Report generated on 02-Feb-2022 at 17:22:50 by pytest-html v3.1.1
| Packages | {"pluggy": "0.13.1", "py": "1.10.0", "pytest": "6.2.2"} |
| Platform | Linux-5.13.0-27-generic-x86_64-with-glibc2.29 |
| Plugins | {"html": "3.1.1", "metadata": "1.11.0", "testinfra": "5.0.0"} |
| Python | 3.8.10 |
6 tests ran in 416.97 seconds.
(Un)check the boxes to filter the results.
6 passed, 0 skipped, 0 failed, 0 errors, 0 expected failures, 0 unexpected passes| Result | Test | Duration | Links |
|---|---|---|---|
| No results found. Try to check the filters | |||
| Passed | test_synchronization.py::test_Synchronization_create_file_agent_stopped[testdir1-add-wazuh-agent1] | 57.19 | |
|
------------------------------Captured stderr call------------------------------ 2022-02-02 17:16:13,923 - wazuh_testing - DEBUG - Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-02 17:16:13,925 - wazuh_testing - DEBUG - Starting file composer for wazuh-agent1 and path: /var/ossec/logs/ossec.log. Composite file in /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-agent1_ossec.log.tmp 2022-02-02 17:16:13,925 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-02 17:16:13,927 - wazuh_testing - DEBUG - Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-02 17:16:13,929 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-agent1 and message: .*Sending integrity control message: (.+)$ 2022-02-02 17:16:13,929 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-02 17:16:13,931 - wazuh_testing - DEBUG - Starting file composer for wazuh-manager and path: /var/ossec/logs/ossec.log. Composite file in /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-manager_ossec.log.tmp 2022-02-02 17:16:13,933 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-manager and message: .*Agent 001 query: (.+) save2 2022-02-02 17:16:15,932 - wazuh_testing - DEBUG - 2022/02/02 21:15:00 wazuh-agentd: ERROR: (1137): Lost connection with manager. Setting lock. 2022-02-02 17:16:15,932 - wazuh_testing - DEBUG - 2022/02/02 21:15:00 wazuh-agentd: INFO: Closing connection to server (wazuh-manager/172.18.0.2:1514/tcp). 2022-02-02 17:16:15,933 - wazuh_testing - DEBUG - 2022/02/02 21:15:00 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.18.0.2:1514/tcp). 2022-02-02 17:16:15,933 - wazuh_testing - DEBUG - 2022/02/02 21:15:00 wazuh-agentd: ERROR: (1216): Unable to connect to '172.18.0.2:1514/tcp': 'Connection refused'. 2022-02-02 17:16:15,933 - wazuh_testing - DEBUG - 2022/02/02 21:15:01 wazuh-syscheckd[10689] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-02 17:16:15,933 - wazuh_testing - DEBUG - 2022/02/02 21:15:01 wazuh-syscheckd[10689] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1643832901}} 2022-02-02 17:16:15,934 - wazuh_testing - DEBUG - 2022/02/02 21:15:01 wazuh-syscheckd[10689] wait_op.c:101 at os_wait(): WARNING: Process locked due to agent is offline. Waiting for connection... 2022-02-02 17:16:15,934 - wazuh_testing - DEBUG - 2022/02/02 21:15:10 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.18.0.2:1514/tcp). 2022-02-02 17:16:15,934 - wazuh_testing - DEBUG - 2022/02/02 21:15:10 wazuh-agentd: ERROR: (1216): Unable to connect to '172.18.0.2:1514/tcp': 'Connection refused'. 2022-02-02 17:16:15,934 - wazuh_testing - DEBUG - 2022/02/02 21:14:55 wazuh-db[6338] wdb.c:918 at wdb_commit_old(): DEBUG: Agent '001' database commited. Time: 2.782 ms. 2022-02-02 17:16:15,935 - wazuh_testing - DEBUG - 2022/02/02 21:15:20 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.18.0.2:1514/tcp). 2022-02-02 17:16:15,935 - wazuh_testing - DEBUG - 2022/02/02 21:15:20 wazuh-agentd: ERROR: (1216): Unable to connect to '172.18.0.2:1514/tcp': 'Connection refused'. 2022-02-02 17:16:15,935 - wazuh_testing - DEBUG - 2022/02/02 21:14:57 wazuh-db[6338] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.18.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.18.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.13.0-27-generic |#29~20.04.1-Ubuntu SMP Fri Jan 14 00:32:30 UTC 2022 |x86_64","os_arch":"x86_64"} 2022-02-02 17:16:15,935 - wazuh_testing - DEBUG - 2022/02/02 21:15:00 wazuh-modulesd:syscollector: INFO: Stop received for Syscollector. 2022-02-02 17:16:15,935 - wazuh_testing - DEBUG - 2022/02/02 21:15:30 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.18.0.2:1514/tcp). 2022-02-02 17:16:15,935 - wazuh_testing - DEBUG - 2022/02/02 21:15:00 wazuh-db[6338] main.c:352 at run_worker(): DEBUG: Client 15 disconnected. 2022-02-02 17:16:15,935 - wazuh_testing - DEBUG - 2022/02/02 21:15:00 wazuh-monitord: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:16:15,935 - wazuh_testing - DEBUG - 2022/02/02 21:15:30 wazuh-agentd: INFO: (4102): Connected to the server (wazuh-manager/172.18.0.2:1514/tcp). 2022-02-02 17:16:15,936 - wazuh_testing - DEBUG - 2022/02/02 21:15:00 wazuh-logcollector: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:16:15,936 - wazuh_testing - DEBUG - 2022/02/02 21:15:30 wazuh-agentd: INFO: Server responded. Releasing lock. 2022-02-02 17:16:15,936 - wazuh_testing - DEBUG - 2022/02/02 21:15:00 wazuh-remoted: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:16:15,936 - wazuh_testing - DEBUG - 2022/02/02 21:15:00 wazuh-db[6338] main.c:352 at run_worker(): DEBUG: Client 24 disconnected. 2022-02-02 17:16:15,936 - wazuh_testing - DEBUG - 2022/02/02 21:15:31 wazuh-syscheckd[10689] wait_op.c:116 at os_wait(): INFO: Agent is now online. Process unlocked, continuing... 2022-02-02 17:16:15,936 - wazuh_testing - DEBUG - 2022/02/02 21:15:00 wazuh-db[6338] main.c:352 at run_worker(): DEBUG: Client 21 disconnected. 2022-02-02 17:16:15,936 - wazuh_testing - DEBUG - 2022/02/02 21:15:31 wazuh-syscheckd[10689] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-02 17:16:15,936 - wazuh_testing - DEBUG - 2022/02/02 21:15:31 wazuh-syscheckd[10689] fim_db.c:436 at fim_db_check_transaction(): DEBUG: Database transaction completed. 2022-02-02 17:16:15,936 - wazuh_testing - DEBUG - 2022/02/02 21:15:00 wazuh-db[6338] main.c:352 at run_worker(): DEBUG: Client 18 disconnected. 2022-02-02 17:16:15,936 - wazuh_testing - DEBUG - 2022/02/02 21:15:31 wazuh-syscheckd[10689] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-02 17:16:15,936 - wazuh_testing - DEBUG - 2022/02/02 21:15:00 wazuh-db[6338] main.c:352 at run_worker(): DEBUG: Client 16 disconnected. 2022-02-02 17:16:15,936 - wazuh_testing - DEBUG - 2022/02/02 21:15:31 wazuh-syscheckd[10689] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-02 17:16:15,937 - wazuh_testing - DEBUG - 2022/02/02 21:15:00 wazuh-syscheckd[6384] sig_op.c:49 at HandleSIG(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:16:15,937 - wazuh_testing - DEBUG - 2022/02/02 21:15:31 wazuh-syscheckd[10689] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-02 17:16:15,937 - wazuh_testing - DEBUG - 2022/02/02 21:15:01 wazuh-analysisd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:16:15,937 - wazuh_testing - DEBUG - 2022/02/02 21:15:31 wazuh-syscheckd[10689] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-02 17:16:15,937 - wazuh_testing - DEBUG - 2022/02/02 21:15:01 wazuh-db[6338] main.c:352 at run_worker(): DEBUG: Client 45 disconnected. 2022-02-02 17:16:15,937 - wazuh_testing - DEBUG - 2022/02/02 21:15:32 wazuh-syscheckd[10689] create_db.c:109 at fim_delete_file_event(): DEBUG: (6220): Sending delete message for file: '/testdir1/testdir1.txt' 2022-02-02 17:16:15,937 - wazuh_testing - DEBUG - 2022/02/02 21:15:01 wazuh-db[6338] main.c:352 at run_worker(): DEBUG: Client 44 disconnected. 2022-02-02 17:16:15,937 - wazuh_testing - DEBUG - 2022/02/02 21:15:01 wazuh-db[6338] main.c:352 at run_worker(): DEBUG: Client 43 disconnected. 2022-02-02 17:16:15,937 - wazuh_testing - DEBUG - 2022/02/02 21:15:32 wazuh-syscheckd[10689] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"event","data":{"path":"/testdir1/testdir1.txt","version":2,"mode":"scheduled","type":"deleted","timestamp":1643832879,"attributes":{"type":"file","size":0,"perm":"rw-r--r--","uid":"0","gid":"0","user_name":"root","group_name":"root","inode":7236635,"mtime":1643832869,"hash_md5":"d41d8cd98f00b204e9800998ecf8427e","hash_sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","hash_sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","checksum":"f7b03725c5efc1535011eaee9ce951edf0001795"}}} 2022-02-02 17:16:15,938 - wazuh_testing - DEBUG - 2022/02/02 21:15:01 wazuh-db[6338] main.c:352 at run_worker(): DEBUG: Client 42 disconnected. 2022-02-02 17:16:15,938 - wazuh_testing - DEBUG - 2022/02/02 21:15:32 wazuh-syscheckd[10689] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-02 17:16:15,938 - wazuh_testing - DEBUG - 2022/02/02 21:15:01 wazuh-db[6338] main.c:352 at run_worker(): DEBUG: Client 41 disconnected. 2022-02-02 17:16:15,938 - wazuh_testing - DEBUG - 2022/02/02 21:15:32 wazuh-syscheckd[10689] create_db.c:220 at fim_scan(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-02 17:16:15,938 - wazuh_testing - DEBUG - 2022/02/02 21:15:01 wazuh-db[6338] main.c:352 at run_worker(): DEBUG: Client 36 disconnected. 2022-02-02 17:16:15,938 - wazuh_testing - DEBUG - 2022/02/02 21:15:32 wazuh-syscheckd[10689] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-02 17:16:15,938 - wazuh_testing - DEBUG - 2022/02/02 21:15:32 wazuh-syscheckd[10689] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1643832932}} 2022-02-02 17:16:15,938 - wazuh_testing - DEBUG - 2022/02/02 21:15:01 wazuh-db[6338] main.c:352 at run_worker(): DEBUG: Client 39 disconnected. 2022-02-02 17:16:15,938 - wazuh_testing - DEBUG - 2022/02/02 21:15:32 wazuh-syscheckd[10689] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 31.126 sec (1.120 clock sec) 2022-02-02 17:16:15,938 - wazuh_testing - DEBUG - 2022/02/02 21:15:01 wazuh-db[6338] main.c:352 at run_worker(): DEBUG: Client 38 disconnected. 2022-02-02 17:16:15,939 - wazuh_testing - DEBUG - 2022/02/02 21:15:32 wazuh-syscheckd[10689] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1620, path count: 1626 2022-02-02 17:16:15,939 - wazuh_testing - DEBUG - 2022/02/02 21:15:01 wazuh-db[6338] main.c:352 at run_worker(): DEBUG: Client 37 disconnected. 2022-02-02 17:16:15,939 - wazuh_testing - DEBUG - 2022/02/02 21:15:53 wazuh-syscheckd[10689] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-02 17:16:15,939 - wazuh_testing - DEBUG - 2022/02/02 21:15:01 wazuh-db[6338] main.c:352 at run_worker(): DEBUG: Client 31 disconnected. 2022-02-02 17:16:15,939 - wazuh_testing - DEBUG - 2022/02/02 21:15:53 wazuh-syscheckd[10689] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1643832953}} 2022-02-02 17:16:15,939 - wazuh_testing - DEBUG - 2022/02/02 21:15:01 wazuh-db[6338] main.c:352 at run_worker(): DEBUG: Client 30 disconnected. 2022-02-02 17:16:15,939 - wazuh_testing - DEBUG - 2022/02/02 21:15:53 wazuh-syscheckd[10689] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-02 17:16:15,939 - wazuh_testing - DEBUG - 2022/02/02 21:15:53 wazuh-syscheckd[10689] fim_db.c:436 at fim_db_check_transaction(): DEBUG: Database transaction completed. 2022-02-02 17:16:15,939 - wazuh_testing - DEBUG - 2022/02/02 21:15:01 wazuh-db[6338] main.c:352 at run_worker(): DEBUG: Client 34 disconnected. 2022-02-02 17:16:15,939 - wazuh_testing - DEBUG - 2022/02/02 21:15:53 wazuh-syscheckd[10689] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-02 17:16:15,939 - wazuh_testing - DEBUG - 2022/02/02 21:15:01 wazuh-db[6338] main.c:352 at run_worker(): DEBUG: Client 33 disconnected. 2022-02-02 17:16:15,940 - wazuh_testing - DEBUG - 2022/02/02 21:15:53 wazuh-syscheckd[10689] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-02 17:16:15,940 - wazuh_testing - DEBUG - 2022/02/02 21:15:01 wazuh-db[6338] main.c:352 at run_worker(): DEBUG: Client 28 disconnected. 2022-02-02 17:16:15,940 - wazuh_testing - DEBUG - 2022/02/02 21:15:53 wazuh-syscheckd[10689] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-02 17:16:15,940 - wazuh_testing - DEBUG - 2022/02/02 21:15:01 wazuh-db[6338] main.c:352 at run_worker(): DEBUG: Client 27 disconnected. 2022-02-02 17:16:15,940 - wazuh_testing - DEBUG - 2022/02/02 21:15:53 wazuh-syscheckd[10689] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-02 17:16:15,940 - wazuh_testing - DEBUG - 2022/02/02 21:15:54 wazuh-syscheckd[10689] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-02 17:16:15,940 - wazuh_testing - DEBUG - 2022/02/02 21:15:01 wazuh-db[6338] main.c:352 at run_worker(): DEBUG: Client 25 disconnected. 2022-02-02 17:16:15,940 - wazuh_testing - DEBUG - 2022/02/02 21:15:54 wazuh-syscheckd[10689] create_db.c:220 at fim_scan(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-02 17:16:15,940 - wazuh_testing - DEBUG - 2022/02/02 21:15:01 wazuh-db[6338] main.c:352 at run_worker(): DEBUG: Client 23 disconnected. 2022-02-02 17:16:15,940 - wazuh_testing - DEBUG - 2022/02/02 21:15:54 wazuh-syscheckd[10689] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-02 17:16:15,941 - wazuh_testing - DEBUG - 2022/02/02 21:15:01 wazuh-db[6338] main.c:352 at run_worker(): DEBUG: Client 29 disconnected. 2022-02-02 17:16:15,941 - wazuh_testing - DEBUG - 2022/02/02 21:15:54 wazuh-syscheckd[10689] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1643832954}} 2022-02-02 17:16:15,941 - wazuh_testing - DEBUG - 2022/02/02 21:15:01 wazuh-db[6338] main.c:352 at run_worker(): DEBUG: Client 32 disconnected. 2022-02-02 17:16:15,941 - wazuh_testing - DEBUG - 2022/02/02 21:15:54 wazuh-syscheckd[10689] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 1.310 sec (1.255 clock sec) 2022-02-02 17:16:15,941 - wazuh_testing - DEBUG - 2022/02/02 21:15:01 wazuh-db[6338] main.c:352 at run_worker(): DEBUG: Client 40 disconnected. 2022-02-02 17:16:15,941 - wazuh_testing - DEBUG - 2022/02/02 21:15:54 wazuh-syscheckd[10689] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1620, path count: 1626 2022-02-02 17:16:15,941 - wazuh_testing - DEBUG - 2022/02/02 21:16:07 wazuh-logcollector: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:16:15,941 - wazuh_testing - DEBUG - 2022/02/02 21:15:01 wazuh-db[6338] main.c:352 at run_worker(): DEBUG: Client 26 disconnected. 2022-02-02 17:16:15,941 - wazuh_testing - DEBUG - 2022/02/02 21:16:07 wazuh-syscheckd[10689] sig_op.c:49 at HandleSIG(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:16:15,942 - wazuh_testing - DEBUG - 2022/02/02 21:15:01 wazuh-db[6338] main.c:352 at run_worker(): DEBUG: Client 22 disconnected. 2022-02-02 17:16:15,942 - wazuh_testing - DEBUG - 2022/02/02 21:16:07 wazuh-agentd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:16:15,942 - wazuh_testing - DEBUG - 2022/02/02 21:15:01 wazuh-db[6338] main.c:352 at run_worker(): DEBUG: Client 6 disconnected. 2022-02-02 17:16:15,942 - wazuh_testing - DEBUG - 2022/02/02 21:16:07 wazuh-execd: INFO: (1314): Shutdown received. Deleting responses. 2022-02-02 17:16:15,942 - wazuh_testing - DEBUG - 2022/02/02 21:15:01 wazuh-db[6338] main.c:352 at run_worker(): DEBUG: Client 20 disconnected. 2022-02-02 17:16:15,942 - wazuh_testing - DEBUG - 2022/02/02 21:16:07 wazuh-execd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:16:15,942 - wazuh_testing - DEBUG - 2022/02/02 21:15:01 wazuh-db[6338] main.c:352 at run_worker(): DEBUG: Client 14 disconnected. 2022-02-02 17:16:15,943 - wazuh_testing - DEBUG - 2022/02/02 21:16:08 wazuh-syscheckd[11305] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-02 17:16:15,943 - wazuh_testing - DEBUG - 2022/02/02 21:15:01 wazuh-db[6338] main.c:352 at run_worker(): DEBUG: Client 13 disconnected. 2022-02-02 17:16:15,943 - wazuh_testing - DEBUG - 2022/02/02 21:16:08 wazuh-syscheckd[11305] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-02 17:16:15,943 - wazuh_testing - DEBUG - 2022/02/02 21:16:08 wazuh-syscheckd[11305] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-02 17:16:15,943 - wazuh_testing - DEBUG - 2022/02/02 21:15:01 wazuh-db[6338] main.c:352 at run_worker(): DEBUG: Client 12 disconnected. 2022-02-02 17:16:15,943 - wazuh_testing - DEBUG - 2022/02/02 21:16:08 wazuh-syscheckd[11305] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-02 17:16:15,943 - wazuh_testing - DEBUG - 2022/02/02 21:15:01 wazuh-db[6338] main.c:352 at run_worker(): DEBUG: Client 19 disconnected. 2022-02-02 17:16:15,943 - wazuh_testing - DEBUG - 2022/02/02 21:16:08 wazuh-syscheckd[11305] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-02 17:16:15,944 - wazuh_testing - DEBUG - 2022/02/02 21:15:01 wazuh-db[6338] main.c:352 at run_worker(): DEBUG: Client 35 disconnected. 2022-02-02 17:16:15,944 - wazuh_testing - DEBUG - 2022/02/02 21:16:08 wazuh-syscheckd[11305] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-02 17:16:15,944 - wazuh_testing - DEBUG - 2022/02/02 21:15:01 wazuh-execd: INFO: (1314): Shutdown received. Deleting responses. 2022-02-02 17:16:15,944 - wazuh_testing - DEBUG - 2022/02/02 21:16:08 wazuh-syscheckd[11305] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-02 17:16:15,944 - wazuh_testing - DEBUG - 2022/02/02 21:15:01 wazuh-execd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:16:15,945 - wazuh_testing - DEBUG - 2022/02/02 21:16:08 wazuh-syscheckd[11305] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ 2022-02-02 17:16:15,945 - wazuh_testing - DEBUG - 2022/02/02 21:15:01 wazuh-db[6338] main.c:468 at handler(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:16:15,945 - wazuh_testing - DEBUG - 2022/02/02 21:15:02 wazuh-db[6338] wdb.c:872 at wdb_close_all(): DEBUG: Closing all databases... 2022-02-02 17:16:15,945 - wazuh_testing - DEBUG - 2022/02/02 21:15:02 wazuh-db[6338] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent 001 2022-02-02 17:16:15,945 - wazuh_testing - DEBUG - 2022/02/02 21:16:08 wazuh-syscheckd[11305] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ OK? 2022-02-02 17:16:15,945 - wazuh_testing - DEBUG - 2022/02/02 21:15:02 wazuh-db[6338] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent 000 2022-02-02 17:16:15,946 - wazuh_testing - DEBUG - 2022/02/02 21:15:02 wazuh-db[6338] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent global 2022-02-02 17:16:15,946 - wazuh_testing - DEBUG - 2022/02/02 21:16:08 wazuh-syscheckd[11305] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-02 17:16:15,946 - wazuh_testing - DEBUG - 2022/02/02 21:15:02 wazuh-db[6338] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent mitre 2022-02-02 17:16:15,946 - wazuh_testing - DEBUG - 2022/02/02 21:15:02 wazuh-db[6338] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent tasks 2022-02-02 17:16:15,947 - wazuh_testing - DEBUG - 2022/02/02 21:15:02 wazuh-db[6338] main.c:231 at main(): DEBUG: Template file removed again: queue/db/.template.db 2022-02-02 17:16:15,947 - wazuh_testing - DEBUG - 2022/02/02 21:16:08 wazuh-syscheckd[11305] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-02 17:16:15,947 - wazuh_testing - DEBUG - 2022/02/02 21:15:02 wazuh-authd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:16:15,947 - wazuh_testing - DEBUG - 2022/02/02 21:15:02 wazuh-authd: INFO: Exiting... 2022-02-02 17:16:15,947 - wazuh_testing - DEBUG - 2022/02/02 21:15:15 wazuh-db[7268] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-02 17:16:15,947 - wazuh_testing - DEBUG - 2022/02/02 21:16:08 wazuh-syscheckd[11305] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-02 17:16:15,948 - wazuh_testing - DEBUG - 2022/02/02 21:15:15 wazuh-db[7268] main.c:101 at main(): DEBUG: Wazuh home directory: /var/ossec 2022-02-02 17:16:15,948 - wazuh_testing - DEBUG - 2022/02/02 21:16:08 wazuh-syscheckd[11305] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-02 17:16:15,948 - wazuh_testing - DEBUG - 2022/02/02 21:15:16 wazuh-syscheckd[7272] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-02 17:16:15,948 - wazuh_testing - DEBUG - 2022/02/02 21:15:16 wazuh-syscheckd[7272] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-02 17:16:15,948 - wazuh_testing - DEBUG - 2022/02/02 21:16:08 wazuh-syscheckd[11305] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-02 17:16:15,948 - wazuh_testing - DEBUG - 2022/02/02 21:15:16 wazuh-syscheckd[7272] syscheck-config.c:122 at organize_syscheck_dirs(): DEBUG: No directory entries to organize in syscheck configuration. 2022-02-02 17:16:15,949 - wazuh_testing - DEBUG - 2022/02/02 21:16:08 wazuh-syscheckd[11305] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-02 17:16:15,949 - wazuh_testing - DEBUG - 2022/02/02 21:15:22 wazuh-csyslogd: INFO: Remote syslog server not configured. Clean exit. 2022-02-02 17:16:15,949 - wazuh_testing - DEBUG - 2022/02/02 21:15:22 wazuh-dbd: INFO: Database not configured. Clean exit. 2022-02-02 17:16:15,949 - wazuh_testing - DEBUG - 2022/02/02 21:16:08 wazuh-syscheckd[11305] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-02 17:16:15,949 - wazuh_testing - DEBUG - 2022/02/02 21:15:22 wazuh-integratord: INFO: Remote integrations not configured. Clean exit. 2022-02-02 17:16:15,949 - wazuh_testing - DEBUG - 2022/02/02 21:16:08 wazuh-syscheckd[11305] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-02 17:16:15,950 - wazuh_testing - DEBUG - 2022/02/02 21:15:22 wazuh-agentlessd: INFO: Not configured. Exiting. 2022-02-02 17:16:15,950 - wazuh_testing - DEBUG - 2022/02/02 21:16:08 wazuh-execd: INFO: Started (pid: 11318). 2022-02-02 17:16:15,950 - wazuh_testing - DEBUG - 2022/02/02 21:15:22 wazuh-authd: INFO: Started (pid: 7338). 2022-02-02 17:16:15,950 - wazuh_testing - DEBUG - 2022/02/02 21:15:22 wazuh-authd: INFO: Accepting connections on port 1515. No password required. 2022-02-02 17:16:15,950 - wazuh_testing - DEBUG - 2022/02/02 21:16:08 wazuh-agentd: INFO: (1410): Reading authentication keys file. 2022-02-02 17:16:15,950 - wazuh_testing - DEBUG - 2022/02/02 21:15:22 wazuh-authd: INFO: Setting network timeout to 1.000000 sec. 2022-02-02 17:16:15,951 - wazuh_testing - DEBUG - 2022/02/02 21:16:08 wazuh-agentd: INFO: Using notify time: 10 and max time to reconnect: 60 2022-02-02 17:16:15,951 - wazuh_testing - DEBUG - 2022/02/02 21:15:23 wazuh-db[7352] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-02 17:16:15,951 - wazuh_testing - DEBUG - 2022/02/02 21:16:08 wazuh-agentd: INFO: Version detected -> Linux |wazuh-agent1 |5.13.0-27-generic |#29~20.04.1-Ubuntu SMP Fri Jan 14 00:32:30 UTC 2022 |x86_64 [Debian GNU/Linux|debian: 10 (buster)] - Wazuh v4.2.5 2022-02-02 17:16:15,951 - wazuh_testing - DEBUG - 2022/02/02 21:15:23 wazuh-db[7352] main.c:101 at main(): DEBUG: Wazuh home directory: /var/ossec 2022-02-02 17:16:15,951 - wazuh_testing - DEBUG - 2022/02/02 21:16:08 wazuh-agentd: INFO: Started (pid: 11326). 2022-02-02 17:16:15,951 - wazuh_testing - DEBUG - 2022/02/02 21:15:23 wazuh-db[7352] main.c:122 at main(): DEBUG: Template file removed: /var/ossec/queue/db/.template.db 2022-02-02 17:16:15,952 - wazuh_testing - DEBUG - 2022/02/02 21:15:23 wazuh-db[7352] main.c:178 at main(): INFO: Started (pid: 7354). 2022-02-02 17:16:15,952 - wazuh_testing - DEBUG - 2022/02/02 21:16:08 wazuh-agentd: INFO: Server IP Address: wazuh-manager/172.18.0.2 2022-02-02 17:16:15,952 - wazuh_testing - DEBUG - 2022/02/02 21:15:24 wazuh-execd: INFO: (1350): Active response disabled. 2022-02-02 17:16:15,952 - wazuh_testing - DEBUG - 2022/02/02 21:16:08 wazuh-agentd: INFO: Using AES as encryption method. 2022-02-02 17:16:15,952 - wazuh_testing - DEBUG - 2022/02/02 21:15:24 wazuh-execd: INFO: Started (pid: 7377). 2022-02-02 17:16:15,953 - wazuh_testing - DEBUG - 2022/02/02 21:15:26 wazuh-syscheckd[7398] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-02 17:16:15,953 - wazuh_testing - DEBUG - 2022/02/02 21:16:08 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.18.0.2:1514/tcp). 2022-02-02 17:16:15,953 - wazuh_testing - DEBUG - 2022/02/02 21:15:26 wazuh-syscheckd[7398] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-02 17:16:15,953 - wazuh_testing - DEBUG - 2022/02/02 21:15:26 wazuh-syscheckd[7398] syscheck-config.c:122 at organize_syscheck_dirs(): DEBUG: No directory entries to organize in syscheck configuration. 2022-02-02 17:16:15,953 - wazuh_testing - DEBUG - 2022/02/02 21:16:08 wazuh-agentd: INFO: (4102): Connected to the server (wazuh-manager/172.18.0.2:1514/tcp). 2022-02-02 17:16:15,953 - wazuh_testing - DEBUG - 2022/02/02 21:15:26 wazuh-syscheckd[7398] main.c:118 at main(): INFO: (6678): No directory provided for syscheck to monitor. 2022-02-02 17:16:15,953 - wazuh_testing - DEBUG - 2022/02/02 21:15:26 wazuh-syscheckd[7398] main.c:136 at main(): INFO: (6001): File integrity monitoring disabled. 2022-02-02 17:16:15,953 - wazuh_testing - DEBUG - 2022/02/02 21:16:09 wazuh-syscheckd[11338] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-02 17:16:15,954 - wazuh_testing - DEBUG - 2022/02/02 21:15:26 rootcheck[7398] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled. 2022-02-02 17:16:15,954 - wazuh_testing - DEBUG - 2022/02/02 21:16:09 wazuh-syscheckd[11338] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-02 17:16:15,954 - wazuh_testing - DEBUG - 2022/02/02 21:15:26 wazuh-syscheckd[7398] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:16:15,954 - wazuh_testing - DEBUG - 2022/02/02 21:16:09 wazuh-syscheckd[11338] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-02 17:16:15,954 - wazuh_testing - DEBUG - 2022/02/02 21:16:09 wazuh-syscheckd[11338] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-02 17:16:15,954 - wazuh_testing - DEBUG - 2022/02/02 21:15:26 wazuh-syscheckd[7398] syscom.c:123 at syscom_main(): DEBUG: (6284): Local requests thread ready. 2022-02-02 17:16:15,955 - wazuh_testing - DEBUG - 2022/02/02 21:16:09 wazuh-syscheckd[11338] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-02 17:16:15,955 - wazuh_testing - DEBUG - 2022/02/02 21:15:26 wazuh-syscheckd[7398] mq_op.c:47 at StartMQ(): DEBUG: Connected succesfully to 'queue/sockets/queue' after 0 attempts 2022-02-02 17:16:15,955 - wazuh_testing - DEBUG - 2022/02/02 21:16:09 wazuh-syscheckd[11338] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-02 17:16:15,955 - wazuh_testing - DEBUG - 2022/02/02 21:16:09 wazuh-syscheckd[11338] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-02 17:16:15,956 - wazuh_testing - DEBUG - 2022/02/02 21:15:26 wazuh-syscheckd[7398] mq_op.c:48 at StartMQ(): DEBUG: (unix_domain) Maximum send buffer set to: '212992'. 2022-02-02 17:16:15,956 - wazuh_testing - DEBUG - 2022/02/02 21:16:09 wazuh-syscheckd[11338] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ 2022-02-02 17:16:15,956 - wazuh_testing - DEBUG - 2022/02/02 21:15:26 wazuh-syscheckd[7398] main.c:185 at main(): INFO: Started (pid: 7400). 2022-02-02 17:16:15,956 - wazuh_testing - DEBUG - 2022/02/02 21:16:09 wazuh-syscheckd[11338] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ OK? 2022-02-02 17:16:15,957 - wazuh_testing - DEBUG - 2022/02/02 21:15:26 wazuh-syscheckd[7398] main.c:215 at main(): DEBUG: (6357): Maximum disk quota size limit configured to '1048576 KB'. 2022-02-02 17:16:15,957 - wazuh_testing - DEBUG - 2022/02/02 21:16:09 wazuh-syscheckd[11338] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-02 17:16:15,957 - wazuh_testing - DEBUG - 2022/02/02 21:15:26 wazuh-syscheckd[7398] run_check.c:194 at start_daemon(): DEBUG: (6320): Setting process priority to: '10' 2022-02-02 17:16:15,958 - wazuh_testing - DEBUG - 2022/02/02 21:16:09 wazuh-syscheckd[11338] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-02 17:16:15,958 - wazuh_testing - DEBUG - 2022/02/02 21:15:26 wazuh-syscheckd[7398] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:16:15,958 - wazuh_testing - DEBUG - 2022/02/02 21:16:09 wazuh-syscheckd[11338] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-02 17:16:15,959 - wazuh_testing - DEBUG - 2022/02/02 21:16:09 wazuh-syscheckd[11338] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-02 17:16:15,959 - wazuh_testing - DEBUG - 2022/02/02 21:15:26 wazuh-syscheckd[7398] run_check.c:229 at start_daemon(): INFO: (6000): Starting daemon... 2022-02-02 17:16:15,960 - wazuh_testing - DEBUG - 2022/02/02 21:16:09 wazuh-syscheckd[11338] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-02 17:16:15,960 - wazuh_testing - DEBUG - 2022/02/02 21:15:26 wazuh-syscheckd[7398] run_check.c:232 at start_daemon(): INFO: (6010): File integrity monitoring scan frequency: 43200 seconds 2022-02-02 17:16:15,961 - wazuh_testing - DEBUG - 2022/02/02 21:16:09 wazuh-syscheckd[11338] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-02 17:16:15,961 - wazuh_testing - DEBUG - 2022/02/02 21:15:26 wazuh-syscheckd[7398] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-02 17:16:15,961 - wazuh_testing - DEBUG - 2022/02/02 21:16:09 wazuh-syscheckd[11338] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-02 17:16:15,962 - wazuh_testing - DEBUG - 2022/02/02 21:16:09 wazuh-syscheckd[11338] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-02 17:16:15,962 - wazuh_testing - DEBUG - 2022/02/02 21:15:26 wazuh-syscheckd[7398] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1643832926}} 2022-02-02 17:16:15,962 - wazuh_testing - DEBUG - 2022/02/02 21:16:09 rootcheck[11338] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled. 2022-02-02 17:16:15,963 - wazuh_testing - DEBUG - 2022/02/02 21:15:26 wazuh-syscheckd[7398] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-02 17:16:15,963 - wazuh_testing - DEBUG - 2022/02/02 21:16:09 wazuh-syscheckd[11338] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:16:15,963 - wazuh_testing - DEBUG - 2022/02/02 21:15:26 wazuh-syscheckd[7398] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-02 17:16:15,963 - wazuh_testing - DEBUG - 2022/02/02 21:16:09 wazuh-syscheckd[11338] syscom.c:123 at syscom_main(): DEBUG: (6284): Local requests thread ready. 2022-02-02 17:16:15,963 - wazuh_testing - DEBUG - 2022/02/02 21:15:26 wazuh-syscheckd[7398] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-02 17:16:15,963 - wazuh_testing - DEBUG - 2022/02/02 21:16:09 wazuh-syscheckd[11338] mq_op.c:47 at StartMQ(): DEBUG: Connected succesfully to 'queue/sockets/queue' after 0 attempts 2022-02-02 17:16:15,964 - wazuh_testing - DEBUG - 2022/02/02 21:16:09 wazuh-syscheckd[11338] mq_op.c:48 at StartMQ(): DEBUG: (unix_domain) Maximum send buffer set to: '212992'. 2022-02-02 17:16:15,964 - wazuh_testing - DEBUG - 2022/02/02 21:15:26 wazuh-syscheckd[7398] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1643832926}} 2022-02-02 17:16:15,964 - wazuh_testing - DEBUG - 2022/02/02 21:16:09 wazuh-syscheckd[11338] main.c:185 at main(): INFO: Started (pid: 11340). 2022-02-02 17:16:15,964 - wazuh_testing - DEBUG - 2022/02/02 21:15:26 wazuh-syscheckd[7398] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.000 sec (0.001 clock sec) 2022-02-02 17:16:15,964 - wazuh_testing - DEBUG - 2022/02/02 21:16:09 wazuh-syscheckd[11338] main.c:193 at main(): INFO: (6003): Monitoring path: '/bin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:16:15,964 - wazuh_testing - DEBUG - 2022/02/02 21:15:26 wazuh-syscheckd[7398] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 0, path count: 0 2022-02-02 17:16:15,965 - wazuh_testing - DEBUG - 2022/02/02 21:16:09 wazuh-syscheckd[11338] main.c:193 at main(): INFO: (6003): Monitoring path: '/boot', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:16:15,965 - wazuh_testing - DEBUG - 2022/02/02 21:15:26 wazuh-syscheckd[7398] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:16:15,965 - wazuh_testing - DEBUG - 2022/02/02 21:16:09 wazuh-syscheckd[11338] main.c:193 at main(): INFO: (6003): Monitoring path: '/etc', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:16:15,965 - wazuh_testing - DEBUG - 2022/02/02 21:15:26 wazuh-syscheckd[7398] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:16:15,965 - wazuh_testing - DEBUG - 2022/02/02 21:16:09 wazuh-syscheckd[11338] main.c:193 at main(): INFO: (6003): Monitoring path: '/sbin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:16:15,965 - wazuh_testing - DEBUG - 2022/02/02 21:15:26 wazuh-syscheckd[7398] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:16:15,966 - wazuh_testing - DEBUG - 2022/02/02 21:16:09 wazuh-syscheckd[11338] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir1', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:16:15,966 - wazuh_testing - DEBUG - 2022/02/02 21:15:26 wazuh-syscheckd[7398] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. 2022-02-02 17:16:15,966 - wazuh_testing - DEBUG - 2022/02/02 21:16:09 wazuh-syscheckd[11338] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir2', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | realtime'. 2022-02-02 17:16:15,966 - wazuh_testing - DEBUG - 2022/02/02 21:15:26 wazuh-syscheckd[7398] run_check.c:568 at symlink_checker_thread(): DEBUG: (6033): Starting symbolic link updater. Interval '600'. 2022-02-02 17:16:15,966 - wazuh_testing - DEBUG - 2022/02/02 21:16:09 wazuh-syscheckd[11338] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir3', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | whodata'. 2022-02-02 17:16:15,966 - wazuh_testing - DEBUG - 2022/02/02 21:15:26 wazuh-syscheckd[7398] run_check.c:82 at fim_send_sync_msg(): DEBUG: (6317): Sending integrity control message: {"component":"fim_file","type":"integrity_clear","data":{"id":1643832926,"version":2}} 2022-02-02 17:16:15,967 - wazuh_testing - DEBUG - 2022/02/02 21:16:09 wazuh-syscheckd[11338] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/bin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:16:15,967 - wazuh_testing - DEBUG - 2022/02/02 21:15:26 wazuh-syscheckd[7398] fim_sync.c:70 at fim_run_integrity(): DEBUG: Finished calculating FIM integrity. Time: 0.000 seconds. 2022-02-02 17:16:15,967 - wazuh_testing - DEBUG - 2022/02/02 21:16:09 wazuh-syscheckd[11338] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/sbin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:16:15,967 - wazuh_testing - DEBUG - 2022/02/02 21:15:26 wazuh-analysisd: INFO: Total rules enabled: '3882' 2022-02-02 17:16:15,967 - wazuh_testing - DEBUG - 2022/02/02 21:16:09 wazuh-syscheckd[11338] main.c:215 at main(): DEBUG: (6357): Maximum disk quota size limit configured to '1048576 KB'. 2022-02-02 17:16:15,967 - wazuh_testing - DEBUG - 2022/02/02 21:15:26 wazuh-analysisd: INFO: Started (pid: 7391). 2022-02-02 17:16:15,968 - wazuh_testing - DEBUG - 2022/02/02 21:16:09 wazuh-syscheckd[11338] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mtab' 2022-02-02 17:16:15,968 - wazuh_testing - DEBUG - 2022/02/02 21:15:26 wazuh-db[7352] main.c:290 at run_dealer(): DEBUG: New client connected (6). 2022-02-02 17:16:15,968 - wazuh_testing - DEBUG - 2022/02/02 21:16:09 wazuh-syscheckd[11338] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/hosts.deny' 2022-02-02 17:16:15,968 - wazuh_testing - DEBUG - 2022/02/02 21:15:26 wazuh-analysisd: INFO: (7200): Logtest started 2022-02-02 17:16:15,969 - wazuh_testing - DEBUG - 2022/02/02 21:16:09 wazuh-syscheckd[11338] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mail/statistics' 2022-02-02 17:16:15,969 - wazuh_testing - DEBUG - 2022/02/02 21:15:26 wazuh-db[7352] main.c:290 at run_dealer(): DEBUG: New client connected (10). 2022-02-02 17:16:15,969 - wazuh_testing - DEBUG - 2022/02/02 21:16:09 wazuh-syscheckd[11338] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random-seed' 2022-02-02 17:16:15,970 - wazuh_testing - DEBUG - 2022/02/02 21:15:26 wazuh-db[7352] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 000 query: syscheck scan_info_update start_scan 1643832926 2022-02-02 17:16:15,970 - wazuh_testing - DEBUG - 2022/02/02 21:16:09 wazuh-syscheckd[11338] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random.seed' 2022-02-02 17:16:15,970 - wazuh_testing - DEBUG - 2022/02/02 21:15:26 wazuh-db[7352] main.c:290 at run_dealer(): DEBUG: New client connected (11). 2022-02-02 17:16:15,971 - wazuh_testing - DEBUG - 2022/02/02 21:16:09 wazuh-syscheckd[11338] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/adjtime' 2022-02-02 17:16:15,971 - wazuh_testing - DEBUG - 2022/02/02 21:15:26 wazuh-db[7352] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 000 query: syscheck scan_info_update end_scan 1643832926 2022-02-02 17:16:15,971 - wazuh_testing - DEBUG - 2022/02/02 21:15:26 wazuh-db[7352] main.c:290 at run_dealer(): DEBUG: New client connected (12). 2022-02-02 17:16:15,971 - wazuh_testing - DEBUG - 2022/02/02 21:16:09 wazuh-syscheckd[11338] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/httpd/logs' 2022-02-02 17:16:15,972 - wazuh_testing - DEBUG - 2022/02/02 21:15:26 wazuh-db[7352] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 000 query: fim_file integrity_clear {"id":1643832926,"version":2} 2022-02-02 17:16:15,972 - wazuh_testing - DEBUG - 2022/02/02 21:16:09 wazuh-syscheckd[11338] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/utmpx' 2022-02-02 17:16:15,972 - wazuh_testing - DEBUG - 2022/02/02 21:15:27 wazuh-remoted: INFO: Started (pid: 7540). Listening on port 1514/TCP (secure). 2022-02-02 17:16:15,973 - wazuh_testing - DEBUG - 2022/02/02 21:15:27 wazuh-db[7352] main.c:290 at run_dealer(): DEBUG: New client connected (13). 2022-02-02 17:16:15,973 - wazuh_testing - DEBUG - 2022/02/02 21:16:09 wazuh-syscheckd[11338] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/wtmpx' 2022-02-02 17:16:15,973 - wazuh_testing - DEBUG - 2022/02/02 21:15:27 wazuh-db[7352] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: reset-agents-connection synced 2022-02-02 17:16:15,974 - wazuh_testing - DEBUG - 2022/02/02 21:16:09 wazuh-syscheckd[11338] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/cups/certs' 2022-02-02 17:16:15,974 - wazuh_testing - DEBUG - 2022/02/02 21:15:27 wazuh-db[7352] main.c:352 at run_worker(): DEBUG: Client 13 disconnected. 2022-02-02 17:16:15,974 - wazuh_testing - DEBUG - 2022/02/02 21:15:27 wazuh-remoted: INFO: (1410): Reading authentication keys file. 2022-02-02 17:16:15,974 - wazuh_testing - DEBUG - 2022/02/02 21:16:09 wazuh-syscheckd[11338] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/dumpdates' 2022-02-02 17:16:15,975 - wazuh_testing - DEBUG - 2022/02/02 21:15:28 wazuh-logcollector: INFO: (1950): Analyzing file: '/var/ossec/logs/active-responses.log'. 2022-02-02 17:16:15,975 - wazuh_testing - DEBUG - 2022/02/02 21:16:09 wazuh-syscheckd[11338] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/svc/volatile' 2022-02-02 17:16:15,975 - wazuh_testing - DEBUG - 2022/02/02 21:15:28 wazuh-logcollector: INFO: (1950): Analyzing file: '/var/log/dpkg.log'. 2022-02-02 17:16:15,975 - wazuh_testing - DEBUG - 2022/02/02 21:16:09 wazuh-syscheckd[11338] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/security' 2022-02-02 17:16:15,976 - wazuh_testing - DEBUG - 2022/02/02 21:15:28 wazuh-logcollector: INFO: Started (pid: 7571). 2022-02-02 17:16:15,976 - wazuh_testing - DEBUG - 2022/02/02 21:16:09 wazuh-syscheckd[11338] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/debug' 2022-02-02 17:16:15,976 - wazuh_testing - DEBUG - 2022/02/02 21:16:09 wazuh-syscheckd[11338] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/dev/core' 2022-02-02 17:16:15,976 - wazuh_testing - DEBUG - 2022/02/02 21:15:28 wazuh-monitord: INFO: Started (pid: 7587). 2022-02-02 17:16:15,977 - wazuh_testing - DEBUG - 2022/02/02 21:16:09 wazuh-syscheckd[11338] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '^/proc' 2022-02-02 17:16:15,977 - wazuh_testing - DEBUG - 2022/02/02 21:16:09 wazuh-syscheckd[11338] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '.log$|.swp$' 2022-02-02 17:16:15,977 - wazuh_testing - DEBUG - 2022/02/02 21:15:29 wazuh-modulesd: INFO: Started (pid: 7599). 2022-02-02 17:16:15,978 - wazuh_testing - DEBUG - 2022/02/02 21:16:09 wazuh-syscheckd[11338] main.c:235 at main(): INFO: (6004): No diff for file: '/etc/ssl/private.key' 2022-02-02 17:16:15,978 - wazuh_testing - DEBUG - 2022/02/02 21:15:29 wazuh-modulesd:agent-upgrade: INFO: (8153): Module Agent Upgrade started. 2022-02-02 17:16:15,978 - wazuh_testing - DEBUG - 2022/02/02 21:16:09 wazuh-syscheckd[11338] main.c:245 at main(): INFO: (6016): Directory set for real time monitoring: '/testdir2'. 2022-02-02 17:16:15,978 - wazuh_testing - DEBUG - 2022/02/02 21:15:29 wazuh-modulesd:ciscat: INFO: Module disabled. Exiting... 2022-02-02 17:16:15,979 - wazuh_testing - DEBUG - 2022/02/02 21:16:09 wazuh-syscheckd[11338] syscheck_audit.c:243 at audit_init(): WARNING: (6924): Who-data engine cannot start because Auditd is not running. 2022-02-02 17:16:15,979 - wazuh_testing - DEBUG - 2022/02/02 21:15:29 wazuh-modulesd:osquery: INFO: Module disabled. Exiting... 2022-02-02 17:16:15,979 - wazuh_testing - DEBUG - 2022/02/02 21:16:09 wazuh-syscheckd[11338] main.c:264 at main(): WARNING: (6913): Who-data engine could not start. Switching who-data to real-time. 2022-02-02 17:16:15,980 - wazuh_testing - DEBUG - 2022/02/02 21:15:29 wazuh-modulesd:syscollector: INFO: Module disabled. Exiting... 2022-02-02 17:16:15,980 - wazuh_testing - DEBUG - 2022/02/02 21:16:09 wazuh-syscheckd[11338] run_check.c:194 at start_daemon(): DEBUG: (6320): Setting process priority to: '10' 2022-02-02 17:16:15,980 - wazuh_testing - DEBUG - 2022/02/02 21:16:09 wazuh-syscheckd[11338] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:16:15,981 - wazuh_testing - DEBUG - 2022/02/02 21:15:29 sca: INFO: Module disabled. Exiting. 2022-02-02 17:16:15,981 - wazuh_testing - DEBUG - 2022/02/02 21:16:09 wazuh-syscheckd[11338] run_check.c:229 at start_daemon(): INFO: (6000): Starting daemon... 2022-02-02 17:16:15,981 - wazuh_testing - DEBUG - 2022/02/02 21:16:09 wazuh-syscheckd[11338] run_check.c:232 at start_daemon(): INFO: (6010): File integrity monitoring scan frequency: 20 seconds 2022-02-02 17:16:15,981 - wazuh_testing - DEBUG - 2022/02/02 21:15:29 wazuh-modulesd:database: INFO: Module started. 2022-02-02 17:16:15,982 - wazuh_testing - DEBUG - 2022/02/02 21:16:09 wazuh-syscheckd[11338] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-02 17:16:15,982 - wazuh_testing - DEBUG - 2022/02/02 21:15:29 wazuh-modulesd:download: INFO: Module started. 2022-02-02 17:16:15,983 - wazuh_testing - DEBUG - 2022/02/02 21:16:09 wazuh-syscheckd[11338] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1643832969}} 2022-02-02 17:16:15,983 - wazuh_testing - DEBUG - 2022/02/02 21:15:29 wazuh-modulesd:control: INFO: Starting control thread. 2022-02-02 17:16:15,983 - wazuh_testing - DEBUG - 2022/02/02 21:16:09 wazuh-syscheckd[11338] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-02 17:16:15,984 - wazuh_testing - DEBUG - 2022/02/02 21:15:29 wazuh-db[7352] main.c:290 at run_dealer(): DEBUG: New client connected (13). 2022-02-02 17:16:15,984 - wazuh_testing - DEBUG - 2022/02/02 21:16:09 wazuh-syscheckd[11338] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-02 17:16:15,984 - wazuh_testing - DEBUG - 2022/02/02 21:15:29 wazuh-db[7352] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-name {"id":0,"name":"wazuh-manager"} 2022-02-02 17:16:15,985 - wazuh_testing - DEBUG - 2022/02/02 21:16:09 wazuh-syscheckd[11338] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-02 17:16:15,985 - wazuh_testing - DEBUG - 2022/02/02 21:15:29 wazuh-modulesd:task-manager: INFO: (8200): Module Task Manager started. 2022-02-02 17:16:15,985 - wazuh_testing - DEBUG - 2022/02/02 21:16:09 wazuh-syscheckd[11338] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-02 17:16:15,985 - wazuh_testing - DEBUG - 2022/02/02 21:15:29 wazuh-db[7352] main.c:290 at run_dealer(): DEBUG: New client connected (16). 2022-02-02 17:16:15,986 - wazuh_testing - DEBUG - 2022/02/02 21:16:09 wazuh-syscheckd[11338] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-02 17:16:15,986 - wazuh_testing - DEBUG - 2022/02/02 21:15:29 wazuh-db[7352] wdb_parser.c:928 at wdb_parse(): DEBUG: Task query: set_timeout {"now":1643832929,"interval":900} 2022-02-02 17:16:15,987 - wazuh_testing - DEBUG - 2022/02/02 21:15:29 wazuh-db[7352] main.c:352 at run_worker(): DEBUG: Client 16 disconnected. 2022-02-02 17:16:15,987 - wazuh_testing - DEBUG - 2022/02/02 21:16:10 wazuh-logcollector: INFO: (1950): Analyzing file: '/var/ossec/logs/active-responses.log'. 2022-02-02 17:16:15,987 - wazuh_testing - DEBUG - 2022/02/02 21:15:29 wazuh-db[7352] main.c:290 at run_dealer(): DEBUG: New client connected (16). 2022-02-02 17:16:15,987 - wazuh_testing - DEBUG - 2022/02/02 21:16:10 wazuh-logcollector: ERROR: (1103): Could not open file '/var/log/secure' due to [(2)-(No such file or directory)]. 2022-02-02 17:16:15,987 - wazuh_testing - DEBUG - 2022/02/02 21:15:29 wazuh-db[7352] wdb_parser.c:928 at wdb_parse(): DEBUG: Task query: delete_old {"timestamp":1643228129} 2022-02-02 17:16:15,988 - wazuh_testing - DEBUG - 2022/02/02 21:15:29 wazuh-db[7352] main.c:352 at run_worker(): DEBUG: Client 16 disconnected. 2022-02-02 17:16:15,988 - wazuh_testing - DEBUG - 2022/02/02 21:16:10 wazuh-logcollector: INFO: (1950): Analyzing file: '/var/log/secure'. 2022-02-02 17:16:15,989 - wazuh_testing - DEBUG - 2022/02/02 21:15:29 wazuh-db[7352] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":0,"version":"Wazuh v4.2.5","manager_host":"wazuh-manager","node_name":"wazuh-master","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-manager |5.13.0-27-generic |#29~20.04.1-Ubuntu SMP Fri Jan 14 00:32:30 UTC 2022 |x86_64","os_arch":"x86_64"} 2022-02-02 17:16:15,989 - wazuh_testing - DEBUG - 2022/02/02 21:16:10 wazuh-logcollector: INFO: Started (pid: 11352). 2022-02-02 17:16:15,989 - wazuh_testing - DEBUG - 2022/02/02 21:15:29 wazuh-db[7352] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: insert-agent {"id":1,"name":"wazuh-agent1","register_ip":"any","internal_key":"1111111111111111111111111111111111111111111111111111111111111111","group":"default","date_add":0} 2022-02-02 17:16:15,989 - wazuh_testing - DEBUG - 2022/02/02 21:16:10 wazuh-modulesd: INFO: Started (pid: 11366). 2022-02-02 17:16:15,990 - wazuh_testing - DEBUG - 2022/02/02 21:15:29 wazuh-db[7352] wdb_global.c:89 at wdb_global_insert_agent(): DEBUG: SQLite: UNIQUE constraint failed: agent.id 2022-02-02 17:16:15,990 - wazuh_testing - DEBUG - 2022/02/02 21:16:10 wazuh-modulesd:agent-upgrade: INFO: (8153): Module Agent Upgrade started. 2022-02-02 17:16:15,990 - wazuh_testing - DEBUG - 2022/02/02 21:15:29 wazuh-db[7352] wdb_parser.c:4784 at wdb_parse_global_insert_agent(): DEBUG: Global DB Cannot execute SQL query; err database queue/db/global.db: UNIQUE constraint failed: agent.id 2022-02-02 17:16:15,990 - wazuh_testing - DEBUG - 2022/02/02 21:16:10 wazuh-modulesd:control: INFO: Starting control thread. 2022-02-02 17:16:15,991 - wazuh_testing - DEBUG - 2022/02/02 21:16:10 wazuh-syscheckd[11338] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-02 17:16:15,991 - wazuh_testing - DEBUG - 2022/02/02 21:15:29 wazuh-db[7352] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-group {"id":1,"group":"default"} 2022-02-02 17:16:15,991 - wazuh_testing - DEBUG - 2022/02/02 21:16:10 wazuh-syscheckd[11338] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-02 17:16:15,991 - wazuh_testing - DEBUG - 2022/02/02 21:16:10 wazuh-syscheckd[11338] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1643832970}} 2022-02-02 17:16:15,991 - wazuh_testing - DEBUG - 2022/02/02 21:15:29 wazuh-db[7352] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: delete-agent-belong 1 2022-02-02 17:16:15,992 - wazuh_testing - DEBUG - 2022/02/02 21:16:10 wazuh-syscheckd[11338] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 1.225 sec (1.221 clock sec) 2022-02-02 17:16:15,992 - wazuh_testing - DEBUG - 2022/02/02 21:15:29 wazuh-db[7352] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: find-group default 2022-02-02 17:16:15,992 - wazuh_testing - DEBUG - 2022/02/02 21:16:10 wazuh-syscheckd[11338] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1621, path count: 1627 2022-02-02 17:16:15,992 - wazuh_testing - DEBUG - 2022/02/02 21:15:29 wazuh-db[7352] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: insert-agent-belong {"id_group":1,"id_agent":1} 2022-02-02 17:16:15,993 - wazuh_testing - DEBUG - 2022/02/02 21:16:10 wazuh-syscheckd[11338] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:16:15,993 - wazuh_testing - DEBUG - 2022/02/02 21:15:29 wazuh-db[7352] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: get-all-agents last_id 0 2022-02-02 17:16:15,993 - wazuh_testing - DEBUG - 2022/02/02 21:16:10 wazuh-syscheckd[11338] run_check.c:387 at fim_run_realtime(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-02 17:16:15,993 - wazuh_testing - DEBUG - 2022/02/02 21:16:10 wazuh-syscheckd[11338] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:16:15,994 - wazuh_testing - DEBUG - 2022/02/02 21:16:10 wazuh-syscheckd[11338] run_check.c:543 at log_realtime_status(): INFO: (6012): Real-time file integrity monitoring started. 2022-02-02 17:16:15,994 - wazuh_testing - DEBUG - 2022/02/02 21:15:29 wazuh-db[7352] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: select-groups 2022-02-02 17:16:15,994 - wazuh_testing - DEBUG - 2022/02/02 21:16:10 wazuh-syscheckd[11338] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. 2022-02-02 17:16:15,995 - wazuh_testing - DEBUG - 2022/02/02 21:16:10 wazuh-syscheckd[11338] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:16:15,995 - wazuh_testing - DEBUG - 2022/02/02 21:15:29 wazuh-db[7352] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: find-group default 2022-02-02 17:16:15,996 - wazuh_testing - DEBUG - 2022/02/02 21:16:10 wazuh-syscheckd[11338] run_check.c:568 at symlink_checker_thread(): DEBUG: (6033): Starting symbolic link updater. Interval '600'. 2022-02-02 17:16:15,996 - wazuh_testing - DEBUG - 2022/02/02 21:15:29 wazuh-db[7352] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: get-all-agents last_id 0 2022-02-02 17:16:15,997 - wazuh_testing - DEBUG - 2022/02/02 21:16:10 wazuh-syscheckd[11338] run_check.c:82 at fim_send_sync_msg(): DEBUG: (6317): Sending integrity control message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1643832970,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"ecc96a38a16daddcaa2f7fa3dfcaa225104cfc22"}} 2022-02-02 17:16:15,997 - wazuh_testing - DEBUG - 2022/02/02 21:15:29 wazuh-db[7352] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: select-agent-group 1 2022-02-02 17:16:15,997 - wazuh_testing - DEBUG - 2022/02/02 21:15:29 wazuh-db[7352] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: delete-agent-belong 1 2022-02-02 17:16:15,998 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-agent1 and message: .*Sending integrity control message: (.+)$ 2022-02-02 17:16:15,998 - wazuh_testing - DEBUG - 2022/02/02 21:15:29 wazuh-db[7352] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: find-group default 2022-02-02 17:16:15,999 - wazuh_testing - DEBUG - 2022/02/02 21:15:29 wazuh-db[7352] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: insert-agent-belong {"id_group":1,"id_agent":1} 2022-02-02 17:16:16,000 - wazuh_testing - DEBUG - 2022/02/02 21:15:29 wazuh-db[7352] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: select-agent-name 1 2022-02-02 17:16:16,000 - wazuh_testing - DEBUG - 2022/02/02 21:15:29 wazuh-db[7352] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: select-agent-name 1 2022-02-02 17:16:16,001 - wazuh_testing - DEBUG - 2022/02/02 21:15:30 wazuh-db[7352] main.c:290 at run_dealer(): DEBUG: New client connected (16). 2022-02-02 17:16:16,001 - wazuh_testing - DEBUG - 2022/02/02 21:15:30 wazuh-db[7352] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-keepalive {"id":1,"connection_status":"pending","sync_status":"synced"} 2022-02-02 17:16:16,002 - wazuh_testing - DEBUG - 2022/02/02 21:15:30 wazuh-db[7352] main.c:290 at run_dealer(): DEBUG: New client connected (18). 2022-02-02 17:16:16,003 - wazuh_testing - DEBUG - 2022/02/02 21:15:30 wazuh-db[7352] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.18.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.18.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.13.0-27-generic |#29~20.04.1-Ubuntu SMP Fri Jan 14 00:32:30 UTC 2022 |x86_64","os_arch":"x86_64"} 2022-02-02 17:16:16,004 - wazuh_testing - DEBUG - 2022/02/02 21:15:31 wazuh-db[7352] main.c:290 at run_dealer(): DEBUG: New client connected (19). 2022-02-02 17:16:16,005 - wazuh_testing - DEBUG - 2022/02/02 21:15:31 wazuh-db[7352] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1643832901 2022-02-02 17:16:16,006 - wazuh_testing - DEBUG - 2022/02/02 21:15:32 wazuh-db[7352] main.c:290 at run_dealer(): DEBUG: New client connected (20). 2022-02-02 17:16:16,006 - wazuh_testing - DEBUG - 2022/02/02 21:15:32 wazuh-db[7352] main.c:290 at run_dealer(): DEBUG: New client connected (21). 2022-02-02 17:16:16,007 - wazuh_testing - DEBUG - 2022/02/02 21:15:32 wazuh-db[7352] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update end_scan 1643832932 2022-02-02 17:16:16,007 - wazuh_testing - DEBUG - 2022/02/02 21:15:32 wazuh-db[7352] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck delete /testdir1/testdir1.txt 2022-02-02 17:16:16,007 - wazuh_testing - DEBUG - 2022/02/02 21:15:32 wazuh-db[7352] main.c:290 at run_dealer(): DEBUG: New client connected (22). 2022-02-02 17:16:16,008 - wazuh_testing - DEBUG - 2022/02/02 21:15:32 wazuh-db[7352] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: get-labels 1 2022-02-02 17:16:16,008 - wazuh_testing - DEBUG - 2022/02/02 21:15:37 wazuh-db[7352] wdb.c:918 at wdb_commit_old(): DEBUG: Agent 'mitre' database commited. Time: 0.030 ms. 2022-02-02 17:16:16,009 - wazuh_testing - DEBUG - 2022/02/02 21:15:40 wazuh-db[7352] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.18.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.18.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.13.0-27-generic |#29~20.04.1-Ubuntu SMP Fri Jan 14 00:32:30 UTC 2022 |x86_64","os_arch":"x86_64"} 2022-02-02 17:16:16,009 - wazuh_testing - DEBUG - 2022/02/02 21:15:40 wazuh-db[7352] wdb.c:918 at wdb_commit_old(): DEBUG: Agent 'tasks' database commited. Time: 0.061 ms. 2022-02-02 17:16:16,010 - wazuh_testing - DEBUG - 2022/02/02 21:15:50 wazuh-db[7352] main.c:290 at run_dealer(): DEBUG: New client connected (23). 2022-02-02 17:16:16,011 - wazuh_testing - DEBUG - 2022/02/02 21:15:50 wazuh-db[7352] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.18.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.18.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.13.0-27-generic |#29~20.04.1-Ubuntu SMP Fri Jan 14 00:32:30 UTC 2022 |x86_64","os_arch":"x86_64"} 2022-02-02 17:16:16,011 - wazuh_testing - DEBUG - 2022/02/02 21:15:53 wazuh-db[7352] main.c:290 at run_dealer(): DEBUG: New client connected (24). 2022-02-02 17:16:16,012 - wazuh_testing - DEBUG - 2022/02/02 21:15:53 wazuh-db[7352] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1643832953 2022-02-02 17:16:16,012 - wazuh_testing - DEBUG - 2022/02/02 21:15:54 wazuh-db[7352] main.c:290 at run_dealer(): DEBUG: New client connected (25). 2022-02-02 17:16:16,013 - wazuh_testing - DEBUG - 2022/02/02 21:15:54 wazuh-db[7352] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update end_scan 1643832954 2022-02-02 17:16:16,013 - wazuh_testing - DEBUG - 2022/02/02 21:15:59 wazuh-db[7352] main.c:290 at run_dealer(): DEBUG: New client connected (26). 2022-02-02 17:16:16,013 - wazuh_testing - DEBUG - 2022/02/02 21:15:59 wazuh-db[7352] wdb_parser.c:928 at wdb_parse(): DEBUG: Task query: upgrade_cancel_tasks {"node":"wazuh-master"} 2022-02-02 17:16:16,014 - wazuh_testing - DEBUG - 2022/02/02 21:15:59 wazuh-db[7352] main.c:352 at run_worker(): DEBUG: Client 26 disconnected. 2022-02-02 17:16:16,015 - wazuh_testing - DEBUG - 2022/02/02 21:16:00 wazuh-db[7352] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.18.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.18.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.13.0-27-generic |#29~20.04.1-Ubuntu SMP Fri Jan 14 00:32:30 UTC 2022 |x86_64","os_arch":"x86_64"} 2022-02-02 17:16:16,015 - wazuh_testing - DEBUG - 2022/02/02 21:16:07 wazuh-db[7352] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-connection-status {"id":1,"connection_status":"disconnected","sync_status":"synced"} 2022-02-02 17:16:16,016 - wazuh_testing - DEBUG - 2022/02/02 21:16:07 wazuh-db[7352] main.c:290 at run_dealer(): DEBUG: New client connected (26). 2022-02-02 17:16:16,017 - wazuh_testing - DEBUG - 2022/02/02 21:16:07 wazuh-db[7352] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: get-labels 1 2022-02-02 17:16:16,018 - wazuh_testing - DEBUG - 2022/02/02 21:16:08 wazuh-db[7352] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-keepalive {"id":1,"connection_status":"pending","sync_status":"synced"} 2022-02-02 17:16:16,019 - wazuh_testing - DEBUG - 2022/02/02 21:16:10 wazuh-db[7352] wdb.c:918 at wdb_commit_old(): DEBUG: Agent 'tasks' database commited. Time: 0.051 ms. 2022-02-02 17:16:16,020 - wazuh_testing - DEBUG - 2022/02/02 21:16:11 wazuh-db[7352] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.18.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.18.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.13.0-27-generic |#29~20.04.1-Ubuntu SMP Fri Jan 14 00:32:30 UTC 2022 |x86_64","os_arch":"x86_64"} 2022-02-02 17:16:16,022 - wazuh_testing - DEBUG - 2022/02/02 21:16:11 wazuh-db[7352] main.c:290 at run_dealer(): DEBUG: New client connected (27). 2022-02-02 17:16:16,023 - wazuh_testing - DEBUG - 2022/02/02 21:16:11 wazuh-db[7352] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1643832969 2022-02-02 17:16:16,024 - wazuh_testing - DEBUG - 2022/02/02 21:16:11 wazuh-db[7352] main.c:290 at run_dealer(): DEBUG: New client connected (28). 2022-02-02 17:16:16,025 - wazuh_testing - DEBUG - 2022/02/02 21:16:11 wazuh-db[7352] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update end_scan 1643832970 2022-02-02 17:16:16,026 - wazuh_testing - DEBUG - 2022/02/02 21:16:11 wazuh-db[7352] main.c:290 at run_dealer(): DEBUG: New client connected (29). 2022-02-02 17:16:16,026 - wazuh_testing - DEBUG - 2022/02/02 21:16:11 wazuh-db[7352] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_global {"id":1643832970,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"ecc96a38a16daddcaa2f7fa3dfcaa225104cfc22"} 2022-02-02 17:16:16,027 - wazuh_testing - DEBUG - 2022/02/02 21:16:11 wazuh-db[7352] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 3.528 ms. 2022-02-02 17:16:16,028 - wazuh_testing - DEBUG - 2022/02/02 21:16:11 wazuh-db[7352] main.c:290 at run_dealer(): DEBUG: New client connected (30). 2022-02-02 17:16:16,029 - wazuh_testing - DEBUG - 2022/02/02 21:16:11 wazuh-db[7352] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643832970,"version":2,"begin":"/bin/bash","end":"/sbin/chcpu","tail":"/sbin/ctrlaltdel","checksum":"2678c972016eb9b2978d2d495f53f99563497651"} 2022-02-02 17:16:16,029 - wazuh_testing - DEBUG - 2022/02/02 21:16:11 wazuh-db[7352] main.c:290 at run_dealer(): DEBUG: New client connected (31). 2022-02-02 17:16:16,030 - wazuh_testing - DEBUG - 2022/02/02 21:16:11 wazuh-db[7352] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643832970,"version":2,"begin":"/sbin/ctrlaltdel","end":"/usr/sbin/zic","checksum":"9fd64c401b19b8023f4e0473dd9a678273827615"} 2022-02-02 17:16:16,031 - wazuh_testing - DEBUG - 2022/02/02 21:16:11 wazuh-db[7352] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 1.101 ms. 2022-02-02 17:16:16,032 - wazuh_testing - DEBUG - 2022/02/02 21:16:11 wazuh-db[7352] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 1.085 ms. 2022-02-02 17:16:16,033 - wazuh_testing - DEBUG - 2022/02/02 21:16:11 wazuh-db[7352] main.c:290 at run_dealer(): DEBUG: New client connected (32). 2022-02-02 17:16:16,034 - wazuh_testing - DEBUG - 2022/02/02 21:16:11 wazuh-db[7352] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643832970,"version":2,"begin":"/sbin/ctrlaltdel","end":"/usr/bin/pdb","tail":"/usr/bin/pdb2","checksum":"9427c4425d87f376f03bfd9fbfedcbf011edc0b5"} 2022-02-02 17:16:16,035 - wazuh_testing - DEBUG - 2022/02/02 21:16:11 wazuh-db[7352] main.c:290 at run_dealer(): DEBUG: New client connected (33). 2022-02-02 17:16:16,036 - wazuh_testing - DEBUG - 2022/02/02 21:16:11 wazuh-db[7352] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643832970,"version":2,"begin":"/usr/bin/pdb2","end":"/usr/sbin/zic","checksum":"f28534dbcbabe145177a8e0c707d9da341991c1f"} 2022-02-02 17:16:16,037 - wazuh_testing - DEBUG - 2022/02/02 21:16:11 wazuh-db[7352] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.601 ms. 2022-02-02 17:16:16,038 - wazuh_testing - DEBUG - 2022/02/02 21:16:11 wazuh-db[7352] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.479 ms. 2022-02-02 17:16:16,040 - wazuh_testing - DEBUG - 2022/02/02 21:16:11 wazuh-db[7352] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643832970,"version":2,"begin":"/sbin/ctrlaltdel","end":"/usr/bin/dpkg-divert","tail":"/usr/bin/dpkg-genbuildinfo","checksum":"fb05e4cbf074dff783ba41bccf09878362e4edb2"} 2022-02-02 17:16:16,041 - wazuh_testing - DEBUG - 2022/02/02 21:16:11 wazuh-db[7352] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.154 ms. 2022-02-02 17:16:16,042 - wazuh_testing - DEBUG - 2022/02/02 21:16:11 wazuh-db[7352] main.c:290 at run_dealer(): DEBUG: New client connected (34). 2022-02-02 17:16:16,044 - wazuh_testing - DEBUG - 2022/02/02 21:16:11 wazuh-db[7352] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643832970,"version":2,"begin":"/usr/bin/dpkg-genbuildinfo","end":"/usr/bin/pdb","checksum":"449176f3ac058628fcde8cdfbd7a7d029ac13e05"} 2022-02-02 17:16:16,045 - wazuh_testing - DEBUG - 2022/02/02 21:16:11 wazuh-db[7352] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.284 ms. 2022-02-02 17:16:16,046 - wazuh_testing - DEBUG - 2022/02/02 21:16:11 wazuh-db[7352] main.c:290 at run_dealer(): DEBUG: New client connected (35). 2022-02-02 17:16:16,048 - wazuh_testing - DEBUG - 2022/02/02 21:16:11 wazuh-db[7352] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643832970,"version":2,"begin":"/sbin/ctrlaltdel","end":"/usr/bin/apt-extracttemplates","tail":"/usr/bin/apt-ftparchive","checksum":"222815c682df59e6ec6dddd2c133f28d410e474b"} 2022-02-02 17:16:16,049 - wazuh_testing - DEBUG - 2022/02/02 21:16:11 wazuh-db[7352] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.202 ms. 2022-02-02 17:16:16,050 - wazuh_testing - DEBUG - 2022/02/02 21:16:11 wazuh-db[7352] main.c:290 at run_dealer(): DEBUG: New client connected (36). 2022-02-02 17:16:16,052 - wazuh_testing - DEBUG - 2022/02/02 21:16:11 wazuh-db[7352] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643832970,"version":2,"begin":"/usr/bin/apt-ftparchive","end":"/usr/bin/dpkg-divert","checksum":"84aaf018d588e1d99c714364b63c94e1d4eb4bf2"} 2022-02-02 17:16:16,053 - wazuh_testing - DEBUG - 2022/02/02 21:16:11 wazuh-db[7352] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.268 ms. 2022-02-02 17:16:16,054 - wazuh_testing - DEBUG - 2022/02/02 21:16:11 wazuh-db[7352] main.c:290 at run_dealer(): DEBUG: New client connected (37). 2022-02-02 17:16:16,056 - wazuh_testing - DEBUG - 2022/02/02 21:16:11 wazuh-db[7352] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643832970,"version":2,"begin":"/sbin/ctrlaltdel","end":"/sbin/mkhomedir_helper","tail":"/sbin/mkswap","checksum":"f4094767b5033606e4a60c0075f429a93f720519"} 2022-02-02 17:16:16,058 - wazuh_testing - DEBUG - 2022/02/02 21:16:11 wazuh-db[7352] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.127 ms. 2022-02-02 17:16:16,059 - wazuh_testing - DEBUG - 2022/02/02 21:16:12 wazuh-db[7352] main.c:290 at run_dealer(): DEBUG: New client connected (38). 2022-02-02 17:16:16,060 - wazuh_testing - DEBUG - 2022/02/02 21:16:12 wazuh-db[7352] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643832970,"version":2,"begin":"/sbin/mkswap","end":"/usr/bin/apt-extracttemplates","checksum":"32844fd24afabf019263655f935a7bbb58ecaa2e"} 2022-02-02 17:16:16,062 - wazuh_testing - DEBUG - 2022/02/02 21:16:12 wazuh-db[7352] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.144 ms. 2022-02-02 17:16:16,063 - wazuh_testing - DEBUG - 2022/02/02 21:16:12 wazuh-db[7352] main.c:290 at run_dealer(): DEBUG: New client connected (39). 2022-02-02 17:16:16,064 - wazuh_testing - DEBUG - 2022/02/02 21:16:12 wazuh-db[7352] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643832970,"version":2,"begin":"/sbin/mkswap","end":"/sbin/start-stop-daemon","tail":"/sbin/sulogin","checksum":"205673eafd86478a9bae30a249a954bab122f47f"} 2022-02-02 17:16:16,065 - wazuh_testing - DEBUG - 2022/02/02 21:16:12 wazuh-db[7352] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.101 ms. 2022-02-02 17:16:16,067 - wazuh_testing - DEBUG - 2022/02/02 21:16:12 wazuh-db[7352] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643832970,"version":2,"begin":"/sbin/sulogin","end":"/usr/bin/apt-extracttemplates","checksum":"1c01170971e3e643acca03e684f43f17e5237a0c"} 2022-02-02 17:16:16,068 - wazuh_testing - DEBUG - 2022/02/02 21:16:12 wazuh-db[7352] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.112 ms. 2022-02-02 17:16:16,070 - wazuh_testing - DEBUG - 2022/02/02 21:16:12 wazuh-db[7352] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643832970,"version":2,"begin":"/sbin/sulogin","end":"/sbin/wipefs","tail":"/sbin/zramctl","checksum":"157570556203dc9b1df7834dbf4e4a20ab33cfca"} 2022-02-02 17:16:16,071 - wazuh_testing - DEBUG - 2022/02/02 21:16:12 wazuh-db[7352] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.086 ms. 2022-02-02 17:16:16,073 - wazuh_testing - DEBUG - 2022/02/02 21:16:12 wazuh-db[7352] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643832970,"version":2,"begin":"/sbin/zramctl","end":"/usr/bin/apt-extracttemplates","checksum":"463ac3e2b2a20ab2f377ae2188c86cae9e7d0ee1"} 2022-02-02 17:16:16,074 - wazuh_testing - DEBUG - 2022/02/02 21:16:12 wazuh-db[7352] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.110 ms. 2022-02-02 17:16:16,076 - wazuh_testing - DEBUG - 2022/02/02 21:16:12 wazuh-db[7352] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643832970,"version":2,"begin":"/sbin/zramctl","end":"/usr/bin/aclocal-1.16","tail":"/usr/bin/addpart","checksum":"71957e0faafa01355b126b59463f61550b6494fe"} 2022-02-02 17:16:16,077 - wazuh_testing - DEBUG - 2022/02/02 21:16:12 wazuh-db[7352] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.067 ms. 2022-02-02 17:16:16,079 - wazuh_testing - DEBUG - 2022/02/02 21:16:12 wazuh-db[7352] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643832970,"version":2,"begin":"/usr/bin/addpart","end":"/usr/bin/apt-extracttemplates","checksum":"95a692828de0dea4b6ca328f569037eaa082ab85"} 2022-02-02 17:16:16,080 - wazuh_testing - DEBUG - 2022/02/02 21:16:12 wazuh-db[7352] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.065 ms. 2022-02-02 17:16:16,081 - wazuh_testing - DEBUG - 2022/02/02 21:16:12 wazuh-db[7352] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643832970,"version":2,"begin":"/sbin/zramctl","end":"/usr/bin/2to3-2.7","tail":"/usr/bin/[","checksum":"22a63d4031fcd2d406bf3fd4412390341668ea0d"} 2022-02-02 17:16:16,081 - wazuh_testing - DEBUG - 2022/02/02 21:16:12 wazuh-db[7352] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.060 ms. 2022-02-02 17:16:16,082 - wazuh_testing - DEBUG - 2022/02/02 21:16:12 wazuh-db[7352] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643832970,"version":2,"begin":"/usr/bin/[","end":"/usr/bin/aclocal-1.16","checksum":"ab72adc86d2a1f2e36162f60b40bf10d71afc73a"} 2022-02-02 17:16:16,082 - wazuh_testing - DEBUG - 2022/02/02 21:16:12 wazuh-db[7352] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.059 ms. 2022-02-02 17:16:16,083 - wazuh_testing - DEBUG - 2022/02/02 21:16:12 wazuh-db[7352] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643832970,"version":2,"begin":"/sbin/zramctl","end":"/sbin/zramctl","tail":"/testdir1/testdir1.txt","checksum":"9562865780448bda22ecac2d749c5a2d5657b106"} 2022-02-02 17:16:16,083 - wazuh_testing - DEBUG - 2022/02/02 21:16:12 wazuh-db[7352] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.054 ms. 2022-02-02 17:16:16,084 - wazuh_testing - DEBUG - 2022/02/02 21:16:13 wazuh-db[7352] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643832970,"version":2,"begin":"/testdir1/testdir1.txt","end":"/usr/bin/2to3-2.7","checksum":"2f2d6665e1250fa1378d8ea9603e5676d70d7443"} 2022-02-02 17:16:16,085 - wazuh_testing - DEBUG - 2022/02/02 21:16:13 wazuh-db[7352] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.081 ms. 2022-02-02 17:16:16,085 - wazuh_testing - DEBUG - 2022/02/02 21:16:13 wazuh-db[7352] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643832970,"version":2,"begin":"/testdir1/testdir1.txt","end":"/testdir1/testdir1.txt","tail":"/usr/bin/2to3-2.7","checksum":"b4cd0c210a9592c1544780e8abbc430a136afa6f"} 2022-02-02 17:16:16,086 - wazuh_testing - DEBUG - 2022/02/02 21:16:13 wazuh-db[7352] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643832970,"version":2,"begin":"/usr/bin/2to3-2.7","end":"/usr/bin/2to3-2.7","checksum":"4288e49f7e69481516baa382943d5a652f7e069b"} 2022-02-02 17:16:16,087 - wazuh_testing - DEBUG - 2022/02/02 21:16:13 wazuh-db[7352] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.075 ms. 2022-02-02 17:16:16,087 - wazuh_testing - DEBUG - 2022/02/02 21:16:13 wazuh-db[7352] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file save2 {"path":"/testdir1/testdir1.txt","timestamp":1643832969,"version":2,"attributes":{"type":"file","size":0,"perm":"rw-r--r--","uid":"0","gid":"0","user_name":"root","group_name":"root","inode":7239398,"mtime":1643832959,"hash_md5":"d41d8cd98f00b204e9800998ecf8427e","hash_sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","hash_sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","checksum":"858d7775dd7806aa1c08b6fb5be39e0568992159"}} 2022-02-02 17:16:16,088 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-manager and message: .*Agent 001 query: (.+) save2 2022-02-02 17:16:16,937 - wazuh_testing - DEBUG - Cleaning temporal files... 2022-02-02 17:16:16,938 - wazuh_testing - DEBUG - Checking results... 2022-02-02 17:16:16,939 - wazuh_testing - DEBUG - Received from wazuh-agent1 the expected message: 2022/02/02 21:16:10 wazuh-syscheckd[11338] run_check.c:82 at fim_send_sync_msg(): DEBUG: (6317): Sending integrity control message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1643832970,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"ecc96a38a16daddcaa2f7fa3dfcaa225104cfc22"}} 2022-02-02 17:16:16,940 - wazuh_testing - DEBUG - Received from wazuh-manager the expected message: 2022/02/02 21:16:13 wazuh-db[7352] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file save2 {"path":"/testdir1/testdir1.txt","timestamp":1643832969,"version":2,"attributes":{"type":"file","size":0,"perm":"rw-r--r--","uid":"0","gid":"0","user_name":"root","group_name":"root","inode":7239398,"mtime":1643832959,"hash_md5":"d41d8cd98f00b204e9800998ecf8427e","hash_sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","hash_sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","checksum":"858d7775dd7806aa1c08b6fb5be39e0568992159"}} 2022-02-02 17:16:44,275 - wazuh_testing - DEBUG - Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-02 17:16:44,278 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-02 17:16:44,279 - wazuh_testing - DEBUG - Starting file composer for wazuh-agent1 and path: /var/ossec/logs/ossec.log. Composite file in /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-agent1_ossec.log.tmp 2022-02-02 17:16:44,281 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-agent1 and message: .*Initializing FIM Integrity Synchronization check. (.+)$ 2022-02-02 17:16:46,284 - wazuh_testing - DEBUG - 2022/02/02 21:16:30 wazuh-logcollector: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:16:46,285 - wazuh_testing - DEBUG - 2022/02/02 21:16:30 wazuh-syscheckd[11338] sig_op.c:49 at HandleSIG(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:16:46,285 - wazuh_testing - DEBUG - 2022/02/02 21:16:30 wazuh-agentd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:16:46,285 - wazuh_testing - DEBUG - 2022/02/02 21:16:30 wazuh-execd: INFO: (1314): Shutdown received. Deleting responses. 2022-02-02 17:16:46,285 - wazuh_testing - DEBUG - 2022/02/02 21:16:30 wazuh-execd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:16:46,286 - wazuh_testing - DEBUG - 2022/02/02 21:16:36 wazuh-syscheckd[11760] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-02 17:16:46,286 - wazuh_testing - DEBUG - 2022/02/02 21:16:36 wazuh-syscheckd[11760] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-02 17:16:46,286 - wazuh_testing - DEBUG - 2022/02/02 21:16:36 wazuh-syscheckd[11760] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-02 17:16:46,286 - wazuh_testing - DEBUG - 2022/02/02 21:16:36 wazuh-syscheckd[11760] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-02 17:16:46,287 - wazuh_testing - DEBUG - 2022/02/02 21:16:36 wazuh-syscheckd[11760] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-02 17:16:46,287 - wazuh_testing - DEBUG - 2022/02/02 21:16:36 wazuh-syscheckd[11760] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-02 17:16:46,287 - wazuh_testing - DEBUG - 2022/02/02 21:16:36 wazuh-syscheckd[11760] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-02 17:16:46,288 - wazuh_testing - DEBUG - 2022/02/02 21:16:36 wazuh-syscheckd[11760] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ 2022-02-02 17:16:46,288 - wazuh_testing - DEBUG - 2022/02/02 21:16:36 wazuh-syscheckd[11760] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ OK? 2022-02-02 17:16:46,288 - wazuh_testing - DEBUG - 2022/02/02 21:16:36 wazuh-syscheckd[11760] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-02 17:16:46,289 - wazuh_testing - DEBUG - 2022/02/02 21:16:36 wazuh-syscheckd[11760] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-02 17:16:46,289 - wazuh_testing - DEBUG - 2022/02/02 21:16:36 wazuh-syscheckd[11760] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-02 17:16:46,289 - wazuh_testing - DEBUG - 2022/02/02 21:16:36 wazuh-syscheckd[11760] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-02 17:16:46,290 - wazuh_testing - DEBUG - 2022/02/02 21:16:36 wazuh-syscheckd[11760] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-02 17:16:46,290 - wazuh_testing - DEBUG - 2022/02/02 21:16:36 wazuh-syscheckd[11760] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-02 17:16:46,290 - wazuh_testing - DEBUG - 2022/02/02 21:16:36 wazuh-syscheckd[11760] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-02 17:16:46,291 - wazuh_testing - DEBUG - 2022/02/02 21:16:36 wazuh-syscheckd[11760] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-02 17:16:46,291 - wazuh_testing - DEBUG - 2022/02/02 21:16:36 wazuh-execd: INFO: Started (pid: 11773). 2022-02-02 17:16:46,291 - wazuh_testing - DEBUG - 2022/02/02 21:16:37 wazuh-agentd: INFO: (1410): Reading authentication keys file. 2022-02-02 17:16:46,291 - wazuh_testing - DEBUG - 2022/02/02 21:16:37 wazuh-agentd: INFO: Using notify time: 10 and max time to reconnect: 60 2022-02-02 17:16:46,292 - wazuh_testing - DEBUG - 2022/02/02 21:16:37 wazuh-agentd: INFO: Version detected -> Linux |wazuh-agent1 |5.13.0-27-generic |#29~20.04.1-Ubuntu SMP Fri Jan 14 00:32:30 UTC 2022 |x86_64 [Debian GNU/Linux|debian: 10 (buster)] - Wazuh v4.2.5 2022-02-02 17:16:46,292 - wazuh_testing - DEBUG - 2022/02/02 21:16:37 wazuh-agentd: INFO: Started (pid: 11784). 2022-02-02 17:16:46,293 - wazuh_testing - DEBUG - 2022/02/02 21:16:37 wazuh-agentd: INFO: Server IP Address: wazuh-manager/172.18.0.2 2022-02-02 17:16:46,293 - wazuh_testing - DEBUG - 2022/02/02 21:16:37 wazuh-agentd: INFO: Using AES as encryption method. 2022-02-02 17:16:46,293 - wazuh_testing - DEBUG - 2022/02/02 21:16:37 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.18.0.2:1514/tcp). 2022-02-02 17:16:46,293 - wazuh_testing - DEBUG - 2022/02/02 21:16:37 wazuh-agentd: INFO: (4102): Connected to the server (wazuh-manager/172.18.0.2:1514/tcp). 2022-02-02 17:16:46,293 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-02 17:16:46,293 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-02 17:16:46,294 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-02 17:16:46,294 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-02 17:16:46,294 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-02 17:16:46,294 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-02 17:16:46,294 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-02 17:16:46,295 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ 2022-02-02 17:16:46,295 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ OK? 2022-02-02 17:16:46,295 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-02 17:16:46,295 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-02 17:16:46,296 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-02 17:16:46,296 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-02 17:16:46,296 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-02 17:16:46,296 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-02 17:16:46,296 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-02 17:16:46,297 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-02 17:16:46,297 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 rootcheck[11796] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled. 2022-02-02 17:16:46,297 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:16:46,297 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] syscom.c:123 at syscom_main(): DEBUG: (6284): Local requests thread ready. 2022-02-02 17:16:46,298 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] mq_op.c:47 at StartMQ(): DEBUG: Connected succesfully to 'queue/sockets/queue' after 0 attempts 2022-02-02 17:16:46,298 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] mq_op.c:48 at StartMQ(): DEBUG: (unix_domain) Maximum send buffer set to: '212992'. 2022-02-02 17:16:46,298 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] main.c:185 at main(): INFO: Started (pid: 11798). 2022-02-02 17:16:46,298 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] main.c:193 at main(): INFO: (6003): Monitoring path: '/bin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:16:46,298 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] main.c:193 at main(): INFO: (6003): Monitoring path: '/boot', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:16:46,299 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] main.c:193 at main(): INFO: (6003): Monitoring path: '/etc', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:16:46,299 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] main.c:193 at main(): INFO: (6003): Monitoring path: '/sbin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:16:46,299 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir1', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:16:46,300 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir2', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | realtime'. 2022-02-02 17:16:46,300 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir3', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | whodata'. 2022-02-02 17:16:46,300 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/bin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:16:46,301 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/sbin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:16:46,301 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] main.c:215 at main(): DEBUG: (6357): Maximum disk quota size limit configured to '1048576 KB'. 2022-02-02 17:16:46,302 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mtab' 2022-02-02 17:16:46,302 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/hosts.deny' 2022-02-02 17:16:46,303 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mail/statistics' 2022-02-02 17:16:46,303 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random-seed' 2022-02-02 17:16:46,304 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random.seed' 2022-02-02 17:16:46,304 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/adjtime' 2022-02-02 17:16:46,305 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/httpd/logs' 2022-02-02 17:16:46,305 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/utmpx' 2022-02-02 17:16:46,305 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/wtmpx' 2022-02-02 17:16:46,305 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/cups/certs' 2022-02-02 17:16:46,305 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/dumpdates' 2022-02-02 17:16:46,306 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/svc/volatile' 2022-02-02 17:16:46,306 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/security' 2022-02-02 17:16:46,306 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/debug' 2022-02-02 17:16:46,306 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/dev/core' 2022-02-02 17:16:46,307 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '^/proc' 2022-02-02 17:16:46,307 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '.log$|.swp$' 2022-02-02 17:16:46,307 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] main.c:235 at main(): INFO: (6004): No diff for file: '/etc/ssl/private.key' 2022-02-02 17:16:46,307 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] main.c:245 at main(): INFO: (6016): Directory set for real time monitoring: '/testdir2'. 2022-02-02 17:16:46,308 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] syscheck_audit.c:243 at audit_init(): WARNING: (6924): Who-data engine cannot start because Auditd is not running. 2022-02-02 17:16:46,308 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] main.c:264 at main(): WARNING: (6913): Who-data engine could not start. Switching who-data to real-time. 2022-02-02 17:16:46,308 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] run_check.c:194 at start_daemon(): DEBUG: (6320): Setting process priority to: '10' 2022-02-02 17:16:46,309 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:16:46,309 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] run_check.c:229 at start_daemon(): INFO: (6000): Starting daemon... 2022-02-02 17:16:46,309 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] run_check.c:232 at start_daemon(): INFO: (6010): File integrity monitoring scan frequency: 20 seconds 2022-02-02 17:16:46,309 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-02 17:16:46,310 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1643832998}} 2022-02-02 17:16:46,310 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-02 17:16:46,310 - wazuh_testing - DEBUG - 2022/02/02 21:16:39 wazuh-syscheckd[11796] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-02 17:16:46,310 - wazuh_testing - DEBUG - 2022/02/02 21:16:39 wazuh-syscheckd[11796] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-02 17:16:46,311 - wazuh_testing - DEBUG - 2022/02/02 21:16:39 wazuh-syscheckd[11796] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-02 17:16:46,311 - wazuh_testing - DEBUG - 2022/02/02 21:16:39 wazuh-syscheckd[11796] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-02 17:16:46,311 - wazuh_testing - DEBUG - 2022/02/02 21:16:39 wazuh-syscheckd[11796] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-02 17:16:46,312 - wazuh_testing - DEBUG - 2022/02/02 21:16:39 wazuh-syscheckd[11796] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-02 17:16:46,313 - wazuh_testing - DEBUG - 2022/02/02 21:16:39 wazuh-syscheckd[11796] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1643832999}} 2022-02-02 17:16:46,313 - wazuh_testing - DEBUG - 2022/02/02 21:16:39 wazuh-syscheckd[11796] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.712 sec (0.711 clock sec) 2022-02-02 17:16:46,314 - wazuh_testing - DEBUG - 2022/02/02 21:16:39 wazuh-syscheckd[11796] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1621, path count: 1627 2022-02-02 17:16:46,314 - wazuh_testing - DEBUG - 2022/02/02 21:16:39 wazuh-syscheckd[11796] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:16:46,315 - wazuh_testing - DEBUG - 2022/02/02 21:16:39 wazuh-syscheckd[11796] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:16:46,315 - wazuh_testing - DEBUG - 2022/02/02 21:16:39 wazuh-syscheckd[11796] run_check.c:387 at fim_run_realtime(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-02 17:16:46,316 - wazuh_testing - DEBUG - 2022/02/02 21:16:39 wazuh-syscheckd[11796] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:16:46,317 - wazuh_testing - DEBUG - 2022/02/02 21:16:39 wazuh-syscheckd[11796] run_check.c:543 at log_realtime_status(): INFO: (6012): Real-time file integrity monitoring started. 2022-02-02 17:16:46,317 - wazuh_testing - DEBUG - 2022/02/02 21:16:39 wazuh-syscheckd[11796] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. 2022-02-02 17:16:46,319 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-agent1 and message: .*Initializing FIM Integrity Synchronization check. (.+)$ 2022-02-02 17:16:47,284 - wazuh_testing - DEBUG - Cleaning temporal files... 2022-02-02 17:16:47,285 - wazuh_testing - DEBUG - Checking results... 2022-02-02 17:16:47,287 - wazuh_testing - DEBUG - Received from wazuh-agent1 the expected message: 2022/02/02 21:16:39 wazuh-syscheckd[11796] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. -------------------------------Captured log call-------------------------------- DEBUG testinfra:base.py:277 RUN CommandResult(command=b"ansible --tree /tmp/tmpf83jvqr_ -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m command --args 'mkdir testdir1' wazuh-agent1", exit_status=0, stdout=b'wazuh-agent1 | CHANGED | rc=0 >>\n\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('command', 'mkdir testdir1', {'check': False, 'become': False}): {'changed': True, 'cmd': ['mkdir', 'testdir1'], 'delta': '0:00:00.688316', 'end': '2022-02-02 21:15:56.844813', 'msg': '', 'rc': 0, 'start': '2022-02-02 21:15:56.156497', 'stderr': '', 'stderr_lines': [], 'stdout': '', 'stdout_lines': []} DEBUG testinfra:base.py:277 RUN CommandResult(command=b"ansible --tree /tmp/tmpavjnxhip -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m command --args 'touch testdir1/testdir1.txt' wazuh-agent1", exit_status=0, stdout=b'wazuh-agent1 | CHANGED | rc=0 >>\n\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('command', 'touch testdir1/testdir1.txt', {'check': False, 'become': False}): {'changed': True, 'cmd': ['touch', 'testdir1/testdir1.txt'], 'delta': '0:00:00.762403', 'end': '2022-02-02 21:15:59.890502', 'msg': '', 'rc': 0, 'start': '2022-02-02 21:15:59.128099', 'stderr': '', 'stderr_lines': [], 'stdout': '', 'stdout_lines': []} DEBUG testinfra:base.py:277 RUN CommandResult(command=b"ansible --tree /tmp/tmpl6qyu5zc -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m service --args 'name=wazuh-agent state=restarted' wazuh-agent1", exit_status=0, stdout=b'wazuh-agent1 | CHANGED => {\n "changed": true,\n "name": "wazuh-agent",\n "state": "started"\n}\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('service', 'name=wazuh-agent state=restarted', {'check': False, 'become': False}): {'changed': True, 'name': 'wazuh-agent', 'state': 'started'} DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:1006 Cleaning temporal files... DEBUG wazuh_testing:monitoring.py:995 Checking results... DEBUG wazuh_testing:monitoring.py:1001 Received from wazuh-agent1 the expected message: 2022/02/02 21:16:10 wazuh-syscheckd[11338] run_check.c:82 at fim_send_sync_msg(): DEBUG: (6317): Sending integrity control message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1643832970,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"ecc96a38a16daddcaa2f7fa3dfcaa225104cfc22"}} DEBUG wazuh_testing:monitoring.py:1001 Received from wazuh-manager the expected message: 2022/02/02 21:16:13 wazuh-db[7352] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file save2 {"path":"/testdir1/testdir1.txt","timestamp":1643832969,"version":2,"attributes":{"type":"file","size":0,"perm":"rw-r--r--","uid":"0","gid":"0","user_name":"root","group_name":"root","inode":7239398,"mtime":1643832959,"hash_md5":"d41d8cd98f00b204e9800998ecf8427e","hash_sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","hash_sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","checksum":"858d7775dd7806aa1c08b6fb5be39e0568992159"}} DEBUG testinfra:base.py:277 RUN CommandResult(command=b'ansible --tree /tmp/tmp2x4ttjsl -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m copy --args \'dest=/var/ossec/logs/ossec.log content=\'"\'"\'\'"\'"\' force=yes\' wazuh-manager', exit_status=0, stdout=b'wazuh-manager | CHANGED => {\n "changed": true,\n "checksum": "da39a3ee5e6b4b0d3255bfef95601890afd80709",\n "dest": "/var/ossec/logs/ossec.log",\n "gid": 999,\n "group": "ossec",\n "md5sum": "d41d8cd98f00b204e9800998ecf8427e",\n "mode": "0660",\n "owner": "ossec",\n "size": 0,\n "src": "/root/.ansible/tmp/ansible-tmp-1643832977.95311-92226-135095146129091/source",\n "state": "file",\n "uid": 999\n}\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('copy', "dest=/var/ossec/logs/ossec.log content='' force=yes", {'check': False, 'become': False}): {'changed': True, 'checksum': 'da39a3ee5e6b4b0d3255bfef95601890afd80709', 'dest': '/var/ossec/logs/ossec.log', 'gid': 999, 'group': 'ossec', 'md5sum': 'd41d8cd98f00b204e9800998ecf8427e', 'mode': '0660', 'owner': 'ossec', 'size': 0, 'src': '/root/.ansible/tmp/ansible-tmp-1643832977.95311-92226-135095146129091/source', 'state': 'file', 'uid': 999} DEBUG testinfra:base.py:277 RUN CommandResult(command=b'ansible --tree /tmp/tmpjsetf1e5 -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m copy --args \'dest=/var/ossec/logs/ossec.log content=\'"\'"\'\'"\'"\' force=yes\' wazuh-agent1', exit_status=0, stdout=b'wazuh-agent1 | CHANGED => {\n "changed": true,\n "checksum": "da39a3ee5e6b4b0d3255bfef95601890afd80709",\n "dest": "/var/ossec/logs/ossec.log",\n "gid": 999,\n "group": "ossec",\n "md5sum": "d41d8cd98f00b204e9800998ecf8427e",\n "mode": "0660",\n "owner": "ossec",\n "size": 0,\n "src": "/root/.ansible/tmp/ansible-tmp-1643832983.237387-92629-260851979763522/source",\n "state": "file",\n "uid": 999\n}\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('copy', "dest=/var/ossec/logs/ossec.log content='' force=yes", {'check': False, 'become': False}): {'changed': True, 'checksum': 'da39a3ee5e6b4b0d3255bfef95601890afd80709', 'dest': '/var/ossec/logs/ossec.log', 'gid': 999, 'group': 'ossec', 'md5sum': 'd41d8cd98f00b204e9800998ecf8427e', 'mode': '0660', 'owner': 'ossec', 'size': 0, 'src': '/root/.ansible/tmp/ansible-tmp-1643832983.237387-92629-260851979763522/source', 'state': 'file', 'uid': 999} DEBUG testinfra:base.py:277 RUN CommandResult(command=b"ansible --tree /tmp/tmp6ttlsylt -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m command --args '/var/ossec/bin/wazuh-control stop' wazuh-agent1", exit_status=0, stdout=b'wazuh-agent1 | CHANGED | rc=0 >>\nKilling wazuh-modulesd... \nKilling wazuh-logcollector... \nKilling wazuh-syscheckd... \nKilling wazuh-agentd... \nKilling wazuh-execd... \nWazuh v4.2.5 Stopped\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('command', '/var/ossec/bin/wazuh-control stop', {'check': False, 'become': False}): {'changed': True, 'cmd': ['/var/ossec/bin/wazuh-control', 'stop'], 'delta': '0:00:01.504559', 'end': '2022-02-02 21:16:30.832705', 'msg': '', 'rc': 0, 'start': '2022-02-02 21:16:29.328146', 'stderr': '', 'stderr_lines': [], 'stdout': 'Killing wazuh-modulesd... \n' 'Killing wazuh-logcollector... \n' 'Killing wazuh-syscheckd... \n' 'Killing wazuh-agentd... \n' 'Killing wazuh-execd... \n' 'Wazuh v4.2.5 Stopped', 'stdout_lines': ['Killing wazuh-modulesd... ', 'Killing wazuh-logcollector... ', 'Killing wazuh-syscheckd... ', 'Killing wazuh-agentd... ', 'Killing wazuh-execd... ', 'Wazuh v4.2.5 Stopped']} DEBUG testinfra:base.py:277 RUN CommandResult(command=b"ansible --tree /tmp/tmp95ecl46c -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m command --args 'touch testdir1/testdir1.txt' wazuh-agent1", exit_status=0, stdout=b'wazuh-agent1 | CHANGED | rc=0 >>\n\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('command', 'touch testdir1/testdir1.txt', {'check': False, 'become': False}): {'changed': True, 'cmd': ['touch', 'testdir1/testdir1.txt'], 'delta': '0:00:00.864405', 'end': '2022-02-02 21:16:33.755129', 'msg': '', 'rc': 0, 'start': '2022-02-02 21:16:32.890724', 'stderr': '', 'stderr_lines': [], 'stdout': '', 'stdout_lines': []} DEBUG testinfra:base.py:277 RUN CommandResult(command=b"ansible --tree /tmp/tmp1los8roq -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m command --args '/var/ossec/bin/wazuh-control start' wazuh-agent1", exit_status=0, stdout=b"wazuh-agent1 | CHANGED | rc=0 >>\nStarting Wazuh v4.2.5...\nStarted wazuh-execd...\nStarted wazuh-agentd...\nStarted wazuh-syscheckd...\nStarted wazuh-logcollector...\nStarted wazuh-modulesd...\nCompleted.2022/02/02 21:16:36 wazuh-syscheckd[11760] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized\n2022/02/02 21:16:36 wazuh-syscheckd[11760] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf'\n2022/02/02 21:16:36 wazuh-syscheckd[11760] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)].\n2022/02/02 21:16:36 wazuh-syscheckd[11760] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)].\n2022/02/02 21:16:36 wazuh-syscheckd[11760] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc\n2022/02/02 21:16:36 wazuh-syscheckd[11760] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK?\n2022/02/02 21:16:36 wazuh-syscheckd[11760] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0\n2022/02/02 21:16:36 wazuh-syscheckd[11760] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$\n2022/02/02 21:16:36 wazuh-syscheckd[11760] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ OK?\n2022/02/02 21:16:36 wazuh-syscheckd[11760] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1\n2022/02/02 21:16:36 wazuh-syscheckd[11760] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf]\n2022/02/02 21:16:36 wazuh-syscheckd[11760] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile().\n2022/02/02 21:16:36 wazuh-syscheckd[11760] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10]\n2022/02/02 21:16:36 wazuh-syscheckd[11760] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes.\n2022/02/02 21:16:36 wazuh-syscheckd[11760] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile().\n2022/02/02 21:16:36 wazuh-syscheckd[11760] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10]\n2022/02/02 21:16:36 wazuh-syscheckd[11760] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes.\n2022/02/02 21:16:38 wazuh-syscheckd[11796] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized\n2022/02/02 21:16:38 wazuh-syscheckd[11796] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf'\n2022/02/02 21:16:38 wazuh-syscheckd[11796] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)].\n2022/02/02 21:16:38 wazuh-syscheckd[11796] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)].\n2022/02/02 21:16:38 wazuh-syscheckd[11796] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc\n2022/02/02 21:16:38 wazuh-syscheckd[11796] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK?\n2022/02/02 21:16:38 wazuh-syscheckd[11796] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0\n2022/02/02 21:16:38 wazuh-syscheckd[11796] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$\n2022/02/02 21:16:38 wazuh-syscheckd[11796] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ OK?\n2022/02/02 21:16:38 wazuh-syscheckd[11796] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1\n2022/02/02 21:16:38 wazuh-syscheckd[11796] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf]\n2022/02/02 21:16:38 wazuh-syscheckd[11796] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile().\n2022/02/02 21:16:38 wazuh-syscheckd[11796] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10]\n2022/02/02 21:16:38 wazuh-syscheckd[11796] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes.\n2022/02/02 21:16:38 wazuh-syscheckd[11796] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile().\n2022/02/02 21:16:38 wazuh-syscheckd[11796] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10]\n2022/02/02 21:16:38 wazuh-syscheckd[11796] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes.\n2022/02/02 21:16:38 rootcheck[11796] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled.\n", stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('command', '/var/ossec/bin/wazuh-control start', {'check': False, 'become': False}): {'changed': True, 'cmd': ['/var/ossec/bin/wazuh-control', 'start'], 'delta': '0:00:08.080789', 'end': '2022-02-02 21:16:44.009373', 'msg': '', 'rc': 0, 'start': '2022-02-02 21:16:35.928584', 'stderr': '2022/02/02 21:16:36 wazuh-syscheckd[11760] debug_op.c:70 at ' '_log(): DEBUG: Logging module auto-initialized\n' '2022/02/02 21:16:36 wazuh-syscheckd[11760] config.c:87 at ' 'Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: ' "'etc/ossec.conf'\n" '2022/02/02 21:16:36 wazuh-syscheckd[11760] syscheck-config.c:1218 ' 'at read_attr(): DEBUG: Could not check the real path of ' "'/testdir2' due to [(2)-(No such file or directory)].\n" '2022/02/02 21:16:36 wazuh-syscheckd[11760] syscheck-config.c:1218 ' 'at read_attr(): DEBUG: Could not check the real path of ' "'/testdir3' due to [(2)-(No such file or directory)].\n" '2022/02/02 21:16:36 wazuh-syscheckd[11760] syscheck-config.c:2520 ' 'at process_option_regex(): DEBUG: Found ignore regex node ^/proc\n' '2022/02/02 21:16:36 wazuh-syscheckd[11760] syscheck-config.c:2527 ' 'at process_option_regex(): DEBUG: Found ignore regex node ^/proc ' 'OK?\n' '2022/02/02 21:16:36 wazuh-syscheckd[11760] syscheck-config.c:2528 ' 'at process_option_regex(): DEBUG: Found ignore regex size 0\n' '2022/02/02 21:16:36 wazuh-syscheckd[11760] syscheck-config.c:2520 ' 'at process_option_regex(): DEBUG: Found ignore regex node ' '.log$|.swp$\n' '2022/02/02 21:16:36 wazuh-syscheckd[11760] syscheck-config.c:2527 ' 'at process_option_regex(): DEBUG: Found ignore regex node ' '.log$|.swp$ OK?\n' '2022/02/02 21:16:36 wazuh-syscheckd[11760] syscheck-config.c:2528 ' 'at process_option_regex(): DEBUG: Found ignore regex size 1\n' '2022/02/02 21:16:36 wazuh-syscheckd[11760] config.c:95 at ' 'Read_Syscheck_Config(): DEBUG: (6208): Reading Client ' 'Configuration [etc/ossec.conf]\n' '2022/02/02 21:16:36 wazuh-syscheckd[11760] agent_op.c:208 at ' 'os_read_agent_profile(): DEBUG: Calling os_read_agent_profile().\n' '2022/02/02 21:16:36 wazuh-syscheckd[11760] agent_op.c:227 at ' 'os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, ' 'debian10]\n' '2022/02/02 21:16:36 wazuh-syscheckd[11760] config.c:375 at ' 'ReadConfig(): DEBUG: agent_config element does not have any ' 'attributes.\n' '2022/02/02 21:16:36 wazuh-syscheckd[11760] agent_op.c:208 at ' 'os_read_agent_profile(): DEBUG: Calling os_read_agent_profile().\n' '2022/02/02 21:16:36 wazuh-syscheckd[11760] agent_op.c:227 at ' 'os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, ' 'debian10]\n' '2022/02/02 21:16:36 wazuh-syscheckd[11760] config.c:375 at ' 'ReadConfig(): DEBUG: agent_config element does not have any ' 'attributes.\n' '2022/02/02 21:16:38 wazuh-syscheckd[11796] debug_op.c:70 at ' '_log(): DEBUG: Logging module auto-initialized\n' '2022/02/02 21:16:38 wazuh-syscheckd[11796] config.c:87 at ' 'Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: ' "'etc/ossec.conf'\n" '2022/02/02 21:16:38 wazuh-syscheckd[11796] syscheck-config.c:1218 ' 'at read_attr(): DEBUG: Could not check the real path of ' "'/testdir2' due to [(2)-(No such file or directory)].\n" '2022/02/02 21:16:38 wazuh-syscheckd[11796] syscheck-config.c:1218 ' 'at read_attr(): DEBUG: Could not check the real path of ' "'/testdir3' due to [(2)-(No such file or directory)].\n" '2022/02/02 21:16:38 wazuh-syscheckd[11796] syscheck-config.c:2520 ' 'at process_option_regex(): DEBUG: Found ignore regex node ^/proc\n' '2022/02/02 21:16:38 wazuh-syscheckd[11796] syscheck-config.c:2527 ' 'at process_option_regex(): DEBUG: Found ignore regex node ^/proc ' 'OK?\n' '2022/02/02 21:16:38 wazuh-syscheckd[11796] syscheck-config.c:2528 ' 'at process_option_regex(): DEBUG: Found ignore regex size 0\n' '2022/02/02 21:16:38 wazuh-syscheckd[11796] syscheck-config.c:2520 ' 'at process_option_regex(): DEBUG: Found ignore regex node ' '.log$|.swp$\n' '2022/02/02 21:16:38 wazuh-syscheckd[11796] syscheck-config.c:2527 ' 'at process_option_regex(): DEBUG: Found ignore regex node ' '.log$|.swp$ OK?\n' '2022/02/02 21:16:38 wazuh-syscheckd[11796] syscheck-config.c:2528 ' 'at process_option_regex(): DEBUG: Found ignore regex size 1\n' '2022/02/02 21:16:38 wazuh-syscheckd[11796] config.c:95 at ' 'Read_Syscheck_Config(): DEBUG: (6208): Reading Client ' 'Configuration [etc/ossec.conf]\n' '2022/02/02 21:16:38 wazuh-syscheckd[11796] agent_op.c:208 at ' 'os_read_agent_profile(): DEBUG: Calling os_read_agent_profile().\n' '2022/02/02 21:16:38 wazuh-syscheckd[11796] agent_op.c:227 at ' 'os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, ' 'debian10]\n' '2022/02/02 21:16:38 wazuh-syscheckd[11796] config.c:375 at ' 'ReadConfig(): DEBUG: agent_config element does not have any ' 'attributes.\n' '2022/02/02 21:16:38 wazuh-syscheckd[11796] agent_op.c:208 at ' 'os_read_agent_profile(): DEBUG: Calling os_read_agent_profile().\n' '2022/02/02 21:16:38 wazuh-syscheckd[11796] agent_op.c:227 at ' 'os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, ' 'debian10]\n' '2022/02/02 21:16:38 wazuh-syscheckd[11796] config.c:375 at ' 'ReadConfig(): DEBUG: agent_config element does not have any ' 'attributes.\n' '2022/02/02 21:16:38 rootcheck[11796] rootcheck.c:202 at ' 'rootcheck_init(): INFO: Rootcheck disabled.', 'stderr_lines': ['2022/02/02 21:16:36 wazuh-syscheckd[11760] debug_op.c:70 at ' '_log(): DEBUG: Logging module auto-initialized', '2022/02/02 21:16:36 wazuh-syscheckd[11760] config.c:87 at ' 'Read_Syscheck_Config(): DEBUG: (6287): Reading ' "configuration file: 'etc/ossec.conf'", '2022/02/02 21:16:36 wazuh-syscheckd[11760] ' 'syscheck-config.c:1218 at read_attr(): DEBUG: Could not ' "check the real path of '/testdir2' due to [(2)-(No such " 'file or directory)].', '2022/02/02 21:16:36 wazuh-syscheckd[11760] ' 'syscheck-config.c:1218 at read_attr(): DEBUG: Could not ' "check the real path of '/testdir3' due to [(2)-(No such " 'file or directory)].', '2022/02/02 21:16:36 wazuh-syscheckd[11760] ' 'syscheck-config.c:2520 at process_option_regex(): DEBUG: ' 'Found ignore regex node ^/proc', '2022/02/02 21:16:36 wazuh-syscheckd[11760] ' 'syscheck-config.c:2527 at process_option_regex(): DEBUG: ' 'Found ignore regex node ^/proc OK?', '2022/02/02 21:16:36 wazuh-syscheckd[11760] ' 'syscheck-config.c:2528 at process_option_regex(): DEBUG: ' 'Found ignore regex size 0', '2022/02/02 21:16:36 wazuh-syscheckd[11760] ' 'syscheck-config.c:2520 at process_option_regex(): DEBUG: ' 'Found ignore regex node .log$|.swp$', '2022/02/02 21:16:36 wazuh-syscheckd[11760] ' 'syscheck-config.c:2527 at process_option_regex(): DEBUG: ' 'Found ignore regex node .log$|.swp$ OK?', '2022/02/02 21:16:36 wazuh-syscheckd[11760] ' 'syscheck-config.c:2528 at process_option_regex(): DEBUG: ' 'Found ignore regex size 1', '2022/02/02 21:16:36 wazuh-syscheckd[11760] config.c:95 at ' 'Read_Syscheck_Config(): DEBUG: (6208): Reading Client ' 'Configuration [etc/ossec.conf]', '2022/02/02 21:16:36 wazuh-syscheckd[11760] agent_op.c:208 ' 'at os_read_agent_profile(): DEBUG: Calling ' 'os_read_agent_profile().', '2022/02/02 21:16:36 wazuh-syscheckd[11760] agent_op.c:227 ' 'at os_read_agent_profile(): DEBUG: os_read_agent_profile() ' '= [debian, debian10]', '2022/02/02 21:16:36 wazuh-syscheckd[11760] config.c:375 at ' 'ReadConfig(): DEBUG: agent_config element does not have any ' 'attributes.', '2022/02/02 21:16:36 wazuh-syscheckd[11760] agent_op.c:208 ' 'at os_read_agent_profile(): DEBUG: Calling ' 'os_read_agent_profile().', '2022/02/02 21:16:36 wazuh-syscheckd[11760] agent_op.c:227 ' 'at os_read_agent_profile(): DEBUG: os_read_agent_profile() ' '= [debian, debian10]', '2022/02/02 21:16:36 wazuh-syscheckd[11760] config.c:375 at ' 'ReadConfig(): DEBUG: agent_config element does not have any ' 'attributes.', '2022/02/02 21:16:38 wazuh-syscheckd[11796] debug_op.c:70 at ' '_log(): DEBUG: Logging module auto-initialized', '2022/02/02 21:16:38 wazuh-syscheckd[11796] config.c:87 at ' 'Read_Syscheck_Config(): DEBUG: (6287): Reading ' "configuration file: 'etc/ossec.conf'", '2022/02/02 21:16:38 wazuh-syscheckd[11796] ' 'syscheck-config.c:1218 at read_attr(): DEBUG: Could not ' "check the real path of '/testdir2' due to [(2)-(No such " 'file or directory)].', '2022/02/02 21:16:38 wazuh-syscheckd[11796] ' 'syscheck-config.c:1218 at read_attr(): DEBUG: Could not ' "check the real path of '/testdir3' due to [(2)-(No such " 'file or directory)].', '2022/02/02 21:16:38 wazuh-syscheckd[11796] ' 'syscheck-config.c:2520 at process_option_regex(): DEBUG: ' 'Found ignore regex node ^/proc', '2022/02/02 21:16:38 wazuh-syscheckd[11796] ' 'syscheck-config.c:2527 at process_option_regex(): DEBUG: ' 'Found ignore regex node ^/proc OK?', '2022/02/02 21:16:38 wazuh-syscheckd[11796] ' 'syscheck-config.c:2528 at process_option_regex(): DEBUG: ' 'Found ignore regex size 0', '2022/02/02 21:16:38 wazuh-syscheckd[11796] ' 'syscheck-config.c:2520 at process_option_regex(): DEBUG: ' 'Found ignore regex node .log$|.swp$', '2022/02/02 21:16:38 wazuh-syscheckd[11796] ' 'syscheck-config.c:2527 at process_option_regex(): DEBUG: ' 'Found ignore regex node .log$|.swp$ OK?', '2022/02/02 21:16:38 wazuh-syscheckd[11796] ' 'syscheck-config.c:2528 at process_option_regex(): DEBUG: ' 'Found ignore regex size 1', '2022/02/02 21:16:38 wazuh-syscheckd[11796] config.c:95 at ' 'Read_Syscheck_Config(): DEBUG: (6208): Reading Client ' 'Configuration [etc/ossec.conf]', '2022/02/02 21:16:38 wazuh-syscheckd[11796] agent_op.c:208 ' 'at os_read_agent_profile(): DEBUG: Calling ' 'os_read_agent_profile().', '2022/02/02 21:16:38 wazuh-syscheckd[11796] agent_op.c:227 ' 'at os_read_agent_profile(): DEBUG: os_read_agent_profile() ' '= [debian, debian10]', '2022/02/02 21:16:38 wazuh-syscheckd[11796] config.c:375 at ' 'ReadConfig(): DEBUG: agent_config element does not have any ' 'attributes.', '2022/02/02 21:16:38 wazuh-syscheckd[11796] agent_op.c:208 ' 'at os_read_agent_profile(): DEBUG: Calling ' 'os_read_agent_profile().', '2022/02/02 21:16:38 wazuh-syscheckd[11796] agent_op.c:227 ' 'at os_read_agent_profile(): DEBUG: os_read_agent_profile() ' '= [debian, debian10]', '2022/02/02 21:16:38 wazuh-syscheckd[11796] config.c:375 at ' 'ReadConfig(): DEBUG: agent_config element does not have any ' 'attributes.', '2022/02/02 21:16:38 rootcheck[11796] rootcheck.c:202 at ' 'rootcheck_init(): INFO: Rootcheck disabled.'], 'stdout': 'Starting Wazuh v4.2.5...\n' 'Started wazuh-execd...\n' 'Started wazuh-agentd...\n' 'Started wazuh-syscheckd...\n' 'Started wazuh-logcollector...\n' 'Started wazuh-modulesd...\n' 'Completed.', 'stdout_lines': ['Starting Wazuh v4.2.5...', 'Started wazuh-execd...', 'Started wazuh-agentd...', 'Started wazuh-syscheckd...', 'Started wazuh-logcollector...', 'Started wazuh-modulesd...', 'Completed.']} DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:1006 Cleaning temporal files... DEBUG wazuh_testing:monitoring.py:995 Checking results... DEBUG wazuh_testing:monitoring.py:1001 Received from wazuh-agent1 the expected message: 2022/02/02 21:16:39 wazuh-syscheckd[11796] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. DEBUG testinfra:base.py:277 RUN CommandResult(command=b"ansible --tree /tmp/tmpi2vazyx8 -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m command --args 'rm -rf testdir1' wazuh-agent1", exit_status=0, stdout=b'wazuh-agent1 | CHANGED | rc=0 >>\n\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('command', 'rm -rf testdir1', {'check': False, 'become': False}): {'changed': True, 'cmd': ['rm', '-rf', 'testdir1'], 'delta': '0:00:01.854556', 'end': '2022-02-02 21:16:51.160417', 'msg': '', 'rc': 0, 'start': '2022-02-02 21:16:49.305861', 'stderr': '', 'stderr_lines': [], 'stdout': '', 'stdout_lines': []} | |||
| Passed | test_synchronization.py::test_Synchronization_create_file_agent_stopped[testdir1-add-wazuh-manager] | 77.04 | |
|
------------------------------Captured stderr call------------------------------ 2022-02-02 17:17:11,856 - wazuh_testing - DEBUG - Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-02 17:17:11,857 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-02 17:17:11,859 - wazuh_testing - DEBUG - Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-02 17:17:11,859 - wazuh_testing - DEBUG - Starting file composer for wazuh-agent1 and path: /var/ossec/logs/ossec.log. Composite file in /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-agent1_ossec.log.tmp 2022-02-02 17:17:11,860 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-02 17:17:11,862 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-agent1 and message: .*Sending integrity control message: (.+)$ 2022-02-02 17:17:11,862 - wazuh_testing - DEBUG - Starting file composer for wazuh-manager and path: /var/ossec/logs/ossec.log. Composite file in /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-manager_ossec.log.tmp 2022-02-02 17:17:11,865 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-manager and message: .*Agent 001 query: (.+) save2 2022-02-02 17:17:13,865 - wazuh_testing - DEBUG - 2022/02/02 21:16:30 wazuh-logcollector: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:17:13,865 - wazuh_testing - DEBUG - 2022/02/02 21:16:30 wazuh-syscheckd[11338] sig_op.c:49 at HandleSIG(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:17:13,866 - wazuh_testing - DEBUG - 2022/02/02 21:16:30 wazuh-agentd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:17:13,866 - wazuh_testing - DEBUG - 2022/02/02 21:16:30 wazuh-execd: INFO: (1314): Shutdown received. Deleting responses. 2022-02-02 17:17:13,867 - wazuh_testing - DEBUG - 2022/02/02 21:16:30 wazuh-execd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:17:13,867 - wazuh_testing - DEBUG - 2022/02/02 21:16:36 wazuh-syscheckd[11760] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-02 17:17:13,867 - wazuh_testing - DEBUG - 2022/02/02 21:16:36 wazuh-syscheckd[11760] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-02 17:17:13,868 - wazuh_testing - DEBUG - 2022/02/02 21:16:24 wazuh-db[7352] wdb.c:918 at wdb_commit_old(): DEBUG: Agent '001' database commited. Time: 3.533 ms. 2022-02-02 17:17:13,868 - wazuh_testing - DEBUG - 2022/02/02 21:16:36 wazuh-syscheckd[11760] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-02 17:17:13,868 - wazuh_testing - DEBUG - 2022/02/02 21:16:36 wazuh-syscheckd[11760] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-02 17:17:13,869 - wazuh_testing - DEBUG - 2022/02/02 21:16:36 wazuh-syscheckd[11760] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-02 17:17:13,869 - wazuh_testing - DEBUG - 2022/02/02 21:16:28 wazuh-db[7352] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.18.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.18.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.13.0-27-generic |#29~20.04.1-Ubuntu SMP Fri Jan 14 00:32:30 UTC 2022 |x86_64","os_arch":"x86_64"} 2022-02-02 17:17:13,869 - wazuh_testing - DEBUG - 2022/02/02 21:16:36 wazuh-syscheckd[11760] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-02 17:17:13,869 - wazuh_testing - DEBUG - 2022/02/02 21:16:28 wazuh-db[7352] wdb.c:918 at wdb_commit_old(): DEBUG: Agent 'global' database commited. Time: 18.943 ms. 2022-02-02 17:17:13,869 - wazuh_testing - DEBUG - 2022/02/02 21:16:30 wazuh-db[7352] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-connection-status {"id":1,"connection_status":"disconnected","sync_status":"synced"} 2022-02-02 17:17:13,869 - wazuh_testing - DEBUG - 2022/02/02 21:16:36 wazuh-syscheckd[11760] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-02 17:17:13,869 - wazuh_testing - DEBUG - 2022/02/02 21:16:30 wazuh-db[7352] main.c:290 at run_dealer(): DEBUG: New client connected (40). 2022-02-02 17:17:13,870 - wazuh_testing - DEBUG - 2022/02/02 21:16:30 wazuh-db[7352] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: get-labels 1 2022-02-02 17:17:13,870 - wazuh_testing - DEBUG - 2022/02/02 21:16:36 wazuh-syscheckd[11760] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ 2022-02-02 17:17:13,870 - wazuh_testing - DEBUG - 2022/02/02 21:16:37 wazuh-db[7352] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-keepalive {"id":1,"connection_status":"pending","sync_status":"synced"} 2022-02-02 17:17:13,870 - wazuh_testing - DEBUG - 2022/02/02 21:16:36 wazuh-syscheckd[11760] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ OK? 2022-02-02 17:17:13,870 - wazuh_testing - DEBUG - 2022/02/02 21:16:36 wazuh-syscheckd[11760] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-02 17:17:13,870 - wazuh_testing - DEBUG - 2022/02/02 21:16:36 wazuh-syscheckd[11760] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-02 17:17:13,871 - wazuh_testing - DEBUG - 2022/02/02 21:16:41 wazuh-db[7352] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.18.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.18.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.13.0-27-generic |#29~20.04.1-Ubuntu SMP Fri Jan 14 00:32:30 UTC 2022 |x86_64","os_arch":"x86_64"} 2022-02-02 17:17:13,871 - wazuh_testing - DEBUG - 2022/02/02 21:16:41 wazuh-db[7352] main.c:290 at run_dealer(): DEBUG: New client connected (43). 2022-02-02 17:17:13,871 - wazuh_testing - DEBUG - 2022/02/02 21:16:36 wazuh-syscheckd[11760] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-02 17:17:13,871 - wazuh_testing - DEBUG - 2022/02/02 21:16:41 wazuh-db[7352] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1643832998 2022-02-02 17:17:13,871 - wazuh_testing - DEBUG - 2022/02/02 21:16:36 wazuh-syscheckd[11760] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-02 17:17:13,871 - wazuh_testing - DEBUG - 2022/02/02 21:16:41 wazuh-db[7352] main.c:290 at run_dealer(): DEBUG: New client connected (42). 2022-02-02 17:17:13,871 - wazuh_testing - DEBUG - 2022/02/02 21:16:36 wazuh-syscheckd[11760] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-02 17:17:13,872 - wazuh_testing - DEBUG - 2022/02/02 21:16:41 wazuh-db[7352] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update end_scan 1643832999 2022-02-02 17:17:13,872 - wazuh_testing - DEBUG - 2022/02/02 21:16:36 wazuh-syscheckd[11760] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-02 17:17:13,872 - wazuh_testing - DEBUG - 2022/02/02 21:16:41 wazuh-db[7352] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_global {"id":1643832999,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"694e919f48dc3aa8b6cc52524822734575048636"} 2022-02-02 17:17:13,872 - wazuh_testing - DEBUG - 2022/02/02 21:16:36 wazuh-syscheckd[11760] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-02 17:17:13,872 - wazuh_testing - DEBUG - 2022/02/02 21:16:41 wazuh-db[7352] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 2.226 ms. 2022-02-02 17:17:13,873 - wazuh_testing - DEBUG - 2022/02/02 21:16:36 wazuh-syscheckd[11760] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-02 17:17:13,873 - wazuh_testing - DEBUG - 2022/02/02 21:16:41 wazuh-db[7352] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643832999,"version":2,"begin":"/bin/bash","end":"/sbin/chcpu","tail":"/sbin/ctrlaltdel","checksum":"2678c972016eb9b2978d2d495f53f99563497651"} 2022-02-02 17:17:13,873 - wazuh_testing - DEBUG - 2022/02/02 21:16:36 wazuh-execd: INFO: Started (pid: 11773). 2022-02-02 17:17:13,873 - wazuh_testing - DEBUG - 2022/02/02 21:16:37 wazuh-agentd: INFO: (1410): Reading authentication keys file. 2022-02-02 17:17:13,873 - wazuh_testing - DEBUG - 2022/02/02 21:16:41 wazuh-db[7352] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643832999,"version":2,"begin":"/sbin/ctrlaltdel","end":"/usr/sbin/zic","checksum":"b5ad755c38d1a2c658bf8ab4d2fb75ac2d7d72e3"} 2022-02-02 17:17:13,873 - wazuh_testing - DEBUG - 2022/02/02 21:16:37 wazuh-agentd: INFO: Using notify time: 10 and max time to reconnect: 60 2022-02-02 17:17:13,874 - wazuh_testing - DEBUG - 2022/02/02 21:16:41 wazuh-db[7352] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 1.174 ms. 2022-02-02 17:17:13,874 - wazuh_testing - DEBUG - 2022/02/02 21:16:41 wazuh-db[7352] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 1.076 ms. 2022-02-02 17:17:13,874 - wazuh_testing - DEBUG - 2022/02/02 21:16:37 wazuh-agentd: INFO: Version detected -> Linux |wazuh-agent1 |5.13.0-27-generic |#29~20.04.1-Ubuntu SMP Fri Jan 14 00:32:30 UTC 2022 |x86_64 [Debian GNU/Linux|debian: 10 (buster)] - Wazuh v4.2.5 2022-02-02 17:17:13,874 - wazuh_testing - DEBUG - 2022/02/02 21:16:37 wazuh-agentd: INFO: Started (pid: 11784). 2022-02-02 17:17:13,874 - wazuh_testing - DEBUG - 2022/02/02 21:16:41 wazuh-db[7352] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643832999,"version":2,"begin":"/sbin/ctrlaltdel","end":"/usr/bin/pdb","tail":"/usr/bin/pdb2","checksum":"f86e0432b9d919654b0d5fb77bc4e60c1221d3c0"} 2022-02-02 17:17:13,875 - wazuh_testing - DEBUG - 2022/02/02 21:16:37 wazuh-agentd: INFO: Server IP Address: wazuh-manager/172.18.0.2 2022-02-02 17:17:13,875 - wazuh_testing - DEBUG - 2022/02/02 21:16:37 wazuh-agentd: INFO: Using AES as encryption method. 2022-02-02 17:17:13,875 - wazuh_testing - DEBUG - 2022/02/02 21:16:41 wazuh-db[7352] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643832999,"version":2,"begin":"/usr/bin/pdb2","end":"/usr/sbin/zic","checksum":"f28534dbcbabe145177a8e0c707d9da341991c1f"} 2022-02-02 17:17:13,875 - wazuh_testing - DEBUG - 2022/02/02 21:16:37 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.18.0.2:1514/tcp). 2022-02-02 17:17:13,875 - wazuh_testing - DEBUG - 2022/02/02 21:16:41 wazuh-db[7352] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.523 ms. 2022-02-02 17:17:13,876 - wazuh_testing - DEBUG - 2022/02/02 21:16:41 wazuh-db[7352] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.819 ms. 2022-02-02 17:17:13,876 - wazuh_testing - DEBUG - 2022/02/02 21:16:37 wazuh-agentd: INFO: (4102): Connected to the server (wazuh-manager/172.18.0.2:1514/tcp). 2022-02-02 17:17:13,876 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-02 17:17:13,876 - wazuh_testing - DEBUG - 2022/02/02 21:16:41 wazuh-db[7352] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643832999,"version":2,"begin":"/sbin/ctrlaltdel","end":"/usr/bin/dpkg-divert","tail":"/usr/bin/dpkg-genbuildinfo","checksum":"b9b373666a063e8f289084fcf6cf002b76450e12"} 2022-02-02 17:17:13,876 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-02 17:17:13,876 - wazuh_testing - DEBUG - 2022/02/02 21:16:41 wazuh-db[7352] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.262 ms. 2022-02-02 17:17:13,877 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-02 17:17:13,877 - wazuh_testing - DEBUG - 2022/02/02 21:16:41 wazuh-db[7352] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643832999,"version":2,"begin":"/usr/bin/dpkg-genbuildinfo","end":"/usr/bin/pdb","checksum":"449176f3ac058628fcde8cdfbd7a7d029ac13e05"} 2022-02-02 17:17:13,877 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-02 17:17:13,877 - wazuh_testing - DEBUG - 2022/02/02 21:16:41 wazuh-db[7352] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.300 ms. 2022-02-02 17:17:13,878 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-02 17:17:13,878 - wazuh_testing - DEBUG - 2022/02/02 21:16:42 wazuh-db[7352] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643832999,"version":2,"begin":"/sbin/ctrlaltdel","end":"/usr/bin/apt-extracttemplates","tail":"/usr/bin/apt-ftparchive","checksum":"781444be941cce6b2b8f24d28f05b74732fcf138"} 2022-02-02 17:17:13,878 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-02 17:17:13,878 - wazuh_testing - DEBUG - 2022/02/02 21:16:42 wazuh-db[7352] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643832999,"version":2,"begin":"/usr/bin/apt-ftparchive","end":"/usr/bin/dpkg-divert","checksum":"84aaf018d588e1d99c714364b63c94e1d4eb4bf2"} 2022-02-02 17:17:13,878 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-02 17:17:13,879 - wazuh_testing - DEBUG - 2022/02/02 21:16:42 wazuh-db[7352] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.191 ms. 2022-02-02 17:17:13,879 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ 2022-02-02 17:17:13,879 - wazuh_testing - DEBUG - 2022/02/02 21:16:42 wazuh-db[7352] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.230 ms. 2022-02-02 17:17:13,879 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ OK? 2022-02-02 17:17:13,880 - wazuh_testing - DEBUG - 2022/02/02 21:16:42 wazuh-db[7352] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643832999,"version":2,"begin":"/sbin/ctrlaltdel","end":"/sbin/mkhomedir_helper","tail":"/sbin/mkswap","checksum":"f4094767b5033606e4a60c0075f429a93f720519"} 2022-02-02 17:17:13,880 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-02 17:17:13,880 - wazuh_testing - DEBUG - 2022/02/02 21:16:42 wazuh-db[7352] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.141 ms. 2022-02-02 17:17:13,880 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-02 17:17:13,880 - wazuh_testing - DEBUG - 2022/02/02 21:16:43 wazuh-db[7352] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643832999,"version":2,"begin":"/sbin/mkswap","end":"/usr/bin/apt-extracttemplates","checksum":"72b64efc74e3ad7e53d538b01489cb57f3b82caf"} 2022-02-02 17:17:13,880 - wazuh_testing - DEBUG - 2022/02/02 21:16:43 wazuh-db[7352] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.146 ms. 2022-02-02 17:17:13,881 - wazuh_testing - DEBUG - 2022/02/02 21:16:43 wazuh-db[7352] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643832999,"version":2,"begin":"/sbin/mkswap","end":"/sbin/start-stop-daemon","tail":"/sbin/sulogin","checksum":"205673eafd86478a9bae30a249a954bab122f47f"} 2022-02-02 17:17:13,881 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-02 17:17:13,881 - wazuh_testing - DEBUG - 2022/02/02 21:16:43 wazuh-db[7352] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.066 ms. 2022-02-02 17:17:13,881 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-02 17:17:13,882 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-02 17:17:13,882 - wazuh_testing - DEBUG - 2022/02/02 21:16:43 wazuh-db[7352] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643832999,"version":2,"begin":"/sbin/sulogin","end":"/usr/bin/apt-extracttemplates","checksum":"db0a54f48b760bb4b1085b4229490f6046e735f5"} 2022-02-02 17:17:13,882 - wazuh_testing - DEBUG - 2022/02/02 21:16:43 wazuh-db[7352] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.116 ms. 2022-02-02 17:17:13,882 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-02 17:17:13,882 - wazuh_testing - DEBUG - 2022/02/02 21:16:43 wazuh-db[7352] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643832999,"version":2,"begin":"/sbin/sulogin","end":"/sbin/wipefs","tail":"/sbin/zramctl","checksum":"157570556203dc9b1df7834dbf4e4a20ab33cfca"} 2022-02-02 17:17:13,882 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-02 17:17:13,883 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-02 17:17:13,883 - wazuh_testing - DEBUG - 2022/02/02 21:16:43 wazuh-db[7352] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.102 ms. 2022-02-02 17:17:13,883 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 rootcheck[11796] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled. 2022-02-02 17:17:13,883 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:17:13,883 - wazuh_testing - DEBUG - 2022/02/02 21:16:43 wazuh-db[7352] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643832999,"version":2,"begin":"/sbin/zramctl","end":"/usr/bin/apt-extracttemplates","checksum":"34a0b1bb2de14d7e6fbfb6fead11483a00ae3cae"} 2022-02-02 17:17:13,884 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] syscom.c:123 at syscom_main(): DEBUG: (6284): Local requests thread ready. 2022-02-02 17:17:13,884 - wazuh_testing - DEBUG - 2022/02/02 21:16:43 wazuh-db[7352] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.094 ms. 2022-02-02 17:17:13,884 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] mq_op.c:47 at StartMQ(): DEBUG: Connected succesfully to 'queue/sockets/queue' after 0 attempts 2022-02-02 17:17:13,884 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] mq_op.c:48 at StartMQ(): DEBUG: (unix_domain) Maximum send buffer set to: '212992'. 2022-02-02 17:17:13,885 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] main.c:185 at main(): INFO: Started (pid: 11798). 2022-02-02 17:17:13,885 - wazuh_testing - DEBUG - 2022/02/02 21:16:43 wazuh-db[7352] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643832999,"version":2,"begin":"/sbin/zramctl","end":"/usr/bin/aclocal-1.16","tail":"/usr/bin/addpart","checksum":"194e1f84a7c6b194e0999d8f85ea113d47a8ce18"} 2022-02-02 17:17:13,885 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] main.c:193 at main(): INFO: (6003): Monitoring path: '/bin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:17:13,886 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] main.c:193 at main(): INFO: (6003): Monitoring path: '/boot', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:17:13,886 - wazuh_testing - DEBUG - 2022/02/02 21:16:43 wazuh-db[7352] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643832999,"version":2,"begin":"/usr/bin/addpart","end":"/usr/bin/apt-extracttemplates","checksum":"95a692828de0dea4b6ca328f569037eaa082ab85"} 2022-02-02 17:17:13,886 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] main.c:193 at main(): INFO: (6003): Monitoring path: '/etc', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:17:13,886 - wazuh_testing - DEBUG - 2022/02/02 21:16:43 wazuh-db[7352] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.140 ms. 2022-02-02 17:17:13,886 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] main.c:193 at main(): INFO: (6003): Monitoring path: '/sbin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:17:13,887 - wazuh_testing - DEBUG - 2022/02/02 21:16:43 wazuh-db[7352] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.060 ms. 2022-02-02 17:17:13,887 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir1', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:17:13,887 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir2', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | realtime'. 2022-02-02 17:17:13,887 - wazuh_testing - DEBUG - 2022/02/02 21:16:43 wazuh-db[7352] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643832999,"version":2,"begin":"/sbin/zramctl","end":"/usr/bin/2to3-2.7","tail":"/usr/bin/[","checksum":"b9fb37eae2e5822acbcf20aa0cb84d794d5bfea5"} 2022-02-02 17:17:13,888 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir3', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | whodata'. 2022-02-02 17:17:13,888 - wazuh_testing - DEBUG - 2022/02/02 21:16:43 wazuh-db[7352] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.100 ms. 2022-02-02 17:17:13,888 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/bin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:17:13,889 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/sbin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:17:13,889 - wazuh_testing - DEBUG - 2022/02/02 21:16:43 wazuh-db[7352] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643832999,"version":2,"begin":"/usr/bin/[","end":"/usr/bin/aclocal-1.16","checksum":"ab72adc86d2a1f2e36162f60b40bf10d71afc73a"} 2022-02-02 17:17:13,889 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] main.c:215 at main(): DEBUG: (6357): Maximum disk quota size limit configured to '1048576 KB'. 2022-02-02 17:17:13,889 - wazuh_testing - DEBUG - 2022/02/02 21:16:43 wazuh-db[7352] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.117 ms. 2022-02-02 17:17:13,889 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mtab' 2022-02-02 17:17:13,890 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/hosts.deny' 2022-02-02 17:17:13,890 - wazuh_testing - DEBUG - 2022/02/02 21:16:43 wazuh-db[7352] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643832999,"version":2,"begin":"/sbin/zramctl","end":"/sbin/zramctl","tail":"/testdir1/testdir1.txt","checksum":"9562865780448bda22ecac2d749c5a2d5657b106"} 2022-02-02 17:17:13,890 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mail/statistics' 2022-02-02 17:17:13,891 - wazuh_testing - DEBUG - 2022/02/02 21:16:43 wazuh-db[7352] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.059 ms. 2022-02-02 17:17:13,891 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random-seed' 2022-02-02 17:17:13,891 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random.seed' 2022-02-02 17:17:13,891 - wazuh_testing - DEBUG - 2022/02/02 21:16:44 wazuh-db[7352] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643832999,"version":2,"begin":"/testdir1/testdir1.txt","end":"/usr/bin/2to3-2.7","checksum":"8f9f17a07003b301bd153efbdf69afac659c6495"} 2022-02-02 17:17:13,891 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/adjtime' 2022-02-02 17:17:13,892 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/httpd/logs' 2022-02-02 17:17:13,892 - wazuh_testing - DEBUG - 2022/02/02 21:16:44 wazuh-db[7352] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.055 ms. 2022-02-02 17:17:13,892 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/utmpx' 2022-02-02 17:17:13,893 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/wtmpx' 2022-02-02 17:17:13,893 - wazuh_testing - DEBUG - 2022/02/02 21:16:44 wazuh-db[7352] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643832999,"version":2,"begin":"/testdir1/testdir1.txt","end":"/testdir1/testdir1.txt","tail":"/usr/bin/2to3-2.7","checksum":"3c073fa687c6d047fbff0ea9f17efdaddfbee7d3"} 2022-02-02 17:17:13,893 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/cups/certs' 2022-02-02 17:17:13,894 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/dumpdates' 2022-02-02 17:17:13,894 - wazuh_testing - DEBUG - 2022/02/02 21:16:44 wazuh-db[7352] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.068 ms. 2022-02-02 17:17:13,894 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/svc/volatile' 2022-02-02 17:17:13,894 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/security' 2022-02-02 17:17:13,895 - wazuh_testing - DEBUG - 2022/02/02 21:16:44 wazuh-db[7352] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643832999,"version":2,"begin":"/usr/bin/2to3-2.7","end":"/usr/bin/2to3-2.7","checksum":"4288e49f7e69481516baa382943d5a652f7e069b"} 2022-02-02 17:17:13,895 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/debug' 2022-02-02 17:17:13,895 - wazuh_testing - DEBUG - 2022/02/02 21:16:44 wazuh-db[7352] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.042 ms. 2022-02-02 17:17:13,895 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/dev/core' 2022-02-02 17:17:13,895 - wazuh_testing - DEBUG - 2022/02/02 21:16:44 wazuh-db[7352] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file save2 {"path":"/testdir1/testdir1.txt","timestamp":1643832999,"version":2,"attributes":{"type":"file","size":0,"perm":"rw-r--r--","uid":"0","gid":"0","user_name":"root","group_name":"root","inode":7239398,"mtime":1643832993,"hash_md5":"d41d8cd98f00b204e9800998ecf8427e","hash_sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","hash_sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","checksum":"15fcba9a72f11eb1b82cf892c617faa25dae7d77"}} 2022-02-02 17:17:13,896 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '^/proc' 2022-02-02 17:17:13,896 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '.log$|.swp$' 2022-02-02 17:17:13,897 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] main.c:235 at main(): INFO: (6004): No diff for file: '/etc/ssl/private.key' 2022-02-02 17:17:13,897 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] main.c:245 at main(): INFO: (6016): Directory set for real time monitoring: '/testdir2'. 2022-02-02 17:17:13,897 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-manager and message: .*Agent 001 query: (.+) save2 2022-02-02 17:17:13,898 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] syscheck_audit.c:243 at audit_init(): WARNING: (6924): Who-data engine cannot start because Auditd is not running. 2022-02-02 17:17:13,898 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] main.c:264 at main(): WARNING: (6913): Who-data engine could not start. Switching who-data to real-time. 2022-02-02 17:17:13,899 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] run_check.c:194 at start_daemon(): DEBUG: (6320): Setting process priority to: '10' 2022-02-02 17:17:13,899 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:17:13,899 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] run_check.c:229 at start_daemon(): INFO: (6000): Starting daemon... 2022-02-02 17:17:13,900 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] run_check.c:232 at start_daemon(): INFO: (6010): File integrity monitoring scan frequency: 20 seconds 2022-02-02 17:17:13,900 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-02 17:17:13,901 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1643832998}} 2022-02-02 17:17:13,901 - wazuh_testing - DEBUG - 2022/02/02 21:16:38 wazuh-syscheckd[11796] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-02 17:17:13,902 - wazuh_testing - DEBUG - 2022/02/02 21:16:39 wazuh-syscheckd[11796] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-02 17:17:13,902 - wazuh_testing - DEBUG - 2022/02/02 21:16:39 wazuh-syscheckd[11796] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-02 17:17:13,903 - wazuh_testing - DEBUG - 2022/02/02 21:16:39 wazuh-syscheckd[11796] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-02 17:17:13,903 - wazuh_testing - DEBUG - 2022/02/02 21:16:39 wazuh-syscheckd[11796] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-02 17:17:13,904 - wazuh_testing - DEBUG - 2022/02/02 21:16:39 wazuh-syscheckd[11796] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-02 17:17:13,904 - wazuh_testing - DEBUG - 2022/02/02 21:16:39 wazuh-syscheckd[11796] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-02 17:17:13,905 - wazuh_testing - DEBUG - 2022/02/02 21:16:39 wazuh-syscheckd[11796] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1643832999}} 2022-02-02 17:17:13,905 - wazuh_testing - DEBUG - 2022/02/02 21:16:39 wazuh-syscheckd[11796] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.712 sec (0.711 clock sec) 2022-02-02 17:17:13,906 - wazuh_testing - DEBUG - 2022/02/02 21:16:39 wazuh-syscheckd[11796] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1621, path count: 1627 2022-02-02 17:17:13,907 - wazuh_testing - DEBUG - 2022/02/02 21:16:39 wazuh-syscheckd[11796] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:17:13,907 - wazuh_testing - DEBUG - 2022/02/02 21:16:39 wazuh-syscheckd[11796] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:17:13,908 - wazuh_testing - DEBUG - 2022/02/02 21:16:39 wazuh-syscheckd[11796] run_check.c:387 at fim_run_realtime(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-02 17:17:13,908 - wazuh_testing - DEBUG - 2022/02/02 21:16:39 wazuh-syscheckd[11796] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:17:13,909 - wazuh_testing - DEBUG - 2022/02/02 21:16:39 wazuh-syscheckd[11796] run_check.c:543 at log_realtime_status(): INFO: (6012): Real-time file integrity monitoring started. 2022-02-02 17:17:13,909 - wazuh_testing - DEBUG - 2022/02/02 21:16:39 wazuh-syscheckd[11796] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. 2022-02-02 17:17:13,910 - wazuh_testing - DEBUG - 2022/02/02 21:16:39 wazuh-syscheckd[11796] run_check.c:568 at symlink_checker_thread(): DEBUG: (6033): Starting symbolic link updater. Interval '600'. 2022-02-02 17:17:13,910 - wazuh_testing - DEBUG - 2022/02/02 21:16:39 wazuh-syscheckd[11796] run_check.c:82 at fim_send_sync_msg(): DEBUG: (6317): Sending integrity control message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1643832999,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"694e919f48dc3aa8b6cc52524822734575048636"}} 2022-02-02 17:17:13,911 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-agent1 and message: .*Sending integrity control message: (.+)$ 2022-02-02 17:17:14,870 - wazuh_testing - DEBUG - Cleaning temporal files... 2022-02-02 17:17:14,871 - wazuh_testing - DEBUG - Checking results... 2022-02-02 17:17:14,873 - wazuh_testing - DEBUG - Received from wazuh-manager the expected message: 2022/02/02 21:16:44 wazuh-db[7352] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file save2 {"path":"/testdir1/testdir1.txt","timestamp":1643832999,"version":2,"attributes":{"type":"file","size":0,"perm":"rw-r--r--","uid":"0","gid":"0","user_name":"root","group_name":"root","inode":7239398,"mtime":1643832993,"hash_md5":"d41d8cd98f00b204e9800998ecf8427e","hash_sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","hash_sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","checksum":"15fcba9a72f11eb1b82cf892c617faa25dae7d77"}} 2022-02-02 17:17:14,873 - wazuh_testing - DEBUG - Received from wazuh-agent1 the expected message: 2022/02/02 21:16:39 wazuh-syscheckd[11796] run_check.c:82 at fim_send_sync_msg(): DEBUG: (6317): Sending integrity control message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1643832999,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"694e919f48dc3aa8b6cc52524822734575048636"}} 2022-02-02 17:18:02,327 - wazuh_testing - DEBUG - Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-02 17:18:02,329 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-02 17:18:02,330 - wazuh_testing - DEBUG - Starting file composer for wazuh-manager and path: /var/ossec/logs/ossec.log. Composite file in /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-manager_ossec.log.tmp 2022-02-02 17:18:02,333 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-manager and message: .*Initializing FIM Integrity Synchronization check. (.+)$ 2022-02-02 17:18:04,336 - wazuh_testing - DEBUG - 2022/02/02 21:17:20 wazuh-db[7352] wdb.c:918 at wdb_commit_old(): DEBUG: Agent '001' database commited. Time: 3.774 ms. 2022-02-02 17:18:04,338 - wazuh_testing - DEBUG - 2022/02/02 21:17:25 wazuh-db[7352] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.18.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.18.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.13.0-27-generic |#29~20.04.1-Ubuntu SMP Fri Jan 14 00:32:30 UTC 2022 |x86_64","os_arch":"x86_64"} 2022-02-02 17:18:04,339 - wazuh_testing - DEBUG - 2022/02/02 21:17:28 wazuh-modulesd:syscollector: INFO: Stop received for Syscollector. 2022-02-02 17:18:04,339 - wazuh_testing - DEBUG - 2022/02/02 21:17:28 wazuh-db[7352] main.c:352 at run_worker(): DEBUG: Client 13 disconnected. 2022-02-02 17:18:04,339 - wazuh_testing - DEBUG - 2022/02/02 21:17:28 wazuh-monitord: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:18:04,339 - wazuh_testing - DEBUG - 2022/02/02 21:17:28 wazuh-logcollector: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:18:04,340 - wazuh_testing - DEBUG - 2022/02/02 21:17:28 wazuh-remoted: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:18:04,340 - wazuh_testing - DEBUG - 2022/02/02 21:17:28 wazuh-db[7352] main.c:352 at run_worker(): DEBUG: Client 41 disconnected. 2022-02-02 17:18:04,340 - wazuh_testing - DEBUG - 2022/02/02 21:17:28 wazuh-db[7352] main.c:352 at run_worker(): DEBUG: Client 23 disconnected. 2022-02-02 17:18:04,340 - wazuh_testing - DEBUG - 2022/02/02 21:17:28 wazuh-db[7352] main.c:352 at run_worker(): DEBUG: Client 16 disconnected. 2022-02-02 17:18:04,341 - wazuh_testing - DEBUG - 2022/02/02 21:17:28 wazuh-db[7352] main.c:352 at run_worker(): DEBUG: Client 18 disconnected. 2022-02-02 17:18:04,341 - wazuh_testing - DEBUG - 2022/02/02 21:17:28 wazuh-syscheckd[7398] sig_op.c:49 at HandleSIG(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:18:04,341 - wazuh_testing - DEBUG - 2022/02/02 21:17:28 wazuh-analysisd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:18:04,342 - wazuh_testing - DEBUG - 2022/02/02 21:17:28 wazuh-db[7352] main.c:352 at run_worker(): DEBUG: Client 46 disconnected. 2022-02-02 17:18:04,342 - wazuh_testing - DEBUG - 2022/02/02 21:17:28 wazuh-db[7352] main.c:352 at run_worker(): DEBUG: Client 44 disconnected. 2022-02-02 17:18:04,342 - wazuh_testing - DEBUG - 2022/02/02 21:17:28 wazuh-db[7352] main.c:352 at run_worker(): DEBUG: Client 42 disconnected. 2022-02-02 17:18:04,343 - wazuh_testing - DEBUG - 2022/02/02 21:17:28 wazuh-db[7352] main.c:352 at run_worker(): DEBUG: Client 40 disconnected. 2022-02-02 17:18:04,343 - wazuh_testing - DEBUG - 2022/02/02 21:17:28 wazuh-db[7352] main.c:352 at run_worker(): DEBUG: Client 43 disconnected. 2022-02-02 17:18:04,343 - wazuh_testing - DEBUG - 2022/02/02 21:17:28 wazuh-db[7352] main.c:352 at run_worker(): DEBUG: Client 39 disconnected. 2022-02-02 17:18:04,343 - wazuh_testing - DEBUG - 2022/02/02 21:17:28 wazuh-db[7352] main.c:352 at run_worker(): DEBUG: Client 38 disconnected. 2022-02-02 17:18:04,344 - wazuh_testing - DEBUG - 2022/02/02 21:17:28 wazuh-db[7352] main.c:352 at run_worker(): DEBUG: Client 34 disconnected. 2022-02-02 17:18:04,344 - wazuh_testing - DEBUG - 2022/02/02 21:17:28 wazuh-db[7352] main.c:352 at run_worker(): DEBUG: Client 36 disconnected. 2022-02-02 17:18:04,345 - wazuh_testing - DEBUG - 2022/02/02 21:17:28 wazuh-db[7352] main.c:352 at run_worker(): DEBUG: Client 30 disconnected. 2022-02-02 17:18:04,345 - wazuh_testing - DEBUG - 2022/02/02 21:17:28 wazuh-db[7352] main.c:352 at run_worker(): DEBUG: Client 33 disconnected. 2022-02-02 17:18:04,345 - wazuh_testing - DEBUG - 2022/02/02 21:17:28 wazuh-db[7352] main.c:352 at run_worker(): DEBUG: Client 28 disconnected. 2022-02-02 17:18:04,346 - wazuh_testing - DEBUG - 2022/02/02 21:17:28 wazuh-db[7352] main.c:352 at run_worker(): DEBUG: Client 27 disconnected. 2022-02-02 17:18:04,346 - wazuh_testing - DEBUG - 2022/02/02 21:17:28 wazuh-db[7352] main.c:352 at run_worker(): DEBUG: Client 32 disconnected. 2022-02-02 17:18:04,347 - wazuh_testing - DEBUG - 2022/02/02 21:17:28 wazuh-db[7352] main.c:352 at run_worker(): DEBUG: Client 24 disconnected. 2022-02-02 17:18:04,347 - wazuh_testing - DEBUG - 2022/02/02 21:17:28 wazuh-db[7352] main.c:352 at run_worker(): DEBUG: Client 29 disconnected. 2022-02-02 17:18:04,347 - wazuh_testing - DEBUG - 2022/02/02 21:17:28 wazuh-db[7352] main.c:352 at run_worker(): DEBUG: Client 22 disconnected. 2022-02-02 17:18:04,348 - wazuh_testing - DEBUG - 2022/02/02 21:17:28 wazuh-db[7352] main.c:352 at run_worker(): DEBUG: Client 31 disconnected. 2022-02-02 17:18:04,348 - wazuh_testing - DEBUG - 2022/02/02 21:17:28 wazuh-db[7352] main.c:352 at run_worker(): DEBUG: Client 20 disconnected. 2022-02-02 17:18:04,348 - wazuh_testing - DEBUG - 2022/02/02 21:17:28 wazuh-db[7352] main.c:352 at run_worker(): DEBUG: Client 12 disconnected. 2022-02-02 17:18:04,349 - wazuh_testing - DEBUG - 2022/02/02 21:17:28 wazuh-db[7352] main.c:352 at run_worker(): DEBUG: Client 35 disconnected. 2022-02-02 17:18:04,349 - wazuh_testing - DEBUG - 2022/02/02 21:17:28 wazuh-db[7352] main.c:352 at run_worker(): DEBUG: Client 11 disconnected. 2022-02-02 17:18:04,349 - wazuh_testing - DEBUG - 2022/02/02 21:17:28 wazuh-db[7352] main.c:352 at run_worker(): DEBUG: Client 21 disconnected. 2022-02-02 17:18:04,349 - wazuh_testing - DEBUG - 2022/02/02 21:17:28 wazuh-db[7352] main.c:352 at run_worker(): DEBUG: Client 26 disconnected. 2022-02-02 17:18:04,349 - wazuh_testing - DEBUG - 2022/02/02 21:17:28 wazuh-db[7352] main.c:352 at run_worker(): DEBUG: Client 25 disconnected. 2022-02-02 17:18:04,349 - wazuh_testing - DEBUG - 2022/02/02 21:17:28 wazuh-db[7352] main.c:352 at run_worker(): DEBUG: Client 19 disconnected. 2022-02-02 17:18:04,350 - wazuh_testing - DEBUG - 2022/02/02 21:17:28 wazuh-db[7352] main.c:352 at run_worker(): DEBUG: Client 10 disconnected. 2022-02-02 17:18:04,350 - wazuh_testing - DEBUG - 2022/02/02 21:17:28 wazuh-db[7352] main.c:352 at run_worker(): DEBUG: Client 37 disconnected. 2022-02-02 17:18:04,350 - wazuh_testing - DEBUG - 2022/02/02 21:17:28 wazuh-db[7352] main.c:352 at run_worker(): DEBUG: Client 6 disconnected. 2022-02-02 17:18:04,350 - wazuh_testing - DEBUG - 2022/02/02 21:17:29 wazuh-execd: INFO: (1314): Shutdown received. Deleting responses. 2022-02-02 17:18:04,350 - wazuh_testing - DEBUG - 2022/02/02 21:17:29 wazuh-execd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:18:04,351 - wazuh_testing - DEBUG - 2022/02/02 21:17:29 wazuh-db[7352] main.c:468 at handler(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:18:04,351 - wazuh_testing - DEBUG - 2022/02/02 21:17:29 wazuh-db[7352] wdb.c:872 at wdb_close_all(): DEBUG: Closing all databases... 2022-02-02 17:18:04,351 - wazuh_testing - DEBUG - 2022/02/02 21:17:29 wazuh-db[7352] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent 001 2022-02-02 17:18:04,351 - wazuh_testing - DEBUG - 2022/02/02 21:17:29 wazuh-db[7352] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent 000 2022-02-02 17:18:04,351 - wazuh_testing - DEBUG - 2022/02/02 21:17:29 wazuh-db[7352] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent mitre 2022-02-02 17:18:04,352 - wazuh_testing - DEBUG - 2022/02/02 21:17:29 wazuh-db[7352] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent global 2022-02-02 17:18:04,352 - wazuh_testing - DEBUG - 2022/02/02 21:17:30 wazuh-db[7352] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent tasks 2022-02-02 17:18:04,352 - wazuh_testing - DEBUG - 2022/02/02 21:17:30 wazuh-db[7352] main.c:231 at main(): DEBUG: Template file removed again: queue/db/.template.db 2022-02-02 17:18:04,352 - wazuh_testing - DEBUG - 2022/02/02 21:17:30 wazuh-authd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:18:04,352 - wazuh_testing - DEBUG - 2022/02/02 21:17:31 wazuh-authd: INFO: Exiting... 2022-02-02 17:18:04,353 - wazuh_testing - DEBUG - 2022/02/02 21:17:43 wazuh-db[8289] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-02 17:18:04,353 - wazuh_testing - DEBUG - 2022/02/02 21:17:43 wazuh-db[8289] main.c:101 at main(): DEBUG: Wazuh home directory: /var/ossec 2022-02-02 17:18:04,353 - wazuh_testing - DEBUG - 2022/02/02 21:17:44 wazuh-syscheckd[8293] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-02 17:18:04,353 - wazuh_testing - DEBUG - 2022/02/02 21:17:44 wazuh-syscheckd[8293] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-02 17:18:04,354 - wazuh_testing - DEBUG - 2022/02/02 21:17:44 wazuh-syscheckd[8293] syscheck-config.c:122 at organize_syscheck_dirs(): DEBUG: No directory entries to organize in syscheck configuration. 2022-02-02 17:18:04,354 - wazuh_testing - DEBUG - 2022/02/02 21:17:51 wazuh-csyslogd: INFO: Remote syslog server not configured. Clean exit. 2022-02-02 17:18:04,354 - wazuh_testing - DEBUG - 2022/02/02 21:17:51 wazuh-dbd: INFO: Database not configured. Clean exit. 2022-02-02 17:18:04,354 - wazuh_testing - DEBUG - 2022/02/02 21:17:51 wazuh-integratord: INFO: Remote integrations not configured. Clean exit. 2022-02-02 17:18:04,355 - wazuh_testing - DEBUG - 2022/02/02 21:17:51 wazuh-agentlessd: INFO: Not configured. Exiting. 2022-02-02 17:18:04,355 - wazuh_testing - DEBUG - 2022/02/02 21:17:51 wazuh-authd: INFO: Started (pid: 8359). 2022-02-02 17:18:04,355 - wazuh_testing - DEBUG - 2022/02/02 21:17:51 wazuh-authd: INFO: Accepting connections on port 1515. No password required. 2022-02-02 17:18:04,355 - wazuh_testing - DEBUG - 2022/02/02 21:17:51 wazuh-authd: INFO: Setting network timeout to 1.000000 sec. 2022-02-02 17:18:04,355 - wazuh_testing - DEBUG - 2022/02/02 21:17:52 wazuh-db[8373] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-02 17:18:04,356 - wazuh_testing - DEBUG - 2022/02/02 21:17:52 wazuh-db[8373] main.c:101 at main(): DEBUG: Wazuh home directory: /var/ossec 2022-02-02 17:18:04,356 - wazuh_testing - DEBUG - 2022/02/02 21:17:52 wazuh-db[8373] main.c:122 at main(): DEBUG: Template file removed: /var/ossec/queue/db/.template.db 2022-02-02 17:18:04,356 - wazuh_testing - DEBUG - 2022/02/02 21:17:52 wazuh-db[8373] main.c:178 at main(): INFO: Started (pid: 8375). 2022-02-02 17:18:04,356 - wazuh_testing - DEBUG - 2022/02/02 21:17:53 wazuh-execd: INFO: (1350): Active response disabled. 2022-02-02 17:18:04,357 - wazuh_testing - DEBUG - 2022/02/02 21:17:53 wazuh-execd: INFO: Started (pid: 8398). 2022-02-02 17:18:04,357 - wazuh_testing - DEBUG - 2022/02/02 21:17:54 wazuh-analysisd: INFO: Total rules enabled: '3882' 2022-02-02 17:18:04,357 - wazuh_testing - DEBUG - 2022/02/02 21:17:55 wazuh-analysisd: INFO: Started (pid: 8412). 2022-02-02 17:18:04,357 - wazuh_testing - DEBUG - 2022/02/02 21:17:55 wazuh-db[8373] main.c:290 at run_dealer(): DEBUG: New client connected (6). 2022-02-02 17:18:04,357 - wazuh_testing - DEBUG - 2022/02/02 21:17:55 wazuh-analysisd: INFO: (7200): Logtest started 2022-02-02 17:18:04,358 - wazuh_testing - DEBUG - 2022/02/02 21:17:55 wazuh-syscheckd[8543] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-02 17:18:04,358 - wazuh_testing - DEBUG - 2022/02/02 21:17:55 wazuh-syscheckd[8543] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-02 17:18:04,358 - wazuh_testing - DEBUG - 2022/02/02 21:17:55 wazuh-syscheckd[8543] syscheck-config.c:122 at organize_syscheck_dirs(): DEBUG: No directory entries to organize in syscheck configuration. 2022-02-02 17:18:04,358 - wazuh_testing - DEBUG - 2022/02/02 21:17:55 wazuh-syscheckd[8543] main.c:118 at main(): INFO: (6678): No directory provided for syscheck to monitor. 2022-02-02 17:18:04,359 - wazuh_testing - DEBUG - 2022/02/02 21:17:55 wazuh-syscheckd[8543] main.c:136 at main(): INFO: (6001): File integrity monitoring disabled. 2022-02-02 17:18:04,359 - wazuh_testing - DEBUG - 2022/02/02 21:17:55 rootcheck[8543] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled. 2022-02-02 17:18:04,359 - wazuh_testing - DEBUG - 2022/02/02 21:17:55 wazuh-syscheckd[8543] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:18:04,360 - wazuh_testing - DEBUG - 2022/02/02 21:17:55 wazuh-syscheckd[8543] syscom.c:123 at syscom_main(): DEBUG: (6284): Local requests thread ready. 2022-02-02 17:18:04,360 - wazuh_testing - DEBUG - 2022/02/02 21:17:55 wazuh-syscheckd[8543] mq_op.c:47 at StartMQ(): DEBUG: Connected succesfully to 'queue/sockets/queue' after 0 attempts 2022-02-02 17:18:04,360 - wazuh_testing - DEBUG - 2022/02/02 21:17:55 wazuh-syscheckd[8543] mq_op.c:48 at StartMQ(): DEBUG: (unix_domain) Maximum send buffer set to: '212992'. 2022-02-02 17:18:04,360 - wazuh_testing - DEBUG - 2022/02/02 21:17:55 wazuh-syscheckd[8543] main.c:185 at main(): INFO: Started (pid: 8545). 2022-02-02 17:18:04,361 - wazuh_testing - DEBUG - 2022/02/02 21:17:55 wazuh-syscheckd[8543] main.c:215 at main(): DEBUG: (6357): Maximum disk quota size limit configured to '1048576 KB'. 2022-02-02 17:18:04,361 - wazuh_testing - DEBUG - 2022/02/02 21:17:55 wazuh-syscheckd[8543] run_check.c:194 at start_daemon(): DEBUG: (6320): Setting process priority to: '10' 2022-02-02 17:18:04,361 - wazuh_testing - DEBUG - 2022/02/02 21:17:55 wazuh-syscheckd[8543] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:18:04,361 - wazuh_testing - DEBUG - 2022/02/02 21:17:55 wazuh-syscheckd[8543] run_check.c:229 at start_daemon(): INFO: (6000): Starting daemon... 2022-02-02 17:18:04,362 - wazuh_testing - DEBUG - 2022/02/02 21:17:55 wazuh-syscheckd[8543] run_check.c:232 at start_daemon(): INFO: (6010): File integrity monitoring scan frequency: 43200 seconds 2022-02-02 17:18:04,362 - wazuh_testing - DEBUG - 2022/02/02 21:17:55 wazuh-syscheckd[8543] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-02 17:18:04,362 - wazuh_testing - DEBUG - 2022/02/02 21:17:55 wazuh-syscheckd[8543] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1643833075}} 2022-02-02 17:18:04,363 - wazuh_testing - DEBUG - 2022/02/02 21:17:55 wazuh-syscheckd[8543] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-02 17:18:04,363 - wazuh_testing - DEBUG - 2022/02/02 21:17:55 wazuh-db[8373] main.c:290 at run_dealer(): DEBUG: New client connected (10). 2022-02-02 17:18:04,363 - wazuh_testing - DEBUG - 2022/02/02 21:17:55 wazuh-db[8373] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 000 query: syscheck scan_info_update start_scan 1643833075 2022-02-02 17:18:04,364 - wazuh_testing - DEBUG - 2022/02/02 21:17:55 wazuh-syscheckd[8543] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-02 17:18:04,364 - wazuh_testing - DEBUG - 2022/02/02 21:17:55 wazuh-syscheckd[8543] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-02 17:18:04,364 - wazuh_testing - DEBUG - 2022/02/02 21:17:55 wazuh-syscheckd[8543] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1643833075}} 2022-02-02 17:18:04,364 - wazuh_testing - DEBUG - 2022/02/02 21:17:55 wazuh-syscheckd[8543] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.000 sec (0.000 clock sec) 2022-02-02 17:18:04,365 - wazuh_testing - DEBUG - 2022/02/02 21:17:55 wazuh-syscheckd[8543] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 0, path count: 0 2022-02-02 17:18:04,365 - wazuh_testing - DEBUG - 2022/02/02 21:17:55 wazuh-db[8373] main.c:290 at run_dealer(): DEBUG: New client connected (12). 2022-02-02 17:18:04,365 - wazuh_testing - DEBUG - 2022/02/02 21:17:55 wazuh-syscheckd[8543] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:18:04,366 - wazuh_testing - DEBUG - 2022/02/02 21:17:55 wazuh-db[8373] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 000 query: syscheck scan_info_update end_scan 1643833075 2022-02-02 17:18:04,366 - wazuh_testing - DEBUG - 2022/02/02 21:17:55 wazuh-syscheckd[8543] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:18:04,366 - wazuh_testing - DEBUG - 2022/02/02 21:17:55 wazuh-syscheckd[8543] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:18:04,366 - wazuh_testing - DEBUG - 2022/02/02 21:17:55 wazuh-syscheckd[8543] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. 2022-02-02 17:18:04,368 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-manager and message: .*Initializing FIM Integrity Synchronization check. (.+)$ 2022-02-02 17:18:05,336 - wazuh_testing - DEBUG - Cleaning temporal files... 2022-02-02 17:18:05,337 - wazuh_testing - DEBUG - Checking results... 2022-02-02 17:18:05,338 - wazuh_testing - DEBUG - Received from wazuh-manager the expected message: 2022/02/02 21:17:55 wazuh-syscheckd[8543] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. -------------------------------Captured log call-------------------------------- DEBUG testinfra:base.py:277 RUN CommandResult(command=b"ansible --tree /tmp/tmpat9_2b93 -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m command --args 'mkdir testdir1' wazuh-agent1", exit_status=0, stdout=b'wazuh-agent1 | CHANGED | rc=0 >>\n\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('command', 'mkdir testdir1', {'check': False, 'become': False}): {'changed': True, 'cmd': ['mkdir', 'testdir1'], 'delta': '0:00:00.943201', 'end': '2022-02-02 21:16:54.246576', 'msg': '', 'rc': 0, 'start': '2022-02-02 21:16:53.303375', 'stderr': '', 'stderr_lines': [], 'stdout': '', 'stdout_lines': []} DEBUG testinfra:base.py:277 RUN CommandResult(command=b"ansible --tree /tmp/tmpygdb2909 -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m command --args 'touch testdir1/testdir1.txt' wazuh-agent1", exit_status=0, stdout=b'wazuh-agent1 | CHANGED | rc=0 >>\n\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('command', 'touch testdir1/testdir1.txt', {'check': False, 'become': False}): {'changed': True, 'cmd': ['touch', 'testdir1/testdir1.txt'], 'delta': '0:00:00.756140', 'end': '2022-02-02 21:16:57.139428', 'msg': '', 'rc': 0, 'start': '2022-02-02 21:16:56.383288', 'stderr': '', 'stderr_lines': [], 'stdout': '', 'stdout_lines': []} DEBUG testinfra:base.py:277 RUN CommandResult(command=b"ansible --tree /tmp/tmpu1z5qxrt -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m service --args 'name=wazuh-agent state=restarted' wazuh-agent1", exit_status=0, stdout=b'wazuh-agent1 | CHANGED => {\n "changed": true,\n "name": "wazuh-agent",\n "state": "started"\n}\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('service', 'name=wazuh-agent state=restarted', {'check': False, 'become': False}): {'changed': True, 'name': 'wazuh-agent', 'state': 'started'} DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:1006 Cleaning temporal files... DEBUG wazuh_testing:monitoring.py:995 Checking results... DEBUG wazuh_testing:monitoring.py:1001 Received from wazuh-manager the expected message: 2022/02/02 21:16:44 wazuh-db[7352] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file save2 {"path":"/testdir1/testdir1.txt","timestamp":1643832999,"version":2,"attributes":{"type":"file","size":0,"perm":"rw-r--r--","uid":"0","gid":"0","user_name":"root","group_name":"root","inode":7239398,"mtime":1643832993,"hash_md5":"d41d8cd98f00b204e9800998ecf8427e","hash_sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","hash_sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","checksum":"15fcba9a72f11eb1b82cf892c617faa25dae7d77"}} DEBUG wazuh_testing:monitoring.py:1001 Received from wazuh-agent1 the expected message: 2022/02/02 21:16:39 wazuh-syscheckd[11796] run_check.c:82 at fim_send_sync_msg(): DEBUG: (6317): Sending integrity control message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1643832999,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"694e919f48dc3aa8b6cc52524822734575048636"}} DEBUG testinfra:base.py:277 RUN CommandResult(command=b'ansible --tree /tmp/tmpqde2v77p -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m copy --args \'dest=/var/ossec/logs/ossec.log content=\'"\'"\'\'"\'"\' force=yes\' wazuh-manager', exit_status=0, stdout=b'wazuh-manager | CHANGED => {\n "changed": true,\n "checksum": "da39a3ee5e6b4b0d3255bfef95601890afd80709",\n "dest": "/var/ossec/logs/ossec.log",\n "gid": 999,\n "group": "ossec",\n "md5sum": "d41d8cd98f00b204e9800998ecf8427e",\n "mode": "0660",\n "owner": "ossec",\n "size": 0,\n "src": "/root/.ansible/tmp/ansible-tmp-1643833035.7592435-95794-91714021654053/source",\n "state": "file",\n "uid": 999\n}\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('copy', "dest=/var/ossec/logs/ossec.log content='' force=yes", {'check': False, 'become': False}): {'changed': True, 'checksum': 'da39a3ee5e6b4b0d3255bfef95601890afd80709', 'dest': '/var/ossec/logs/ossec.log', 'gid': 999, 'group': 'ossec', 'md5sum': 'd41d8cd98f00b204e9800998ecf8427e', 'mode': '0660', 'owner': 'ossec', 'size': 0, 'src': '/root/.ansible/tmp/ansible-tmp-1643833035.7592435-95794-91714021654053/source', 'state': 'file', 'uid': 999} DEBUG testinfra:base.py:277 RUN CommandResult(command=b'ansible --tree /tmp/tmpnp860wjk -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m copy --args \'dest=/var/ossec/logs/ossec.log content=\'"\'"\'\'"\'"\' force=yes\' wazuh-agent1', exit_status=0, stdout=b'wazuh-agent1 | CHANGED => {\n "changed": true,\n "checksum": "da39a3ee5e6b4b0d3255bfef95601890afd80709",\n "dest": "/var/ossec/logs/ossec.log",\n "gid": 999,\n "group": "ossec",\n "md5sum": "d41d8cd98f00b204e9800998ecf8427e",\n "mode": "0660",\n "owner": "ossec",\n "size": 0,\n "src": "/root/.ansible/tmp/ansible-tmp-1643833040.7590392-96203-22070802953023/source",\n "state": "file",\n "uid": 999\n}\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('copy', "dest=/var/ossec/logs/ossec.log content='' force=yes", {'check': False, 'become': False}): {'changed': True, 'checksum': 'da39a3ee5e6b4b0d3255bfef95601890afd80709', 'dest': '/var/ossec/logs/ossec.log', 'gid': 999, 'group': 'ossec', 'md5sum': 'd41d8cd98f00b204e9800998ecf8427e', 'mode': '0660', 'owner': 'ossec', 'size': 0, 'src': '/root/.ansible/tmp/ansible-tmp-1643833040.7590392-96203-22070802953023/source', 'state': 'file', 'uid': 999} DEBUG testinfra:base.py:277 RUN CommandResult(command=b"ansible --tree /tmp/tmpn_2pu_rp -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m command --args '/var/ossec/bin/wazuh-control stop' wazuh-manager", exit_status=0, stdout=b'wazuh-manager | CHANGED | rc=0 >>\nKilling wazuh-clusterd...\nKilling wazuh-modulesd...\nKilling wazuh-monitord...\nKilling wazuh-logcollector...\nKilling wazuh-remoted...\nKilling wazuh-syscheckd...\nKilling wazuh-analysisd...\nwazuh-maild not running...\nKilling wazuh-execd...\nKilling wazuh-db...\nKilling wazuh-authd...\nwazuh-agentlessd not running...\nwazuh-integratord not running...\nwazuh-dbd not running...\nwazuh-csyslogd not running...\nKilling wazuh-apid...\nWazuh v4.2.5 Stopped\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('command', '/var/ossec/bin/wazuh-control stop', {'check': False, 'become': False}): {'changed': True, 'cmd': ['/var/ossec/bin/wazuh-control', 'stop'], 'delta': '0:00:04.187927', 'end': '2022-02-02 21:17:31.459437', 'msg': '', 'rc': 0, 'start': '2022-02-02 21:17:27.271510', 'stderr': '', 'stderr_lines': [], 'stdout': 'Killing wazuh-clusterd...\n' 'Killing wazuh-modulesd...\n' 'Killing wazuh-monitord...\n' 'Killing wazuh-logcollector...\n' 'Killing wazuh-remoted...\n' 'Killing wazuh-syscheckd...\n' 'Killing wazuh-analysisd...\n' 'wazuh-maild not running...\n' 'Killing wazuh-execd...\n' 'Killing wazuh-db...\n' 'Killing wazuh-authd...\n' 'wazuh-agentlessd not running...\n' 'wazuh-integratord not running...\n' 'wazuh-dbd not running...\n' 'wazuh-csyslogd not running...\n' 'Killing wazuh-apid...\n' 'Wazuh v4.2.5 Stopped', 'stdout_lines': ['Killing wazuh-clusterd...', 'Killing wazuh-modulesd...', 'Killing wazuh-monitord...', 'Killing wazuh-logcollector...', 'Killing wazuh-remoted...', 'Killing wazuh-syscheckd...', 'Killing wazuh-analysisd...', 'wazuh-maild not running...', 'Killing wazuh-execd...', 'Killing wazuh-db...', 'Killing wazuh-authd...', 'wazuh-agentlessd not running...', 'wazuh-integratord not running...', 'wazuh-dbd not running...', 'wazuh-csyslogd not running...', 'Killing wazuh-apid...', 'Wazuh v4.2.5 Stopped']} DEBUG testinfra:base.py:277 RUN CommandResult(command=b"ansible --tree /tmp/tmpmod3ruyp -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m command --args 'touch testdir1/testdir1.txt' wazuh-agent1", exit_status=0, stdout=b'wazuh-agent1 | CHANGED | rc=0 >>\n\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('command', 'touch testdir1/testdir1.txt', {'check': False, 'become': False}): {'changed': True, 'cmd': ['touch', 'testdir1/testdir1.txt'], 'delta': '0:00:00.905942', 'end': '2022-02-02 21:17:34.824804', 'msg': '', 'rc': 0, 'start': '2022-02-02 21:17:33.918862', 'stderr': '', 'stderr_lines': [], 'stdout': '', 'stdout_lines': []} DEBUG testinfra:base.py:277 RUN CommandResult(command=b"ansible --tree /tmp/tmpivfhjdk7 -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m command --args '/var/ossec/bin/wazuh-control start' wazuh-manager", exit_status=0, stdout=b"wazuh-manager | CHANGED | rc=0 >>\nStarting Wazuh v4.2.5...\nStarted wazuh-apid...\nStarted wazuh-csyslogd...\nStarted wazuh-dbd...\nStarted wazuh-integratord...\nStarted wazuh-agentlessd...\nStarted wazuh-authd...\nStarted wazuh-db...\nStarted wazuh-execd...\nStarted wazuh-analysisd...\nStarted wazuh-syscheckd...\nStarted wazuh-remoted...\nStarted wazuh-logcollector...\nStarted wazuh-monitord...\nStarted wazuh-modulesd...\nStarted wazuh-clusterd...\nCompleted.2022/02/02 21:17:43 wazuh-db[8289] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized\n2022/02/02 21:17:43 wazuh-db[8289] main.c:101 at main(): DEBUG: Wazuh home directory: /var/ossec\n2022/02/02 21:17:44 wazuh-syscheckd[8293] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized\n2022/02/02 21:17:44 wazuh-syscheckd[8293] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf'\n2022/02/02 21:17:44 wazuh-syscheckd[8293] syscheck-config.c:122 at organize_syscheck_dirs(): DEBUG: No directory entries to organize in syscheck configuration.\n2022/02/02 21:17:51 wazuh-integratord: INFO: Remote integrations not configured. Clean exit.\n2022/02/02 21:17:52 wazuh-db[8373] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized\n2022/02/02 21:17:52 wazuh-db[8373] main.c:101 at main(): DEBUG: Wazuh home directory: /var/ossec\n2022/02/02 21:17:55 wazuh-syscheckd[8543] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized\n2022/02/02 21:17:55 wazuh-syscheckd[8543] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf'\n2022/02/02 21:17:55 wazuh-syscheckd[8543] syscheck-config.c:122 at organize_syscheck_dirs(): DEBUG: No directory entries to organize in syscheck configuration.\n2022/02/02 21:17:55 wazuh-syscheckd[8543] main.c:118 at main(): INFO: (6678): No directory provided for syscheck to monitor.\n2022/02/02 21:17:55 wazuh-syscheckd[8543] main.c:136 at main(): INFO: (6001): File integrity monitoring disabled.\n2022/02/02 21:17:55 rootcheck[8543] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled.\n", stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('command', '/var/ossec/bin/wazuh-control start', {'check': False, 'become': False}): {'changed': True, 'cmd': ['/var/ossec/bin/wazuh-control', 'start'], 'delta': '0:00:24.895280', 'end': '2022-02-02 21:18:02.045933', 'msg': '', 'rc': 0, 'start': '2022-02-02 21:17:37.150653', 'stderr': '2022/02/02 21:17:43 wazuh-db[8289] debug_op.c:70 at _log(): DEBUG: ' 'Logging module auto-initialized\n' '2022/02/02 21:17:43 wazuh-db[8289] main.c:101 at main(): DEBUG: ' 'Wazuh home directory: /var/ossec\n' '2022/02/02 21:17:44 wazuh-syscheckd[8293] debug_op.c:70 at _log(): ' 'DEBUG: Logging module auto-initialized\n' '2022/02/02 21:17:44 wazuh-syscheckd[8293] config.c:87 at ' 'Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: ' "'etc/ossec.conf'\n" '2022/02/02 21:17:44 wazuh-syscheckd[8293] syscheck-config.c:122 at ' 'organize_syscheck_dirs(): DEBUG: No directory entries to organize ' 'in syscheck configuration.\n' '2022/02/02 21:17:51 wazuh-integratord: INFO: Remote integrations ' 'not configured. Clean exit.\n' '2022/02/02 21:17:52 wazuh-db[8373] debug_op.c:70 at _log(): DEBUG: ' 'Logging module auto-initialized\n' '2022/02/02 21:17:52 wazuh-db[8373] main.c:101 at main(): DEBUG: ' 'Wazuh home directory: /var/ossec\n' '2022/02/02 21:17:55 wazuh-syscheckd[8543] debug_op.c:70 at _log(): ' 'DEBUG: Logging module auto-initialized\n' '2022/02/02 21:17:55 wazuh-syscheckd[8543] config.c:87 at ' 'Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: ' "'etc/ossec.conf'\n" '2022/02/02 21:17:55 wazuh-syscheckd[8543] syscheck-config.c:122 at ' 'organize_syscheck_dirs(): DEBUG: No directory entries to organize ' 'in syscheck configuration.\n' '2022/02/02 21:17:55 wazuh-syscheckd[8543] main.c:118 at main(): ' 'INFO: (6678): No directory provided for syscheck to monitor.\n' '2022/02/02 21:17:55 wazuh-syscheckd[8543] main.c:136 at main(): ' 'INFO: (6001): File integrity monitoring disabled.\n' '2022/02/02 21:17:55 rootcheck[8543] rootcheck.c:202 at ' 'rootcheck_init(): INFO: Rootcheck disabled.', 'stderr_lines': ['2022/02/02 21:17:43 wazuh-db[8289] debug_op.c:70 at _log(): ' 'DEBUG: Logging module auto-initialized', '2022/02/02 21:17:43 wazuh-db[8289] main.c:101 at main(): ' 'DEBUG: Wazuh home directory: /var/ossec', '2022/02/02 21:17:44 wazuh-syscheckd[8293] debug_op.c:70 at ' '_log(): DEBUG: Logging module auto-initialized', '2022/02/02 21:17:44 wazuh-syscheckd[8293] config.c:87 at ' 'Read_Syscheck_Config(): DEBUG: (6287): Reading ' "configuration file: 'etc/ossec.conf'", '2022/02/02 21:17:44 wazuh-syscheckd[8293] ' 'syscheck-config.c:122 at organize_syscheck_dirs(): DEBUG: ' 'No directory entries to organize in syscheck configuration.', '2022/02/02 21:17:51 wazuh-integratord: INFO: Remote ' 'integrations not configured. Clean exit.', '2022/02/02 21:17:52 wazuh-db[8373] debug_op.c:70 at _log(): ' 'DEBUG: Logging module auto-initialized', '2022/02/02 21:17:52 wazuh-db[8373] main.c:101 at main(): ' 'DEBUG: Wazuh home directory: /var/ossec', '2022/02/02 21:17:55 wazuh-syscheckd[8543] debug_op.c:70 at ' '_log(): DEBUG: Logging module auto-initialized', '2022/02/02 21:17:55 wazuh-syscheckd[8543] config.c:87 at ' 'Read_Syscheck_Config(): DEBUG: (6287): Reading ' "configuration file: 'etc/ossec.conf'", '2022/02/02 21:17:55 wazuh-syscheckd[8543] ' 'syscheck-config.c:122 at organize_syscheck_dirs(): DEBUG: ' 'No directory entries to organize in syscheck configuration.', '2022/02/02 21:17:55 wazuh-syscheckd[8543] main.c:118 at ' 'main(): INFO: (6678): No directory provided for syscheck to ' 'monitor.', '2022/02/02 21:17:55 wazuh-syscheckd[8543] main.c:136 at ' 'main(): INFO: (6001): File integrity monitoring disabled.', '2022/02/02 21:17:55 rootcheck[8543] rootcheck.c:202 at ' 'rootcheck_init(): INFO: Rootcheck disabled.'], 'stdout': 'Starting Wazuh v4.2.5...\n' 'Started wazuh-apid...\n' 'Started wazuh-csyslogd...\n' 'Started wazuh-dbd...\n' 'Started wazuh-integratord...\n' 'Started wazuh-agentlessd...\n' 'Started wazuh-authd...\n' 'Started wazuh-db...\n' 'Started wazuh-execd...\n' 'Started wazuh-analysisd...\n' 'Started wazuh-syscheckd...\n' 'Started wazuh-remoted...\n' 'Started wazuh-logcollector...\n' 'Started wazuh-monitord...\n' 'Started wazuh-modulesd...\n' 'Started wazuh-clusterd...\n' 'Completed.', 'stdout_lines': ['Starting Wazuh v4.2.5...', 'Started wazuh-apid...', 'Started wazuh-csyslogd...', 'Started wazuh-dbd...', 'Started wazuh-integratord...', 'Started wazuh-agentlessd...', 'Started wazuh-authd...', 'Started wazuh-db...', 'Started wazuh-execd...', 'Started wazuh-analysisd...', 'Started wazuh-syscheckd...', 'Started wazuh-remoted...', 'Started wazuh-logcollector...', 'Started wazuh-monitord...', 'Started wazuh-modulesd...', 'Started wazuh-clusterd...', 'Completed.']} DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:1006 Cleaning temporal files... DEBUG wazuh_testing:monitoring.py:995 Checking results... DEBUG wazuh_testing:monitoring.py:1001 Received from wazuh-manager the expected message: 2022/02/02 21:17:55 wazuh-syscheckd[8543] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. DEBUG testinfra:base.py:277 RUN CommandResult(command=b"ansible --tree /tmp/tmp_usc3gne -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m command --args 'rm -rf testdir1' wazuh-agent1", exit_status=0, stdout=b'wazuh-agent1 | CHANGED | rc=0 >>\n\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('command', 'rm -rf testdir1', {'check': False, 'become': False}): {'changed': True, 'cmd': ['rm', '-rf', 'testdir1'], 'delta': '0:00:00.826481', 'end': '2022-02-02 21:18:08.225206', 'msg': '', 'rc': 0, 'start': '2022-02-02 21:18:07.398725', 'stderr': '', 'stderr_lines': [], 'stdout': '', 'stdout_lines': []} | |||
| Passed | test_synchronization.py::test_Synchronization_create_file_agent_stopped[testdir1-modify-wazuh-agent1] | 61.47 | |
|
------------------------------Captured stderr call------------------------------ 2022-02-02 17:18:29,919 - wazuh_testing - DEBUG - Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-02 17:18:29,921 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-02 17:18:29,922 - wazuh_testing - DEBUG - Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-02 17:18:29,923 - wazuh_testing - DEBUG - Starting file composer for wazuh-agent1 and path: /var/ossec/logs/ossec.log. Composite file in /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-agent1_ossec.log.tmp 2022-02-02 17:18:29,925 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-agent1 and message: .*Sending integrity control message: (.+)$ 2022-02-02 17:18:29,925 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-02 17:18:29,927 - wazuh_testing - DEBUG - Starting file composer for wazuh-manager and path: /var/ossec/logs/ossec.log. Composite file in /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-manager_ossec.log.tmp 2022-02-02 17:18:29,929 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-manager and message: .*Agent 001 query: (.+) save2 2022-02-02 17:18:31,927 - wazuh_testing - DEBUG - 2022/02/02 21:17:28 wazuh-agentd: ERROR: (1137): Lost connection with manager. Setting lock. 2022-02-02 17:18:31,928 - wazuh_testing - DEBUG - 2022/02/02 21:17:28 wazuh-agentd: INFO: Closing connection to server (wazuh-manager/172.18.0.2:1514/tcp). 2022-02-02 17:18:31,928 - wazuh_testing - DEBUG - 2022/02/02 21:17:28 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.18.0.2:1514/tcp). 2022-02-02 17:18:31,928 - wazuh_testing - DEBUG - 2022/02/02 21:17:28 wazuh-agentd: ERROR: (1216): Unable to connect to '172.18.0.2:1514/tcp': 'Connection refused'. 2022-02-02 17:18:31,929 - wazuh_testing - DEBUG - 2022/02/02 21:17:28 wazuh-syscheckd[12289] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-02 17:18:31,929 - wazuh_testing - DEBUG - 2022/02/02 21:17:28 wazuh-syscheckd[12289] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1643833048}} 2022-02-02 17:18:31,930 - wazuh_testing - DEBUG - 2022/02/02 21:17:28 wazuh-syscheckd[12289] wait_op.c:101 at os_wait(): WARNING: Process locked due to agent is offline. Waiting for connection... 2022-02-02 17:18:31,930 - wazuh_testing - DEBUG - 2022/02/02 21:17:38 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.18.0.2:1514/tcp). 2022-02-02 17:18:31,930 - wazuh_testing - DEBUG - 2022/02/02 21:17:38 wazuh-agentd: ERROR: (1216): Unable to connect to '172.18.0.2:1514/tcp': 'Connection refused'. 2022-02-02 17:18:31,930 - wazuh_testing - DEBUG - 2022/02/02 21:17:48 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.18.0.2:1514/tcp). 2022-02-02 17:18:31,931 - wazuh_testing - DEBUG - 2022/02/02 21:17:48 wazuh-agentd: ERROR: (1216): Unable to connect to '172.18.0.2:1514/tcp': 'Connection refused'. 2022-02-02 17:18:31,931 - wazuh_testing - DEBUG - 2022/02/02 21:17:58 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.18.0.2:1514/tcp). 2022-02-02 17:18:31,931 - wazuh_testing - DEBUG - 2022/02/02 21:17:58 wazuh-agentd: INFO: (4102): Connected to the server (wazuh-manager/172.18.0.2:1514/tcp). 2022-02-02 17:18:31,932 - wazuh_testing - DEBUG - 2022/02/02 21:17:58 wazuh-agentd: INFO: Server responded. Releasing lock. 2022-02-02 17:18:31,932 - wazuh_testing - DEBUG - 2022/02/02 21:17:20 wazuh-db[7352] wdb.c:918 at wdb_commit_old(): DEBUG: Agent '001' database commited. Time: 3.774 ms. 2022-02-02 17:18:31,932 - wazuh_testing - DEBUG - 2022/02/02 21:17:58 wazuh-syscheckd[12289] wait_op.c:116 at os_wait(): INFO: Agent is now online. Process unlocked, continuing... 2022-02-02 17:18:31,933 - wazuh_testing - DEBUG - 2022/02/02 21:17:58 wazuh-syscheckd[12289] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-02 17:18:31,933 - wazuh_testing - DEBUG - 2022/02/02 21:17:25 wazuh-db[7352] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.18.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.18.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.13.0-27-generic |#29~20.04.1-Ubuntu SMP Fri Jan 14 00:32:30 UTC 2022 |x86_64","os_arch":"x86_64"} 2022-02-02 17:18:31,933 - wazuh_testing - DEBUG - 2022/02/02 21:17:58 wazuh-syscheckd[12289] fim_db.c:436 at fim_db_check_transaction(): DEBUG: Database transaction completed. 2022-02-02 17:18:31,934 - wazuh_testing - DEBUG - 2022/02/02 21:17:28 wazuh-modulesd:syscollector: INFO: Stop received for Syscollector. 2022-02-02 17:18:31,934 - wazuh_testing - DEBUG - 2022/02/02 21:17:59 wazuh-syscheckd[12289] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-02 17:18:31,934 - wazuh_testing - DEBUG - 2022/02/02 21:17:28 wazuh-db[7352] main.c:352 at run_worker(): DEBUG: Client 13 disconnected. 2022-02-02 17:18:31,934 - wazuh_testing - DEBUG - 2022/02/02 21:17:59 wazuh-syscheckd[12289] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-02 17:18:31,934 - wazuh_testing - DEBUG - 2022/02/02 21:17:28 wazuh-monitord: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:18:31,934 - wazuh_testing - DEBUG - 2022/02/02 21:17:28 wazuh-logcollector: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:18:31,935 - wazuh_testing - DEBUG - 2022/02/02 21:17:28 wazuh-remoted: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:18:31,935 - wazuh_testing - DEBUG - 2022/02/02 21:17:28 wazuh-db[7352] main.c:352 at run_worker(): DEBUG: Client 41 disconnected. 2022-02-02 17:18:31,936 - wazuh_testing - DEBUG - 2022/02/02 21:17:28 wazuh-db[7352] main.c:352 at run_worker(): DEBUG: Client 23 disconnected. 2022-02-02 17:18:31,936 - wazuh_testing - DEBUG - 2022/02/02 21:17:28 wazuh-db[7352] main.c:352 at run_worker(): DEBUG: Client 16 disconnected. 2022-02-02 17:18:31,936 - wazuh_testing - DEBUG - 2022/02/02 21:17:59 wazuh-syscheckd[12289] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"event","data":{"path":"/testdir1/testdir1.txt","version":2,"mode":"scheduled","type":"modified","timestamp":1643833079,"attributes":{"type":"file","size":0,"perm":"rw-r--r--","uid":"0","gid":"0","user_name":"root","group_name":"root","inode":7236683,"mtime":1643833054,"hash_md5":"d41d8cd98f00b204e9800998ecf8427e","hash_sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","hash_sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","checksum":"640cb2f2b67c8492d8f17bffe40f7710fdfb8ef1"},"changed_attributes":["mtime"],"old_attributes":{"type":"file","size":0,"perm":"rw-r--r--","uid":"0","gid":"0","user_name":"root","group_name":"root","inode":7236683,"mtime":1643833017,"hash_md5":"d41d8cd98f00b204e9800998ecf8427e","hash_sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","hash_sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","checksum":"2ca10d237ed1a5f0cb32d2c72db09a17a55662e5"}}} 2022-02-02 17:18:31,936 - wazuh_testing - DEBUG - 2022/02/02 21:17:28 wazuh-db[7352] main.c:352 at run_worker(): DEBUG: Client 18 disconnected. 2022-02-02 17:18:31,936 - wazuh_testing - DEBUG - 2022/02/02 21:17:59 wazuh-syscheckd[12289] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-02 17:18:31,936 - wazuh_testing - DEBUG - 2022/02/02 21:17:28 wazuh-syscheckd[7398] sig_op.c:49 at HandleSIG(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:18:31,936 - wazuh_testing - DEBUG - 2022/02/02 21:17:59 wazuh-syscheckd[12289] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-02 17:18:31,936 - wazuh_testing - DEBUG - 2022/02/02 21:17:28 wazuh-analysisd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:18:31,937 - wazuh_testing - DEBUG - 2022/02/02 21:18:00 wazuh-syscheckd[12289] fim_db.c:436 at fim_db_check_transaction(): DEBUG: Database transaction completed. 2022-02-02 17:18:31,937 - wazuh_testing - DEBUG - 2022/02/02 21:17:28 wazuh-db[7352] main.c:352 at run_worker(): DEBUG: Client 46 disconnected. 2022-02-02 17:18:31,937 - wazuh_testing - DEBUG - 2022/02/02 21:17:28 wazuh-db[7352] main.c:352 at run_worker(): DEBUG: Client 44 disconnected. 2022-02-02 17:18:31,937 - wazuh_testing - DEBUG - 2022/02/02 21:18:00 wazuh-syscheckd[12289] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-02 17:18:31,937 - wazuh_testing - DEBUG - 2022/02/02 21:17:28 wazuh-db[7352] main.c:352 at run_worker(): DEBUG: Client 42 disconnected. 2022-02-02 17:18:31,937 - wazuh_testing - DEBUG - 2022/02/02 21:18:00 wazuh-syscheckd[12289] create_db.c:220 at fim_scan(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-02 17:18:31,937 - wazuh_testing - DEBUG - 2022/02/02 21:17:28 wazuh-db[7352] main.c:352 at run_worker(): DEBUG: Client 40 disconnected. 2022-02-02 17:18:31,937 - wazuh_testing - DEBUG - 2022/02/02 21:18:00 wazuh-syscheckd[12289] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-02 17:18:31,937 - wazuh_testing - DEBUG - 2022/02/02 21:17:28 wazuh-db[7352] main.c:352 at run_worker(): DEBUG: Client 43 disconnected. 2022-02-02 17:18:31,937 - wazuh_testing - DEBUG - 2022/02/02 21:18:00 wazuh-syscheckd[12289] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1643833080}} 2022-02-02 17:18:31,937 - wazuh_testing - DEBUG - 2022/02/02 21:17:28 wazuh-db[7352] main.c:352 at run_worker(): DEBUG: Client 39 disconnected. 2022-02-02 17:18:31,937 - wazuh_testing - DEBUG - 2022/02/02 21:18:00 wazuh-syscheckd[12289] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 31.357 sec (1.346 clock sec) 2022-02-02 17:18:31,938 - wazuh_testing - DEBUG - 2022/02/02 21:17:28 wazuh-db[7352] main.c:352 at run_worker(): DEBUG: Client 38 disconnected. 2022-02-02 17:18:31,938 - wazuh_testing - DEBUG - 2022/02/02 21:18:00 wazuh-syscheckd[12289] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1621, path count: 1627 2022-02-02 17:18:31,938 - wazuh_testing - DEBUG - 2022/02/02 21:17:28 wazuh-db[7352] main.c:352 at run_worker(): DEBUG: Client 34 disconnected. 2022-02-02 17:18:31,938 - wazuh_testing - DEBUG - 2022/02/02 21:18:21 wazuh-syscheckd[12289] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-02 17:18:31,938 - wazuh_testing - DEBUG - 2022/02/02 21:17:28 wazuh-db[7352] main.c:352 at run_worker(): DEBUG: Client 36 disconnected. 2022-02-02 17:18:31,938 - wazuh_testing - DEBUG - 2022/02/02 21:18:21 wazuh-syscheckd[12289] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1643833101}} 2022-02-02 17:18:31,938 - wazuh_testing - DEBUG - 2022/02/02 21:17:28 wazuh-db[7352] main.c:352 at run_worker(): DEBUG: Client 30 disconnected. 2022-02-02 17:18:31,938 - wazuh_testing - DEBUG - 2022/02/02 21:18:21 wazuh-syscheckd[12289] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-02 17:18:31,938 - wazuh_testing - DEBUG - 2022/02/02 21:17:28 wazuh-db[7352] main.c:352 at run_worker(): DEBUG: Client 33 disconnected. 2022-02-02 17:18:31,938 - wazuh_testing - DEBUG - 2022/02/02 21:17:28 wazuh-db[7352] main.c:352 at run_worker(): DEBUG: Client 28 disconnected. 2022-02-02 17:18:31,938 - wazuh_testing - DEBUG - 2022/02/02 21:18:21 wazuh-syscheckd[12289] fim_db.c:436 at fim_db_check_transaction(): DEBUG: Database transaction completed. 2022-02-02 17:18:31,939 - wazuh_testing - DEBUG - 2022/02/02 21:17:28 wazuh-db[7352] main.c:352 at run_worker(): DEBUG: Client 27 disconnected. 2022-02-02 17:18:31,939 - wazuh_testing - DEBUG - 2022/02/02 21:18:21 wazuh-syscheckd[12289] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-02 17:18:31,939 - wazuh_testing - DEBUG - 2022/02/02 21:17:28 wazuh-db[7352] main.c:352 at run_worker(): DEBUG: Client 32 disconnected. 2022-02-02 17:18:31,939 - wazuh_testing - DEBUG - 2022/02/02 21:18:21 wazuh-syscheckd[12289] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-02 17:18:31,939 - wazuh_testing - DEBUG - 2022/02/02 21:17:28 wazuh-db[7352] main.c:352 at run_worker(): DEBUG: Client 24 disconnected. 2022-02-02 17:18:31,939 - wazuh_testing - DEBUG - 2022/02/02 21:18:21 wazuh-syscheckd[12289] fim_db.c:436 at fim_db_check_transaction(): DEBUG: Database transaction completed. 2022-02-02 17:18:31,939 - wazuh_testing - DEBUG - 2022/02/02 21:17:28 wazuh-db[7352] main.c:352 at run_worker(): DEBUG: Client 29 disconnected. 2022-02-02 17:18:31,939 - wazuh_testing - DEBUG - 2022/02/02 21:17:28 wazuh-db[7352] main.c:352 at run_worker(): DEBUG: Client 22 disconnected. 2022-02-02 17:18:31,939 - wazuh_testing - DEBUG - 2022/02/02 21:17:28 wazuh-db[7352] main.c:352 at run_worker(): DEBUG: Client 31 disconnected. 2022-02-02 17:18:31,940 - wazuh_testing - DEBUG - 2022/02/02 21:17:28 wazuh-db[7352] main.c:352 at run_worker(): DEBUG: Client 20 disconnected. 2022-02-02 17:18:31,940 - wazuh_testing - DEBUG - 2022/02/02 21:17:28 wazuh-db[7352] main.c:352 at run_worker(): DEBUG: Client 12 disconnected. 2022-02-02 17:18:31,940 - wazuh_testing - DEBUG - 2022/02/02 21:18:21 wazuh-syscheckd[12289] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"event","data":{"path":"/testdir1/testdir1.txt","version":2,"mode":"scheduled","type":"modified","timestamp":1643833101,"attributes":{"type":"file","size":0,"perm":"rw-r--r--","uid":"0","gid":"0","user_name":"root","group_name":"root","inode":7239398,"mtime":1643833094,"hash_md5":"d41d8cd98f00b204e9800998ecf8427e","hash_sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","hash_sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","checksum":"7f28abd3ed6f18cfa6ff33b1a60f6991dd240a09"},"changed_attributes":["mtime","inode"],"old_attributes":{"type":"file","size":0,"perm":"rw-r--r--","uid":"0","gid":"0","user_name":"root","group_name":"root","inode":7236683,"mtime":1643833054,"hash_md5":"d41d8cd98f00b204e9800998ecf8427e","hash_sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","hash_sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","checksum":"640cb2f2b67c8492d8f17bffe40f7710fdfb8ef1"}}} 2022-02-02 17:18:31,940 - wazuh_testing - DEBUG - 2022/02/02 21:17:28 wazuh-db[7352] main.c:352 at run_worker(): DEBUG: Client 35 disconnected. 2022-02-02 17:18:31,940 - wazuh_testing - DEBUG - 2022/02/02 21:18:21 wazuh-syscheckd[12289] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-02 17:18:31,940 - wazuh_testing - DEBUG - 2022/02/02 21:17:28 wazuh-db[7352] main.c:352 at run_worker(): DEBUG: Client 11 disconnected. 2022-02-02 17:18:31,940 - wazuh_testing - DEBUG - 2022/02/02 21:18:21 wazuh-syscheckd[12289] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-02 17:18:31,940 - wazuh_testing - DEBUG - 2022/02/02 21:17:28 wazuh-db[7352] main.c:352 at run_worker(): DEBUG: Client 21 disconnected. 2022-02-02 17:18:31,941 - wazuh_testing - DEBUG - 2022/02/02 21:18:22 wazuh-logcollector: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:18:31,941 - wazuh_testing - DEBUG - 2022/02/02 21:17:28 wazuh-db[7352] main.c:352 at run_worker(): DEBUG: Client 26 disconnected. 2022-02-02 17:18:31,941 - wazuh_testing - DEBUG - 2022/02/02 21:17:28 wazuh-db[7352] main.c:352 at run_worker(): DEBUG: Client 25 disconnected. 2022-02-02 17:18:31,941 - wazuh_testing - DEBUG - 2022/02/02 21:18:22 wazuh-syscheckd[12289] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-02 17:18:31,941 - wazuh_testing - DEBUG - 2022/02/02 21:17:28 wazuh-db[7352] main.c:352 at run_worker(): DEBUG: Client 19 disconnected. 2022-02-02 17:18:31,941 - wazuh_testing - DEBUG - 2022/02/02 21:18:22 wazuh-syscheckd[12289] create_db.c:220 at fim_scan(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-02 17:18:31,941 - wazuh_testing - DEBUG - 2022/02/02 21:17:28 wazuh-db[7352] main.c:352 at run_worker(): DEBUG: Client 10 disconnected. 2022-02-02 17:18:31,941 - wazuh_testing - DEBUG - 2022/02/02 21:18:22 wazuh-syscheckd[12289] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-02 17:18:31,941 - wazuh_testing - DEBUG - 2022/02/02 21:17:28 wazuh-db[7352] main.c:352 at run_worker(): DEBUG: Client 37 disconnected. 2022-02-02 17:18:31,942 - wazuh_testing - DEBUG - 2022/02/02 21:18:22 wazuh-syscheckd[12289] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1643833102}} 2022-02-02 17:18:31,942 - wazuh_testing - DEBUG - 2022/02/02 21:17:28 wazuh-db[7352] main.c:352 at run_worker(): DEBUG: Client 6 disconnected. 2022-02-02 17:18:31,942 - wazuh_testing - DEBUG - 2022/02/02 21:18:22 wazuh-syscheckd[12289] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 1.090 sec (1.082 clock sec) 2022-02-02 17:18:31,942 - wazuh_testing - DEBUG - 2022/02/02 21:17:29 wazuh-execd: INFO: (1314): Shutdown received. Deleting responses. 2022-02-02 17:18:31,942 - wazuh_testing - DEBUG - 2022/02/02 21:18:22 wazuh-syscheckd[12289] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1621, path count: 1627 2022-02-02 17:18:31,942 - wazuh_testing - DEBUG - 2022/02/02 21:17:29 wazuh-execd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:18:31,942 - wazuh_testing - DEBUG - 2022/02/02 21:18:22 wazuh-syscheckd[12289] sig_op.c:49 at HandleSIG(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:18:31,943 - wazuh_testing - DEBUG - 2022/02/02 21:17:29 wazuh-db[7352] main.c:468 at handler(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:18:31,943 - wazuh_testing - DEBUG - 2022/02/02 21:18:22 wazuh-agentd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:18:31,943 - wazuh_testing - DEBUG - 2022/02/02 21:17:29 wazuh-db[7352] wdb.c:872 at wdb_close_all(): DEBUG: Closing all databases... 2022-02-02 17:18:31,943 - wazuh_testing - DEBUG - 2022/02/02 21:18:22 wazuh-execd: INFO: (1314): Shutdown received. Deleting responses. 2022-02-02 17:18:31,943 - wazuh_testing - DEBUG - 2022/02/02 21:17:29 wazuh-db[7352] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent 001 2022-02-02 17:18:31,943 - wazuh_testing - DEBUG - 2022/02/02 21:18:22 wazuh-execd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:18:31,943 - wazuh_testing - DEBUG - 2022/02/02 21:18:23 wazuh-syscheckd[12904] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-02 17:18:31,943 - wazuh_testing - DEBUG - 2022/02/02 21:17:29 wazuh-db[7352] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent 000 2022-02-02 17:18:31,944 - wazuh_testing - DEBUG - 2022/02/02 21:18:23 wazuh-syscheckd[12904] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-02 17:18:31,944 - wazuh_testing - DEBUG - 2022/02/02 21:17:29 wazuh-db[7352] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent mitre 2022-02-02 17:18:31,944 - wazuh_testing - DEBUG - 2022/02/02 21:18:23 wazuh-syscheckd[12904] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-02 17:18:31,944 - wazuh_testing - DEBUG - 2022/02/02 21:18:23 wazuh-syscheckd[12904] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-02 17:18:31,944 - wazuh_testing - DEBUG - 2022/02/02 21:17:29 wazuh-db[7352] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent global 2022-02-02 17:18:31,944 - wazuh_testing - DEBUG - 2022/02/02 21:18:23 wazuh-syscheckd[12904] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-02 17:18:31,944 - wazuh_testing - DEBUG - 2022/02/02 21:17:30 wazuh-db[7352] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent tasks 2022-02-02 17:18:31,945 - wazuh_testing - DEBUG - 2022/02/02 21:17:30 wazuh-db[7352] main.c:231 at main(): DEBUG: Template file removed again: queue/db/.template.db 2022-02-02 17:18:31,945 - wazuh_testing - DEBUG - 2022/02/02 21:18:23 wazuh-syscheckd[12904] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-02 17:18:31,945 - wazuh_testing - DEBUG - 2022/02/02 21:17:30 wazuh-authd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:18:31,945 - wazuh_testing - DEBUG - 2022/02/02 21:17:31 wazuh-authd: INFO: Exiting... 2022-02-02 17:18:31,945 - wazuh_testing - DEBUG - 2022/02/02 21:18:23 wazuh-syscheckd[12904] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-02 17:18:31,945 - wazuh_testing - DEBUG - 2022/02/02 21:17:43 wazuh-db[8289] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-02 17:18:31,945 - wazuh_testing - DEBUG - 2022/02/02 21:17:43 wazuh-db[8289] main.c:101 at main(): DEBUG: Wazuh home directory: /var/ossec 2022-02-02 17:18:31,945 - wazuh_testing - DEBUG - 2022/02/02 21:18:23 wazuh-syscheckd[12904] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ 2022-02-02 17:18:31,946 - wazuh_testing - DEBUG - 2022/02/02 21:17:44 wazuh-syscheckd[8293] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-02 17:18:31,946 - wazuh_testing - DEBUG - 2022/02/02 21:18:23 wazuh-syscheckd[12904] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ OK? 2022-02-02 17:18:31,946 - wazuh_testing - DEBUG - 2022/02/02 21:17:44 wazuh-syscheckd[8293] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-02 17:18:31,946 - wazuh_testing - DEBUG - 2022/02/02 21:17:44 wazuh-syscheckd[8293] syscheck-config.c:122 at organize_syscheck_dirs(): DEBUG: No directory entries to organize in syscheck configuration. 2022-02-02 17:18:31,946 - wazuh_testing - DEBUG - 2022/02/02 21:18:23 wazuh-syscheckd[12904] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-02 17:18:31,946 - wazuh_testing - DEBUG - 2022/02/02 21:17:51 wazuh-csyslogd: INFO: Remote syslog server not configured. Clean exit. 2022-02-02 17:18:31,946 - wazuh_testing - DEBUG - 2022/02/02 21:17:51 wazuh-dbd: INFO: Database not configured. Clean exit. 2022-02-02 17:18:31,947 - wazuh_testing - DEBUG - 2022/02/02 21:18:23 wazuh-syscheckd[12904] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-02 17:18:31,947 - wazuh_testing - DEBUG - 2022/02/02 21:17:51 wazuh-integratord: INFO: Remote integrations not configured. Clean exit. 2022-02-02 17:18:31,947 - wazuh_testing - DEBUG - 2022/02/02 21:17:51 wazuh-agentlessd: INFO: Not configured. Exiting. 2022-02-02 17:18:31,947 - wazuh_testing - DEBUG - 2022/02/02 21:18:23 wazuh-syscheckd[12904] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-02 17:18:31,947 - wazuh_testing - DEBUG - 2022/02/02 21:17:51 wazuh-authd: INFO: Started (pid: 8359). 2022-02-02 17:18:31,947 - wazuh_testing - DEBUG - 2022/02/02 21:18:23 wazuh-syscheckd[12904] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-02 17:18:31,947 - wazuh_testing - DEBUG - 2022/02/02 21:17:51 wazuh-authd: INFO: Accepting connections on port 1515. No password required. 2022-02-02 17:18:31,948 - wazuh_testing - DEBUG - 2022/02/02 21:17:51 wazuh-authd: INFO: Setting network timeout to 1.000000 sec. 2022-02-02 17:18:31,948 - wazuh_testing - DEBUG - 2022/02/02 21:18:23 wazuh-syscheckd[12904] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-02 17:18:31,948 - wazuh_testing - DEBUG - 2022/02/02 21:17:52 wazuh-db[8373] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-02 17:18:31,948 - wazuh_testing - DEBUG - 2022/02/02 21:17:52 wazuh-db[8373] main.c:101 at main(): DEBUG: Wazuh home directory: /var/ossec 2022-02-02 17:18:31,948 - wazuh_testing - DEBUG - 2022/02/02 21:17:52 wazuh-db[8373] main.c:122 at main(): DEBUG: Template file removed: /var/ossec/queue/db/.template.db 2022-02-02 17:18:31,948 - wazuh_testing - DEBUG - 2022/02/02 21:18:23 wazuh-syscheckd[12904] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-02 17:18:31,949 - wazuh_testing - DEBUG - 2022/02/02 21:17:52 wazuh-db[8373] main.c:178 at main(): INFO: Started (pid: 8375). 2022-02-02 17:18:31,949 - wazuh_testing - DEBUG - 2022/02/02 21:18:23 wazuh-syscheckd[12904] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-02 17:18:31,949 - wazuh_testing - DEBUG - 2022/02/02 21:17:53 wazuh-execd: INFO: (1350): Active response disabled. 2022-02-02 17:18:31,949 - wazuh_testing - DEBUG - 2022/02/02 21:18:23 wazuh-syscheckd[12904] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-02 17:18:31,949 - wazuh_testing - DEBUG - 2022/02/02 21:17:53 wazuh-execd: INFO: Started (pid: 8398). 2022-02-02 17:18:31,949 - wazuh_testing - DEBUG - 2022/02/02 21:18:23 wazuh-execd: INFO: Started (pid: 12917). 2022-02-02 17:18:31,949 - wazuh_testing - DEBUG - 2022/02/02 21:17:54 wazuh-analysisd: INFO: Total rules enabled: '3882' 2022-02-02 17:18:31,949 - wazuh_testing - DEBUG - 2022/02/02 21:18:24 wazuh-agentd: INFO: (1410): Reading authentication keys file. 2022-02-02 17:18:31,950 - wazuh_testing - DEBUG - 2022/02/02 21:17:55 wazuh-analysisd: INFO: Started (pid: 8412). 2022-02-02 17:18:31,950 - wazuh_testing - DEBUG - 2022/02/02 21:18:24 wazuh-agentd: INFO: Using notify time: 10 and max time to reconnect: 60 2022-02-02 17:18:31,950 - wazuh_testing - DEBUG - 2022/02/02 21:17:55 wazuh-db[8373] main.c:290 at run_dealer(): DEBUG: New client connected (6). 2022-02-02 17:18:31,950 - wazuh_testing - DEBUG - 2022/02/02 21:18:24 wazuh-agentd: INFO: Version detected -> Linux |wazuh-agent1 |5.13.0-27-generic |#29~20.04.1-Ubuntu SMP Fri Jan 14 00:32:30 UTC 2022 |x86_64 [Debian GNU/Linux|debian: 10 (buster)] - Wazuh v4.2.5 2022-02-02 17:18:31,950 - wazuh_testing - DEBUG - 2022/02/02 21:17:55 wazuh-analysisd: INFO: (7200): Logtest started 2022-02-02 17:18:31,950 - wazuh_testing - DEBUG - 2022/02/02 21:18:24 wazuh-agentd: INFO: Started (pid: 12928). 2022-02-02 17:18:31,950 - wazuh_testing - DEBUG - 2022/02/02 21:17:55 wazuh-syscheckd[8543] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-02 17:18:31,950 - wazuh_testing - DEBUG - 2022/02/02 21:18:24 wazuh-agentd: INFO: Server IP Address: wazuh-manager/172.18.0.2 2022-02-02 17:18:31,951 - wazuh_testing - DEBUG - 2022/02/02 21:18:24 wazuh-agentd: INFO: Using AES as encryption method. 2022-02-02 17:18:31,951 - wazuh_testing - DEBUG - 2022/02/02 21:17:55 wazuh-syscheckd[8543] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-02 17:18:31,951 - wazuh_testing - DEBUG - 2022/02/02 21:18:24 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.18.0.2:1514/tcp). 2022-02-02 17:18:31,951 - wazuh_testing - DEBUG - 2022/02/02 21:17:55 wazuh-syscheckd[8543] syscheck-config.c:122 at organize_syscheck_dirs(): DEBUG: No directory entries to organize in syscheck configuration. 2022-02-02 17:18:31,951 - wazuh_testing - DEBUG - 2022/02/02 21:18:24 wazuh-agentd: INFO: (4102): Connected to the server (wazuh-manager/172.18.0.2:1514/tcp). 2022-02-02 17:18:31,951 - wazuh_testing - DEBUG - 2022/02/02 21:17:55 wazuh-syscheckd[8543] main.c:118 at main(): INFO: (6678): No directory provided for syscheck to monitor. 2022-02-02 17:18:31,951 - wazuh_testing - DEBUG - 2022/02/02 21:18:25 wazuh-syscheckd[12940] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-02 17:18:31,951 - wazuh_testing - DEBUG - 2022/02/02 21:17:55 wazuh-syscheckd[8543] main.c:136 at main(): INFO: (6001): File integrity monitoring disabled. 2022-02-02 17:18:31,951 - wazuh_testing - DEBUG - 2022/02/02 21:18:25 wazuh-syscheckd[12940] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-02 17:18:31,951 - wazuh_testing - DEBUG - 2022/02/02 21:17:55 rootcheck[8543] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled. 2022-02-02 17:18:31,952 - wazuh_testing - DEBUG - 2022/02/02 21:18:25 wazuh-syscheckd[12940] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-02 17:18:31,952 - wazuh_testing - DEBUG - 2022/02/02 21:17:55 wazuh-syscheckd[8543] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:18:31,952 - wazuh_testing - DEBUG - 2022/02/02 21:18:25 wazuh-syscheckd[12940] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-02 17:18:31,952 - wazuh_testing - DEBUG - 2022/02/02 21:17:55 wazuh-syscheckd[8543] syscom.c:123 at syscom_main(): DEBUG: (6284): Local requests thread ready. 2022-02-02 17:18:31,952 - wazuh_testing - DEBUG - 2022/02/02 21:18:25 wazuh-syscheckd[12940] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-02 17:18:31,952 - wazuh_testing - DEBUG - 2022/02/02 21:17:55 wazuh-syscheckd[8543] mq_op.c:47 at StartMQ(): DEBUG: Connected succesfully to 'queue/sockets/queue' after 0 attempts 2022-02-02 17:18:31,952 - wazuh_testing - DEBUG - 2022/02/02 21:18:25 wazuh-syscheckd[12940] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-02 17:18:31,953 - wazuh_testing - DEBUG - 2022/02/02 21:18:25 wazuh-syscheckd[12940] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-02 17:18:31,953 - wazuh_testing - DEBUG - 2022/02/02 21:17:55 wazuh-syscheckd[8543] mq_op.c:48 at StartMQ(): DEBUG: (unix_domain) Maximum send buffer set to: '212992'. 2022-02-02 17:18:31,953 - wazuh_testing - DEBUG - 2022/02/02 21:18:25 wazuh-syscheckd[12940] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ 2022-02-02 17:18:31,953 - wazuh_testing - DEBUG - 2022/02/02 21:18:25 wazuh-syscheckd[12940] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ OK? 2022-02-02 17:18:31,953 - wazuh_testing - DEBUG - 2022/02/02 21:18:25 wazuh-syscheckd[12940] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-02 17:18:31,953 - wazuh_testing - DEBUG - 2022/02/02 21:17:55 wazuh-syscheckd[8543] main.c:185 at main(): INFO: Started (pid: 8545). 2022-02-02 17:18:31,954 - wazuh_testing - DEBUG - 2022/02/02 21:18:25 wazuh-syscheckd[12940] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-02 17:18:31,954 - wazuh_testing - DEBUG - 2022/02/02 21:18:25 wazuh-syscheckd[12940] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-02 17:18:31,954 - wazuh_testing - DEBUG - 2022/02/02 21:17:55 wazuh-syscheckd[8543] main.c:215 at main(): DEBUG: (6357): Maximum disk quota size limit configured to '1048576 KB'. 2022-02-02 17:18:31,954 - wazuh_testing - DEBUG - 2022/02/02 21:18:25 wazuh-syscheckd[12940] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-02 17:18:31,955 - wazuh_testing - DEBUG - 2022/02/02 21:18:25 wazuh-syscheckd[12940] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-02 17:18:31,955 - wazuh_testing - DEBUG - 2022/02/02 21:17:55 wazuh-syscheckd[8543] run_check.c:194 at start_daemon(): DEBUG: (6320): Setting process priority to: '10' 2022-02-02 17:18:31,956 - wazuh_testing - DEBUG - 2022/02/02 21:18:25 wazuh-syscheckd[12940] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-02 17:18:31,956 - wazuh_testing - DEBUG - 2022/02/02 21:17:55 wazuh-syscheckd[8543] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:18:31,956 - wazuh_testing - DEBUG - 2022/02/02 21:18:25 wazuh-syscheckd[12940] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-02 17:18:31,957 - wazuh_testing - DEBUG - 2022/02/02 21:17:55 wazuh-syscheckd[8543] run_check.c:229 at start_daemon(): INFO: (6000): Starting daemon... 2022-02-02 17:18:31,957 - wazuh_testing - DEBUG - 2022/02/02 21:18:25 wazuh-syscheckd[12940] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-02 17:18:31,957 - wazuh_testing - DEBUG - 2022/02/02 21:17:55 wazuh-syscheckd[8543] run_check.c:232 at start_daemon(): INFO: (6010): File integrity monitoring scan frequency: 43200 seconds 2022-02-02 17:18:31,958 - wazuh_testing - DEBUG - 2022/02/02 21:18:25 rootcheck[12940] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled. 2022-02-02 17:18:31,958 - wazuh_testing - DEBUG - 2022/02/02 21:17:55 wazuh-syscheckd[8543] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-02 17:18:31,958 - wazuh_testing - DEBUG - 2022/02/02 21:18:25 wazuh-syscheckd[12940] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:18:31,958 - wazuh_testing - DEBUG - 2022/02/02 21:17:55 wazuh-syscheckd[8543] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1643833075}} 2022-02-02 17:18:31,959 - wazuh_testing - DEBUG - 2022/02/02 21:18:25 wazuh-syscheckd[12940] syscom.c:123 at syscom_main(): DEBUG: (6284): Local requests thread ready. 2022-02-02 17:18:31,959 - wazuh_testing - DEBUG - 2022/02/02 21:17:55 wazuh-syscheckd[8543] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-02 17:18:31,960 - wazuh_testing - DEBUG - 2022/02/02 21:18:25 wazuh-syscheckd[12940] mq_op.c:47 at StartMQ(): DEBUG: Connected succesfully to 'queue/sockets/queue' after 0 attempts 2022-02-02 17:18:31,960 - wazuh_testing - DEBUG - 2022/02/02 21:17:55 wazuh-db[8373] main.c:290 at run_dealer(): DEBUG: New client connected (10). 2022-02-02 17:18:31,960 - wazuh_testing - DEBUG - 2022/02/02 21:18:25 wazuh-syscheckd[12940] mq_op.c:48 at StartMQ(): DEBUG: (unix_domain) Maximum send buffer set to: '212992'. 2022-02-02 17:18:31,960 - wazuh_testing - DEBUG - 2022/02/02 21:17:55 wazuh-db[8373] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 000 query: syscheck scan_info_update start_scan 1643833075 2022-02-02 17:18:31,961 - wazuh_testing - DEBUG - 2022/02/02 21:18:25 wazuh-syscheckd[12940] main.c:185 at main(): INFO: Started (pid: 12942). 2022-02-02 17:18:31,961 - wazuh_testing - DEBUG - 2022/02/02 21:17:55 wazuh-syscheckd[8543] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-02 17:18:31,961 - wazuh_testing - DEBUG - 2022/02/02 21:17:55 wazuh-syscheckd[8543] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-02 17:18:31,961 - wazuh_testing - DEBUG - 2022/02/02 21:18:25 wazuh-syscheckd[12940] main.c:193 at main(): INFO: (6003): Monitoring path: '/bin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:18:31,962 - wazuh_testing - DEBUG - 2022/02/02 21:17:55 wazuh-syscheckd[8543] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1643833075}} 2022-02-02 17:18:31,962 - wazuh_testing - DEBUG - 2022/02/02 21:18:25 wazuh-syscheckd[12940] main.c:193 at main(): INFO: (6003): Monitoring path: '/boot', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:18:31,962 - wazuh_testing - DEBUG - 2022/02/02 21:17:55 wazuh-syscheckd[8543] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.000 sec (0.000 clock sec) 2022-02-02 17:18:31,963 - wazuh_testing - DEBUG - 2022/02/02 21:17:55 wazuh-syscheckd[8543] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 0, path count: 0 2022-02-02 17:18:31,963 - wazuh_testing - DEBUG - 2022/02/02 21:18:25 wazuh-syscheckd[12940] main.c:193 at main(): INFO: (6003): Monitoring path: '/etc', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:18:31,963 - wazuh_testing - DEBUG - 2022/02/02 21:17:55 wazuh-db[8373] main.c:290 at run_dealer(): DEBUG: New client connected (12). 2022-02-02 17:18:31,963 - wazuh_testing - DEBUG - 2022/02/02 21:18:25 wazuh-syscheckd[12940] main.c:193 at main(): INFO: (6003): Monitoring path: '/sbin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:18:31,964 - wazuh_testing - DEBUG - 2022/02/02 21:17:55 wazuh-syscheckd[8543] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:18:31,964 - wazuh_testing - DEBUG - 2022/02/02 21:18:25 wazuh-syscheckd[12940] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir1', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:18:31,964 - wazuh_testing - DEBUG - 2022/02/02 21:17:55 wazuh-db[8373] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 000 query: syscheck scan_info_update end_scan 1643833075 2022-02-02 17:18:31,965 - wazuh_testing - DEBUG - 2022/02/02 21:17:55 wazuh-syscheckd[8543] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:18:31,965 - wazuh_testing - DEBUG - 2022/02/02 21:18:25 wazuh-syscheckd[12940] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir2', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | realtime'. 2022-02-02 17:18:31,965 - wazuh_testing - DEBUG - 2022/02/02 21:17:55 wazuh-syscheckd[8543] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:18:31,966 - wazuh_testing - DEBUG - 2022/02/02 21:18:25 wazuh-syscheckd[12940] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir3', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | whodata'. 2022-02-02 17:18:31,966 - wazuh_testing - DEBUG - 2022/02/02 21:17:55 wazuh-syscheckd[8543] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. 2022-02-02 17:18:31,966 - wazuh_testing - DEBUG - 2022/02/02 21:18:25 wazuh-syscheckd[12940] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/bin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:18:31,966 - wazuh_testing - DEBUG - 2022/02/02 21:17:55 wazuh-syscheckd[8543] run_check.c:568 at symlink_checker_thread(): DEBUG: (6033): Starting symbolic link updater. Interval '600'. 2022-02-02 17:18:31,967 - wazuh_testing - DEBUG - 2022/02/02 21:17:55 wazuh-syscheckd[8543] run_check.c:82 at fim_send_sync_msg(): DEBUG: (6317): Sending integrity control message: {"component":"fim_file","type":"integrity_clear","data":{"id":1643833075,"version":2}} 2022-02-02 17:18:31,967 - wazuh_testing - DEBUG - 2022/02/02 21:18:25 wazuh-syscheckd[12940] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/sbin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:18:31,968 - wazuh_testing - DEBUG - 2022/02/02 21:17:55 wazuh-syscheckd[8543] fim_sync.c:70 at fim_run_integrity(): DEBUG: Finished calculating FIM integrity. Time: 0.000 seconds. 2022-02-02 17:18:31,968 - wazuh_testing - DEBUG - 2022/02/02 21:18:25 wazuh-syscheckd[12940] main.c:215 at main(): DEBUG: (6357): Maximum disk quota size limit configured to '1048576 KB'. 2022-02-02 17:18:31,969 - wazuh_testing - DEBUG - 2022/02/02 21:17:55 wazuh-db[8373] main.c:290 at run_dealer(): DEBUG: New client connected (13). 2022-02-02 17:18:31,969 - wazuh_testing - DEBUG - 2022/02/02 21:18:25 wazuh-syscheckd[12940] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mtab' 2022-02-02 17:18:31,969 - wazuh_testing - DEBUG - 2022/02/02 21:17:55 wazuh-db[8373] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 000 query: fim_file integrity_clear {"id":1643833075,"version":2} 2022-02-02 17:18:31,969 - wazuh_testing - DEBUG - 2022/02/02 21:18:25 wazuh-syscheckd[12940] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/hosts.deny' 2022-02-02 17:18:31,970 - wazuh_testing - DEBUG - 2022/02/02 21:17:56 wazuh-remoted: INFO: Started (pid: 8564). Listening on port 1514/TCP (secure). 2022-02-02 17:18:31,970 - wazuh_testing - DEBUG - 2022/02/02 21:18:25 wazuh-syscheckd[12940] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mail/statistics' 2022-02-02 17:18:31,970 - wazuh_testing - DEBUG - 2022/02/02 21:17:56 wazuh-db[8373] main.c:290 at run_dealer(): DEBUG: New client connected (11). 2022-02-02 17:18:31,971 - wazuh_testing - DEBUG - 2022/02/02 21:18:25 wazuh-syscheckd[12940] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random-seed' 2022-02-02 17:18:31,971 - wazuh_testing - DEBUG - 2022/02/02 21:17:56 wazuh-db[8373] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: reset-agents-connection synced 2022-02-02 17:18:31,971 - wazuh_testing - DEBUG - 2022/02/02 21:18:25 wazuh-syscheckd[12940] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random.seed' 2022-02-02 17:18:31,972 - wazuh_testing - DEBUG - 2022/02/02 21:17:56 wazuh-db[8373] main.c:352 at run_worker(): DEBUG: Client 11 disconnected. 2022-02-02 17:18:31,972 - wazuh_testing - DEBUG - 2022/02/02 21:18:25 wazuh-syscheckd[12940] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/adjtime' 2022-02-02 17:18:31,972 - wazuh_testing - DEBUG - 2022/02/02 21:17:56 wazuh-remoted: INFO: (1410): Reading authentication keys file. 2022-02-02 17:18:31,973 - wazuh_testing - DEBUG - 2022/02/02 21:18:25 wazuh-syscheckd[12940] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/httpd/logs' 2022-02-02 17:18:31,973 - wazuh_testing - DEBUG - 2022/02/02 21:17:57 wazuh-logcollector: INFO: (1950): Analyzing file: '/var/ossec/logs/active-responses.log'. 2022-02-02 17:18:31,973 - wazuh_testing - DEBUG - 2022/02/02 21:18:25 wazuh-syscheckd[12940] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/utmpx' 2022-02-02 17:18:31,974 - wazuh_testing - DEBUG - 2022/02/02 21:17:57 wazuh-logcollector: INFO: (1950): Analyzing file: '/var/log/dpkg.log'. 2022-02-02 17:18:31,974 - wazuh_testing - DEBUG - 2022/02/02 21:18:25 wazuh-syscheckd[12940] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/wtmpx' 2022-02-02 17:18:31,974 - wazuh_testing - DEBUG - 2022/02/02 21:17:57 wazuh-logcollector: INFO: Started (pid: 8595). 2022-02-02 17:18:31,975 - wazuh_testing - DEBUG - 2022/02/02 21:17:58 wazuh-monitord: INFO: Started (pid: 8614). 2022-02-02 17:18:31,975 - wazuh_testing - DEBUG - 2022/02/02 21:18:25 wazuh-syscheckd[12940] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/cups/certs' 2022-02-02 17:18:31,975 - wazuh_testing - DEBUG - 2022/02/02 21:17:58 wazuh-modulesd: INFO: Started (pid: 8623). 2022-02-02 17:18:31,976 - wazuh_testing - DEBUG - 2022/02/02 21:18:25 wazuh-syscheckd[12940] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/dumpdates' 2022-02-02 17:18:31,976 - wazuh_testing - DEBUG - 2022/02/02 21:17:58 wazuh-modulesd:agent-upgrade: INFO: (8153): Module Agent Upgrade started. 2022-02-02 17:18:31,976 - wazuh_testing - DEBUG - 2022/02/02 21:18:25 wazuh-syscheckd[12940] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/svc/volatile' 2022-02-02 17:18:31,977 - wazuh_testing - DEBUG - 2022/02/02 21:17:58 wazuh-modulesd:ciscat: INFO: Module disabled. Exiting... 2022-02-02 17:18:31,977 - wazuh_testing - DEBUG - 2022/02/02 21:18:25 wazuh-syscheckd[12940] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/security' 2022-02-02 17:18:31,977 - wazuh_testing - DEBUG - 2022/02/02 21:17:58 wazuh-modulesd:osquery: INFO: Module disabled. Exiting... 2022-02-02 17:18:31,978 - wazuh_testing - DEBUG - 2022/02/02 21:18:25 wazuh-syscheckd[12940] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/debug' 2022-02-02 17:18:31,978 - wazuh_testing - DEBUG - 2022/02/02 21:17:58 wazuh-modulesd:syscollector: INFO: Module disabled. Exiting... 2022-02-02 17:18:31,978 - wazuh_testing - DEBUG - 2022/02/02 21:18:25 wazuh-syscheckd[12940] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/dev/core' 2022-02-02 17:18:31,979 - wazuh_testing - DEBUG - 2022/02/02 21:17:58 sca: INFO: Module disabled. Exiting. 2022-02-02 17:18:31,979 - wazuh_testing - DEBUG - 2022/02/02 21:18:25 wazuh-syscheckd[12940] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '^/proc' 2022-02-02 17:18:31,979 - wazuh_testing - DEBUG - 2022/02/02 21:17:58 wazuh-modulesd:database: INFO: Module started. 2022-02-02 17:18:31,980 - wazuh_testing - DEBUG - 2022/02/02 21:18:25 wazuh-syscheckd[12940] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '.log$|.swp$' 2022-02-02 17:18:31,980 - wazuh_testing - DEBUG - 2022/02/02 21:17:58 wazuh-modulesd:download: INFO: Module started. 2022-02-02 17:18:31,980 - wazuh_testing - DEBUG - 2022/02/02 21:18:25 wazuh-syscheckd[12940] main.c:235 at main(): INFO: (6004): No diff for file: '/etc/ssl/private.key' 2022-02-02 17:18:31,981 - wazuh_testing - DEBUG - 2022/02/02 21:18:25 wazuh-syscheckd[12940] main.c:245 at main(): INFO: (6016): Directory set for real time monitoring: '/testdir2'. 2022-02-02 17:18:31,982 - wazuh_testing - DEBUG - 2022/02/02 21:17:58 wazuh-modulesd:control: INFO: Starting control thread. 2022-02-02 17:18:31,982 - wazuh_testing - DEBUG - 2022/02/02 21:18:25 wazuh-syscheckd[12940] syscheck_audit.c:243 at audit_init(): WARNING: (6924): Who-data engine cannot start because Auditd is not running. 2022-02-02 17:18:31,983 - wazuh_testing - DEBUG - 2022/02/02 21:18:25 wazuh-syscheckd[12940] main.c:264 at main(): WARNING: (6913): Who-data engine could not start. Switching who-data to real-time. 2022-02-02 17:18:31,983 - wazuh_testing - DEBUG - 2022/02/02 21:17:58 wazuh-db[8373] main.c:290 at run_dealer(): DEBUG: New client connected (11). 2022-02-02 17:18:31,984 - wazuh_testing - DEBUG - 2022/02/02 21:18:25 wazuh-syscheckd[12940] run_check.c:194 at start_daemon(): DEBUG: (6320): Setting process priority to: '10' 2022-02-02 17:18:31,984 - wazuh_testing - DEBUG - 2022/02/02 21:18:25 wazuh-syscheckd[12940] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:18:31,984 - wazuh_testing - DEBUG - 2022/02/02 21:17:58 wazuh-db[8373] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-name {"id":0,"name":"wazuh-manager"} 2022-02-02 17:18:31,985 - wazuh_testing - DEBUG - 2022/02/02 21:18:25 wazuh-syscheckd[12940] run_check.c:229 at start_daemon(): INFO: (6000): Starting daemon... 2022-02-02 17:18:31,985 - wazuh_testing - DEBUG - 2022/02/02 21:18:25 wazuh-syscheckd[12940] run_check.c:232 at start_daemon(): INFO: (6010): File integrity monitoring scan frequency: 20 seconds 2022-02-02 17:18:31,986 - wazuh_testing - DEBUG - 2022/02/02 21:17:58 wazuh-modulesd:task-manager: INFO: (8200): Module Task Manager started. 2022-02-02 17:18:31,986 - wazuh_testing - DEBUG - 2022/02/02 21:18:25 wazuh-syscheckd[12940] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-02 17:18:31,987 - wazuh_testing - DEBUG - 2022/02/02 21:17:58 wazuh-db[8373] main.c:290 at run_dealer(): DEBUG: New client connected (16). 2022-02-02 17:18:31,987 - wazuh_testing - DEBUG - 2022/02/02 21:18:25 wazuh-syscheckd[12940] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1643833105}} 2022-02-02 17:18:31,987 - wazuh_testing - DEBUG - 2022/02/02 21:17:58 wazuh-db[8373] wdb_parser.c:928 at wdb_parse(): DEBUG: Task query: set_timeout {"now":1643833078,"interval":900} 2022-02-02 17:18:31,987 - wazuh_testing - DEBUG - 2022/02/02 21:18:25 wazuh-syscheckd[12940] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-02 17:18:31,988 - wazuh_testing - DEBUG - 2022/02/02 21:18:25 wazuh-syscheckd[12940] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-02 17:18:31,988 - wazuh_testing - DEBUG - 2022/02/02 21:17:58 wazuh-db[8373] main.c:352 at run_worker(): DEBUG: Client 16 disconnected. 2022-02-02 17:18:31,989 - wazuh_testing - DEBUG - 2022/02/02 21:17:58 wazuh-db[8373] main.c:290 at run_dealer(): DEBUG: New client connected (19). 2022-02-02 17:18:31,989 - wazuh_testing - DEBUG - 2022/02/02 21:18:25 wazuh-syscheckd[12940] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-02 17:18:31,989 - wazuh_testing - DEBUG - 2022/02/02 21:17:58 wazuh-db[8373] wdb_parser.c:928 at wdb_parse(): DEBUG: Task query: delete_old {"timestamp":1643228278} 2022-02-02 17:18:31,989 - wazuh_testing - DEBUG - 2022/02/02 21:17:58 wazuh-db[8373] main.c:352 at run_worker(): DEBUG: Client 19 disconnected. 2022-02-02 17:18:31,989 - wazuh_testing - DEBUG - 2022/02/02 21:18:25 wazuh-syscheckd[12940] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-02 17:18:31,990 - wazuh_testing - DEBUG - 2022/02/02 21:17:58 wazuh-db[8373] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":0,"version":"Wazuh v4.2.5","manager_host":"wazuh-manager","node_name":"wazuh-master","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-manager |5.13.0-27-generic |#29~20.04.1-Ubuntu SMP Fri Jan 14 00:32:30 UTC 2022 |x86_64","os_arch":"x86_64"} 2022-02-02 17:18:31,990 - wazuh_testing - DEBUG - 2022/02/02 21:18:25 wazuh-syscheckd[12940] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-02 17:18:31,990 - wazuh_testing - DEBUG - 2022/02/02 21:17:58 wazuh-db[8373] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: insert-agent {"id":1,"name":"wazuh-agent1","register_ip":"any","internal_key":"1111111111111111111111111111111111111111111111111111111111111111","group":"default","date_add":0} 2022-02-02 17:18:31,991 - wazuh_testing - DEBUG - 2022/02/02 21:17:58 wazuh-db[8373] wdb_global.c:89 at wdb_global_insert_agent(): DEBUG: SQLite: UNIQUE constraint failed: agent.id 2022-02-02 17:18:31,991 - wazuh_testing - DEBUG - 2022/02/02 21:18:26 wazuh-logcollector: INFO: (1950): Analyzing file: '/var/ossec/logs/active-responses.log'. 2022-02-02 17:18:31,991 - wazuh_testing - DEBUG - 2022/02/02 21:17:58 wazuh-db[8373] wdb_parser.c:4784 at wdb_parse_global_insert_agent(): DEBUG: Global DB Cannot execute SQL query; err database queue/db/global.db: UNIQUE constraint failed: agent.id 2022-02-02 17:18:31,991 - wazuh_testing - DEBUG - 2022/02/02 21:17:58 wazuh-db[8373] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-group {"id":1,"group":"default"} 2022-02-02 17:18:31,991 - wazuh_testing - DEBUG - 2022/02/02 21:18:26 wazuh-logcollector: ERROR: (1103): Could not open file '/var/log/secure' due to [(2)-(No such file or directory)]. 2022-02-02 17:18:31,992 - wazuh_testing - DEBUG - 2022/02/02 21:17:58 wazuh-db[8373] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: delete-agent-belong 1 2022-02-02 17:18:31,992 - wazuh_testing - DEBUG - 2022/02/02 21:18:26 wazuh-logcollector: INFO: (1950): Analyzing file: '/var/log/secure'. 2022-02-02 17:18:31,992 - wazuh_testing - DEBUG - 2022/02/02 21:17:58 wazuh-db[8373] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: find-group default 2022-02-02 17:18:31,993 - wazuh_testing - DEBUG - 2022/02/02 21:17:58 wazuh-db[8373] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: insert-agent-belong {"id_group":1,"id_agent":1} 2022-02-02 17:18:31,993 - wazuh_testing - DEBUG - 2022/02/02 21:18:26 wazuh-logcollector: INFO: Started (pid: 12954). 2022-02-02 17:18:31,993 - wazuh_testing - DEBUG - 2022/02/02 21:17:58 wazuh-db[8373] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: get-all-agents last_id 0 2022-02-02 17:18:31,993 - wazuh_testing - DEBUG - 2022/02/02 21:17:58 wazuh-db[8373] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: select-groups 2022-02-02 17:18:31,993 - wazuh_testing - DEBUG - 2022/02/02 21:18:26 wazuh-modulesd: INFO: Started (pid: 12968). 2022-02-02 17:18:31,994 - wazuh_testing - DEBUG - 2022/02/02 21:17:58 wazuh-db[8373] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: find-group default 2022-02-02 17:18:31,995 - wazuh_testing - DEBUG - 2022/02/02 21:18:26 wazuh-modulesd:agent-upgrade: INFO: (8153): Module Agent Upgrade started. 2022-02-02 17:18:31,995 - wazuh_testing - DEBUG - 2022/02/02 21:17:58 wazuh-db[8373] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: get-all-agents last_id 0 2022-02-02 17:18:31,995 - wazuh_testing - DEBUG - 2022/02/02 21:17:58 wazuh-db[8373] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: select-agent-group 1 2022-02-02 17:18:31,995 - wazuh_testing - DEBUG - 2022/02/02 21:18:26 wazuh-modulesd:control: INFO: Starting control thread. 2022-02-02 17:18:31,996 - wazuh_testing - DEBUG - 2022/02/02 21:17:58 wazuh-db[8373] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: delete-agent-belong 1 2022-02-02 17:18:31,996 - wazuh_testing - DEBUG - 2022/02/02 21:17:58 wazuh-db[8373] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: find-group default 2022-02-02 17:18:31,996 - wazuh_testing - DEBUG - 2022/02/02 21:18:26 wazuh-syscheckd[12940] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-02 17:18:31,996 - wazuh_testing - DEBUG - 2022/02/02 21:17:58 wazuh-db[8373] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: insert-agent-belong {"id_group":1,"id_agent":1} 2022-02-02 17:18:31,997 - wazuh_testing - DEBUG - 2022/02/02 21:17:58 wazuh-db[8373] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: select-agent-name 1 2022-02-02 17:18:31,997 - wazuh_testing - DEBUG - 2022/02/02 21:18:26 wazuh-syscheckd[12940] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-02 17:18:31,997 - wazuh_testing - DEBUG - 2022/02/02 21:17:58 wazuh-db[8373] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: select-agent-name 1 2022-02-02 17:18:31,998 - wazuh_testing - DEBUG - 2022/02/02 21:17:58 wazuh-db[8373] main.c:290 at run_dealer(): DEBUG: New client connected (16). 2022-02-02 17:18:31,998 - wazuh_testing - DEBUG - 2022/02/02 21:18:26 wazuh-syscheckd[12940] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1643833106}} 2022-02-02 17:18:31,998 - wazuh_testing - DEBUG - 2022/02/02 21:17:58 wazuh-db[8373] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-keepalive {"id":1,"connection_status":"pending","sync_status":"synced"} 2022-02-02 17:18:31,998 - wazuh_testing - DEBUG - 2022/02/02 21:18:26 wazuh-syscheckd[12940] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 1.184 sec (1.182 clock sec) 2022-02-02 17:18:31,998 - wazuh_testing - DEBUG - 2022/02/02 21:17:58 wazuh-db[8373] main.c:290 at run_dealer(): DEBUG: New client connected (18). 2022-02-02 17:18:31,999 - wazuh_testing - DEBUG - 2022/02/02 21:18:26 wazuh-syscheckd[12940] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1621, path count: 1627 2022-02-02 17:18:31,999 - wazuh_testing - DEBUG - 2022/02/02 21:17:58 wazuh-db[8373] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.18.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.18.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.13.0-27-generic |#29~20.04.1-Ubuntu SMP Fri Jan 14 00:32:30 UTC 2022 |x86_64","os_arch":"x86_64"} 2022-02-02 17:18:32,000 - wazuh_testing - DEBUG - 2022/02/02 21:18:26 wazuh-syscheckd[12940] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:18:32,000 - wazuh_testing - DEBUG - 2022/02/02 21:17:58 wazuh-db[8373] main.c:290 at run_dealer(): DEBUG: New client connected (19). 2022-02-02 17:18:32,000 - wazuh_testing - DEBUG - 2022/02/02 21:18:26 wazuh-syscheckd[12940] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:18:32,000 - wazuh_testing - DEBUG - 2022/02/02 21:17:58 wazuh-db[8373] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1643833048 2022-02-02 17:18:32,001 - wazuh_testing - DEBUG - 2022/02/02 21:18:26 wazuh-syscheckd[12940] run_check.c:387 at fim_run_realtime(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-02 17:18:32,001 - wazuh_testing - DEBUG - 2022/02/02 21:17:59 wazuh-db[8373] main.c:290 at run_dealer(): DEBUG: New client connected (20). 2022-02-02 17:18:32,002 - wazuh_testing - DEBUG - 2022/02/02 21:18:26 wazuh-syscheckd[12940] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:18:32,002 - wazuh_testing - DEBUG - 2022/02/02 21:17:59 wazuh-db[8373] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck save2 {"path":"/testdir1/testdir1.txt","version":2,"timestamp":1643833079,"attributes":{"type":"file","size":0,"perm":"rw-r--r--","uid":"0","gid":"0","user_name":"root","group_name":"root","inode":7236683,"mtime":1643833054,"hash_md5":"d41d8cd98f00b204e9800998ecf8427e","hash_sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","hash_sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","checksum":"640cb2f2b67c8492d8f17bffe40f7710fdfb8ef1"}} 2022-02-02 17:18:32,002 - wazuh_testing - DEBUG - 2022/02/02 21:18:26 wazuh-syscheckd[12940] run_check.c:543 at log_realtime_status(): INFO: (6012): Real-time file integrity monitoring started. 2022-02-02 17:18:32,003 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-manager and message: .*Agent 001 query: (.+) save2 2022-02-02 17:18:32,003 - wazuh_testing - DEBUG - 2022/02/02 21:18:26 wazuh-syscheckd[12940] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. 2022-02-02 17:18:32,004 - wazuh_testing - DEBUG - 2022/02/02 21:18:26 wazuh-syscheckd[12940] run_check.c:568 at symlink_checker_thread(): DEBUG: (6033): Starting symbolic link updater. Interval '600'. 2022-02-02 17:18:32,005 - wazuh_testing - DEBUG - 2022/02/02 21:18:26 wazuh-syscheckd[12940] run_check.c:82 at fim_send_sync_msg(): DEBUG: (6317): Sending integrity control message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1643833106,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"0e185aceaba99b6fa7b9bb4e47274db42329e981"}} 2022-02-02 17:18:32,006 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-agent1 and message: .*Sending integrity control message: (.+)$ 2022-02-02 17:18:32,933 - wazuh_testing - DEBUG - Cleaning temporal files... 2022-02-02 17:18:32,934 - wazuh_testing - DEBUG - Checking results... 2022-02-02 17:18:32,935 - wazuh_testing - DEBUG - Received from wazuh-manager the expected message: 2022/02/02 21:17:59 wazuh-db[8373] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck save2 {"path":"/testdir1/testdir1.txt","version":2,"timestamp":1643833079,"attributes":{"type":"file","size":0,"perm":"rw-r--r--","uid":"0","gid":"0","user_name":"root","group_name":"root","inode":7236683,"mtime":1643833054,"hash_md5":"d41d8cd98f00b204e9800998ecf8427e","hash_sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","hash_sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","checksum":"640cb2f2b67c8492d8f17bffe40f7710fdfb8ef1"}} 2022-02-02 17:18:32,936 - wazuh_testing - DEBUG - Received from wazuh-agent1 the expected message: 2022/02/02 21:18:26 wazuh-syscheckd[12940] run_check.c:82 at fim_send_sync_msg(): DEBUG: (6317): Sending integrity control message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1643833106,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"0e185aceaba99b6fa7b9bb4e47274db42329e981"}} 2022-02-02 17:19:03,779 - wazuh_testing - DEBUG - Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-02 17:19:03,781 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-02 17:19:03,783 - wazuh_testing - DEBUG - Starting file composer for wazuh-agent1 and path: /var/ossec/logs/ossec.log. Composite file in /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-agent1_ossec.log.tmp 2022-02-02 17:19:03,785 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-agent1 and message: .*Initializing FIM Integrity Synchronization check. (.+)$ 2022-02-02 17:19:05,787 - wazuh_testing - DEBUG - 2022/02/02 21:18:47 wazuh-logcollector: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:19:05,788 - wazuh_testing - DEBUG - 2022/02/02 21:18:47 wazuh-syscheckd[12940] sig_op.c:49 at HandleSIG(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:19:05,788 - wazuh_testing - DEBUG - 2022/02/02 21:18:47 wazuh-agentd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:19:05,788 - wazuh_testing - DEBUG - 2022/02/02 21:18:47 wazuh-execd: INFO: (1314): Shutdown received. Deleting responses. 2022-02-02 17:19:05,789 - wazuh_testing - DEBUG - 2022/02/02 21:18:47 wazuh-execd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:19:05,789 - wazuh_testing - DEBUG - 2022/02/02 21:18:57 wazuh-syscheckd[13420] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-02 17:19:05,789 - wazuh_testing - DEBUG - 2022/02/02 21:18:57 wazuh-syscheckd[13420] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-02 17:19:05,789 - wazuh_testing - DEBUG - 2022/02/02 21:18:57 wazuh-syscheckd[13420] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-02 17:19:05,790 - wazuh_testing - DEBUG - 2022/02/02 21:18:57 wazuh-syscheckd[13420] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-02 17:19:05,790 - wazuh_testing - DEBUG - 2022/02/02 21:18:57 wazuh-syscheckd[13420] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-02 17:19:05,790 - wazuh_testing - DEBUG - 2022/02/02 21:18:57 wazuh-syscheckd[13420] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-02 17:19:05,790 - wazuh_testing - DEBUG - 2022/02/02 21:18:57 wazuh-syscheckd[13420] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-02 17:19:05,791 - wazuh_testing - DEBUG - 2022/02/02 21:18:57 wazuh-syscheckd[13420] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ 2022-02-02 17:19:05,791 - wazuh_testing - DEBUG - 2022/02/02 21:18:57 wazuh-syscheckd[13420] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ OK? 2022-02-02 17:19:05,791 - wazuh_testing - DEBUG - 2022/02/02 21:18:57 wazuh-syscheckd[13420] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-02 17:19:05,792 - wazuh_testing - DEBUG - 2022/02/02 21:18:57 wazuh-syscheckd[13420] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-02 17:19:05,792 - wazuh_testing - DEBUG - 2022/02/02 21:18:57 wazuh-syscheckd[13420] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-02 17:19:05,792 - wazuh_testing - DEBUG - 2022/02/02 21:18:57 wazuh-syscheckd[13420] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-02 17:19:05,793 - wazuh_testing - DEBUG - 2022/02/02 21:18:57 wazuh-syscheckd[13420] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-02 17:19:05,793 - wazuh_testing - DEBUG - 2022/02/02 21:18:57 wazuh-syscheckd[13420] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-02 17:19:05,793 - wazuh_testing - DEBUG - 2022/02/02 21:18:57 wazuh-syscheckd[13420] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-02 17:19:05,793 - wazuh_testing - DEBUG - 2022/02/02 21:18:57 wazuh-syscheckd[13420] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-02 17:19:05,794 - wazuh_testing - DEBUG - 2022/02/02 21:18:57 wazuh-execd: INFO: Started (pid: 13433). 2022-02-02 17:19:05,794 - wazuh_testing - DEBUG - 2022/02/02 21:18:57 wazuh-agentd: INFO: (1410): Reading authentication keys file. 2022-02-02 17:19:05,794 - wazuh_testing - DEBUG - 2022/02/02 21:18:57 wazuh-agentd: INFO: Using notify time: 10 and max time to reconnect: 60 2022-02-02 17:19:05,795 - wazuh_testing - DEBUG - 2022/02/02 21:18:57 wazuh-agentd: INFO: Version detected -> Linux |wazuh-agent1 |5.13.0-27-generic |#29~20.04.1-Ubuntu SMP Fri Jan 14 00:32:30 UTC 2022 |x86_64 [Debian GNU/Linux|debian: 10 (buster)] - Wazuh v4.2.5 2022-02-02 17:19:05,795 - wazuh_testing - DEBUG - 2022/02/02 21:18:57 wazuh-agentd: INFO: Started (pid: 13441). 2022-02-02 17:19:05,795 - wazuh_testing - DEBUG - 2022/02/02 21:18:57 wazuh-agentd: INFO: Server IP Address: wazuh-manager/172.18.0.2 2022-02-02 17:19:05,796 - wazuh_testing - DEBUG - 2022/02/02 21:18:57 wazuh-agentd: INFO: Using AES as encryption method. 2022-02-02 17:19:05,796 - wazuh_testing - DEBUG - 2022/02/02 21:18:57 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.18.0.2:1514/tcp). 2022-02-02 17:19:05,796 - wazuh_testing - DEBUG - 2022/02/02 21:18:57 wazuh-agentd: INFO: (4102): Connected to the server (wazuh-manager/172.18.0.2:1514/tcp). 2022-02-02 17:19:05,796 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-02 17:19:05,797 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-02 17:19:05,797 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-02 17:19:05,797 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-02 17:19:05,797 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-02 17:19:05,797 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-02 17:19:05,798 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-02 17:19:05,798 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ 2022-02-02 17:19:05,798 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ OK? 2022-02-02 17:19:05,798 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-02 17:19:05,798 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-02 17:19:05,798 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-02 17:19:05,799 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-02 17:19:05,799 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-02 17:19:05,800 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-02 17:19:05,800 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-02 17:19:05,800 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-02 17:19:05,801 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 rootcheck[13453] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled. 2022-02-02 17:19:05,801 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:19:05,802 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] syscom.c:123 at syscom_main(): DEBUG: (6284): Local requests thread ready. 2022-02-02 17:19:05,802 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] mq_op.c:47 at StartMQ(): DEBUG: Connected succesfully to 'queue/sockets/queue' after 0 attempts 2022-02-02 17:19:05,803 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] mq_op.c:48 at StartMQ(): DEBUG: (unix_domain) Maximum send buffer set to: '212992'. 2022-02-02 17:19:05,803 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] main.c:185 at main(): INFO: Started (pid: 13455). 2022-02-02 17:19:05,804 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] main.c:193 at main(): INFO: (6003): Monitoring path: '/bin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:19:05,804 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] main.c:193 at main(): INFO: (6003): Monitoring path: '/boot', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:19:05,804 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] main.c:193 at main(): INFO: (6003): Monitoring path: '/etc', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:19:05,805 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] main.c:193 at main(): INFO: (6003): Monitoring path: '/sbin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:19:05,805 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir1', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:19:05,805 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir2', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | realtime'. 2022-02-02 17:19:05,805 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir3', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | whodata'. 2022-02-02 17:19:05,806 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/bin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:19:05,806 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/sbin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:19:05,806 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] main.c:215 at main(): DEBUG: (6357): Maximum disk quota size limit configured to '1048576 KB'. 2022-02-02 17:19:05,806 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mtab' 2022-02-02 17:19:05,807 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/hosts.deny' 2022-02-02 17:19:05,807 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mail/statistics' 2022-02-02 17:19:05,807 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random-seed' 2022-02-02 17:19:05,807 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random.seed' 2022-02-02 17:19:05,808 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/adjtime' 2022-02-02 17:19:05,808 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/httpd/logs' 2022-02-02 17:19:05,808 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/utmpx' 2022-02-02 17:19:05,809 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/wtmpx' 2022-02-02 17:19:05,809 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/cups/certs' 2022-02-02 17:19:05,810 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/dumpdates' 2022-02-02 17:19:05,810 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/svc/volatile' 2022-02-02 17:19:05,811 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/security' 2022-02-02 17:19:05,812 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/debug' 2022-02-02 17:19:05,812 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/dev/core' 2022-02-02 17:19:05,813 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '^/proc' 2022-02-02 17:19:05,813 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '.log$|.swp$' 2022-02-02 17:19:05,814 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] main.c:235 at main(): INFO: (6004): No diff for file: '/etc/ssl/private.key' 2022-02-02 17:19:05,815 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] main.c:245 at main(): INFO: (6016): Directory set for real time monitoring: '/testdir2'. 2022-02-02 17:19:05,815 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] syscheck_audit.c:243 at audit_init(): WARNING: (6924): Who-data engine cannot start because Auditd is not running. 2022-02-02 17:19:05,816 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] main.c:264 at main(): WARNING: (6913): Who-data engine could not start. Switching who-data to real-time. 2022-02-02 17:19:05,816 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] run_check.c:194 at start_daemon(): DEBUG: (6320): Setting process priority to: '10' 2022-02-02 17:19:05,817 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:19:05,817 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] run_check.c:229 at start_daemon(): INFO: (6000): Starting daemon... 2022-02-02 17:19:05,818 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] run_check.c:232 at start_daemon(): INFO: (6010): File integrity monitoring scan frequency: 20 seconds 2022-02-02 17:19:05,818 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-02 17:19:05,819 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1643833138}} 2022-02-02 17:19:05,820 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-02 17:19:05,820 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-02 17:19:05,821 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-02 17:19:05,822 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-02 17:19:05,822 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-02 17:19:05,823 - wazuh_testing - DEBUG - 2022/02/02 21:18:59 wazuh-logcollector: INFO: (1950): Analyzing file: '/var/ossec/logs/active-responses.log'. 2022-02-02 17:19:05,823 - wazuh_testing - DEBUG - 2022/02/02 21:18:59 wazuh-logcollector: ERROR: (1103): Could not open file '/var/log/secure' due to [(2)-(No such file or directory)]. 2022-02-02 17:19:05,824 - wazuh_testing - DEBUG - 2022/02/02 21:18:59 wazuh-logcollector: INFO: (1950): Analyzing file: '/var/log/secure'. 2022-02-02 17:19:05,825 - wazuh_testing - DEBUG - 2022/02/02 21:18:59 wazuh-logcollector: INFO: Started (pid: 13467). 2022-02-02 17:19:05,825 - wazuh_testing - DEBUG - 2022/02/02 21:18:59 wazuh-syscheckd[13453] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-02 17:19:05,826 - wazuh_testing - DEBUG - 2022/02/02 21:18:59 wazuh-syscheckd[13453] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-02 17:19:05,827 - wazuh_testing - DEBUG - 2022/02/02 21:18:59 wazuh-syscheckd[13453] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1643833139}} 2022-02-02 17:19:05,828 - wazuh_testing - DEBUG - 2022/02/02 21:18:59 wazuh-syscheckd[13453] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 1.314 sec (1.310 clock sec) 2022-02-02 17:19:05,828 - wazuh_testing - DEBUG - 2022/02/02 21:18:59 wazuh-syscheckd[13453] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1622, path count: 1628 2022-02-02 17:19:05,829 - wazuh_testing - DEBUG - 2022/02/02 21:18:59 wazuh-syscheckd[13453] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:19:05,830 - wazuh_testing - DEBUG - 2022/02/02 21:18:59 wazuh-syscheckd[13453] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:19:05,830 - wazuh_testing - DEBUG - 2022/02/02 21:18:59 wazuh-syscheckd[13453] run_check.c:387 at fim_run_realtime(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-02 17:19:05,831 - wazuh_testing - DEBUG - 2022/02/02 21:18:59 wazuh-syscheckd[13453] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:19:05,832 - wazuh_testing - DEBUG - 2022/02/02 21:18:59 wazuh-syscheckd[13453] run_check.c:543 at log_realtime_status(): INFO: (6012): Real-time file integrity monitoring started. 2022-02-02 17:19:05,832 - wazuh_testing - DEBUG - 2022/02/02 21:18:59 wazuh-syscheckd[13453] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. 2022-02-02 17:19:05,833 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-agent1 and message: .*Initializing FIM Integrity Synchronization check. (.+)$ 2022-02-02 17:19:06,789 - wazuh_testing - DEBUG - Cleaning temporal files... 2022-02-02 17:19:06,789 - wazuh_testing - DEBUG - Checking results... 2022-02-02 17:19:06,791 - wazuh_testing - DEBUG - Received from wazuh-agent1 the expected message: 2022/02/02 21:18:59 wazuh-syscheckd[13453] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. -------------------------------Captured log call-------------------------------- DEBUG testinfra:base.py:277 RUN CommandResult(command=b"ansible --tree /tmp/tmpd0_xi8qc -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m command --args 'mkdir testdir1' wazuh-agent1", exit_status=0, stdout=b'wazuh-agent1 | CHANGED | rc=0 >>\n\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('command', 'mkdir testdir1', {'check': False, 'become': False}): {'changed': True, 'cmd': ['mkdir', 'testdir1'], 'delta': '0:00:01.107204', 'end': '2022-02-02 21:18:11.575119', 'msg': '', 'rc': 0, 'start': '2022-02-02 21:18:10.467915', 'stderr': '', 'stderr_lines': [], 'stdout': '', 'stdout_lines': []} DEBUG testinfra:base.py:277 RUN CommandResult(command=b"ansible --tree /tmp/tmpwfi5epii -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m command --args 'touch testdir1/testdir1.txt' wazuh-agent1", exit_status=0, stdout=b'wazuh-agent1 | CHANGED | rc=0 >>\n\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('command', 'touch testdir1/testdir1.txt', {'check': False, 'become': False}): {'changed': True, 'cmd': ['touch', 'testdir1/testdir1.txt'], 'delta': '0:00:00.924779', 'end': '2022-02-02 21:18:14.695948', 'msg': '', 'rc': 0, 'start': '2022-02-02 21:18:13.771169', 'stderr': '', 'stderr_lines': [], 'stdout': '', 'stdout_lines': []} DEBUG testinfra:base.py:277 RUN CommandResult(command=b"ansible --tree /tmp/tmppaeu0913 -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m service --args 'name=wazuh-agent state=restarted' wazuh-agent1", exit_status=0, stdout=b'wazuh-agent1 | CHANGED => {\n "changed": true,\n "name": "wazuh-agent",\n "state": "started"\n}\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('service', 'name=wazuh-agent state=restarted', {'check': False, 'become': False}): {'changed': True, 'name': 'wazuh-agent', 'state': 'started'} DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:1006 Cleaning temporal files... DEBUG wazuh_testing:monitoring.py:995 Checking results... DEBUG wazuh_testing:monitoring.py:1001 Received from wazuh-manager the expected message: 2022/02/02 21:17:59 wazuh-db[8373] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck save2 {"path":"/testdir1/testdir1.txt","version":2,"timestamp":1643833079,"attributes":{"type":"file","size":0,"perm":"rw-r--r--","uid":"0","gid":"0","user_name":"root","group_name":"root","inode":7236683,"mtime":1643833054,"hash_md5":"d41d8cd98f00b204e9800998ecf8427e","hash_sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","hash_sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","checksum":"640cb2f2b67c8492d8f17bffe40f7710fdfb8ef1"}} DEBUG wazuh_testing:monitoring.py:1001 Received from wazuh-agent1 the expected message: 2022/02/02 21:18:26 wazuh-syscheckd[12940] run_check.c:82 at fim_send_sync_msg(): DEBUG: (6317): Sending integrity control message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1643833106,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"0e185aceaba99b6fa7b9bb4e47274db42329e981"}} DEBUG testinfra:base.py:277 RUN CommandResult(command=b'ansible --tree /tmp/tmpjudaz91t -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m copy --args \'dest=/var/ossec/logs/ossec.log content=\'"\'"\'\'"\'"\' force=yes\' wazuh-manager', exit_status=0, stdout=b'wazuh-manager | CHANGED => {\n "changed": true,\n "checksum": "da39a3ee5e6b4b0d3255bfef95601890afd80709",\n "dest": "/var/ossec/logs/ossec.log",\n "gid": 999,\n "group": "ossec",\n "md5sum": "d41d8cd98f00b204e9800998ecf8427e",\n "mode": "0660",\n "owner": "ossec",\n "size": 0,\n "src": "/root/.ansible/tmp/ansible-tmp-1643833114.1223638-99762-133019897046484/source",\n "state": "file",\n "uid": 999\n}\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('copy', "dest=/var/ossec/logs/ossec.log content='' force=yes", {'check': False, 'become': False}): {'changed': True, 'checksum': 'da39a3ee5e6b4b0d3255bfef95601890afd80709', 'dest': '/var/ossec/logs/ossec.log', 'gid': 999, 'group': 'ossec', 'md5sum': 'd41d8cd98f00b204e9800998ecf8427e', 'mode': '0660', 'owner': 'ossec', 'size': 0, 'src': '/root/.ansible/tmp/ansible-tmp-1643833114.1223638-99762-133019897046484/source', 'state': 'file', 'uid': 999} DEBUG testinfra:base.py:277 RUN CommandResult(command=b'ansible --tree /tmp/tmpk_f3lkw5 -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m copy --args \'dest=/var/ossec/logs/ossec.log content=\'"\'"\'\'"\'"\' force=yes\' wazuh-agent1', exit_status=0, stdout=b'wazuh-agent1 | CHANGED => {\n "changed": true,\n "checksum": "da39a3ee5e6b4b0d3255bfef95601890afd80709",\n "dest": "/var/ossec/logs/ossec.log",\n "gid": 999,\n "group": "ossec",\n "md5sum": "d41d8cd98f00b204e9800998ecf8427e",\n "mode": "0660",\n "owner": "ossec",\n "size": 0,\n "src": "/root/.ansible/tmp/ansible-tmp-1643833119.6544511-100164-131196377961288/source",\n "state": "file",\n "uid": 999\n}\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('copy', "dest=/var/ossec/logs/ossec.log content='' force=yes", {'check': False, 'become': False}): {'changed': True, 'checksum': 'da39a3ee5e6b4b0d3255bfef95601890afd80709', 'dest': '/var/ossec/logs/ossec.log', 'gid': 999, 'group': 'ossec', 'md5sum': 'd41d8cd98f00b204e9800998ecf8427e', 'mode': '0660', 'owner': 'ossec', 'size': 0, 'src': '/root/.ansible/tmp/ansible-tmp-1643833119.6544511-100164-131196377961288/source', 'state': 'file', 'uid': 999} DEBUG testinfra:base.py:277 RUN CommandResult(command=b"ansible --tree /tmp/tmpdvx3o_gw -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m command --args '/var/ossec/bin/wazuh-control stop' wazuh-agent1", exit_status=0, stdout=b'wazuh-agent1 | CHANGED | rc=0 >>\nKilling wazuh-modulesd... \nKilling wazuh-logcollector... \nKilling wazuh-syscheckd... \nKilling wazuh-agentd... \nKilling wazuh-execd... \nWazuh v4.2.5 Stopped\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('command', '/var/ossec/bin/wazuh-control stop', {'check': False, 'become': False}): {'changed': True, 'cmd': ['/var/ossec/bin/wazuh-control', 'stop'], 'delta': '0:00:01.574694', 'end': '2022-02-02 21:18:47.995732', 'msg': '', 'rc': 0, 'start': '2022-02-02 21:18:46.421038', 'stderr': '', 'stderr_lines': [], 'stdout': 'Killing wazuh-modulesd... \n' 'Killing wazuh-logcollector... \n' 'Killing wazuh-syscheckd... \n' 'Killing wazuh-agentd... \n' 'Killing wazuh-execd... \n' 'Wazuh v4.2.5 Stopped', 'stdout_lines': ['Killing wazuh-modulesd... ', 'Killing wazuh-logcollector... ', 'Killing wazuh-syscheckd... ', 'Killing wazuh-agentd... ', 'Killing wazuh-execd... ', 'Wazuh v4.2.5 Stopped']} DEBUG testinfra:base.py:277 RUN CommandResult(command=b"ansible --tree /tmp/tmpbpg4lw6y -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m copy --args 'src=/tmp/tmpy48peyus dest=testdir1 owner=wazuh group=wazuh mode=0775' wazuh-agent1", exit_status=2, stdout=b'wazuh-agent1 | FAILED! => {\n "changed": false,\n "checksum": "9eab19985b11b15f91f936e463ea74f1dfe88e32",\n "gid": 0,\n "group": "root",\n "mode": "0644",\n "msg": "chown failed: failed to look up user wazuh",\n "owner": "root",\n "path": "./testdir1/tmpy48peyus",\n "size": 8,\n "state": "file",\n "uid": 0\n}\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('copy', 'src=/tmp/tmpy48peyus dest=testdir1 owner=wazuh group=wazuh mode=0775', {'check': False, 'become': False}): {'changed': False, 'checksum': '9eab19985b11b15f91f936e463ea74f1dfe88e32', 'gid': 0, 'group': 'root', 'mode': '0644', 'msg': 'chown failed: failed to look up user wazuh', 'owner': 'root', 'path': './testdir1/tmpy48peyus', 'size': 8, 'state': 'file', 'uid': 0} DEBUG testinfra:base.py:277 RUN CommandResult(command=b"ansible --tree /tmp/tmp5_uy8njp -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m command --args '/var/ossec/bin/wazuh-control start' wazuh-agent1", exit_status=0, stdout=b"wazuh-agent1 | CHANGED | rc=0 >>\nStarting Wazuh v4.2.5...\nStarted wazuh-execd...\nStarted wazuh-agentd...\nStarted wazuh-syscheckd...\nStarted wazuh-logcollector...\nStarted wazuh-modulesd...\nCompleted.2022/02/02 21:18:57 wazuh-syscheckd[13420] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized\n2022/02/02 21:18:57 wazuh-syscheckd[13420] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf'\n2022/02/02 21:18:57 wazuh-syscheckd[13420] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)].\n2022/02/02 21:18:57 wazuh-syscheckd[13420] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)].\n2022/02/02 21:18:57 wazuh-syscheckd[13420] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc\n2022/02/02 21:18:57 wazuh-syscheckd[13420] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK?\n2022/02/02 21:18:57 wazuh-syscheckd[13420] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0\n2022/02/02 21:18:57 wazuh-syscheckd[13420] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$\n2022/02/02 21:18:57 wazuh-syscheckd[13420] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ OK?\n2022/02/02 21:18:57 wazuh-syscheckd[13420] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1\n2022/02/02 21:18:57 wazuh-syscheckd[13420] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf]\n2022/02/02 21:18:57 wazuh-syscheckd[13420] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile().\n2022/02/02 21:18:57 wazuh-syscheckd[13420] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10]\n2022/02/02 21:18:57 wazuh-syscheckd[13420] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes.\n2022/02/02 21:18:57 wazuh-syscheckd[13420] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile().\n2022/02/02 21:18:57 wazuh-syscheckd[13420] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10]\n2022/02/02 21:18:57 wazuh-syscheckd[13420] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes.\n2022/02/02 21:18:58 wazuh-syscheckd[13453] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized\n2022/02/02 21:18:58 wazuh-syscheckd[13453] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf'\n2022/02/02 21:18:58 wazuh-syscheckd[13453] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)].\n2022/02/02 21:18:58 wazuh-syscheckd[13453] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)].\n2022/02/02 21:18:58 wazuh-syscheckd[13453] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc\n2022/02/02 21:18:58 wazuh-syscheckd[13453] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK?\n2022/02/02 21:18:58 wazuh-syscheckd[13453] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0\n2022/02/02 21:18:58 wazuh-syscheckd[13453] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$\n2022/02/02 21:18:58 wazuh-syscheckd[13453] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ OK?\n2022/02/02 21:18:58 wazuh-syscheckd[13453] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1\n2022/02/02 21:18:58 wazuh-syscheckd[13453] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf]\n2022/02/02 21:18:58 wazuh-syscheckd[13453] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile().\n2022/02/02 21:18:58 wazuh-syscheckd[13453] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10]\n2022/02/02 21:18:58 wazuh-syscheckd[13453] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes.\n2022/02/02 21:18:58 wazuh-syscheckd[13453] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile().\n2022/02/02 21:18:58 wazuh-syscheckd[13453] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10]\n2022/02/02 21:18:58 wazuh-syscheckd[13453] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes.\n2022/02/02 21:18:58 rootcheck[13453] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled.\n", stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('command', '/var/ossec/bin/wazuh-control start', {'check': False, 'become': False}): {'changed': True, 'cmd': ['/var/ossec/bin/wazuh-control', 'start'], 'delta': '0:00:07.073232', 'end': '2022-02-02 21:19:03.500024', 'msg': '', 'rc': 0, 'start': '2022-02-02 21:18:56.426792', 'stderr': '2022/02/02 21:18:57 wazuh-syscheckd[13420] debug_op.c:70 at ' '_log(): DEBUG: Logging module auto-initialized\n' '2022/02/02 21:18:57 wazuh-syscheckd[13420] config.c:87 at ' 'Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: ' "'etc/ossec.conf'\n" '2022/02/02 21:18:57 wazuh-syscheckd[13420] syscheck-config.c:1218 ' 'at read_attr(): DEBUG: Could not check the real path of ' "'/testdir2' due to [(2)-(No such file or directory)].\n" '2022/02/02 21:18:57 wazuh-syscheckd[13420] syscheck-config.c:1218 ' 'at read_attr(): DEBUG: Could not check the real path of ' "'/testdir3' due to [(2)-(No such file or directory)].\n" '2022/02/02 21:18:57 wazuh-syscheckd[13420] syscheck-config.c:2520 ' 'at process_option_regex(): DEBUG: Found ignore regex node ^/proc\n' '2022/02/02 21:18:57 wazuh-syscheckd[13420] syscheck-config.c:2527 ' 'at process_option_regex(): DEBUG: Found ignore regex node ^/proc ' 'OK?\n' '2022/02/02 21:18:57 wazuh-syscheckd[13420] syscheck-config.c:2528 ' 'at process_option_regex(): DEBUG: Found ignore regex size 0\n' '2022/02/02 21:18:57 wazuh-syscheckd[13420] syscheck-config.c:2520 ' 'at process_option_regex(): DEBUG: Found ignore regex node ' '.log$|.swp$\n' '2022/02/02 21:18:57 wazuh-syscheckd[13420] syscheck-config.c:2527 ' 'at process_option_regex(): DEBUG: Found ignore regex node ' '.log$|.swp$ OK?\n' '2022/02/02 21:18:57 wazuh-syscheckd[13420] syscheck-config.c:2528 ' 'at process_option_regex(): DEBUG: Found ignore regex size 1\n' '2022/02/02 21:18:57 wazuh-syscheckd[13420] config.c:95 at ' 'Read_Syscheck_Config(): DEBUG: (6208): Reading Client ' 'Configuration [etc/ossec.conf]\n' '2022/02/02 21:18:57 wazuh-syscheckd[13420] agent_op.c:208 at ' 'os_read_agent_profile(): DEBUG: Calling os_read_agent_profile().\n' '2022/02/02 21:18:57 wazuh-syscheckd[13420] agent_op.c:227 at ' 'os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, ' 'debian10]\n' '2022/02/02 21:18:57 wazuh-syscheckd[13420] config.c:375 at ' 'ReadConfig(): DEBUG: agent_config element does not have any ' 'attributes.\n' '2022/02/02 21:18:57 wazuh-syscheckd[13420] agent_op.c:208 at ' 'os_read_agent_profile(): DEBUG: Calling os_read_agent_profile().\n' '2022/02/02 21:18:57 wazuh-syscheckd[13420] agent_op.c:227 at ' 'os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, ' 'debian10]\n' '2022/02/02 21:18:57 wazuh-syscheckd[13420] config.c:375 at ' 'ReadConfig(): DEBUG: agent_config element does not have any ' 'attributes.\n' '2022/02/02 21:18:58 wazuh-syscheckd[13453] debug_op.c:70 at ' '_log(): DEBUG: Logging module auto-initialized\n' '2022/02/02 21:18:58 wazuh-syscheckd[13453] config.c:87 at ' 'Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: ' "'etc/ossec.conf'\n" '2022/02/02 21:18:58 wazuh-syscheckd[13453] syscheck-config.c:1218 ' 'at read_attr(): DEBUG: Could not check the real path of ' "'/testdir2' due to [(2)-(No such file or directory)].\n" '2022/02/02 21:18:58 wazuh-syscheckd[13453] syscheck-config.c:1218 ' 'at read_attr(): DEBUG: Could not check the real path of ' "'/testdir3' due to [(2)-(No such file or directory)].\n" '2022/02/02 21:18:58 wazuh-syscheckd[13453] syscheck-config.c:2520 ' 'at process_option_regex(): DEBUG: Found ignore regex node ^/proc\n' '2022/02/02 21:18:58 wazuh-syscheckd[13453] syscheck-config.c:2527 ' 'at process_option_regex(): DEBUG: Found ignore regex node ^/proc ' 'OK?\n' '2022/02/02 21:18:58 wazuh-syscheckd[13453] syscheck-config.c:2528 ' 'at process_option_regex(): DEBUG: Found ignore regex size 0\n' '2022/02/02 21:18:58 wazuh-syscheckd[13453] syscheck-config.c:2520 ' 'at process_option_regex(): DEBUG: Found ignore regex node ' '.log$|.swp$\n' '2022/02/02 21:18:58 wazuh-syscheckd[13453] syscheck-config.c:2527 ' 'at process_option_regex(): DEBUG: Found ignore regex node ' '.log$|.swp$ OK?\n' '2022/02/02 21:18:58 wazuh-syscheckd[13453] syscheck-config.c:2528 ' 'at process_option_regex(): DEBUG: Found ignore regex size 1\n' '2022/02/02 21:18:58 wazuh-syscheckd[13453] config.c:95 at ' 'Read_Syscheck_Config(): DEBUG: (6208): Reading Client ' 'Configuration [etc/ossec.conf]\n' '2022/02/02 21:18:58 wazuh-syscheckd[13453] agent_op.c:208 at ' 'os_read_agent_profile(): DEBUG: Calling os_read_agent_profile().\n' '2022/02/02 21:18:58 wazuh-syscheckd[13453] agent_op.c:227 at ' 'os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, ' 'debian10]\n' '2022/02/02 21:18:58 wazuh-syscheckd[13453] config.c:375 at ' 'ReadConfig(): DEBUG: agent_config element does not have any ' 'attributes.\n' '2022/02/02 21:18:58 wazuh-syscheckd[13453] agent_op.c:208 at ' 'os_read_agent_profile(): DEBUG: Calling os_read_agent_profile().\n' '2022/02/02 21:18:58 wazuh-syscheckd[13453] agent_op.c:227 at ' 'os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, ' 'debian10]\n' '2022/02/02 21:18:58 wazuh-syscheckd[13453] config.c:375 at ' 'ReadConfig(): DEBUG: agent_config element does not have any ' 'attributes.\n' '2022/02/02 21:18:58 rootcheck[13453] rootcheck.c:202 at ' 'rootcheck_init(): INFO: Rootcheck disabled.', 'stderr_lines': ['2022/02/02 21:18:57 wazuh-syscheckd[13420] debug_op.c:70 at ' '_log(): DEBUG: Logging module auto-initialized', '2022/02/02 21:18:57 wazuh-syscheckd[13420] config.c:87 at ' 'Read_Syscheck_Config(): DEBUG: (6287): Reading ' "configuration file: 'etc/ossec.conf'", '2022/02/02 21:18:57 wazuh-syscheckd[13420] ' 'syscheck-config.c:1218 at read_attr(): DEBUG: Could not ' "check the real path of '/testdir2' due to [(2)-(No such " 'file or directory)].', '2022/02/02 21:18:57 wazuh-syscheckd[13420] ' 'syscheck-config.c:1218 at read_attr(): DEBUG: Could not ' "check the real path of '/testdir3' due to [(2)-(No such " 'file or directory)].', '2022/02/02 21:18:57 wazuh-syscheckd[13420] ' 'syscheck-config.c:2520 at process_option_regex(): DEBUG: ' 'Found ignore regex node ^/proc', '2022/02/02 21:18:57 wazuh-syscheckd[13420] ' 'syscheck-config.c:2527 at process_option_regex(): DEBUG: ' 'Found ignore regex node ^/proc OK?', '2022/02/02 21:18:57 wazuh-syscheckd[13420] ' 'syscheck-config.c:2528 at process_option_regex(): DEBUG: ' 'Found ignore regex size 0', '2022/02/02 21:18:57 wazuh-syscheckd[13420] ' 'syscheck-config.c:2520 at process_option_regex(): DEBUG: ' 'Found ignore regex node .log$|.swp$', '2022/02/02 21:18:57 wazuh-syscheckd[13420] ' 'syscheck-config.c:2527 at process_option_regex(): DEBUG: ' 'Found ignore regex node .log$|.swp$ OK?', '2022/02/02 21:18:57 wazuh-syscheckd[13420] ' 'syscheck-config.c:2528 at process_option_regex(): DEBUG: ' 'Found ignore regex size 1', '2022/02/02 21:18:57 wazuh-syscheckd[13420] config.c:95 at ' 'Read_Syscheck_Config(): DEBUG: (6208): Reading Client ' 'Configuration [etc/ossec.conf]', '2022/02/02 21:18:57 wazuh-syscheckd[13420] agent_op.c:208 ' 'at os_read_agent_profile(): DEBUG: Calling ' 'os_read_agent_profile().', '2022/02/02 21:18:57 wazuh-syscheckd[13420] agent_op.c:227 ' 'at os_read_agent_profile(): DEBUG: os_read_agent_profile() ' '= [debian, debian10]', '2022/02/02 21:18:57 wazuh-syscheckd[13420] config.c:375 at ' 'ReadConfig(): DEBUG: agent_config element does not have any ' 'attributes.', '2022/02/02 21:18:57 wazuh-syscheckd[13420] agent_op.c:208 ' 'at os_read_agent_profile(): DEBUG: Calling ' 'os_read_agent_profile().', '2022/02/02 21:18:57 wazuh-syscheckd[13420] agent_op.c:227 ' 'at os_read_agent_profile(): DEBUG: os_read_agent_profile() ' '= [debian, debian10]', '2022/02/02 21:18:57 wazuh-syscheckd[13420] config.c:375 at ' 'ReadConfig(): DEBUG: agent_config element does not have any ' 'attributes.', '2022/02/02 21:18:58 wazuh-syscheckd[13453] debug_op.c:70 at ' '_log(): DEBUG: Logging module auto-initialized', '2022/02/02 21:18:58 wazuh-syscheckd[13453] config.c:87 at ' 'Read_Syscheck_Config(): DEBUG: (6287): Reading ' "configuration file: 'etc/ossec.conf'", '2022/02/02 21:18:58 wazuh-syscheckd[13453] ' 'syscheck-config.c:1218 at read_attr(): DEBUG: Could not ' "check the real path of '/testdir2' due to [(2)-(No such " 'file or directory)].', '2022/02/02 21:18:58 wazuh-syscheckd[13453] ' 'syscheck-config.c:1218 at read_attr(): DEBUG: Could not ' "check the real path of '/testdir3' due to [(2)-(No such " 'file or directory)].', '2022/02/02 21:18:58 wazuh-syscheckd[13453] ' 'syscheck-config.c:2520 at process_option_regex(): DEBUG: ' 'Found ignore regex node ^/proc', '2022/02/02 21:18:58 wazuh-syscheckd[13453] ' 'syscheck-config.c:2527 at process_option_regex(): DEBUG: ' 'Found ignore regex node ^/proc OK?', '2022/02/02 21:18:58 wazuh-syscheckd[13453] ' 'syscheck-config.c:2528 at process_option_regex(): DEBUG: ' 'Found ignore regex size 0', '2022/02/02 21:18:58 wazuh-syscheckd[13453] ' 'syscheck-config.c:2520 at process_option_regex(): DEBUG: ' 'Found ignore regex node .log$|.swp$', '2022/02/02 21:18:58 wazuh-syscheckd[13453] ' 'syscheck-config.c:2527 at process_option_regex(): DEBUG: ' 'Found ignore regex node .log$|.swp$ OK?', '2022/02/02 21:18:58 wazuh-syscheckd[13453] ' 'syscheck-config.c:2528 at process_option_regex(): DEBUG: ' 'Found ignore regex size 1', '2022/02/02 21:18:58 wazuh-syscheckd[13453] config.c:95 at ' 'Read_Syscheck_Config(): DEBUG: (6208): Reading Client ' 'Configuration [etc/ossec.conf]', '2022/02/02 21:18:58 wazuh-syscheckd[13453] agent_op.c:208 ' 'at os_read_agent_profile(): DEBUG: Calling ' 'os_read_agent_profile().', '2022/02/02 21:18:58 wazuh-syscheckd[13453] agent_op.c:227 ' 'at os_read_agent_profile(): DEBUG: os_read_agent_profile() ' '= [debian, debian10]', '2022/02/02 21:18:58 wazuh-syscheckd[13453] config.c:375 at ' 'ReadConfig(): DEBUG: agent_config element does not have any ' 'attributes.', '2022/02/02 21:18:58 wazuh-syscheckd[13453] agent_op.c:208 ' 'at os_read_agent_profile(): DEBUG: Calling ' 'os_read_agent_profile().', '2022/02/02 21:18:58 wazuh-syscheckd[13453] agent_op.c:227 ' 'at os_read_agent_profile(): DEBUG: os_read_agent_profile() ' '= [debian, debian10]', '2022/02/02 21:18:58 wazuh-syscheckd[13453] config.c:375 at ' 'ReadConfig(): DEBUG: agent_config element does not have any ' 'attributes.', '2022/02/02 21:18:58 rootcheck[13453] rootcheck.c:202 at ' 'rootcheck_init(): INFO: Rootcheck disabled.'], 'stdout': 'Starting Wazuh v4.2.5...\n' 'Started wazuh-execd...\n' 'Started wazuh-agentd...\n' 'Started wazuh-syscheckd...\n' 'Started wazuh-logcollector...\n' 'Started wazuh-modulesd...\n' 'Completed.', 'stdout_lines': ['Starting Wazuh v4.2.5...', 'Started wazuh-execd...', 'Started wazuh-agentd...', 'Started wazuh-syscheckd...', 'Started wazuh-logcollector...', 'Started wazuh-modulesd...', 'Completed.']} DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:1006 Cleaning temporal files... DEBUG wazuh_testing:monitoring.py:995 Checking results... DEBUG wazuh_testing:monitoring.py:1001 Received from wazuh-agent1 the expected message: 2022/02/02 21:18:59 wazuh-syscheckd[13453] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. DEBUG testinfra:base.py:277 RUN CommandResult(command=b"ansible --tree /tmp/tmph43z1t14 -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m command --args 'rm -rf testdir1' wazuh-agent1", exit_status=0, stdout=b'wazuh-agent1 | CHANGED | rc=0 >>\n\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('command', 'rm -rf testdir1', {'check': False, 'become': False}): {'changed': True, 'cmd': ['rm', '-rf', 'testdir1'], 'delta': '0:00:00.837440', 'end': '2022-02-02 21:19:09.693054', 'msg': '', 'rc': 0, 'start': '2022-02-02 21:19:08.855614', 'stderr': '', 'stderr_lines': [], 'stdout': '', 'stdout_lines': []} | |||
| Passed | test_synchronization.py::test_Synchronization_create_file_agent_stopped[testdir1-modify-wazuh-manager] | 76.11 | |
|
------------------------------Captured stderr call------------------------------ 2022-02-02 17:19:31,415 - wazuh_testing - DEBUG - Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-02 17:19:31,418 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-02 17:19:31,419 - wazuh_testing - DEBUG - Starting file composer for wazuh-agent1 and path: /var/ossec/logs/ossec.log. Composite file in /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-agent1_ossec.log.tmp 2022-02-02 17:19:31,420 - wazuh_testing - DEBUG - Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-02 17:19:31,422 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-02 17:19:31,423 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-agent1 and message: .*Sending integrity control message: (.+)$ 2022-02-02 17:19:31,424 - wazuh_testing - DEBUG - Starting file composer for wazuh-manager and path: /var/ossec/logs/ossec.log. Composite file in /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-manager_ossec.log.tmp 2022-02-02 17:19:31,426 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-manager and message: .*Agent 001 query: (.+) save2 2022-02-02 17:19:33,426 - wazuh_testing - DEBUG - 2022/02/02 21:18:47 wazuh-logcollector: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:19:33,427 - wazuh_testing - DEBUG - 2022/02/02 21:18:47 wazuh-syscheckd[12940] sig_op.c:49 at HandleSIG(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:19:33,427 - wazuh_testing - DEBUG - 2022/02/02 21:18:47 wazuh-agentd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:19:33,427 - wazuh_testing - DEBUG - 2022/02/02 21:18:47 wazuh-execd: INFO: (1314): Shutdown received. Deleting responses. 2022-02-02 17:19:33,428 - wazuh_testing - DEBUG - 2022/02/02 21:18:47 wazuh-execd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:19:33,428 - wazuh_testing - DEBUG - 2022/02/02 21:18:57 wazuh-syscheckd[13420] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-02 17:19:33,429 - wazuh_testing - DEBUG - 2022/02/02 21:18:57 wazuh-syscheckd[13420] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-02 17:19:33,429 - wazuh_testing - DEBUG - 2022/02/02 21:18:57 wazuh-syscheckd[13420] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-02 17:19:33,429 - wazuh_testing - DEBUG - 2022/02/02 21:18:39 wazuh-db[8373] wdb.c:918 at wdb_commit_old(): DEBUG: Agent 'tasks' database commited. Time: 0.042 ms. 2022-02-02 17:19:33,429 - wazuh_testing - DEBUG - 2022/02/02 21:18:57 wazuh-syscheckd[13420] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-02 17:19:33,430 - wazuh_testing - DEBUG - 2022/02/02 21:18:57 wazuh-syscheckd[13420] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-02 17:19:33,430 - wazuh_testing - DEBUG - 2022/02/02 21:18:57 wazuh-syscheckd[13420] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-02 17:19:33,430 - wazuh_testing - DEBUG - 2022/02/02 21:18:57 wazuh-syscheckd[13420] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-02 17:19:33,430 - wazuh_testing - DEBUG - 2022/02/02 21:18:44 wazuh-db[8373] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.18.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.18.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.13.0-27-generic |#29~20.04.1-Ubuntu SMP Fri Jan 14 00:32:30 UTC 2022 |x86_64","os_arch":"x86_64"} 2022-02-02 17:19:33,431 - wazuh_testing - DEBUG - 2022/02/02 21:18:57 wazuh-syscheckd[13420] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ 2022-02-02 17:19:33,431 - wazuh_testing - DEBUG - 2022/02/02 21:18:47 wazuh-db[8373] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-connection-status {"id":1,"connection_status":"disconnected","sync_status":"synced"} 2022-02-02 17:19:33,431 - wazuh_testing - DEBUG - 2022/02/02 21:18:57 wazuh-syscheckd[13420] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ OK? 2022-02-02 17:19:33,431 - wazuh_testing - DEBUG - 2022/02/02 21:18:47 wazuh-db[8373] main.c:290 at run_dealer(): DEBUG: New client connected (26). 2022-02-02 17:19:33,432 - wazuh_testing - DEBUG - 2022/02/02 21:18:47 wazuh-db[8373] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: get-labels 1 2022-02-02 17:19:33,432 - wazuh_testing - DEBUG - 2022/02/02 21:18:57 wazuh-syscheckd[13420] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-02 17:19:33,432 - wazuh_testing - DEBUG - 2022/02/02 21:18:57 wazuh-syscheckd[13420] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-02 17:19:33,432 - wazuh_testing - DEBUG - 2022/02/02 21:18:57 wazuh-db[8373] wdb.c:918 at wdb_commit_old(): DEBUG: Agent 'global' database commited. Time: 8.941 ms. 2022-02-02 17:19:33,432 - wazuh_testing - DEBUG - 2022/02/02 21:18:57 wazuh-syscheckd[13420] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-02 17:19:33,432 - wazuh_testing - DEBUG - 2022/02/02 21:18:57 wazuh-db[8373] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-keepalive {"id":1,"connection_status":"pending","sync_status":"synced"} 2022-02-02 17:19:33,432 - wazuh_testing - DEBUG - 2022/02/02 21:18:57 wazuh-syscheckd[13420] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-02 17:19:33,432 - wazuh_testing - DEBUG - 2022/02/02 21:18:57 wazuh-syscheckd[13420] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-02 17:19:33,433 - wazuh_testing - DEBUG - 2022/02/02 21:18:57 wazuh-syscheckd[13420] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-02 17:19:33,433 - wazuh_testing - DEBUG - 2022/02/02 21:18:57 wazuh-syscheckd[13420] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-02 17:19:33,433 - wazuh_testing - DEBUG - 2022/02/02 21:18:57 wazuh-syscheckd[13420] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-02 17:19:33,433 - wazuh_testing - DEBUG - 2022/02/02 21:18:57 wazuh-execd: INFO: Started (pid: 13433). 2022-02-02 17:19:33,433 - wazuh_testing - DEBUG - 2022/02/02 21:19:01 wazuh-db[8373] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.18.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.18.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.13.0-27-generic |#29~20.04.1-Ubuntu SMP Fri Jan 14 00:32:30 UTC 2022 |x86_64","os_arch":"x86_64"} 2022-02-02 17:19:33,433 - wazuh_testing - DEBUG - 2022/02/02 21:18:57 wazuh-agentd: INFO: (1410): Reading authentication keys file. 2022-02-02 17:19:33,433 - wazuh_testing - DEBUG - 2022/02/02 21:19:01 wazuh-db[8373] main.c:290 at run_dealer(): DEBUG: New client connected (33). 2022-02-02 17:19:33,434 - wazuh_testing - DEBUG - 2022/02/02 21:18:57 wazuh-agentd: INFO: Using notify time: 10 and max time to reconnect: 60 2022-02-02 17:19:33,434 - wazuh_testing - DEBUG - 2022/02/02 21:18:57 wazuh-agentd: INFO: Version detected -> Linux |wazuh-agent1 |5.13.0-27-generic |#29~20.04.1-Ubuntu SMP Fri Jan 14 00:32:30 UTC 2022 |x86_64 [Debian GNU/Linux|debian: 10 (buster)] - Wazuh v4.2.5 2022-02-02 17:19:33,434 - wazuh_testing - DEBUG - 2022/02/02 21:19:01 wazuh-db[8373] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1643833138 2022-02-02 17:19:33,434 - wazuh_testing - DEBUG - 2022/02/02 21:18:57 wazuh-agentd: INFO: Started (pid: 13441). 2022-02-02 17:19:33,434 - wazuh_testing - DEBUG - 2022/02/02 21:19:01 wazuh-db[8373] main.c:290 at run_dealer(): DEBUG: New client connected (34). 2022-02-02 17:19:33,434 - wazuh_testing - DEBUG - 2022/02/02 21:18:57 wazuh-agentd: INFO: Server IP Address: wazuh-manager/172.18.0.2 2022-02-02 17:19:33,434 - wazuh_testing - DEBUG - 2022/02/02 21:18:57 wazuh-agentd: INFO: Using AES as encryption method. 2022-02-02 17:19:33,435 - wazuh_testing - DEBUG - 2022/02/02 21:19:01 wazuh-db[8373] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update end_scan 1643833139 2022-02-02 17:19:33,435 - wazuh_testing - DEBUG - 2022/02/02 21:18:57 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.18.0.2:1514/tcp). 2022-02-02 17:19:33,435 - wazuh_testing - DEBUG - 2022/02/02 21:19:01 wazuh-db[8373] main.c:290 at run_dealer(): DEBUG: New client connected (37). 2022-02-02 17:19:33,435 - wazuh_testing - DEBUG - 2022/02/02 21:18:57 wazuh-agentd: INFO: (4102): Connected to the server (wazuh-manager/172.18.0.2:1514/tcp). 2022-02-02 17:19:33,435 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-02 17:19:33,435 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-02 17:19:33,436 - wazuh_testing - DEBUG - 2022/02/02 21:19:01 wazuh-db[8373] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_global {"id":1643833139,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"565e43b65393b73aa2c0ed5366ab17c8831b0a65"} 2022-02-02 17:19:33,436 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-02 17:19:33,436 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-02 17:19:33,436 - wazuh_testing - DEBUG - 2022/02/02 21:19:01 wazuh-db[8373] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 2.281 ms. 2022-02-02 17:19:33,436 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-02 17:19:33,436 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-02 17:19:33,436 - wazuh_testing - DEBUG - 2022/02/02 21:19:01 wazuh-db[8373] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643833139,"version":2,"begin":"/bin/bash","end":"/sbin/ctrlaltdel","tail":"/sbin/debugfs","checksum":"feb60a0fa04532d7be172177aefd751f47716ee5"} 2022-02-02 17:19:33,437 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-02 17:19:33,437 - wazuh_testing - DEBUG - 2022/02/02 21:19:01 wazuh-db[8373] main.c:290 at run_dealer(): DEBUG: New client connected (35). 2022-02-02 17:19:33,437 - wazuh_testing - DEBUG - 2022/02/02 21:19:01 wazuh-db[8373] main.c:290 at run_dealer(): DEBUG: New client connected (36). 2022-02-02 17:19:33,437 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ 2022-02-02 17:19:33,437 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ OK? 2022-02-02 17:19:33,437 - wazuh_testing - DEBUG - 2022/02/02 21:19:01 wazuh-db[8373] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643833139,"version":2,"begin":"/sbin/debugfs","end":"/usr/sbin/zic","checksum":"6b4206fd6011723882e37049fb4c0ce8c23b412c"} 2022-02-02 17:19:33,437 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-02 17:19:33,437 - wazuh_testing - DEBUG - 2022/02/02 21:19:01 wazuh-db[8373] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.895 ms. 2022-02-02 17:19:33,437 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-02 17:19:33,438 - wazuh_testing - DEBUG - 2022/02/02 21:19:01 wazuh-db[8373] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.535 ms. 2022-02-02 17:19:33,438 - wazuh_testing - DEBUG - 2022/02/02 21:19:01 wazuh-db[8373] main.c:290 at run_dealer(): DEBUG: New client connected (38). 2022-02-02 17:19:33,438 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-02 17:19:33,438 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-02 17:19:33,438 - wazuh_testing - DEBUG - 2022/02/02 21:19:01 wazuh-db[8373] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643833139,"version":2,"begin":"/sbin/debugfs","end":"/usr/bin/pdb","tail":"/usr/bin/pdb2","checksum":"93f970f1649daea14aecaea4f298c7d78afd0d90"} 2022-02-02 17:19:33,438 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-02 17:19:33,438 - wazuh_testing - DEBUG - 2022/02/02 21:19:01 wazuh-db[8373] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.543 ms. 2022-02-02 17:19:33,439 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-02 17:19:33,439 - wazuh_testing - DEBUG - 2022/02/02 21:19:01 wazuh-db[8373] main.c:290 at run_dealer(): DEBUG: New client connected (39). 2022-02-02 17:19:33,439 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-02 17:19:33,439 - wazuh_testing - DEBUG - 2022/02/02 21:19:01 wazuh-db[8373] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643833139,"version":2,"begin":"/usr/bin/pdb2","end":"/usr/sbin/zic","checksum":"f28534dbcbabe145177a8e0c707d9da341991c1f"} 2022-02-02 17:19:33,439 - wazuh_testing - DEBUG - 2022/02/02 21:19:01 wazuh-db[8373] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.351 ms. 2022-02-02 17:19:33,439 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-02 17:19:33,439 - wazuh_testing - DEBUG - 2022/02/02 21:19:01 wazuh-db[8373] main.c:290 at run_dealer(): DEBUG: New client connected (40). 2022-02-02 17:19:33,440 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 rootcheck[13453] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled. 2022-02-02 17:19:33,440 - wazuh_testing - DEBUG - 2022/02/02 21:19:01 wazuh-db[8373] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643833139,"version":2,"begin":"/sbin/debugfs","end":"/usr/bin/dpkg-divert","tail":"/usr/bin/dpkg-genbuildinfo","checksum":"68c3cc00933a069f8a17f72e605cd10dd3ec86e1"} 2022-02-02 17:19:33,440 - wazuh_testing - DEBUG - 2022/02/02 21:19:01 wazuh-db[8373] main.c:290 at run_dealer(): DEBUG: New client connected (41). 2022-02-02 17:19:33,440 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:19:33,440 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] syscom.c:123 at syscom_main(): DEBUG: (6284): Local requests thread ready. 2022-02-02 17:19:33,440 - wazuh_testing - DEBUG - 2022/02/02 21:19:01 wazuh-db[8373] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643833139,"version":2,"begin":"/usr/bin/dpkg-genbuildinfo","end":"/usr/bin/pdb","checksum":"449176f3ac058628fcde8cdfbd7a7d029ac13e05"} 2022-02-02 17:19:33,441 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] mq_op.c:47 at StartMQ(): DEBUG: Connected succesfully to 'queue/sockets/queue' after 0 attempts 2022-02-02 17:19:33,441 - wazuh_testing - DEBUG - 2022/02/02 21:19:01 wazuh-db[8373] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.339 ms. 2022-02-02 17:19:33,441 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] mq_op.c:48 at StartMQ(): DEBUG: (unix_domain) Maximum send buffer set to: '212992'. 2022-02-02 17:19:33,441 - wazuh_testing - DEBUG - 2022/02/02 21:19:01 wazuh-db[8373] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.333 ms. 2022-02-02 17:19:33,441 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] main.c:185 at main(): INFO: Started (pid: 13455). 2022-02-02 17:19:33,441 - wazuh_testing - DEBUG - 2022/02/02 21:19:01 wazuh-db[8373] main.c:290 at run_dealer(): DEBUG: New client connected (42). 2022-02-02 17:19:33,441 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] main.c:193 at main(): INFO: (6003): Monitoring path: '/bin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:19:33,441 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] main.c:193 at main(): INFO: (6003): Monitoring path: '/boot', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:19:33,442 - wazuh_testing - DEBUG - 2022/02/02 21:19:01 wazuh-db[8373] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643833139,"version":2,"begin":"/sbin/debugfs","end":"/usr/bin/apt-extracttemplates","tail":"/usr/bin/apt-ftparchive","checksum":"21f7ec95dc42689a46217036ce09c83a2b445227"} 2022-02-02 17:19:33,442 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] main.c:193 at main(): INFO: (6003): Monitoring path: '/etc', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:19:33,442 - wazuh_testing - DEBUG - 2022/02/02 21:19:01 wazuh-db[8373] main.c:290 at run_dealer(): DEBUG: New client connected (43). 2022-02-02 17:19:33,442 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] main.c:193 at main(): INFO: (6003): Monitoring path: '/sbin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:19:33,442 - wazuh_testing - DEBUG - 2022/02/02 21:19:01 wazuh-db[8373] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643833139,"version":2,"begin":"/usr/bin/apt-ftparchive","end":"/usr/bin/dpkg-divert","checksum":"84aaf018d588e1d99c714364b63c94e1d4eb4bf2"} 2022-02-02 17:19:33,442 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir1', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:19:33,442 - wazuh_testing - DEBUG - 2022/02/02 21:19:01 wazuh-db[8373] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.261 ms. 2022-02-02 17:19:33,442 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir2', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | realtime'. 2022-02-02 17:19:33,443 - wazuh_testing - DEBUG - 2022/02/02 21:19:01 wazuh-db[8373] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.303 ms. 2022-02-02 17:19:33,443 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir3', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | whodata'. 2022-02-02 17:19:33,443 - wazuh_testing - DEBUG - 2022/02/02 21:19:01 wazuh-db[8373] main.c:290 at run_dealer(): DEBUG: New client connected (44). 2022-02-02 17:19:33,443 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/bin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:19:33,443 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/sbin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:19:33,443 - wazuh_testing - DEBUG - 2022/02/02 21:19:01 wazuh-db[8373] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643833139,"version":2,"begin":"/sbin/debugfs","end":"/sbin/mkswap","tail":"/sbin/nameif","checksum":"7f903b5a93e8d84c29c51eef17b4981268b3b3e9"} 2022-02-02 17:19:33,443 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] main.c:215 at main(): DEBUG: (6357): Maximum disk quota size limit configured to '1048576 KB'. 2022-02-02 17:19:33,444 - wazuh_testing - DEBUG - 2022/02/02 21:19:01 wazuh-db[8373] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.087 ms. 2022-02-02 17:19:33,444 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mtab' 2022-02-02 17:19:33,444 - wazuh_testing - DEBUG - 2022/02/02 21:19:02 wazuh-db[8373] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643833139,"version":2,"begin":"/sbin/nameif","end":"/usr/bin/apt-extracttemplates","checksum":"a7a9aee0b940190dbddac0fd1cb0253b614d2829"} 2022-02-02 17:19:33,444 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/hosts.deny' 2022-02-02 17:19:33,444 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mail/statistics' 2022-02-02 17:19:33,444 - wazuh_testing - DEBUG - 2022/02/02 21:19:02 wazuh-db[8373] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.199 ms. 2022-02-02 17:19:33,444 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random-seed' 2022-02-02 17:19:33,445 - wazuh_testing - DEBUG - 2022/02/02 21:19:02 wazuh-db[8373] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643833139,"version":2,"begin":"/sbin/nameif","end":"/sbin/sulogin","tail":"/sbin/swaplabel","checksum":"49ff201d0c750613490261cc0532e1c4d1912000"} 2022-02-02 17:19:33,445 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random.seed' 2022-02-02 17:19:33,445 - wazuh_testing - DEBUG - 2022/02/02 21:19:02 wazuh-db[8373] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.084 ms. 2022-02-02 17:19:33,445 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/adjtime' 2022-02-02 17:19:33,445 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/httpd/logs' 2022-02-02 17:19:33,445 - wazuh_testing - DEBUG - 2022/02/02 21:19:02 wazuh-db[8373] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643833139,"version":2,"begin":"/sbin/swaplabel","end":"/usr/bin/apt-extracttemplates","checksum":"e076e412d4a4a3af4faa794a6b87bac1fcdf608c"} 2022-02-02 17:19:33,445 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/utmpx' 2022-02-02 17:19:33,446 - wazuh_testing - DEBUG - 2022/02/02 21:19:02 wazuh-db[8373] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.096 ms. 2022-02-02 17:19:33,446 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/wtmpx' 2022-02-02 17:19:33,446 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/cups/certs' 2022-02-02 17:19:33,446 - wazuh_testing - DEBUG - 2022/02/02 21:19:02 wazuh-db[8373] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643833139,"version":2,"begin":"/sbin/swaplabel","end":"/sbin/zramctl","tail":"/testdir1/testdir1.txt","checksum":"0dcfb498562418787b543857febcbed14ea706ac"} 2022-02-02 17:19:33,446 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/dumpdates' 2022-02-02 17:19:33,446 - wazuh_testing - DEBUG - 2022/02/02 21:19:02 wazuh-db[8373] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.081 ms. 2022-02-02 17:19:33,446 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/svc/volatile' 2022-02-02 17:19:33,447 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/security' 2022-02-02 17:19:33,447 - wazuh_testing - DEBUG - 2022/02/02 21:19:02 wazuh-db[8373] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643833139,"version":2,"begin":"/testdir1/testdir1.txt","end":"/usr/bin/apt-extracttemplates","checksum":"6881be8baa09333104174e9bdd3d40156adf1925"} 2022-02-02 17:19:33,447 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/debug' 2022-02-02 17:19:33,447 - wazuh_testing - DEBUG - 2022/02/02 21:19:02 wazuh-db[8373] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.098 ms. 2022-02-02 17:19:33,447 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/dev/core' 2022-02-02 17:19:33,447 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '^/proc' 2022-02-02 17:19:33,447 - wazuh_testing - DEBUG - 2022/02/02 21:19:02 wazuh-db[8373] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643833139,"version":2,"begin":"/testdir1/testdir1.txt","end":"/usr/bin/aclocal-1.16","tail":"/usr/bin/addpart","checksum":"f0fd279b7cc0df632ec8f6135d6aae9669d10c74"} 2022-02-02 17:19:33,448 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '.log$|.swp$' 2022-02-02 17:19:33,448 - wazuh_testing - DEBUG - 2022/02/02 21:19:02 wazuh-db[8373] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.060 ms. 2022-02-02 17:19:33,448 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] main.c:235 at main(): INFO: (6004): No diff for file: '/etc/ssl/private.key' 2022-02-02 17:19:33,448 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] main.c:245 at main(): INFO: (6016): Directory set for real time monitoring: '/testdir2'. 2022-02-02 17:19:33,448 - wazuh_testing - DEBUG - 2022/02/02 21:19:02 wazuh-db[8373] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643833139,"version":2,"begin":"/usr/bin/addpart","end":"/usr/bin/apt-extracttemplates","checksum":"95a692828de0dea4b6ca328f569037eaa082ab85"} 2022-02-02 17:19:33,448 - wazuh_testing - DEBUG - 2022/02/02 21:19:02 wazuh-db[8373] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.059 ms. 2022-02-02 17:19:33,449 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] syscheck_audit.c:243 at audit_init(): WARNING: (6924): Who-data engine cannot start because Auditd is not running. 2022-02-02 17:19:33,449 - wazuh_testing - DEBUG - 2022/02/02 21:19:02 wazuh-db[8373] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643833139,"version":2,"begin":"/testdir1/testdir1.txt","end":"/usr/bin/2to3-2.7","tail":"/usr/bin/[","checksum":"6818f556f73be64cb88f6797124d256b7a94fc90"} 2022-02-02 17:19:33,449 - wazuh_testing - DEBUG - 2022/02/02 21:19:02 wazuh-db[8373] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.057 ms. 2022-02-02 17:19:33,449 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] main.c:264 at main(): WARNING: (6913): Who-data engine could not start. Switching who-data to real-time. 2022-02-02 17:19:33,450 - wazuh_testing - DEBUG - 2022/02/02 21:19:02 wazuh-db[8373] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643833139,"version":2,"begin":"/usr/bin/[","end":"/usr/bin/aclocal-1.16","checksum":"ab72adc86d2a1f2e36162f60b40bf10d71afc73a"} 2022-02-02 17:19:33,450 - wazuh_testing - DEBUG - 2022/02/02 21:19:02 wazuh-db[8373] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.088 ms. 2022-02-02 17:19:33,450 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] run_check.c:194 at start_daemon(): DEBUG: (6320): Setting process priority to: '10' 2022-02-02 17:19:33,450 - wazuh_testing - DEBUG - 2022/02/02 21:19:02 wazuh-db[8373] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643833139,"version":2,"begin":"/testdir1/testdir1.txt","end":"/testdir1/testdir1.txt","tail":"/testdir1/tmpy48peyus","checksum":"93b7e04bf1724b66256e3aa31d4af09b7bb53a4c"} 2022-02-02 17:19:33,450 - wazuh_testing - DEBUG - 2022/02/02 21:19:02 wazuh-db[8373] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.088 ms. 2022-02-02 17:19:33,451 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:19:33,451 - wazuh_testing - DEBUG - 2022/02/02 21:19:03 wazuh-db[8373] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643833139,"version":2,"begin":"/testdir1/tmpy48peyus","end":"/usr/bin/2to3-2.7","checksum":"40ae14ef3b514d8651d1b19e9e7d87cde788d515"} 2022-02-02 17:19:33,451 - wazuh_testing - DEBUG - 2022/02/02 21:19:03 wazuh-db[8373] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.065 ms. 2022-02-02 17:19:33,452 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] run_check.c:229 at start_daemon(): INFO: (6000): Starting daemon... 2022-02-02 17:19:33,452 - wazuh_testing - DEBUG - 2022/02/02 21:19:03 wazuh-db[8373] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643833139,"version":2,"begin":"/testdir1/tmpy48peyus","end":"/testdir1/tmpy48peyus","tail":"/usr/bin/2to3-2.7","checksum":"549d39ad55702bbee4f01db9669ef0800121f8f8"} 2022-02-02 17:19:33,452 - wazuh_testing - DEBUG - 2022/02/02 21:19:03 wazuh-db[8373] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643833139,"version":2,"begin":"/usr/bin/2to3-2.7","end":"/usr/bin/2to3-2.7","checksum":"4288e49f7e69481516baa382943d5a652f7e069b"} 2022-02-02 17:19:33,453 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] run_check.c:232 at start_daemon(): INFO: (6010): File integrity monitoring scan frequency: 20 seconds 2022-02-02 17:19:33,453 - wazuh_testing - DEBUG - 2022/02/02 21:19:03 wazuh-db[8373] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.103 ms. 2022-02-02 17:19:33,453 - wazuh_testing - DEBUG - 2022/02/02 21:19:03 wazuh-db[8373] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file save2 {"path":"/testdir1/tmpy48peyus","timestamp":1643833138,"version":2,"attributes":{"type":"file","size":8,"perm":"rw-r--r--","uid":"0","gid":"0","user_name":"root","group_name":"root","inode":7239393,"mtime":1643833133,"hash_md5":"e770e54c4c42d3307c141c0c8948992a","hash_sha1":"9eab19985b11b15f91f936e463ea74f1dfe88e32","hash_sha256":"b1893f8d4b1596c20d6f83a784b2b0468c22fb83ce4ff2033ff86a37865d41d8","checksum":"3bcfa8c99a3c7f58f3a1dfd2a5981efa4ee0ebb4"}} 2022-02-02 17:19:33,454 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-02 17:19:33,454 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-manager and message: .*Agent 001 query: (.+) save2 2022-02-02 17:19:33,455 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1643833138}} 2022-02-02 17:19:33,456 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-02 17:19:33,457 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-02 17:19:33,457 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-02 17:19:33,458 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-02 17:19:33,459 - wazuh_testing - DEBUG - 2022/02/02 21:18:58 wazuh-syscheckd[13453] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-02 17:19:33,459 - wazuh_testing - DEBUG - 2022/02/02 21:18:59 wazuh-logcollector: INFO: (1950): Analyzing file: '/var/ossec/logs/active-responses.log'. 2022-02-02 17:19:33,459 - wazuh_testing - DEBUG - 2022/02/02 21:18:59 wazuh-logcollector: ERROR: (1103): Could not open file '/var/log/secure' due to [(2)-(No such file or directory)]. 2022-02-02 17:19:33,460 - wazuh_testing - DEBUG - 2022/02/02 21:18:59 wazuh-logcollector: INFO: (1950): Analyzing file: '/var/log/secure'. 2022-02-02 17:19:33,460 - wazuh_testing - DEBUG - 2022/02/02 21:18:59 wazuh-logcollector: INFO: Started (pid: 13467). 2022-02-02 17:19:33,461 - wazuh_testing - DEBUG - 2022/02/02 21:18:59 wazuh-syscheckd[13453] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-02 17:19:33,461 - wazuh_testing - DEBUG - 2022/02/02 21:18:59 wazuh-syscheckd[13453] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-02 17:19:33,461 - wazuh_testing - DEBUG - 2022/02/02 21:18:59 wazuh-syscheckd[13453] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1643833139}} 2022-02-02 17:19:33,462 - wazuh_testing - DEBUG - 2022/02/02 21:18:59 wazuh-syscheckd[13453] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 1.314 sec (1.310 clock sec) 2022-02-02 17:19:33,462 - wazuh_testing - DEBUG - 2022/02/02 21:18:59 wazuh-syscheckd[13453] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1622, path count: 1628 2022-02-02 17:19:33,462 - wazuh_testing - DEBUG - 2022/02/02 21:18:59 wazuh-syscheckd[13453] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:19:33,463 - wazuh_testing - DEBUG - 2022/02/02 21:18:59 wazuh-syscheckd[13453] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:19:33,463 - wazuh_testing - DEBUG - 2022/02/02 21:18:59 wazuh-syscheckd[13453] run_check.c:387 at fim_run_realtime(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-02 17:19:33,464 - wazuh_testing - DEBUG - 2022/02/02 21:18:59 wazuh-syscheckd[13453] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:19:33,464 - wazuh_testing - DEBUG - 2022/02/02 21:18:59 wazuh-syscheckd[13453] run_check.c:543 at log_realtime_status(): INFO: (6012): Real-time file integrity monitoring started. 2022-02-02 17:19:33,464 - wazuh_testing - DEBUG - 2022/02/02 21:18:59 wazuh-syscheckd[13453] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. 2022-02-02 17:19:33,465 - wazuh_testing - DEBUG - 2022/02/02 21:18:59 wazuh-syscheckd[13453] run_check.c:568 at symlink_checker_thread(): DEBUG: (6033): Starting symbolic link updater. Interval '600'. 2022-02-02 17:19:33,465 - wazuh_testing - DEBUG - 2022/02/02 21:18:59 wazuh-syscheckd[13453] run_check.c:82 at fim_send_sync_msg(): DEBUG: (6317): Sending integrity control message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1643833139,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"565e43b65393b73aa2c0ed5366ab17c8831b0a65"}} 2022-02-02 17:19:33,467 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-agent1 and message: .*Sending integrity control message: (.+)$ 2022-02-02 17:19:34,432 - wazuh_testing - DEBUG - Cleaning temporal files... 2022-02-02 17:19:34,432 - wazuh_testing - DEBUG - Checking results... 2022-02-02 17:19:34,434 - wazuh_testing - DEBUG - Received from wazuh-manager the expected message: 2022/02/02 21:19:03 wazuh-db[8373] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file save2 {"path":"/testdir1/tmpy48peyus","timestamp":1643833138,"version":2,"attributes":{"type":"file","size":8,"perm":"rw-r--r--","uid":"0","gid":"0","user_name":"root","group_name":"root","inode":7239393,"mtime":1643833133,"hash_md5":"e770e54c4c42d3307c141c0c8948992a","hash_sha1":"9eab19985b11b15f91f936e463ea74f1dfe88e32","hash_sha256":"b1893f8d4b1596c20d6f83a784b2b0468c22fb83ce4ff2033ff86a37865d41d8","checksum":"3bcfa8c99a3c7f58f3a1dfd2a5981efa4ee0ebb4"}} 2022-02-02 17:19:34,435 - wazuh_testing - DEBUG - Received from wazuh-agent1 the expected message: 2022/02/02 21:18:59 wazuh-syscheckd[13453] run_check.c:82 at fim_send_sync_msg(): DEBUG: (6317): Sending integrity control message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1643833139,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"565e43b65393b73aa2c0ed5366ab17c8831b0a65"}} 2022-02-02 17:20:20,373 - wazuh_testing - DEBUG - Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-02 17:20:20,376 - wazuh_testing - DEBUG - Starting file composer for wazuh-manager and path: /var/ossec/logs/ossec.log. Composite file in /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-manager_ossec.log.tmp 2022-02-02 17:20:20,376 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-02 17:20:20,379 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-manager and message: .*Initializing FIM Integrity Synchronization check. (.+)$ 2022-02-02 17:20:21,883 - wazuh_testing - DEBUG - 2022/02/02 21:19:40 wazuh-db[8373] wdb.c:918 at wdb_commit_old(): DEBUG: Agent '001' database commited. Time: 3.519 ms. 2022-02-02 17:20:21,885 - wazuh_testing - DEBUG - 2022/02/02 21:19:45 wazuh-db[8373] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.18.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.18.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.13.0-27-generic |#29~20.04.1-Ubuntu SMP Fri Jan 14 00:32:30 UTC 2022 |x86_64","os_arch":"x86_64"} 2022-02-02 17:20:21,885 - wazuh_testing - DEBUG - 2022/02/02 21:19:47 wazuh-modulesd:syscollector: INFO: Stop received for Syscollector. 2022-02-02 17:20:21,886 - wazuh_testing - DEBUG - 2022/02/02 21:19:47 wazuh-db[8373] main.c:352 at run_worker(): DEBUG: Client 11 disconnected. 2022-02-02 17:20:21,888 - wazuh_testing - DEBUG - 2022/02/02 21:19:47 wazuh-monitord: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:20:21,889 - wazuh_testing - DEBUG - 2022/02/02 21:19:48 wazuh-logcollector: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:20:21,889 - wazuh_testing - DEBUG - 2022/02/02 21:19:48 wazuh-remoted: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:20:21,889 - wazuh_testing - DEBUG - 2022/02/02 21:19:48 wazuh-db[8373] main.c:352 at run_worker(): DEBUG: Client 29 disconnected. 2022-02-02 17:20:21,889 - wazuh_testing - DEBUG - 2022/02/02 21:19:48 wazuh-db[8373] main.c:352 at run_worker(): DEBUG: Client 21 disconnected. 2022-02-02 17:20:21,889 - wazuh_testing - DEBUG - 2022/02/02 21:19:48 wazuh-db[8373] main.c:352 at run_worker(): DEBUG: Client 18 disconnected. 2022-02-02 17:20:21,890 - wazuh_testing - DEBUG - 2022/02/02 21:19:48 wazuh-db[8373] main.c:352 at run_worker(): DEBUG: Client 16 disconnected. 2022-02-02 17:20:21,890 - wazuh_testing - DEBUG - 2022/02/02 21:19:48 wazuh-syscheckd[8543] sig_op.c:49 at HandleSIG(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:20:21,890 - wazuh_testing - DEBUG - 2022/02/02 21:19:48 wazuh-analysisd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:20:21,890 - wazuh_testing - DEBUG - 2022/02/02 21:19:48 wazuh-db[8373] main.c:352 at run_worker(): DEBUG: Client 44 disconnected. 2022-02-02 17:20:21,890 - wazuh_testing - DEBUG - 2022/02/02 21:19:48 wazuh-db[8373] main.c:352 at run_worker(): DEBUG: Client 46 disconnected. 2022-02-02 17:20:21,891 - wazuh_testing - DEBUG - 2022/02/02 21:19:48 wazuh-db[8373] main.c:352 at run_worker(): DEBUG: Client 43 disconnected. 2022-02-02 17:20:21,891 - wazuh_testing - DEBUG - 2022/02/02 21:19:48 wazuh-db[8373] main.c:352 at run_worker(): DEBUG: Client 42 disconnected. 2022-02-02 17:20:21,891 - wazuh_testing - DEBUG - 2022/02/02 21:19:48 wazuh-db[8373] main.c:352 at run_worker(): DEBUG: Client 41 disconnected. 2022-02-02 17:20:21,891 - wazuh_testing - DEBUG - 2022/02/02 21:19:48 wazuh-db[8373] main.c:352 at run_worker(): DEBUG: Client 40 disconnected. 2022-02-02 17:20:21,891 - wazuh_testing - DEBUG - 2022/02/02 21:19:48 wazuh-db[8373] main.c:352 at run_worker(): DEBUG: Client 38 disconnected. 2022-02-02 17:20:21,892 - wazuh_testing - DEBUG - 2022/02/02 21:19:48 wazuh-db[8373] main.c:352 at run_worker(): DEBUG: Client 39 disconnected. 2022-02-02 17:20:21,892 - wazuh_testing - DEBUG - 2022/02/02 21:19:48 wazuh-db[8373] main.c:352 at run_worker(): DEBUG: Client 36 disconnected. 2022-02-02 17:20:21,892 - wazuh_testing - DEBUG - 2022/02/02 21:19:48 wazuh-db[8373] main.c:352 at run_worker(): DEBUG: Client 31 disconnected. 2022-02-02 17:20:21,892 - wazuh_testing - DEBUG - 2022/02/02 21:19:48 wazuh-db[8373] main.c:352 at run_worker(): DEBUG: Client 32 disconnected. 2022-02-02 17:20:21,892 - wazuh_testing - DEBUG - 2022/02/02 21:19:48 wazuh-db[8373] main.c:352 at run_worker(): DEBUG: Client 34 disconnected. 2022-02-02 17:20:21,893 - wazuh_testing - DEBUG - 2022/02/02 21:19:48 wazuh-db[8373] main.c:352 at run_worker(): DEBUG: Client 26 disconnected. 2022-02-02 17:20:21,893 - wazuh_testing - DEBUG - 2022/02/02 21:19:48 wazuh-db[8373] main.c:352 at run_worker(): DEBUG: Client 35 disconnected. 2022-02-02 17:20:21,893 - wazuh_testing - DEBUG - 2022/02/02 21:19:48 wazuh-db[8373] main.c:352 at run_worker(): DEBUG: Client 33 disconnected. 2022-02-02 17:20:21,893 - wazuh_testing - DEBUG - 2022/02/02 21:19:48 wazuh-db[8373] main.c:352 at run_worker(): DEBUG: Client 37 disconnected. 2022-02-02 17:20:21,894 - wazuh_testing - DEBUG - 2022/02/02 21:19:48 wazuh-db[8373] main.c:352 at run_worker(): DEBUG: Client 23 disconnected. 2022-02-02 17:20:21,894 - wazuh_testing - DEBUG - 2022/02/02 21:19:48 wazuh-db[8373] main.c:352 at run_worker(): DEBUG: Client 28 disconnected. 2022-02-02 17:20:21,894 - wazuh_testing - DEBUG - 2022/02/02 21:19:48 wazuh-db[8373] main.c:352 at run_worker(): DEBUG: Client 19 disconnected. 2022-02-02 17:20:21,894 - wazuh_testing - DEBUG - 2022/02/02 21:19:48 wazuh-db[8373] main.c:352 at run_worker(): DEBUG: Client 27 disconnected. 2022-02-02 17:20:21,894 - wazuh_testing - DEBUG - 2022/02/02 21:19:48 wazuh-db[8373] main.c:352 at run_worker(): DEBUG: Client 13 disconnected. 2022-02-02 17:20:21,895 - wazuh_testing - DEBUG - 2022/02/02 21:19:48 wazuh-db[8373] main.c:352 at run_worker(): DEBUG: Client 30 disconnected. 2022-02-02 17:20:21,895 - wazuh_testing - DEBUG - 2022/02/02 21:19:48 wazuh-db[8373] main.c:352 at run_worker(): DEBUG: Client 22 disconnected. 2022-02-02 17:20:21,895 - wazuh_testing - DEBUG - 2022/02/02 21:19:48 wazuh-db[8373] main.c:352 at run_worker(): DEBUG: Client 20 disconnected. 2022-02-02 17:20:21,895 - wazuh_testing - DEBUG - 2022/02/02 21:19:48 wazuh-db[8373] main.c:352 at run_worker(): DEBUG: Client 25 disconnected. 2022-02-02 17:20:21,896 - wazuh_testing - DEBUG - 2022/02/02 21:19:48 wazuh-db[8373] main.c:352 at run_worker(): DEBUG: Client 12 disconnected. 2022-02-02 17:20:21,896 - wazuh_testing - DEBUG - 2022/02/02 21:19:48 wazuh-db[8373] main.c:352 at run_worker(): DEBUG: Client 24 disconnected. 2022-02-02 17:20:21,896 - wazuh_testing - DEBUG - 2022/02/02 21:19:48 wazuh-db[8373] main.c:352 at run_worker(): DEBUG: Client 6 disconnected. 2022-02-02 17:20:21,896 - wazuh_testing - DEBUG - 2022/02/02 21:19:48 wazuh-db[8373] main.c:352 at run_worker(): DEBUG: Client 10 disconnected. 2022-02-02 17:20:21,896 - wazuh_testing - DEBUG - 2022/02/02 21:19:48 wazuh-execd: INFO: (1314): Shutdown received. Deleting responses. 2022-02-02 17:20:21,897 - wazuh_testing - DEBUG - 2022/02/02 21:19:48 wazuh-execd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:20:21,897 - wazuh_testing - DEBUG - 2022/02/02 21:19:48 wazuh-db[8373] main.c:468 at handler(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:20:21,897 - wazuh_testing - DEBUG - 2022/02/02 21:19:49 wazuh-db[8373] wdb.c:872 at wdb_close_all(): DEBUG: Closing all databases... 2022-02-02 17:20:21,897 - wazuh_testing - DEBUG - 2022/02/02 21:19:49 wazuh-db[8373] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent 001 2022-02-02 17:20:21,897 - wazuh_testing - DEBUG - 2022/02/02 21:19:49 wazuh-db[8373] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent 000 2022-02-02 17:20:21,898 - wazuh_testing - DEBUG - 2022/02/02 21:19:49 wazuh-db[8373] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent mitre 2022-02-02 17:20:21,898 - wazuh_testing - DEBUG - 2022/02/02 21:19:49 wazuh-db[8373] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent global 2022-02-02 17:20:21,898 - wazuh_testing - DEBUG - 2022/02/02 21:19:49 wazuh-db[8373] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent tasks 2022-02-02 17:20:21,898 - wazuh_testing - DEBUG - 2022/02/02 21:19:49 wazuh-db[8373] main.c:231 at main(): DEBUG: Template file removed again: queue/db/.template.db 2022-02-02 17:20:21,898 - wazuh_testing - DEBUG - 2022/02/02 21:19:49 wazuh-authd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:20:21,898 - wazuh_testing - DEBUG - 2022/02/02 21:19:50 wazuh-authd: INFO: Exiting... 2022-02-02 17:20:21,899 - wazuh_testing - DEBUG - 2022/02/02 21:20:04 wazuh-db[9252] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-02 17:20:21,899 - wazuh_testing - DEBUG - 2022/02/02 21:20:04 wazuh-db[9252] main.c:101 at main(): DEBUG: Wazuh home directory: /var/ossec 2022-02-02 17:20:21,899 - wazuh_testing - DEBUG - 2022/02/02 21:20:05 wazuh-syscheckd[9256] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-02 17:20:21,899 - wazuh_testing - DEBUG - 2022/02/02 21:20:05 wazuh-syscheckd[9256] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-02 17:20:21,899 - wazuh_testing - DEBUG - 2022/02/02 21:20:05 wazuh-syscheckd[9256] syscheck-config.c:122 at organize_syscheck_dirs(): DEBUG: No directory entries to organize in syscheck configuration. 2022-02-02 17:20:21,900 - wazuh_testing - DEBUG - 2022/02/02 21:20:12 wazuh-csyslogd: INFO: Remote syslog server not configured. Clean exit. 2022-02-02 17:20:21,900 - wazuh_testing - DEBUG - 2022/02/02 21:20:12 wazuh-dbd: INFO: Database not configured. Clean exit. 2022-02-02 17:20:21,900 - wazuh_testing - DEBUG - 2022/02/02 21:20:12 wazuh-integratord: INFO: Remote integrations not configured. Clean exit. 2022-02-02 17:20:21,901 - wazuh_testing - DEBUG - 2022/02/02 21:20:12 wazuh-agentlessd: INFO: Not configured. Exiting. 2022-02-02 17:20:21,901 - wazuh_testing - DEBUG - 2022/02/02 21:20:12 wazuh-authd: INFO: Started (pid: 9322). 2022-02-02 17:20:21,902 - wazuh_testing - DEBUG - 2022/02/02 21:20:12 wazuh-authd: INFO: Accepting connections on port 1515. No password required. 2022-02-02 17:20:21,902 - wazuh_testing - DEBUG - 2022/02/02 21:20:12 wazuh-authd: INFO: Setting network timeout to 1.000000 sec. 2022-02-02 17:20:21,903 - wazuh_testing - DEBUG - 2022/02/02 21:20:12 wazuh-db[9333] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-02 17:20:21,903 - wazuh_testing - DEBUG - 2022/02/02 21:20:12 wazuh-db[9333] main.c:101 at main(): DEBUG: Wazuh home directory: /var/ossec 2022-02-02 17:20:21,904 - wazuh_testing - DEBUG - 2022/02/02 21:20:12 wazuh-db[9333] main.c:122 at main(): DEBUG: Template file removed: /var/ossec/queue/db/.template.db 2022-02-02 17:20:21,904 - wazuh_testing - DEBUG - 2022/02/02 21:20:12 wazuh-db[9333] main.c:178 at main(): INFO: Started (pid: 9335). 2022-02-02 17:20:21,904 - wazuh_testing - DEBUG - 2022/02/02 21:20:13 wazuh-execd: INFO: (1350): Active response disabled. 2022-02-02 17:20:21,904 - wazuh_testing - DEBUG - 2022/02/02 21:20:13 wazuh-execd: INFO: Started (pid: 9358). 2022-02-02 17:20:21,905 - wazuh_testing - DEBUG - 2022/02/02 21:20:14 wazuh-analysisd: INFO: Total rules enabled: '3882' 2022-02-02 17:20:21,905 - wazuh_testing - DEBUG - 2022/02/02 21:20:14 wazuh-analysisd: INFO: Started (pid: 9372). 2022-02-02 17:20:21,905 - wazuh_testing - DEBUG - 2022/02/02 21:20:14 wazuh-db[9333] main.c:290 at run_dealer(): DEBUG: New client connected (6). 2022-02-02 17:20:21,905 - wazuh_testing - DEBUG - 2022/02/02 21:20:14 wazuh-analysisd: INFO: (7200): Logtest started 2022-02-02 17:20:21,906 - wazuh_testing - DEBUG - 2022/02/02 21:20:15 wazuh-syscheckd[9503] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-02 17:20:21,906 - wazuh_testing - DEBUG - 2022/02/02 21:20:15 wazuh-syscheckd[9503] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-02 17:20:21,906 - wazuh_testing - DEBUG - 2022/02/02 21:20:15 wazuh-syscheckd[9503] syscheck-config.c:122 at organize_syscheck_dirs(): DEBUG: No directory entries to organize in syscheck configuration. 2022-02-02 17:20:21,906 - wazuh_testing - DEBUG - 2022/02/02 21:20:15 wazuh-syscheckd[9503] main.c:118 at main(): INFO: (6678): No directory provided for syscheck to monitor. 2022-02-02 17:20:21,906 - wazuh_testing - DEBUG - 2022/02/02 21:20:15 wazuh-syscheckd[9503] main.c:136 at main(): INFO: (6001): File integrity monitoring disabled. 2022-02-02 17:20:21,907 - wazuh_testing - DEBUG - 2022/02/02 21:20:15 rootcheck[9503] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled. 2022-02-02 17:20:21,907 - wazuh_testing - DEBUG - 2022/02/02 21:20:15 wazuh-syscheckd[9503] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:20:21,907 - wazuh_testing - DEBUG - 2022/02/02 21:20:15 wazuh-syscheckd[9503] syscom.c:123 at syscom_main(): DEBUG: (6284): Local requests thread ready. 2022-02-02 17:20:21,907 - wazuh_testing - DEBUG - 2022/02/02 21:20:15 wazuh-syscheckd[9503] mq_op.c:47 at StartMQ(): DEBUG: Connected succesfully to 'queue/sockets/queue' after 0 attempts 2022-02-02 17:20:21,908 - wazuh_testing - DEBUG - 2022/02/02 21:20:15 wazuh-syscheckd[9503] mq_op.c:48 at StartMQ(): DEBUG: (unix_domain) Maximum send buffer set to: '212992'. 2022-02-02 17:20:21,908 - wazuh_testing - DEBUG - 2022/02/02 21:20:15 wazuh-syscheckd[9503] main.c:185 at main(): INFO: Started (pid: 9505). 2022-02-02 17:20:21,908 - wazuh_testing - DEBUG - 2022/02/02 21:20:15 wazuh-syscheckd[9503] main.c:215 at main(): DEBUG: (6357): Maximum disk quota size limit configured to '1048576 KB'. 2022-02-02 17:20:21,908 - wazuh_testing - DEBUG - 2022/02/02 21:20:15 wazuh-syscheckd[9503] run_check.c:194 at start_daemon(): DEBUG: (6320): Setting process priority to: '10' 2022-02-02 17:20:21,909 - wazuh_testing - DEBUG - 2022/02/02 21:20:15 wazuh-syscheckd[9503] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:20:21,909 - wazuh_testing - DEBUG - 2022/02/02 21:20:15 wazuh-syscheckd[9503] run_check.c:229 at start_daemon(): INFO: (6000): Starting daemon... 2022-02-02 17:20:21,909 - wazuh_testing - DEBUG - 2022/02/02 21:20:15 wazuh-syscheckd[9503] run_check.c:232 at start_daemon(): INFO: (6010): File integrity monitoring scan frequency: 43200 seconds 2022-02-02 17:20:21,909 - wazuh_testing - DEBUG - 2022/02/02 21:20:15 wazuh-syscheckd[9503] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-02 17:20:21,910 - wazuh_testing - DEBUG - 2022/02/02 21:20:15 wazuh-syscheckd[9503] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1643833215}} 2022-02-02 17:20:21,910 - wazuh_testing - DEBUG - 2022/02/02 21:20:15 wazuh-syscheckd[9503] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-02 17:20:21,910 - wazuh_testing - DEBUG - 2022/02/02 21:20:15 wazuh-db[9333] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 000 query: syscheck scan_info_update start_scan 1643833215 2022-02-02 17:20:21,910 - wazuh_testing - DEBUG - 2022/02/02 21:20:15 wazuh-syscheckd[9503] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-02 17:20:21,911 - wazuh_testing - DEBUG - 2022/02/02 21:20:15 wazuh-syscheckd[9503] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-02 17:20:21,911 - wazuh_testing - DEBUG - 2022/02/02 21:20:15 wazuh-db[9333] main.c:290 at run_dealer(): DEBUG: New client connected (10). 2022-02-02 17:20:21,911 - wazuh_testing - DEBUG - 2022/02/02 21:20:15 wazuh-syscheckd[9503] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1643833215}} 2022-02-02 17:20:21,911 - wazuh_testing - DEBUG - 2022/02/02 21:20:15 wazuh-syscheckd[9503] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.001 sec (0.001 clock sec) 2022-02-02 17:20:21,912 - wazuh_testing - DEBUG - 2022/02/02 21:20:15 wazuh-syscheckd[9503] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 0, path count: 0 2022-02-02 17:20:21,912 - wazuh_testing - DEBUG - 2022/02/02 21:20:15 wazuh-db[9333] main.c:290 at run_dealer(): DEBUG: New client connected (11). 2022-02-02 17:20:21,912 - wazuh_testing - DEBUG - 2022/02/02 21:20:15 wazuh-db[9333] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 000 query: syscheck scan_info_update end_scan 1643833215 2022-02-02 17:20:21,912 - wazuh_testing - DEBUG - 2022/02/02 21:20:15 wazuh-syscheckd[9503] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:20:21,913 - wazuh_testing - DEBUG - 2022/02/02 21:20:15 wazuh-syscheckd[9503] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:20:21,913 - wazuh_testing - DEBUG - 2022/02/02 21:20:15 wazuh-syscheckd[9503] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. 2022-02-02 17:20:21,914 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-manager and message: .*Initializing FIM Integrity Synchronization check. (.+)$ 2022-02-02 17:20:22,882 - wazuh_testing - DEBUG - Cleaning temporal files... 2022-02-02 17:20:22,883 - wazuh_testing - DEBUG - Checking results... 2022-02-02 17:20:22,885 - wazuh_testing - DEBUG - Received from wazuh-manager the expected message: 2022/02/02 21:20:15 wazuh-syscheckd[9503] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. -------------------------------Captured log call-------------------------------- DEBUG testinfra:base.py:277 RUN CommandResult(command=b"ansible --tree /tmp/tmp87f6jml3 -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m command --args 'mkdir testdir1' wazuh-agent1", exit_status=0, stdout=b'wazuh-agent1 | CHANGED | rc=0 >>\n\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('command', 'mkdir testdir1', {'check': False, 'become': False}): {'changed': True, 'cmd': ['mkdir', 'testdir1'], 'delta': '0:00:00.867307', 'end': '2022-02-02 21:19:12.845636', 'msg': '', 'rc': 0, 'start': '2022-02-02 21:19:11.978329', 'stderr': '', 'stderr_lines': [], 'stdout': '', 'stdout_lines': []} DEBUG testinfra:base.py:277 RUN CommandResult(command=b"ansible --tree /tmp/tmp795fprc5 -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m command --args 'touch testdir1/testdir1.txt' wazuh-agent1", exit_status=0, stdout=b'wazuh-agent1 | CHANGED | rc=0 >>\n\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('command', 'touch testdir1/testdir1.txt', {'check': False, 'become': False}): {'changed': True, 'cmd': ['touch', 'testdir1/testdir1.txt'], 'delta': '0:00:00.698471', 'end': '2022-02-02 21:19:15.749339', 'msg': '', 'rc': 0, 'start': '2022-02-02 21:19:15.050868', 'stderr': '', 'stderr_lines': [], 'stdout': '', 'stdout_lines': []} DEBUG testinfra:base.py:277 RUN CommandResult(command=b"ansible --tree /tmp/tmp7yhc12mo -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m service --args 'name=wazuh-agent state=restarted' wazuh-agent1", exit_status=0, stdout=b'wazuh-agent1 | CHANGED => {\n "changed": true,\n "name": "wazuh-agent",\n "state": "started"\n}\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('service', 'name=wazuh-agent state=restarted', {'check': False, 'become': False}): {'changed': True, 'name': 'wazuh-agent', 'state': 'started'} DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:1006 Cleaning temporal files... DEBUG wazuh_testing:monitoring.py:995 Checking results... DEBUG wazuh_testing:monitoring.py:1001 Received from wazuh-manager the expected message: 2022/02/02 21:19:03 wazuh-db[8373] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file save2 {"path":"/testdir1/tmpy48peyus","timestamp":1643833138,"version":2,"attributes":{"type":"file","size":8,"perm":"rw-r--r--","uid":"0","gid":"0","user_name":"root","group_name":"root","inode":7239393,"mtime":1643833133,"hash_md5":"e770e54c4c42d3307c141c0c8948992a","hash_sha1":"9eab19985b11b15f91f936e463ea74f1dfe88e32","hash_sha256":"b1893f8d4b1596c20d6f83a784b2b0468c22fb83ce4ff2033ff86a37865d41d8","checksum":"3bcfa8c99a3c7f58f3a1dfd2a5981efa4ee0ebb4"}} DEBUG wazuh_testing:monitoring.py:1001 Received from wazuh-agent1 the expected message: 2022/02/02 21:18:59 wazuh-syscheckd[13453] run_check.c:82 at fim_send_sync_msg(): DEBUG: (6317): Sending integrity control message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1643833139,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"565e43b65393b73aa2c0ed5366ab17c8831b0a65"}} DEBUG testinfra:base.py:277 RUN CommandResult(command=b'ansible --tree /tmp/tmpclts5y9l -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m copy --args \'dest=/var/ossec/logs/ossec.log content=\'"\'"\'\'"\'"\' force=yes\' wazuh-manager', exit_status=0, stdout=b'wazuh-manager | CHANGED => {\n "changed": true,\n "checksum": "da39a3ee5e6b4b0d3255bfef95601890afd80709",\n "dest": "/var/ossec/logs/ossec.log",\n "gid": 999,\n "group": "ossec",\n "md5sum": "d41d8cd98f00b204e9800998ecf8427e",\n "mode": "0660",\n "owner": "ossec",\n "size": 0,\n "src": "/root/.ansible/tmp/ansible-tmp-1643833175.3144221-103573-18147127243825/source",\n "state": "file",\n "uid": 999\n}\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('copy', "dest=/var/ossec/logs/ossec.log content='' force=yes", {'check': False, 'become': False}): {'changed': True, 'checksum': 'da39a3ee5e6b4b0d3255bfef95601890afd80709', 'dest': '/var/ossec/logs/ossec.log', 'gid': 999, 'group': 'ossec', 'md5sum': 'd41d8cd98f00b204e9800998ecf8427e', 'mode': '0660', 'owner': 'ossec', 'size': 0, 'src': '/root/.ansible/tmp/ansible-tmp-1643833175.3144221-103573-18147127243825/source', 'state': 'file', 'uid': 999} DEBUG testinfra:base.py:277 RUN CommandResult(command=b'ansible --tree /tmp/tmpahoxduet -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m copy --args \'dest=/var/ossec/logs/ossec.log content=\'"\'"\'\'"\'"\' force=yes\' wazuh-agent1', exit_status=0, stdout=b'wazuh-agent1 | CHANGED => {\n "changed": true,\n "checksum": "da39a3ee5e6b4b0d3255bfef95601890afd80709",\n "dest": "/var/ossec/logs/ossec.log",\n "gid": 999,\n "group": "ossec",\n "md5sum": "d41d8cd98f00b204e9800998ecf8427e",\n "mode": "0660",\n "owner": "ossec",\n "size": 0,\n "src": "/root/.ansible/tmp/ansible-tmp-1643833180.4175858-103976-56262969334625/source",\n "state": "file",\n "uid": 999\n}\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('copy', "dest=/var/ossec/logs/ossec.log content='' force=yes", {'check': False, 'become': False}): {'changed': True, 'checksum': 'da39a3ee5e6b4b0d3255bfef95601890afd80709', 'dest': '/var/ossec/logs/ossec.log', 'gid': 999, 'group': 'ossec', 'md5sum': 'd41d8cd98f00b204e9800998ecf8427e', 'mode': '0660', 'owner': 'ossec', 'size': 0, 'src': '/root/.ansible/tmp/ansible-tmp-1643833180.4175858-103976-56262969334625/source', 'state': 'file', 'uid': 999} DEBUG testinfra:base.py:277 RUN CommandResult(command=b"ansible --tree /tmp/tmp14d9ghy1 -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m command --args '/var/ossec/bin/wazuh-control stop' wazuh-manager", exit_status=0, stdout=b'wazuh-manager | CHANGED | rc=0 >>\nKilling wazuh-clusterd...\nKilling wazuh-modulesd...\nKilling wazuh-monitord...\nKilling wazuh-logcollector...\nKilling wazuh-remoted...\nKilling wazuh-syscheckd...\nKilling wazuh-analysisd...\nwazuh-maild not running...\nKilling wazuh-execd...\nKilling wazuh-db...\nKilling wazuh-authd...\nwazuh-agentlessd not running...\nwazuh-integratord not running...\nwazuh-dbd not running...\nwazuh-csyslogd not running...\nKilling wazuh-apid...\nWazuh v4.2.5 Stopped\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('command', '/var/ossec/bin/wazuh-control stop', {'check': False, 'become': False}): {'changed': True, 'cmd': ['/var/ossec/bin/wazuh-control', 'stop'], 'delta': '0:00:03.902663', 'end': '2022-02-02 21:19:50.739273', 'msg': '', 'rc': 0, 'start': '2022-02-02 21:19:46.836610', 'stderr': '', 'stderr_lines': [], 'stdout': 'Killing wazuh-clusterd...\n' 'Killing wazuh-modulesd...\n' 'Killing wazuh-monitord...\n' 'Killing wazuh-logcollector...\n' 'Killing wazuh-remoted...\n' 'Killing wazuh-syscheckd...\n' 'Killing wazuh-analysisd...\n' 'wazuh-maild not running...\n' 'Killing wazuh-execd...\n' 'Killing wazuh-db...\n' 'Killing wazuh-authd...\n' 'wazuh-agentlessd not running...\n' 'wazuh-integratord not running...\n' 'wazuh-dbd not running...\n' 'wazuh-csyslogd not running...\n' 'Killing wazuh-apid...\n' 'Wazuh v4.2.5 Stopped', 'stdout_lines': ['Killing wazuh-clusterd...', 'Killing wazuh-modulesd...', 'Killing wazuh-monitord...', 'Killing wazuh-logcollector...', 'Killing wazuh-remoted...', 'Killing wazuh-syscheckd...', 'Killing wazuh-analysisd...', 'wazuh-maild not running...', 'Killing wazuh-execd...', 'Killing wazuh-db...', 'Killing wazuh-authd...', 'wazuh-agentlessd not running...', 'wazuh-integratord not running...', 'wazuh-dbd not running...', 'wazuh-csyslogd not running...', 'Killing wazuh-apid...', 'Wazuh v4.2.5 Stopped']} DEBUG testinfra:base.py:277 RUN CommandResult(command=b"ansible --tree /tmp/tmpry5rcjyi -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m copy --args 'src=/tmp/tmprpta1400 dest=testdir1 owner=wazuh group=wazuh mode=0775' wazuh-agent1", exit_status=2, stdout=b'wazuh-agent1 | FAILED! => {\n "changed": false,\n "checksum": "9eab19985b11b15f91f936e463ea74f1dfe88e32",\n "gid": 0,\n "group": "root",\n "mode": "0644",\n "msg": "chown failed: failed to look up user wazuh",\n "owner": "root",\n "path": "./testdir1/tmprpta1400",\n "size": 8,\n "state": "file",\n "uid": 0\n}\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('copy', 'src=/tmp/tmprpta1400 dest=testdir1 owner=wazuh group=wazuh mode=0775', {'check': False, 'become': False}): {'changed': False, 'checksum': '9eab19985b11b15f91f936e463ea74f1dfe88e32', 'gid': 0, 'group': 'root', 'mode': '0644', 'msg': 'chown failed: failed to look up user wazuh', 'owner': 'root', 'path': './testdir1/tmprpta1400', 'size': 8, 'state': 'file', 'uid': 0} DEBUG testinfra:base.py:277 RUN CommandResult(command=b"ansible --tree /tmp/tmp2epnaz8l -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m command --args '/var/ossec/bin/wazuh-control start' wazuh-manager", exit_status=0, stdout=b"wazuh-manager | CHANGED | rc=0 >>\nStarting Wazuh v4.2.5...\nStarted wazuh-apid...\nStarted wazuh-csyslogd...\nStarted wazuh-dbd...\nStarted wazuh-integratord...\nStarted wazuh-agentlessd...\nStarted wazuh-authd...\nStarted wazuh-db...\nStarted wazuh-execd...\nStarted wazuh-analysisd...\nStarted wazuh-syscheckd...\nStarted wazuh-remoted...\nStarted wazuh-logcollector...\nStarted wazuh-monitord...\nStarted wazuh-modulesd...\nStarted wazuh-clusterd...\nCompleted.2022/02/02 21:20:04 wazuh-db[9252] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized\n2022/02/02 21:20:04 wazuh-db[9252] main.c:101 at main(): DEBUG: Wazuh home directory: /var/ossec\n2022/02/02 21:20:05 wazuh-syscheckd[9256] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized\n2022/02/02 21:20:05 wazuh-syscheckd[9256] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf'\n2022/02/02 21:20:05 wazuh-syscheckd[9256] syscheck-config.c:122 at organize_syscheck_dirs(): DEBUG: No directory entries to organize in syscheck configuration.\n2022/02/02 21:20:12 wazuh-integratord: INFO: Remote integrations not configured. Clean exit.\n2022/02/02 21:20:12 wazuh-db[9333] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized\n2022/02/02 21:20:12 wazuh-db[9333] main.c:101 at main(): DEBUG: Wazuh home directory: /var/ossec\n2022/02/02 21:20:15 wazuh-syscheckd[9503] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized\n2022/02/02 21:20:15 wazuh-syscheckd[9503] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf'\n2022/02/02 21:20:15 wazuh-syscheckd[9503] syscheck-config.c:122 at organize_syscheck_dirs(): DEBUG: No directory entries to organize in syscheck configuration.\n2022/02/02 21:20:15 wazuh-syscheckd[9503] main.c:118 at main(): INFO: (6678): No directory provided for syscheck to monitor.\n2022/02/02 21:20:15 wazuh-syscheckd[9503] main.c:136 at main(): INFO: (6001): File integrity monitoring disabled.\n2022/02/02 21:20:15 rootcheck[9503] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled.\n", stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('command', '/var/ossec/bin/wazuh-control start', {'check': False, 'become': False}): {'changed': True, 'cmd': ['/var/ossec/bin/wazuh-control', 'start'], 'delta': '0:00:22.044514', 'end': '2022-02-02 21:20:20.059715', 'msg': '', 'rc': 0, 'start': '2022-02-02 21:19:58.015201', 'stderr': '2022/02/02 21:20:04 wazuh-db[9252] debug_op.c:70 at _log(): DEBUG: ' 'Logging module auto-initialized\n' '2022/02/02 21:20:04 wazuh-db[9252] main.c:101 at main(): DEBUG: ' 'Wazuh home directory: /var/ossec\n' '2022/02/02 21:20:05 wazuh-syscheckd[9256] debug_op.c:70 at _log(): ' 'DEBUG: Logging module auto-initialized\n' '2022/02/02 21:20:05 wazuh-syscheckd[9256] config.c:87 at ' 'Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: ' "'etc/ossec.conf'\n" '2022/02/02 21:20:05 wazuh-syscheckd[9256] syscheck-config.c:122 at ' 'organize_syscheck_dirs(): DEBUG: No directory entries to organize ' 'in syscheck configuration.\n' '2022/02/02 21:20:12 wazuh-integratord: INFO: Remote integrations ' 'not configured. Clean exit.\n' '2022/02/02 21:20:12 wazuh-db[9333] debug_op.c:70 at _log(): DEBUG: ' 'Logging module auto-initialized\n' '2022/02/02 21:20:12 wazuh-db[9333] main.c:101 at main(): DEBUG: ' 'Wazuh home directory: /var/ossec\n' '2022/02/02 21:20:15 wazuh-syscheckd[9503] debug_op.c:70 at _log(): ' 'DEBUG: Logging module auto-initialized\n' '2022/02/02 21:20:15 wazuh-syscheckd[9503] config.c:87 at ' 'Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: ' "'etc/ossec.conf'\n" '2022/02/02 21:20:15 wazuh-syscheckd[9503] syscheck-config.c:122 at ' 'organize_syscheck_dirs(): DEBUG: No directory entries to organize ' 'in syscheck configuration.\n' '2022/02/02 21:20:15 wazuh-syscheckd[9503] main.c:118 at main(): ' 'INFO: (6678): No directory provided for syscheck to monitor.\n' '2022/02/02 21:20:15 wazuh-syscheckd[9503] main.c:136 at main(): ' 'INFO: (6001): File integrity monitoring disabled.\n' '2022/02/02 21:20:15 rootcheck[9503] rootcheck.c:202 at ' 'rootcheck_init(): INFO: Rootcheck disabled.', 'stderr_lines': ['2022/02/02 21:20:04 wazuh-db[9252] debug_op.c:70 at _log(): ' 'DEBUG: Logging module auto-initialized', '2022/02/02 21:20:04 wazuh-db[9252] main.c:101 at main(): ' 'DEBUG: Wazuh home directory: /var/ossec', '2022/02/02 21:20:05 wazuh-syscheckd[9256] debug_op.c:70 at ' '_log(): DEBUG: Logging module auto-initialized', '2022/02/02 21:20:05 wazuh-syscheckd[9256] config.c:87 at ' 'Read_Syscheck_Config(): DEBUG: (6287): Reading ' "configuration file: 'etc/ossec.conf'", '2022/02/02 21:20:05 wazuh-syscheckd[9256] ' 'syscheck-config.c:122 at organize_syscheck_dirs(): DEBUG: ' 'No directory entries to organize in syscheck configuration.', '2022/02/02 21:20:12 wazuh-integratord: INFO: Remote ' 'integrations not configured. Clean exit.', '2022/02/02 21:20:12 wazuh-db[9333] debug_op.c:70 at _log(): ' 'DEBUG: Logging module auto-initialized', '2022/02/02 21:20:12 wazuh-db[9333] main.c:101 at main(): ' 'DEBUG: Wazuh home directory: /var/ossec', '2022/02/02 21:20:15 wazuh-syscheckd[9503] debug_op.c:70 at ' '_log(): DEBUG: Logging module auto-initialized', '2022/02/02 21:20:15 wazuh-syscheckd[9503] config.c:87 at ' 'Read_Syscheck_Config(): DEBUG: (6287): Reading ' "configuration file: 'etc/ossec.conf'", '2022/02/02 21:20:15 wazuh-syscheckd[9503] ' 'syscheck-config.c:122 at organize_syscheck_dirs(): DEBUG: ' 'No directory entries to organize in syscheck configuration.', '2022/02/02 21:20:15 wazuh-syscheckd[9503] main.c:118 at ' 'main(): INFO: (6678): No directory provided for syscheck to ' 'monitor.', '2022/02/02 21:20:15 wazuh-syscheckd[9503] main.c:136 at ' 'main(): INFO: (6001): File integrity monitoring disabled.', '2022/02/02 21:20:15 rootcheck[9503] rootcheck.c:202 at ' 'rootcheck_init(): INFO: Rootcheck disabled.'], 'stdout': 'Starting Wazuh v4.2.5...\n' 'Started wazuh-apid...\n' 'Started wazuh-csyslogd...\n' 'Started wazuh-dbd...\n' 'Started wazuh-integratord...\n' 'Started wazuh-agentlessd...\n' 'Started wazuh-authd...\n' 'Started wazuh-db...\n' 'Started wazuh-execd...\n' 'Started wazuh-analysisd...\n' 'Started wazuh-syscheckd...\n' 'Started wazuh-remoted...\n' 'Started wazuh-logcollector...\n' 'Started wazuh-monitord...\n' 'Started wazuh-modulesd...\n' 'Started wazuh-clusterd...\n' 'Completed.', 'stdout_lines': ['Starting Wazuh v4.2.5...', 'Started wazuh-apid...', 'Started wazuh-csyslogd...', 'Started wazuh-dbd...', 'Started wazuh-integratord...', 'Started wazuh-agentlessd...', 'Started wazuh-authd...', 'Started wazuh-db...', 'Started wazuh-execd...', 'Started wazuh-analysisd...', 'Started wazuh-syscheckd...', 'Started wazuh-remoted...', 'Started wazuh-logcollector...', 'Started wazuh-monitord...', 'Started wazuh-modulesd...', 'Started wazuh-clusterd...', 'Completed.']} DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:1006 Cleaning temporal files... DEBUG wazuh_testing:monitoring.py:995 Checking results... DEBUG wazuh_testing:monitoring.py:1001 Received from wazuh-manager the expected message: 2022/02/02 21:20:15 wazuh-syscheckd[9503] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. DEBUG testinfra:base.py:277 RUN CommandResult(command=b"ansible --tree /tmp/tmpv9aqrcc2 -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m command --args 'rm -rf testdir1' wazuh-agent1", exit_status=0, stdout=b'wazuh-agent1 | CHANGED | rc=0 >>\n\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('command', 'rm -rf testdir1', {'check': False, 'become': False}): {'changed': True, 'cmd': ['rm', '-rf', 'testdir1'], 'delta': '0:00:00.735977', 'end': '2022-02-02 21:20:25.796066', 'msg': '', 'rc': 0, 'start': '2022-02-02 21:20:25.060089', 'stderr': '', 'stderr_lines': [], 'stdout': '', 'stdout_lines': []} | |||
| Passed | test_synchronization.py::test_Synchronization_create_file_agent_stopped[testdir1-delete-wazuh-agent1] | 64.37 | |
|
------------------------------Captured stderr call------------------------------ 2022-02-02 17:20:45,948 - wazuh_testing - DEBUG - Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-02 17:20:45,950 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-02 17:20:45,951 - wazuh_testing - DEBUG - Starting file composer for wazuh-agent1 and path: /var/ossec/logs/ossec.log. Composite file in /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-agent1_ossec.log.tmp 2022-02-02 17:20:45,952 - wazuh_testing - DEBUG - Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-02 17:20:45,955 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-agent1 and message: .*Sending integrity control message: (.+)$ 2022-02-02 17:20:45,955 - wazuh_testing - DEBUG - Starting file composer for wazuh-manager and path: /var/ossec/logs/ossec.log. Composite file in /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-manager_ossec.log.tmp 2022-02-02 17:20:45,955 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-02 17:20:45,959 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-manager and message: .*Agent 001 query: (.+) save2 2022-02-02 17:20:47,958 - wazuh_testing - DEBUG - 2022/02/02 21:19:48 wazuh-agentd: ERROR: (1137): Lost connection with manager. Setting lock. 2022-02-02 17:20:47,958 - wazuh_testing - DEBUG - 2022/02/02 21:19:48 wazuh-agentd: INFO: Closing connection to server (wazuh-manager/172.18.0.2:1514/tcp). 2022-02-02 17:20:47,958 - wazuh_testing - DEBUG - 2022/02/02 21:19:48 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.18.0.2:1514/tcp). 2022-02-02 17:20:47,958 - wazuh_testing - DEBUG - 2022/02/02 21:19:48 wazuh-agentd: ERROR: (1216): Unable to connect to '172.18.0.2:1514/tcp': 'Connection refused'. 2022-02-02 17:20:47,959 - wazuh_testing - DEBUG - 2022/02/02 21:19:48 wazuh-syscheckd[13947] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-02 17:20:47,959 - wazuh_testing - DEBUG - 2022/02/02 21:19:48 wazuh-syscheckd[13947] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1643833188}} 2022-02-02 17:20:47,959 - wazuh_testing - DEBUG - 2022/02/02 21:19:48 wazuh-syscheckd[13947] wait_op.c:101 at os_wait(): WARNING: Process locked due to agent is offline. Waiting for connection... 2022-02-02 17:20:47,959 - wazuh_testing - DEBUG - 2022/02/02 21:19:58 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.18.0.2:1514/tcp). 2022-02-02 17:20:47,960 - wazuh_testing - DEBUG - 2022/02/02 21:19:58 wazuh-agentd: ERROR: (1216): Unable to connect to '172.18.0.2:1514/tcp': 'Connection refused'. 2022-02-02 17:20:47,960 - wazuh_testing - DEBUG - 2022/02/02 21:20:08 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.18.0.2:1514/tcp). 2022-02-02 17:20:47,960 - wazuh_testing - DEBUG - 2022/02/02 21:20:08 wazuh-agentd: ERROR: (1216): Unable to connect to '172.18.0.2:1514/tcp': 'Connection refused'. 2022-02-02 17:20:47,960 - wazuh_testing - DEBUG - 2022/02/02 21:20:18 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.18.0.2:1514/tcp). 2022-02-02 17:20:47,961 - wazuh_testing - DEBUG - 2022/02/02 21:20:18 wazuh-agentd: INFO: (4102): Connected to the server (wazuh-manager/172.18.0.2:1514/tcp). 2022-02-02 17:20:47,961 - wazuh_testing - DEBUG - 2022/02/02 21:20:18 wazuh-agentd: INFO: Server responded. Releasing lock. 2022-02-02 17:20:47,961 - wazuh_testing - DEBUG - 2022/02/02 21:20:18 wazuh-syscheckd[13947] wait_op.c:116 at os_wait(): INFO: Agent is now online. Process unlocked, continuing... 2022-02-02 17:20:47,961 - wazuh_testing - DEBUG - 2022/02/02 21:20:18 wazuh-syscheckd[13947] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-02 17:20:47,961 - wazuh_testing - DEBUG - 2022/02/02 21:19:40 wazuh-db[8373] wdb.c:918 at wdb_commit_old(): DEBUG: Agent '001' database commited. Time: 3.519 ms. 2022-02-02 17:20:47,962 - wazuh_testing - DEBUG - 2022/02/02 21:20:18 wazuh-syscheckd[13947] fim_db.c:436 at fim_db_check_transaction(): DEBUG: Database transaction completed. 2022-02-02 17:20:47,962 - wazuh_testing - DEBUG - 2022/02/02 21:20:18 wazuh-syscheckd[13947] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-02 17:20:47,962 - wazuh_testing - DEBUG - 2022/02/02 21:20:18 wazuh-syscheckd[13947] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-02 17:20:47,962 - wazuh_testing - DEBUG - 2022/02/02 21:19:45 wazuh-db[8373] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.18.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.18.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.13.0-27-generic |#29~20.04.1-Ubuntu SMP Fri Jan 14 00:32:30 UTC 2022 |x86_64","os_arch":"x86_64"} 2022-02-02 17:20:47,963 - wazuh_testing - DEBUG - 2022/02/02 21:19:47 wazuh-modulesd:syscollector: INFO: Stop received for Syscollector. 2022-02-02 17:20:47,963 - wazuh_testing - DEBUG - 2022/02/02 21:19:47 wazuh-db[8373] main.c:352 at run_worker(): DEBUG: Client 11 disconnected. 2022-02-02 17:20:47,963 - wazuh_testing - DEBUG - 2022/02/02 21:20:18 wazuh-syscheckd[13947] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"event","data":{"path":"/testdir1/tmprpta1400","version":2,"mode":"scheduled","type":"added","timestamp":1643833218,"attributes":{"type":"file","size":8,"perm":"rw-r--r--","uid":"0","gid":"0","user_name":"root","group_name":"root","inode":7239378,"mtime":1643833194,"hash_md5":"e770e54c4c42d3307c141c0c8948992a","hash_sha1":"9eab19985b11b15f91f936e463ea74f1dfe88e32","hash_sha256":"b1893f8d4b1596c20d6f83a784b2b0468c22fb83ce4ff2033ff86a37865d41d8","checksum":"719a64cebab2bbf5814dd71f7401f1eb52ae5baa"}}} 2022-02-02 17:20:47,963 - wazuh_testing - DEBUG - 2022/02/02 21:19:47 wazuh-monitord: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:20:47,963 - wazuh_testing - DEBUG - 2022/02/02 21:20:18 wazuh-syscheckd[13947] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-02 17:20:47,963 - wazuh_testing - DEBUG - 2022/02/02 21:19:48 wazuh-logcollector: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:20:47,963 - wazuh_testing - DEBUG - 2022/02/02 21:19:48 wazuh-remoted: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:20:47,963 - wazuh_testing - DEBUG - 2022/02/02 21:20:18 wazuh-syscheckd[13947] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-02 17:20:47,964 - wazuh_testing - DEBUG - 2022/02/02 21:19:48 wazuh-db[8373] main.c:352 at run_worker(): DEBUG: Client 29 disconnected. 2022-02-02 17:20:47,964 - wazuh_testing - DEBUG - 2022/02/02 21:20:19 wazuh-syscheckd[13947] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-02 17:20:47,964 - wazuh_testing - DEBUG - 2022/02/02 21:19:48 wazuh-db[8373] main.c:352 at run_worker(): DEBUG: Client 21 disconnected. 2022-02-02 17:20:47,964 - wazuh_testing - DEBUG - 2022/02/02 21:20:19 wazuh-syscheckd[13947] create_db.c:220 at fim_scan(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-02 17:20:47,964 - wazuh_testing - DEBUG - 2022/02/02 21:19:48 wazuh-db[8373] main.c:352 at run_worker(): DEBUG: Client 18 disconnected. 2022-02-02 17:20:47,964 - wazuh_testing - DEBUG - 2022/02/02 21:20:19 wazuh-syscheckd[13947] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-02 17:20:47,964 - wazuh_testing - DEBUG - 2022/02/02 21:19:48 wazuh-db[8373] main.c:352 at run_worker(): DEBUG: Client 16 disconnected. 2022-02-02 17:20:47,964 - wazuh_testing - DEBUG - 2022/02/02 21:20:19 wazuh-syscheckd[13947] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1643833219}} 2022-02-02 17:20:47,965 - wazuh_testing - DEBUG - 2022/02/02 21:20:19 wazuh-syscheckd[13947] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 31.216 sec (1.205 clock sec) 2022-02-02 17:20:47,965 - wazuh_testing - DEBUG - 2022/02/02 21:19:48 wazuh-syscheckd[8543] sig_op.c:49 at HandleSIG(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:20:47,965 - wazuh_testing - DEBUG - 2022/02/02 21:20:19 wazuh-syscheckd[13947] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1622, path count: 1628 2022-02-02 17:20:47,965 - wazuh_testing - DEBUG - 2022/02/02 21:20:40 wazuh-logcollector: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:20:47,965 - wazuh_testing - DEBUG - 2022/02/02 21:19:48 wazuh-analysisd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:20:47,965 - wazuh_testing - DEBUG - 2022/02/02 21:20:40 wazuh-syscheckd[13947] sig_op.c:49 at HandleSIG(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:20:47,965 - wazuh_testing - DEBUG - 2022/02/02 21:20:40 wazuh-agentd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:20:47,965 - wazuh_testing - DEBUG - 2022/02/02 21:19:48 wazuh-db[8373] main.c:352 at run_worker(): DEBUG: Client 44 disconnected. 2022-02-02 17:20:47,965 - wazuh_testing - DEBUG - 2022/02/02 21:20:40 wazuh-execd: INFO: (1314): Shutdown received. Deleting responses. 2022-02-02 17:20:47,966 - wazuh_testing - DEBUG - 2022/02/02 21:20:40 wazuh-execd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:20:47,966 - wazuh_testing - DEBUG - 2022/02/02 21:19:48 wazuh-db[8373] main.c:352 at run_worker(): DEBUG: Client 46 disconnected. 2022-02-02 17:20:47,966 - wazuh_testing - DEBUG - 2022/02/02 21:20:41 wazuh-syscheckd[14631] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-02 17:20:47,966 - wazuh_testing - DEBUG - 2022/02/02 21:20:41 wazuh-syscheckd[14631] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-02 17:20:47,966 - wazuh_testing - DEBUG - 2022/02/02 21:19:48 wazuh-db[8373] main.c:352 at run_worker(): DEBUG: Client 43 disconnected. 2022-02-02 17:20:47,966 - wazuh_testing - DEBUG - 2022/02/02 21:20:41 wazuh-syscheckd[14631] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-02 17:20:47,966 - wazuh_testing - DEBUG - 2022/02/02 21:20:41 wazuh-syscheckd[14631] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-02 17:20:47,966 - wazuh_testing - DEBUG - 2022/02/02 21:19:48 wazuh-db[8373] main.c:352 at run_worker(): DEBUG: Client 42 disconnected. 2022-02-02 17:20:47,967 - wazuh_testing - DEBUG - 2022/02/02 21:20:41 wazuh-syscheckd[14631] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-02 17:20:47,967 - wazuh_testing - DEBUG - 2022/02/02 21:20:41 wazuh-syscheckd[14631] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-02 17:20:47,967 - wazuh_testing - DEBUG - 2022/02/02 21:19:48 wazuh-db[8373] main.c:352 at run_worker(): DEBUG: Client 41 disconnected. 2022-02-02 17:20:47,967 - wazuh_testing - DEBUG - 2022/02/02 21:20:41 wazuh-syscheckd[14631] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-02 17:20:47,967 - wazuh_testing - DEBUG - 2022/02/02 21:20:41 wazuh-syscheckd[14631] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ 2022-02-02 17:20:47,967 - wazuh_testing - DEBUG - 2022/02/02 21:19:48 wazuh-db[8373] main.c:352 at run_worker(): DEBUG: Client 40 disconnected. 2022-02-02 17:20:47,967 - wazuh_testing - DEBUG - 2022/02/02 21:20:41 wazuh-syscheckd[14631] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ OK? 2022-02-02 17:20:47,968 - wazuh_testing - DEBUG - 2022/02/02 21:19:48 wazuh-db[8373] main.c:352 at run_worker(): DEBUG: Client 38 disconnected. 2022-02-02 17:20:47,968 - wazuh_testing - DEBUG - 2022/02/02 21:20:41 wazuh-syscheckd[14631] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-02 17:20:47,968 - wazuh_testing - DEBUG - 2022/02/02 21:20:41 wazuh-syscheckd[14631] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-02 17:20:47,968 - wazuh_testing - DEBUG - 2022/02/02 21:19:48 wazuh-db[8373] main.c:352 at run_worker(): DEBUG: Client 39 disconnected. 2022-02-02 17:20:47,968 - wazuh_testing - DEBUG - 2022/02/02 21:20:41 wazuh-syscheckd[14631] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-02 17:20:47,968 - wazuh_testing - DEBUG - 2022/02/02 21:20:41 wazuh-syscheckd[14631] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-02 17:20:47,968 - wazuh_testing - DEBUG - 2022/02/02 21:19:48 wazuh-db[8373] main.c:352 at run_worker(): DEBUG: Client 36 disconnected. 2022-02-02 17:20:47,968 - wazuh_testing - DEBUG - 2022/02/02 21:20:41 wazuh-syscheckd[14631] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-02 17:20:47,968 - wazuh_testing - DEBUG - 2022/02/02 21:20:41 wazuh-syscheckd[14631] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-02 17:20:47,968 - wazuh_testing - DEBUG - 2022/02/02 21:19:48 wazuh-db[8373] main.c:352 at run_worker(): DEBUG: Client 31 disconnected. 2022-02-02 17:20:47,969 - wazuh_testing - DEBUG - 2022/02/02 21:20:41 wazuh-syscheckd[14631] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-02 17:20:47,969 - wazuh_testing - DEBUG - 2022/02/02 21:19:48 wazuh-db[8373] main.c:352 at run_worker(): DEBUG: Client 32 disconnected. 2022-02-02 17:20:47,969 - wazuh_testing - DEBUG - 2022/02/02 21:20:41 wazuh-syscheckd[14631] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-02 17:20:47,969 - wazuh_testing - DEBUG - 2022/02/02 21:19:48 wazuh-db[8373] main.c:352 at run_worker(): DEBUG: Client 34 disconnected. 2022-02-02 17:20:47,969 - wazuh_testing - DEBUG - 2022/02/02 21:20:41 wazuh-execd: INFO: Started (pid: 14644). 2022-02-02 17:20:47,969 - wazuh_testing - DEBUG - 2022/02/02 21:20:41 wazuh-agentd: INFO: (1410): Reading authentication keys file. 2022-02-02 17:20:47,969 - wazuh_testing - DEBUG - 2022/02/02 21:19:48 wazuh-db[8373] main.c:352 at run_worker(): DEBUG: Client 26 disconnected. 2022-02-02 17:20:47,970 - wazuh_testing - DEBUG - 2022/02/02 21:19:48 wazuh-db[8373] main.c:352 at run_worker(): DEBUG: Client 35 disconnected. 2022-02-02 17:20:47,970 - wazuh_testing - DEBUG - 2022/02/02 21:20:41 wazuh-agentd: INFO: Using notify time: 10 and max time to reconnect: 60 2022-02-02 17:20:47,970 - wazuh_testing - DEBUG - 2022/02/02 21:19:48 wazuh-db[8373] main.c:352 at run_worker(): DEBUG: Client 33 disconnected. 2022-02-02 17:20:47,970 - wazuh_testing - DEBUG - 2022/02/02 21:20:41 wazuh-agentd: INFO: Version detected -> Linux |wazuh-agent1 |5.13.0-27-generic |#29~20.04.1-Ubuntu SMP Fri Jan 14 00:32:30 UTC 2022 |x86_64 [Debian GNU/Linux|debian: 10 (buster)] - Wazuh v4.2.5 2022-02-02 17:20:47,970 - wazuh_testing - DEBUG - 2022/02/02 21:19:48 wazuh-db[8373] main.c:352 at run_worker(): DEBUG: Client 37 disconnected. 2022-02-02 17:20:47,971 - wazuh_testing - DEBUG - 2022/02/02 21:20:41 wazuh-agentd: INFO: Started (pid: 14652). 2022-02-02 17:20:47,971 - wazuh_testing - DEBUG - 2022/02/02 21:19:48 wazuh-db[8373] main.c:352 at run_worker(): DEBUG: Client 23 disconnected. 2022-02-02 17:20:47,971 - wazuh_testing - DEBUG - 2022/02/02 21:19:48 wazuh-db[8373] main.c:352 at run_worker(): DEBUG: Client 28 disconnected. 2022-02-02 17:20:47,971 - wazuh_testing - DEBUG - 2022/02/02 21:20:41 wazuh-agentd: INFO: Server IP Address: wazuh-manager/172.18.0.2 2022-02-02 17:20:47,971 - wazuh_testing - DEBUG - 2022/02/02 21:19:48 wazuh-db[8373] main.c:352 at run_worker(): DEBUG: Client 19 disconnected. 2022-02-02 17:20:47,971 - wazuh_testing - DEBUG - 2022/02/02 21:20:41 wazuh-agentd: INFO: Using AES as encryption method. 2022-02-02 17:20:47,972 - wazuh_testing - DEBUG - 2022/02/02 21:19:48 wazuh-db[8373] main.c:352 at run_worker(): DEBUG: Client 27 disconnected. 2022-02-02 17:20:47,972 - wazuh_testing - DEBUG - 2022/02/02 21:20:41 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.18.0.2:1514/tcp). 2022-02-02 17:20:47,972 - wazuh_testing - DEBUG - 2022/02/02 21:19:48 wazuh-db[8373] main.c:352 at run_worker(): DEBUG: Client 13 disconnected. 2022-02-02 17:20:47,972 - wazuh_testing - DEBUG - 2022/02/02 21:19:48 wazuh-db[8373] main.c:352 at run_worker(): DEBUG: Client 30 disconnected. 2022-02-02 17:20:47,972 - wazuh_testing - DEBUG - 2022/02/02 21:20:41 wazuh-agentd: INFO: (4102): Connected to the server (wazuh-manager/172.18.0.2:1514/tcp). 2022-02-02 17:20:47,973 - wazuh_testing - DEBUG - 2022/02/02 21:19:48 wazuh-db[8373] main.c:352 at run_worker(): DEBUG: Client 22 disconnected. 2022-02-02 17:20:47,973 - wazuh_testing - DEBUG - 2022/02/02 21:19:48 wazuh-db[8373] main.c:352 at run_worker(): DEBUG: Client 20 disconnected. 2022-02-02 17:20:47,973 - wazuh_testing - DEBUG - 2022/02/02 21:20:42 wazuh-syscheckd[14664] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-02 17:20:47,973 - wazuh_testing - DEBUG - 2022/02/02 21:19:48 wazuh-db[8373] main.c:352 at run_worker(): DEBUG: Client 25 disconnected. 2022-02-02 17:20:47,974 - wazuh_testing - DEBUG - 2022/02/02 21:19:48 wazuh-db[8373] main.c:352 at run_worker(): DEBUG: Client 12 disconnected. 2022-02-02 17:20:47,974 - wazuh_testing - DEBUG - 2022/02/02 21:20:42 wazuh-syscheckd[14664] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-02 17:20:47,974 - wazuh_testing - DEBUG - 2022/02/02 21:19:48 wazuh-db[8373] main.c:352 at run_worker(): DEBUG: Client 24 disconnected. 2022-02-02 17:20:47,974 - wazuh_testing - DEBUG - 2022/02/02 21:20:42 wazuh-syscheckd[14664] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-02 17:20:47,975 - wazuh_testing - DEBUG - 2022/02/02 21:19:48 wazuh-db[8373] main.c:352 at run_worker(): DEBUG: Client 6 disconnected. 2022-02-02 17:20:47,975 - wazuh_testing - DEBUG - 2022/02/02 21:19:48 wazuh-db[8373] main.c:352 at run_worker(): DEBUG: Client 10 disconnected. 2022-02-02 17:20:47,975 - wazuh_testing - DEBUG - 2022/02/02 21:20:42 wazuh-syscheckd[14664] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-02 17:20:47,975 - wazuh_testing - DEBUG - 2022/02/02 21:19:48 wazuh-execd: INFO: (1314): Shutdown received. Deleting responses. 2022-02-02 17:20:47,976 - wazuh_testing - DEBUG - 2022/02/02 21:20:42 wazuh-syscheckd[14664] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-02 17:20:47,976 - wazuh_testing - DEBUG - 2022/02/02 21:19:48 wazuh-execd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:20:47,976 - wazuh_testing - DEBUG - 2022/02/02 21:19:48 wazuh-db[8373] main.c:468 at handler(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:20:47,976 - wazuh_testing - DEBUG - 2022/02/02 21:20:42 wazuh-syscheckd[14664] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-02 17:20:47,976 - wazuh_testing - DEBUG - 2022/02/02 21:19:49 wazuh-db[8373] wdb.c:872 at wdb_close_all(): DEBUG: Closing all databases... 2022-02-02 17:20:47,977 - wazuh_testing - DEBUG - 2022/02/02 21:20:42 wazuh-syscheckd[14664] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-02 17:20:47,977 - wazuh_testing - DEBUG - 2022/02/02 21:19:49 wazuh-db[8373] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent 001 2022-02-02 17:20:47,977 - wazuh_testing - DEBUG - 2022/02/02 21:20:42 wazuh-syscheckd[14664] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ 2022-02-02 17:20:47,977 - wazuh_testing - DEBUG - 2022/02/02 21:19:49 wazuh-db[8373] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent 000 2022-02-02 17:20:47,978 - wazuh_testing - DEBUG - 2022/02/02 21:20:42 wazuh-syscheckd[14664] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ OK? 2022-02-02 17:20:47,978 - wazuh_testing - DEBUG - 2022/02/02 21:19:49 wazuh-db[8373] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent mitre 2022-02-02 17:20:47,978 - wazuh_testing - DEBUG - 2022/02/02 21:20:42 wazuh-syscheckd[14664] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-02 17:20:47,978 - wazuh_testing - DEBUG - 2022/02/02 21:19:49 wazuh-db[8373] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent global 2022-02-02 17:20:47,978 - wazuh_testing - DEBUG - 2022/02/02 21:20:42 wazuh-syscheckd[14664] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-02 17:20:47,978 - wazuh_testing - DEBUG - 2022/02/02 21:19:49 wazuh-db[8373] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent tasks 2022-02-02 17:20:47,979 - wazuh_testing - DEBUG - 2022/02/02 21:20:42 wazuh-syscheckd[14664] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-02 17:20:47,979 - wazuh_testing - DEBUG - 2022/02/02 21:19:49 wazuh-db[8373] main.c:231 at main(): DEBUG: Template file removed again: queue/db/.template.db 2022-02-02 17:20:47,979 - wazuh_testing - DEBUG - 2022/02/02 21:20:42 wazuh-syscheckd[14664] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-02 17:20:47,979 - wazuh_testing - DEBUG - 2022/02/02 21:19:49 wazuh-authd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:20:47,980 - wazuh_testing - DEBUG - 2022/02/02 21:20:42 wazuh-syscheckd[14664] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-02 17:20:47,980 - wazuh_testing - DEBUG - 2022/02/02 21:19:50 wazuh-authd: INFO: Exiting... 2022-02-02 17:20:47,980 - wazuh_testing - DEBUG - 2022/02/02 21:20:42 wazuh-syscheckd[14664] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-02 17:20:47,980 - wazuh_testing - DEBUG - 2022/02/02 21:20:04 wazuh-db[9252] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-02 17:20:47,980 - wazuh_testing - DEBUG - 2022/02/02 21:20:42 wazuh-syscheckd[14664] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-02 17:20:47,981 - wazuh_testing - DEBUG - 2022/02/02 21:20:04 wazuh-db[9252] main.c:101 at main(): DEBUG: Wazuh home directory: /var/ossec 2022-02-02 17:20:47,981 - wazuh_testing - DEBUG - 2022/02/02 21:20:05 wazuh-syscheckd[9256] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-02 17:20:47,981 - wazuh_testing - DEBUG - 2022/02/02 21:20:42 wazuh-syscheckd[14664] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-02 17:20:47,981 - wazuh_testing - DEBUG - 2022/02/02 21:20:05 wazuh-syscheckd[9256] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-02 17:20:47,981 - wazuh_testing - DEBUG - 2022/02/02 21:20:05 wazuh-syscheckd[9256] syscheck-config.c:122 at organize_syscheck_dirs(): DEBUG: No directory entries to organize in syscheck configuration. 2022-02-02 17:20:47,981 - wazuh_testing - DEBUG - 2022/02/02 21:20:42 rootcheck[14664] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled. 2022-02-02 17:20:47,981 - wazuh_testing - DEBUG - 2022/02/02 21:20:12 wazuh-csyslogd: INFO: Remote syslog server not configured. Clean exit. 2022-02-02 17:20:47,982 - wazuh_testing - DEBUG - 2022/02/02 21:20:42 wazuh-syscheckd[14664] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:20:47,982 - wazuh_testing - DEBUG - 2022/02/02 21:20:12 wazuh-dbd: INFO: Database not configured. Clean exit. 2022-02-02 17:20:47,982 - wazuh_testing - DEBUG - 2022/02/02 21:20:12 wazuh-integratord: INFO: Remote integrations not configured. Clean exit. 2022-02-02 17:20:47,982 - wazuh_testing - DEBUG - 2022/02/02 21:20:42 wazuh-syscheckd[14664] syscom.c:123 at syscom_main(): DEBUG: (6284): Local requests thread ready. 2022-02-02 17:20:47,982 - wazuh_testing - DEBUG - 2022/02/02 21:20:12 wazuh-agentlessd: INFO: Not configured. Exiting. 2022-02-02 17:20:47,983 - wazuh_testing - DEBUG - 2022/02/02 21:20:12 wazuh-authd: INFO: Started (pid: 9322). 2022-02-02 17:20:47,983 - wazuh_testing - DEBUG - 2022/02/02 21:20:42 wazuh-syscheckd[14664] mq_op.c:47 at StartMQ(): DEBUG: Connected succesfully to 'queue/sockets/queue' after 0 attempts 2022-02-02 17:20:47,983 - wazuh_testing - DEBUG - 2022/02/02 21:20:12 wazuh-authd: INFO: Accepting connections on port 1515. No password required. 2022-02-02 17:20:47,984 - wazuh_testing - DEBUG - 2022/02/02 21:20:42 wazuh-syscheckd[14664] mq_op.c:48 at StartMQ(): DEBUG: (unix_domain) Maximum send buffer set to: '212992'. 2022-02-02 17:20:47,984 - wazuh_testing - DEBUG - 2022/02/02 21:20:12 wazuh-authd: INFO: Setting network timeout to 1.000000 sec. 2022-02-02 17:20:47,984 - wazuh_testing - DEBUG - 2022/02/02 21:20:42 wazuh-syscheckd[14664] main.c:185 at main(): INFO: Started (pid: 14666). 2022-02-02 17:20:47,984 - wazuh_testing - DEBUG - 2022/02/02 21:20:12 wazuh-db[9333] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-02 17:20:47,985 - wazuh_testing - DEBUG - 2022/02/02 21:20:42 wazuh-syscheckd[14664] main.c:193 at main(): INFO: (6003): Monitoring path: '/bin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:20:47,985 - wazuh_testing - DEBUG - 2022/02/02 21:20:12 wazuh-db[9333] main.c:101 at main(): DEBUG: Wazuh home directory: /var/ossec 2022-02-02 17:20:47,985 - wazuh_testing - DEBUG - 2022/02/02 21:20:42 wazuh-syscheckd[14664] main.c:193 at main(): INFO: (6003): Monitoring path: '/boot', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:20:47,985 - wazuh_testing - DEBUG - 2022/02/02 21:20:12 wazuh-db[9333] main.c:122 at main(): DEBUG: Template file removed: /var/ossec/queue/db/.template.db 2022-02-02 17:20:47,986 - wazuh_testing - DEBUG - 2022/02/02 21:20:42 wazuh-syscheckd[14664] main.c:193 at main(): INFO: (6003): Monitoring path: '/etc', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:20:47,986 - wazuh_testing - DEBUG - 2022/02/02 21:20:12 wazuh-db[9333] main.c:178 at main(): INFO: Started (pid: 9335). 2022-02-02 17:20:47,986 - wazuh_testing - DEBUG - 2022/02/02 21:20:42 wazuh-syscheckd[14664] main.c:193 at main(): INFO: (6003): Monitoring path: '/sbin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:20:47,986 - wazuh_testing - DEBUG - 2022/02/02 21:20:13 wazuh-execd: INFO: (1350): Active response disabled. 2022-02-02 17:20:47,987 - wazuh_testing - DEBUG - 2022/02/02 21:20:42 wazuh-syscheckd[14664] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir1', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:20:47,987 - wazuh_testing - DEBUG - 2022/02/02 21:20:13 wazuh-execd: INFO: Started (pid: 9358). 2022-02-02 17:20:47,987 - wazuh_testing - DEBUG - 2022/02/02 21:20:42 wazuh-syscheckd[14664] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir2', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | realtime'. 2022-02-02 17:20:47,987 - wazuh_testing - DEBUG - 2022/02/02 21:20:14 wazuh-analysisd: INFO: Total rules enabled: '3882' 2022-02-02 17:20:47,988 - wazuh_testing - DEBUG - 2022/02/02 21:20:14 wazuh-analysisd: INFO: Started (pid: 9372). 2022-02-02 17:20:47,988 - wazuh_testing - DEBUG - 2022/02/02 21:20:42 wazuh-syscheckd[14664] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir3', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | whodata'. 2022-02-02 17:20:47,988 - wazuh_testing - DEBUG - 2022/02/02 21:20:14 wazuh-db[9333] main.c:290 at run_dealer(): DEBUG: New client connected (6). 2022-02-02 17:20:47,988 - wazuh_testing - DEBUG - 2022/02/02 21:20:42 wazuh-syscheckd[14664] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/bin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:20:47,989 - wazuh_testing - DEBUG - 2022/02/02 21:20:42 wazuh-syscheckd[14664] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/sbin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:20:47,989 - wazuh_testing - DEBUG - 2022/02/02 21:20:14 wazuh-analysisd: INFO: (7200): Logtest started 2022-02-02 17:20:47,989 - wazuh_testing - DEBUG - 2022/02/02 21:20:42 wazuh-syscheckd[14664] main.c:215 at main(): DEBUG: (6357): Maximum disk quota size limit configured to '1048576 KB'. 2022-02-02 17:20:47,989 - wazuh_testing - DEBUG - 2022/02/02 21:20:15 wazuh-syscheckd[9503] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-02 17:20:47,990 - wazuh_testing - DEBUG - 2022/02/02 21:20:15 wazuh-syscheckd[9503] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-02 17:20:47,990 - wazuh_testing - DEBUG - 2022/02/02 21:20:42 wazuh-syscheckd[14664] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mtab' 2022-02-02 17:20:47,990 - wazuh_testing - DEBUG - 2022/02/02 21:20:15 wazuh-syscheckd[9503] syscheck-config.c:122 at organize_syscheck_dirs(): DEBUG: No directory entries to organize in syscheck configuration. 2022-02-02 17:20:47,991 - wazuh_testing - DEBUG - 2022/02/02 21:20:15 wazuh-syscheckd[9503] main.c:118 at main(): INFO: (6678): No directory provided for syscheck to monitor. 2022-02-02 17:20:47,991 - wazuh_testing - DEBUG - 2022/02/02 21:20:15 wazuh-syscheckd[9503] main.c:136 at main(): INFO: (6001): File integrity monitoring disabled. 2022-02-02 17:20:47,991 - wazuh_testing - DEBUG - 2022/02/02 21:20:42 wazuh-syscheckd[14664] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/hosts.deny' 2022-02-02 17:20:47,991 - wazuh_testing - DEBUG - 2022/02/02 21:20:15 rootcheck[9503] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled. 2022-02-02 17:20:47,991 - wazuh_testing - DEBUG - 2022/02/02 21:20:15 wazuh-syscheckd[9503] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:20:47,991 - wazuh_testing - DEBUG - 2022/02/02 21:20:42 wazuh-syscheckd[14664] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mail/statistics' 2022-02-02 17:20:47,991 - wazuh_testing - DEBUG - 2022/02/02 21:20:15 wazuh-syscheckd[9503] syscom.c:123 at syscom_main(): DEBUG: (6284): Local requests thread ready. 2022-02-02 17:20:47,992 - wazuh_testing - DEBUG - 2022/02/02 21:20:42 wazuh-syscheckd[14664] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random-seed' 2022-02-02 17:20:47,992 - wazuh_testing - DEBUG - 2022/02/02 21:20:15 wazuh-syscheckd[9503] mq_op.c:47 at StartMQ(): DEBUG: Connected succesfully to 'queue/sockets/queue' after 0 attempts 2022-02-02 17:20:47,992 - wazuh_testing - DEBUG - 2022/02/02 21:20:15 wazuh-syscheckd[9503] mq_op.c:48 at StartMQ(): DEBUG: (unix_domain) Maximum send buffer set to: '212992'. 2022-02-02 17:20:47,992 - wazuh_testing - DEBUG - 2022/02/02 21:20:42 wazuh-syscheckd[14664] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random.seed' 2022-02-02 17:20:47,992 - wazuh_testing - DEBUG - 2022/02/02 21:20:15 wazuh-syscheckd[9503] main.c:185 at main(): INFO: Started (pid: 9505). 2022-02-02 17:20:47,993 - wazuh_testing - DEBUG - 2022/02/02 21:20:15 wazuh-syscheckd[9503] main.c:215 at main(): DEBUG: (6357): Maximum disk quota size limit configured to '1048576 KB'. 2022-02-02 17:20:47,993 - wazuh_testing - DEBUG - 2022/02/02 21:20:15 wazuh-syscheckd[9503] run_check.c:194 at start_daemon(): DEBUG: (6320): Setting process priority to: '10' 2022-02-02 17:20:47,993 - wazuh_testing - DEBUG - 2022/02/02 21:20:15 wazuh-syscheckd[9503] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:20:47,993 - wazuh_testing - DEBUG - 2022/02/02 21:20:15 wazuh-syscheckd[9503] run_check.c:229 at start_daemon(): INFO: (6000): Starting daemon... 2022-02-02 17:20:47,993 - wazuh_testing - DEBUG - 2022/02/02 21:20:42 wazuh-syscheckd[14664] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/adjtime' 2022-02-02 17:20:47,994 - wazuh_testing - DEBUG - 2022/02/02 21:20:15 wazuh-syscheckd[9503] run_check.c:232 at start_daemon(): INFO: (6010): File integrity monitoring scan frequency: 43200 seconds 2022-02-02 17:20:47,994 - wazuh_testing - DEBUG - 2022/02/02 21:20:15 wazuh-syscheckd[9503] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-02 17:20:47,994 - wazuh_testing - DEBUG - 2022/02/02 21:20:15 wazuh-syscheckd[9503] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1643833215}} 2022-02-02 17:20:47,994 - wazuh_testing - DEBUG - 2022/02/02 21:20:42 wazuh-syscheckd[14664] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/httpd/logs' 2022-02-02 17:20:47,995 - wazuh_testing - DEBUG - 2022/02/02 21:20:15 wazuh-syscheckd[9503] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-02 17:20:47,995 - wazuh_testing - DEBUG - 2022/02/02 21:20:42 wazuh-syscheckd[14664] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/utmpx' 2022-02-02 17:20:47,996 - wazuh_testing - DEBUG - 2022/02/02 21:20:15 wazuh-db[9333] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 000 query: syscheck scan_info_update start_scan 1643833215 2022-02-02 17:20:47,996 - wazuh_testing - DEBUG - 2022/02/02 21:20:42 wazuh-syscheckd[14664] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/wtmpx' 2022-02-02 17:20:47,996 - wazuh_testing - DEBUG - 2022/02/02 21:20:15 wazuh-syscheckd[9503] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-02 17:20:47,997 - wazuh_testing - DEBUG - 2022/02/02 21:20:42 wazuh-syscheckd[14664] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/cups/certs' 2022-02-02 17:20:47,997 - wazuh_testing - DEBUG - 2022/02/02 21:20:15 wazuh-syscheckd[9503] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-02 17:20:47,997 - wazuh_testing - DEBUG - 2022/02/02 21:20:42 wazuh-syscheckd[14664] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/dumpdates' 2022-02-02 17:20:47,997 - wazuh_testing - DEBUG - 2022/02/02 21:20:15 wazuh-db[9333] main.c:290 at run_dealer(): DEBUG: New client connected (10). 2022-02-02 17:20:47,997 - wazuh_testing - DEBUG - 2022/02/02 21:20:42 wazuh-syscheckd[14664] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/svc/volatile' 2022-02-02 17:20:47,998 - wazuh_testing - DEBUG - 2022/02/02 21:20:15 wazuh-syscheckd[9503] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1643833215}} 2022-02-02 17:20:47,998 - wazuh_testing - DEBUG - 2022/02/02 21:20:42 wazuh-syscheckd[14664] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/security' 2022-02-02 17:20:47,998 - wazuh_testing - DEBUG - 2022/02/02 21:20:15 wazuh-syscheckd[9503] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.001 sec (0.001 clock sec) 2022-02-02 17:20:47,998 - wazuh_testing - DEBUG - 2022/02/02 21:20:42 wazuh-syscheckd[14664] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/debug' 2022-02-02 17:20:47,998 - wazuh_testing - DEBUG - 2022/02/02 21:20:15 wazuh-syscheckd[9503] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 0, path count: 0 2022-02-02 17:20:47,998 - wazuh_testing - DEBUG - 2022/02/02 21:20:42 wazuh-syscheckd[14664] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/dev/core' 2022-02-02 17:20:47,999 - wazuh_testing - DEBUG - 2022/02/02 21:20:42 wazuh-syscheckd[14664] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '^/proc' 2022-02-02 17:20:47,999 - wazuh_testing - DEBUG - 2022/02/02 21:20:15 wazuh-db[9333] main.c:290 at run_dealer(): DEBUG: New client connected (11). 2022-02-02 17:20:47,999 - wazuh_testing - DEBUG - 2022/02/02 21:20:42 wazuh-syscheckd[14664] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '.log$|.swp$' 2022-02-02 17:20:47,999 - wazuh_testing - DEBUG - 2022/02/02 21:20:15 wazuh-db[9333] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 000 query: syscheck scan_info_update end_scan 1643833215 2022-02-02 17:20:47,999 - wazuh_testing - DEBUG - 2022/02/02 21:20:42 wazuh-syscheckd[14664] main.c:235 at main(): INFO: (6004): No diff for file: '/etc/ssl/private.key' 2022-02-02 17:20:47,999 - wazuh_testing - DEBUG - 2022/02/02 21:20:15 wazuh-syscheckd[9503] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:20:48,000 - wazuh_testing - DEBUG - 2022/02/02 21:20:42 wazuh-syscheckd[14664] main.c:245 at main(): INFO: (6016): Directory set for real time monitoring: '/testdir2'. 2022-02-02 17:20:48,000 - wazuh_testing - DEBUG - 2022/02/02 21:20:15 wazuh-syscheckd[9503] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:20:48,000 - wazuh_testing - DEBUG - 2022/02/02 21:20:42 wazuh-syscheckd[14664] syscheck_audit.c:243 at audit_init(): WARNING: (6924): Who-data engine cannot start because Auditd is not running. 2022-02-02 17:20:48,000 - wazuh_testing - DEBUG - 2022/02/02 21:20:15 wazuh-syscheckd[9503] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. 2022-02-02 17:20:48,000 - wazuh_testing - DEBUG - 2022/02/02 21:20:42 wazuh-syscheckd[14664] main.c:264 at main(): WARNING: (6913): Who-data engine could not start. Switching who-data to real-time. 2022-02-02 17:20:48,001 - wazuh_testing - DEBUG - 2022/02/02 21:20:15 wazuh-syscheckd[9503] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:20:48,001 - wazuh_testing - DEBUG - 2022/02/02 21:20:42 wazuh-syscheckd[14664] run_check.c:194 at start_daemon(): DEBUG: (6320): Setting process priority to: '10' 2022-02-02 17:20:48,001 - wazuh_testing - DEBUG - 2022/02/02 21:20:15 wazuh-syscheckd[9503] run_check.c:568 at symlink_checker_thread(): DEBUG: (6033): Starting symbolic link updater. Interval '600'. 2022-02-02 17:20:48,001 - wazuh_testing - DEBUG - 2022/02/02 21:20:42 wazuh-syscheckd[14664] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:20:48,001 - wazuh_testing - DEBUG - 2022/02/02 21:20:15 wazuh-syscheckd[9503] run_check.c:82 at fim_send_sync_msg(): DEBUG: (6317): Sending integrity control message: {"component":"fim_file","type":"integrity_clear","data":{"id":1643833215,"version":2}} 2022-02-02 17:20:48,001 - wazuh_testing - DEBUG - 2022/02/02 21:20:42 wazuh-syscheckd[14664] run_check.c:229 at start_daemon(): INFO: (6000): Starting daemon... 2022-02-02 17:20:48,002 - wazuh_testing - DEBUG - 2022/02/02 21:20:42 wazuh-syscheckd[14664] run_check.c:232 at start_daemon(): INFO: (6010): File integrity monitoring scan frequency: 20 seconds 2022-02-02 17:20:48,002 - wazuh_testing - DEBUG - 2022/02/02 21:20:15 wazuh-syscheckd[9503] fim_sync.c:70 at fim_run_integrity(): DEBUG: Finished calculating FIM integrity. Time: 0.000 seconds. 2022-02-02 17:20:48,002 - wazuh_testing - DEBUG - 2022/02/02 21:20:42 wazuh-syscheckd[14664] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-02 17:20:48,002 - wazuh_testing - DEBUG - 2022/02/02 21:20:15 wazuh-db[9333] main.c:290 at run_dealer(): DEBUG: New client connected (14). 2022-02-02 17:20:48,003 - wazuh_testing - DEBUG - 2022/02/02 21:20:42 wazuh-syscheckd[14664] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1643833242}} 2022-02-02 17:20:48,003 - wazuh_testing - DEBUG - 2022/02/02 21:20:15 wazuh-db[9333] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 000 query: fim_file integrity_clear {"id":1643833215,"version":2} 2022-02-02 17:20:48,003 - wazuh_testing - DEBUG - 2022/02/02 21:20:42 wazuh-syscheckd[14664] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-02 17:20:48,003 - wazuh_testing - DEBUG - 2022/02/02 21:20:16 wazuh-remoted: INFO: Started (pid: 9524). Listening on port 1514/TCP (secure). 2022-02-02 17:20:48,003 - wazuh_testing - DEBUG - 2022/02/02 21:20:42 wazuh-syscheckd[14664] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-02 17:20:48,004 - wazuh_testing - DEBUG - 2022/02/02 21:20:42 wazuh-syscheckd[14664] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-02 17:20:48,004 - wazuh_testing - DEBUG - 2022/02/02 21:20:16 wazuh-db[9333] main.c:290 at run_dealer(): DEBUG: New client connected (12). 2022-02-02 17:20:48,004 - wazuh_testing - DEBUG - 2022/02/02 21:20:42 wazuh-syscheckd[14664] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-02 17:20:48,004 - wazuh_testing - DEBUG - 2022/02/02 21:20:16 wazuh-db[9333] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: reset-agents-connection synced 2022-02-02 17:20:48,005 - wazuh_testing - DEBUG - 2022/02/02 21:20:42 wazuh-syscheckd[14664] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-02 17:20:48,005 - wazuh_testing - DEBUG - 2022/02/02 21:20:16 wazuh-db[9333] main.c:352 at run_worker(): DEBUG: Client 12 disconnected. 2022-02-02 17:20:48,005 - wazuh_testing - DEBUG - 2022/02/02 21:20:43 wazuh-logcollector: INFO: (1950): Analyzing file: '/var/ossec/logs/active-responses.log'. 2022-02-02 17:20:48,005 - wazuh_testing - DEBUG - 2022/02/02 21:20:16 wazuh-remoted: INFO: (1410): Reading authentication keys file. 2022-02-02 17:20:48,005 - wazuh_testing - DEBUG - 2022/02/02 21:20:43 wazuh-logcollector: ERROR: (1103): Could not open file '/var/log/secure' due to [(2)-(No such file or directory)]. 2022-02-02 17:20:48,005 - wazuh_testing - DEBUG - 2022/02/02 21:20:17 wazuh-logcollector: INFO: (1950): Analyzing file: '/var/ossec/logs/active-responses.log'. 2022-02-02 17:20:48,006 - wazuh_testing - DEBUG - 2022/02/02 21:20:43 wazuh-logcollector: INFO: (1950): Analyzing file: '/var/log/secure'. 2022-02-02 17:20:48,006 - wazuh_testing - DEBUG - 2022/02/02 21:20:17 wazuh-logcollector: INFO: (1950): Analyzing file: '/var/log/dpkg.log'. 2022-02-02 17:20:48,006 - wazuh_testing - DEBUG - 2022/02/02 21:20:43 wazuh-logcollector: INFO: Started (pid: 14678). 2022-02-02 17:20:48,006 - wazuh_testing - DEBUG - 2022/02/02 21:20:17 wazuh-logcollector: INFO: Started (pid: 9555). 2022-02-02 17:20:48,006 - wazuh_testing - DEBUG - 2022/02/02 21:20:43 wazuh-modulesd: INFO: Started (pid: 14692). 2022-02-02 17:20:48,007 - wazuh_testing - DEBUG - 2022/02/02 21:20:17 wazuh-monitord: INFO: Started (pid: 9571). 2022-02-02 17:20:48,007 - wazuh_testing - DEBUG - 2022/02/02 21:20:43 wazuh-modulesd:agent-upgrade: INFO: (8153): Module Agent Upgrade started. 2022-02-02 17:20:48,007 - wazuh_testing - DEBUG - 2022/02/02 21:20:17 wazuh-modulesd: INFO: Started (pid: 9580). 2022-02-02 17:20:48,007 - wazuh_testing - DEBUG - 2022/02/02 21:20:43 wazuh-modulesd:control: INFO: Starting control thread. 2022-02-02 17:20:48,007 - wazuh_testing - DEBUG - 2022/02/02 21:20:17 wazuh-modulesd:database: INFO: Module started. 2022-02-02 17:20:48,008 - wazuh_testing - DEBUG - 2022/02/02 21:20:43 wazuh-syscheckd[14664] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-02 17:20:48,008 - wazuh_testing - DEBUG - 2022/02/02 21:20:17 wazuh-db[9333] main.c:290 at run_dealer(): DEBUG: New client connected (12). 2022-02-02 17:20:48,008 - wazuh_testing - DEBUG - 2022/02/02 21:20:43 wazuh-syscheckd[14664] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-02 17:20:48,008 - wazuh_testing - DEBUG - 2022/02/02 21:20:17 wazuh-db[9333] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-name {"id":0,"name":"wazuh-manager"} 2022-02-02 17:20:48,009 - wazuh_testing - DEBUG - 2022/02/02 21:20:43 wazuh-syscheckd[14664] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1643833243}} 2022-02-02 17:20:48,009 - wazuh_testing - DEBUG - 2022/02/02 21:20:17 wazuh-db[9333] main.c:290 at run_dealer(): DEBUG: New client connected (16). 2022-02-02 17:20:48,009 - wazuh_testing - DEBUG - 2022/02/02 21:20:43 wazuh-syscheckd[14664] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 1.244 sec (1.241 clock sec) 2022-02-02 17:20:48,010 - wazuh_testing - DEBUG - 2022/02/02 21:20:17 wazuh-modulesd:task-manager: INFO: (8200): Module Task Manager started. 2022-02-02 17:20:48,010 - wazuh_testing - DEBUG - 2022/02/02 21:20:43 wazuh-syscheckd[14664] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1621, path count: 1627 2022-02-02 17:20:48,010 - wazuh_testing - DEBUG - 2022/02/02 21:20:17 wazuh-db[9333] wdb_parser.c:928 at wdb_parse(): DEBUG: Task query: set_timeout {"now":1643833217,"interval":900} 2022-02-02 17:20:48,011 - wazuh_testing - DEBUG - 2022/02/02 21:20:43 wazuh-syscheckd[14664] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:20:48,011 - wazuh_testing - DEBUG - 2022/02/02 21:20:17 wazuh-modulesd:control: INFO: Starting control thread. 2022-02-02 17:20:48,011 - wazuh_testing - DEBUG - 2022/02/02 21:20:43 wazuh-syscheckd[14664] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:20:48,012 - wazuh_testing - DEBUG - 2022/02/02 21:20:43 wazuh-syscheckd[14664] run_check.c:387 at fim_run_realtime(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-02 17:20:48,012 - wazuh_testing - DEBUG - 2022/02/02 21:20:17 wazuh-modulesd:agent-upgrade: INFO: (8153): Module Agent Upgrade started. 2022-02-02 17:20:48,013 - wazuh_testing - DEBUG - 2022/02/02 21:20:43 wazuh-syscheckd[14664] run_check.c:543 at log_realtime_status(): INFO: (6012): Real-time file integrity monitoring started. 2022-02-02 17:20:48,013 - wazuh_testing - DEBUG - 2022/02/02 21:20:17 wazuh-modulesd:osquery: INFO: Module disabled. Exiting... 2022-02-02 17:20:48,013 - wazuh_testing - DEBUG - 2022/02/02 21:20:43 wazuh-syscheckd[14664] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:20:48,014 - wazuh_testing - DEBUG - 2022/02/02 21:20:17 wazuh-db[9333] main.c:352 at run_worker(): DEBUG: Client 16 disconnected. 2022-02-02 17:20:48,014 - wazuh_testing - DEBUG - 2022/02/02 21:20:43 wazuh-syscheckd[14664] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. 2022-02-02 17:20:48,014 - wazuh_testing - DEBUG - 2022/02/02 21:20:17 wazuh-modulesd:ciscat: INFO: Module disabled. Exiting... 2022-02-02 17:20:48,015 - wazuh_testing - DEBUG - 2022/02/02 21:20:17 sca: INFO: Module disabled. Exiting. 2022-02-02 17:20:48,015 - wazuh_testing - DEBUG - 2022/02/02 21:20:43 wazuh-syscheckd[14664] run_check.c:568 at symlink_checker_thread(): DEBUG: (6033): Starting symbolic link updater. Interval '600'. 2022-02-02 17:20:48,016 - wazuh_testing - DEBUG - 2022/02/02 21:20:17 wazuh-db[9333] main.c:290 at run_dealer(): DEBUG: New client connected (16). 2022-02-02 17:20:48,017 - wazuh_testing - DEBUG - 2022/02/02 21:20:43 wazuh-syscheckd[14664] run_check.c:82 at fim_send_sync_msg(): DEBUG: (6317): Sending integrity control message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1643833243,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"521d129e81ea45a1a7131d8c47108764c906a17c"}} 2022-02-02 17:20:48,017 - wazuh_testing - DEBUG - 2022/02/02 21:20:17 wazuh-modulesd:syscollector: INFO: Module disabled. Exiting... 2022-02-02 17:20:48,017 - wazuh_testing - DEBUG - 2022/02/02 21:20:17 wazuh-db[9333] wdb_parser.c:928 at wdb_parse(): DEBUG: Task query: delete_old {"timestamp":1643228417} 2022-02-02 17:20:48,018 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-agent1 and message: .*Sending integrity control message: (.+)$ 2022-02-02 17:20:48,018 - wazuh_testing - DEBUG - 2022/02/02 21:20:17 wazuh-modulesd:download: INFO: Module started. 2022-02-02 17:20:48,019 - wazuh_testing - DEBUG - 2022/02/02 21:20:17 wazuh-db[9333] main.c:352 at run_worker(): DEBUG: Client 16 disconnected. 2022-02-02 17:20:48,020 - wazuh_testing - DEBUG - 2022/02/02 21:20:17 wazuh-db[9333] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":0,"version":"Wazuh v4.2.5","manager_host":"wazuh-manager","node_name":"wazuh-master","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-manager |5.13.0-27-generic |#29~20.04.1-Ubuntu SMP Fri Jan 14 00:32:30 UTC 2022 |x86_64","os_arch":"x86_64"} 2022-02-02 17:20:48,022 - wazuh_testing - DEBUG - 2022/02/02 21:20:17 wazuh-db[9333] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: insert-agent {"id":1,"name":"wazuh-agent1","register_ip":"any","internal_key":"1111111111111111111111111111111111111111111111111111111111111111","group":"default","date_add":0} 2022-02-02 17:20:48,023 - wazuh_testing - DEBUG - 2022/02/02 21:20:17 wazuh-db[9333] wdb_global.c:89 at wdb_global_insert_agent(): DEBUG: SQLite: UNIQUE constraint failed: agent.id 2022-02-02 17:20:48,023 - wazuh_testing - DEBUG - 2022/02/02 21:20:17 wazuh-db[9333] wdb_parser.c:4784 at wdb_parse_global_insert_agent(): DEBUG: Global DB Cannot execute SQL query; err database queue/db/global.db: UNIQUE constraint failed: agent.id 2022-02-02 17:20:48,024 - wazuh_testing - DEBUG - 2022/02/02 21:20:17 wazuh-db[9333] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-group {"id":1,"group":"default"} 2022-02-02 17:20:48,025 - wazuh_testing - DEBUG - 2022/02/02 21:20:17 wazuh-db[9333] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: delete-agent-belong 1 2022-02-02 17:20:48,025 - wazuh_testing - DEBUG - 2022/02/02 21:20:17 wazuh-db[9333] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: find-group default 2022-02-02 17:20:48,026 - wazuh_testing - DEBUG - 2022/02/02 21:20:17 wazuh-db[9333] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: insert-agent-belong {"id_group":1,"id_agent":1} 2022-02-02 17:20:48,027 - wazuh_testing - DEBUG - 2022/02/02 21:20:17 wazuh-db[9333] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: get-all-agents last_id 0 2022-02-02 17:20:48,027 - wazuh_testing - DEBUG - 2022/02/02 21:20:17 wazuh-db[9333] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: select-groups 2022-02-02 17:20:48,028 - wazuh_testing - DEBUG - 2022/02/02 21:20:17 wazuh-db[9333] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: find-group default 2022-02-02 17:20:48,029 - wazuh_testing - DEBUG - 2022/02/02 21:20:17 wazuh-db[9333] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: get-all-agents last_id 0 2022-02-02 17:20:48,029 - wazuh_testing - DEBUG - 2022/02/02 21:20:17 wazuh-db[9333] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: select-agent-group 1 2022-02-02 17:20:48,030 - wazuh_testing - DEBUG - 2022/02/02 21:20:17 wazuh-db[9333] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: delete-agent-belong 1 2022-02-02 17:20:48,031 - wazuh_testing - DEBUG - 2022/02/02 21:20:17 wazuh-db[9333] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: find-group default 2022-02-02 17:20:48,031 - wazuh_testing - DEBUG - 2022/02/02 21:20:17 wazuh-db[9333] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: insert-agent-belong {"id_group":1,"id_agent":1} 2022-02-02 17:20:48,032 - wazuh_testing - DEBUG - 2022/02/02 21:20:17 wazuh-db[9333] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: select-agent-name 1 2022-02-02 17:20:48,033 - wazuh_testing - DEBUG - 2022/02/02 21:20:17 wazuh-db[9333] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: select-agent-name 1 2022-02-02 17:20:48,034 - wazuh_testing - DEBUG - 2022/02/02 21:20:18 wazuh-db[9333] main.c:290 at run_dealer(): DEBUG: New client connected (16). 2022-02-02 17:20:48,035 - wazuh_testing - DEBUG - 2022/02/02 21:20:18 wazuh-db[9333] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-keepalive {"id":1,"connection_status":"pending","sync_status":"synced"} 2022-02-02 17:20:48,036 - wazuh_testing - DEBUG - 2022/02/02 21:20:18 wazuh-db[9333] main.c:290 at run_dealer(): DEBUG: New client connected (18). 2022-02-02 17:20:48,038 - wazuh_testing - DEBUG - 2022/02/02 21:20:18 wazuh-db[9333] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.18.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.18.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.13.0-27-generic |#29~20.04.1-Ubuntu SMP Fri Jan 14 00:32:30 UTC 2022 |x86_64","os_arch":"x86_64"} 2022-02-02 17:20:48,039 - wazuh_testing - DEBUG - 2022/02/02 21:20:18 wazuh-db[9333] main.c:290 at run_dealer(): DEBUG: New client connected (19). 2022-02-02 17:20:48,040 - wazuh_testing - DEBUG - 2022/02/02 21:20:18 wazuh-db[9333] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1643833188 2022-02-02 17:20:48,041 - wazuh_testing - DEBUG - 2022/02/02 21:20:18 wazuh-db[9333] main.c:290 at run_dealer(): DEBUG: New client connected (20). 2022-02-02 17:20:48,042 - wazuh_testing - DEBUG - 2022/02/02 21:20:18 wazuh-db[9333] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck save2 {"path":"/testdir1/tmprpta1400","version":2,"timestamp":1643833218,"attributes":{"type":"file","size":8,"perm":"rw-r--r--","uid":"0","gid":"0","user_name":"root","group_name":"root","inode":7239378,"mtime":1643833194,"hash_md5":"e770e54c4c42d3307c141c0c8948992a","hash_sha1":"9eab19985b11b15f91f936e463ea74f1dfe88e32","hash_sha256":"b1893f8d4b1596c20d6f83a784b2b0468c22fb83ce4ff2033ff86a37865d41d8","checksum":"719a64cebab2bbf5814dd71f7401f1eb52ae5baa"}} 2022-02-02 17:20:48,044 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-manager and message: .*Agent 001 query: (.+) save2 2022-02-02 17:20:48,964 - wazuh_testing - DEBUG - Cleaning temporal files... 2022-02-02 17:20:48,964 - wazuh_testing - DEBUG - Checking results... 2022-02-02 17:20:48,966 - wazuh_testing - DEBUG - Received from wazuh-agent1 the expected message: 2022/02/02 21:20:43 wazuh-syscheckd[14664] run_check.c:82 at fim_send_sync_msg(): DEBUG: (6317): Sending integrity control message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1643833243,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"521d129e81ea45a1a7131d8c47108764c906a17c"}} 2022-02-02 17:20:48,966 - wazuh_testing - DEBUG - Received from wazuh-manager the expected message: 2022/02/02 21:20:18 wazuh-db[9333] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck save2 {"path":"/testdir1/tmprpta1400","version":2,"timestamp":1643833218,"attributes":{"type":"file","size":8,"perm":"rw-r--r--","uid":"0","gid":"0","user_name":"root","group_name":"root","inode":7239378,"mtime":1643833194,"hash_md5":"e770e54c4c42d3307c141c0c8948992a","hash_sha1":"9eab19985b11b15f91f936e463ea74f1dfe88e32","hash_sha256":"b1893f8d4b1596c20d6f83a784b2b0468c22fb83ce4ff2033ff86a37865d41d8","checksum":"719a64cebab2bbf5814dd71f7401f1eb52ae5baa"}} 2022-02-02 17:21:16,026 - wazuh_testing - DEBUG - Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-02 17:21:16,028 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-02 17:21:16,030 - wazuh_testing - DEBUG - Starting file composer for wazuh-agent1 and path: /var/ossec/logs/ossec.log. Composite file in /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-agent1_ossec.log.tmp 2022-02-02 17:21:16,032 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-agent1 and message: .*Initializing FIM Integrity Synchronization check. (.+)$ 2022-02-02 17:21:18,034 - wazuh_testing - DEBUG - 2022/02/02 21:21:01 wazuh-logcollector: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:21:18,035 - wazuh_testing - DEBUG - 2022/02/02 21:21:02 wazuh-syscheckd[14664] sig_op.c:49 at HandleSIG(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:21:18,035 - wazuh_testing - DEBUG - 2022/02/02 21:21:02 wazuh-agentd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:21:18,035 - wazuh_testing - DEBUG - 2022/02/02 21:21:02 wazuh-execd: INFO: (1314): Shutdown received. Deleting responses. 2022-02-02 17:21:18,035 - wazuh_testing - DEBUG - 2022/02/02 21:21:02 wazuh-execd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:21:18,035 - wazuh_testing - DEBUG - 2022/02/02 21:21:08 wazuh-syscheckd[15079] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-02 17:21:18,036 - wazuh_testing - DEBUG - 2022/02/02 21:21:08 wazuh-syscheckd[15079] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-02 17:21:18,036 - wazuh_testing - DEBUG - 2022/02/02 21:21:08 wazuh-syscheckd[15079] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir1' due to [(2)-(No such file or directory)]. 2022-02-02 17:21:18,036 - wazuh_testing - DEBUG - 2022/02/02 21:21:08 wazuh-syscheckd[15079] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-02 17:21:18,037 - wazuh_testing - DEBUG - 2022/02/02 21:21:08 wazuh-syscheckd[15079] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-02 17:21:18,037 - wazuh_testing - DEBUG - 2022/02/02 21:21:08 wazuh-syscheckd[15079] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-02 17:21:18,037 - wazuh_testing - DEBUG - 2022/02/02 21:21:08 wazuh-syscheckd[15079] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-02 17:21:18,037 - wazuh_testing - DEBUG - 2022/02/02 21:21:08 wazuh-syscheckd[15079] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-02 17:21:18,038 - wazuh_testing - DEBUG - 2022/02/02 21:21:08 wazuh-syscheckd[15079] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ 2022-02-02 17:21:18,038 - wazuh_testing - DEBUG - 2022/02/02 21:21:08 wazuh-syscheckd[15079] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ OK? 2022-02-02 17:21:18,038 - wazuh_testing - DEBUG - 2022/02/02 21:21:08 wazuh-syscheckd[15079] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-02 17:21:18,039 - wazuh_testing - DEBUG - 2022/02/02 21:21:08 wazuh-syscheckd[15079] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-02 17:21:18,039 - wazuh_testing - DEBUG - 2022/02/02 21:21:08 wazuh-syscheckd[15079] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-02 17:21:18,039 - wazuh_testing - DEBUG - 2022/02/02 21:21:08 wazuh-syscheckd[15079] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-02 17:21:18,039 - wazuh_testing - DEBUG - 2022/02/02 21:21:08 wazuh-syscheckd[15079] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-02 17:21:18,040 - wazuh_testing - DEBUG - 2022/02/02 21:21:08 wazuh-syscheckd[15079] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-02 17:21:18,040 - wazuh_testing - DEBUG - 2022/02/02 21:21:08 wazuh-syscheckd[15079] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-02 17:21:18,040 - wazuh_testing - DEBUG - 2022/02/02 21:21:08 wazuh-syscheckd[15079] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-02 17:21:18,041 - wazuh_testing - DEBUG - 2022/02/02 21:21:08 wazuh-execd: INFO: Started (pid: 15092). 2022-02-02 17:21:18,041 - wazuh_testing - DEBUG - 2022/02/02 21:21:09 wazuh-agentd: INFO: (1410): Reading authentication keys file. 2022-02-02 17:21:18,041 - wazuh_testing - DEBUG - 2022/02/02 21:21:09 wazuh-agentd: INFO: Using notify time: 10 and max time to reconnect: 60 2022-02-02 17:21:18,042 - wazuh_testing - DEBUG - 2022/02/02 21:21:09 wazuh-agentd: INFO: Version detected -> Linux |wazuh-agent1 |5.13.0-27-generic |#29~20.04.1-Ubuntu SMP Fri Jan 14 00:32:30 UTC 2022 |x86_64 [Debian GNU/Linux|debian: 10 (buster)] - Wazuh v4.2.5 2022-02-02 17:21:18,042 - wazuh_testing - DEBUG - 2022/02/02 21:21:09 wazuh-agentd: INFO: Started (pid: 15103). 2022-02-02 17:21:18,042 - wazuh_testing - DEBUG - 2022/02/02 21:21:09 wazuh-agentd: INFO: Server IP Address: wazuh-manager/172.18.0.2 2022-02-02 17:21:18,042 - wazuh_testing - DEBUG - 2022/02/02 21:21:09 wazuh-agentd: INFO: Using AES as encryption method. 2022-02-02 17:21:18,043 - wazuh_testing - DEBUG - 2022/02/02 21:21:09 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.18.0.2:1514/tcp). 2022-02-02 17:21:18,043 - wazuh_testing - DEBUG - 2022/02/02 21:21:09 wazuh-agentd: INFO: (4102): Connected to the server (wazuh-manager/172.18.0.2:1514/tcp). 2022-02-02 17:21:18,043 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-02 17:21:18,043 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-02 17:21:18,044 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir1' due to [(2)-(No such file or directory)]. 2022-02-02 17:21:18,044 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-02 17:21:18,044 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-02 17:21:18,045 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-02 17:21:18,045 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-02 17:21:18,045 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-02 17:21:18,046 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ 2022-02-02 17:21:18,046 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ OK? 2022-02-02 17:21:18,046 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-02 17:21:18,047 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-02 17:21:18,047 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-02 17:21:18,047 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-02 17:21:18,048 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-02 17:21:18,049 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-02 17:21:18,049 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-02 17:21:18,049 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-02 17:21:18,050 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 rootcheck[15115] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled. 2022-02-02 17:21:18,050 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:21:18,051 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] syscom.c:123 at syscom_main(): DEBUG: (6284): Local requests thread ready. 2022-02-02 17:21:18,051 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] mq_op.c:47 at StartMQ(): DEBUG: Connected succesfully to 'queue/sockets/queue' after 0 attempts 2022-02-02 17:21:18,052 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] mq_op.c:48 at StartMQ(): DEBUG: (unix_domain) Maximum send buffer set to: '212992'. 2022-02-02 17:21:18,052 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] main.c:185 at main(): INFO: Started (pid: 15117). 2022-02-02 17:21:18,053 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] main.c:193 at main(): INFO: (6003): Monitoring path: '/bin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:21:18,053 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] main.c:193 at main(): INFO: (6003): Monitoring path: '/boot', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:21:18,054 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] main.c:193 at main(): INFO: (6003): Monitoring path: '/etc', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:21:18,054 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] main.c:193 at main(): INFO: (6003): Monitoring path: '/sbin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:21:18,055 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir1', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:21:18,056 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir2', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | realtime'. 2022-02-02 17:21:18,056 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir3', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | whodata'. 2022-02-02 17:21:18,057 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/bin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:21:18,057 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/sbin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:21:18,057 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] main.c:215 at main(): DEBUG: (6357): Maximum disk quota size limit configured to '1048576 KB'. 2022-02-02 17:21:18,058 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mtab' 2022-02-02 17:21:18,058 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/hosts.deny' 2022-02-02 17:21:18,058 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mail/statistics' 2022-02-02 17:21:18,059 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random-seed' 2022-02-02 17:21:18,060 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random.seed' 2022-02-02 17:21:18,060 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/adjtime' 2022-02-02 17:21:18,061 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/httpd/logs' 2022-02-02 17:21:18,062 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/utmpx' 2022-02-02 17:21:18,062 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/wtmpx' 2022-02-02 17:21:18,063 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/cups/certs' 2022-02-02 17:21:18,064 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/dumpdates' 2022-02-02 17:21:18,064 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/svc/volatile' 2022-02-02 17:21:18,065 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/security' 2022-02-02 17:21:18,066 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/debug' 2022-02-02 17:21:18,066 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/dev/core' 2022-02-02 17:21:18,067 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '^/proc' 2022-02-02 17:21:18,067 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '.log$|.swp$' 2022-02-02 17:21:18,068 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] main.c:235 at main(): INFO: (6004): No diff for file: '/etc/ssl/private.key' 2022-02-02 17:21:18,068 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] main.c:245 at main(): INFO: (6016): Directory set for real time monitoring: '/testdir2'. 2022-02-02 17:21:18,069 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] syscheck_audit.c:243 at audit_init(): WARNING: (6924): Who-data engine cannot start because Auditd is not running. 2022-02-02 17:21:18,069 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] main.c:264 at main(): WARNING: (6913): Who-data engine could not start. Switching who-data to real-time. 2022-02-02 17:21:18,070 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] run_check.c:194 at start_daemon(): DEBUG: (6320): Setting process priority to: '10' 2022-02-02 17:21:18,070 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:21:18,071 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] run_check.c:229 at start_daemon(): INFO: (6000): Starting daemon... 2022-02-02 17:21:18,072 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] run_check.c:232 at start_daemon(): INFO: (6010): File integrity monitoring scan frequency: 20 seconds 2022-02-02 17:21:18,072 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-02 17:21:18,073 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1643833270}} 2022-02-02 17:21:18,073 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-02 17:21:18,073 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-02 17:21:18,074 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-02 17:21:18,074 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-02 17:21:18,074 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-02 17:21:18,075 - wazuh_testing - DEBUG - 2022/02/02 21:21:11 wazuh-logcollector: INFO: (1950): Analyzing file: '/var/ossec/logs/active-responses.log'. 2022-02-02 17:21:18,075 - wazuh_testing - DEBUG - 2022/02/02 21:21:11 wazuh-logcollector: ERROR: (1103): Could not open file '/var/log/secure' due to [(2)-(No such file or directory)]. 2022-02-02 17:21:18,075 - wazuh_testing - DEBUG - 2022/02/02 21:21:11 wazuh-logcollector: INFO: (1950): Analyzing file: '/var/log/secure'. 2022-02-02 17:21:18,076 - wazuh_testing - DEBUG - 2022/02/02 21:21:11 wazuh-logcollector: INFO: Started (pid: 15130). 2022-02-02 17:21:18,076 - wazuh_testing - DEBUG - 2022/02/02 21:21:11 wazuh-syscheckd[15115] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-02 17:21:18,076 - wazuh_testing - DEBUG - 2022/02/02 21:21:11 wazuh-syscheckd[15115] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-02 17:21:18,077 - wazuh_testing - DEBUG - 2022/02/02 21:21:11 wazuh-syscheckd[15115] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1643833271}} 2022-02-02 17:21:18,077 - wazuh_testing - DEBUG - 2022/02/02 21:21:11 wazuh-syscheckd[15115] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 1.273 sec (1.266 clock sec) 2022-02-02 17:21:18,078 - wazuh_testing - DEBUG - 2022/02/02 21:21:11 wazuh-syscheckd[15115] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1620, path count: 1626 2022-02-02 17:21:18,078 - wazuh_testing - DEBUG - 2022/02/02 21:21:11 wazuh-syscheckd[15115] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:21:18,079 - wazuh_testing - DEBUG - 2022/02/02 21:21:11 wazuh-syscheckd[15115] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:21:18,080 - wazuh_testing - DEBUG - 2022/02/02 21:21:11 wazuh-syscheckd[15115] run_check.c:387 at fim_run_realtime(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-02 17:21:18,080 - wazuh_testing - DEBUG - 2022/02/02 21:21:11 wazuh-syscheckd[15115] run_check.c:543 at log_realtime_status(): INFO: (6012): Real-time file integrity monitoring started. 2022-02-02 17:21:18,081 - wazuh_testing - DEBUG - 2022/02/02 21:21:11 wazuh-syscheckd[15115] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:21:18,081 - wazuh_testing - DEBUG - 2022/02/02 21:21:11 wazuh-syscheckd[15115] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. 2022-02-02 17:21:18,082 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-agent1 and message: .*Initializing FIM Integrity Synchronization check. (.+)$ 2022-02-02 17:21:19,034 - wazuh_testing - DEBUG - Cleaning temporal files... 2022-02-02 17:21:19,035 - wazuh_testing - DEBUG - Checking results... 2022-02-02 17:21:19,037 - wazuh_testing - DEBUG - Received from wazuh-agent1 the expected message: 2022/02/02 21:21:11 wazuh-syscheckd[15115] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. -------------------------------Captured log call-------------------------------- DEBUG testinfra:base.py:277 RUN CommandResult(command=b"ansible --tree /tmp/tmpn9426hdi -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m command --args 'mkdir testdir1' wazuh-agent1", exit_status=0, stdout=b'wazuh-agent1 | CHANGED | rc=0 >>\n\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('command', 'mkdir testdir1', {'check': False, 'become': False}): {'changed': True, 'cmd': ['mkdir', 'testdir1'], 'delta': '0:00:00.701104', 'end': '2022-02-02 21:20:28.863887', 'msg': '', 'rc': 0, 'start': '2022-02-02 21:20:28.162783', 'stderr': '', 'stderr_lines': [], 'stdout': '', 'stdout_lines': []} DEBUG testinfra:base.py:277 RUN CommandResult(command=b"ansible --tree /tmp/tmp8pyo3_24 -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m command --args 'touch testdir1/testdir1.txt' wazuh-agent1", exit_status=0, stdout=b'wazuh-agent1 | CHANGED | rc=0 >>\n\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('command', 'touch testdir1/testdir1.txt', {'check': False, 'become': False}): {'changed': True, 'cmd': ['touch', 'testdir1/testdir1.txt'], 'delta': '0:00:01.879563', 'end': '2022-02-02 21:20:33.032449', 'msg': '', 'rc': 0, 'start': '2022-02-02 21:20:31.152886', 'stderr': '', 'stderr_lines': [], 'stdout': '', 'stdout_lines': []} DEBUG testinfra:base.py:277 RUN CommandResult(command=b"ansible --tree /tmp/tmpmeu45dr4 -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m service --args 'name=wazuh-agent state=restarted' wazuh-agent1", exit_status=0, stdout=b'wazuh-agent1 | CHANGED => {\n "changed": true,\n "name": "wazuh-agent",\n "state": "started"\n}\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('service', 'name=wazuh-agent state=restarted', {'check': False, 'become': False}): {'changed': True, 'name': 'wazuh-agent', 'state': 'started'} DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:1006 Cleaning temporal files... DEBUG wazuh_testing:monitoring.py:995 Checking results... DEBUG wazuh_testing:monitoring.py:1001 Received from wazuh-agent1 the expected message: 2022/02/02 21:20:43 wazuh-syscheckd[14664] run_check.c:82 at fim_send_sync_msg(): DEBUG: (6317): Sending integrity control message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1643833243,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"521d129e81ea45a1a7131d8c47108764c906a17c"}} DEBUG wazuh_testing:monitoring.py:1001 Received from wazuh-manager the expected message: 2022/02/02 21:20:18 wazuh-db[9333] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck save2 {"path":"/testdir1/tmprpta1400","version":2,"timestamp":1643833218,"attributes":{"type":"file","size":8,"perm":"rw-r--r--","uid":"0","gid":"0","user_name":"root","group_name":"root","inode":7239378,"mtime":1643833194,"hash_md5":"e770e54c4c42d3307c141c0c8948992a","hash_sha1":"9eab19985b11b15f91f936e463ea74f1dfe88e32","hash_sha256":"b1893f8d4b1596c20d6f83a784b2b0468c22fb83ce4ff2033ff86a37865d41d8","checksum":"719a64cebab2bbf5814dd71f7401f1eb52ae5baa"}} DEBUG testinfra:base.py:277 RUN CommandResult(command=b'ansible --tree /tmp/tmpcvnlnshj -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m copy --args \'dest=/var/ossec/logs/ossec.log content=\'"\'"\'\'"\'"\' force=yes\' wazuh-manager', exit_status=0, stdout=b'wazuh-manager | CHANGED => {\n "changed": true,\n "checksum": "da39a3ee5e6b4b0d3255bfef95601890afd80709",\n "dest": "/var/ossec/logs/ossec.log",\n "gid": 999,\n "group": "ossec",\n "md5sum": "d41d8cd98f00b204e9800998ecf8427e",\n "mode": "0660",\n "owner": "ossec",\n "size": 0,\n "src": "/root/.ansible/tmp/ansible-tmp-1643833250.08204-107771-215886002084107/source",\n "state": "file",\n "uid": 999\n}\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('copy', "dest=/var/ossec/logs/ossec.log content='' force=yes", {'check': False, 'become': False}): {'changed': True, 'checksum': 'da39a3ee5e6b4b0d3255bfef95601890afd80709', 'dest': '/var/ossec/logs/ossec.log', 'gid': 999, 'group': 'ossec', 'md5sum': 'd41d8cd98f00b204e9800998ecf8427e', 'mode': '0660', 'owner': 'ossec', 'size': 0, 'src': '/root/.ansible/tmp/ansible-tmp-1643833250.08204-107771-215886002084107/source', 'state': 'file', 'uid': 999} DEBUG testinfra:base.py:277 RUN CommandResult(command=b'ansible --tree /tmp/tmpeas40mj0 -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m copy --args \'dest=/var/ossec/logs/ossec.log content=\'"\'"\'\'"\'"\' force=yes\' wazuh-agent1', exit_status=0, stdout=b'wazuh-agent1 | CHANGED => {\n "changed": true,\n "checksum": "da39a3ee5e6b4b0d3255bfef95601890afd80709",\n "dest": "/var/ossec/logs/ossec.log",\n "gid": 999,\n "group": "ossec",\n "md5sum": "d41d8cd98f00b204e9800998ecf8427e",\n "mode": "0660",\n "owner": "ossec",\n "size": 0,\n "src": "/root/.ansible/tmp/ansible-tmp-1643833255.157126-108169-33284168966647/source",\n "state": "file",\n "uid": 999\n}\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('copy', "dest=/var/ossec/logs/ossec.log content='' force=yes", {'check': False, 'become': False}): {'changed': True, 'checksum': 'da39a3ee5e6b4b0d3255bfef95601890afd80709', 'dest': '/var/ossec/logs/ossec.log', 'gid': 999, 'group': 'ossec', 'md5sum': 'd41d8cd98f00b204e9800998ecf8427e', 'mode': '0660', 'owner': 'ossec', 'size': 0, 'src': '/root/.ansible/tmp/ansible-tmp-1643833255.157126-108169-33284168966647/source', 'state': 'file', 'uid': 999} DEBUG testinfra:base.py:277 RUN CommandResult(command=b"ansible --tree /tmp/tmp9xxqgb2i -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m command --args '/var/ossec/bin/wazuh-control stop' wazuh-agent1", exit_status=0, stdout=b'wazuh-agent1 | CHANGED | rc=0 >>\nKilling wazuh-modulesd... \nKilling wazuh-logcollector... \nKilling wazuh-syscheckd... \nKilling wazuh-agentd... \nKilling wazuh-execd... \nWazuh v4.2.5 Stopped\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('command', '/var/ossec/bin/wazuh-control stop', {'check': False, 'become': False}): {'changed': True, 'cmd': ['/var/ossec/bin/wazuh-control', 'stop'], 'delta': '0:00:01.387790', 'end': '2022-02-02 21:21:02.401113', 'msg': '', 'rc': 0, 'start': '2022-02-02 21:21:01.013323', 'stderr': '', 'stderr_lines': [], 'stdout': 'Killing wazuh-modulesd... \n' 'Killing wazuh-logcollector... \n' 'Killing wazuh-syscheckd... \n' 'Killing wazuh-agentd... \n' 'Killing wazuh-execd... \n' 'Wazuh v4.2.5 Stopped', 'stdout_lines': ['Killing wazuh-modulesd... ', 'Killing wazuh-logcollector... ', 'Killing wazuh-syscheckd... ', 'Killing wazuh-agentd... ', 'Killing wazuh-execd... ', 'Wazuh v4.2.5 Stopped']} DEBUG testinfra:base.py:277 RUN CommandResult(command=b"ansible --tree /tmp/tmpyvpgyxn0 -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m command --args 'rm -rf testdir1' wazuh-agent1", exit_status=0, stdout=b'wazuh-agent1 | CHANGED | rc=0 >>\n\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('command', 'rm -rf testdir1', {'check': False, 'become': False}): {'changed': True, 'cmd': ['rm', '-rf', 'testdir1'], 'delta': '0:00:00.750022', 'end': '2022-02-02 21:21:05.458944', 'msg': '', 'rc': 0, 'start': '2022-02-02 21:21:04.708922', 'stderr': '', 'stderr_lines': [], 'stdout': '', 'stdout_lines': []} DEBUG testinfra:base.py:277 RUN CommandResult(command=b"ansible --tree /tmp/tmp1281z0mu -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m command --args '/var/ossec/bin/wazuh-control start' wazuh-agent1", exit_status=0, stdout=b"wazuh-agent1 | CHANGED | rc=0 >>\nStarting Wazuh v4.2.5...\nStarted wazuh-execd...\nStarted wazuh-agentd...\nStarted wazuh-syscheckd...\nStarted wazuh-logcollector...\nStarted wazuh-modulesd...\nCompleted.2022/02/02 21:21:08 wazuh-syscheckd[15079] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized\n2022/02/02 21:21:08 wazuh-syscheckd[15079] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf'\n2022/02/02 21:21:08 wazuh-syscheckd[15079] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir1' due to [(2)-(No such file or directory)].\n2022/02/02 21:21:08 wazuh-syscheckd[15079] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)].\n2022/02/02 21:21:08 wazuh-syscheckd[15079] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)].\n2022/02/02 21:21:08 wazuh-syscheckd[15079] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc\n2022/02/02 21:21:08 wazuh-syscheckd[15079] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK?\n2022/02/02 21:21:08 wazuh-syscheckd[15079] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0\n2022/02/02 21:21:08 wazuh-syscheckd[15079] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$\n2022/02/02 21:21:08 wazuh-syscheckd[15079] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ OK?\n2022/02/02 21:21:08 wazuh-syscheckd[15079] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1\n2022/02/02 21:21:08 wazuh-syscheckd[15079] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf]\n2022/02/02 21:21:08 wazuh-syscheckd[15079] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile().\n2022/02/02 21:21:08 wazuh-syscheckd[15079] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10]\n2022/02/02 21:21:08 wazuh-syscheckd[15079] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes.\n2022/02/02 21:21:08 wazuh-syscheckd[15079] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile().\n2022/02/02 21:21:08 wazuh-syscheckd[15079] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10]\n2022/02/02 21:21:08 wazuh-syscheckd[15079] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes.\n2022/02/02 21:21:10 wazuh-syscheckd[15115] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized\n2022/02/02 21:21:10 wazuh-syscheckd[15115] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf'\n2022/02/02 21:21:10 wazuh-syscheckd[15115] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir1' due to [(2)-(No such file or directory)].\n2022/02/02 21:21:10 wazuh-syscheckd[15115] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)].\n2022/02/02 21:21:10 wazuh-syscheckd[15115] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)].\n2022/02/02 21:21:10 wazuh-syscheckd[15115] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc\n2022/02/02 21:21:10 wazuh-syscheckd[15115] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK?\n2022/02/02 21:21:10 wazuh-syscheckd[15115] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0\n2022/02/02 21:21:10 wazuh-syscheckd[15115] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$\n2022/02/02 21:21:10 wazuh-syscheckd[15115] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ OK?\n2022/02/02 21:21:10 wazuh-syscheckd[15115] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1\n2022/02/02 21:21:10 wazuh-syscheckd[15115] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf]\n2022/02/02 21:21:10 wazuh-syscheckd[15115] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile().\n2022/02/02 21:21:10 wazuh-syscheckd[15115] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10]\n2022/02/02 21:21:10 wazuh-syscheckd[15115] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes.\n2022/02/02 21:21:10 wazuh-syscheckd[15115] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile().\n2022/02/02 21:21:10 wazuh-syscheckd[15115] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10]\n2022/02/02 21:21:10 wazuh-syscheckd[15115] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes.\n2022/02/02 21:21:10 rootcheck[15115] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled.\n", stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('command', '/var/ossec/bin/wazuh-control start', {'check': False, 'become': False}): {'changed': True, 'cmd': ['/var/ossec/bin/wazuh-control', 'start'], 'delta': '0:00:07.922833', 'end': '2022-02-02 21:21:15.737425', 'msg': '', 'rc': 0, 'start': '2022-02-02 21:21:07.814592', 'stderr': '2022/02/02 21:21:08 wazuh-syscheckd[15079] debug_op.c:70 at ' '_log(): DEBUG: Logging module auto-initialized\n' '2022/02/02 21:21:08 wazuh-syscheckd[15079] config.c:87 at ' 'Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: ' "'etc/ossec.conf'\n" '2022/02/02 21:21:08 wazuh-syscheckd[15079] syscheck-config.c:1218 ' 'at read_attr(): DEBUG: Could not check the real path of ' "'/testdir1' due to [(2)-(No such file or directory)].\n" '2022/02/02 21:21:08 wazuh-syscheckd[15079] syscheck-config.c:1218 ' 'at read_attr(): DEBUG: Could not check the real path of ' "'/testdir2' due to [(2)-(No such file or directory)].\n" '2022/02/02 21:21:08 wazuh-syscheckd[15079] syscheck-config.c:1218 ' 'at read_attr(): DEBUG: Could not check the real path of ' "'/testdir3' due to [(2)-(No such file or directory)].\n" '2022/02/02 21:21:08 wazuh-syscheckd[15079] syscheck-config.c:2520 ' 'at process_option_regex(): DEBUG: Found ignore regex node ^/proc\n' '2022/02/02 21:21:08 wazuh-syscheckd[15079] syscheck-config.c:2527 ' 'at process_option_regex(): DEBUG: Found ignore regex node ^/proc ' 'OK?\n' '2022/02/02 21:21:08 wazuh-syscheckd[15079] syscheck-config.c:2528 ' 'at process_option_regex(): DEBUG: Found ignore regex size 0\n' '2022/02/02 21:21:08 wazuh-syscheckd[15079] syscheck-config.c:2520 ' 'at process_option_regex(): DEBUG: Found ignore regex node ' '.log$|.swp$\n' '2022/02/02 21:21:08 wazuh-syscheckd[15079] syscheck-config.c:2527 ' 'at process_option_regex(): DEBUG: Found ignore regex node ' '.log$|.swp$ OK?\n' '2022/02/02 21:21:08 wazuh-syscheckd[15079] syscheck-config.c:2528 ' 'at process_option_regex(): DEBUG: Found ignore regex size 1\n' '2022/02/02 21:21:08 wazuh-syscheckd[15079] config.c:95 at ' 'Read_Syscheck_Config(): DEBUG: (6208): Reading Client ' 'Configuration [etc/ossec.conf]\n' '2022/02/02 21:21:08 wazuh-syscheckd[15079] agent_op.c:208 at ' 'os_read_agent_profile(): DEBUG: Calling os_read_agent_profile().\n' '2022/02/02 21:21:08 wazuh-syscheckd[15079] agent_op.c:227 at ' 'os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, ' 'debian10]\n' '2022/02/02 21:21:08 wazuh-syscheckd[15079] config.c:375 at ' 'ReadConfig(): DEBUG: agent_config element does not have any ' 'attributes.\n' '2022/02/02 21:21:08 wazuh-syscheckd[15079] agent_op.c:208 at ' 'os_read_agent_profile(): DEBUG: Calling os_read_agent_profile().\n' '2022/02/02 21:21:08 wazuh-syscheckd[15079] agent_op.c:227 at ' 'os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, ' 'debian10]\n' '2022/02/02 21:21:08 wazuh-syscheckd[15079] config.c:375 at ' 'ReadConfig(): DEBUG: agent_config element does not have any ' 'attributes.\n' '2022/02/02 21:21:10 wazuh-syscheckd[15115] debug_op.c:70 at ' '_log(): DEBUG: Logging module auto-initialized\n' '2022/02/02 21:21:10 wazuh-syscheckd[15115] config.c:87 at ' 'Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: ' "'etc/ossec.conf'\n" '2022/02/02 21:21:10 wazuh-syscheckd[15115] syscheck-config.c:1218 ' 'at read_attr(): DEBUG: Could not check the real path of ' "'/testdir1' due to [(2)-(No such file or directory)].\n" '2022/02/02 21:21:10 wazuh-syscheckd[15115] syscheck-config.c:1218 ' 'at read_attr(): DEBUG: Could not check the real path of ' "'/testdir2' due to [(2)-(No such file or directory)].\n" '2022/02/02 21:21:10 wazuh-syscheckd[15115] syscheck-config.c:1218 ' 'at read_attr(): DEBUG: Could not check the real path of ' "'/testdir3' due to [(2)-(No such file or directory)].\n" '2022/02/02 21:21:10 wazuh-syscheckd[15115] syscheck-config.c:2520 ' 'at process_option_regex(): DEBUG: Found ignore regex node ^/proc\n' '2022/02/02 21:21:10 wazuh-syscheckd[15115] syscheck-config.c:2527 ' 'at process_option_regex(): DEBUG: Found ignore regex node ^/proc ' 'OK?\n' '2022/02/02 21:21:10 wazuh-syscheckd[15115] syscheck-config.c:2528 ' 'at process_option_regex(): DEBUG: Found ignore regex size 0\n' '2022/02/02 21:21:10 wazuh-syscheckd[15115] syscheck-config.c:2520 ' 'at process_option_regex(): DEBUG: Found ignore regex node ' '.log$|.swp$\n' '2022/02/02 21:21:10 wazuh-syscheckd[15115] syscheck-config.c:2527 ' 'at process_option_regex(): DEBUG: Found ignore regex node ' '.log$|.swp$ OK?\n' '2022/02/02 21:21:10 wazuh-syscheckd[15115] syscheck-config.c:2528 ' 'at process_option_regex(): DEBUG: Found ignore regex size 1\n' '2022/02/02 21:21:10 wazuh-syscheckd[15115] config.c:95 at ' 'Read_Syscheck_Config(): DEBUG: (6208): Reading Client ' 'Configuration [etc/ossec.conf]\n' '2022/02/02 21:21:10 wazuh-syscheckd[15115] agent_op.c:208 at ' 'os_read_agent_profile(): DEBUG: Calling os_read_agent_profile().\n' '2022/02/02 21:21:10 wazuh-syscheckd[15115] agent_op.c:227 at ' 'os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, ' 'debian10]\n' '2022/02/02 21:21:10 wazuh-syscheckd[15115] config.c:375 at ' 'ReadConfig(): DEBUG: agent_config element does not have any ' 'attributes.\n' '2022/02/02 21:21:10 wazuh-syscheckd[15115] agent_op.c:208 at ' 'os_read_agent_profile(): DEBUG: Calling os_read_agent_profile().\n' '2022/02/02 21:21:10 wazuh-syscheckd[15115] agent_op.c:227 at ' 'os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, ' 'debian10]\n' '2022/02/02 21:21:10 wazuh-syscheckd[15115] config.c:375 at ' 'ReadConfig(): DEBUG: agent_config element does not have any ' 'attributes.\n' '2022/02/02 21:21:10 rootcheck[15115] rootcheck.c:202 at ' 'rootcheck_init(): INFO: Rootcheck disabled.', 'stderr_lines': ['2022/02/02 21:21:08 wazuh-syscheckd[15079] debug_op.c:70 at ' '_log(): DEBUG: Logging module auto-initialized', '2022/02/02 21:21:08 wazuh-syscheckd[15079] config.c:87 at ' 'Read_Syscheck_Config(): DEBUG: (6287): Reading ' "configuration file: 'etc/ossec.conf'", '2022/02/02 21:21:08 wazuh-syscheckd[15079] ' 'syscheck-config.c:1218 at read_attr(): DEBUG: Could not ' "check the real path of '/testdir1' due to [(2)-(No such " 'file or directory)].', '2022/02/02 21:21:08 wazuh-syscheckd[15079] ' 'syscheck-config.c:1218 at read_attr(): DEBUG: Could not ' "check the real path of '/testdir2' due to [(2)-(No such " 'file or directory)].', '2022/02/02 21:21:08 wazuh-syscheckd[15079] ' 'syscheck-config.c:1218 at read_attr(): DEBUG: Could not ' "check the real path of '/testdir3' due to [(2)-(No such " 'file or directory)].', '2022/02/02 21:21:08 wazuh-syscheckd[15079] ' 'syscheck-config.c:2520 at process_option_regex(): DEBUG: ' 'Found ignore regex node ^/proc', '2022/02/02 21:21:08 wazuh-syscheckd[15079] ' 'syscheck-config.c:2527 at process_option_regex(): DEBUG: ' 'Found ignore regex node ^/proc OK?', '2022/02/02 21:21:08 wazuh-syscheckd[15079] ' 'syscheck-config.c:2528 at process_option_regex(): DEBUG: ' 'Found ignore regex size 0', '2022/02/02 21:21:08 wazuh-syscheckd[15079] ' 'syscheck-config.c:2520 at process_option_regex(): DEBUG: ' 'Found ignore regex node .log$|.swp$', '2022/02/02 21:21:08 wazuh-syscheckd[15079] ' 'syscheck-config.c:2527 at process_option_regex(): DEBUG: ' 'Found ignore regex node .log$|.swp$ OK?', '2022/02/02 21:21:08 wazuh-syscheckd[15079] ' 'syscheck-config.c:2528 at process_option_regex(): DEBUG: ' 'Found ignore regex size 1', '2022/02/02 21:21:08 wazuh-syscheckd[15079] config.c:95 at ' 'Read_Syscheck_Config(): DEBUG: (6208): Reading Client ' 'Configuration [etc/ossec.conf]', '2022/02/02 21:21:08 wazuh-syscheckd[15079] agent_op.c:208 ' 'at os_read_agent_profile(): DEBUG: Calling ' 'os_read_agent_profile().', '2022/02/02 21:21:08 wazuh-syscheckd[15079] agent_op.c:227 ' 'at os_read_agent_profile(): DEBUG: os_read_agent_profile() ' '= [debian, debian10]', '2022/02/02 21:21:08 wazuh-syscheckd[15079] config.c:375 at ' 'ReadConfig(): DEBUG: agent_config element does not have any ' 'attributes.', '2022/02/02 21:21:08 wazuh-syscheckd[15079] agent_op.c:208 ' 'at os_read_agent_profile(): DEBUG: Calling ' 'os_read_agent_profile().', '2022/02/02 21:21:08 wazuh-syscheckd[15079] agent_op.c:227 ' 'at os_read_agent_profile(): DEBUG: os_read_agent_profile() ' '= [debian, debian10]', '2022/02/02 21:21:08 wazuh-syscheckd[15079] config.c:375 at ' 'ReadConfig(): DEBUG: agent_config element does not have any ' 'attributes.', '2022/02/02 21:21:10 wazuh-syscheckd[15115] debug_op.c:70 at ' '_log(): DEBUG: Logging module auto-initialized', '2022/02/02 21:21:10 wazuh-syscheckd[15115] config.c:87 at ' 'Read_Syscheck_Config(): DEBUG: (6287): Reading ' "configuration file: 'etc/ossec.conf'", '2022/02/02 21:21:10 wazuh-syscheckd[15115] ' 'syscheck-config.c:1218 at read_attr(): DEBUG: Could not ' "check the real path of '/testdir1' due to [(2)-(No such " 'file or directory)].', '2022/02/02 21:21:10 wazuh-syscheckd[15115] ' 'syscheck-config.c:1218 at read_attr(): DEBUG: Could not ' "check the real path of '/testdir2' due to [(2)-(No such " 'file or directory)].', '2022/02/02 21:21:10 wazuh-syscheckd[15115] ' 'syscheck-config.c:1218 at read_attr(): DEBUG: Could not ' "check the real path of '/testdir3' due to [(2)-(No such " 'file or directory)].', '2022/02/02 21:21:10 wazuh-syscheckd[15115] ' 'syscheck-config.c:2520 at process_option_regex(): DEBUG: ' 'Found ignore regex node ^/proc', '2022/02/02 21:21:10 wazuh-syscheckd[15115] ' 'syscheck-config.c:2527 at process_option_regex(): DEBUG: ' 'Found ignore regex node ^/proc OK?', '2022/02/02 21:21:10 wazuh-syscheckd[15115] ' 'syscheck-config.c:2528 at process_option_regex(): DEBUG: ' 'Found ignore regex size 0', '2022/02/02 21:21:10 wazuh-syscheckd[15115] ' 'syscheck-config.c:2520 at process_option_regex(): DEBUG: ' 'Found ignore regex node .log$|.swp$', '2022/02/02 21:21:10 wazuh-syscheckd[15115] ' 'syscheck-config.c:2527 at process_option_regex(): DEBUG: ' 'Found ignore regex node .log$|.swp$ OK?', '2022/02/02 21:21:10 wazuh-syscheckd[15115] ' 'syscheck-config.c:2528 at process_option_regex(): DEBUG: ' 'Found ignore regex size 1', '2022/02/02 21:21:10 wazuh-syscheckd[15115] config.c:95 at ' 'Read_Syscheck_Config(): DEBUG: (6208): Reading Client ' 'Configuration [etc/ossec.conf]', '2022/02/02 21:21:10 wazuh-syscheckd[15115] agent_op.c:208 ' 'at os_read_agent_profile(): DEBUG: Calling ' 'os_read_agent_profile().', '2022/02/02 21:21:10 wazuh-syscheckd[15115] agent_op.c:227 ' 'at os_read_agent_profile(): DEBUG: os_read_agent_profile() ' '= [debian, debian10]', '2022/02/02 21:21:10 wazuh-syscheckd[15115] config.c:375 at ' 'ReadConfig(): DEBUG: agent_config element does not have any ' 'attributes.', '2022/02/02 21:21:10 wazuh-syscheckd[15115] agent_op.c:208 ' 'at os_read_agent_profile(): DEBUG: Calling ' 'os_read_agent_profile().', '2022/02/02 21:21:10 wazuh-syscheckd[15115] agent_op.c:227 ' 'at os_read_agent_profile(): DEBUG: os_read_agent_profile() ' '= [debian, debian10]', '2022/02/02 21:21:10 wazuh-syscheckd[15115] config.c:375 at ' 'ReadConfig(): DEBUG: agent_config element does not have any ' 'attributes.', '2022/02/02 21:21:10 rootcheck[15115] rootcheck.c:202 at ' 'rootcheck_init(): INFO: Rootcheck disabled.'], 'stdout': 'Starting Wazuh v4.2.5...\n' 'Started wazuh-execd...\n' 'Started wazuh-agentd...\n' 'Started wazuh-syscheckd...\n' 'Started wazuh-logcollector...\n' 'Started wazuh-modulesd...\n' 'Completed.', 'stdout_lines': ['Starting Wazuh v4.2.5...', 'Started wazuh-execd...', 'Started wazuh-agentd...', 'Started wazuh-syscheckd...', 'Started wazuh-logcollector...', 'Started wazuh-modulesd...', 'Completed.']} DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:1006 Cleaning temporal files... DEBUG wazuh_testing:monitoring.py:995 Checking results... DEBUG wazuh_testing:monitoring.py:1001 Received from wazuh-agent1 the expected message: 2022/02/02 21:21:11 wazuh-syscheckd[15115] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. DEBUG testinfra:base.py:277 RUN CommandResult(command=b'ansible --tree /tmp/tmp8ld1nq85 -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m command --args \'python /var/system_query_db.py --db_path /var/ossec/queue/db/001.db --query " select * from fim_entry where full_path=\'"\'"\'"\'"\'"\'/testdir1/testdir1.txt\'"\'"\'"\'"\'"\'"\' wazuh-manager', exit_status=0, stdout=b'wazuh-manager | CHANGED | rc=0 >>\n[]\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('command', 'python /var/system_query_db.py --db_path /var/ossec/queue/db/001.db --query " select * from fim_entry where full_path=\'"\'/testdir1/testdir1.txt\'"\'"', {'check': False, 'become': False}): {'changed': True, 'cmd': ['python', '/var/system_query_db.py', '--db_path', '/var/ossec/queue/db/001.db', '--query', " select * from fim_entry where full_path='/testdir1/testdir1.txt'"], 'delta': '0:00:00.840656', 'end': '2022-02-02 21:21:26.949785', 'msg': '', 'rc': 0, 'start': '2022-02-02 21:21:26.109129', 'stderr': '', 'stderr_lines': [], 'stdout': '[]', 'stdout_lines': ['[]']} DEBUG testinfra:base.py:277 RUN CommandResult(command=b'ansible --tree /tmp/tmp8tsxjwre -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m command --args \'rm -rf \'"\'"\'/testdir1/testdir1.txt\'"\'"\'\' wazuh-agent1', exit_status=0, stdout=b'wazuh-agent1 | CHANGED | rc=0 >>\n\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('command', "rm -rf '/testdir1/testdir1.txt'", {'check': False, 'become': False}): {'changed': True, 'cmd': ['rm', '-rf', '/testdir1/testdir1.txt'], 'delta': '0:00:00.960654', 'end': '2022-02-02 21:21:30.162245', 'msg': '', 'rc': 0, 'start': '2022-02-02 21:21:29.201591', 'stderr': '', 'stderr_lines': [], 'stdout': '', 'stdout_lines': []} | |||
| Passed | test_synchronization.py::test_Synchronization_create_file_agent_stopped[testdir1-delete-wazuh-manager] | 80.47 | |
|
------------------------------Captured stderr call------------------------------ 2022-02-02 17:21:49,427 - wazuh_testing - DEBUG - Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-02 17:21:49,429 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-02 17:21:49,429 - wazuh_testing - DEBUG - Starting file composer for wazuh-agent1 and path: /var/ossec/logs/ossec.log. Composite file in /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-agent1_ossec.log.tmp 2022-02-02 17:21:49,430 - wazuh_testing - DEBUG - Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-02 17:21:49,432 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-02 17:21:49,433 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-agent1 and message: .*Sending integrity control message: (.+)$ 2022-02-02 17:21:49,433 - wazuh_testing - DEBUG - Starting file composer for wazuh-manager and path: /var/ossec/logs/ossec.log. Composite file in /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-manager_ossec.log.tmp 2022-02-02 17:21:49,435 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-manager and message: .*Agent 001 query: (.+) save2 2022-02-02 17:21:51,435 - wazuh_testing - DEBUG - 2022/02/02 21:21:01 wazuh-logcollector: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:21:51,436 - wazuh_testing - DEBUG - 2022/02/02 21:21:02 wazuh-syscheckd[14664] sig_op.c:49 at HandleSIG(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:21:51,436 - wazuh_testing - DEBUG - 2022/02/02 21:21:02 wazuh-agentd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:21:51,436 - wazuh_testing - DEBUG - 2022/02/02 21:21:02 wazuh-execd: INFO: (1314): Shutdown received. Deleting responses. 2022-02-02 17:21:51,437 - wazuh_testing - DEBUG - 2022/02/02 21:21:02 wazuh-execd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:21:51,437 - wazuh_testing - DEBUG - 2022/02/02 21:20:57 wazuh-db[9333] wdb.c:918 at wdb_commit_old(): DEBUG: Agent '001' database commited. Time: 3.414 ms. 2022-02-02 17:21:51,437 - wazuh_testing - DEBUG - 2022/02/02 21:21:08 wazuh-syscheckd[15079] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-02 17:21:51,437 - wazuh_testing - DEBUG - 2022/02/02 21:21:08 wazuh-syscheckd[15079] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-02 17:21:51,437 - wazuh_testing - DEBUG - 2022/02/02 21:20:58 wazuh-db[9333] wdb.c:918 at wdb_commit_old(): DEBUG: Agent 'tasks' database commited. Time: 0.038 ms. 2022-02-02 17:21:51,437 - wazuh_testing - DEBUG - 2022/02/02 21:21:08 wazuh-syscheckd[15079] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir1' due to [(2)-(No such file or directory)]. 2022-02-02 17:21:51,438 - wazuh_testing - DEBUG - 2022/02/02 21:21:08 wazuh-syscheckd[15079] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-02 17:21:51,438 - wazuh_testing - DEBUG - 2022/02/02 21:21:08 wazuh-syscheckd[15079] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-02 17:21:51,438 - wazuh_testing - DEBUG - 2022/02/02 21:21:08 wazuh-syscheckd[15079] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-02 17:21:51,438 - wazuh_testing - DEBUG - 2022/02/02 21:21:08 wazuh-syscheckd[15079] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-02 17:21:51,439 - wazuh_testing - DEBUG - 2022/02/02 21:21:08 wazuh-syscheckd[15079] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-02 17:21:51,439 - wazuh_testing - DEBUG - 2022/02/02 21:21:01 wazuh-db[9333] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.18.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.18.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.13.0-27-generic |#29~20.04.1-Ubuntu SMP Fri Jan 14 00:32:30 UTC 2022 |x86_64","os_arch":"x86_64"} 2022-02-02 17:21:51,439 - wazuh_testing - DEBUG - 2022/02/02 21:21:08 wazuh-syscheckd[15079] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ 2022-02-02 17:21:51,439 - wazuh_testing - DEBUG - 2022/02/02 21:21:08 wazuh-syscheckd[15079] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ OK? 2022-02-02 17:21:51,439 - wazuh_testing - DEBUG - 2022/02/02 21:21:02 wazuh-db[9333] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-connection-status {"id":1,"connection_status":"disconnected","sync_status":"synced"} 2022-02-02 17:21:51,439 - wazuh_testing - DEBUG - 2022/02/02 21:21:08 wazuh-syscheckd[15079] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-02 17:21:51,439 - wazuh_testing - DEBUG - 2022/02/02 21:21:02 wazuh-db[9333] main.c:290 at run_dealer(): DEBUG: New client connected (39). 2022-02-02 17:21:51,440 - wazuh_testing - DEBUG - 2022/02/02 21:21:08 wazuh-syscheckd[15079] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-02 17:21:51,440 - wazuh_testing - DEBUG - 2022/02/02 21:21:02 wazuh-db[9333] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: get-labels 1 2022-02-02 17:21:51,440 - wazuh_testing - DEBUG - 2022/02/02 21:21:08 wazuh-syscheckd[15079] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-02 17:21:51,440 - wazuh_testing - DEBUG - 2022/02/02 21:21:08 wazuh-syscheckd[15079] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-02 17:21:51,440 - wazuh_testing - DEBUG - 2022/02/02 21:21:09 wazuh-db[9333] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-keepalive {"id":1,"connection_status":"pending","sync_status":"synced"} 2022-02-02 17:21:51,440 - wazuh_testing - DEBUG - 2022/02/02 21:21:08 wazuh-syscheckd[15079] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-02 17:21:51,440 - wazuh_testing - DEBUG - 2022/02/02 21:21:13 wazuh-db[9333] main.c:290 at run_dealer(): DEBUG: New client connected (40). 2022-02-02 17:21:51,441 - wazuh_testing - DEBUG - 2022/02/02 21:21:08 wazuh-syscheckd[15079] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-02 17:21:51,441 - wazuh_testing - DEBUG - 2022/02/02 21:21:08 wazuh-syscheckd[15079] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-02 17:21:51,441 - wazuh_testing - DEBUG - 2022/02/02 21:21:13 wazuh-db[9333] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update end_scan 1643833271 2022-02-02 17:21:51,441 - wazuh_testing - DEBUG - 2022/02/02 21:21:08 wazuh-syscheckd[15079] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-02 17:21:51,441 - wazuh_testing - DEBUG - 2022/02/02 21:21:08 wazuh-execd: INFO: Started (pid: 15092). 2022-02-02 17:21:51,441 - wazuh_testing - DEBUG - 2022/02/02 21:21:13 wazuh-db[9333] main.c:290 at run_dealer(): DEBUG: New client connected (41). 2022-02-02 17:21:51,441 - wazuh_testing - DEBUG - 2022/02/02 21:21:09 wazuh-agentd: INFO: (1410): Reading authentication keys file. 2022-02-02 17:21:51,441 - wazuh_testing - DEBUG - 2022/02/02 21:21:09 wazuh-agentd: INFO: Using notify time: 10 and max time to reconnect: 60 2022-02-02 17:21:51,442 - wazuh_testing - DEBUG - 2022/02/02 21:21:09 wazuh-agentd: INFO: Version detected -> Linux |wazuh-agent1 |5.13.0-27-generic |#29~20.04.1-Ubuntu SMP Fri Jan 14 00:32:30 UTC 2022 |x86_64 [Debian GNU/Linux|debian: 10 (buster)] - Wazuh v4.2.5 2022-02-02 17:21:51,442 - wazuh_testing - DEBUG - 2022/02/02 21:21:09 wazuh-agentd: INFO: Started (pid: 15103). 2022-02-02 17:21:51,442 - wazuh_testing - DEBUG - 2022/02/02 21:21:09 wazuh-agentd: INFO: Server IP Address: wazuh-manager/172.18.0.2 2022-02-02 17:21:51,442 - wazuh_testing - DEBUG - 2022/02/02 21:21:09 wazuh-agentd: INFO: Using AES as encryption method. 2022-02-02 17:21:51,442 - wazuh_testing - DEBUG - 2022/02/02 21:21:13 wazuh-db[9333] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.18.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.18.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.13.0-27-generic |#29~20.04.1-Ubuntu SMP Fri Jan 14 00:32:30 UTC 2022 |x86_64","os_arch":"x86_64"} 2022-02-02 17:21:51,442 - wazuh_testing - DEBUG - 2022/02/02 21:21:09 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.18.0.2:1514/tcp). 2022-02-02 17:21:51,443 - wazuh_testing - DEBUG - 2022/02/02 21:21:09 wazuh-agentd: INFO: (4102): Connected to the server (wazuh-manager/172.18.0.2:1514/tcp). 2022-02-02 17:21:51,443 - wazuh_testing - DEBUG - 2022/02/02 21:21:13 wazuh-db[9333] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1643833270 2022-02-02 17:21:51,443 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-02 17:21:51,443 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-02 17:21:51,443 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir1' due to [(2)-(No such file or directory)]. 2022-02-02 17:21:51,443 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-02 17:21:51,443 - wazuh_testing - DEBUG - 2022/02/02 21:21:13 wazuh-db[9333] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_global {"id":1643833271,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"a16be20a7c6f9aeb8c0b88be2ee52f3745ce94db"} 2022-02-02 17:21:51,444 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-02 17:21:51,444 - wazuh_testing - DEBUG - 2022/02/02 21:21:13 wazuh-db[9333] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 1.850 ms. 2022-02-02 17:21:51,444 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-02 17:21:51,444 - wazuh_testing - DEBUG - 2022/02/02 21:21:13 wazuh-db[9333] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643833271,"version":2,"begin":"/bin/bash","end":"/sbin/chcpu","tail":"/sbin/ctrlaltdel","checksum":"2678c972016eb9b2978d2d495f53f99563497651"} 2022-02-02 17:21:51,444 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-02 17:21:51,444 - wazuh_testing - DEBUG - 2022/02/02 21:21:13 wazuh-db[9333] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643833271,"version":2,"begin":"/sbin/ctrlaltdel","end":"/usr/sbin/zic","checksum":"3393f699e130b3be6690797667d9994f0195fd11"} 2022-02-02 17:21:51,445 - wazuh_testing - DEBUG - 2022/02/02 21:21:13 wazuh-db[9333] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.953 ms. 2022-02-02 17:21:51,445 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-02 17:21:51,445 - wazuh_testing - DEBUG - 2022/02/02 21:21:13 wazuh-db[9333] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.746 ms. 2022-02-02 17:21:51,445 - wazuh_testing - DEBUG - 2022/02/02 21:21:13 wazuh-db[9333] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643833271,"version":2,"begin":"/sbin/ctrlaltdel","end":"/usr/bin/pdb","tail":"/usr/bin/pdb2","checksum":"d1cec19ff76b3bfc82c10cfed59092f213e17f84"} 2022-02-02 17:21:51,445 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ 2022-02-02 17:21:51,445 - wazuh_testing - DEBUG - 2022/02/02 21:21:13 wazuh-db[9333] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.485 ms. 2022-02-02 17:21:51,446 - wazuh_testing - DEBUG - 2022/02/02 21:21:13 wazuh-db[9333] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643833271,"version":2,"begin":"/usr/bin/pdb2","end":"/usr/sbin/zic","checksum":"f28534dbcbabe145177a8e0c707d9da341991c1f"} 2022-02-02 17:21:51,446 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ OK? 2022-02-02 17:21:51,446 - wazuh_testing - DEBUG - 2022/02/02 21:21:13 wazuh-db[9333] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.561 ms. 2022-02-02 17:21:51,446 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-02 17:21:51,446 - wazuh_testing - DEBUG - 2022/02/02 21:21:13 wazuh-db[9333] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643833271,"version":2,"begin":"/sbin/ctrlaltdel","end":"/usr/bin/dpkg-genbuildinfo","tail":"/usr/bin/dpkg-genchanges","checksum":"ed90eaae5c6a72f30ccab79defb373629dd14fc4"} 2022-02-02 17:21:51,446 - wazuh_testing - DEBUG - 2022/02/02 21:21:13 wazuh-db[9333] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.207 ms. 2022-02-02 17:21:51,447 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-02 17:21:51,447 - wazuh_testing - DEBUG - 2022/02/02 21:21:13 wazuh-db[9333] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643833271,"version":2,"begin":"/usr/bin/dpkg-genchanges","end":"/usr/bin/pdb","checksum":"eb75a296402d7fde40b260bd83e11cab79627aa2"} 2022-02-02 17:21:51,447 - wazuh_testing - DEBUG - 2022/02/02 21:21:13 wazuh-db[9333] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.322 ms. 2022-02-02 17:21:51,447 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-02 17:21:51,447 - wazuh_testing - DEBUG - 2022/02/02 21:21:13 wazuh-db[9333] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643833271,"version":2,"begin":"/usr/bin/apt-get","end":"/usr/bin/dpkg-genbuildinfo","checksum":"1ca7703572f6fb20e5ce43a506515cbd196a18f0"} 2022-02-02 17:21:51,448 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-02 17:21:51,448 - wazuh_testing - DEBUG - 2022/02/02 21:21:13 wazuh-db[9333] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643833271,"version":2,"begin":"/sbin/ctrlaltdel","end":"/usr/bin/apt-ftparchive","tail":"/usr/bin/apt-get","checksum":"f5edf206db115c7c23d212a1be7bfd86c7170d8c"} 2022-02-02 17:21:51,448 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-02 17:21:51,448 - wazuh_testing - DEBUG - 2022/02/02 21:21:13 wazuh-db[9333] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.114 ms. 2022-02-02 17:21:51,448 - wazuh_testing - DEBUG - 2022/02/02 21:21:13 wazuh-db[9333] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.122 ms. 2022-02-02 17:21:51,448 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-02 17:21:51,449 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-02 17:21:51,449 - wazuh_testing - DEBUG - 2022/02/02 21:21:13 wazuh-db[9333] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643833271,"version":2,"begin":"/sbin/ctrlaltdel","end":"/sbin/mkhomedir_helper","tail":"/sbin/mkswap","checksum":"f4094767b5033606e4a60c0075f429a93f720519"} 2022-02-02 17:21:51,449 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-02 17:21:51,449 - wazuh_testing - DEBUG - 2022/02/02 21:21:13 wazuh-db[9333] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.063 ms. 2022-02-02 17:21:51,450 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 rootcheck[15115] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled. 2022-02-02 17:21:51,450 - wazuh_testing - DEBUG - 2022/02/02 21:21:14 wazuh-db[9333] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643833271,"version":2,"begin":"/sbin/mkswap","end":"/usr/bin/apt-ftparchive","checksum":"6728c9aeb02088a7e93eabd75f5eae227ffca2d8"} 2022-02-02 17:21:51,450 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:21:51,450 - wazuh_testing - DEBUG - 2022/02/02 21:21:14 wazuh-db[9333] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.096 ms. 2022-02-02 17:21:51,451 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] syscom.c:123 at syscom_main(): DEBUG: (6284): Local requests thread ready. 2022-02-02 17:21:51,451 - wazuh_testing - DEBUG - 2022/02/02 21:21:14 wazuh-db[9333] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643833271,"version":2,"begin":"/sbin/mkswap","end":"/sbin/start-stop-daemon","tail":"/sbin/sulogin","checksum":"205673eafd86478a9bae30a249a954bab122f47f"} 2022-02-02 17:21:51,451 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] mq_op.c:47 at StartMQ(): DEBUG: Connected succesfully to 'queue/sockets/queue' after 0 attempts 2022-02-02 17:21:51,451 - wazuh_testing - DEBUG - 2022/02/02 21:21:14 wazuh-db[9333] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.057 ms. 2022-02-02 17:21:51,452 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] mq_op.c:48 at StartMQ(): DEBUG: (unix_domain) Maximum send buffer set to: '212992'. 2022-02-02 17:21:51,453 - wazuh_testing - DEBUG - 2022/02/02 21:21:14 wazuh-db[9333] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643833271,"version":2,"begin":"/sbin/sulogin","end":"/usr/bin/apt-ftparchive","checksum":"d8c522934b810af25bfee7be7a6737c09639b37d"} 2022-02-02 17:21:51,453 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] main.c:185 at main(): INFO: Started (pid: 15117). 2022-02-02 17:21:51,453 - wazuh_testing - DEBUG - 2022/02/02 21:21:14 wazuh-db[9333] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.069 ms. 2022-02-02 17:21:51,453 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] main.c:193 at main(): INFO: (6003): Monitoring path: '/bin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:21:51,454 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] main.c:193 at main(): INFO: (6003): Monitoring path: '/boot', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:21:51,454 - wazuh_testing - DEBUG - 2022/02/02 21:21:14 wazuh-db[9333] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643833271,"version":2,"begin":"/sbin/sulogin","end":"/sbin/wipefs","tail":"/sbin/zramctl","checksum":"157570556203dc9b1df7834dbf4e4a20ab33cfca"} 2022-02-02 17:21:51,455 - wazuh_testing - DEBUG - 2022/02/02 21:21:14 wazuh-db[9333] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.079 ms. 2022-02-02 17:21:51,455 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] main.c:193 at main(): INFO: (6003): Monitoring path: '/etc', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:21:51,456 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] main.c:193 at main(): INFO: (6003): Monitoring path: '/sbin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:21:51,456 - wazuh_testing - DEBUG - 2022/02/02 21:21:14 wazuh-db[9333] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643833271,"version":2,"begin":"/sbin/zramctl","end":"/usr/bin/apt-ftparchive","checksum":"7624a50bf46452e7642bde5d7712770d1c893f34"} 2022-02-02 17:21:51,456 - wazuh_testing - DEBUG - 2022/02/02 21:21:14 wazuh-db[9333] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.107 ms. 2022-02-02 17:21:51,456 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir1', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:21:51,457 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir2', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | realtime'. 2022-02-02 17:21:51,457 - wazuh_testing - DEBUG - 2022/02/02 21:21:14 wazuh-db[9333] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643833271,"version":2,"begin":"/sbin/zramctl","end":"/usr/bin/addpart","tail":"/usr/bin/addr2line","checksum":"32e32f7d38d29108c84661f718e349fbd8859dce"} 2022-02-02 17:21:51,457 - wazuh_testing - DEBUG - 2022/02/02 21:21:14 wazuh-db[9333] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.100 ms. 2022-02-02 17:21:51,457 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir3', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | whodata'. 2022-02-02 17:21:51,458 - wazuh_testing - DEBUG - 2022/02/02 21:21:14 wazuh-db[9333] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643833271,"version":2,"begin":"/usr/bin/addr2line","end":"/usr/bin/apt-ftparchive","checksum":"c0d84c2c7e8b48f71eed09e55bca084064b30ab0"} 2022-02-02 17:21:51,458 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/bin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:21:51,458 - wazuh_testing - DEBUG - 2022/02/02 21:21:14 wazuh-db[9333] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.092 ms. 2022-02-02 17:21:51,458 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/sbin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-02 17:21:51,458 - wazuh_testing - DEBUG - 2022/02/02 21:21:14 wazuh-db[9333] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643833271,"version":2,"begin":"/sbin/zramctl","end":"/usr/bin/[","tail":"/usr/bin/aclocal","checksum":"2505a30223a680b207acc86f961ba2a70985fcc8"} 2022-02-02 17:21:51,459 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] main.c:215 at main(): DEBUG: (6357): Maximum disk quota size limit configured to '1048576 KB'. 2022-02-02 17:21:51,459 - wazuh_testing - DEBUG - 2022/02/02 21:21:14 wazuh-db[9333] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.078 ms. 2022-02-02 17:21:51,459 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mtab' 2022-02-02 17:21:51,459 - wazuh_testing - DEBUG - 2022/02/02 21:21:14 wazuh-db[9333] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643833271,"version":2,"begin":"/usr/bin/aclocal","end":"/usr/bin/addpart","checksum":"54434ad058271249a25ec0fe67e5accd9a19ea58"} 2022-02-02 17:21:51,459 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/hosts.deny' 2022-02-02 17:21:51,459 - wazuh_testing - DEBUG - 2022/02/02 21:21:14 wazuh-db[9333] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.083 ms. 2022-02-02 17:21:51,460 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mail/statistics' 2022-02-02 17:21:51,460 - wazuh_testing - DEBUG - 2022/02/02 21:21:14 wazuh-db[9333] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643833271,"version":2,"begin":"/sbin/zramctl","end":"/sbin/zramctl","tail":"/usr/bin/2to3-2.7","checksum":"9562865780448bda22ecac2d749c5a2d5657b106"} 2022-02-02 17:21:51,460 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random-seed' 2022-02-02 17:21:51,460 - wazuh_testing - DEBUG - 2022/02/02 21:21:14 wazuh-db[9333] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.052 ms. 2022-02-02 17:21:51,461 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random.seed' 2022-02-02 17:21:51,461 - wazuh_testing - DEBUG - 2022/02/02 21:21:15 wazuh-db[9333] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643833271,"version":2,"begin":"/usr/bin/2to3-2.7","end":"/usr/bin/[","checksum":"02ca81b9aa63af71bb9f29b35faa0509609a079e"} 2022-02-02 17:21:51,461 - wazuh_testing - DEBUG - 2022/02/02 21:21:15 wazuh-db[9333] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.114 ms. 2022-02-02 17:21:51,461 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/adjtime' 2022-02-02 17:21:51,461 - wazuh_testing - DEBUG - 2022/02/02 21:21:17 wazuh-db[9333] wdb.c:918 at wdb_commit_old(): DEBUG: Agent 'global' database commited. Time: 3.965 ms. 2022-02-02 17:21:51,461 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/httpd/logs' 2022-02-02 17:21:51,462 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/utmpx' 2022-02-02 17:21:51,462 - wazuh_testing - DEBUG - 2022/02/02 21:21:19 wazuh-db[9333] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.18.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.18.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.13.0-27-generic |#29~20.04.1-Ubuntu SMP Fri Jan 14 00:32:30 UTC 2022 |x86_64","os_arch":"x86_64"} 2022-02-02 17:21:51,462 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/wtmpx' 2022-02-02 17:21:51,463 - wazuh_testing - DEBUG - 2022/02/02 21:21:29 wazuh-db[9333] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.18.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.18.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.13.0-27-generic |#29~20.04.1-Ubuntu SMP Fri Jan 14 00:32:30 UTC 2022 |x86_64","os_arch":"x86_64"} 2022-02-02 17:21:51,463 - wazuh_testing - DEBUG - 2022/02/02 21:21:32 wazuh-db[9333] main.c:290 at run_dealer(): DEBUG: New client connected (42). 2022-02-02 17:21:51,463 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/cups/certs' 2022-02-02 17:21:51,463 - wazuh_testing - DEBUG - 2022/02/02 21:21:32 wazuh-db[9333] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1643833292 2022-02-02 17:21:51,464 - wazuh_testing - DEBUG - 2022/02/02 21:21:34 wazuh-db[9333] main.c:290 at run_dealer(): DEBUG: New client connected (43). 2022-02-02 17:21:51,464 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/dumpdates' 2022-02-02 17:21:51,464 - wazuh_testing - DEBUG - 2022/02/02 21:21:34 wazuh-db[9333] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update end_scan 1643833294 2022-02-02 17:21:51,464 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/svc/volatile' 2022-02-02 17:21:51,465 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/security' 2022-02-02 17:21:51,465 - wazuh_testing - DEBUG - 2022/02/02 21:21:39 wazuh-db[9333] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.18.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.18.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.13.0-27-generic |#29~20.04.1-Ubuntu SMP Fri Jan 14 00:32:30 UTC 2022 |x86_64","os_arch":"x86_64"} 2022-02-02 17:21:51,465 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/debug' 2022-02-02 17:21:51,465 - wazuh_testing - DEBUG - 2022/02/02 21:21:43 wazuh-db[9333] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-connection-status {"id":1,"connection_status":"disconnected","sync_status":"synced"} 2022-02-02 17:21:51,465 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/dev/core' 2022-02-02 17:21:51,466 - wazuh_testing - DEBUG - 2022/02/02 21:21:43 wazuh-db[9333] main.c:290 at run_dealer(): DEBUG: New client connected (44). 2022-02-02 17:21:51,466 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '^/proc' 2022-02-02 17:21:51,466 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '.log$|.swp$' 2022-02-02 17:21:51,466 - wazuh_testing - DEBUG - 2022/02/02 21:21:43 wazuh-db[9333] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: get-labels 1 2022-02-02 17:21:51,467 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] main.c:235 at main(): INFO: (6004): No diff for file: '/etc/ssl/private.key' 2022-02-02 17:21:51,467 - wazuh_testing - DEBUG - 2022/02/02 21:21:44 wazuh-db[9333] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-keepalive {"id":1,"connection_status":"pending","sync_status":"synced"} 2022-02-02 17:21:51,467 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] main.c:245 at main(): INFO: (6016): Directory set for real time monitoring: '/testdir2'. 2022-02-02 17:21:51,467 - wazuh_testing - DEBUG - 2022/02/02 21:21:47 wazuh-db[9333] main.c:290 at run_dealer(): DEBUG: New client connected (45). 2022-02-02 17:21:51,467 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] syscheck_audit.c:243 at audit_init(): WARNING: (6924): Who-data engine cannot start because Auditd is not running. 2022-02-02 17:21:51,468 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] main.c:264 at main(): WARNING: (6913): Who-data engine could not start. Switching who-data to real-time. 2022-02-02 17:21:51,468 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] run_check.c:194 at start_daemon(): DEBUG: (6320): Setting process priority to: '10' 2022-02-02 17:21:51,469 - wazuh_testing - DEBUG - 2022/02/02 21:21:47 wazuh-db[9333] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.18.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.18.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.13.0-27-generic |#29~20.04.1-Ubuntu SMP Fri Jan 14 00:32:30 UTC 2022 |x86_64","os_arch":"x86_64"} 2022-02-02 17:21:51,469 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:21:51,469 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] run_check.c:229 at start_daemon(): INFO: (6000): Starting daemon... 2022-02-02 17:21:51,469 - wazuh_testing - DEBUG - 2022/02/02 21:21:47 wazuh-db[9333] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update end_scan 1643833306 2022-02-02 17:21:51,469 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] run_check.c:232 at start_daemon(): INFO: (6010): File integrity monitoring scan frequency: 20 seconds 2022-02-02 17:21:51,470 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-02 17:21:51,470 - wazuh_testing - DEBUG - 2022/02/02 21:21:47 wazuh-db[9333] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1643833305 2022-02-02 17:21:51,470 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1643833270}} 2022-02-02 17:21:51,471 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-02 17:21:51,471 - wazuh_testing - DEBUG - 2022/02/02 21:21:47 wazuh-db[9333] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_global {"id":1643833306,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"651f9d979bff206e8b3a76cbc82e43b854f598f6"} 2022-02-02 17:21:51,471 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-02 17:21:51,471 - wazuh_testing - DEBUG - 2022/02/02 21:21:47 wazuh-db[9333] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 1.645 ms. 2022-02-02 17:21:51,472 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-02 17:21:51,472 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-02 17:21:51,472 - wazuh_testing - DEBUG - 2022/02/02 21:21:47 wazuh-db[9333] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643833306,"version":2,"begin":"/bin/bash","end":"/sbin/chcpu","tail":"/sbin/ctrlaltdel","checksum":"2678c972016eb9b2978d2d495f53f99563497651"} 2022-02-02 17:21:51,472 - wazuh_testing - DEBUG - 2022/02/02 21:21:10 wazuh-syscheckd[15115] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-02 17:21:51,473 - wazuh_testing - DEBUG - 2022/02/02 21:21:11 wazuh-logcollector: INFO: (1950): Analyzing file: '/var/ossec/logs/active-responses.log'. 2022-02-02 17:21:51,473 - wazuh_testing - DEBUG - 2022/02/02 21:21:11 wazuh-logcollector: ERROR: (1103): Could not open file '/var/log/secure' due to [(2)-(No such file or directory)]. 2022-02-02 17:21:51,473 - wazuh_testing - DEBUG - 2022/02/02 21:21:47 wazuh-db[9333] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643833306,"version":2,"begin":"/sbin/ctrlaltdel","end":"/usr/sbin/zic","checksum":"8a91020868ce195a85e84db9e3a5492fe79ac3de"} 2022-02-02 17:21:51,474 - wazuh_testing - DEBUG - 2022/02/02 21:21:11 wazuh-logcollector: INFO: (1950): Analyzing file: '/var/log/secure'. 2022-02-02 17:21:51,474 - wazuh_testing - DEBUG - 2022/02/02 21:21:47 wazuh-db[9333] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 1.369 ms. 2022-02-02 17:21:51,474 - wazuh_testing - DEBUG - 2022/02/02 21:21:11 wazuh-logcollector: INFO: Started (pid: 15130). 2022-02-02 17:21:51,475 - wazuh_testing - DEBUG - 2022/02/02 21:21:47 wazuh-db[9333] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 1.233 ms. 2022-02-02 17:21:51,475 - wazuh_testing - DEBUG - 2022/02/02 21:21:11 wazuh-syscheckd[15115] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-02 17:21:51,475 - wazuh_testing - DEBUG - 2022/02/02 21:21:47 wazuh-db[9333] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643833306,"version":2,"begin":"/sbin/ctrlaltdel","end":"/usr/bin/pdb","tail":"/usr/bin/pdb2","checksum":"959b6416bd6a7407109c59971e1c8da057a17a3b"} 2022-02-02 17:21:51,475 - wazuh_testing - DEBUG - 2022/02/02 21:21:11 wazuh-syscheckd[15115] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-02 17:21:51,476 - wazuh_testing - DEBUG - 2022/02/02 21:21:11 wazuh-syscheckd[15115] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1643833271}} 2022-02-02 17:21:51,477 - wazuh_testing - DEBUG - 2022/02/02 21:21:47 wazuh-db[9333] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643833306,"version":2,"begin":"/usr/bin/pdb2","end":"/usr/sbin/zic","checksum":"f28534dbcbabe145177a8e0c707d9da341991c1f"} 2022-02-02 17:21:51,477 - wazuh_testing - DEBUG - 2022/02/02 21:21:11 wazuh-syscheckd[15115] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 1.273 sec (1.266 clock sec) 2022-02-02 17:21:51,478 - wazuh_testing - DEBUG - 2022/02/02 21:21:47 wazuh-db[9333] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.507 ms. 2022-02-02 17:21:51,478 - wazuh_testing - DEBUG - 2022/02/02 21:21:11 wazuh-syscheckd[15115] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1620, path count: 1626 2022-02-02 17:21:51,478 - wazuh_testing - DEBUG - 2022/02/02 21:21:47 wazuh-db[9333] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.272 ms. 2022-02-02 17:21:51,478 - wazuh_testing - DEBUG - 2022/02/02 21:21:11 wazuh-syscheckd[15115] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:21:51,479 - wazuh_testing - DEBUG - 2022/02/02 21:21:11 wazuh-syscheckd[15115] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:21:51,479 - wazuh_testing - DEBUG - 2022/02/02 21:21:47 wazuh-db[9333] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643833306,"version":2,"begin":"/sbin/ctrlaltdel","end":"/usr/bin/dpkg-divert","tail":"/usr/bin/dpkg-genbuildinfo","checksum":"b48208f8f4b38fd82d0ac4bce7eb86f05875de35"} 2022-02-02 17:21:51,479 - wazuh_testing - DEBUG - 2022/02/02 21:21:11 wazuh-syscheckd[15115] run_check.c:387 at fim_run_realtime(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-02 17:21:51,480 - wazuh_testing - DEBUG - 2022/02/02 21:21:47 wazuh-db[9333] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.244 ms. 2022-02-02 17:21:51,480 - wazuh_testing - DEBUG - 2022/02/02 21:21:11 wazuh-syscheckd[15115] run_check.c:543 at log_realtime_status(): INFO: (6012): Real-time file integrity monitoring started. 2022-02-02 17:21:51,481 - wazuh_testing - DEBUG - 2022/02/02 21:21:47 wazuh-db[9333] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643833306,"version":2,"begin":"/usr/bin/dpkg-genbuildinfo","end":"/usr/bin/pdb","checksum":"449176f3ac058628fcde8cdfbd7a7d029ac13e05"} 2022-02-02 17:21:51,481 - wazuh_testing - DEBUG - 2022/02/02 21:21:11 wazuh-syscheckd[15115] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:21:51,481 - wazuh_testing - DEBUG - 2022/02/02 21:21:47 wazuh-db[9333] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.253 ms. 2022-02-02 17:21:51,482 - wazuh_testing - DEBUG - 2022/02/02 21:21:11 wazuh-syscheckd[15115] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. 2022-02-02 17:21:51,482 - wazuh_testing - DEBUG - 2022/02/02 21:21:47 wazuh-db[9333] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643833306,"version":2,"begin":"/sbin/ctrlaltdel","end":"/usr/bin/apt-extracttemplates","tail":"/usr/bin/apt-ftparchive","checksum":"ea88b07170c78d49a5dab0983f64a3d538accd57"} 2022-02-02 17:21:51,482 - wazuh_testing - DEBUG - 2022/02/02 21:21:11 wazuh-syscheckd[15115] run_check.c:568 at symlink_checker_thread(): DEBUG: (6033): Starting symbolic link updater. Interval '600'. 2022-02-02 17:21:51,483 - wazuh_testing - DEBUG - 2022/02/02 21:21:47 wazuh-db[9333] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643833306,"version":2,"begin":"/usr/bin/apt-ftparchive","end":"/usr/bin/dpkg-divert","checksum":"84aaf018d588e1d99c714364b63c94e1d4eb4bf2"} 2022-02-02 17:21:51,483 - wazuh_testing - DEBUG - 2022/02/02 21:21:11 wazuh-syscheckd[15115] run_check.c:82 at fim_send_sync_msg(): DEBUG: (6317): Sending integrity control message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1643833271,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"a16be20a7c6f9aeb8c0b88be2ee52f3745ce94db"}} 2022-02-02 17:21:51,484 - wazuh_testing - DEBUG - 2022/02/02 21:21:47 wazuh-db[9333] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.290 ms. 2022-02-02 17:21:51,484 - wazuh_testing - DEBUG - 2022/02/02 21:21:47 wazuh-db[9333] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.216 ms. 2022-02-02 17:21:51,484 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-agent1 and message: .*Sending integrity control message: (.+)$ 2022-02-02 17:21:51,485 - wazuh_testing - DEBUG - 2022/02/02 21:21:47 wazuh-db[9333] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643833306,"version":2,"begin":"/sbin/ctrlaltdel","end":"/sbin/mkhomedir_helper","tail":"/sbin/mkswap","checksum":"f4094767b5033606e4a60c0075f429a93f720519"} 2022-02-02 17:21:51,485 - wazuh_testing - DEBUG - 2022/02/02 21:21:47 wazuh-db[9333] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.139 ms. 2022-02-02 17:21:51,486 - wazuh_testing - DEBUG - 2022/02/02 21:21:48 wazuh-db[9333] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643833306,"version":2,"begin":"/sbin/mkswap","end":"/usr/bin/apt-extracttemplates","checksum":"992b7c0819cc2e8878fa816e5c49786c3f4d04f8"} 2022-02-02 17:21:51,487 - wazuh_testing - DEBUG - 2022/02/02 21:21:48 wazuh-db[9333] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.118 ms. 2022-02-02 17:21:51,488 - wazuh_testing - DEBUG - 2022/02/02 21:21:48 wazuh-db[9333] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643833306,"version":2,"begin":"/sbin/mkswap","end":"/sbin/start-stop-daemon","tail":"/sbin/sulogin","checksum":"205673eafd86478a9bae30a249a954bab122f47f"} 2022-02-02 17:21:51,488 - wazuh_testing - DEBUG - 2022/02/02 21:21:48 wazuh-db[9333] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.118 ms. 2022-02-02 17:21:51,489 - wazuh_testing - DEBUG - 2022/02/02 21:21:48 wazuh-db[9333] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643833306,"version":2,"begin":"/sbin/sulogin","end":"/usr/bin/apt-extracttemplates","checksum":"4e722d7c615205fc0dd54668f985e071a52524a0"} 2022-02-02 17:21:51,490 - wazuh_testing - DEBUG - 2022/02/02 21:21:48 wazuh-db[9333] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.065 ms. 2022-02-02 17:21:51,490 - wazuh_testing - DEBUG - 2022/02/02 21:21:48 wazuh-db[9333] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643833306,"version":2,"begin":"/sbin/sulogin","end":"/sbin/wipefs","tail":"/sbin/zramctl","checksum":"157570556203dc9b1df7834dbf4e4a20ab33cfca"} 2022-02-02 17:21:51,491 - wazuh_testing - DEBUG - 2022/02/02 21:21:48 wazuh-db[9333] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.063 ms. 2022-02-02 17:21:51,492 - wazuh_testing - DEBUG - 2022/02/02 21:21:48 wazuh-db[9333] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643833306,"version":2,"begin":"/sbin/zramctl","end":"/usr/bin/apt-extracttemplates","checksum":"b51fa3b9f5b0ddacf812877068b592297ce2ded2"} 2022-02-02 17:21:51,493 - wazuh_testing - DEBUG - 2022/02/02 21:21:48 wazuh-db[9333] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.056 ms. 2022-02-02 17:21:51,494 - wazuh_testing - DEBUG - 2022/02/02 21:21:48 wazuh-db[9333] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643833306,"version":2,"begin":"/sbin/zramctl","end":"/usr/bin/aclocal-1.16","tail":"/usr/bin/addpart","checksum":"fdd65535992e1676852cff5fe2e3711cae596d16"} 2022-02-02 17:21:51,495 - wazuh_testing - DEBUG - 2022/02/02 21:21:48 wazuh-db[9333] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.098 ms. 2022-02-02 17:21:51,496 - wazuh_testing - DEBUG - 2022/02/02 21:21:48 wazuh-db[9333] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643833306,"version":2,"begin":"/usr/bin/addpart","end":"/usr/bin/apt-extracttemplates","checksum":"95a692828de0dea4b6ca328f569037eaa082ab85"} 2022-02-02 17:21:51,497 - wazuh_testing - DEBUG - 2022/02/02 21:21:48 wazuh-db[9333] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.062 ms. 2022-02-02 17:21:51,497 - wazuh_testing - DEBUG - 2022/02/02 21:21:48 wazuh-db[9333] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643833306,"version":2,"begin":"/usr/bin/[","end":"/usr/bin/aclocal-1.16","checksum":"ab72adc86d2a1f2e36162f60b40bf10d71afc73a"} 2022-02-02 17:21:51,498 - wazuh_testing - DEBUG - 2022/02/02 21:21:48 wazuh-db[9333] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643833306,"version":2,"begin":"/sbin/zramctl","end":"/usr/bin/2to3-2.7","tail":"/usr/bin/[","checksum":"5e0938d911171be5a2d3b1c2b5a77882a689d6db"} 2022-02-02 17:21:51,499 - wazuh_testing - DEBUG - 2022/02/02 21:21:48 wazuh-db[9333] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.090 ms. 2022-02-02 17:21:51,499 - wazuh_testing - DEBUG - 2022/02/02 21:21:48 wazuh-db[9333] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.084 ms. 2022-02-02 17:21:51,500 - wazuh_testing - DEBUG - 2022/02/02 21:21:48 wazuh-db[9333] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643833306,"version":2,"begin":"/sbin/zramctl","end":"/sbin/zramctl","tail":"/testdir1/testdir1.txt","checksum":"9562865780448bda22ecac2d749c5a2d5657b106"} 2022-02-02 17:21:51,501 - wazuh_testing - DEBUG - 2022/02/02 21:21:48 wazuh-db[9333] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.060 ms. 2022-02-02 17:21:51,502 - wazuh_testing - DEBUG - 2022/02/02 21:21:49 wazuh-db[9333] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643833306,"version":2,"begin":"/testdir1/testdir1.txt","end":"/usr/bin/2to3-2.7","checksum":"51c5712dbd5d022dab6c7d4f6728064fce0fac78"} 2022-02-02 17:21:51,503 - wazuh_testing - DEBUG - 2022/02/02 21:21:49 wazuh-db[9333] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.104 ms. 2022-02-02 17:21:51,504 - wazuh_testing - DEBUG - 2022/02/02 21:21:49 wazuh-db[9333] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1643833306,"version":2,"begin":"/testdir1/testdir1.txt","end":"/testdir1/testdir1.txt","tail":"/usr/bin/2to3-2.7","checksum":"e27fcded007b466dbba3ef945133b5dcae5856d0"} 2022-02-02 17:21:51,505 - wazuh_testing - DEBUG - 2022/02/02 21:21:49 wazuh-db[9333] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1643833306,"version":2,"begin":"/usr/bin/2to3-2.7","end":"/usr/bin/2to3-2.7","checksum":"4288e49f7e69481516baa382943d5a652f7e069b"} 2022-02-02 17:21:51,506 - wazuh_testing - DEBUG - 2022/02/02 21:21:49 wazuh-db[9333] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.062 ms. 2022-02-02 17:21:51,506 - wazuh_testing - DEBUG - 2022/02/02 21:21:49 wazuh-db[9333] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file save2 {"path":"/testdir1/testdir1.txt","timestamp":1643833305,"version":2,"attributes":{"type":"file","size":0,"perm":"rw-r--r--","uid":"0","gid":"0","user_name":"root","group_name":"root","inode":7239398,"mtime":1643833296,"hash_md5":"d41d8cd98f00b204e9800998ecf8427e","hash_sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","hash_sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","checksum":"54d9944d51f8ac6d8e601583f18de119a2e301c4"}} 2022-02-02 17:21:51,507 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-manager and message: .*Agent 001 query: (.+) save2 2022-02-02 17:21:52,440 - wazuh_testing - DEBUG - Cleaning temporal files... 2022-02-02 17:21:52,441 - wazuh_testing - DEBUG - Checking results... 2022-02-02 17:21:52,443 - wazuh_testing - DEBUG - Received from wazuh-agent1 the expected message: 2022/02/02 21:21:11 wazuh-syscheckd[15115] run_check.c:82 at fim_send_sync_msg(): DEBUG: (6317): Sending integrity control message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1643833271,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"a16be20a7c6f9aeb8c0b88be2ee52f3745ce94db"}} 2022-02-02 17:21:52,444 - wazuh_testing - DEBUG - Received from wazuh-manager the expected message: 2022/02/02 21:21:49 wazuh-db[9333] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file save2 {"path":"/testdir1/testdir1.txt","timestamp":1643833305,"version":2,"attributes":{"type":"file","size":0,"perm":"rw-r--r--","uid":"0","gid":"0","user_name":"root","group_name":"root","inode":7239398,"mtime":1643833296,"hash_md5":"d41d8cd98f00b204e9800998ecf8427e","hash_sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","hash_sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","checksum":"54d9944d51f8ac6d8e601583f18de119a2e301c4"}} 2022-02-02 17:22:36,814 - wazuh_testing - DEBUG - Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-02 17:22:36,817 - wazuh_testing - DEBUG - Starting file composer for wazuh-manager and path: /var/ossec/logs/ossec.log. Composite file in /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-manager_ossec.log.tmp 2022-02-02 17:22:36,817 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-02 17:22:36,820 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-manager and message: .*Initializing FIM Integrity Synchronization check. (.+)$ 2022-02-02 17:22:38,822 - wazuh_testing - DEBUG - 2022/02/02 21:22:00 wazuh-db[9333] wdb.c:918 at wdb_commit_old(): DEBUG: Agent '001' database commited. Time: 4.768 ms. 2022-02-02 17:22:38,823 - wazuh_testing - DEBUG - 2022/02/02 21:22:04 wazuh-db[9333] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.18.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.18.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.13.0-27-generic |#29~20.04.1-Ubuntu SMP Fri Jan 14 00:32:30 UTC 2022 |x86_64","os_arch":"x86_64"} 2022-02-02 17:22:38,823 - wazuh_testing - DEBUG - 2022/02/02 21:22:05 wazuh-modulesd:syscollector: INFO: Stop received for Syscollector. 2022-02-02 17:22:38,823 - wazuh_testing - DEBUG - 2022/02/02 21:22:05 wazuh-db[9333] main.c:352 at run_worker(): DEBUG: Client 12 disconnected. 2022-02-02 17:22:38,824 - wazuh_testing - DEBUG - 2022/02/02 21:22:05 wazuh-monitord: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:22:38,824 - wazuh_testing - DEBUG - 2022/02/02 21:22:05 wazuh-logcollector: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:22:38,824 - wazuh_testing - DEBUG - 2022/02/02 21:22:05 wazuh-remoted: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:22:38,824 - wazuh_testing - DEBUG - 2022/02/02 21:22:05 wazuh-db[9333] main.c:352 at run_worker(): DEBUG: Client 24 disconnected. 2022-02-02 17:22:38,825 - wazuh_testing - DEBUG - 2022/02/02 21:22:05 wazuh-db[9333] main.c:352 at run_worker(): DEBUG: Client 21 disconnected. 2022-02-02 17:22:38,825 - wazuh_testing - DEBUG - 2022/02/02 21:22:05 wazuh-db[9333] main.c:352 at run_worker(): DEBUG: Client 18 disconnected. 2022-02-02 17:22:38,826 - wazuh_testing - DEBUG - 2022/02/02 21:22:05 wazuh-db[9333] main.c:352 at run_worker(): DEBUG: Client 16 disconnected. 2022-02-02 17:22:38,826 - wazuh_testing - DEBUG - 2022/02/02 21:22:05 wazuh-syscheckd[9503] sig_op.c:49 at HandleSIG(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:22:38,827 - wazuh_testing - DEBUG - 2022/02/02 21:22:06 wazuh-analysisd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:22:38,827 - wazuh_testing - DEBUG - 2022/02/02 21:22:06 wazuh-db[9333] main.c:352 at run_worker(): DEBUG: Client 45 disconnected. 2022-02-02 17:22:38,827 - wazuh_testing - DEBUG - 2022/02/02 21:22:06 wazuh-db[9333] main.c:352 at run_worker(): DEBUG: Client 44 disconnected. 2022-02-02 17:22:38,828 - wazuh_testing - DEBUG - 2022/02/02 21:22:06 wazuh-db[9333] main.c:352 at run_worker(): DEBUG: Client 42 disconnected. 2022-02-02 17:22:38,828 - wazuh_testing - DEBUG - 2022/02/02 21:22:06 wazuh-db[9333] main.c:352 at run_worker(): DEBUG: Client 43 disconnected. 2022-02-02 17:22:38,829 - wazuh_testing - DEBUG - 2022/02/02 21:22:06 wazuh-db[9333] main.c:352 at run_worker(): DEBUG: Client 41 disconnected. 2022-02-02 17:22:38,829 - wazuh_testing - DEBUG - 2022/02/02 21:22:06 wazuh-db[9333] main.c:352 at run_worker(): DEBUG: Client 39 disconnected. 2022-02-02 17:22:38,830 - wazuh_testing - DEBUG - 2022/02/02 21:22:06 wazuh-db[9333] main.c:352 at run_worker(): DEBUG: Client 40 disconnected. 2022-02-02 17:22:38,830 - wazuh_testing - DEBUG - 2022/02/02 21:22:06 wazuh-db[9333] main.c:352 at run_worker(): DEBUG: Client 37 disconnected. 2022-02-02 17:22:38,831 - wazuh_testing - DEBUG - 2022/02/02 21:22:06 wazuh-db[9333] main.c:352 at run_worker(): DEBUG: Client 34 disconnected. 2022-02-02 17:22:38,831 - wazuh_testing - DEBUG - 2022/02/02 21:22:06 wazuh-db[9333] main.c:352 at run_worker(): DEBUG: Client 36 disconnected. 2022-02-02 17:22:38,831 - wazuh_testing - DEBUG - 2022/02/02 21:22:06 wazuh-db[9333] main.c:352 at run_worker(): DEBUG: Client 27 disconnected. 2022-02-02 17:22:38,832 - wazuh_testing - DEBUG - 2022/02/02 21:22:06 wazuh-db[9333] main.c:352 at run_worker(): DEBUG: Client 29 disconnected. 2022-02-02 17:22:38,832 - wazuh_testing - DEBUG - 2022/02/02 21:22:06 wazuh-db[9333] main.c:352 at run_worker(): DEBUG: Client 32 disconnected. 2022-02-02 17:22:38,833 - wazuh_testing - DEBUG - 2022/02/02 21:22:06 wazuh-db[9333] main.c:352 at run_worker(): DEBUG: Client 38 disconnected. 2022-02-02 17:22:38,833 - wazuh_testing - DEBUG - 2022/02/02 21:22:06 wazuh-db[9333] main.c:352 at run_worker(): DEBUG: Client 25 disconnected. 2022-02-02 17:22:38,833 - wazuh_testing - DEBUG - 2022/02/02 21:22:06 wazuh-db[9333] main.c:352 at run_worker(): DEBUG: Client 35 disconnected. 2022-02-02 17:22:38,834 - wazuh_testing - DEBUG - 2022/02/02 21:22:06 wazuh-db[9333] main.c:352 at run_worker(): DEBUG: Client 33 disconnected. 2022-02-02 17:22:38,834 - wazuh_testing - DEBUG - 2022/02/02 21:22:06 wazuh-db[9333] main.c:352 at run_worker(): DEBUG: Client 28 disconnected. 2022-02-02 17:22:38,834 - wazuh_testing - DEBUG - 2022/02/02 21:22:06 wazuh-db[9333] main.c:352 at run_worker(): DEBUG: Client 30 disconnected. 2022-02-02 17:22:38,835 - wazuh_testing - DEBUG - 2022/02/02 21:22:06 wazuh-db[9333] main.c:352 at run_worker(): DEBUG: Client 26 disconnected. 2022-02-02 17:22:38,835 - wazuh_testing - DEBUG - 2022/02/02 21:22:06 wazuh-db[9333] main.c:352 at run_worker(): DEBUG: Client 31 disconnected. 2022-02-02 17:22:38,836 - wazuh_testing - DEBUG - 2022/02/02 21:22:06 wazuh-db[9333] main.c:352 at run_worker(): DEBUG: Client 22 disconnected. 2022-02-02 17:22:38,836 - wazuh_testing - DEBUG - 2022/02/02 21:22:06 wazuh-db[9333] main.c:352 at run_worker(): DEBUG: Client 23 disconnected. 2022-02-02 17:22:38,836 - wazuh_testing - DEBUG - 2022/02/02 21:22:06 wazuh-db[9333] main.c:352 at run_worker(): DEBUG: Client 20 disconnected. 2022-02-02 17:22:38,837 - wazuh_testing - DEBUG - 2022/02/02 21:22:06 wazuh-db[9333] main.c:352 at run_worker(): DEBUG: Client 14 disconnected. 2022-02-02 17:22:38,837 - wazuh_testing - DEBUG - 2022/02/02 21:22:06 wazuh-db[9333] main.c:352 at run_worker(): DEBUG: Client 19 disconnected. 2022-02-02 17:22:38,838 - wazuh_testing - DEBUG - 2022/02/02 21:22:06 wazuh-db[9333] main.c:352 at run_worker(): DEBUG: Client 11 disconnected. 2022-02-02 17:22:38,838 - wazuh_testing - DEBUG - 2022/02/02 21:22:06 wazuh-db[9333] main.c:352 at run_worker(): DEBUG: Client 10 disconnected. 2022-02-02 17:22:38,838 - wazuh_testing - DEBUG - 2022/02/02 21:22:06 wazuh-db[9333] main.c:352 at run_worker(): DEBUG: Client 6 disconnected. 2022-02-02 17:22:38,839 - wazuh_testing - DEBUG - 2022/02/02 21:22:06 wazuh-execd: INFO: (1314): Shutdown received. Deleting responses. 2022-02-02 17:22:38,839 - wazuh_testing - DEBUG - 2022/02/02 21:22:06 wazuh-execd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:22:38,840 - wazuh_testing - DEBUG - 2022/02/02 21:22:06 wazuh-db[9333] main.c:468 at handler(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:22:38,840 - wazuh_testing - DEBUG - 2022/02/02 21:22:07 wazuh-db[9333] wdb.c:872 at wdb_close_all(): DEBUG: Closing all databases... 2022-02-02 17:22:38,840 - wazuh_testing - DEBUG - 2022/02/02 21:22:07 wazuh-db[9333] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent 001 2022-02-02 17:22:38,841 - wazuh_testing - DEBUG - 2022/02/02 21:22:07 wazuh-db[9333] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent 000 2022-02-02 17:22:38,841 - wazuh_testing - DEBUG - 2022/02/02 21:22:07 wazuh-db[9333] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent mitre 2022-02-02 17:22:38,842 - wazuh_testing - DEBUG - 2022/02/02 21:22:07 wazuh-db[9333] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent global 2022-02-02 17:22:38,842 - wazuh_testing - DEBUG - 2022/02/02 21:22:07 wazuh-db[9333] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent tasks 2022-02-02 17:22:38,842 - wazuh_testing - DEBUG - 2022/02/02 21:22:07 wazuh-db[9333] main.c:231 at main(): DEBUG: Template file removed again: queue/db/.template.db 2022-02-02 17:22:38,843 - wazuh_testing - DEBUG - 2022/02/02 21:22:07 wazuh-authd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-02 17:22:38,843 - wazuh_testing - DEBUG - 2022/02/02 21:22:07 wazuh-authd: INFO: Exiting... 2022-02-02 17:22:38,844 - wazuh_testing - DEBUG - 2022/02/02 21:22:20 wazuh-db[10265] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-02 17:22:38,844 - wazuh_testing - DEBUG - 2022/02/02 21:22:20 wazuh-db[10265] main.c:101 at main(): DEBUG: Wazuh home directory: /var/ossec 2022-02-02 17:22:38,845 - wazuh_testing - DEBUG - 2022/02/02 21:22:20 wazuh-syscheckd[10269] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-02 17:22:38,845 - wazuh_testing - DEBUG - 2022/02/02 21:22:20 wazuh-syscheckd[10269] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-02 17:22:38,846 - wazuh_testing - DEBUG - 2022/02/02 21:22:20 wazuh-syscheckd[10269] syscheck-config.c:122 at organize_syscheck_dirs(): DEBUG: No directory entries to organize in syscheck configuration. 2022-02-02 17:22:38,846 - wazuh_testing - DEBUG - 2022/02/02 21:22:27 wazuh-csyslogd: INFO: Remote syslog server not configured. Clean exit. 2022-02-02 17:22:38,847 - wazuh_testing - DEBUG - 2022/02/02 21:22:27 wazuh-dbd: INFO: Database not configured. Clean exit. 2022-02-02 17:22:38,847 - wazuh_testing - DEBUG - 2022/02/02 21:22:27 wazuh-integratord: INFO: Remote integrations not configured. Clean exit. 2022-02-02 17:22:38,848 - wazuh_testing - DEBUG - 2022/02/02 21:22:27 wazuh-agentlessd: INFO: Not configured. Exiting. 2022-02-02 17:22:38,848 - wazuh_testing - DEBUG - 2022/02/02 21:22:27 wazuh-authd: INFO: Started (pid: 10335). 2022-02-02 17:22:38,849 - wazuh_testing - DEBUG - 2022/02/02 21:22:27 wazuh-authd: INFO: Accepting connections on port 1515. No password required. 2022-02-02 17:22:38,849 - wazuh_testing - DEBUG - 2022/02/02 21:22:27 wazuh-authd: INFO: Setting network timeout to 1.000000 sec. 2022-02-02 17:22:38,850 - wazuh_testing - DEBUG - 2022/02/02 21:22:27 wazuh-db[10346] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-02 17:22:38,850 - wazuh_testing - DEBUG - 2022/02/02 21:22:27 wazuh-db[10346] main.c:101 at main(): DEBUG: Wazuh home directory: /var/ossec 2022-02-02 17:22:38,851 - wazuh_testing - DEBUG - 2022/02/02 21:22:27 wazuh-db[10346] main.c:122 at main(): DEBUG: Template file removed: /var/ossec/queue/db/.template.db 2022-02-02 17:22:38,851 - wazuh_testing - DEBUG - 2022/02/02 21:22:27 wazuh-db[10346] main.c:178 at main(): INFO: Started (pid: 10348). 2022-02-02 17:22:38,852 - wazuh_testing - DEBUG - 2022/02/02 21:22:28 wazuh-execd: INFO: (1350): Active response disabled. 2022-02-02 17:22:38,852 - wazuh_testing - DEBUG - 2022/02/02 21:22:28 wazuh-execd: INFO: Started (pid: 10371). 2022-02-02 17:22:38,853 - wazuh_testing - DEBUG - 2022/02/02 21:22:29 wazuh-syscheckd[10392] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-02 17:22:38,853 - wazuh_testing - DEBUG - 2022/02/02 21:22:29 wazuh-syscheckd[10392] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-02 17:22:38,854 - wazuh_testing - DEBUG - 2022/02/02 21:22:29 wazuh-syscheckd[10392] syscheck-config.c:122 at organize_syscheck_dirs(): DEBUG: No directory entries to organize in syscheck configuration. 2022-02-02 17:22:38,854 - wazuh_testing - DEBUG - 2022/02/02 21:22:29 wazuh-syscheckd[10392] main.c:118 at main(): INFO: (6678): No directory provided for syscheck to monitor. 2022-02-02 17:22:38,855 - wazuh_testing - DEBUG - 2022/02/02 21:22:29 wazuh-syscheckd[10392] main.c:136 at main(): INFO: (6001): File integrity monitoring disabled. 2022-02-02 17:22:38,855 - wazuh_testing - DEBUG - 2022/02/02 21:22:29 rootcheck[10392] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled. 2022-02-02 17:22:38,856 - wazuh_testing - DEBUG - 2022/02/02 21:22:29 wazuh-syscheckd[10392] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:22:38,857 - wazuh_testing - DEBUG - 2022/02/02 21:22:29 wazuh-syscheckd[10392] syscom.c:123 at syscom_main(): DEBUG: (6284): Local requests thread ready. 2022-02-02 17:22:38,857 - wazuh_testing - DEBUG - 2022/02/02 21:22:29 wazuh-syscheckd[10392] mq_op.c:47 at StartMQ(): DEBUG: Connected succesfully to 'queue/sockets/queue' after 0 attempts 2022-02-02 17:22:38,858 - wazuh_testing - DEBUG - 2022/02/02 21:22:29 wazuh-syscheckd[10392] mq_op.c:48 at StartMQ(): DEBUG: (unix_domain) Maximum send buffer set to: '212992'. 2022-02-02 17:22:38,858 - wazuh_testing - DEBUG - 2022/02/02 21:22:29 wazuh-syscheckd[10392] main.c:185 at main(): INFO: Started (pid: 10394). 2022-02-02 17:22:38,859 - wazuh_testing - DEBUG - 2022/02/02 21:22:29 wazuh-syscheckd[10392] main.c:215 at main(): DEBUG: (6357): Maximum disk quota size limit configured to '1048576 KB'. 2022-02-02 17:22:38,859 - wazuh_testing - DEBUG - 2022/02/02 21:22:29 wazuh-syscheckd[10392] run_check.c:194 at start_daemon(): DEBUG: (6320): Setting process priority to: '10' 2022-02-02 17:22:38,860 - wazuh_testing - DEBUG - 2022/02/02 21:22:29 wazuh-syscheckd[10392] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:22:38,861 - wazuh_testing - DEBUG - 2022/02/02 21:22:29 wazuh-syscheckd[10392] run_check.c:229 at start_daemon(): INFO: (6000): Starting daemon... 2022-02-02 17:22:38,861 - wazuh_testing - DEBUG - 2022/02/02 21:22:29 wazuh-syscheckd[10392] run_check.c:232 at start_daemon(): INFO: (6010): File integrity monitoring scan frequency: 43200 seconds 2022-02-02 17:22:38,862 - wazuh_testing - DEBUG - 2022/02/02 21:22:29 wazuh-syscheckd[10392] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-02 17:22:38,863 - wazuh_testing - DEBUG - 2022/02/02 21:22:29 wazuh-syscheckd[10392] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1643833349}} 2022-02-02 17:22:38,863 - wazuh_testing - DEBUG - 2022/02/02 21:22:29 wazuh-syscheckd[10392] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-02 17:22:38,864 - wazuh_testing - DEBUG - 2022/02/02 21:22:29 wazuh-syscheckd[10392] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-02 17:22:38,864 - wazuh_testing - DEBUG - 2022/02/02 21:22:29 wazuh-syscheckd[10392] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-02 17:22:38,865 - wazuh_testing - DEBUG - 2022/02/02 21:22:29 wazuh-syscheckd[10392] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1643833349}} 2022-02-02 17:22:38,866 - wazuh_testing - DEBUG - 2022/02/02 21:22:29 wazuh-syscheckd[10392] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.000 sec (0.001 clock sec) 2022-02-02 17:22:38,866 - wazuh_testing - DEBUG - 2022/02/02 21:22:29 wazuh-syscheckd[10392] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 0, path count: 0 2022-02-02 17:22:38,867 - wazuh_testing - DEBUG - 2022/02/02 21:22:29 wazuh-syscheckd[10392] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:22:38,868 - wazuh_testing - DEBUG - 2022/02/02 21:22:29 wazuh-syscheckd[10392] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:22:38,868 - wazuh_testing - DEBUG - 2022/02/02 21:22:29 wazuh-syscheckd[10392] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-02 17:22:38,869 - wazuh_testing - DEBUG - 2022/02/02 21:22:29 wazuh-syscheckd[10392] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. 2022-02-02 17:22:38,870 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-manager and message: .*Initializing FIM Integrity Synchronization check. (.+)$ 2022-02-02 17:22:39,823 - wazuh_testing - DEBUG - Cleaning temporal files... 2022-02-02 17:22:39,824 - wazuh_testing - DEBUG - Checking results... 2022-02-02 17:22:39,825 - wazuh_testing - DEBUG - Received from wazuh-manager the expected message: 2022/02/02 21:22:29 wazuh-syscheckd[10392] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. -------------------------------Captured log call-------------------------------- DEBUG testinfra:base.py:277 RUN CommandResult(command=b"ansible --tree /tmp/tmpri4_osl8 -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m command --args 'mkdir testdir1' wazuh-agent1", exit_status=0, stdout=b'wazuh-agent1 | CHANGED | rc=0 >>\n\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('command', 'mkdir testdir1', {'check': False, 'become': False}): {'changed': True, 'cmd': ['mkdir', 'testdir1'], 'delta': '0:00:00.742849', 'end': '2022-02-02 21:21:32.977060', 'msg': '', 'rc': 0, 'start': '2022-02-02 21:21:32.234211', 'stderr': '', 'stderr_lines': [], 'stdout': '', 'stdout_lines': []} DEBUG testinfra:base.py:277 RUN CommandResult(command=b"ansible --tree /tmp/tmp2kwt7kcb -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m command --args 'touch testdir1/testdir1.txt' wazuh-agent1", exit_status=0, stdout=b'wazuh-agent1 | CHANGED | rc=0 >>\n\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('command', 'touch testdir1/testdir1.txt', {'check': False, 'become': False}): {'changed': True, 'cmd': ['touch', 'testdir1/testdir1.txt'], 'delta': '0:00:00.914628', 'end': '2022-02-02 21:21:36.008525', 'msg': '', 'rc': 0, 'start': '2022-02-02 21:21:35.093897', 'stderr': '', 'stderr_lines': [], 'stdout': '', 'stdout_lines': []} DEBUG testinfra:base.py:277 RUN CommandResult(command=b"ansible --tree /tmp/tmp7nvz4v2_ -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m service --args 'name=wazuh-agent state=restarted' wazuh-agent1", exit_status=0, stdout=b'wazuh-agent1 | CHANGED => {\n "changed": true,\n "name": "wazuh-agent",\n "state": "started"\n}\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('service', 'name=wazuh-agent state=restarted', {'check': False, 'become': False}): {'changed': True, 'name': 'wazuh-agent', 'state': 'started'} DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:1006 Cleaning temporal files... DEBUG wazuh_testing:monitoring.py:995 Checking results... DEBUG wazuh_testing:monitoring.py:1001 Received from wazuh-agent1 the expected message: 2022/02/02 21:21:11 wazuh-syscheckd[15115] run_check.c:82 at fim_send_sync_msg(): DEBUG: (6317): Sending integrity control message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1643833271,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"a16be20a7c6f9aeb8c0b88be2ee52f3745ce94db"}} DEBUG wazuh_testing:monitoring.py:1001 Received from wazuh-manager the expected message: 2022/02/02 21:21:49 wazuh-db[9333] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file save2 {"path":"/testdir1/testdir1.txt","timestamp":1643833305,"version":2,"attributes":{"type":"file","size":0,"perm":"rw-r--r--","uid":"0","gid":"0","user_name":"root","group_name":"root","inode":7239398,"mtime":1643833296,"hash_md5":"d41d8cd98f00b204e9800998ecf8427e","hash_sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","hash_sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","checksum":"54d9944d51f8ac6d8e601583f18de119a2e301c4"}} DEBUG testinfra:base.py:277 RUN CommandResult(command=b'ansible --tree /tmp/tmpvq4r6m0p -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m copy --args \'dest=/var/ossec/logs/ossec.log content=\'"\'"\'\'"\'"\' force=yes\' wazuh-manager', exit_status=0, stdout=b'wazuh-manager | CHANGED => {\n "changed": true,\n "checksum": "da39a3ee5e6b4b0d3255bfef95601890afd80709",\n "dest": "/var/ossec/logs/ossec.log",\n "gid": 999,\n "group": "ossec",\n "md5sum": "d41d8cd98f00b204e9800998ecf8427e",\n "mode": "0660",\n "owner": "ossec",\n "size": 0,\n "src": "/root/.ansible/tmp/ansible-tmp-1643833313.4758341-111595-174319773471647/source",\n "state": "file",\n "uid": 999\n}\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('copy', "dest=/var/ossec/logs/ossec.log content='' force=yes", {'check': False, 'become': False}): {'changed': True, 'checksum': 'da39a3ee5e6b4b0d3255bfef95601890afd80709', 'dest': '/var/ossec/logs/ossec.log', 'gid': 999, 'group': 'ossec', 'md5sum': 'd41d8cd98f00b204e9800998ecf8427e', 'mode': '0660', 'owner': 'ossec', 'size': 0, 'src': '/root/.ansible/tmp/ansible-tmp-1643833313.4758341-111595-174319773471647/source', 'state': 'file', 'uid': 999} DEBUG testinfra:base.py:277 RUN CommandResult(command=b'ansible --tree /tmp/tmp4t6mx4cm -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m copy --args \'dest=/var/ossec/logs/ossec.log content=\'"\'"\'\'"\'"\' force=yes\' wazuh-agent1', exit_status=0, stdout=b'wazuh-agent1 | CHANGED => {\n "changed": true,\n "checksum": "da39a3ee5e6b4b0d3255bfef95601890afd80709",\n "dest": "/var/ossec/logs/ossec.log",\n "gid": 999,\n "group": "ossec",\n "md5sum": "d41d8cd98f00b204e9800998ecf8427e",\n "mode": "0660",\n "owner": "ossec",\n "size": 0,\n "src": "/root/.ansible/tmp/ansible-tmp-1643833318.523225-111994-45010742790597/source",\n "state": "file",\n "uid": 999\n}\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('copy', "dest=/var/ossec/logs/ossec.log content='' force=yes", {'check': False, 'become': False}): {'changed': True, 'checksum': 'da39a3ee5e6b4b0d3255bfef95601890afd80709', 'dest': '/var/ossec/logs/ossec.log', 'gid': 999, 'group': 'ossec', 'md5sum': 'd41d8cd98f00b204e9800998ecf8427e', 'mode': '0660', 'owner': 'ossec', 'size': 0, 'src': '/root/.ansible/tmp/ansible-tmp-1643833318.523225-111994-45010742790597/source', 'state': 'file', 'uid': 999} DEBUG testinfra:base.py:277 RUN CommandResult(command=b"ansible --tree /tmp/tmp0vjol1cf -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m command --args '/var/ossec/bin/wazuh-control stop' wazuh-manager", exit_status=0, stdout=b'wazuh-manager | CHANGED | rc=0 >>\nKilling wazuh-clusterd...\nKilling wazuh-modulesd...\nKilling wazuh-monitord...\nKilling wazuh-logcollector...\nKilling wazuh-remoted...\nKilling wazuh-syscheckd...\nKilling wazuh-analysisd...\nwazuh-maild not running...\nKilling wazuh-execd...\nKilling wazuh-db...\nKilling wazuh-authd...\nwazuh-agentlessd not running...\nwazuh-integratord not running...\nwazuh-dbd not running...\nwazuh-csyslogd not running...\nKilling wazuh-apid...\nWazuh v4.2.5 Stopped\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('command', '/var/ossec/bin/wazuh-control stop', {'check': False, 'become': False}): {'changed': True, 'cmd': ['/var/ossec/bin/wazuh-control', 'stop'], 'delta': '0:00:03.759100', 'end': '2022-02-02 21:22:08.405004', 'msg': '', 'rc': 0, 'start': '2022-02-02 21:22:04.645904', 'stderr': '', 'stderr_lines': [], 'stdout': 'Killing wazuh-clusterd...\n' 'Killing wazuh-modulesd...\n' 'Killing wazuh-monitord...\n' 'Killing wazuh-logcollector...\n' 'Killing wazuh-remoted...\n' 'Killing wazuh-syscheckd...\n' 'Killing wazuh-analysisd...\n' 'wazuh-maild not running...\n' 'Killing wazuh-execd...\n' 'Killing wazuh-db...\n' 'Killing wazuh-authd...\n' 'wazuh-agentlessd not running...\n' 'wazuh-integratord not running...\n' 'wazuh-dbd not running...\n' 'wazuh-csyslogd not running...\n' 'Killing wazuh-apid...\n' 'Wazuh v4.2.5 Stopped', 'stdout_lines': ['Killing wazuh-clusterd...', 'Killing wazuh-modulesd...', 'Killing wazuh-monitord...', 'Killing wazuh-logcollector...', 'Killing wazuh-remoted...', 'Killing wazuh-syscheckd...', 'Killing wazuh-analysisd...', 'wazuh-maild not running...', 'Killing wazuh-execd...', 'Killing wazuh-db...', 'Killing wazuh-authd...', 'wazuh-agentlessd not running...', 'wazuh-integratord not running...', 'wazuh-dbd not running...', 'wazuh-csyslogd not running...', 'Killing wazuh-apid...', 'Wazuh v4.2.5 Stopped']} DEBUG testinfra:base.py:277 RUN CommandResult(command=b"ansible --tree /tmp/tmpp8fdutlb -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m command --args 'rm -rf testdir1' wazuh-agent1", exit_status=0, stdout=b'wazuh-agent1 | CHANGED | rc=0 >>\n\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('command', 'rm -rf testdir1', {'check': False, 'become': False}): {'changed': True, 'cmd': ['rm', '-rf', 'testdir1'], 'delta': '0:00:00.855830', 'end': '2022-02-02 21:22:11.436550', 'msg': '', 'rc': 0, 'start': '2022-02-02 21:22:10.580720', 'stderr': '', 'stderr_lines': [], 'stdout': '', 'stdout_lines': []} DEBUG testinfra:base.py:277 RUN CommandResult(command=b"ansible --tree /tmp/tmpjvcvub2l -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m command --args '/var/ossec/bin/wazuh-control start' wazuh-manager", exit_status=0, stdout=b"wazuh-manager | CHANGED | rc=0 >>\nStarting Wazuh v4.2.5...\nStarted wazuh-apid...\nStarted wazuh-csyslogd...\nStarted wazuh-dbd...\nStarted wazuh-integratord...\nStarted wazuh-agentlessd...\nStarted wazuh-authd...\nStarted wazuh-db...\nStarted wazuh-execd...\nStarted wazuh-analysisd...\nStarted wazuh-syscheckd...\nStarted wazuh-remoted...\nStarted wazuh-logcollector...\nStarted wazuh-monitord...\nStarted wazuh-modulesd...\nStarted wazuh-clusterd...\nCompleted.2022/02/02 21:22:20 wazuh-db[10265] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized\n2022/02/02 21:22:20 wazuh-db[10265] main.c:101 at main(): DEBUG: Wazuh home directory: /var/ossec\n2022/02/02 21:22:20 wazuh-syscheckd[10269] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized\n2022/02/02 21:22:20 wazuh-syscheckd[10269] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf'\n2022/02/02 21:22:20 wazuh-syscheckd[10269] syscheck-config.c:122 at organize_syscheck_dirs(): DEBUG: No directory entries to organize in syscheck configuration.\n2022/02/02 21:22:27 wazuh-integratord: INFO: Remote integrations not configured. Clean exit.\n2022/02/02 21:22:27 wazuh-db[10346] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized\n2022/02/02 21:22:27 wazuh-db[10346] main.c:101 at main(): DEBUG: Wazuh home directory: /var/ossec\n2022/02/02 21:22:29 wazuh-syscheckd[10392] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized\n2022/02/02 21:22:29 wazuh-syscheckd[10392] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf'\n2022/02/02 21:22:29 wazuh-syscheckd[10392] syscheck-config.c:122 at organize_syscheck_dirs(): DEBUG: No directory entries to organize in syscheck configuration.\n2022/02/02 21:22:29 wazuh-syscheckd[10392] main.c:118 at main(): INFO: (6678): No directory provided for syscheck to monitor.\n2022/02/02 21:22:29 wazuh-syscheckd[10392] main.c:136 at main(): INFO: (6001): File integrity monitoring disabled.\n2022/02/02 21:22:29 rootcheck[10392] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled.\n", stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('command', '/var/ossec/bin/wazuh-control start', {'check': False, 'become': False}): {'changed': True, 'cmd': ['/var/ossec/bin/wazuh-control', 'start'], 'delta': '0:00:22.892379', 'end': '2022-02-02 21:22:36.509127', 'msg': '', 'rc': 0, 'start': '2022-02-02 21:22:13.616748', 'stderr': '2022/02/02 21:22:20 wazuh-db[10265] debug_op.c:70 at _log(): ' 'DEBUG: Logging module auto-initialized\n' '2022/02/02 21:22:20 wazuh-db[10265] main.c:101 at main(): DEBUG: ' 'Wazuh home directory: /var/ossec\n' '2022/02/02 21:22:20 wazuh-syscheckd[10269] debug_op.c:70 at ' '_log(): DEBUG: Logging module auto-initialized\n' '2022/02/02 21:22:20 wazuh-syscheckd[10269] config.c:87 at ' 'Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: ' "'etc/ossec.conf'\n" '2022/02/02 21:22:20 wazuh-syscheckd[10269] syscheck-config.c:122 ' 'at organize_syscheck_dirs(): DEBUG: No directory entries to ' 'organize in syscheck configuration.\n' '2022/02/02 21:22:27 wazuh-integratord: INFO: Remote integrations ' 'not configured. Clean exit.\n' '2022/02/02 21:22:27 wazuh-db[10346] debug_op.c:70 at _log(): ' 'DEBUG: Logging module auto-initialized\n' '2022/02/02 21:22:27 wazuh-db[10346] main.c:101 at main(): DEBUG: ' 'Wazuh home directory: /var/ossec\n' '2022/02/02 21:22:29 wazuh-syscheckd[10392] debug_op.c:70 at ' '_log(): DEBUG: Logging module auto-initialized\n' '2022/02/02 21:22:29 wazuh-syscheckd[10392] config.c:87 at ' 'Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: ' "'etc/ossec.conf'\n" '2022/02/02 21:22:29 wazuh-syscheckd[10392] syscheck-config.c:122 ' 'at organize_syscheck_dirs(): DEBUG: No directory entries to ' 'organize in syscheck configuration.\n' '2022/02/02 21:22:29 wazuh-syscheckd[10392] main.c:118 at main(): ' 'INFO: (6678): No directory provided for syscheck to monitor.\n' '2022/02/02 21:22:29 wazuh-syscheckd[10392] main.c:136 at main(): ' 'INFO: (6001): File integrity monitoring disabled.\n' '2022/02/02 21:22:29 rootcheck[10392] rootcheck.c:202 at ' 'rootcheck_init(): INFO: Rootcheck disabled.', 'stderr_lines': ['2022/02/02 21:22:20 wazuh-db[10265] debug_op.c:70 at ' '_log(): DEBUG: Logging module auto-initialized', '2022/02/02 21:22:20 wazuh-db[10265] main.c:101 at main(): ' 'DEBUG: Wazuh home directory: /var/ossec', '2022/02/02 21:22:20 wazuh-syscheckd[10269] debug_op.c:70 at ' '_log(): DEBUG: Logging module auto-initialized', '2022/02/02 21:22:20 wazuh-syscheckd[10269] config.c:87 at ' 'Read_Syscheck_Config(): DEBUG: (6287): Reading ' "configuration file: 'etc/ossec.conf'", '2022/02/02 21:22:20 wazuh-syscheckd[10269] ' 'syscheck-config.c:122 at organize_syscheck_dirs(): DEBUG: ' 'No directory entries to organize in syscheck configuration.', '2022/02/02 21:22:27 wazuh-integratord: INFO: Remote ' 'integrations not configured. Clean exit.', '2022/02/02 21:22:27 wazuh-db[10346] debug_op.c:70 at ' '_log(): DEBUG: Logging module auto-initialized', '2022/02/02 21:22:27 wazuh-db[10346] main.c:101 at main(): ' 'DEBUG: Wazuh home directory: /var/ossec', '2022/02/02 21:22:29 wazuh-syscheckd[10392] debug_op.c:70 at ' '_log(): DEBUG: Logging module auto-initialized', '2022/02/02 21:22:29 wazuh-syscheckd[10392] config.c:87 at ' 'Read_Syscheck_Config(): DEBUG: (6287): Reading ' "configuration file: 'etc/ossec.conf'", '2022/02/02 21:22:29 wazuh-syscheckd[10392] ' 'syscheck-config.c:122 at organize_syscheck_dirs(): DEBUG: ' 'No directory entries to organize in syscheck configuration.', '2022/02/02 21:22:29 wazuh-syscheckd[10392] main.c:118 at ' 'main(): INFO: (6678): No directory provided for syscheck to ' 'monitor.', '2022/02/02 21:22:29 wazuh-syscheckd[10392] main.c:136 at ' 'main(): INFO: (6001): File integrity monitoring disabled.', '2022/02/02 21:22:29 rootcheck[10392] rootcheck.c:202 at ' 'rootcheck_init(): INFO: Rootcheck disabled.'], 'stdout': 'Starting Wazuh v4.2.5...\n' 'Started wazuh-apid...\n' 'Started wazuh-csyslogd...\n' 'Started wazuh-dbd...\n' 'Started wazuh-integratord...\n' 'Started wazuh-agentlessd...\n' 'Started wazuh-authd...\n' 'Started wazuh-db...\n' 'Started wazuh-execd...\n' 'Started wazuh-analysisd...\n' 'Started wazuh-syscheckd...\n' 'Started wazuh-remoted...\n' 'Started wazuh-logcollector...\n' 'Started wazuh-monitord...\n' 'Started wazuh-modulesd...\n' 'Started wazuh-clusterd...\n' 'Completed.', 'stdout_lines': ['Starting Wazuh v4.2.5...', 'Started wazuh-apid...', 'Started wazuh-csyslogd...', 'Started wazuh-dbd...', 'Started wazuh-integratord...', 'Started wazuh-agentlessd...', 'Started wazuh-authd...', 'Started wazuh-db...', 'Started wazuh-execd...', 'Started wazuh-analysisd...', 'Started wazuh-syscheckd...', 'Started wazuh-remoted...', 'Started wazuh-logcollector...', 'Started wazuh-monitord...', 'Started wazuh-modulesd...', 'Started wazuh-clusterd...', 'Completed.']} DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:1006 Cleaning temporal files... DEBUG wazuh_testing:monitoring.py:995 Checking results... DEBUG wazuh_testing:monitoring.py:1001 Received from wazuh-manager the expected message: 2022/02/02 21:22:29 wazuh-syscheckd[10392] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. DEBUG testinfra:base.py:277 RUN CommandResult(command=b'ansible --tree /tmp/tmpe2e5mxte -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m command --args \'python /var/system_query_db.py --db_path /var/ossec/queue/db/001.db --query " select * from fim_entry where full_path=\'"\'"\'"\'"\'"\'/testdir1/testdir1.txt\'"\'"\'"\'"\'"\'"\' wazuh-manager', exit_status=0, stdout=b'wazuh-manager | CHANGED | rc=0 >>\n[]\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('command', 'python /var/system_query_db.py --db_path /var/ossec/queue/db/001.db --query " select * from fim_entry where full_path=\'"\'/testdir1/testdir1.txt\'"\'"', {'check': False, 'become': False}): {'changed': True, 'cmd': ['python', '/var/system_query_db.py', '--db_path', '/var/ossec/queue/db/001.db', '--query', " select * from fim_entry where full_path='/testdir1/testdir1.txt'"], 'delta': '0:00:00.781845', 'end': '2022-02-02 21:22:47.550033', 'msg': '', 'rc': 0, 'start': '2022-02-02 21:22:46.768188', 'stderr': '', 'stderr_lines': [], 'stdout': '[]', 'stdout_lines': ['[]']} DEBUG testinfra:base.py:277 RUN CommandResult(command=b'ansible --tree /tmp/tmp949u9ihf -i /home/deblintrake/Escritorio/SysTests/wazuh-qa/tests/system/provisioning/one_manager_agent/inventory.yml -m command --args \'rm -rf \'"\'"\'/testdir1/testdir1.txt\'"\'"\'\' wazuh-agent1', exit_status=0, stdout=b'wazuh-agent1 | CHANGED | rc=0 >>\n\n', stderr=None) INFO testinfra:ansible.py:58 RUN Ansible('command', "rm -rf '/testdir1/testdir1.txt'", {'check': False, 'become': False}): {'changed': True, 'cmd': ['rm', '-rf', '/testdir1/testdir1.txt'], 'delta': '0:00:00.882846', 'end': '2022-02-02 21:22:50.686359', 'msg': '', 'rc': 0, 'start': '2022-02-02 21:22:49.803513', 'stderr': '', 'stderr_lines': [], 'stdout': '', 'stdout_lines': []} | |||