02-02 17:13:42,420 - wazuh_testing - DEBUG - 2022/02/02 21:13:13 wazuh-db[6338] main.c:290 at run_dealer(): DEBUG: New client connected (20). 2022-02-02 17:13:42,421 - wazuh_testing - DEBUG - 2022/02/02 21:13:13 wazuh-db[6338] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck save2 {"path":"/testdir1/tmp9og3znp5","version":2,"timestamp":1643832793,"attributes":{"type":"file","size":8,"perm":"rw-r--r--","uid":"0","gid":"0","user_name":"root","group_name":"root","inode":7239367,"mtime":1643832768,"hash_md5":"e770e54c4c42d3307c141c0c8948992a","hash_sha1":"9eab19985b11b15f91f936e463ea74f1dfe88e32","hash_sha256":"b1893f8d4b1596c20d6f83a784b2b0468c22fb83ce4ff2033ff86a37865d41d8","checksum":"1e366f6f1e86c31955a907fa28d0a5d8ec541437"}} 2022-02-02 17:13:42,422 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-manager and message: .*Agent 001 query: (.+) save2 2022-02-02 17:13:43,365 - wazuh_testing - DEBUG - Cleaning temporal files... 2022-02-02 17:13:43,365 - wazuh_testing - DEBUG - Checking results... 2022-02-02 17:13:43,367 - wazuh_testing - DEBUG - Received from wazuh-agent1 the expected message: 2022/02/02 21:13:37 wazuh-syscheckd[9747] run_check.c:82 at fim_send_sync_msg(): DEBUG: (6317): Sending integrity control message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1643832817,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"ad12ec2d50375d976b9fff41dee3598b7548bc24"}} 2022-02-02 17:13:43,367 - wazuh_testing - DEBUG - Received from wazuh-manager the expected message: 2022/02/02 21:13:13 wazuh-db[6338] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck save2 {"path":"/testdir1/tmp9og3znp5","version":2,"timestamp":1643832793,"attributes":{"type":"file","size":8,"perm":"rw-r--r--","uid":"0","gid":"0","user_name":"root","group_name":"root","inode":7239367,"mtime":1643832768,"hash_md5":"e770e54c4c42d3307c141c0c8948992a","hash_sha1":"9eab19985b11b15f91f936e463ea74f1dfe88e32","hash_sha256":"b1893f8d4b1596c20d6f83a784b2b0468c22fb83ce4ff2033ff86a37865d41d8","checksum":"1e366f6f1e86c31955a907fa28d0a5d8ec541437"}} 2022-02-02 17:14:09,017 - wazuh_testing - DEBUG - Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-02 17:14:09,019 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-02 17:14:09,020 - wazuh_testing - DEBUG - Starting file composer for wazuh-agent1 and path: /var/ossec/logs/ossec.log. Composite file in /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-agent1_ossec.log.tmp 2022-02-02 17:14:09,023 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-agent1 and message: .*Initializing FIM Integrity Synchronization check. (.+)$ 2022-02-02 17:14:11,025 - wazuh_testing - DEBUG - 2022/02/02 21:13:56 wazuh-logcollector: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:14:11,025 - wazuh_testing - DEBUG - 2022/02/02 21:13:56 wazuh-syscheckd[9747] sig_op.c:49 at HandleSIG(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:14:11,025 - wazuh_testing - DEBUG - 2022/02/02 21:13:56 wazuh-agentd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:14:11,025 - wazuh_testing - DEBUG - 2022/02/02 21:13:56 wazuh-execd: INFO: (1314): Shutdown received. Deleting responses. 2022-02-02 17:14:11,026 - wazuh_testing - DEBUG - 2022/02/02 21:13:56 wazuh-execd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:14:11,026 - wazuh_testing - DEBUG - 2022/02/02 21:14:02 wazuh-syscheckd[10165] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-02 17:14:11,026 - wazuh_testing - DEBUG - 2022/02/02 21:14:02 wazuh-syscheckd[10165] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-02 17:14:11,026 - wazuh_testing - DEBUG - 2022/02/02 21:14:02 wazuh-syscheckd[10165] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir1' due to [(2)-(No such file or directory)]. 2022-02-02 17:14:11,026 - wazuh_testing - DEBUG - 2022/02/02 21:14:02 wazuh-syscheckd[10165] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-02 17:14:11,027 - wazuh_testing - DEBUG - 2022/02/02 21:14:02 wazuh-syscheckd[10165] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-02 17:14:11,027 - wazuh_testing - DEBUG - 2022/02/02 21:14:02 wazuh-syscheckd[10165] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-02 17:14:11,027 - wazuh_testing - DEBUG - 2022/02/02 21:14:02 wazuh-syscheckd[10165] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-02 17:14:11,027 - wazuh_testing - DEBUG - 2022/02/02 21:14:02 wazuh-syscheckd[10165] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-02 17:14:11,028 - wazuh_testing - DEBUG - 2022/02/02 21:14:02 wazuh-syscheckd[10165] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ 2022-02-02 17:14:11,028 - wazuh_testing - DEBUG - 2022/02/02 21:14:02 wazuh-syscheckd[10165] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ OK? 2022-02-02 17:14:11,028 - wazuh_testing - DEBUG - 2022/02/02 21:14:02 wazuh-syscheckd[10165] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-02 17:14:11,028 - wazuh_testing - DEBUG - 2022/02/02 21:14:02 wazuh-syscheckd[10165] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-02 17:14:11,029 - wazuh_testing - DEBUG - 2022/02/02 21:14:02 wazuh-syscheckd[10165] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-02 17:14:11,029 - wazuh_testing - DEBUG - 2022/02/02 21:14:02 wazuh-syscheckd[10165] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-02 17:14:11,029 - wazuh_testing - DEBUG - 2022/02/02 21:14:02 wazuh-syscheckd[10165] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-02 17:14:11,030 - wazuh_testing - DEBUG - 2022/02/02 21:14:02 wazuh-syscheckd[10165] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-02 17:14:11,030 - wazuh_testing - DEBUG - 2022/02/02 21:14:02 wazuh-syscheckd[10165] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-02 17:14:11,030 - wazuh_testing - DEBUG - 2022/02/02 21:14:02 wazuh-syscheckd[10165] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-02 17:14:11,030 - wazuh_testing - DEBUG - 2022/02/02 21:14:02 wazuh-execd: INFO: Started (pid: 10178). 2022-02-02 17:14:11,031 - wazuh_testing - DEBUG - 2022/02/02 21:14:02 wazuh-agentd: INFO: (1410): Reading authentication keys file. 2022-02-02 17:14:11,031 - wazuh_testing - DEBUG - 2022/02/02 21:14:02 wazuh-agentd: INFO: Using notify time: 10 and max time to reconnect: 60 2022-02-02 17:14:11,032 - wazuh_testing - DEBUG - 2022/02/02 21:14:02 wazuh-agentd: INFO: Version detected -> Linux |wazuh-agent1 |5.13.0-27-generic |#29~20.04.1-Ubuntu SMP Fri Jan 14 00:32:30 UTC 2022 |x86_64 [Debian GNU/Linux|debian: 10 (buster)] - Wazuh v4.2.5 2022-02-02 17:14:11,032 - wazuh_testing - DEBUG - 2022/02/02 21:14:02 wazuh-agentd: INFO: Started (pid: 10187). 2022-02-02 17:14:11,033 - wazuh_testing - DEBUG - 2022/02/02 21:14:02 wazuh-agentd: INFO: Server IP Address: wazuh-manager/172.18.0.2 2022-02-02 17:14:11,033 - wazuh_testing - DEBUG - 2022/02/02 21:14:02 wazuh-agentd: INFO: Using AES as encryption method. 2022-02-02 17:14:11,033 - wazuh_testing - DEBUG - 2022/02/02 21:14:02 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.18.0.2:1514/tcp). 2022-02-02 17:14:11,034 - wazuh_testing - DEBUG - 2022/02/02 21:14:02 wazuh-agentd: INFO: (4102): Connected to the server (wazuh-manager/172.18.0.2:1514/tcp). 2022-02-02 17:14:11,034 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-02 17:14:11,034 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-02 17:14:11,034 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir1' due to [(2)-(No such file or directory)]. 2022-02-02 17:14:11,035 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-02 17:14:11,035 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-02 17:14:11,035 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-02 17:14:11,035 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-02 17:14:11,035 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-02 17:14:11,036 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ 2022-02-02 17:14:11,036 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ OK? 2022-02-02 17:14:11,036 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-02 17:14:11,037 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-02 17:14:11,037 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-02 17:14:11,038 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-02 17:14:11,038 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-02 17:14:11,039 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-02 17:14:11,039 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-02 17:14:11,039 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-02 17:14:11,040 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 rootcheck[10198] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled. 2022-02-02 17:14:11,040 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:14:11,041 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] syscom.c:123 at syscom_main(): DEBUG: (6284): Local requests thread ready. 2022-02-02 17:14:11,041 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] mq_op.c:47 at StartMQ(): DEBUG: Connected succesfully to 'queue/sockets/queue' after 0 attempts 2022-02-02 17:14:11,042 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] mq_op.c:48 at StartMQ(): DEBUG: (unix_domain) Maximum send buffer set to: '212992'. 2022-02-02 17:14:11,042 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] main.c:185 at main(): INFO: Started (pid: 10200). 2022-02-02 17:14:11,042 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] main.c:193 at main(): INFO: (6003): Monitoring path: '/bin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:14:11,042 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] main.c:193 at main(): INFO: (6003): Monitoring path: '/boot', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:14:11,043 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] main.c:193 at main(): INFO: (6003): Monitoring path: '/etc', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:14:11,043 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] main.c:193 at main(): INFO: (6003): Monitoring path: '/sbin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:14:11,043 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir1', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:14:11,044 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir2', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | realtime'. 2022-02-02 17:14:11,044 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir3', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | whodata'. 2022-02-02 17:14:11,045 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/bin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:14:11,045 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/sbin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:14:11,045 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] main.c:215 at main(): DEBUG: (6357): Maximum disk quota size limit configured to '1048576 KB'. 2022-02-02 17:14:11,045 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mtab' 2022-02-02 17:14:11,045 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/hosts.deny' 2022-02-02 17:14:11,046 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mail/statistics' 2022-02-02 17:14:11,046 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random-seed' 2022-02-02 17:14:11,046 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random.seed' 2022-02-02 17:14:11,046 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/adjtime' 2022-02-02 17:14:11,047 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/httpd/logs' 2022-02-02 17:14:11,047 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/utmpx' 2022-02-02 17:14:11,047 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/wtmpx' 2022-02-02 17:14:11,047 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/cups/certs' 2022-02-02 17:14:11,048 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/dumpdates' 2022-02-02 17:14:11,048 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/svc/volatile' 2022-02-02 17:14:11,048 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/security' 2022-02-02 17:14:11,048 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/debug' 2022-02-02 17:14:11,049 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/dev/core' 2022-02-02 17:14:11,049 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '^/proc' 2022-02-02 17:14:11,049 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '.log$|.swp$' 2022-02-02 17:14:11,050 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] main.c:235 at main(): INFO: (6004): No diff for file: '/etc/ssl/private.key' 2022-02-02 17:14:11,050 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] main.c:245 at main(): INFO: (6016): Directory set for real time monitoring: '/testdir2'. 2022-02-02 17:14:11,050 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] syscheck_audit.c:243 at audit_init(): WARNING: (6924): Who-data engine cannot start because Auditd is not running. 2022-02-02 17:14:11,050 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] main.c:264 at main(): WARNING: (6913): Who-data engine could not start. Switching who-data to real-time. 2022-02-02 17:14:11,051 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] run_check.c:194 at start_daemon(): DEBUG: (6320): Setting process priority to: '10' 2022-02-02 17:14:11,051 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:14:11,051 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] run_check.c:229 at start_daemon(): INFO: (6000): Starting daemon... 2022-02-02 17:14:11,052 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] run_check.c:232 at start_daemon(): INFO: (6010): File integrity monitoring scan frequency: 20 seconds 2022-02-02 17:14:11,052 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-02 17:14:11,053 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1643832843}} 2022-02-02 17:14:11,053 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-02 17:14:11,053 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-02 17:14:11,054 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-02 17:14:11,054 - wazuh_testing - DEBUG - 2022/02/02 21:14:04 wazuh-syscheckd[10198] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-02 17:14:11,055 - wazuh_testing - DEBUG - 2022/02/02 21:14:04 wazuh-syscheckd[10198] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-02 17:14:11,056 - wazuh_testing - DEBUG - 2022/02/02 21:14:04 wazuh-logcollector: INFO: (1950): Analyzing file: '/var/ossec/logs/active-responses.log'. 2022-02-02 17:14:11,056 - wazuh_testing - DEBUG - 2022/02/02 21:14:04 wazuh-logcollector: ERROR: (1103): Could not open file '/var/log/secure' due to [(2)-(No such file or directory)]. 2022-02-02 17:14:11,056 - wazuh_testing - DEBUG - 2022/02/02 21:14:04 wazuh-logcollector: INFO: (1950): Analyzing file: '/var/log/secure'. 2022-02-02 17:14:11,057 - wazuh_testing - DEBUG - 2022/02/02 21:14:04 wazuh-logcollector: INFO: Started (pid: 10212). 2022-02-02 17:14:11,057 - wazuh_testing - DEBUG - 2022/02/02 21:14:05 wazuh-syscheckd[10198] fim_db.c:436 at fim_db_check_transaction(): DEBUG: Database transaction completed. 2022-02-02 17:14:11,058 - wazuh_testing - DEBUG - 2022/02/02 21:14:05 wazuh-syscheckd[10198] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-02 17:14:11,058 - wazuh_testing - DEBUG - 2022/02/02 21:14:05 wazuh-syscheckd[10198] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-02 17:14:11,059 - wazuh_testing - DEBUG - 2022/02/02 21:14:05 wazuh-syscheckd[10198] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1643832845}} 2022-02-02 17:14:11,059 - wazuh_testing - DEBUG - 2022/02/02 21:14:05 wazuh-syscheckd[10198] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 1.347 sec (1.272 clock sec) 2022-02-02 17:14:11,060 - wazuh_testing - DEBUG - 2022/02/02 21:14:05 wazuh-syscheckd[10198] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1620, path count: 1626 2022-02-02 17:14:11,060 - wazuh_testing - DEBUG - 2022/02/02 21:14:05 wazuh-syscheckd[10198] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:14:11,061 - wazuh_testing - DEBUG - 2022/02/02 21:14:05 wazuh-syscheckd[10198] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:14:11,061 - wazuh_testing - DEBUG - 2022/02/02 21:14:05 wazuh-syscheckd[10198] run_check.c:387 at fim_run_realtime(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-02 17:14:11,062 - wazuh_testing - DEBUG - 2022/02/02 21:14:05 wazuh-syscheckd[10198] run_check.c:543 at log_realtime_status(): INFO: (6012): Real-time file integrity monitoring started. 2022-02-02 17:14:11,063 - wazuh_testing - DEBUG - 2022/02/02 21:14:05 wazuh-syscheckd[10198] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:14:11,063 - wazuh_testing - DEBUG - 2022/02/02 21:14:05 wazuh-syscheckd[10198] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. 2022-02-02 17:14:11,064 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-agent1 and message: .*Initializing FIM Integrity Synchronization check. (.+)$ 2022-02-02 17:14:12,025 - wazuh_testing - DEBUG - Cleaning temporal files... 2022-02-02 17:14:12,026 - wazuh_testing - DEBUG - Checking results... 2022-02-02 17:14:12,028 - wazuh_testing - DEBUG - Received from wazuh-agent1 the expected message: 2022/02/02 21:14:05 wazuh-syscheckd[10198] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds.
-------------------------------Captured log call--------------------------------
DEBUG testinfra:base.py:277 RUN CommandResult(command=b"ansible --tree /tmp/tmpo5xmn_8d -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m command --args 'mkdir testdir1' wazuh-agent1", exit_status=0, stdout=b'wazuh-agent1 | CHANGED | rc=0 >>\n\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('command', 'mkdir testdir1', {'check': False, 'become': False}): {'changed': True, 'cmd': ['mkdir', 'testdir1'], 'delta': '0:00:00.762006', 'end': '2022-02-02 21:13:23.636147', 'msg': '', 'rc': 0, 'start': '2022-02-02 21:13:22.874141', 'stderr': '', 'stderr_lines': [], 'stdout': '', 'stdout_lines': []} DEBUG testinfra:base.py:277 RUN CommandResult(command=b"ansible --tree /tmp/tmpjbmt3nik -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m command --args 'touch testdir1/testdir1.txt' wazuh-agent1", exit_status=0, stdout=b'wazuh-agent1 | CHANGED | rc=0 >>\n\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('command', 'touch testdir1/testdir1.txt', {'check': False, 'become': False}): {'changed': True, 'cmd': ['touch', 'testdir1/testdir1.txt'], 'delta': '0:00:00.773045', 'end': '2022-02-02 21:13:26.650122', 'msg': '', 'rc': 0, 'start': '2022-02-02 21:13:25.877077', 'stderr': '', 'stderr_lines': [], 'stdout': '', 'stdout_lines': []} DEBUG testinfra:base.py:277 RUN CommandResult(command=b"ansible --tree /tmp/tmpf56dgysp -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m service --args 'name=wazuh-agent state=restarted' wazuh-agent1", exit_status=0, stdout=b'wazuh-agent1 | CHANGED => {\n "changed": true,\n "name": "wazuh-agent",\n "state": "started"\n}\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('service', 'name=wazuh-agent state=restarted', {'check': False, 'become': False}): {'changed': True, 'name': 'wazuh-agent', 'state': 'started'} DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:1006 Cleaning temporal files... DEBUG wazuh_testing:monitoring.py:995 Checking results... DEBUG wazuh_testing:monitoring.py:1001 Received from wazuh-agent1 the expected message: 2022/02/02 21:13:37 wazuh-syscheckd[9747] run_check.c:82 at fim_send_sync_msg(): DEBUG: (6317): Sending integrity control message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1643832817,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"ad12ec2d50375d976b9fff41dee3598b7548bc24"}} DEBUG wazuh_testing:monitoring.py:1001 Received from wazuh-manager the expected message: 2022/02/02 21:13:13 wazuh-db[6338] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck save2 {"path":"/testdir1/tmp9og3znp5","version":2,"timestamp":1643832793,"attributes":{"type":"file","size":8,"perm":"rw-r--r--","uid":"0","gid":"0","user_name":"root","group_name":"root","inode":7239367,"mtime":1643832768,"hash_md5":"e770e54c4c42d3307c141c0c8948992a","hash_sha1":"9eab19985b11b15f91f936e463ea74f1dfe88e32","hash_sha256":"b1893f8d4b1596c20d6f83a784b2b0468c22fb83ce4ff2033ff86a37865d41d8","checksum":"1e366f6f1e86c31955a907fa28d0a5d8ec541437"}} DEBUG testinfra:base.py:277 RUN CommandResult(command=b'ansible --tree /tmp/tmpqiqkulm2 -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m copy --args \'dest=/var/ossec/logs/ossec.log content=\'"\'"\'\'"\'"\' force=yes\' wazuh-manager', exit_status=0, stdout=b'wazuh-manager | CHANGED => {\n "changed": true,\n "checksum": "da39a3ee5e6b4b0d3255bfef95601890afd80709",\n "dest": "/var/ossec/logs/ossec.log",\n "gid": 999,\n "group": "ossec",\n "md5sum": "d41d8cd98f00b204e9800998ecf8427e",\n "mode": "0660",\n "owner": "ossec",\n "size": 0,\n "src": "/root/.ansible/tmp/ansible-tmp-1643832824.457767-84142-21309624243764/source",\n "state": "file",\n "uid": 999\n}\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('copy', "dest=/var/ossec/logs/ossec.log content='' force=yes", {'check': False, 'become': False}): {'changed': True, 'checksum': 'da39a3ee5e6b4b0d3255bfef95601890afd80709', 'dest': '/var/ossec/logs/ossec.log', 'gid': 999, 'group': 'ossec', 'md5sum': 'd41d8cd98f00b204e9800998ecf8427e', 'mode': '0660', 'owner': 'ossec', 'size': 0, 'src': '/root/.ansible/tmp/ansible-tmp-1643832824.457767-84142-21309624243764/source', 'state': 'file', 'uid': 999} DEBUG testinfra:base.py:277 RUN CommandResult(command=b'ansible --tree /tmp/tmpfq22zprx -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m copy --args \'dest=/var/ossec/logs/ossec.log content=\'"\'"\'\'"\'"\' force=yes\' wazuh-agent1', exit_status=0, stdout=b'wazuh-agent1 | CHANGED => {\n "changed": true,\n "checksum": "da39a3ee5e6b4b0d3255bfef95601890afd80709",\n "dest": "/var/ossec/logs/ossec.log",\n "gid": 999,\n "group": "ossec",\n "md5sum": "d41d8cd98f00b204e9800998ecf8427e",\n "mode": "0660",\n "owner": "ossec",\n "size": 0,\n "src": "/root/.ansible/tmp/ansible-tmp-1643832829.2343402-84540-276396505067843/source",\n "state": "file",\n "uid": 999\n}\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('copy', "dest=/var/ossec/logs/ossec.log content='' force=yes", {'check': False, 'become': False}): {'changed': True, 'checksum': 'da39a3ee5e6b4b0d3255bfef95601890afd80709', 'dest': '/var/ossec/logs/ossec.log', 'gid': 999, 'group': 'ossec', 'md5sum': 'd41d8cd98f00b204e9800998ecf8427e', 'mode': '0660', 'owner': 'ossec', 'size': 0, 'src': '/root/.ansible/tmp/ansible-tmp-1643832829.2343402-84540-276396505067843/source', 'state': 'file', 'uid': 999} DEBUG testinfra:base.py:277 RUN CommandResult(command=b"ansible --tree /tmp/tmpqupdliul -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m command --args '/var/ossec/bin/wazuh-control stop' wazuh-agent1", exit_status=0, stdout=b'wazuh-agent1 | CHANGED | rc=0 >>\nKilling wazuh-modulesd... \nKilling wazuh-logcollector... \nKilling wazuh-syscheckd... \nKilling wazuh-agentd... \nKilling wazuh-execd... \nWazuh v4.2.5 Stopped\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('command', '/var/ossec/bin/wazuh-control stop', {'check': False, 'become': False}): {'changed': True, 'cmd': ['/var/ossec/bin/wazuh-control', 'stop'], 'delta': '0:00:01.399836', 'end': '2022-02-02 21:13:56.576419', 'msg': '', 'rc': 0, 'start': '2022-02-02 21:13:55.176583', 'stderr': '', 'stderr_lines': [], 'stdout': 'Killing wazuh-modulesd... \n' 'Killing wazuh-logcollector... \n' 'Killing wazuh-syscheckd... \n' 'Killing wazuh-agentd... \n' 'Killing wazuh-execd... \n' 'Wazuh v4.2.5 Stopped', 'stdout_lines': ['Killing wazuh-modulesd... ', 'Killing wazuh-logcollector... ', 'Killing wazuh-syscheckd... ', 'Killing wazuh-agentd... ', 'Killing wazuh-execd... ', 'Wazuh v4.2.5 Stopped']} DEBUG testinfra:base.py:277 RUN CommandResult(command=b"ansible --tree /tmp/tmpmi_rnp30 -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m command --args 'rm -rf testdir1' wazuh-agent1", exit_status=0, stdout=b'wazuh-agent1 | CHANGED | rc=0 >>\n\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('command', 'rm -rf testdir1', {'check': False, 'become': False}): {'changed': True, 'cmd': ['rm', '-rf', 'testdir1'], 'delta': '0:00:00.748000', 'end': '2022-02-02 21:13:59.630357', 'msg': '', 'rc': 0, 'start': '2022-02-02 21:13:58.882357', 'stderr': '', 'stderr_lines': [], 'stdout': '', 'stdout_lines': []} DEBUG testinfra:base.py:277 RUN CommandResult(command=b"ansible --tree /tmp/tmpan3f4ixd -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m command --args '/var/ossec/bin/wazuh-control start' wazuh-agent1", exit_status=0, stdout=b"wazuh-agent1 | CHANGED | rc=0 >>\nStarting Wazuh v4.2.5...\nStarted wazuh-execd...\nStarted wazuh-agentd...\nStarted wazuh-syscheckd...\nStarted wazuh-logcollector...\nStarted wazuh-modulesd...\nCompleted.2022/02/02 21:14:02 wazuh-syscheckd[10165] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized\n2022/02/02 21:14:02 wazuh-syscheckd[10165] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf'\n2022/02/02 21:14:02 wazuh-syscheckd[10165] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir1' due to [(2)-(No such file or directory)].\n2022/02/02 21:14:02 wazuh-syscheckd[10165] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)].\n2022/02/02 21:14:02 wazuh-syscheckd[10165] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)].\n2022/02/02 21:14:02 wazuh-syscheckd[10165] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc\n2022/02/02 21:14:02 wazuh-syscheckd[10165] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK?\n2022/02/02 21:14:02 wazuh-syscheckd[10165] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0\n2022/02/02 21:14:02 wazuh-syscheckd[10165] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$\n2022/02/02 21:14:02 wazuh-syscheckd[10165] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ OK?\n2022/02/02 21:14:02 wazuh-syscheckd[10165] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1\n2022/02/02 21:14:02 wazuh-syscheckd[10165] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf]\n2022/02/02 21:14:02 wazuh-syscheckd[10165] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile().\n2022/02/02 21:14:02 wazuh-syscheckd[10165] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10]\n2022/02/02 21:14:02 wazuh-syscheckd[10165] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes.\n2022/02/02 21:14:02 wazuh-syscheckd[10165] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile().\n2022/02/02 21:14:02 wazuh-syscheckd[10165] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10]\n2022/02/02 21:14:02 wazuh-syscheckd[10165] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes.\n2022/02/02 21:14:03 wazuh-syscheckd[10198] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized\n2022/02/02 21:14:03 wazuh-syscheckd[10198] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf'\n2022/02/02 21:14:03 wazuh-syscheckd[10198] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir1' due to [(2)-(No such file or directory)].\n2022/02/02 21:14:03 wazuh-syscheckd[10198] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)].\n2022/02/02 21:14:03 wazuh-syscheckd[10198] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)].\n2022/02/02 21:14:03 wazuh-syscheckd[10198] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc\n2022/02/02 21:14:03 wazuh-syscheckd[10198] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK?\n2022/02/02 21:14:03 wazuh-syscheckd[10198] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0\n2022/02/02 21:14:03 wazuh-syscheckd[10198] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$\n2022/02/02 21:14:03 wazuh-syscheckd[10198] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ OK?\n2022/02/02 21:14:03 wazuh-syscheckd[10198] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1\n2022/02/02 21:14:03 wazuh-syscheckd[10198] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf]\n2022/02/02 21:14:03 wazuh-syscheckd[10198] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile().\n2022/02/02 21:14:03 wazuh-syscheckd[10198] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10]\n2022/02/02 21:14:03 wazuh-syscheckd[10198] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes.\n2022/02/02 21:14:03 wazuh-syscheckd[10198] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile().\n2022/02/02 21:14:03 wazuh-syscheckd[10198] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10]\n2022/02/02 21:14:03 wazuh-syscheckd[10198] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes.\n2022/02/02 21:14:03 rootcheck[10198] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled.\n", stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('command', '/var/ossec/bin/wazuh-control start', {'check': False, 'become': False}): {'changed': True, 'cmd': ['/var/ossec/bin/wazuh-control', 'start'], 'delta': '0:00:06.799182', 'end': '2022-02-02 21:14:08.740836', 'msg': '', 'rc': 0, 'start': '2022-02-02 21:14:01.941654', 'stderr': '2022/02/02 21:14:02 wazuh-syscheckd[10165] debug_op.c:70 at ' '_log(): DEBUG: Logging module auto-initialized\n' '2022/02/02 21:14:02 wazuh-syscheckd[10165] config.c:87 at ' 'Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: ' "'etc/ossec.conf'\n" '2022/02/02 21:14:02 wazuh-syscheckd[10165] syscheck-config.c:1218 ' 'at read_attr(): DEBUG: Could not check the real path of ' "'/testdir1' due to [(2)-(No such file or directory)].\n" '2022/02/02 21:14:02 wazuh-syscheckd[10165] syscheck-config.c:1218 ' 'at read_attr(): DEBUG: Could not check the real path of ' "'/testdir2' due to [(2)-(No such file or directory)].\n" '2022/02/02 21:14:02 wazuh-syscheckd[10165] syscheck-config.c:1218 ' 'at read_attr(): DEBUG: Could not check the real path of ' "'/testdir3' due to [(2)-(No such file or directory)].\n" '2022/02/02 21:14:02 wazuh-syscheckd[10165] syscheck-config.c:2520 ' 'at process_option_regex(): DEBUG: Found ignore regex node ^/proc\n' '2022/02/02 21:14:02 wazuh-syscheckd[10165] syscheck-config.c:2527 ' 'at process_option_regex(): DEBUG: Found ignore regex node ^/proc ' 'OK?\n' '2022/02/02 21:14:02 wazuh-syscheckd[10165] syscheck-config.c:2528 ' 'at process_option_regex(): DEBUG: Found ignore regex size 0\n' '2022/02/02 21:14:02 wazuh-syscheckd[10165] syscheck-config.c:2520 ' 'at process_option_regex(): DEBUG: Found ignore regex node ' '.log$|.swp$\n' '2022/02/02 21:14:02 wazuh-syscheckd[10165] syscheck-config.c:2527 ' 'at process_option_regex(): DEBUG: Found ignore regex node ' '.log$|.swp$ OK?\n' '2022/02/02 21:14:02 wazuh-syscheckd[10165] syscheck-config.c:2528 ' 'at process_option_regex(): DEBUG: Found ignore regex size 1\n' '2022/02/02 21:14:02 wazuh-syscheckd[10165] config.c:95 at ' 'Read_Syscheck_Config(): DEBUG: (6208): Reading Client ' 'Configuration [etc/ossec.conf]\n' '2022/02/02 21:14:02 wazuh-syscheckd[10165] agent_op.c:208 at ' 'os_read_agent_profile(): DEBUG: Calling os_read_agent_profile().\n' '2022/02/02 21:14:02 wazuh-syscheckd[10165] agent_op.c:227 at ' 'os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, ' 'debian10]\n' '2022/02/02 21:14:02 wazuh-syscheckd[10165] config.c:375 at ' 'ReadConfig(): DEBUG: agent_config element does not have any ' 'attributes.\n' '2022/02/02 21:14:02 wazuh-syscheckd[10165] agent_op.c:208 at ' 'os_read_agent_profile(): DEBUG: Calling os_read_agent_profile().\n' '2022/02/02 21:14:02 wazuh-syscheckd[10165] agent_op.c:227 at ' 'os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, ' 'debian10]\n' '2022/02/02 21:14:02 wazuh-syscheckd[10165] config.c:375 at ' 'ReadConfig(): DEBUG: agent_config element does not have any ' 'attributes.\n' '2022/02/02 21:14:03 wazuh-syscheckd[10198] debug_op.c:70 at ' '_log(): DEBUG: Logging module auto-initialized\n' '2022/02/02 21:14:03 wazuh-syscheckd[10198] config.c:87 at ' 'Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: ' "'etc/ossec.conf'\n" '2022/02/02 21:14:03 wazuh-syscheckd[10198] syscheck-config.c:1218 ' 'at read_attr(): DEBUG: Could not check the real path of ' "'/testdir1' due to [(2)-(No such file or directory)].\n" '2022/02/02 21:14:03 wazuh-syscheckd[10198] syscheck-config.c:1218 ' 'at read_attr(): DEBUG: Could not check the real path of ' "'/testdir2' due to [(2)-(No such file or directory)].\n" '2022/02/02 21:14:03 wazuh-syscheckd[10198] syscheck-config.c:1218 ' 'at read_attr(): DEBUG: Could not check the real path of ' "'/testdir3' due to [(2)-(No such file or directory)].\n" '2022/02/02 21:14:03 wazuh-syscheckd[10198] syscheck-config.c:2520 ' 'at process_option_regex(): DEBUG: Found ignore regex node ^/proc\n' '2022/02/02 21:14:03 wazuh-syscheckd[10198] syscheck-config.c:2527 ' 'at process_option_regex(): DEBUG: Found ignore regex node ^/proc ' 'OK?\n' '2022/02/02 21:14:03 wazuh-syscheckd[10198] syscheck-config.c:2528 ' 'at process_option_regex(): DEBUG: Found ignore regex size 0\n' '2022/02/02 21:14:03 wazuh-syscheckd[10198] syscheck-config.c:2520 ' 'at process_option_regex(): DEBUG: Found ignore regex node ' '.log$|.swp$\n' '2022/02/02 21:14:03 wazuh-syscheckd[10198] syscheck-config.c:2527 ' 'at process_option_regex(): DEBUG: Found ignore regex node ' '.log$|.swp$ OK?\n' '2022/02/02 21:14:03 wazuh-syscheckd[10198] syscheck-config.c:2528 ' 'at process_option_regex(): DEBUG: Found ignore regex size 1\n' '2022/02/02 21:14:03 wazuh-syscheckd[10198] config.c:95 at ' 'Read_Syscheck_Config(): DEBUG: (6208): Reading Client ' 'Configuration [etc/ossec.conf]\n' '2022/02/02 21:14:03 wazuh-syscheckd[10198] agent_op.c:208 at ' 'os_read_agent_profile(): DEBUG: Calling os_read_agent_profile().\n' '2022/02/02 21:14:03 wazuh-syscheckd[10198] agent_op.c:227 at ' 'os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, ' 'debian10]\n' '2022/02/02 21:14:03 wazuh-syscheckd[10198] config.c:375 at ' 'ReadConfig(): DEBUG: agent_config element does not have any ' 'attributes.\n' '2022/02/02 21:14:03 wazuh-syscheckd[10198] agent_op.c:208 at ' 'os_read_agent_profile(): DEBUG: Calling os_read_agent_profile().\n' '2022/02/02 21:14:03 wazuh-syscheckd[10198] agent_op.c:227 at ' 'os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, ' 'debian10]\n' '2022/02/02 21:14:03 wazuh-syscheckd[10198] config.c:375 at ' 'ReadConfig(): DEBUG: agent_config element does not have any ' 'attributes.\n' '2022/02/02 21:14:03 rootcheck[10198] rootcheck.c:202 at ' 'rootcheck_init(): INFO: Rootcheck disabled.', 'stderr_lines': ['2022/02/02 21:14:02 wazuh-syscheckd[10165] debug_op.c:70 at ' '_log(): DEBUG: Logging module auto-initialized', '2022/02/02 21:14:02 wazuh-syscheckd[10165] config.c:87 at ' 'Read_Syscheck_Config(): DEBUG: (6287): Reading ' "configuration file: 'etc/ossec.conf'", '2022/02/02 21:14:02 wazuh-syscheckd[10165] ' 'syscheck-config.c:1218 at read_attr(): DEBUG: Could not ' "check the real path of '/testdir1' due to [(2)-(No such " 'file or directory)].', '2022/02/02 21:14:02 wazuh-syscheckd[10165] ' 'syscheck-config.c:1218 at read_attr(): DEBUG: Could not ' "check the real path of '/testdir2' due to [(2)-(No such " 'file or directory)].', '2022/02/02 21:14:02 wazuh-syscheckd[10165] ' 'syscheck-config.c:1218 at read_attr(): DEBUG: Could not ' "check the real path of '/testdir3' due to [(2)-(No such " 'file or directory)].', '2022/02/02 21:14:02 wazuh-syscheckd[10165] ' 'syscheck-config.c:2520 at process_option_regex(): DEBUG: ' 'Found ignore regex node ^/proc', '2022/02/02 21:14:02 wazuh-syscheckd[10165] ' 'syscheck-config.c:2527 at process_option_regex(): DEBUG: ' 'Found ignore regex node ^/proc OK?', '2022/02/02 21:14:02 wazuh-syscheckd[10165] ' 'syscheck-config.c:2528 at process_option_regex(): DEBUG: ' 'Found ignore regex size 0', '2022/02/02 21:14:02 wazuh-syscheckd[10165] ' 'syscheck-config.c:2520 at process_option_regex(): DEBUG: ' 'Found ignore regex node .log$|.swp$', '2022/02/02 21:14:02 wazuh-syscheckd[10165] ' 'syscheck-config.c:2527 at process_option_regex(): DEBUG: ' 'Found ignore regex node .log$|.swp$ OK?', '2022/02/02 21:14:02 wazuh-syscheckd[10165] ' 'syscheck-config.c:2528 at process_option_regex(): DEBUG: ' 'Found ignore regex size 1', '2022/02/02 21:14:02 wazuh-syscheckd[10165] config.c:95 at ' 'Read_Syscheck_Config(): DEBUG: (6208): Reading Client ' 'Configuration [etc/ossec.conf]', '2022/02/02 21:14:02 wazuh-syscheckd[10165] agent_op.c:208 ' 'at os_read_agent_profile(): DEBUG: Calling ' 'os_read_agent_profile().', '2022/02/02 21:14:02 wazuh-syscheckd[10165] agent_op.c:227 ' 'at os_read_agent_profile(): DEBUG: os_read_agent_profile() ' '= [debian, debian10]', '2022/02/02 21:14:02 wazuh-syscheckd[10165] config.c:375 at ' 'ReadConfig(): DEBUG: agent_config element does not have any ' 'attributes.', '2022/02/02 21:14:02 wazuh-syscheckd[10165] agent_op.c:208 ' 'at os_read_agent_profile(): DEBUG: Calling ' 'os_read_agent_profile().', '2022/02/02 21:14:02 wazuh-syscheckd[10165] agent_op.c:227 ' 'at os_read_agent_profile(): DEBUG: os_read_agent_profile() ' '= [debian, debian10]', '2022/02/02 21:14:02 wazuh-syscheckd[10165] config.c:375 at ' 'ReadConfig(): DEBUG: agent_config element does not have any ' 'attributes.', '2022/02/02 21:14:03 wazuh-syscheckd[10198] debug_op.c:70 at ' '_log(): DEBUG: Logging module auto-initialized', '2022/02/02 21:14:03 wazuh-syscheckd[10198] config.c:87 at ' 'Read_Syscheck_Config(): DEBUG: (6287): Reading ' "configuration file: 'etc/ossec.conf'", '2022/02/02 21:14:03 wazuh-syscheckd[10198] ' 'syscheck-config.c:1218 at read_attr(): DEBUG: Could not ' "check the real path of '/testdir1' due to [(2)-(No such " 'file or directory)].', '2022/02/02 21:14:03 wazuh-syscheckd[10198] ' 'syscheck-config.c:1218 at read_attr(): DEBUG: Could not ' "check the real path of '/testdir2' due to [(2)-(No such " 'file or directory)].', '2022/02/02 21:14:03 wazuh-syscheckd[10198] ' 'syscheck-config.c:1218 at read_attr(): DEBUG: Could not ' "check the real path of '/testdir3' due to [(2)-(No such " 'file or directory)].', '2022/02/02 21:14:03 wazuh-syscheckd[10198] ' 'syscheck-config.c:2520 at process_option_regex(): DEBUG: ' 'Found ignore regex node ^/proc', '2022/02/02 21:14:03 wazuh-syscheckd[10198] ' 'syscheck-config.c:2527 at process_option_regex(): DEBUG: ' 'Found ignore regex node ^/proc OK?', '2022/02/02 21:14:03 wazuh-syscheckd[10198] ' 'syscheck-config.c:2528 at process_option_regex(): DEBUG: ' 'Found ignore regex size 0', '2022/02/02 21:14:03 wazuh-syscheckd[10198] ' 'syscheck-config.c:2520 at process_option_regex(): DEBUG: ' 'Found ignore regex node .log$|.swp$', '2022/02/02 21:14:03 wazuh-syscheckd[10198] ' 'syscheck-config.c:2527 at process_option_regex(): DEBUG: ' 'Found ignore regex node .log$|.swp$ OK?', '2022/02/02 21:14:03 wazuh-syscheckd[10198] ' 'syscheck-config.c:2528 at process_option_regex(): DEBUG: ' 'Found ignore regex size 1', '2022/02/02 21:14:03 wazuh-syscheckd[10198] config.c:95 at ' 'Read_Syscheck_Config(): DEBUG: (6208): Reading Client ' 'Configuration [etc/ossec.conf]', '2022/02/02 21:14:03 wazuh-syscheckd[10198] agent_op.c:208 ' 'at os_read_agent_profile(): DEBUG: Calling ' 'os_read_agent_profile().', '2022/02/02 21:14:03 wazuh-syscheckd[10198] agent_op.c:227 ' 'at os_read_agent_profile(): DEBUG: os_read_agent_profile() ' '= [debian, debian10]', '2022/02/02 21:14:03 wazuh-syscheckd[10198] config.c:375 at ' 'ReadConfig(): DEBUG: agent_config element does not have any ' 'attributes.', '2022/02/02 21:14:03 wazuh-syscheckd[10198] agent_op.c:208 ' 'at os_read_agent_profile(): DEBUG: Calling ' 'os_read_agent_profile().', '2022/02/02 21:14:03 wazuh-syscheckd[10198] agent_op.c:227 ' 'at os_read_agent_profile(): DEBUG: os_read_agent_profile() ' '= [debian, debian10]', '2022/02/02 21:14:03 wazuh-syscheckd[10198] config.c:375 at ' 'ReadConfig(): DEBUG: agent_config element does not have any ' 'attributes.', '2022/02/02 21:14:03 rootcheck[10198] rootcheck.c:202 at ' 'rootcheck_init(): INFO: Rootcheck disabled.'], 'stdout': 'Starting Wazuh v4.2.5...\n' 'Started wazuh-execd...\n' 'Started wazuh-agentd...\n' 'Started wazuh-syscheckd...\n' 'Started wazuh-logcollector...\n' 'Started wazuh-modulesd...\n' 'Completed.', 'stdout_lines': ['Starting Wazuh v4.2.5...', 'Started wazuh-execd...', 'Started wazuh-agentd...', 'Started wazuh-syscheckd...', 'Started wazuh-logcollector...', 'Started wazuh-modulesd...', 'Completed.']} DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:1006 Cleaning temporal files... DEBUG wazuh_testing:monitoring.py:995 Checking results... DEBUG wazuh_testing:monitoring.py:1001 Received from wazuh-agent1 the expected message: 2022/02/02 21:14:05 wazuh-syscheckd[10198] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. DEBUG testinfra:base.py:277 RUN CommandResult(command=b'ansible --tree /tmp/tmpyvkd0_06 -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m command --args \'python /var/system_query_db.py --db_path /var/ossec/queue/db/001.db --query " select * from fim_entry where full_path=\'"\'"\'"\'"\'"\'/testdir1/testdir1.txt\'"\'"\'"\'"\'"\'"\' wazuh-manager', exit_status=0, stdout=b'wazuh-manager | CHANGED | rc=0 >>\n[]\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('command', 'python /var/system_query_db.py --db_path /var/ossec/queue/db/001.db --query " select * from fim_entry where full_path=\'"\'/testdir1/testdir1.txt\'"\'"', {'check': False, 'become': False}): {'changed': True, 'cmd': ['python', '/var/system_query_db.py', '--db_path', '/var/ossec/queue/db/001.db', '--query', " select * from fim_entry where full_path='/testdir1/testdir1.txt'"], 'delta': '0:00:00.894049', 'end': '2022-02-02 21:14:19.962520', 'msg': '', 'rc': 0, 'start': '2022-02-02 21:14:19.068471', 'stderr': '', 'stderr_lines': [], 'stdout': '[]', 'stdout_lines': ['[]']} DEBUG testinfra:base.py:277 RUN CommandResult(command=b'ansible --tree /tmp/tmpdzv2v25s -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m command --args \'rm -rf \'"\'"\'/testdir1/testdir1.txt\'"\'"\'\' wazuh-agent1', exit_status=0, stdout=b'wazuh-agent1 | CHANGED | rc=0 >>\n\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('command', "rm -rf '/testdir1/testdir1.txt'", {'check': False, 'become': False}): {'changed': True, 'cmd': ['rm', '-rf', '/testdir1/testdir1.txt'], 'delta': '0:00:00.829514', 'end': '2022-02-02 21:14:23.071501', 'msg': '', 'rc': 0, 'start': '2022-02-02 21:14:22.241987', 'stderr': '', 'stderr_lines': [], 'stdout': '', 'stdout_lines': []}

------------------------------Captured stderr call------------------------------
2022-02-02 17:14:44,203 - wazuh_testing - DEBUG - Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-02 17:14:44,206 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-02 17:14:44,208 - wazuh_testing - DEBUG - Starting file composer for wazuh-agent1 and path: /var/ossec/logs/ossec.log. Composite file in /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-agent1_ossec.log.tmp 2022-02-02 17:14:44,210 - wazuh_testing - DEBUG - Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-02 17:14:44,212 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-agent1 and message: .*Sending integrity control message: (.+)$ 2022-02-02 17:14:44,212 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-02 17:14:44,212 - wazuh_testing - DEBUG - Starting file composer for wazuh-manager and path: /var/ossec/logs/ossec.log. Composite file in /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-manager_ossec.log.tmp 2022-02-02 17:14:44,214 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-manager and message: .*Agent 001 query: (.+) save2 2022-02-02 17:14:46,214 - wazuh_testing - DEBUG - 2022/02/02 21:13:56 wazuh-logcollector: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:14:46,214 - wazuh_testing - DEBUG - 2022/02/02 21:13:56 wazuh-syscheckd[9747] sig_op.c:49 at HandleSIG(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:14:46,214 - wazuh_testing - DEBUG - 2022/02/02 21:13:56 wazuh-agentd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:14:46,215 - wazuh_testing - DEBUG - 2022/02/02 21:13:56 wazuh-execd: INFO: (1314): Shutdown received. Deleting responses. 2022-02-02 17:14:46,215 - wazuh_testing - DEBUG - 2022/02/02 21:13:56 wazuh-execd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:14:46,215 - wazuh_testing - DEBUG - 2022/02/02 21:14:02 wazuh-syscheckd[10165] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-02 17:14:46,215 - wazuh_testing - DEBUG - 2022/02/02 21:14:02 wazuh-syscheckd[10165] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-02 17:14:46,215 - wazuh_testing - DEBUG - 2022/02/02 21:14:02 wazuh-syscheckd[10165] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir1' due to [(2)-(No such file or directory)]. 2022-02-02 17:14:46,216 - wazuh_testing - DEBUG - 2022/02/02 21:14:02 wazuh-syscheckd[10165] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-02 17:14:46,216 - wazuh_testing - DEBUG - 2022/02/02 21:14:02 wazuh-syscheckd[10165] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-02 17:14:46,216 - wazuh_testing - DEBUG - 2022/02/02 21:14:02 wazuh-syscheckd[10165] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-02 17:14:46,216 - wazuh_testing - DEBUG - 2022/02/02 21:13:50 wazuh-db[6338] wdb.c:918 at wdb_commit_old(): DEBUG: Agent 'tasks' database commited. Time: 0.049 ms. 2022-02-02 17:14:46,216 - wazuh_testing - DEBUG - 2022/02/02 21:14:02 wazuh-syscheckd[10165] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-02 17:14:46,216 - wazuh_testing - DEBUG - 2022/02/02 21:13:51 wazuh-db[6338] wdb.c:918 at wdb_commit_old(): DEBUG: Agent '001' database commited. Time: 52.918 ms. 2022-02-02 17:14:46,216 - wazuh_testing - DEBUG - 2022/02/02 21:14:02 wazuh-syscheckd[10165] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-02 17:14:46,217 - wazuh_testing - DEBUG - 2022/02/02 21:14:02 wazuh-syscheckd[10165] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ 2022-02-02 17:14:46,217 - wazuh_testing - DEBUG - 2022/02/02 21:14:02 wazuh-syscheckd[10165] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ OK? 2022-02-02 17:14:46,217 - wazuh_testing - DEBUG - 2022/02/02 21:13:55 wazuh-db[6338] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.18.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.18.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.13.0-27-generic |#29~20.04.1-Ubuntu SMP Fri Jan 14 00:32:30 UTC 2022 |x86_64","os_arch":"x86_64"} 2022-02-02 17:14:46,217 - wazuh_testing - DEBUG - 2022/02/02 21:14:02 wazuh-syscheckd[10165] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-02 17:14:46,217 - wazuh_testing - DEBUG - 2022/02/02 21:14:02 wazuh-syscheckd[10165] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-02 17:14:46,217 - wazuh_testing - DEBUG - 2022/02/02 21:13:56 wazuh-db[6338] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-connection-status {"id":1,"connection_status":"disconnected","sync_status":"synced"} 2022-02-02 17:14:46,218 - wazuh_testing - DEBUG - 2022/02/02 21:14:02 wazuh-syscheckd[10165] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-02 17:14:46,218 - wazuh_testing - DEBUG - 2022/02/02 21:13:56 wazuh-db[6338] main.c:290 at run_dealer(): DEBUG: New client connected (39). 2022-02-02 17:14:46,218 - wazuh_testing - DEBUG - 2022/02/02 21:13:56 wazuh-db[6338] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: get-labels 1 2022-02-02 17:14:46,218 - wazuh_testing - DEBUG - 2022/02/02 21:14:02 wazuh-syscheckd[10165] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-02 17:14:46,218 - wazuh_testing - DEBUG - 2022/02/02 21:14:02 wazuh-db[6338] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-keepalive {"id":1,"connection_status":"pending","sync_status":"synced"} 2022-02-02 17:14:46,218 - wazuh_testing - DEBUG - 2022/02/02 21:14:02 wazuh-syscheckd[10165] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-02 17:14:46,218 - wazuh_testing - DEBUG - 2022/02/02 21:14:02 wazuh-syscheckd[10165] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-02 17:14:46,218 - wazuh_testing - DEBUG - 2022/02/02 21:14:02 wazuh-syscheckd[10165] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-02 17:14:46,219 - wazuh_testing - DEBUG - 2022/02/02 21:14:02 wazuh-syscheckd[10165] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-02 17:14:46,219 - wazuh_testing - DEBUG - 2022/02/02 21:14:06 wazuh-db[6338] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.18.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.18.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.13.0-27-generic |#29~20.04.1-Ubuntu SMP Fri Jan 14 00:32:30 UTC 2022 |x86_64","os_arch":"x86_64"} 2022-02-02 17:14:46,219 - wazuh_testing - DEBUG - 2022/02/02 21:14:02 wazuh-execd: INFO: Started (pid: 10178). 2022-02-02 17:14:46,219 - wazuh_testing - DEBUG - 2022/02/02 21:14:02 wazuh-agentd: INFO: (1410): Reading authentication keys file. 2022-02-02 17:14:46,219 - wazuh_testing - DEBUG - 2022/02/02 21:14:06 wazuh-db[6338] main.c:290 at run_dealer(): DEBUG: New client connected (40). 2022-02-02 17:14:46,219 - wazuh_testing - DEBUG - 2022/02/02 21:14:02 wazuh-agentd: INFO: Using notify time: 10 and max time to reconnect: 60 2022-02-02 17:14:46,220 - wazuh_testing - DEBUG - 2022/02/02 21:14:06 wazuh-db[6338] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1643832843 2022-02-02 17:14:46,220 - wazuh_testing - DEBUG - 2022/02/02 21:14:02 wazuh-agentd: INFO: Version detected -> Linux |wazuh-agent1 |5.13.0-27-generic |#29~20.04.1-Ubuntu SMP Fri Jan 14 00:32:30 UTC 2022 |x86_64 [Debian GNU/Linux|debian: 10 (buster)] - Wazuh v4.2.5 2022-02-02 17:14:46,220 - wazuh_testing - DEBUG - 2022/02/02 21:14:06 wazuh-db[6338] main.c:290 at run_dealer(): DEBUG: New client connected (41). 2022-02-02 17:14:46,220 - wazuh_testing - DEBUG - 2022/02/02 21:14:02 wazuh-agentd: INFO: Started (pid: 10187). 2022-02-02 17:14:46,220 - wazuh_testing - DEBUG - 2022/02/02 21:14:06 wazuh-db[6338] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update end_scan 1643832845 2022-02-02 17:14:46,220 - wazuh_testing - DEBUG - 2022/02/02 21:14:02 wazuh-agentd: INFO: Server IP Address: wazuh-manager/172.18.0.2 2022-02-02 17:14:46,220 - wazuh_testing - DEBUG - 2022/02/02 21:14:02 wazuh-agentd: INFO: Using AES as encryption method. 2022-02-02 17:14:46,221 - wazuh_testing - DEBUG - 2022/02/02 21:14:06 wazuh-db[6338] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_global {"id":1643832845,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"a16be20a7c6f9aeb8c0b88be2ee52f3745ce94db"} 2022-02-02 17:14:46,221 - wazuh_testing - DEBUG - 2022/02/02 21:14:02 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.18.0.2:1514/tcp). 2022-02-02 17:14:46,221 - wazuh_testing - DEBUG - 2022/02/02 21:14:06 wazuh-db[6338] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 1.530 ms. 2022-02-02 17:14:46,221 - wazuh_testing - DEBUG - 2022/02/02 21:14:02 wazuh-agentd: INFO: (4102): Connected to the server (wazuh-manager/172.18.0.2:1514/tcp). 2022-02-02 17:14:46,221 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-02 17:14:46,221 - wazuh_testing - DEBUG - 2022/02/02 21:14:06 wazuh-db[6338] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643832845,"version":2,"begin":"/bin/bash","end":"/sbin/chcpu","tail":"/sbin/ctrlaltdel","checksum":"2678c972016eb9b2978d2d495f53f99563497651"} 2022-02-02 17:14:46,221 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-02 17:14:46,222 - wazuh_testing - DEBUG - 2022/02/02 21:14:06 wazuh-db[6338] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 1.101 ms. 2022-02-02 17:14:46,222 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir1' due to [(2)-(No such file or directory)]. 2022-02-02 17:14:46,222 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-02 17:14:46,222 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-02 17:14:46,222 - wazuh_testing - DEBUG - 2022/02/02 21:14:06 wazuh-db[6338] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643832845,"version":2,"begin":"/sbin/ctrlaltdel","end":"/usr/sbin/zic","checksum":"3393f699e130b3be6690797667d9994f0195fd11"} 2022-02-02 17:14:46,222 - wazuh_testing - DEBUG - 2022/02/02 21:14:06 wazuh-db[6338] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 1.051 ms. 2022-02-02 17:14:46,222 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-02 17:14:46,223 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-02 17:14:46,223 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-02 17:14:46,223 - wazuh_testing - DEBUG - 2022/02/02 21:14:06 wazuh-db[6338] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643832845,"version":2,"begin":"/sbin/ctrlaltdel","end":"/usr/bin/pdb","tail":"/usr/bin/pdb2","checksum":"d1cec19ff76b3bfc82c10cfed59092f213e17f84"} 2022-02-02 17:14:46,223 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ 2022-02-02 17:14:46,223 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ OK? 2022-02-02 17:14:46,223 - wazuh_testing - DEBUG - 2022/02/02 21:14:06 wazuh-db[6338] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643832845,"version":2,"begin":"/usr/bin/pdb2","end":"/usr/sbin/zic","checksum":"f28534dbcbabe145177a8e0c707d9da341991c1f"} 2022-02-02 17:14:46,224 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-02 17:14:46,224 - wazuh_testing - DEBUG - 2022/02/02 21:14:06 wazuh-db[6338] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.458 ms. 2022-02-02 17:14:46,224 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-02 17:14:46,224 - wazuh_testing - DEBUG - 2022/02/02 21:14:06 wazuh-db[6338] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.440 ms. 2022-02-02 17:14:46,224 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-02 17:14:46,224 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-02 17:14:46,225 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-02 17:14:46,225 - wazuh_testing - DEBUG - 2022/02/02 21:14:06 wazuh-db[6338] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643832845,"version":2,"begin":"/sbin/ctrlaltdel","end":"/usr/bin/dpkg-genbuildinfo","tail":"/usr/bin/dpkg-genchanges","checksum":"ed90eaae5c6a72f30ccab79defb373629dd14fc4"} 2022-02-02 17:14:46,225 - wazuh_testing - DEBUG - 2022/02/02 21:14:06 wazuh-db[6338] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.208 ms. 2022-02-02 17:14:46,226 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-02 17:14:46,226 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-02 17:14:46,226 - wazuh_testing - DEBUG - 2022/02/02 21:14:06 wazuh-db[6338] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643832845,"version":2,"begin":"/usr/bin/dpkg-genchanges","end":"/usr/bin/pdb","checksum":"eb75a296402d7fde40b260bd83e11cab79627aa2"} 2022-02-02 17:14:46,227 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-02 17:14:46,227 - wazuh_testing - DEBUG - 2022/02/02 21:14:06 wazuh-db[6338] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.165 ms. 2022-02-02 17:14:46,227 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 rootcheck[10198] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled. 2022-02-02 17:14:46,227 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:14:46,228 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] syscom.c:123 at syscom_main(): DEBUG: (6284): Local requests thread ready. 2022-02-02 17:14:46,228 - wazuh_testing - DEBUG - 2022/02/02 21:14:06 wazuh-db[6338] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643832845,"version":2,"begin":"/sbin/ctrlaltdel","end":"/usr/bin/apt-ftparchive","tail":"/usr/bin/apt-get","checksum":"f5edf206db115c7c23d212a1be7bfd86c7170d8c"} 2022-02-02 17:14:46,228 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] mq_op.c:47 at StartMQ(): DEBUG: Connected succesfully to 'queue/sockets/queue' after 0 attempts 2022-02-02 17:14:46,228 - wazuh_testing - DEBUG - 2022/02/02 21:14:06 wazuh-db[6338] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.132 ms. 2022-02-02 17:14:46,229 - wazuh_testing - DEBUG - 2022/02/02 21:14:06 wazuh-db[6338] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643832845,"version":2,"begin":"/usr/bin/apt-get","end":"/usr/bin/dpkg-genbuildinfo","checksum":"1ca7703572f6fb20e5ce43a506515cbd196a18f0"} 2022-02-02 17:14:46,229 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] mq_op.c:48 at StartMQ(): DEBUG: (unix_domain) Maximum send buffer set to: '212992'. 2022-02-02 17:14:46,229 - wazuh_testing - DEBUG - 2022/02/02 21:14:06 wazuh-db[6338] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.101 ms. 2022-02-02 17:14:46,229 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] main.c:185 at main(): INFO: Started (pid: 10200). 2022-02-02 17:14:46,229 - wazuh_testing - DEBUG - 2022/02/02 21:14:06 wazuh-db[6338] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643832845,"version":2,"begin":"/sbin/ctrlaltdel","end":"/sbin/mkhomedir_helper","tail":"/sbin/mkswap","checksum":"f4094767b5033606e4a60c0075f429a93f720519"} 2022-02-02 17:14:46,229 - wazuh_testing - DEBUG - 2022/02/02 21:14:06 wazuh-db[6338] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.137 ms. 2022-02-02 17:14:46,229 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] main.c:193 at main(): INFO: (6003): Monitoring path: '/bin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:14:46,230 - wazuh_testing - DEBUG - 2022/02/02 21:14:07 wazuh-db[6338] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643832845,"version":2,"begin":"/sbin/mkswap","end":"/usr/bin/apt-ftparchive","checksum":"6728c9aeb02088a7e93eabd75f5eae227ffca2d8"} 2022-02-02 17:14:46,230 - wazuh_testing - DEBUG - 2022/02/02 21:14:07 wazuh-db[6338] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.145 ms. 2022-02-02 17:14:46,230 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] main.c:193 at main(): INFO: (6003): Monitoring path: '/boot', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:14:46,230 - wazuh_testing - DEBUG - 2022/02/02 21:14:07 wazuh-db[6338] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643832845,"version":2,"begin":"/sbin/mkswap","end":"/sbin/start-stop-daemon","tail":"/sbin/sulogin","checksum":"205673eafd86478a9bae30a249a954bab122f47f"} 2022-02-02 17:14:46,230 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] main.c:193 at main(): INFO: (6003): Monitoring path: '/etc', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:14:46,230 - wazuh_testing - DEBUG - 2022/02/02 21:14:07 wazuh-db[6338] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.125 ms. 2022-02-02 17:14:46,231 - wazuh_testing - DEBUG - 2022/02/02 21:14:07 wazuh-db[6338] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643832845,"version":2,"begin":"/sbin/sulogin","end":"/usr/bin/apt-ftparchive","checksum":"d8c522934b810af25bfee7be7a6737c09639b37d"} 2022-02-02 17:14:46,231 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] main.c:193 at main(): INFO: (6003): Monitoring path: '/sbin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:14:46,231 - wazuh_testing - DEBUG - 2022/02/02 21:14:07 wazuh-db[6338] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.093 ms. 2022-02-02 17:14:46,231 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir1', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:14:46,231 - wazuh_testing - DEBUG - 2022/02/02 21:14:07 wazuh-db[6338] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643832845,"version":2,"begin":"/sbin/sulogin","end":"/sbin/wipefs","tail":"/sbin/zramctl","checksum":"157570556203dc9b1df7834dbf4e4a20ab33cfca"} 2022-02-02 17:14:46,231 - wazuh_testing - DEBUG - 2022/02/02 21:14:07 wazuh-db[6338] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.089 ms. 2022-02-02 17:14:46,232 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir2', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | realtime'. 2022-02-02 17:14:46,232 - wazuh_testing - DEBUG - 2022/02/02 21:14:07 wazuh-db[6338] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643832845,"version":2,"begin":"/sbin/zramctl","end":"/usr/bin/apt-ftparchive","checksum":"7624a50bf46452e7642bde5d7712770d1c893f34"} 2022-02-02 17:14:46,232 - wazuh_testing - DEBUG - 2022/02/02 21:14:07 wazuh-db[6338] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.079 ms. 2022-02-02 17:14:46,232 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir3', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | whodata'. 2022-02-02 17:14:46,232 - wazuh_testing - DEBUG - 2022/02/02 21:14:07 wazuh-db[6338] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643832845,"version":2,"begin":"/sbin/zramctl","end":"/usr/bin/addpart","tail":"/usr/bin/addr2line","checksum":"32e32f7d38d29108c84661f718e349fbd8859dce"} 2022-02-02 17:14:46,233 - wazuh_testing - DEBUG - 2022/02/02 21:14:07 wazuh-db[6338] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.073 ms. 2022-02-02 17:14:46,233 - wazuh_testing - DEBUG - 2022/02/02 21:14:07 wazuh-db[6338] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643832845,"version":2,"begin":"/usr/bin/addr2line","end":"/usr/bin/apt-ftparchive","checksum":"c0d84c2c7e8b48f71eed09e55bca084064b30ab0"} 2022-02-02 17:14:46,233 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/bin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:14:46,233 - wazuh_testing - DEBUG - 2022/02/02 21:14:07 wazuh-db[6338] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.087 ms. 2022-02-02 17:14:46,233 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/sbin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:14:46,234 - wazuh_testing - DEBUG - 2022/02/02 21:14:07 wazuh-db[6338] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643832845,"version":2,"begin":"/sbin/zramctl","end":"/usr/bin/[","tail":"/usr/bin/aclocal","checksum":"2505a30223a680b207acc86f961ba2a70985fcc8"} 2022-02-02 17:14:46,234 - wazuh_testing - DEBUG - 2022/02/02 21:14:07 wazuh-db[6338] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643832845,"version":2,"begin":"/usr/bin/aclocal","end":"/usr/bin/addpart","checksum":"54434ad058271249a25ec0fe67e5accd9a19ea58"} 2022-02-02 17:14:46,234 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] main.c:215 at main(): DEBUG: (6357): Maximum disk quota size limit configured to '1048576 KB'. 2022-02-02 17:14:46,234 - wazuh_testing - DEBUG - 2022/02/02 21:14:07 wazuh-db[6338] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.097 ms. 2022-02-02 17:14:46,234 - wazuh_testing - DEBUG - 2022/02/02 21:14:07 wazuh-db[6338] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.076 ms. 2022-02-02 17:14:46,234 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mtab' 2022-02-02 17:14:46,235 - wazuh_testing - DEBUG - 2022/02/02 21:14:07 wazuh-db[6338] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643832845,"version":2,"begin":"/sbin/zramctl","end":"/sbin/zramctl","tail":"/usr/bin/2to3-2.7","checksum":"9562865780448bda22ecac2d749c5a2d5657b106"} 2022-02-02 17:14:46,235 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/hosts.deny' 2022-02-02 17:14:46,235 - wazuh_testing - DEBUG - 2022/02/02 21:14:07 wazuh-db[6338] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.062 ms. 2022-02-02 17:14:46,235 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mail/statistics' 2022-02-02 17:14:46,236 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random-seed' 2022-02-02 17:14:46,236 - wazuh_testing - DEBUG - 2022/02/02 21:14:08 wazuh-db[6338] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643832845,"version":2,"begin":"/usr/bin/2to3-2.7","end":"/usr/bin/[","checksum":"02ca81b9aa63af71bb9f29b35faa0509609a079e"} 2022-02-02 17:14:46,236 - wazuh_testing - DEBUG - 2022/02/02 21:14:08 wazuh-db[6338] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.126 ms. 2022-02-02 17:14:46,236 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random.seed' 2022-02-02 17:14:46,237 - wazuh_testing - DEBUG - 2022/02/02 21:14:09 wazuh-db[6338] wdb.c:918 at wdb_commit_old(): DEBUG: Agent 'global' database commited. Time: 4.076 ms. 2022-02-02 17:14:46,237 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/adjtime' 2022-02-02 17:14:46,237 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/httpd/logs' 2022-02-02 17:14:46,238 - wazuh_testing - DEBUG - 2022/02/02 21:14:12 wazuh-db[6338] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.18.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.18.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.13.0-27-generic |#29~20.04.1-Ubuntu SMP Fri Jan 14 00:32:30 UTC 2022 |x86_64","os_arch":"x86_64"} 2022-02-02 17:14:46,238 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/utmpx' 2022-02-02 17:14:46,239 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/wtmpx' 2022-02-02 17:14:46,239 - wazuh_testing - DEBUG - 2022/02/02 21:14:22 wazuh-db[6338] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.18.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.18.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.13.0-27-generic |#29~20.04.1-Ubuntu SMP Fri Jan 14 00:32:30 UTC 2022 |x86_64","os_arch":"x86_64"} 2022-02-02 17:14:46,239 - wazuh_testing - DEBUG - 2022/02/02 21:14:26 wazuh-db[6338] main.c:290 at run_dealer(): DEBUG: New client connected (42). 2022-02-02 17:14:46,239 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/cups/certs' 2022-02-02 17:14:46,240 - wazuh_testing - DEBUG - 2022/02/02 21:14:26 wazuh-db[6338] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1643832866 2022-02-02 17:14:46,240 - wazuh_testing - DEBUG - 2022/02/02 21:14:27 wazuh-db[6338] main.c:290 at run_dealer(): DEBUG: New client connected (43). 2022-02-02 17:14:46,240 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/dumpdates' 2022-02-02 17:14:46,241 - wazuh_testing - DEBUG - 2022/02/02 21:14:27 wazuh-db[6338] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update end_scan 1643832867 2022-02-02 17:14:46,242 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/svc/volatile' 2022-02-02 17:14:46,242 - wazuh_testing - DEBUG - 2022/02/02 21:14:32 wazuh-db[6338] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.18.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.18.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.13.0-27-generic |#29~20.04.1-Ubuntu SMP Fri Jan 14 00:32:30 UTC 2022 |x86_64","os_arch":"x86_64"} 2022-02-02 17:14:46,242 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/security' 2022-02-02 17:14:46,243 - wazuh_testing - DEBUG - 2022/02/02 21:14:36 wazuh-db[6338] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-connection-status {"id":1,"connection_status":"disconnected","sync_status":"synced"} 2022-02-02 17:14:46,243 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/debug' 2022-02-02 17:14:46,243 - wazuh_testing - DEBUG - 2022/02/02 21:14:36 wazuh-db[6338] main.c:290 at run_dealer(): DEBUG: New client connected (44). 2022-02-02 17:14:46,243 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/dev/core' 2022-02-02 17:14:46,243 - wazuh_testing - DEBUG - 2022/02/02 21:14:36 wazuh-db[6338] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: get-labels 1 2022-02-02 17:14:46,244 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '^/proc' 2022-02-02 17:14:46,244 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '.log$|.swp$' 2022-02-02 17:14:46,244 - wazuh_testing - DEBUG - 2022/02/02 21:14:37 wazuh-db[6338] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-keepalive {"id":1,"connection_status":"pending","sync_status":"synced"} 2022-02-02 17:14:46,245 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] main.c:235 at main(): INFO: (6004): No diff for file: '/etc/ssl/private.key' 2022-02-02 17:14:46,245 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] main.c:245 at main(): INFO: (6016): Directory set for real time monitoring: '/testdir2'. 2022-02-02 17:14:46,246 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] syscheck_audit.c:243 at audit_init(): WARNING: (6924): Who-data engine cannot start because Auditd is not running. 2022-02-02 17:14:46,246 - wazuh_testing - DEBUG - 2022/02/02 21:14:41 wazuh-db[6338] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.18.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.18.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.13.0-27-generic |#29~20.04.1-Ubuntu SMP Fri Jan 14 00:32:30 UTC 2022 |x86_64","os_arch":"x86_64"} 2022-02-02 17:14:46,247 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] main.c:264 at main(): WARNING: (6913): Who-data engine could not start. Switching who-data to real-time. 2022-02-02 17:14:46,247 - wazuh_testing - DEBUG - 2022/02/02 21:14:41 wazuh-db[6338] main.c:290 at run_dealer(): DEBUG: New client connected (45). 2022-02-02 17:14:46,248 - wazuh_testing - DEBUG - 2022/02/02 21:14:41 wazuh-db[6338] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1643832879 2022-02-02 17:14:46,248 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] run_check.c:194 at start_daemon(): DEBUG: (6320): Setting process priority to: '10' 2022-02-02 17:14:46,248 - wazuh_testing - DEBUG - 2022/02/02 21:14:41 wazuh-db[6338] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update end_scan 1643832880 2022-02-02 17:14:46,248 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:14:46,249 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] run_check.c:229 at start_daemon(): INFO: (6000): Starting daemon... 2022-02-02 17:14:46,249 - wazuh_testing - DEBUG - 2022/02/02 21:14:41 wazuh-db[6338] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_global {"id":1643832880,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"09c25cfdfc4c3400ef78cdebdac9b6266d8eb321"} 2022-02-02 17:14:46,249 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] run_check.c:232 at start_daemon(): INFO: (6010): File integrity monitoring scan frequency: 20 seconds 2022-02-02 17:14:46,250 - wazuh_testing - DEBUG - 2022/02/02 21:14:41 wazuh-db[6338] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 1.605 ms. 2022-02-02 17:14:46,250 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-02 17:14:46,250 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1643832843}} 2022-02-02 17:14:46,251 - wazuh_testing - DEBUG - 2022/02/02 21:14:41 wazuh-db[6338] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643832880,"version":2,"begin":"/bin/bash","end":"/sbin/chcpu","tail":"/sbin/ctrlaltdel","checksum":"2678c972016eb9b2978d2d495f53f99563497651"} 2022-02-02 17:14:46,251 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-02 17:14:46,251 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-02 17:14:46,251 - wazuh_testing - DEBUG - 2022/02/02 21:14:41 wazuh-db[6338] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643832880,"version":2,"begin":"/sbin/ctrlaltdel","end":"/usr/sbin/zic","checksum":"6c9fc7f031860abc413a8fba2c1bc7877c92536c"} 2022-02-02 17:14:46,252 - wazuh_testing - DEBUG - 2022/02/02 21:14:03 wazuh-syscheckd[10198] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-02 17:14:46,252 - wazuh_testing - DEBUG - 2022/02/02 21:14:04 wazuh-syscheckd[10198] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-02 17:14:46,252 - wazuh_testing - DEBUG - 2022/02/02 21:14:41 wazuh-db[6338] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.682 ms. 2022-02-02 17:14:46,252 - wazuh_testing - DEBUG - 2022/02/02 21:14:04 wazuh-syscheckd[10198] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-02 17:14:46,253 - wazuh_testing - DEBUG - 2022/02/02 21:14:41 wazuh-db[6338] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.823 ms. 2022-02-02 17:14:46,253 - wazuh_testing - DEBUG - 2022/02/02 21:14:04 wazuh-logcollector: INFO: (1950): Analyzing file: '/var/ossec/logs/active-responses.log'. 2022-02-02 17:14:46,253 - wazuh_testing - DEBUG - 2022/02/02 21:14:04 wazuh-logcollector: ERROR: (1103): Could not open file '/var/log/secure' due to [(2)-(No such file or directory)]. 2022-02-02 17:14:46,253 - wazuh_testing - DEBUG - 2022/02/02 21:14:04 wazuh-logcollector: INFO: (1950): Analyzing file: '/var/log/secure'. 2022-02-02 17:14:46,253 - wazuh_testing - DEBUG - 2022/02/02 21:14:41 wazuh-db[6338] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643832880,"version":2,"begin":"/sbin/ctrlaltdel","end":"/usr/bin/pdb","tail":"/usr/bin/pdb2","checksum":"68cabf5d745d4b9636dc64b05f92bca70d2d1fb2"} 2022-02-02 17:14:46,254 - wazuh_testing - DEBUG - 2022/02/02 21:14:04 wazuh-logcollector: INFO: Started (pid: 10212). 2022-02-02 17:14:46,254 - wazuh_testing - DEBUG - 2022/02/02 21:14:05 wazuh-syscheckd[10198] fim_db.c:436 at fim_db_check_transaction(): DEBUG: Database transaction completed. 2022-02-02 17:14:46,254 - wazuh_testing - DEBUG - 2022/02/02 21:14:41 wazuh-db[6338] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643832880,"version":2,"begin":"/usr/bin/pdb2","end":"/usr/sbin/zic","checksum":"f28534dbcbabe145177a8e0c707d9da341991c1f"} 2022-02-02 17:14:46,255 - wazuh_testing - DEBUG - 2022/02/02 21:14:05 wazuh-syscheckd[10198] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-02 17:14:46,255 - wazuh_testing - DEBUG - 2022/02/02 21:14:05 wazuh-syscheckd[10198] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-02 17:14:46,255 - wazuh_testing - DEBUG - 2022/02/02 21:14:41 wazuh-db[6338] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.683 ms. 2022-02-02 17:14:46,255 - wazuh_testing - DEBUG - 2022/02/02 21:14:05 wazuh-syscheckd[10198] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1643832845}} 2022-02-02 17:14:46,255 - wazuh_testing - DEBUG - 2022/02/02 21:14:41 wazuh-db[6338] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.644 ms. 2022-02-02 17:14:46,256 - wazuh_testing - DEBUG - 2022/02/02 21:14:05 wazuh-syscheckd[10198] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 1.347 sec (1.272 clock sec) 2022-02-02 17:14:46,256 - wazuh_testing - DEBUG - 2022/02/02 21:14:05 wazuh-syscheckd[10198] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1620, path count: 1626 2022-02-02 17:14:46,256 - wazuh_testing - DEBUG - 2022/02/02 21:14:05 wazuh-syscheckd[10198] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:14:46,256 - wazuh_testing - DEBUG - 2022/02/02 21:14:41 wazuh-db[6338] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643832880,"version":2,"begin":"/sbin/ctrlaltdel","end":"/usr/bin/dpkg-divert","tail":"/usr/bin/dpkg-genbuildinfo","checksum":"3f825944e6c1aef1a782a9f8f8f1512b3339ffe1"} 2022-02-02 17:14:46,257 - wazuh_testing - DEBUG - 2022/02/02 21:14:41 wazuh-db[6338] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.463 ms. 2022-02-02 17:14:46,257 - wazuh_testing - DEBUG - 2022/02/02 21:14:05 wazuh-syscheckd[10198] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:14:46,257 - wazuh_testing - DEBUG - 2022/02/02 21:14:05 wazuh-syscheckd[10198] run_check.c:387 at fim_run_realtime(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-02 17:14:46,258 - wazuh_testing - DEBUG - 2022/02/02 21:14:05 wazuh-syscheckd[10198] run_check.c:543 at log_realtime_status(): INFO: (6012): Real-time file integrity monitoring started. 2022-02-02 17:14:46,258 - wazuh_testing - DEBUG - 2022/02/02 21:14:41 wazuh-db[6338] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643832880,"version":2,"begin":"/usr/bin/dpkg-genbuildinfo","end":"/usr/bin/pdb","checksum":"449176f3ac058628fcde8cdfbd7a7d029ac13e05"} 2022-02-02 17:14:46,258 - wazuh_testing - DEBUG - 2022/02/02 21:14:05 wazuh-syscheckd[10198] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:14:46,258 - wazuh_testing - DEBUG - 2022/02/02 21:14:41 wazuh-db[6338] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.185 ms. 2022-02-02 17:14:46,259 - wazuh_testing - DEBUG - 2022/02/02 21:14:05 wazuh-syscheckd[10198] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. 2022-02-02 17:14:46,259 - wazuh_testing - DEBUG - 2022/02/02 21:14:41 wazuh-db[6338] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643832880,"version":2,"begin":"/sbin/ctrlaltdel","end":"/usr/bin/apt-extracttemplates","tail":"/usr/bin/apt-ftparchive","checksum":"0db927cffa0bf5ceba75388e8036afbaaa99e14e"} 2022-02-02 17:14:46,259 - wazuh_testing - DEBUG - 2022/02/02 21:14:05 wazuh-syscheckd[10198] run_check.c:568 at symlink_checker_thread(): DEBUG: (6033): Starting symbolic link updater. Interval '600'. 2022-02-02 17:14:46,260 - wazuh_testing - DEBUG - 2022/02/02 21:14:41 wazuh-db[6338] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.185 ms. 2022-02-02 17:14:46,260 - wazuh_testing - DEBUG - 2022/02/02 21:14:05 wazuh-syscheckd[10198] run_check.c:82 at fim_send_sync_msg(): DEBUG: (6317): Sending integrity control message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1643832845,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"a16be20a7c6f9aeb8c0b88be2ee52f3745ce94db"}} 2022-02-02 17:14:46,261 - wazuh_testing - DEBUG - 2022/02/02 21:14:41 wazuh-db[6338] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643832880,"version":2,"begin":"/usr/bin/apt-ftparchive","end":"/usr/bin/dpkg-divert","checksum":"84aaf018d588e1d99c714364b63c94e1d4eb4bf2"} 2022-02-02 17:14:46,261 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-agent1 and message: .*Sending integrity control message: (.+)$ 2022-02-02 17:14:46,261 - wazuh_testing - DEBUG - 2022/02/02 21:14:41 wazuh-db[6338] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.115 ms. 2022-02-02 17:14:46,262 - wazuh_testing - DEBUG - 2022/02/02 21:14:41 wazuh-db[6338] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643832880,"version":2,"begin":"/sbin/ctrlaltdel","end":"/sbin/mkhomedir_helper","tail":"/sbin/mkswap","checksum":"f4094767b5033606e4a60c0075f429a93f720519"} 2022-02-02 17:14:46,262 - wazuh_testing - DEBUG - 2022/02/02 21:14:41 wazuh-db[6338] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.115 ms. 2022-02-02 17:14:46,263 - wazuh_testing - DEBUG - 2022/02/02 21:14:42 wazuh-db[6338] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643832880,"version":2,"begin":"/sbin/mkswap","end":"/usr/bin/apt-extracttemplates","checksum":"5ff294309fd1189cdaff92202ab9b61c641ec178"} 2022-02-02 17:14:46,264 - wazuh_testing - DEBUG - 2022/02/02 21:14:42 wazuh-db[6338] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.143 ms. 2022-02-02 17:14:46,264 - wazuh_testing - DEBUG - 2022/02/02 21:14:42 wazuh-db[6338] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643832880,"version":2,"begin":"/sbin/mkswap","end":"/sbin/start-stop-daemon","tail":"/sbin/sulogin","checksum":"205673eafd86478a9bae30a249a954bab122f47f"} 2022-02-02 17:14:46,265 - wazuh_testing - DEBUG - 2022/02/02 21:14:42 wazuh-db[6338] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.154 ms. 2022-02-02 17:14:46,266 - wazuh_testing - DEBUG - 2022/02/02 21:14:43 wazuh-db[6338] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643832880,"version":2,"begin":"/sbin/sulogin","end":"/usr/bin/apt-extracttemplates","checksum":"c509517216dd5ab21f7d0667dbe463ff755d440f"} 2022-02-02 17:14:46,266 - wazuh_testing - DEBUG - 2022/02/02 21:14:43 wazuh-db[6338] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.142 ms. 2022-02-02 17:14:46,267 - wazuh_testing - DEBUG - 2022/02/02 21:14:43 wazuh-db[6338] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643832880,"version":2,"begin":"/sbin/sulogin","end":"/sbin/wipefs","tail":"/sbin/zramctl","checksum":"157570556203dc9b1df7834dbf4e4a20ab33cfca"} 2022-02-02 17:14:46,268 - wazuh_testing - DEBUG - 2022/02/02 21:14:43 wazuh-db[6338] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.066 ms. 2022-02-02 17:14:46,269 - wazuh_testing - DEBUG - 2022/02/02 21:14:43 wazuh-db[6338] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643832880,"version":2,"begin":"/sbin/zramctl","end":"/usr/bin/apt-extracttemplates","checksum":"bc863c834a5068562e5096fb64cb7ef114a06080"} 2022-02-02 17:14:46,269 - wazuh_testing - DEBUG - 2022/02/02 21:14:43 wazuh-db[6338] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.081 ms. 2022-02-02 17:14:46,271 - wazuh_testing - DEBUG - 2022/02/02 21:14:43 wazuh-db[6338] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643832880,"version":2,"begin":"/sbin/zramctl","end":"/usr/bin/aclocal-1.16","tail":"/usr/bin/addpart","checksum":"504133c4c3e3b379a52151c2538ab7fdb1643279"} 2022-02-02 17:14:46,273 - wazuh_testing - DEBUG - 2022/02/02 21:14:43 wazuh-db[6338] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.058 ms. 2022-02-02 17:14:46,274 - wazuh_testing - DEBUG - 2022/02/02 21:14:43 wazuh-db[6338] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643832880,"version":2,"begin":"/usr/bin/addpart","end":"/usr/bin/apt-extracttemplates","checksum":"95a692828de0dea4b6ca328f569037eaa082ab85"} 2022-02-02 17:14:46,274 - wazuh_testing - DEBUG - 2022/02/02 21:14:43 wazuh-db[6338] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.114 ms. 2022-02-02 17:14:46,276 - wazuh_testing - DEBUG - 2022/02/02 21:14:43 wazuh-db[6338] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643832880,"version":2,"begin":"/sbin/zramctl","end":"/usr/bin/2to3-2.7","tail":"/usr/bin/[","checksum":"7fc83eb161d6b2f0d73f3a81f6b0735af653aed9"} 2022-02-02 17:14:46,276 - wazuh_testing - DEBUG - 2022/02/02 21:14:43 wazuh-db[6338] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.064 ms. 2022-02-02 17:14:46,277 - wazuh_testing - DEBUG - 2022/02/02 21:14:43 wazuh-db[6338] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643832880,"version":2,"begin":"/usr/bin/[","end":"/usr/bin/aclocal-1.16","checksum":"ab72adc86d2a1f2e36162f60b40bf10d71afc73a"} 2022-02-02 17:14:46,277 - wazuh_testing - DEBUG - 2022/02/02 21:14:43 wazuh-db[6338] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.071 ms. 2022-02-02 17:14:46,278 - wazuh_testing - DEBUG - 2022/02/02 21:14:43 wazuh-db[6338] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643832880,"version":2,"begin":"/sbin/zramctl","end":"/sbin/zramctl","tail":"/testdir1/testdir1.txt","checksum":"9562865780448bda22ecac2d749c5a2d5657b106"} 2022-02-02 17:14:46,278 - wazuh_testing - DEBUG - 2022/02/02 21:14:43 wazuh-db[6338] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.113 ms. 2022-02-02 17:14:46,279 - wazuh_testing - DEBUG - 2022/02/02 21:14:44 wazuh-db[6338] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643832880,"version":2,"begin":"/testdir1/testdir1.txt","end":"/usr/bin/2to3-2.7","checksum":"f8b23e559c9b5de1b03ca3e91f9d41e89d93a7f7"} 2022-02-02 17:14:46,280 - wazuh_testing - DEBUG - 2022/02/02 21:14:44 wazuh-db[6338] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.051 ms. 2022-02-02 17:14:46,280 - wazuh_testing - DEBUG - 2022/02/02 21:14:44 wazuh-db[6338] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643832880,"version":2,"begin":"/testdir1/testdir1.txt","end":"/testdir1/testdir1.txt","tail":"/usr/bin/2to3-2.7","checksum":"75ca596de81046050f9caee812d496854bda3718"} 2022-02-02 17:14:46,281 - wazuh_testing - DEBUG - 2022/02/02 21:14:44 wazuh-db[6338] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643832880,"version":2,"begin":"/usr/bin/2to3-2.7","end":"/usr/bin/2to3-2.7","checksum":"4288e49f7e69481516baa382943d5a652f7e069b"} 2022-02-02 17:14:46,282 - wazuh_testing - DEBUG - 2022/02/02 21:14:44 wazuh-db[6338] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.031 ms. 2022-02-02 17:14:46,282 - wazuh_testing - DEBUG - 2022/02/02 21:14:44 wazuh-db[6338] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file save2 {"path":"/testdir1/testdir1.txt","timestamp":1643832879,"version":2,"attributes":{"type":"file","size":0,"perm":"rw-r--r--","uid":"0","gid":"0","user_name":"root","group_name":"root","inode":7236635,"mtime":1643832869,"hash_md5":"d41d8cd98f00b204e9800998ecf8427e","hash_sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","hash_sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","checksum":"f7b03725c5efc1535011eaee9ce951edf0001795"}} 2022-02-02 17:14:46,284 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-manager and message: .*Agent 001 query: (.+) save2 2022-02-02 17:14:47,220 - wazuh_testing - DEBUG - Cleaning temporal files... 2022-02-02 17:14:47,221 - wazuh_testing - DEBUG - Checking results... 2022-02-02 17:14:47,222 - wazuh_testing - DEBUG - Received from wazuh-agent1 the expected message: 2022/02/02 21:14:05 wazuh-syscheckd[10198] run_check.c:82 at fim_send_sync_msg(): DEBUG: (6317): Sending integrity control message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1643832845,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"a16be20a7c6f9aeb8c0b88be2ee52f3745ce94db"}} 2022-02-02 17:14:47,223 - wazuh_testing - DEBUG - Received from wazuh-manager the expected message: 2022/02/02 21:14:44 wazuh-db[6338] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file save2 {"path":"/testdir1/testdir1.txt","timestamp":1643832879,"version":2,"attributes":{"type":"file","size":0,"perm":"rw-r--r--","uid":"0","gid":"0","user_name":"root","group_name":"root","inode":7236635,"mtime":1643832869,"hash_md5":"d41d8cd98f00b204e9800998ecf8427e","hash_sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","hash_sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","checksum":"f7b03725c5efc1535011eaee9ce951edf0001795"}} 2022-02-02 17:15:32,909 - wazuh_testing - DEBUG - Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-02 17:15:32,912 - wazuh_testing - DEBUG - Starting file composer for wazuh-manager and path: /var/ossec/logs/ossec.log. Composite file in /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-manager_ossec.log.tmp 2022-02-02 17:15:32,912 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-02 17:15:32,916 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-manager and message: .*Initializing FIM Integrity Synchronization check. (.+)$ 2022-02-02 17:15:34,918 - wazuh_testing - DEBUG - 2022/02/02 21:14:55 wazuh-db[6338] wdb.c:918 at wdb_commit_old(): DEBUG: Agent '001' database commited. Time: 2.782 ms. 2022-02-02 17:15:34,919 - wazuh_testing - DEBUG - 2022/02/02 21:14:57 wazuh-db[6338] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.18.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.18.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.13.0-27-generic |#29~20.04.1-Ubuntu SMP Fri Jan 14 00:32:30 UTC 2022 |x86_64","os_arch":"x86_64"} 2022-02-02 17:15:34,919 - wazuh_testing - DEBUG - 2022/02/02 21:15:00 wazuh-modulesd:syscollector: INFO: Stop received for Syscollector. 2022-02-02 17:15:34,919 - wazuh_testing - DEBUG - 2022/02/02 21:15:00 wazuh-db[6338] main.c:352 at run_worker(): DEBUG: Client 15 disconnected. 2022-02-02 17:15:34,919 - wazuh_testing - DEBUG - 2022/02/02 21:15:00 wazuh-monitord: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:15:34,919 - wazuh_testing - DEBUG - 2022/02/02 21:15:00 wazuh-logcollector: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:15:34,920 - wazuh_testing - DEBUG - 2022/02/02 21:15:00 wazuh-remoted: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:15:34,920 - wazuh_testing - DEBUG - 2022/02/02 21:15:00 wazuh-db[6338] main.c:352 at run_worker(): DEBUG: Client 24 disconnected. 2022-02-02 17:15:34,920 - wazuh_testing - DEBUG - 2022/02/02 21:15:00 wazuh-db[6338] main.c:352 at run_worker(): DEBUG: Client 21 disconnected. 2022-02-02 17:15:34,920 - wazuh_testing - DEBUG - 2022/02/02 21:15:00 wazuh-db[6338] main.c:352 at run_worker(): DEBUG: Client 18 disconnected. 2022-02-02 17:15:34,920 - wazuh_testing - DEBUG - 2022/02/02 21:15:00 wazuh-db[6338] main.c:352 at run_worker(): DEBUG: Client 16 disconnected. 2022-02-02 17:15:34,920 - wazuh_testing - DEBUG - 2022/02/02 21:15:00 wazuh-syscheckd[6384] sig_op.c:49 at HandleSIG(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:15:34,921 - wazuh_testing - DEBUG - 2022/02/02 21:15:01 wazuh-analysisd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:15:34,921 - wazuh_testing - DEBUG - 2022/02/02 21:15:01 wazuh-db[6338] main.c:352 at run_worker(): DEBUG: Client 45 disconnected. 2022-02-02 17:15:34,922 - wazuh_testing - DEBUG - 2022/02/02 21:15:01 wazuh-db[6338] main.c:352 at run_worker(): DEBUG: Client 44 disconnected. 2022-02-02 17:15:34,922 - wazuh_testing - DEBUG - 2022/02/02 21:15:01 wazuh-db[6338] main.c:352 at run_worker(): DEBUG: Client 43 disconnected. 2022-02-02 17:15:34,923 - wazuh_testing - DEBUG - 2022/02/02 21:15:01 wazuh-db[6338] main.c:352 at run_worker(): DEBUG: Client 42 disconnected. 2022-02-02 17:15:34,923 - wazuh_testing - DEBUG - 2022/02/02 21:15:01 wazuh-db[6338] main.c:352 at run_worker(): DEBUG: Client 41 disconnected. 2022-02-02 17:15:34,924 - wazuh_testing - DEBUG - 2022/02/02 21:15:01 wazuh-db[6338] main.c:352 at run_worker(): DEBUG: Client 36 disconnected. 2022-02-02 17:15:34,925 - wazuh_testing - DEBUG - 2022/02/02 21:15:01 wazuh-db[6338] main.c:352 at run_worker(): DEBUG: Client 39 disconnected. 2022-02-02 17:15:34,925 - wazuh_testing - DEBUG - 2022/02/02 21:15:01 wazuh-db[6338] main.c:352 at run_worker(): DEBUG: Client 38 disconnected. 2022-02-02 17:15:34,925 - wazuh_testing - DEBUG - 2022/02/02 21:15:01 wazuh-db[6338] main.c:352 at run_worker(): DEBUG: Client 37 disconnected. 2022-02-02 17:15:34,926 - wazuh_testing - DEBUG - 2022/02/02 21:15:01 wazuh-db[6338] main.c:352 at run_worker(): DEBUG: Client 31 disconnected. 2022-02-02 17:15:34,926 - wazuh_testing - DEBUG - 2022/02/02 21:15:01 wazuh-db[6338] main.c:352 at run_worker(): DEBUG: Client 30 disconnected. 2022-02-02 17:15:34,926 - wazuh_testing - DEBUG - 2022/02/02 21:15:01 wazuh-db[6338] main.c:352 at run_worker(): DEBUG: Client 34 disconnected. 2022-02-02 17:15:34,927 - wazuh_testing - DEBUG - 2022/02/02 21:15:01 wazuh-db[6338] main.c:352 at run_worker(): DEBUG: Client 33 disconnected. 2022-02-02 17:15:34,927 - wazuh_testing - DEBUG - 2022/02/02 21:15:01 wazuh-db[6338] main.c:352 at run_worker(): DEBUG: Client 28 disconnected. 2022-02-02 17:15:34,927 - wazuh_testing - DEBUG - 2022/02/02 21:15:01 wazuh-db[6338] main.c:352 at run_worker(): DEBUG: Client 27 disconnected. 2022-02-02 17:15:34,927 - wazuh_testing - DEBUG - 2022/02/02 21:15:01 wazuh-db[6338] main.c:352 at run_worker(): DEBUG: Client 25 disconnected. 2022-02-02 17:15:34,928 - wazuh_testing - DEBUG - 2022/02/02 21:15:01 wazuh-db[6338] main.c:352 at run_worker(): DEBUG: Client 23 disconnected. 2022-02-02 17:15:34,928 - wazuh_testing - DEBUG - 2022/02/02 21:15:01 wazuh-db[6338] main.c:352 at run_worker(): DEBUG: Client 29 disconnected. 2022-02-02 17:15:34,928 - wazuh_testing - DEBUG - 2022/02/02 21:15:01 wazuh-db[6338] main.c:352 at run_worker(): DEBUG: Client 32 disconnected. 2022-02-02 17:15:34,928 - wazuh_testing - DEBUG - 2022/02/02 21:15:01 wazuh-db[6338] main.c:352 at run_worker(): DEBUG: Client 40 disconnected. 2022-02-02 17:15:34,929 - wazuh_testing - DEBUG - 2022/02/02 21:15:01 wazuh-db[6338] main.c:352 at run_worker(): DEBUG: Client 26 disconnected. 2022-02-02 17:15:34,929 - wazuh_testing - DEBUG - 2022/02/02 21:15:01 wazuh-db[6338] main.c:352 at run_worker(): DEBUG: Client 22 disconnected. 2022-02-02 17:15:34,929 - wazuh_testing - DEBUG - 2022/02/02 21:15:01 wazuh-db[6338] main.c:352 at run_worker(): DEBUG: Client 6 disconnected. 2022-02-02 17:15:34,929 - wazuh_testing - DEBUG - 2022/02/02 21:15:01 wazuh-db[6338] main.c:352 at run_worker(): DEBUG: Client 20 disconnected. 2022-02-02 17:15:34,929 - wazuh_testing - DEBUG - 2022/02/02 21:15:01 wazuh-db[6338] main.c:352 at run_worker(): DEBUG: Client 14 disconnected. 2022-02-02 17:15:34,930 - wazuh_testing - DEBUG - 2022/02/02 21:15:01 wazuh-db[6338] main.c:352 at run_worker(): DEBUG: Client 13 disconnected. 2022-02-02 17:15:34,930 - wazuh_testing - DEBUG - 2022/02/02 21:15:01 wazuh-db[6338] main.c:352 at run_worker(): DEBUG: Client 12 disconnected. 2022-02-02 17:15:34,930 - wazuh_testing - DEBUG - 2022/02/02 21:15:01 wazuh-db[6338] main.c:352 at run_worker(): DEBUG: Client 19 disconnected. 2022-02-02 17:15:34,930 - wazuh_testing - DEBUG - 2022/02/02 21:15:01 wazuh-db[6338] main.c:352 at run_worker(): DEBUG: Client 35 disconnected. 2022-02-02 17:15:34,930 - wazuh_testing - DEBUG - 2022/02/02 21:15:01 wazuh-execd: INFO: (1314): Shutdown received. Deleting responses. 2022-02-02 17:15:34,930 - wazuh_testing - DEBUG - 2022/02/02 21:15:01 wazuh-execd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:15:34,931 - wazuh_testing - DEBUG - 2022/02/02 21:15:01 wazuh-db[6338] main.c:468 at handler(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:15:34,931 - wazuh_testing - DEBUG - 2022/02/02 21:15:02 wazuh-db[6338] wdb.c:872 at wdb_close_all(): DEBUG: Closing all databases... 2022-02-02 17:15:34,931 - wazuh_testing - DEBUG - 2022/02/02 21:15:02 wazuh-db[6338] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent 001 2022-02-02 17:15:34,931 - wazuh_testing - DEBUG - 2022/02/02 21:15:02 wazuh-db[6338] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent 000 2022-02-02 17:15:34,932 - wazuh_testing - DEBUG - 2022/02/02 21:15:02 wazuh-db[6338] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent global 2022-02-02 17:15:34,932 - wazuh_testing - DEBUG - 2022/02/02 21:15:02 wazuh-db[6338] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent mitre 2022-02-02 17:15:34,932 - wazuh_testing - DEBUG - 2022/02/02 21:15:02 wazuh-db[6338] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent tasks 2022-02-02 17:15:34,932 - wazuh_testing - DEBUG - 2022/02/02 21:15:02 wazuh-db[6338] main.c:231 at main(): DEBUG: Template file removed again: queue/db/.template.db 2022-02-02 17:15:34,933 - wazuh_testing - DEBUG - 2022/02/02 21:15:02 wazuh-authd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:15:34,933 - wazuh_testing - DEBUG - 2022/02/02 21:15:02 wazuh-authd: INFO: Exiting... 2022-02-02 17:15:34,933 - wazuh_testing - DEBUG - 2022/02/02 21:15:15 wazuh-db[7268] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-02 17:15:34,933 - wazuh_testing - DEBUG - 2022/02/02 21:15:15 wazuh-db[7268] main.c:101 at main(): DEBUG: Wazuh home directory: /var/ossec 2022-02-02 17:15:34,933 - wazuh_testing - DEBUG - 2022/02/02 21:15:16 wazuh-syscheckd[7272] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-02 17:15:34,934 - wazuh_testing - DEBUG - 2022/02/02 21:15:16 wazuh-syscheckd[7272] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-02 17:15:34,934 - wazuh_testing - DEBUG - 2022/02/02 21:15:16 wazuh-syscheckd[7272] syscheck-config.c:122 at organize_syscheck_dirs(): DEBUG: No directory entries to organize in syscheck configuration. 2022-02-02 17:15:34,934 - wazuh_testing - DEBUG - 2022/02/02 21:15:22 wazuh-csyslogd: INFO: Remote syslog server not configured. Clean exit. 2022-02-02 17:15:34,934 - wazuh_testing - DEBUG - 2022/02/02 21:15:22 wazuh-dbd: INFO: Database not configured. Clean exit. 2022-02-02 17:15:34,935 - wazuh_testing - DEBUG - 2022/02/02 21:15:22 wazuh-integratord: INFO: Remote integrations not configured. Clean exit. 2022-02-02 17:15:34,935 - wazuh_testing - DEBUG - 2022/02/02 21:15:22 wazuh-agentlessd: INFO: Not configured. Exiting. 2022-02-02 17:15:34,935 - wazuh_testing - DEBUG - 2022/02/02 21:15:22 wazuh-authd: INFO: Started (pid: 7338). 2022-02-02 17:15:34,935 - wazuh_testing - DEBUG - 2022/02/02 21:15:22 wazuh-authd: INFO: Accepting connections on port 1515. No password required. 2022-02-02 17:15:34,935 - wazuh_testing - DEBUG - 2022/02/02 21:15:22 wazuh-authd: INFO: Setting network timeout to 1.000000 sec. 2022-02-02 17:15:34,936 - wazuh_testing - DEBUG - 2022/02/02 21:15:23 wazuh-db[7352] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-02 17:15:34,936 - wazuh_testing - DEBUG - 2022/02/02 21:15:23 wazuh-db[7352] main.c:101 at main(): DEBUG: Wazuh home directory: /var/ossec 2022-02-02 17:15:34,936 - wazuh_testing - DEBUG - 2022/02/02 21:15:23 wazuh-db[7352] main.c:122 at main(): DEBUG: Template file removed: /var/ossec/queue/db/.template.db 2022-02-02 17:15:34,936 - wazuh_testing - DEBUG - 2022/02/02 21:15:23 wazuh-db[7352] main.c:178 at main(): INFO: Started (pid: 7354). 2022-02-02 17:15:34,937 - wazuh_testing - DEBUG - 2022/02/02 21:15:24 wazuh-execd: INFO: (1350): Active response disabled. 2022-02-02 17:15:34,937 - wazuh_testing - DEBUG - 2022/02/02 21:15:24 wazuh-execd: INFO: Started (pid: 7377). 2022-02-02 17:15:34,937 - wazuh_testing - DEBUG - 2022/02/02 21:15:26 wazuh-syscheckd[7398] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-02 17:15:34,937 - wazuh_testing - DEBUG - 2022/02/02 21:15:26 wazuh-syscheckd[7398] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-02 17:15:34,937 - wazuh_testing - DEBUG - 2022/02/02 21:15:26 wazuh-syscheckd[7398] syscheck-config.c:122 at organize_syscheck_dirs(): DEBUG: No directory entries to organize in syscheck configuration. 2022-02-02 17:15:34,938 - wazuh_testing - DEBUG - 2022/02/02 21:15:26 wazuh-syscheckd[7398] main.c:118 at main(): INFO: (6678): No directory provided for syscheck to monitor. 2022-02-02 17:15:34,938 - wazuh_testing - DEBUG - 2022/02/02 21:15:26 wazuh-syscheckd[7398] main.c:136 at main(): INFO: (6001): File integrity monitoring disabled. 2022-02-02 17:15:34,938 - wazuh_testing - DEBUG - 2022/02/02 21:15:26 rootcheck[7398] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled. 2022-02-02 17:15:34,939 - wazuh_testing - DEBUG - 2022/02/02 21:15:26 wazuh-syscheckd[7398] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:15:34,939 - wazuh_testing - DEBUG - 2022/02/02 21:15:26 wazuh-syscheckd[7398] syscom.c:123 at syscom_main(): DEBUG: (6284): Local requests thread ready. 2022-02-02 17:15:34,939 - wazuh_testing - DEBUG - 2022/02/02 21:15:26 wazuh-syscheckd[7398] mq_op.c:47 at StartMQ(): DEBUG: Connected succesfully to 'queue/sockets/queue' after 0 attempts 2022-02-02 17:15:34,940 - wazuh_testing - DEBUG - 2022/02/02 21:15:26 wazuh-syscheckd[7398] mq_op.c:48 at StartMQ(): DEBUG: (unix_domain) Maximum send buffer set to: '212992'. 2022-02-02 17:15:34,940 - wazuh_testing - DEBUG - 2022/02/02 21:15:26 wazuh-syscheckd[7398] main.c:185 at main(): INFO: Started (pid: 7400). 2022-02-02 17:15:34,940 - wazuh_testing - DEBUG - 2022/02/02 21:15:26 wazuh-syscheckd[7398] main.c:215 at main(): DEBUG: (6357): Maximum disk quota size limit configured to '1048576 KB'. 2022-02-02 17:15:34,941 - wazuh_testing - DEBUG - 2022/02/02 21:15:26 wazuh-syscheckd[7398] run_check.c:194 at start_daemon(): DEBUG: (6320): Setting process priority to: '10' 2022-02-02 17:15:34,941 - wazuh_testing - DEBUG - 2022/02/02 21:15:26 wazuh-syscheckd[7398] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:15:34,941 - wazuh_testing - DEBUG - 2022/02/02 21:15:26 wazuh-syscheckd[7398] run_check.c:229 at start_daemon(): INFO: (6000): Starting daemon... 2022-02-02 17:15:34,941 - wazuh_testing - DEBUG - 2022/02/02 21:15:26 wazuh-syscheckd[7398] run_check.c:232 at start_daemon(): INFO: (6010): File integrity monitoring scan frequency: 43200 seconds 2022-02-02 17:15:34,942 - wazuh_testing - DEBUG - 2022/02/02 21:15:26 wazuh-syscheckd[7398] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-02 17:15:34,942 - wazuh_testing - DEBUG - 2022/02/02 21:15:26 wazuh-syscheckd[7398] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1643832926}} 2022-02-02 17:15:34,942 - wazuh_testing - DEBUG - 2022/02/02 21:15:26 wazuh-syscheckd[7398] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-02 17:15:34,942 - wazuh_testing - DEBUG - 2022/02/02 21:15:26 wazuh-syscheckd[7398] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-02 17:15:34,943 - wazuh_testing - DEBUG - 2022/02/02 21:15:26 wazuh-syscheckd[7398] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-02 17:15:34,943 - wazuh_testing - DEBUG - 2022/02/02 21:15:26 wazuh-syscheckd[7398] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1643832926}} 2022-02-02 17:15:34,943 - wazuh_testing - DEBUG - 2022/02/02 21:15:26 wazuh-syscheckd[7398] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.000 sec (0.001 clock sec) 2022-02-02 17:15:34,944 - wazuh_testing - DEBUG - 2022/02/02 21:15:26 wazuh-syscheckd[7398] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 0, path count: 0 2022-02-02 17:15:34,944 - wazuh_testing - DEBUG - 2022/02/02 21:15:26 wazuh-syscheckd[7398] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:15:34,944 - wazuh_testing - DEBUG - 2022/02/02 21:15:26 wazuh-syscheckd[7398] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:15:34,944 - wazuh_testing - DEBUG - 2022/02/02 21:15:26 wazuh-syscheckd[7398] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:15:34,945 - wazuh_testing - DEBUG - 2022/02/02 21:15:26 wazuh-syscheckd[7398] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. 2022-02-02 17:15:34,946 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-manager and message: .*Initializing FIM Integrity Synchronization check. (.+)$ 2022-02-02 17:15:35,918 - wazuh_testing - DEBUG - Cleaning temporal files... 2022-02-02 17:15:35,919 - wazuh_testing - DEBUG - Checking results... 2022-02-02 17:15:35,921 - wazuh_testing - DEBUG - Received from wazuh-manager the expected message: 2022/02/02 21:15:26 wazuh-syscheckd[7398] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds.
-------------------------------Captured log call--------------------------------
DEBUG testinfra:base.py:277 RUN CommandResult(command=b"ansible --tree /tmp/tmpfc6ogxvc -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m command --args 'mkdir testdir1' wazuh-agent1", exit_status=0, stdout=b'wazuh-agent1 | CHANGED | rc=0 >>\n\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('command', 'mkdir testdir1', {'check': False, 'become': False}): {'changed': True, 'cmd': ['mkdir', 'testdir1'], 'delta': '0:00:00.832234', 'end': '2022-02-02 21:14:26.261479', 'msg': '', 'rc': 0, 'start': '2022-02-02 21:14:25.429245', 'stderr': '', 'stderr_lines': [], 'stdout': '', 'stdout_lines': []} DEBUG testinfra:base.py:277 RUN CommandResult(command=b"ansible --tree /tmp/tmpbmcmqy8g -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m command --args 'touch testdir1/testdir1.txt' wazuh-agent1", exit_status=0, stdout=b'wazuh-agent1 | CHANGED | rc=0 >>\n\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('command', 'touch testdir1/testdir1.txt', {'check': False, 'become': False}): {'changed': True, 'cmd': ['touch', 'testdir1/testdir1.txt'], 'delta': '0:00:00.873416', 'end': '2022-02-02 21:14:29.428998', 'msg': '', 'rc': 0, 'start': '2022-02-02 21:14:28.555582', 'stderr': '', 'stderr_lines': [], 'stdout': '', 'stdout_lines': []} DEBUG testinfra:base.py:277 RUN CommandResult(command=b"ansible --tree /tmp/tmpabl8e06p -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m service --args 'name=wazuh-agent state=restarted' wazuh-agent1", exit_status=0, stdout=b'wazuh-agent1 | CHANGED => {\n "changed": true,\n "name": "wazuh-agent",\n "state": "started"\n}\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('service', 'name=wazuh-agent state=restarted', {'check': False, 'become': False}): {'changed': True, 'name': 'wazuh-agent', 'state': 'started'} DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:1006 Cleaning temporal files... DEBUG wazuh_testing:monitoring.py:995 Checking results... DEBUG wazuh_testing:monitoring.py:1001 Received from wazuh-agent1 the expected message: 2022/02/02 21:14:05 wazuh-syscheckd[10198] run_check.c:82 at fim_send_sync_msg(): DEBUG: (6317): Sending integrity control message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1643832845,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"a16be20a7c6f9aeb8c0b88be2ee52f3745ce94db"}} DEBUG wazuh_testing:monitoring.py:1001 Received from wazuh-manager the expected message: 2022/02/02 21:14:44 wazuh-db[6338] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file save2 {"path":"/testdir1/testdir1.txt","timestamp":1643832879,"version":2,"attributes":{"type":"file","size":0,"perm":"rw-r--r--","uid":"0","gid":"0","user_name":"root","group_name":"root","inode":7236635,"mtime":1643832869,"hash_md5":"d41d8cd98f00b204e9800998ecf8427e","hash_sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","hash_sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","checksum":"f7b03725c5efc1535011eaee9ce951edf0001795"}} DEBUG testinfra:base.py:277 RUN CommandResult(command=b'ansible --tree /tmp/tmpb7xmfx6k -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m copy --args \'dest=/var/ossec/logs/ossec.log content=\'"\'"\'\'"\'"\' force=yes\' wazuh-manager', exit_status=0, stdout=b'wazuh-manager | CHANGED => {\n "changed": true,\n "checksum": "da39a3ee5e6b4b0d3255bfef95601890afd80709",\n "dest": "/var/ossec/logs/ossec.log",\n "gid": 999,\n "group": "ossec",\n "md5sum": "d41d8cd98f00b204e9800998ecf8427e",\n "mode": "0660",\n "owner": "ossec",\n "size": 0,\n "src": "/root/.ansible/tmp/ansible-tmp-1643832888.3137996-87942-65638388923294/source",\n "state": "file",\n "uid": 999\n}\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('copy', "dest=/var/ossec/logs/ossec.log content='' force=yes", {'check': False, 'become': False}): {'changed': True, 'checksum': 'da39a3ee5e6b4b0d3255bfef95601890afd80709', 'dest': '/var/ossec/logs/ossec.log', 'gid': 999, 'group': 'ossec', 'md5sum': 'd41d8cd98f00b204e9800998ecf8427e', 'mode': '0660', 'owner': 'ossec', 'size': 0, 'src': '/root/.ansible/tmp/ansible-tmp-1643832888.3137996-87942-65638388923294/source', 'state': 'file', 'uid': 999} DEBUG testinfra:base.py:277 RUN CommandResult(command=b'ansible --tree /tmp/tmp2ydw5wn7 -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m copy --args \'dest=/var/ossec/logs/ossec.log content=\'"\'"\'\'"\'"\' force=yes\' wazuh-agent1', exit_status=0, stdout=b'wazuh-agent1 | CHANGED => {\n "changed": true,\n "checksum": "da39a3ee5e6b4b0d3255bfef95601890afd80709",\n "dest": "/var/ossec/logs/ossec.log",\n "gid": 999,\n "group": "ossec",\n "md5sum": "d41d8cd98f00b204e9800998ecf8427e",\n "mode": "0660",\n "owner": "ossec",\n "size": 0,\n "src": "/root/.ansible/tmp/ansible-tmp-1643832893.377335-88344-25311093423170/source",\n "state": "file",\n "uid": 999\n}\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('copy', "dest=/var/ossec/logs/ossec.log content='' force=yes", {'check': False, 'become': False}): {'changed': True, 'checksum': 'da39a3ee5e6b4b0d3255bfef95601890afd80709', 'dest': '/var/ossec/logs/ossec.log', 'gid': 999, 'group': 'ossec', 'md5sum': 'd41d8cd98f00b204e9800998ecf8427e', 'mode': '0660', 'owner': 'ossec', 'size': 0, 'src': '/root/.ansible/tmp/ansible-tmp-1643832893.377335-88344-25311093423170/source', 'state': 'file', 'uid': 999} DEBUG testinfra:base.py:277 RUN CommandResult(command=b"ansible --tree /tmp/tmpch6t03n3 -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m command --args '/var/ossec/bin/wazuh-control stop' wazuh-manager", exit_status=0, stdout=b'wazuh-manager | CHANGED | rc=0 >>\nKilling wazuh-clusterd...\nKilling wazuh-modulesd...\nKilling wazuh-monitord...\nKilling wazuh-logcollector...\nKilling wazuh-remoted...\nKilling wazuh-syscheckd...\nKilling wazuh-analysisd...\nwazuh-maild not running...\nKilling wazuh-execd...\nKilling wazuh-db...\nKilling wazuh-authd...\nwazuh-agentlessd not running...\nwazuh-integratord not running...\nwazuh-dbd not running...\nwazuh-csyslogd not running...\nKilling wazuh-apid...\nWazuh v4.2.5 Stopped\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('command', '/var/ossec/bin/wazuh-control stop', {'check': False, 'become': False}): {'changed': True, 'cmd': ['/var/ossec/bin/wazuh-control', 'stop'], 'delta': '0:00:03.940504', 'end': '2022-02-02 21:15:03.417677', 'msg': '', 'rc': 0, 'start': '2022-02-02 21:14:59.477173', 'stderr': '', 'stderr_lines': [], 'stdout': 'Killing wazuh-clusterd...\n' 'Killing wazuh-modulesd...\n' 'Killing wazuh-monitord...\n' 'Killing wazuh-logcollector...\n' 'Killing wazuh-remoted...\n' 'Killing wazuh-syscheckd...\n' 'Killing wazuh-analysisd...\n' 'wazuh-maild not running...\n' 'Killing wazuh-execd...\n' 'Killing wazuh-db...\n' 'Killing wazuh-authd...\n' 'wazuh-agentlessd not running...\n' 'wazuh-integratord not running...\n' 'wazuh-dbd not running...\n' 'wazuh-csyslogd not running...\n' 'Killing wazuh-apid...\n' 'Wazuh v4.2.5 Stopped', 'stdout_lines': ['Killing wazuh-clusterd...', 'Killing wazuh-modulesd...', 'Killing wazuh-monitord...', 'Killing wazuh-logcollector...', 'Killing wazuh-remoted...', 'Killing wazuh-syscheckd...', 'Killing wazuh-analysisd...', 'wazuh-maild not running...', 'Killing wazuh-execd...', 'Killing wazuh-db...', 'Killing wazuh-authd...', 'wazuh-agentlessd not running...', 'wazuh-integratord not running...', 'wazuh-dbd not running...', 'wazuh-csyslogd not running...', 'Killing wazuh-apid...', 'Wazuh v4.2.5 Stopped']} DEBUG testinfra:base.py:277 RUN CommandResult(command=b"ansible --tree /tmp/tmpdt74nkrj -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m command --args 'rm -rf testdir1' wazuh-agent1", exit_status=0, stdout=b'wazuh-agent1 | CHANGED | rc=0 >>\n\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('command', 'rm -rf testdir1', {'check': False, 'become': False}): {'changed': True, 'cmd': ['rm', '-rf', 'testdir1'], 'delta': '0:00:00.857155', 'end': '2022-02-02 21:15:06.579466', 'msg': '', 'rc': 0, 'start': '2022-02-02 21:15:05.722311', 'stderr': '', 'stderr_lines': [], 'stdout': '', 'stdout_lines': []} DEBUG testinfra:base.py:277 RUN CommandResult(command=b"ansible --tree /tmp/tmpqliorrug -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m command --args '/var/ossec/bin/wazuh-control start' wazuh-manager", exit_status=0, stdout=b"wazuh-manager | CHANGED | rc=0 >>\nStarting Wazuh v4.2.5...\nStarted wazuh-apid...\nStarted wazuh-csyslogd...\nStarted wazuh-dbd...\nStarted wazuh-integratord...\nStarted wazuh-agentlessd...\nStarted wazuh-authd...\nStarted wazuh-db...\nStarted wazuh-execd...\nStarted wazuh-analysisd...\nStarted wazuh-syscheckd...\nStarted wazuh-remoted...\nStarted wazuh-logcollector...\nStarted wazuh-monitord...\nStarted wazuh-modulesd...\nStarted wazuh-clusterd...\nCompleted.2022/02/02 21:15:15 wazuh-db[7268] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized\n2022/02/02 21:15:15 wazuh-db[7268] main.c:101 at main(): DEBUG: Wazuh home directory: /var/ossec\n2022/02/02 21:15:16 wazuh-syscheckd[7272] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized\n2022/02/02 21:15:16 wazuh-syscheckd[7272] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf'\n2022/02/02 21:15:16 wazuh-syscheckd[7272] syscheck-config.c:122 at organize_syscheck_dirs(): DEBUG: No directory entries to organize in syscheck configuration.\n2022/02/02 21:15:22 wazuh-integratord: INFO: Remote integrations not configured. Clean exit.\n2022/02/02 21:15:23 wazuh-db[7352] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized\n2022/02/02 21:15:23 wazuh-db[7352] main.c:101 at main(): DEBUG: Wazuh home directory: /var/ossec\n2022/02/02 21:15:26 wazuh-syscheckd[7398] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized\n2022/02/02 21:15:26 wazuh-syscheckd[7398] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf'\n2022/02/02 21:15:26 wazuh-syscheckd[7398] syscheck-config.c:122 at organize_syscheck_dirs(): DEBUG: No directory entries to organize in syscheck configuration.\n2022/02/02 21:15:26 wazuh-syscheckd[7398] main.c:118 at main(): INFO: (6678): No directory provided for syscheck to monitor.\n2022/02/02 21:15:26 wazuh-syscheckd[7398] main.c:136 at main(): INFO: (6001): File integrity monitoring disabled.\n2022/02/02 21:15:26 rootcheck[7398] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled.\n", stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('command', '/var/ossec/bin/wazuh-control start', {'check': False, 'become': False}): {'changed': True, 'cmd': ['/var/ossec/bin/wazuh-control', 'start'], 'delta': '0:00:23.797344', 'end': '2022-02-02 21:15:32.639805', 'msg': '', 'rc': 0, 'start': '2022-02-02 21:15:08.842461', 'stderr': '2022/02/02 21:15:15 wazuh-db[7268] debug_op.c:70 at _log(): DEBUG: ' 'Logging module auto-initialized\n' '2022/02/02 21:15:15 wazuh-db[7268] main.c:101 at main(): DEBUG: ' 'Wazuh home directory: /var/ossec\n' '2022/02/02 21:15:16 wazuh-syscheckd[7272] debug_op.c:70 at _log(): ' 'DEBUG: Logging module auto-initialized\n' '2022/02/02 21:15:16 wazuh-syscheckd[7272] config.c:87 at ' 'Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: ' "'etc/ossec.conf'\n" '2022/02/02 21:15:16 wazuh-syscheckd[7272] syscheck-config.c:122 at ' 'organize_syscheck_dirs(): DEBUG: No directory entries to organize ' 'in syscheck configuration.\n' '2022/02/02 21:15:22 wazuh-integratord: INFO: Remote integrations ' 'not configured. Clean exit.\n' '2022/02/02 21:15:23 wazuh-db[7352] debug_op.c:70 at _log(): DEBUG: ' 'Logging module auto-initialized\n' '2022/02/02 21:15:23 wazuh-db[7352] main.c:101 at main(): DEBUG: ' 'Wazuh home directory: /var/ossec\n' '2022/02/02 21:15:26 wazuh-syscheckd[7398] debug_op.c:70 at _log(): ' 'DEBUG: Logging module auto-initialized\n' '2022/02/02 21:15:26 wazuh-syscheckd[7398] config.c:87 at ' 'Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: ' "'etc/ossec.conf'\n" '2022/02/02 21:15:26 wazuh-syscheckd[7398] syscheck-config.c:122 at ' 'organize_syscheck_dirs(): DEBUG: No directory entries to organize ' 'in syscheck configuration.\n' '2022/02/02 21:15:26 wazuh-syscheckd[7398] main.c:118 at main(): ' 'INFO: (6678): No directory provided for syscheck to monitor.\n' '2022/02/02 21:15:26 wazuh-syscheckd[7398] main.c:136 at main(): ' 'INFO: (6001): File integrity monitoring disabled.\n' '2022/02/02 21:15:26 rootcheck[7398] rootcheck.c:202 at ' 'rootcheck_init(): INFO: Rootcheck disabled.', 'stderr_lines': ['2022/02/02 21:15:15 wazuh-db[7268] debug_op.c:70 at _log(): ' 'DEBUG: Logging module auto-initialized', '2022/02/02 21:15:15 wazuh-db[7268] main.c:101 at main(): ' 'DEBUG: Wazuh home directory: /var/ossec', '2022/02/02 21:15:16 wazuh-syscheckd[7272] debug_op.c:70 at ' '_log(): DEBUG: Logging module auto-initialized', '2022/02/02 21:15:16 wazuh-syscheckd[7272] config.c:87 at ' 'Read_Syscheck_Config(): DEBUG: (6287): Reading ' "configuration file: 'etc/ossec.conf'", '2022/02/02 21:15:16 wazuh-syscheckd[7272] ' 'syscheck-config.c:122 at organize_syscheck_dirs(): DEBUG: ' 'No directory entries to organize in syscheck configuration.', '2022/02/02 21:15:22 wazuh-integratord: INFO: Remote ' 'integrations not configured. Clean exit.', '2022/02/02 21:15:23 wazuh-db[7352] debug_op.c:70 at _log(): ' 'DEBUG: Logging module auto-initialized', '2022/02/02 21:15:23 wazuh-db[7352] main.c:101 at main(): ' 'DEBUG: Wazuh home directory: /var/ossec', '2022/02/02 21:15:26 wazuh-syscheckd[7398] debug_op.c:70 at ' '_log(): DEBUG: Logging module auto-initialized', '2022/02/02 21:15:26 wazuh-syscheckd[7398] config.c:87 at ' 'Read_Syscheck_Config(): DEBUG: (6287): Reading ' "configuration file: 'etc/ossec.conf'", '2022/02/02 21:15:26 wazuh-syscheckd[7398] ' 'syscheck-config.c:122 at organize_syscheck_dirs(): DEBUG: ' 'No directory entries to organize in syscheck configuration.', '2022/02/02 21:15:26 wazuh-syscheckd[7398] main.c:118 at ' 'main(): INFO: (6678): No directory provided for syscheck to ' 'monitor.', '2022/02/02 21:15:26 wazuh-syscheckd[7398] main.c:136 at ' 'main(): INFO: (6001): File integrity monitoring disabled.', '2022/02/02 21:15:26 rootcheck[7398] rootcheck.c:202 at ' 'rootcheck_init(): INFO: Rootcheck disabled.'], 'stdout': 'Starting Wazuh v4.2.5...\n' 'Started wazuh-apid...\n' 'Started wazuh-csyslogd...\n' 'Started wazuh-dbd...\n' 'Started wazuh-integratord...\n' 'Started wazuh-agentlessd...\n' 'Started wazuh-authd...\n' 'Started wazuh-db...\n' 'Started wazuh-execd...\n' 'Started wazuh-analysisd...\n' 'Started wazuh-syscheckd...\n' 'Started wazuh-remoted...\n' 'Started wazuh-logcollector...\n' 'Started wazuh-monitord...\n' 'Started wazuh-modulesd...\n' 'Started wazuh-clusterd...\n' 'Completed.', 'stdout_lines': ['Starting Wazuh v4.2.5...', 'Started wazuh-apid...', 'Started wazuh-csyslogd...', 'Started wazuh-dbd...', 'Started wazuh-integratord...', 'Started wazuh-agentlessd...', 'Started wazuh-authd...', 'Started wazuh-db...', 'Started wazuh-execd...', 'Started wazuh-analysisd...', 'Started wazuh-syscheckd...', 'Started wazuh-remoted...', 'Started wazuh-logcollector...', 'Started wazuh-monitord...', 'Started wazuh-modulesd...', 'Started wazuh-clusterd...', 'Completed.']} DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:1006 Cleaning temporal files... DEBUG wazuh_testing:monitoring.py:995 Checking results... DEBUG wazuh_testing:monitoring.py:1001 Received from wazuh-manager the expected message: 2022/02/02 21:15:26 wazuh-syscheckd[7398] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. DEBUG testinfra:base.py:277 RUN CommandResult(command=b'ansible --tree /tmp/tmp57rq_fh4 -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m command --args \'python /var/system_query_db.py --db_path /var/ossec/queue/db/001.db --query " select * from fim_entry where full_path=\'"\'"\'"\'"\'"\'/testdir1/testdir1.txt\'"\'"\'"\'"\'"\'"\' wazuh-manager', exit_status=0, stdout=b'wazuh-manager | CHANGED | rc=0 >>\n[]\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('command', 'python /var/system_query_db.py --db_path /var/ossec/queue/db/001.db --query " select * from fim_entry where full_path=\'"\'/testdir1/testdir1.txt\'"\'"', {'check': False, 'become': False}): {'changed': True, 'cmd': ['python', '/var/system_query_db.py', '--db_path', '/var/ossec/queue/db/001.db', '--query', " select * from fim_entry where full_path='/testdir1/testdir1.txt'"], 'delta': '0:00:00.869639', 'end': '2022-02-02 21:15:43.811937', 'msg': '', 'rc': 0, 'start': '2022-02-02 21:15:42.942298', 'stderr': '', 'stderr_lines': [], 'stdout': '[]', 'stdout_lines': ['[]']} DEBUG testinfra:base.py:277 RUN CommandResult(command=b'ansible --tree /tmp/tmp9fcc9_6i -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m command --args \'rm -rf \'"\'"\'/testdir1/testdir1.txt\'"\'"\'\' wazuh-agent1', exit_status=0, stdout=b'wazuh-agent1 | CHANGED | rc=0 >>\n\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('command', "rm -rf '/testdir1/testdir1.txt'", {'check': False, 'become': False}): {'changed': True, 'cmd': ['rm', '-rf', '/testdir1/testdir1.txt'], 'delta': '0:00:00.904665', 'end': '2022-02-02 21:15:47.066385', 'msg': '', 'rc': 0, 'start': '2022-02-02 21:15:46.161720', 'stderr': '', 'stderr_lines': [], 'stdout': '', 'stdout_lines': []}