Test Report

Result	Test	Duration
Passed	test_synchronization.py::test_synchronization[testdir1-add-wazuh-agent1]	34.02
------------------------------Captured stderr call------------------------------ 2022-02-11 14:53:52,734 - wazuh_testing - DEBUG - Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-11 14:53:52,735 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-11 14:53:52,735 - wazuh_testing - DEBUG - Starting file composer for wazuh-agent1 and path: /var/ossec/logs/ossec.log. Composite file in /home/camila/Escritorio/repo/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-agent1_ossec.log.tmp 2022-02-11 14:53:52,736 - wazuh_testing - DEBUG - Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-11 14:53:52,736 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-agent1 and message: .Sending integrity control message: (.+)$ 2022-02-11 14:53:52,737 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-11 14:53:52,737 - wazuh_testing - DEBUG - Starting file composer for wazuh-manager and path: /var/ossec/logs/ossec.log. Composite file in /home/camila/Escritorio/repo/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-manager_ossec.log.tmp 2022-02-11 14:53:52,738 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-manager and message: .Agent 001 query: (.+) save2 2022-02-11 14:53:54,238 - wazuh_testing - DEBUG - 2022/02/11 18:51:36 wazuh-agentd: ERROR: (1137): Lost connection with manager. Setting lock. 2022-02-11 14:53:54,238 - wazuh_testing - DEBUG - 2022/02/11 18:51:36 wazuh-agentd: INFO: Closing connection to server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 14:53:54,239 - wazuh_testing - DEBUG - 2022/02/11 18:51:36 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 14:53:54,239 - wazuh_testing - DEBUG - 2022/02/11 18:51:36 wazuh-agentd: ERROR: (1216): Unable to connect to '172.17.0.2:1514/tcp': 'Connection refused'. 2022-02-11 14:53:54,239 - wazuh_testing - DEBUG - 2022/02/11 18:51:44 wazuh-syscheckd[15434] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 14:53:54,239 - wazuh_testing - DEBUG - 2022/02/11 18:51:44 wazuh-syscheckd[15434] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644601904}} 2022-02-11 14:53:54,239 - wazuh_testing - DEBUG - 2022/02/11 18:51:44 wazuh-syscheckd[15434] wait_op.c:101 at os_wait(): WARNING: Process locked due to agent is offline. Waiting for connection... 2022-02-11 14:53:54,240 - wazuh_testing - DEBUG - 2022/02/11 18:51:46 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 14:53:54,240 - wazuh_testing - DEBUG - 2022/02/11 18:51:46 wazuh-agentd: ERROR: (1216): Unable to connect to '172.17.0.2:1514/tcp': 'Connection refused'. 2022-02-11 14:53:54,240 - wazuh_testing - DEBUG - 2022/02/11 18:51:35 wazuh-modulesd:syscollector: INFO: Stop received for Syscollector. 2022-02-11 14:53:54,240 - wazuh_testing - DEBUG - 2022/02/11 18:51:56 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 14:53:54,240 - wazuh_testing - DEBUG - 2022/02/11 18:51:56 wazuh-agentd: INFO: (4102): Connected to the server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 14:53:54,240 - wazuh_testing - DEBUG - 2022/02/11 18:51:35 wazuh-db[12471] main.c:352 at run_worker(): DEBUG: Client 13 disconnected. 2022-02-11 14:53:54,240 - wazuh_testing - DEBUG - 2022/02/11 18:51:56 wazuh-agentd: INFO: Server responded. Releasing lock. 2022-02-11 14:53:54,240 - wazuh_testing - DEBUG - 2022/02/11 18:51:35 wazuh-monitord: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:53:54,241 - wazuh_testing - DEBUG - 2022/02/11 18:51:59 wazuh-syscheckd[15434] wait_op.c:116 at os_wait(): INFO: Agent is now online. Process unlocked, continuing... 2022-02-11 14:53:54,241 - wazuh_testing - DEBUG - 2022/02/11 18:51:36 wazuh-logcollector: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:53:54,241 - wazuh_testing - DEBUG - 2022/02/11 18:51:36 wazuh-remoted: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:53:54,241 - wazuh_testing - DEBUG - 2022/02/11 18:51:59 wazuh-syscheckd[15434] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 14:53:54,241 - wazuh_testing - DEBUG - 2022/02/11 18:51:36 wazuh-db[12471] main.c:352 at run_worker(): DEBUG: Client 25 disconnected. 2022-02-11 14:53:54,241 - wazuh_testing - DEBUG - 2022/02/11 18:51:59 wazuh-syscheckd[15434] fim_db.c:436 at fim_db_check_transaction(): DEBUG: Database transaction completed. 2022-02-11 14:53:54,241 - wazuh_testing - DEBUG - 2022/02/11 18:51:36 wazuh-db[12471] main.c:352 at run_worker(): DEBUG: Client 18 disconnected. 2022-02-11 14:53:54,241 - wazuh_testing - DEBUG - 2022/02/11 18:51:59 wazuh-syscheckd[15434] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-11 14:53:54,241 - wazuh_testing - DEBUG - 2022/02/11 18:51:36 wazuh-db[12471] main.c:352 at run_worker(): DEBUG: Client 24 disconnected. 2022-02-11 14:53:54,242 - wazuh_testing - DEBUG - 2022/02/11 18:51:36 wazuh-db[12471] main.c:352 at run_worker(): DEBUG: Client 16 disconnected. 2022-02-11 14:53:54,242 - wazuh_testing - DEBUG - 2022/02/11 18:51:59 wazuh-syscheckd[15434] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-11 14:53:54,242 - wazuh_testing - DEBUG - 2022/02/11 18:51:36 wazuh-syscheckd[12605] sig_op.c:49 at HandleSIG(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:53:54,242 - wazuh_testing - DEBUG - 2022/02/11 18:51:36 wazuh-analysisd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:53:54,242 - wazuh_testing - DEBUG - 2022/02/11 18:51:59 wazuh-syscheckd[15434] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-11 14:53:54,242 - wazuh_testing - DEBUG - 2022/02/11 18:51:36 wazuh-db[12471] main.c:352 at run_worker(): DEBUG: Client 34 disconnected. 2022-02-11 14:53:54,242 - wazuh_testing - DEBUG - 2022/02/11 18:51:59 wazuh-syscheckd[15434] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-11 14:53:54,242 - wazuh_testing - DEBUG - 2022/02/11 18:51:36 wazuh-db[12471] main.c:352 at run_worker(): DEBUG: Client 36 disconnected. 2022-02-11 14:53:54,243 - wazuh_testing - DEBUG - 2022/02/11 18:51:59 wazuh-syscheckd[15434] create_db.c:109 at fim_delete_file_event(): DEBUG: (6220): Sending delete message for file: '/testdir1/testdir1.txt' 2022-02-11 14:53:54,243 - wazuh_testing - DEBUG - 2022/02/11 18:51:36 wazuh-db[12471] main.c:352 at run_worker(): DEBUG: Client 35 disconnected. 2022-02-11 14:53:54,243 - wazuh_testing - DEBUG - 2022/02/11 18:51:36 wazuh-db[12471] main.c:352 at run_worker(): DEBUG: Client 32 disconnected. 2022-02-11 14:53:54,243 - wazuh_testing - DEBUG - 2022/02/11 18:51:36 wazuh-db[12471] main.c:352 at run_worker(): DEBUG: Client 30 disconnected. 2022-02-11 14:53:54,243 - wazuh_testing - DEBUG - 2022/02/11 18:51:36 wazuh-db[12471] main.c:352 at run_worker(): DEBUG: Client 27 disconnected. 2022-02-11 14:53:54,243 - wazuh_testing - DEBUG - 2022/02/11 18:51:59 wazuh-syscheckd[15434] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"event","data":{"path":"/testdir1/testdir1.txt","version":2,"mode":"scheduled","type":"deleted","timestamp":1644601883,"attributes":{"type":"file","size":0,"perm":"rw-r--r--","uid":"0","gid":"0","user_name":"root","group_name":"root","inode":17179747,"mtime":1644601878,"hash_md5":"d41d8cd98f00b204e9800998ecf8427e","hash_sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","hash_sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","checksum":"fad6effa1e26ea58a7c2ef8d7ff23ddb630a2dc3"}}} 2022-02-11 14:53:54,243 - wazuh_testing - DEBUG - 2022/02/11 18:51:36 wazuh-db[12471] main.c:352 at run_worker(): DEBUG: Client 33 disconnected. 2022-02-11 14:53:54,244 - wazuh_testing - DEBUG - 2022/02/11 18:51:36 wazuh-db[12471] main.c:352 at run_worker(): DEBUG: Client 28 disconnected. 2022-02-11 14:53:54,244 - wazuh_testing - DEBUG - 2022/02/11 18:51:59 wazuh-syscheckd[15434] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 14:53:54,244 - wazuh_testing - DEBUG - 2022/02/11 18:51:36 wazuh-db[12471] main.c:352 at run_worker(): DEBUG: Client 20 disconnected. 2022-02-11 14:53:54,244 - wazuh_testing - DEBUG - 2022/02/11 18:51:59 wazuh-syscheckd[15434] create_db.c:220 at fim_scan(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-11 14:53:54,244 - wazuh_testing - DEBUG - 2022/02/11 18:51:36 wazuh-db[12471] main.c:352 at run_worker(): DEBUG: Client 31 disconnected. 2022-02-11 14:53:54,244 - wazuh_testing - DEBUG - 2022/02/11 18:51:59 wazuh-syscheckd[15434] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 14:53:54,244 - wazuh_testing - DEBUG - 2022/02/11 18:51:36 wazuh-db[12471] main.c:352 at run_worker(): DEBUG: Client 12 disconnected. 2022-02-11 14:53:54,245 - wazuh_testing - DEBUG - 2022/02/11 18:51:59 wazuh-syscheckd[15434] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644601919}} 2022-02-11 14:53:54,245 - wazuh_testing - DEBUG - 2022/02/11 18:51:36 wazuh-db[12471] main.c:352 at run_worker(): DEBUG: Client 26 disconnected. 2022-02-11 14:53:54,245 - wazuh_testing - DEBUG - 2022/02/11 18:51:59 wazuh-syscheckd[15434] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 15.366 sec (0.354 clock sec) 2022-02-11 14:53:54,245 - wazuh_testing - DEBUG - 2022/02/11 18:51:36 wazuh-db[12471] main.c:352 at run_worker(): DEBUG: Client 11 disconnected. 2022-02-11 14:53:54,245 - wazuh_testing - DEBUG - 2022/02/11 18:51:59 wazuh-syscheckd[15434] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1620, path count: 1626 2022-02-11 14:53:54,245 - wazuh_testing - DEBUG - 2022/02/11 18:51:36 wazuh-db[12471] main.c:352 at run_worker(): DEBUG: Client 10 disconnected. 2022-02-11 14:53:54,246 - wazuh_testing - DEBUG - 2022/02/11 18:51:36 wazuh-db[12471] main.c:352 at run_worker(): DEBUG: Client 29 disconnected. 2022-02-11 14:53:54,246 - wazuh_testing - DEBUG - 2022/02/11 18:52:20 wazuh-syscheckd[15434] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 14:53:54,246 - wazuh_testing - DEBUG - 2022/02/11 18:51:36 wazuh-db[12471] main.c:352 at run_worker(): DEBUG: Client 6 disconnected. 2022-02-11 14:53:54,246 - wazuh_testing - DEBUG - 2022/02/11 18:51:36 wazuh-db[12471] main.c:352 at run_worker(): DEBUG: Client 21 disconnected. 2022-02-11 14:53:54,246 - wazuh_testing - DEBUG - 2022/02/11 18:52:20 wazuh-syscheckd[15434] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644601940}} 2022-02-11 14:53:54,246 - wazuh_testing - DEBUG - 2022/02/11 18:51:36 wazuh-db[12471] main.c:352 at run_worker(): DEBUG: Client 23 disconnected. 2022-02-11 14:53:54,247 - wazuh_testing - DEBUG - 2022/02/11 18:52:20 wazuh-syscheckd[15434] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 14:53:54,247 - wazuh_testing - DEBUG - 2022/02/11 18:51:36 wazuh-db[12471] main.c:352 at run_worker(): DEBUG: Client 22 disconnected. 2022-02-11 14:53:54,247 - wazuh_testing - DEBUG - 2022/02/11 18:51:36 wazuh-db[12471] main.c:352 at run_worker(): DEBUG: Client 19 disconnected. 2022-02-11 14:53:54,247 - wazuh_testing - DEBUG - 2022/02/11 18:52:20 wazuh-syscheckd[15434] fim_db.c:436 at fim_db_check_transaction(): DEBUG: Database transaction completed. 2022-02-11 14:53:54,247 - wazuh_testing - DEBUG - 2022/02/11 18:51:36 wazuh-execd: INFO: (1314): Shutdown received. Deleting responses. 2022-02-11 14:53:54,247 - wazuh_testing - DEBUG - 2022/02/11 18:51:36 wazuh-execd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:53:54,247 - wazuh_testing - DEBUG - 2022/02/11 18:52:20 wazuh-syscheckd[15434] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-11 14:53:54,248 - wazuh_testing - DEBUG - 2022/02/11 18:51:36 wazuh-db[12471] main.c:468 at handler(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:53:54,248 - wazuh_testing - DEBUG - 2022/02/11 18:51:37 wazuh-db[12471] wdb.c:872 at wdb_close_all(): DEBUG: Closing all databases... 2022-02-11 14:53:54,248 - wazuh_testing - DEBUG - 2022/02/11 18:52:20 wazuh-syscheckd[15434] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-11 14:53:54,248 - wazuh_testing - DEBUG - 2022/02/11 18:51:37 wazuh-db[12471] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent 001 2022-02-11 14:53:54,248 - wazuh_testing - DEBUG - 2022/02/11 18:51:37 wazuh-db[12471] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent 000 2022-02-11 14:53:54,248 - wazuh_testing - DEBUG - 2022/02/11 18:52:20 wazuh-syscheckd[15434] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-11 14:53:54,248 - wazuh_testing - DEBUG - 2022/02/11 18:51:37 wazuh-db[12471] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent mitre 2022-02-11 14:53:54,249 - wazuh_testing - DEBUG - 2022/02/11 18:52:20 wazuh-syscheckd[15434] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-11 14:53:54,249 - wazuh_testing - DEBUG - 2022/02/11 18:51:37 wazuh-db[12471] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent global 2022-02-11 14:53:54,249 - wazuh_testing - DEBUG - 2022/02/11 18:52:21 wazuh-syscheckd[15434] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 14:53:54,249 - wazuh_testing - DEBUG - 2022/02/11 18:51:37 wazuh-db[12471] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent tasks 2022-02-11 14:53:54,249 - wazuh_testing - DEBUG - 2022/02/11 18:52:21 wazuh-syscheckd[15434] create_db.c:220 at fim_scan(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-11 14:53:54,249 - wazuh_testing - DEBUG - 2022/02/11 18:51:37 wazuh-db[12471] main.c:231 at main(): DEBUG: Template file removed again: queue/db/.template.db 2022-02-11 14:53:54,249 - wazuh_testing - DEBUG - 2022/02/11 18:52:21 wazuh-syscheckd[15434] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 14:53:54,249 - wazuh_testing - DEBUG - 2022/02/11 18:51:37 wazuh-authd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:53:54,250 - wazuh_testing - DEBUG - 2022/02/11 18:52:21 wazuh-syscheckd[15434] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644601941}} 2022-02-11 14:53:54,250 - wazuh_testing - DEBUG - 2022/02/11 18:51:38 wazuh-authd: INFO: Exiting... 2022-02-11 14:53:54,250 - wazuh_testing - DEBUG - 2022/02/11 18:52:21 wazuh-syscheckd[15434] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.339 sec (0.335 clock sec) 2022-02-11 14:53:54,250 - wazuh_testing - DEBUG - 2022/02/11 18:51:42 wazuh-db[13395] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 14:53:54,250 - wazuh_testing - DEBUG - 2022/02/11 18:52:21 wazuh-syscheckd[15434] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1620, path count: 1626 2022-02-11 14:53:54,250 - wazuh_testing - DEBUG - 2022/02/11 18:51:42 wazuh-db[13395] main.c:101 at main(): DEBUG: Wazuh home directory: /var/ossec 2022-02-11 14:53:54,250 - wazuh_testing - DEBUG - 2022/02/11 18:52:42 wazuh-syscheckd[15434] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 14:53:54,250 - wazuh_testing - DEBUG - 2022/02/11 18:51:42 wazuh-syscheckd[13399] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 14:53:54,250 - wazuh_testing - DEBUG - 2022/02/11 18:52:42 wazuh-syscheckd[15434] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644601962}} 2022-02-11 14:53:54,250 - wazuh_testing - DEBUG - 2022/02/11 18:51:42 wazuh-syscheckd[13399] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 14:53:54,251 - wazuh_testing - DEBUG - 2022/02/11 18:52:42 wazuh-syscheckd[15434] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 14:53:54,251 - wazuh_testing - DEBUG - 2022/02/11 18:51:42 wazuh-syscheckd[13399] syscheck-config.c:122 at organize_syscheck_dirs(): DEBUG: No directory entries to organize in syscheck configuration. 2022-02-11 14:53:54,251 - wazuh_testing - DEBUG - 2022/02/11 18:52:42 wazuh-syscheckd[15434] fim_db.c:436 at fim_db_check_transaction(): DEBUG: Database transaction completed. 2022-02-11 14:53:54,251 - wazuh_testing - DEBUG - 2022/02/11 18:51:45 wazuh-csyslogd: INFO: Remote syslog server not configured. Clean exit. 2022-02-11 14:53:54,251 - wazuh_testing - DEBUG - 2022/02/11 18:52:42 wazuh-syscheckd[15434] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-11 14:53:54,251 - wazuh_testing - DEBUG - 2022/02/11 18:51:45 wazuh-dbd: INFO: Database not configured. Clean exit. 2022-02-11 14:53:54,251 - wazuh_testing - DEBUG - 2022/02/11 18:52:42 wazuh-syscheckd[15434] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-11 14:53:54,251 - wazuh_testing - DEBUG - 2022/02/11 18:51:45 wazuh-integratord: INFO: Remote integrations not configured. Clean exit. 2022-02-11 14:53:54,251 - wazuh_testing - DEBUG - 2022/02/11 18:52:42 wazuh-syscheckd[15434] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-11 14:53:54,251 - wazuh_testing - DEBUG - 2022/02/11 18:51:45 wazuh-agentlessd: INFO: Not configured. Exiting. 2022-02-11 14:53:54,251 - wazuh_testing - DEBUG - 2022/02/11 18:51:45 wazuh-authd: INFO: Started (pid: 13465). 2022-02-11 14:53:54,251 - wazuh_testing - DEBUG - 2022/02/11 18:52:42 wazuh-syscheckd[15434] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-11 14:53:54,252 - wazuh_testing - DEBUG - 2022/02/11 18:51:45 wazuh-authd: INFO: Accepting connections on port 1515. No password required. 2022-02-11 14:53:54,252 - wazuh_testing - DEBUG - 2022/02/11 18:52:42 wazuh-syscheckd[15434] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 14:53:54,252 - wazuh_testing - DEBUG - 2022/02/11 18:51:45 wazuh-authd: INFO: Setting network timeout to 1.000000 sec. 2022-02-11 14:53:54,252 - wazuh_testing - DEBUG - 2022/02/11 18:52:42 wazuh-syscheckd[15434] create_db.c:220 at fim_scan(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-11 14:53:54,252 - wazuh_testing - DEBUG - 2022/02/11 18:51:45 wazuh-db[13476] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 14:53:54,252 - wazuh_testing - DEBUG - 2022/02/11 18:52:42 wazuh-syscheckd[15434] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 14:53:54,252 - wazuh_testing - DEBUG - 2022/02/11 18:51:45 wazuh-db[13476] main.c:101 at main(): DEBUG: Wazuh home directory: /var/ossec 2022-02-11 14:53:54,252 - wazuh_testing - DEBUG - 2022/02/11 18:52:42 wazuh-syscheckd[15434] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644601962}} 2022-02-11 14:53:54,252 - wazuh_testing - DEBUG - 2022/02/11 18:51:45 wazuh-db[13476] main.c:122 at main(): DEBUG: Template file removed: /var/ossec/queue/db/.template.db 2022-02-11 14:53:54,252 - wazuh_testing - DEBUG - 2022/02/11 18:52:42 wazuh-syscheckd[15434] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.324 sec (0.320 clock sec) 2022-02-11 14:53:54,253 - wazuh_testing - DEBUG - 2022/02/11 18:52:42 wazuh-syscheckd[15434] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1620, path count: 1626 2022-02-11 14:53:54,253 - wazuh_testing - DEBUG - 2022/02/11 18:51:45 wazuh-db[13476] main.c:178 at main(): INFO: Started (pid: 13478). 2022-02-11 14:53:54,253 - wazuh_testing - DEBUG - 2022/02/11 18:51:46 wazuh-execd: INFO: (1350): Active response disabled. 2022-02-11 14:53:54,253 - wazuh_testing - DEBUG - 2022/02/11 18:53:03 wazuh-syscheckd[15434] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 14:53:54,253 - wazuh_testing - DEBUG - 2022/02/11 18:51:46 wazuh-execd: INFO: Started (pid: 13501). 2022-02-11 14:53:54,253 - wazuh_testing - DEBUG - 2022/02/11 18:53:03 wazuh-syscheckd[15434] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644601983}} 2022-02-11 14:53:54,253 - wazuh_testing - DEBUG - 2022/02/11 18:51:47 wazuh-analysisd: INFO: Total rules enabled: '3882' 2022-02-11 14:53:54,253 - wazuh_testing - DEBUG - 2022/02/11 18:53:03 wazuh-syscheckd[15434] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 14:53:54,253 - wazuh_testing - DEBUG - 2022/02/11 18:51:47 wazuh-analysisd: INFO: Started (pid: 13515). 2022-02-11 14:53:54,253 - wazuh_testing - DEBUG - 2022/02/11 18:53:03 wazuh-syscheckd[15434] fim_db.c:436 at fim_db_check_transaction(): DEBUG: Database transaction completed. 2022-02-11 14:53:54,253 - wazuh_testing - DEBUG - 2022/02/11 18:51:47 wazuh-db[13476] main.c:290 at run_dealer(): DEBUG: New client connected (6). 2022-02-11 14:53:54,253 - wazuh_testing - DEBUG - 2022/02/11 18:53:03 wazuh-syscheckd[15434] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-11 14:53:54,254 - wazuh_testing - DEBUG - 2022/02/11 18:51:47 wazuh-analysisd: INFO: (7200): Logtest started 2022-02-11 14:53:54,254 - wazuh_testing - DEBUG - 2022/02/11 18:53:03 wazuh-syscheckd[15434] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-11 14:53:54,254 - wazuh_testing - DEBUG - 2022/02/11 18:51:48 wazuh-syscheckd[13610] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 14:53:54,254 - wazuh_testing - DEBUG - 2022/02/11 18:53:03 wazuh-syscheckd[15434] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-11 14:53:54,254 - wazuh_testing - DEBUG - 2022/02/11 18:51:48 wazuh-syscheckd[13610] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 14:53:54,254 - wazuh_testing - DEBUG - 2022/02/11 18:53:03 wazuh-syscheckd[15434] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-11 14:53:54,254 - wazuh_testing - DEBUG - 2022/02/11 18:51:48 wazuh-syscheckd[13610] syscheck-config.c:122 at organize_syscheck_dirs(): DEBUG: No directory entries to organize in syscheck configuration. 2022-02-11 14:53:54,254 - wazuh_testing - DEBUG - 2022/02/11 18:53:03 wazuh-syscheckd[15434] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 14:53:54,254 - wazuh_testing - DEBUG - 2022/02/11 18:51:48 wazuh-syscheckd[13610] main.c:118 at main(): INFO: (6678): No directory provided for syscheck to monitor. 2022-02-11 14:53:54,254 - wazuh_testing - DEBUG - 2022/02/11 18:53:03 wazuh-syscheckd[15434] create_db.c:220 at fim_scan(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-11 14:53:54,254 - wazuh_testing - DEBUG - 2022/02/11 18:51:48 wazuh-syscheckd[13610] main.c:136 at main(): INFO: (6001): File integrity monitoring disabled. 2022-02-11 14:53:54,254 - wazuh_testing - DEBUG - 2022/02/11 18:53:03 wazuh-syscheckd[15434] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 14:53:54,254 - wazuh_testing - DEBUG - 2022/02/11 18:51:48 rootcheck[13610] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled. 2022-02-11 14:53:54,255 - wazuh_testing - DEBUG - 2022/02/11 18:53:03 wazuh-syscheckd[15434] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644601983}} 2022-02-11 14:53:54,255 - wazuh_testing - DEBUG - 2022/02/11 18:51:48 wazuh-syscheckd[13610] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:53:54,255 - wazuh_testing - DEBUG - 2022/02/11 18:53:03 wazuh-syscheckd[15434] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.321 sec (0.318 clock sec) 2022-02-11 14:53:54,255 - wazuh_testing - DEBUG - 2022/02/11 18:51:48 wazuh-syscheckd[13610] syscom.c:123 at syscom_main(): DEBUG: (6284): Local requests thread ready. 2022-02-11 14:53:54,255 - wazuh_testing - DEBUG - 2022/02/11 18:53:03 wazuh-syscheckd[15434] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1620, path count: 1626 2022-02-11 14:53:54,255 - wazuh_testing - DEBUG - 2022/02/11 18:51:48 wazuh-syscheckd[13610] mq_op.c:47 at StartMQ(): DEBUG: Connected succesfully to 'queue/sockets/queue' after 0 attempts 2022-02-11 14:53:54,255 - wazuh_testing - DEBUG - 2022/02/11 18:53:24 wazuh-syscheckd[15434] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 14:53:54,255 - wazuh_testing - DEBUG - 2022/02/11 18:51:48 wazuh-syscheckd[13610] mq_op.c:48 at StartMQ(): DEBUG: (unix_domain) Maximum send buffer set to: '212992'. 2022-02-11 14:53:54,255 - wazuh_testing - DEBUG - 2022/02/11 18:53:24 wazuh-syscheckd[15434] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644602004}} 2022-02-11 14:53:54,255 - wazuh_testing - DEBUG - 2022/02/11 18:51:48 wazuh-syscheckd[13610] main.c:185 at main(): INFO: Started (pid: 13612). 2022-02-11 14:53:54,255 - wazuh_testing - DEBUG - 2022/02/11 18:53:24 wazuh-syscheckd[15434] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 14:53:54,255 - wazuh_testing - DEBUG - 2022/02/11 18:51:48 wazuh-syscheckd[13610] main.c:215 at main(): DEBUG: (6357): Maximum disk quota size limit configured to '1048576 KB'. 2022-02-11 14:53:54,255 - wazuh_testing - DEBUG - 2022/02/11 18:53:24 wazuh-syscheckd[15434] fim_db.c:436 at fim_db_check_transaction(): DEBUG: Database transaction completed. 2022-02-11 14:53:54,256 - wazuh_testing - DEBUG - 2022/02/11 18:51:48 wazuh-syscheckd[13610] run_check.c:194 at start_daemon(): DEBUG: (6320): Setting process priority to: '10' 2022-02-11 14:53:54,256 - wazuh_testing - DEBUG - 2022/02/11 18:53:24 wazuh-syscheckd[15434] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-11 14:53:54,256 - wazuh_testing - DEBUG - 2022/02/11 18:51:48 wazuh-syscheckd[13610] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:53:54,256 - wazuh_testing - DEBUG - 2022/02/11 18:53:24 wazuh-syscheckd[15434] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-11 14:53:54,256 - wazuh_testing - DEBUG - 2022/02/11 18:51:48 wazuh-syscheckd[13610] run_check.c:229 at start_daemon(): INFO: (6000): Starting daemon... 2022-02-11 14:53:54,256 - wazuh_testing - DEBUG - 2022/02/11 18:53:24 wazuh-syscheckd[15434] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-11 14:53:54,256 - wazuh_testing - DEBUG - 2022/02/11 18:51:48 wazuh-syscheckd[13610] run_check.c:232 at start_daemon(): INFO: (6010): File integrity monitoring scan frequency: 43200 seconds 2022-02-11 14:53:54,256 - wazuh_testing - DEBUG - 2022/02/11 18:53:24 wazuh-syscheckd[15434] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-11 14:53:54,256 - wazuh_testing - DEBUG - 2022/02/11 18:51:48 wazuh-syscheckd[13610] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 14:53:54,256 - wazuh_testing - DEBUG - 2022/02/11 18:53:25 wazuh-syscheckd[15434] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 14:53:54,256 - wazuh_testing - DEBUG - 2022/02/11 18:51:48 wazuh-syscheckd[13610] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644601908}} 2022-02-11 14:53:54,256 - wazuh_testing - DEBUG - 2022/02/11 18:53:25 wazuh-syscheckd[15434] create_db.c:220 at fim_scan(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-11 14:53:54,256 - wazuh_testing - DEBUG - 2022/02/11 18:51:48 wazuh-syscheckd[13610] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 14:53:54,256 - wazuh_testing - DEBUG - 2022/02/11 18:53:25 wazuh-syscheckd[15434] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 14:53:54,256 - wazuh_testing - DEBUG - 2022/02/11 18:51:48 wazuh-syscheckd[13610] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 14:53:54,257 - wazuh_testing - DEBUG - 2022/02/11 18:53:25 wazuh-syscheckd[15434] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644602005}} 2022-02-11 14:53:54,257 - wazuh_testing - DEBUG - 2022/02/11 18:51:48 wazuh-db[13476] main.c:290 at run_dealer(): DEBUG: New client connected (10). 2022-02-11 14:53:54,257 - wazuh_testing - DEBUG - 2022/02/11 18:53:25 wazuh-syscheckd[15434] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.322 sec (0.319 clock sec) 2022-02-11 14:53:54,257 - wazuh_testing - DEBUG - 2022/02/11 18:51:48 wazuh-syscheckd[13610] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 14:53:54,257 - wazuh_testing - DEBUG - 2022/02/11 18:53:25 wazuh-syscheckd[15434] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1620, path count: 1626 2022-02-11 14:53:54,257 - wazuh_testing - DEBUG - 2022/02/11 18:51:48 wazuh-syscheckd[13610] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644601908}} 2022-02-11 14:53:54,257 - wazuh_testing - DEBUG - 2022/02/11 18:53:44 wazuh-logcollector: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:53:54,257 - wazuh_testing - DEBUG - 2022/02/11 18:51:48 wazuh-syscheckd[13610] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.000 sec (0.000 clock sec) 2022-02-11 14:53:54,257 - wazuh_testing - DEBUG - 2022/02/11 18:53:45 wazuh-syscheckd[15434] sig_op.c:49 at HandleSIG(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:53:54,257 - wazuh_testing - DEBUG - 2022/02/11 18:51:48 wazuh-syscheckd[13610] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 0, path count: 0 2022-02-11 14:53:54,257 - wazuh_testing - DEBUG - 2022/02/11 18:53:45 wazuh-agentd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:53:54,257 - wazuh_testing - DEBUG - 2022/02/11 18:51:48 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 000 query: syscheck scan_info_update start_scan 1644601908 2022-02-11 14:53:54,257 - wazuh_testing - DEBUG - 2022/02/11 18:53:45 wazuh-execd: INFO: (1314): Shutdown received. Deleting responses. 2022-02-11 14:53:54,257 - wazuh_testing - DEBUG - 2022/02/11 18:51:48 wazuh-syscheckd[13610] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:53:54,257 - wazuh_testing - DEBUG - 2022/02/11 18:53:45 wazuh-execd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:53:54,258 - wazuh_testing - DEBUG - 2022/02/11 18:51:48 wazuh-db[13476] main.c:290 at run_dealer(): DEBUG: New client connected (12). 2022-02-11 14:53:54,258 - wazuh_testing - DEBUG - 2022/02/11 18:53:45 wazuh-syscheckd[16055] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 14:53:54,258 - wazuh_testing - DEBUG - 2022/02/11 18:51:48 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 000 query: syscheck scan_info_update end_scan 1644601908 2022-02-11 14:53:54,258 - wazuh_testing - DEBUG - 2022/02/11 18:53:45 wazuh-syscheckd[16055] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 14:53:54,258 - wazuh_testing - DEBUG - 2022/02/11 18:53:45 wazuh-syscheckd[16055] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-11 14:53:54,258 - wazuh_testing - DEBUG - 2022/02/11 18:51:48 wazuh-syscheckd[13610] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:53:54,258 - wazuh_testing - DEBUG - 2022/02/11 18:53:45 wazuh-syscheckd[16055] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-11 14:53:54,258 - wazuh_testing - DEBUG - 2022/02/11 18:51:48 wazuh-syscheckd[13610] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:53:54,258 - wazuh_testing - DEBUG - 2022/02/11 18:53:45 wazuh-syscheckd[16055] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-11 14:53:54,258 - wazuh_testing - DEBUG - 2022/02/11 18:51:48 wazuh-syscheckd[13610] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. 2022-02-11 14:53:54,258 - wazuh_testing - DEBUG - 2022/02/11 18:53:45 wazuh-syscheckd[16055] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-11 14:53:54,258 - wazuh_testing - DEBUG - 2022/02/11 18:51:48 wazuh-syscheckd[13610] run_check.c:568 at symlink_checker_thread(): DEBUG: (6033): Starting symbolic link updater. Interval '600'. 2022-02-11 14:53:54,258 - wazuh_testing - DEBUG - 2022/02/11 18:53:45 wazuh-syscheckd[16055] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-11 14:53:54,259 - wazuh_testing - DEBUG - 2022/02/11 18:51:48 wazuh-syscheckd[13610] run_check.c:82 at fim_send_sync_msg(): DEBUG: (6317): Sending integrity control message: {"component":"fim_file","type":"integrity_clear","data":{"id":1644601908,"version":2}} 2022-02-11 14:53:54,259 - wazuh_testing - DEBUG - 2022/02/11 18:53:45 wazuh-syscheckd[16055] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$\|.swp$ 2022-02-11 14:53:54,259 - wazuh_testing - DEBUG - 2022/02/11 18:51:48 wazuh-syscheckd[13610] fim_sync.c:70 at fim_run_integrity(): DEBUG: Finished calculating FIM integrity. Time: 0.000 seconds. 2022-02-11 14:53:54,259 - wazuh_testing - DEBUG - 2022/02/11 18:53:45 wazuh-syscheckd[16055] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$\|.swp$ OK? 2022-02-11 14:53:54,259 - wazuh_testing - DEBUG - 2022/02/11 18:51:48 wazuh-db[13476] main.c:290 at run_dealer(): DEBUG: New client connected (13). 2022-02-11 14:53:54,259 - wazuh_testing - DEBUG - 2022/02/11 18:53:45 wazuh-syscheckd[16055] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-11 14:53:54,259 - wazuh_testing - DEBUG - 2022/02/11 18:51:48 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 000 query: fim_file integrity_clear {"id":1644601908,"version":2} 2022-02-11 14:53:54,259 - wazuh_testing - DEBUG - 2022/02/11 18:53:45 wazuh-syscheckd[16055] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-11 14:53:54,259 - wazuh_testing - DEBUG - 2022/02/11 18:51:49 wazuh-remoted: INFO: Started (pid: 13631). Listening on port 1514/TCP (secure). 2022-02-11 14:53:54,259 - wazuh_testing - DEBUG - 2022/02/11 18:53:45 wazuh-syscheckd[16055] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 14:53:54,259 - wazuh_testing - DEBUG - 2022/02/11 18:51:49 wazuh-db[13476] main.c:290 at run_dealer(): DEBUG: New client connected (11). 2022-02-11 14:53:54,260 - wazuh_testing - DEBUG - 2022/02/11 18:53:45 wazuh-syscheckd[16055] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 14:53:54,260 - wazuh_testing - DEBUG - 2022/02/11 18:51:49 wazuh-db[13476] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: reset-agents-connection synced 2022-02-11 14:53:54,260 - wazuh_testing - DEBUG - 2022/02/11 18:53:45 wazuh-syscheckd[16055] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 14:53:54,260 - wazuh_testing - DEBUG - 2022/02/11 18:51:49 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 11 disconnected. 2022-02-11 14:53:54,260 - wazuh_testing - DEBUG - 2022/02/11 18:53:45 wazuh-syscheckd[16055] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 14:53:54,260 - wazuh_testing - DEBUG - 2022/02/11 18:51:49 wazuh-remoted: INFO: (1410): Reading authentication keys file. 2022-02-11 14:53:54,260 - wazuh_testing - DEBUG - 2022/02/11 18:53:45 wazuh-syscheckd[16055] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 14:53:54,260 - wazuh_testing - DEBUG - 2022/02/11 18:51:50 wazuh-logcollector: INFO: (1950): Analyzing file: '/var/ossec/logs/active-responses.log'. 2022-02-11 14:53:54,260 - wazuh_testing - DEBUG - 2022/02/11 18:53:45 wazuh-syscheckd[16055] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 14:53:54,260 - wazuh_testing - DEBUG - 2022/02/11 18:51:50 wazuh-logcollector: INFO: (1950): Analyzing file: '/var/log/dpkg.log'. 2022-02-11 14:53:54,260 - wazuh_testing - DEBUG - 2022/02/11 18:53:45 wazuh-execd: INFO: Started (pid: 16068). 2022-02-11 14:53:54,260 - wazuh_testing - DEBUG - 2022/02/11 18:51:50 wazuh-logcollector: INFO: Started (pid: 13662). 2022-02-11 14:53:54,261 - wazuh_testing - DEBUG - 2022/02/11 18:53:46 wazuh-agentd: INFO: (1410): Reading authentication keys file. 2022-02-11 14:53:54,261 - wazuh_testing - DEBUG - 2022/02/11 18:51:50 wazuh-monitord: INFO: Started (pid: 13678). 2022-02-11 14:53:54,261 - wazuh_testing - DEBUG - 2022/02/11 18:53:46 wazuh-agentd: INFO: Using notify time: 10 and max time to reconnect: 60 2022-02-11 14:53:54,261 - wazuh_testing - DEBUG - 2022/02/11 18:51:51 wazuh-modulesd: INFO: Started (pid: 13694). 2022-02-11 14:53:54,261 - wazuh_testing - DEBUG - 2022/02/11 18:53:46 wazuh-agentd: INFO: Version detected -> Linux \|wazuh-agent1 \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64 [Debian GNU/Linux\|debian: 10 (buster)] - Wazuh v4.2.5 2022-02-11 14:53:54,261 - wazuh_testing - DEBUG - 2022/02/11 18:51:51 wazuh-modulesd:agent-upgrade: INFO: (8153): Module Agent Upgrade started. 2022-02-11 14:53:54,262 - wazuh_testing - DEBUG - 2022/02/11 18:51:51 wazuh-modulesd:ciscat: INFO: Module disabled. Exiting... 2022-02-11 14:53:54,262 - wazuh_testing - DEBUG - 2022/02/11 18:53:46 wazuh-agentd: INFO: Started (pid: 16079). 2022-02-11 14:53:54,262 - wazuh_testing - DEBUG - 2022/02/11 18:51:51 wazuh-modulesd:osquery: INFO: Module disabled. Exiting... 2022-02-11 14:53:54,262 - wazuh_testing - DEBUG - 2022/02/11 18:51:51 sca: INFO: Module disabled. Exiting. 2022-02-11 14:53:54,262 - wazuh_testing - DEBUG - 2022/02/11 18:53:46 wazuh-agentd: INFO: Server IP Address: wazuh-manager/172.17.0.2 2022-02-11 14:53:54,262 - wazuh_testing - DEBUG - 2022/02/11 18:51:51 wazuh-modulesd:database: INFO: Module started. 2022-02-11 14:53:54,263 - wazuh_testing - DEBUG - 2022/02/11 18:51:51 wazuh-modulesd:download: INFO: Module started. 2022-02-11 14:53:54,263 - wazuh_testing - DEBUG - 2022/02/11 18:53:46 wazuh-agentd: INFO: Using AES as encryption method. 2022-02-11 14:53:54,263 - wazuh_testing - DEBUG - 2022/02/11 18:51:51 wazuh-modulesd:syscollector: INFO: Module disabled. Exiting... 2022-02-11 14:53:54,263 - wazuh_testing - DEBUG - 2022/02/11 18:53:46 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 14:53:54,263 - wazuh_testing - DEBUG - 2022/02/11 18:51:51 wazuh-db[13476] main.c:290 at run_dealer(): DEBUG: New client connected (11). 2022-02-11 14:53:54,263 - wazuh_testing - DEBUG - 2022/02/11 18:51:51 wazuh-modulesd:control: INFO: Starting control thread. 2022-02-11 14:53:54,263 - wazuh_testing - DEBUG - 2022/02/11 18:53:46 wazuh-agentd: INFO: (4102): Connected to the server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 14:53:54,263 - wazuh_testing - DEBUG - 2022/02/11 18:51:51 wazuh-db[13476] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-name {"id":0,"name":"wazuh-manager"} 2022-02-11 14:53:54,263 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 14:53:54,263 - wazuh_testing - DEBUG - 2022/02/11 18:51:51 wazuh-modulesd:task-manager: INFO: (8200): Module Task Manager started. 2022-02-11 14:53:54,263 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 14:53:54,264 - wazuh_testing - DEBUG - 2022/02/11 18:51:51 wazuh-db[13476] main.c:290 at run_dealer(): DEBUG: New client connected (16). 2022-02-11 14:53:54,264 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-11 14:53:54,264 - wazuh_testing - DEBUG - 2022/02/11 18:51:51 wazuh-db[13476] wdb_parser.c:928 at wdb_parse(): DEBUG: Task query: set_timeout {"now":1644601911,"interval":900} 2022-02-11 14:53:54,264 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-11 14:53:54,264 - wazuh_testing - DEBUG - 2022/02/11 18:51:51 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 16 disconnected. 2022-02-11 14:53:54,264 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-11 14:53:54,264 - wazuh_testing - DEBUG - 2022/02/11 18:51:51 wazuh-db[13476] main.c:290 at run_dealer(): DEBUG: New client connected (16). 2022-02-11 14:53:54,264 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-11 14:53:54,265 - wazuh_testing - DEBUG - 2022/02/11 18:51:51 wazuh-db[13476] wdb_parser.c:928 at wdb_parse(): DEBUG: Task query: delete_old {"timestamp":1643997111} 2022-02-11 14:53:54,265 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-11 14:53:54,265 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$\|.swp$ 2022-02-11 14:53:54,265 - wazuh_testing - DEBUG - 2022/02/11 18:51:51 wazuh-db[13476] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":0,"version":"Wazuh v4.2.5","manager_host":"wazuh-manager","node_name":"wazuh-master","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux \|wazuh-manager \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64","os_arch":"x86_64"} 2022-02-11 14:53:54,265 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$\|.swp$ OK? 2022-02-11 14:53:54,265 - wazuh_testing - DEBUG - 2022/02/11 18:51:51 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 16 disconnected. 2022-02-11 14:53:54,265 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-11 14:53:54,266 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-11 14:53:54,266 - wazuh_testing - DEBUG - 2022/02/11 18:51:51 wazuh-db[13476] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: insert-agent {"id":1,"name":"wazuh-agent1","register_ip":"any","internal_key":"1111111111111111111111111111111111111111111111111111111111111111","group":"default","date_add":0} 2022-02-11 14:53:54,266 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 14:53:54,266 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 14:53:54,266 - wazuh_testing - DEBUG - 2022/02/11 18:51:51 wazuh-db[13476] wdb_global.c:89 at wdb_global_insert_agent(): DEBUG: SQLite: UNIQUE constraint failed: agent.id 2022-02-11 14:53:54,266 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 14:53:54,266 - wazuh_testing - DEBUG - 2022/02/11 18:51:51 wazuh-db[13476] wdb_parser.c:4784 at wdb_parse_global_insert_agent(): DEBUG: Global DB Cannot execute SQL query; err database queue/db/global.db: UNIQUE constraint failed: agent.id 2022-02-11 14:53:54,266 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 14:53:54,266 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 14:53:54,267 - wazuh_testing - DEBUG - 2022/02/11 18:51:51 wazuh-db[13476] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-group {"id":1,"group":"default"} 2022-02-11 14:53:54,267 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 14:53:54,267 - wazuh_testing - DEBUG - 2022/02/11 18:51:51 wazuh-db[13476] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: delete-agent-belong 1 2022-02-11 14:53:54,267 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 rootcheck[16091] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled. 2022-02-11 14:53:54,267 - wazuh_testing - DEBUG - 2022/02/11 18:51:51 wazuh-db[13476] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: find-group default 2022-02-11 14:53:54,267 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:53:54,267 - wazuh_testing - DEBUG - 2022/02/11 18:51:51 wazuh-db[13476] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: insert-agent-belong {"id_group":1,"id_agent":1} 2022-02-11 14:53:54,267 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] syscom.c:123 at syscom_main(): DEBUG: (6284): Local requests thread ready. 2022-02-11 14:53:54,267 - wazuh_testing - DEBUG - 2022/02/11 18:51:51 wazuh-db[13476] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: get-all-agents last_id 0 2022-02-11 14:53:54,268 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] mq_op.c:47 at StartMQ(): DEBUG: Connected succesfully to 'queue/sockets/queue' after 0 attempts 2022-02-11 14:53:54,268 - wazuh_testing - DEBUG - 2022/02/11 18:51:51 wazuh-db[13476] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: select-groups 2022-02-11 14:53:54,268 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] mq_op.c:48 at StartMQ(): DEBUG: (unix_domain) Maximum send buffer set to: '212992'. 2022-02-11 14:53:54,268 - wazuh_testing - DEBUG - 2022/02/11 18:51:51 wazuh-db[13476] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: find-group default 2022-02-11 14:53:54,268 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] main.c:185 at main(): INFO: Started (pid: 16093). 2022-02-11 14:53:54,268 - wazuh_testing - DEBUG - 2022/02/11 18:51:51 wazuh-db[13476] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: get-all-agents last_id 0 2022-02-11 14:53:54,268 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] main.c:193 at main(): INFO: (6003): Monitoring path: '/bin', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 14:53:54,268 - wazuh_testing - DEBUG - 2022/02/11 18:51:51 wazuh-db[13476] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: select-agent-group 1 2022-02-11 14:53:54,269 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] main.c:193 at main(): INFO: (6003): Monitoring path: '/boot', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 14:53:54,269 - wazuh_testing - DEBUG - 2022/02/11 18:51:51 wazuh-db[13476] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: delete-agent-belong 1 2022-02-11 14:53:54,269 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] main.c:193 at main(): INFO: (6003): Monitoring path: '/etc', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 14:53:54,269 - wazuh_testing - DEBUG - 2022/02/11 18:51:51 wazuh-db[13476] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: find-group default 2022-02-11 14:53:54,269 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] main.c:193 at main(): INFO: (6003): Monitoring path: '/sbin', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 14:53:54,269 - wazuh_testing - DEBUG - 2022/02/11 18:51:51 wazuh-db[13476] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: insert-agent-belong {"id_group":1,"id_agent":1} 2022-02-11 14:53:54,269 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir1', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 14:53:54,269 - wazuh_testing - DEBUG - 2022/02/11 18:51:51 wazuh-db[13476] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: select-agent-name 1 2022-02-11 14:53:54,269 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir2', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| realtime'. 2022-02-11 14:53:54,270 - wazuh_testing - DEBUG - 2022/02/11 18:51:51 wazuh-db[13476] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: select-agent-name 1 2022-02-11 14:53:54,270 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir3', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| whodata'. 2022-02-11 14:53:54,270 - wazuh_testing - DEBUG - 2022/02/11 18:51:56 wazuh-db[13476] main.c:290 at run_dealer(): DEBUG: New client connected (16). 2022-02-11 14:53:54,270 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/bin', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 14:53:54,270 - wazuh_testing - DEBUG - 2022/02/11 18:51:56 wazuh-db[13476] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-keepalive {"id":1,"connection_status":"pending","sync_status":"synced"} 2022-02-11 14:53:54,270 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/sbin', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 14:53:54,270 - wazuh_testing - DEBUG - 2022/02/11 18:51:56 wazuh-db[13476] main.c:290 at run_dealer(): DEBUG: New client connected (18). 2022-02-11 14:53:54,270 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] main.c:215 at main(): DEBUG: (6357): Maximum disk quota size limit configured to '1048576 KB'. 2022-02-11 14:53:54,271 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mtab' 2022-02-11 14:53:54,271 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/hosts.deny' 2022-02-11 14:53:54,271 - wazuh_testing - DEBUG - 2022/02/11 18:51:56 wazuh-db[13476] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux \|wazuh-agent1 \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64","os_arch":"x86_64"} 2022-02-11 14:53:54,271 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mail/statistics' 2022-02-11 14:53:54,271 - wazuh_testing - DEBUG - 2022/02/11 18:51:58 wazuh-db[13476] wdb.c:918 at wdb_commit_old(): DEBUG: Agent 'mitre' database commited. Time: 0.023 ms. 2022-02-11 14:53:54,271 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random-seed' 2022-02-11 14:53:54,271 - wazuh_testing - DEBUG - 2022/02/11 18:51:59 wazuh-db[13476] main.c:290 at run_dealer(): DEBUG: New client connected (19). 2022-02-11 14:53:54,272 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random.seed' 2022-02-11 14:53:54,272 - wazuh_testing - DEBUG - 2022/02/11 18:51:59 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1644601904 2022-02-11 14:53:54,272 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/adjtime' 2022-02-11 14:53:54,272 - wazuh_testing - DEBUG - 2022/02/11 18:51:59 wazuh-db[13476] main.c:290 at run_dealer(): DEBUG: New client connected (20). 2022-02-11 14:53:54,272 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/httpd/logs' 2022-02-11 14:53:54,272 - wazuh_testing - DEBUG - 2022/02/11 18:51:59 wazuh-db[13476] main.c:290 at run_dealer(): DEBUG: New client connected (21). 2022-02-11 14:53:54,272 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/utmpx' 2022-02-11 14:53:54,272 - wazuh_testing - DEBUG - 2022/02/11 18:51:59 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck delete /testdir1/testdir1.txt 2022-02-11 14:53:54,272 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/wtmpx' 2022-02-11 14:53:54,273 - wazuh_testing - DEBUG - 2022/02/11 18:51:59 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update end_scan 1644601919 2022-02-11 14:53:54,273 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/cups/certs' 2022-02-11 14:53:54,273 - wazuh_testing - DEBUG - 2022/02/11 18:51:59 wazuh-db[13476] main.c:290 at run_dealer(): DEBUG: New client connected (23). 2022-02-11 14:53:54,273 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/dumpdates' 2022-02-11 14:53:54,273 - wazuh_testing - DEBUG - 2022/02/11 18:51:59 wazuh-db[13476] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: get-labels 1 2022-02-11 14:53:54,273 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/svc/volatile' 2022-02-11 14:53:54,273 - wazuh_testing - DEBUG - 2022/02/11 18:52:02 wazuh-db[13476] wdb.c:918 at wdb_commit_old(): DEBUG: Agent 'tasks' database commited. Time: 0.045 ms. 2022-02-11 14:53:54,273 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/security' 2022-02-11 14:53:54,274 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/debug' 2022-02-11 14:53:54,274 - wazuh_testing - DEBUG - 2022/02/11 18:52:06 wazuh-db[13476] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux \|wazuh-agent1 \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64","os_arch":"x86_64"} 2022-02-11 14:53:54,274 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/dev/core' 2022-02-11 14:53:54,274 - wazuh_testing - DEBUG - 2022/02/11 18:52:16 wazuh-db[13476] main.c:290 at run_dealer(): DEBUG: New client connected (22). 2022-02-11 14:53:54,274 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '^/proc' 2022-02-11 14:53:54,274 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '.log$\|.swp$' 2022-02-11 14:53:54,275 - wazuh_testing - DEBUG - 2022/02/11 18:52:16 wazuh-db[13476] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux \|wazuh-agent1 \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64","os_arch":"x86_64"} 2022-02-11 14:53:54,275 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] main.c:235 at main(): INFO: (6004): No diff for file: '/etc/ssl/private.key' 2022-02-11 14:53:54,275 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] main.c:245 at main(): INFO: (6016): Directory set for real time monitoring: '/testdir2'. 2022-02-11 14:53:54,275 - wazuh_testing - DEBUG - 2022/02/11 18:52:20 wazuh-db[13476] main.c:290 at run_dealer(): DEBUG: New client connected (24). 2022-02-11 14:53:54,275 - wazuh_testing - DEBUG - 2022/02/11 18:52:20 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1644601940 2022-02-11 14:53:54,275 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] syscheck_audit.c:243 at audit_init(): WARNING: (6924): Who-data engine cannot start because Auditd is not running. 2022-02-11 14:53:54,276 - wazuh_testing - DEBUG - 2022/02/11 18:52:21 wazuh-db[13476] main.c:290 at run_dealer(): DEBUG: New client connected (25). 2022-02-11 14:53:54,276 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] main.c:264 at main(): WARNING: (6913): Who-data engine could not start. Switching who-data to real-time. 2022-02-11 14:53:54,276 - wazuh_testing - DEBUG - 2022/02/11 18:52:21 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update end_scan 1644601941 2022-02-11 14:53:54,276 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] run_check.c:194 at start_daemon(): DEBUG: (6320): Setting process priority to: '10' 2022-02-11 14:53:54,276 - wazuh_testing - DEBUG - 2022/02/11 18:52:21 wazuh-db[13476] main.c:290 at run_dealer(): DEBUG: New client connected (26). 2022-02-11 14:53:54,276 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:53:54,277 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] run_check.c:229 at start_daemon(): INFO: (6000): Starting daemon... 2022-02-11 14:53:54,277 - wazuh_testing - DEBUG - 2022/02/11 18:52:21 wazuh-db[13476] wdb_parser.c:928 at wdb_parse(): DEBUG: Task query: upgrade_cancel_tasks {"node":"wazuh-master"} 2022-02-11 14:53:54,277 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] run_check.c:232 at start_daemon(): INFO: (6010): File integrity monitoring scan frequency: 20 seconds 2022-02-11 14:53:54,278 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 14:53:54,278 - wazuh_testing - DEBUG - 2022/02/11 18:52:21 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 26 disconnected. 2022-02-11 14:53:54,278 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644602027}} 2022-02-11 14:53:54,278 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 14:53:54,278 - wazuh_testing - DEBUG - 2022/02/11 18:52:26 wazuh-db[13476] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux \|wazuh-agent1 \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64","os_arch":"x86_64"} 2022-02-11 14:53:54,279 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-11 14:53:54,279 - wazuh_testing - DEBUG - 2022/02/11 18:52:32 wazuh-db[13476] wdb.c:918 at wdb_commit_old(): DEBUG: Agent 'tasks' database commited. Time: 0.060 ms. 2022-02-11 14:53:54,279 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-11 14:53:54,279 - wazuh_testing - DEBUG - 2022/02/11 18:52:36 wazuh-db[13476] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux \|wazuh-agent1 \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64","os_arch":"x86_64"} 2022-02-11 14:53:54,279 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-11 14:53:54,280 - wazuh_testing - DEBUG - 2022/02/11 18:52:42 wazuh-db[13476] main.c:290 at run_dealer(): DEBUG: New client connected (26). 2022-02-11 14:53:54,280 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-11 14:53:54,280 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 14:53:54,280 - wazuh_testing - DEBUG - 2022/02/11 18:52:42 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1644601962 2022-02-11 14:53:54,281 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 14:53:54,281 - wazuh_testing - DEBUG - 2022/02/11 18:52:42 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update end_scan 1644601962 2022-02-11 14:53:54,281 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644602027}} 2022-02-11 14:53:54,281 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.328 sec (0.327 clock sec) 2022-02-11 14:53:54,281 - wazuh_testing - DEBUG - 2022/02/11 18:52:46 wazuh-db[13476] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux \|wazuh-agent1 \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64","os_arch":"x86_64"} 2022-02-11 14:53:54,282 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1621, path count: 1627 2022-02-11 14:53:54,282 - wazuh_testing - DEBUG - 2022/02/11 18:52:50 wazuh-db[13476] wdb.c:918 at wdb_commit_old(): DEBUG: Agent 'global' database commited. Time: 2.283 ms. 2022-02-11 14:53:54,282 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:53:54,282 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:53:54,282 - wazuh_testing - DEBUG - 2022/02/11 18:52:56 wazuh-db[13476] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux \|wazuh-agent1 \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64","os_arch":"x86_64"} 2022-02-11 14:53:54,282 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] run_check.c:387 at fim_run_realtime(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-11 14:53:54,282 - wazuh_testing - DEBUG - 2022/02/11 18:53:03 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1644601983 2022-02-11 14:53:54,283 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:53:54,283 - wazuh_testing - DEBUG - 2022/02/11 18:53:03 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update end_scan 1644601983 2022-02-11 14:53:54,283 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] run_check.c:543 at log_realtime_status(): INFO: (6012): Real-time file integrity monitoring started. 2022-02-11 14:53:54,283 - wazuh_testing - DEBUG - 2022/02/11 18:53:06 wazuh-db[13476] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux \|wazuh-agent1 \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64","os_arch":"x86_64"} 2022-02-11 14:53:54,283 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. 2022-02-11 14:53:54,284 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] run_check.c:568 at symlink_checker_thread(): DEBUG: (6033): Starting symbolic link updater. Interval '600'. 2022-02-11 14:53:54,284 - wazuh_testing - DEBUG - 2022/02/11 18:53:16 wazuh-db[13476] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux \|wazuh-agent1 \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64","os_arch":"x86_64"} 2022-02-11 14:53:54,284 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] run_check.c:82 at fim_send_sync_msg(): DEBUG: (6317): Sending integrity control message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1644602027,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"11cbd079915ee62c666637dc79878ff3b05e0aee"}} 2022-02-11 14:53:54,284 - wazuh_testing - DEBUG - 2022/02/11 18:53:24 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1644602004 2022-02-11 14:53:54,285 - wazuh_testing - DEBUG - 2022/02/11 18:53:25 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update end_scan 1644602005 2022-02-11 14:53:54,285 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-agent1 and message: .Sending integrity control message: (.+)$ 2022-02-11 14:53:54,285 - wazuh_testing - DEBUG - 2022/02/11 18:53:26 wazuh-db[13476] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux \|wazuh-agent1 \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64","os_arch":"x86_64"} 2022-02-11 14:53:54,286 - wazuh_testing - DEBUG - 2022/02/11 18:53:36 wazuh-db[13476] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux \|wazuh-agent1 \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64","os_arch":"x86_64"} 2022-02-11 14:53:54,286 - wazuh_testing - DEBUG - 2022/02/11 18:53:45 wazuh-db[13476] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-connection-status {"id":1,"connection_status":"disconnected","sync_status":"synced"} 2022-02-11 14:53:54,287 - wazuh_testing - DEBUG - 2022/02/11 18:53:45 wazuh-db[13476] main.c:290 at run_dealer(): DEBUG: New client connected (27). 2022-02-11 14:53:54,287 - wazuh_testing - DEBUG - 2022/02/11 18:53:45 wazuh-db[13476] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: get-labels 1 2022-02-11 14:53:54,287 - wazuh_testing - DEBUG - 2022/02/11 18:53:46 wazuh-db[13476] main.c:290 at run_dealer(): DEBUG: New client connected (28). 2022-02-11 14:53:54,287 - wazuh_testing - DEBUG - 2022/02/11 18:53:46 wazuh-db[13476] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-keepalive {"id":1,"connection_status":"pending","sync_status":"synced"} 2022-02-11 14:53:54,288 - wazuh_testing - DEBUG - 2022/02/11 18:53:50 wazuh-db[13476] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux \|wazuh-agent1 \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64","os_arch":"x86_64"} 2022-02-11 14:53:54,288 - wazuh_testing - DEBUG - 2022/02/11 18:53:50 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1644602027 2022-02-11 14:53:54,288 - wazuh_testing - DEBUG - 2022/02/11 18:53:50 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update end_scan 1644602027 2022-02-11 14:53:54,288 - wazuh_testing - DEBUG - 2022/02/11 18:53:50 wazuh-db[13476] main.c:290 at run_dealer(): DEBUG: New client connected (31). 2022-02-11 14:53:54,289 - wazuh_testing - DEBUG - 2022/02/11 18:53:50 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_global {"id":1644602027,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"11cbd079915ee62c666637dc79878ff3b05e0aee"} 2022-02-11 14:53:54,289 - wazuh_testing - DEBUG - 2022/02/11 18:53:50 wazuh-db[13476] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 2.115 ms. 2022-02-11 14:53:54,289 - wazuh_testing - DEBUG - 2022/02/11 18:53:50 wazuh-db[13476] main.c:290 at run_dealer(): DEBUG: New client connected (29). 2022-02-11 14:53:54,290 - wazuh_testing - DEBUG - 2022/02/11 18:53:50 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602027,"version":2,"begin":"/bin/bash","end":"/sbin/chcpu","tail":"/sbin/ctrlaltdel","checksum":"57402e3268a27191e04bfc132831045ee0296f32"} 2022-02-11 14:53:54,290 - wazuh_testing - DEBUG - 2022/02/11 18:53:50 wazuh-db[13476] main.c:290 at run_dealer(): DEBUG: New client connected (30). 2022-02-11 14:53:54,290 - wazuh_testing - DEBUG - 2022/02/11 18:53:50 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602027,"version":2,"begin":"/sbin/ctrlaltdel","end":"/usr/sbin/zic","checksum":"cdd30affc706a53f9a166760ac3a8c29082f190b"} 2022-02-11 14:53:54,290 - wazuh_testing - DEBUG - 2022/02/11 18:53:50 wazuh-db[13476] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.639 ms. 2022-02-11 14:53:54,291 - wazuh_testing - DEBUG - 2022/02/11 18:53:50 wazuh-db[13476] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 1.308 ms. 2022-02-11 14:53:54,291 - wazuh_testing - DEBUG - 2022/02/11 18:53:50 wazuh-db[13476] main.c:290 at run_dealer(): DEBUG: New client connected (32). 2022-02-11 14:53:54,291 - wazuh_testing - DEBUG - 2022/02/11 18:53:50 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602027,"version":2,"begin":"/sbin/ctrlaltdel","end":"/usr/bin/pdb","tail":"/usr/bin/pdb2","checksum":"8cf6899740a36e03a9a8eb51d4c13e335bbd9f7b"} 2022-02-11 14:53:54,292 - wazuh_testing - DEBUG - 2022/02/11 18:53:50 wazuh-db[13476] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.328 ms. 2022-02-11 14:53:54,292 - wazuh_testing - DEBUG - 2022/02/11 18:53:50 wazuh-db[13476] main.c:290 at run_dealer(): DEBUG: New client connected (33). 2022-02-11 14:53:54,292 - wazuh_testing - DEBUG - 2022/02/11 18:53:50 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602027,"version":2,"begin":"/usr/bin/pdb2","end":"/usr/sbin/zic","checksum":"f13d51f7876684d6bc17db143ee1529b892c54d2"} 2022-02-11 14:53:54,293 - wazuh_testing - DEBUG - 2022/02/11 18:53:50 wazuh-db[13476] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.486 ms. 2022-02-11 14:53:54,293 - wazuh_testing - DEBUG - 2022/02/11 18:53:50 wazuh-db[13476] main.c:290 at run_dealer(): DEBUG: New client connected (34). 2022-02-11 14:53:54,294 - wazuh_testing - DEBUG - 2022/02/11 18:53:50 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602027,"version":2,"begin":"/sbin/ctrlaltdel","end":"/usr/bin/dpkg-divert","tail":"/usr/bin/dpkg-genbuildinfo","checksum":"4117634674257c24391174cee8cd90ede8df70f1"} 2022-02-11 14:53:54,294 - wazuh_testing - DEBUG - 2022/02/11 18:53:50 wazuh-db[13476] main.c:290 at run_dealer(): DEBUG: New client connected (35). 2022-02-11 14:53:54,295 - wazuh_testing - DEBUG - 2022/02/11 18:53:50 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602027,"version":2,"begin":"/usr/bin/dpkg-genbuildinfo","end":"/usr/bin/pdb","checksum":"fcd12ca69011f5033c3706ba868e7f2983050598"} 2022-02-11 14:53:54,295 - wazuh_testing - DEBUG - 2022/02/11 18:53:50 wazuh-db[13476] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.287 ms. 2022-02-11 14:53:54,295 - wazuh_testing - DEBUG - 2022/02/11 18:53:50 wazuh-db[13476] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.118 ms. 2022-02-11 14:53:54,296 - wazuh_testing - DEBUG - 2022/02/11 18:53:50 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602027,"version":2,"begin":"/sbin/ctrlaltdel","end":"/usr/bin/apt-extracttemplates","tail":"/usr/bin/apt-ftparchive","checksum":"0e318043b7526f5862784ee7f31f941e29dfd7c5"} 2022-02-11 14:53:54,296 - wazuh_testing - DEBUG - 2022/02/11 18:53:50 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602027,"version":2,"begin":"/usr/bin/apt-ftparchive","end":"/usr/bin/dpkg-divert","checksum":"ab79628f5b16446ec1a1f2daeaf1afd2511680e1"} 2022-02-11 14:53:54,297 - wazuh_testing - DEBUG - 2022/02/11 18:53:50 wazuh-db[13476] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.053 ms. 2022-02-11 14:53:54,297 - wazuh_testing - DEBUG - 2022/02/11 18:53:50 wazuh-db[13476] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.042 ms. 2022-02-11 14:53:54,297 - wazuh_testing - DEBUG - 2022/02/11 18:53:50 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602027,"version":2,"begin":"/sbin/ctrlaltdel","end":"/sbin/mkhomedir_helper","tail":"/sbin/mkswap","checksum":"7a7df0bd9bb5154b28eb072bebe1af0b79c59afb"} 2022-02-11 14:53:54,298 - wazuh_testing - DEBUG - 2022/02/11 18:53:50 wazuh-db[13476] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.062 ms. 2022-02-11 14:53:54,298 - wazuh_testing - DEBUG - 2022/02/11 18:53:51 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602027,"version":2,"begin":"/sbin/mkswap","end":"/usr/bin/apt-extracttemplates","checksum":"973ba5ec08d3cbfac4d0278ea149e22985bcb482"} 2022-02-11 14:53:54,298 - wazuh_testing - DEBUG - 2022/02/11 18:53:51 wazuh-db[13476] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.183 ms. 2022-02-11 14:53:54,299 - wazuh_testing - DEBUG - 2022/02/11 18:53:51 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602027,"version":2,"begin":"/sbin/mkswap","end":"/sbin/start-stop-daemon","tail":"/sbin/sulogin","checksum":"b356159685213d77a501787c4ba65eff3cf7fba1"} 2022-02-11 14:53:54,299 - wazuh_testing - DEBUG - 2022/02/11 18:53:51 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602027,"version":2,"begin":"/sbin/sulogin","end":"/usr/bin/apt-extracttemplates","checksum":"d1df09ed7a3ab3641d76aeceecb658c66bf6b911"} 2022-02-11 14:53:54,300 - wazuh_testing - DEBUG - 2022/02/11 18:53:51 wazuh-db[13476] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.075 ms. 2022-02-11 14:53:54,300 - wazuh_testing - DEBUG - 2022/02/11 18:53:51 wazuh-db[13476] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.081 ms. 2022-02-11 14:53:54,300 - wazuh_testing - DEBUG - 2022/02/11 18:53:51 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602027,"version":2,"begin":"/sbin/sulogin","end":"/sbin/wipefs","tail":"/sbin/zramctl","checksum":"086fb81bf040732edfe2a920d67de456c77c8c3d"} 2022-02-11 14:53:54,301 - wazuh_testing - DEBUG - 2022/02/11 18:53:51 wazuh-db[13476] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.054 ms. 2022-02-11 14:53:54,301 - wazuh_testing - DEBUG - 2022/02/11 18:53:51 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602027,"version":2,"begin":"/sbin/zramctl","end":"/usr/bin/apt-extracttemplates","checksum":"9d848a62fcda70c885aba806c0038a1754f8484d"} 2022-02-11 14:53:54,301 - wazuh_testing - DEBUG - 2022/02/11 18:53:51 wazuh-db[13476] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.054 ms. 2022-02-11 14:53:54,302 - wazuh_testing - DEBUG - 2022/02/11 18:53:51 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602027,"version":2,"begin":"/sbin/zramctl","end":"/usr/bin/aclocal-1.16","tail":"/usr/bin/addpart","checksum":"052be79cee6a8e47c79ccf7a219a75404c06c98b"} 2022-02-11 14:53:54,302 - wazuh_testing - DEBUG - 2022/02/11 18:53:51 wazuh-db[13476] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.048 ms. 2022-02-11 14:53:54,303 - wazuh_testing - DEBUG - 2022/02/11 18:53:51 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602027,"version":2,"begin":"/usr/bin/addpart","end":"/usr/bin/apt-extracttemplates","checksum":"7d1a3bbe28f2c9e567f8311757d46ea5365d7112"} 2022-02-11 14:53:54,303 - wazuh_testing - DEBUG - 2022/02/11 18:53:51 wazuh-db[13476] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.042 ms. 2022-02-11 14:53:54,303 - wazuh_testing - DEBUG - 2022/02/11 18:53:51 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602027,"version":2,"begin":"/usr/bin/[","end":"/usr/bin/aclocal-1.16","checksum":"0f1d35a6565c33bf9697c50fd2d7d2a4ebccbc45"} 2022-02-11 14:53:54,304 - wazuh_testing - DEBUG - 2022/02/11 18:53:51 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602027,"version":2,"begin":"/sbin/zramctl","end":"/usr/bin/2to3-2.7","tail":"/usr/bin/[","checksum":"c18e63a1c7a50a8370ad3378bd342e21f84ccd11"} 2022-02-11 14:53:54,304 - wazuh_testing - DEBUG - 2022/02/11 18:53:51 wazuh-db[13476] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.075 ms. 2022-02-11 14:53:54,304 - wazuh_testing - DEBUG - 2022/02/11 18:53:51 wazuh-db[13476] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.056 ms. 2022-02-11 14:53:54,305 - wazuh_testing - DEBUG - 2022/02/11 18:53:51 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602027,"version":2,"begin":"/sbin/zramctl","end":"/sbin/zramctl","tail":"/testdir1/testdir1.txt","checksum":"58b2b87ce2162d80a895c740e0ed2124836230b7"} 2022-02-11 14:53:54,305 - wazuh_testing - DEBUG - 2022/02/11 18:53:51 wazuh-db[13476] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.053 ms. 2022-02-11 14:53:54,305 - wazuh_testing - DEBUG - 2022/02/11 18:53:52 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602027,"version":2,"begin":"/testdir1/testdir1.txt","end":"/usr/bin/2to3-2.7","checksum":"2411466124371047c8486a9638c0766c2bc0570f"} 2022-02-11 14:53:54,306 - wazuh_testing - DEBUG - 2022/02/11 18:53:52 wazuh-db[13476] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.040 ms. 2022-02-11 14:53:54,306 - wazuh_testing - DEBUG - 2022/02/11 18:53:52 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602027,"version":2,"begin":"/testdir1/testdir1.txt","end":"/testdir1/testdir1.txt","tail":"/usr/bin/2to3-2.7","checksum":"74a05ce96d5e122d646f869e810146b3c069d576"} 2022-02-11 14:53:54,306 - wazuh_testing - DEBUG - 2022/02/11 18:53:52 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602027,"version":2,"begin":"/usr/bin/2to3-2.7","end":"/usr/bin/2to3-2.7","checksum":"f621f8dd560e58c5f017dfd42d98bb3a72466d1d"} 2022-02-11 14:53:54,307 - wazuh_testing - DEBUG - 2022/02/11 18:53:52 wazuh-db[13476] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.029 ms. 2022-02-11 14:53:54,307 - wazuh_testing - DEBUG - 2022/02/11 18:53:52 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file save2 {"path":"/testdir1/testdir1.txt","timestamp":1644602027,"version":2,"attributes":{"type":"file","size":0,"perm":"rw-r--r--","uid":"0","gid":"0","user_name":"root","group_name":"root","inode":17179747,"mtime":1644602022,"hash_md5":"d41d8cd98f00b204e9800998ecf8427e","hash_sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","hash_sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","checksum":"c92a1833bd4ff3cbce18837fd47df6aab6476148"}} 2022-02-11 14:53:54,308 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-manager and message: .Agent 001 query: (.+) save2 2022-02-11 14:53:55,243 - wazuh_testing - DEBUG - Cleaning temporal files... 2022-02-11 14:53:55,244 - wazuh_testing - DEBUG - Checking results... 2022-02-11 14:53:55,246 - wazuh_testing - DEBUG - Received from wazuh-agent1 the expected message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1644602027,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"11cbd079915ee62c666637dc79878ff3b05e0aee"}} 2022-02-11 14:53:55,246 - wazuh_testing - DEBUG - Received from wazuh-manager the expected message: fim_file 2022-02-11 14:54:10,322 - wazuh_testing - DEBUG - Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-11 14:54:10,323 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-11 14:54:10,323 - wazuh_testing - DEBUG - Starting file composer for wazuh-agent1 and path: /var/ossec/logs/ossec.log. Composite file in /home/camila/Escritorio/repo/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-agent1_ossec.log.tmp 2022-02-11 14:54:10,324 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-agent1 and message: .Initializing FIM Integrity Synchronization check. (.+)$ 2022-02-11 14:54:11,826 - wazuh_testing - DEBUG - 2022/02/11 18:54:00 wazuh-logcollector: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:54:11,827 - wazuh_testing - DEBUG - 2022/02/11 18:54:00 wazuh-syscheckd[16091] sig_op.c:49 at HandleSIG(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:54:11,827 - wazuh_testing - DEBUG - 2022/02/11 18:54:00 wazuh-agentd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:54:11,827 - wazuh_testing - DEBUG - 2022/02/11 18:54:00 wazuh-execd: INFO: (1314): Shutdown received. Deleting responses. 2022-02-11 14:54:11,827 - wazuh_testing - DEBUG - 2022/02/11 18:54:00 wazuh-execd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:54:11,827 - wazuh_testing - DEBUG - 2022/02/11 18:54:03 wazuh-syscheckd[16517] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 14:54:11,828 - wazuh_testing - DEBUG - 2022/02/11 18:54:03 wazuh-syscheckd[16517] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 14:54:11,828 - wazuh_testing - DEBUG - 2022/02/11 18:54:03 wazuh-syscheckd[16517] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-11 14:54:11,828 - wazuh_testing - DEBUG - 2022/02/11 18:54:03 wazuh-syscheckd[16517] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-11 14:54:11,828 - wazuh_testing - DEBUG - 2022/02/11 18:54:03 wazuh-syscheckd[16517] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-11 14:54:11,829 - wazuh_testing - DEBUG - 2022/02/11 18:54:03 wazuh-syscheckd[16517] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-11 14:54:11,829 - wazuh_testing - DEBUG - 2022/02/11 18:54:03 wazuh-syscheckd[16517] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-11 14:54:11,829 - wazuh_testing - DEBUG - 2022/02/11 18:54:03 wazuh-syscheckd[16517] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$\|.swp$ 2022-02-11 14:54:11,830 - wazuh_testing - DEBUG - 2022/02/11 18:54:03 wazuh-syscheckd[16517] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$\|.swp$ OK? 2022-02-11 14:54:11,830 - wazuh_testing - DEBUG - 2022/02/11 18:54:03 wazuh-syscheckd[16517] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-11 14:54:11,830 - wazuh_testing - DEBUG - 2022/02/11 18:54:03 wazuh-syscheckd[16517] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-11 14:54:11,830 - wazuh_testing - DEBUG - 2022/02/11 18:54:03 wazuh-syscheckd[16517] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 14:54:11,830 - wazuh_testing - DEBUG - 2022/02/11 18:54:03 wazuh-syscheckd[16517] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 14:54:11,831 - wazuh_testing - DEBUG - 2022/02/11 18:54:03 wazuh-syscheckd[16517] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 14:54:11,831 - wazuh_testing - DEBUG - 2022/02/11 18:54:03 wazuh-syscheckd[16517] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 14:54:11,831 - wazuh_testing - DEBUG - 2022/02/11 18:54:03 wazuh-syscheckd[16517] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 14:54:11,831 - wazuh_testing - DEBUG - 2022/02/11 18:54:03 wazuh-syscheckd[16517] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 14:54:11,832 - wazuh_testing - DEBUG - 2022/02/11 18:54:03 wazuh-execd: INFO: Started (pid: 16530). 2022-02-11 14:54:11,832 - wazuh_testing - DEBUG - 2022/02/11 18:54:04 wazuh-agentd: INFO: (1410): Reading authentication keys file. 2022-02-11 14:54:11,832 - wazuh_testing - DEBUG - 2022/02/11 18:54:04 wazuh-agentd: INFO: Using notify time: 10 and max time to reconnect: 60 2022-02-11 14:54:11,833 - wazuh_testing - DEBUG - 2022/02/11 18:54:04 wazuh-agentd: INFO: Version detected -> Linux \|wazuh-agent1 \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64 [Debian GNU/Linux\|debian: 10 (buster)] - Wazuh v4.2.5 2022-02-11 14:54:11,833 - wazuh_testing - DEBUG - 2022/02/11 18:54:04 wazuh-agentd: INFO: Started (pid: 16541). 2022-02-11 14:54:11,834 - wazuh_testing - DEBUG - 2022/02/11 18:54:04 wazuh-agentd: INFO: Server IP Address: wazuh-manager/172.17.0.2 2022-02-11 14:54:11,834 - wazuh_testing - DEBUG - 2022/02/11 18:54:04 wazuh-agentd: INFO: Using AES as encryption method. 2022-02-11 14:54:11,834 - wazuh_testing - DEBUG - 2022/02/11 18:54:04 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 14:54:11,834 - wazuh_testing - DEBUG - 2022/02/11 18:54:04 wazuh-agentd: INFO: (4102): Connected to the server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 14:54:11,835 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 14:54:11,835 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 14:54:11,835 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-11 14:54:11,836 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-11 14:54:11,836 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-11 14:54:11,836 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-11 14:54:11,836 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-11 14:54:11,837 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$\|.swp$ 2022-02-11 14:54:11,837 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$\|.swp$ OK? 2022-02-11 14:54:11,837 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-11 14:54:11,837 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-11 14:54:11,838 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 14:54:11,838 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 14:54:11,838 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 14:54:11,838 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 14:54:11,839 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 14:54:11,839 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 14:54:11,839 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 rootcheck[16553] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled. 2022-02-11 14:54:11,839 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:54:11,839 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] syscom.c:123 at syscom_main(): DEBUG: (6284): Local requests thread ready. 2022-02-11 14:54:11,840 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] mq_op.c:47 at StartMQ(): DEBUG: Connected succesfully to 'queue/sockets/queue' after 0 attempts 2022-02-11 14:54:11,840 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] mq_op.c:48 at StartMQ(): DEBUG: (unix_domain) Maximum send buffer set to: '212992'. 2022-02-11 14:54:11,840 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:185 at main(): INFO: Started (pid: 16555). 2022-02-11 14:54:11,840 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:193 at main(): INFO: (6003): Monitoring path: '/bin', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 14:54:11,840 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:193 at main(): INFO: (6003): Monitoring path: '/boot', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 14:54:11,841 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:193 at main(): INFO: (6003): Monitoring path: '/etc', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 14:54:11,841 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:193 at main(): INFO: (6003): Monitoring path: '/sbin', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 14:54:11,842 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir1', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 14:54:11,842 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir2', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| realtime'. 2022-02-11 14:54:11,842 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir3', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| whodata'. 2022-02-11 14:54:11,842 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/bin', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 14:54:11,843 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/sbin', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 14:54:11,843 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:215 at main(): DEBUG: (6357): Maximum disk quota size limit configured to '1048576 KB'. 2022-02-11 14:54:11,843 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mtab' 2022-02-11 14:54:11,843 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/hosts.deny' 2022-02-11 14:54:11,843 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mail/statistics' 2022-02-11 14:54:11,843 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random-seed' 2022-02-11 14:54:11,844 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random.seed' 2022-02-11 14:54:11,844 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/adjtime' 2022-02-11 14:54:11,844 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/httpd/logs' 2022-02-11 14:54:11,844 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/utmpx' 2022-02-11 14:54:11,844 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/wtmpx' 2022-02-11 14:54:11,844 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/cups/certs' 2022-02-11 14:54:11,844 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/dumpdates' 2022-02-11 14:54:11,845 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/svc/volatile' 2022-02-11 14:54:11,845 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/security' 2022-02-11 14:54:11,845 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/debug' 2022-02-11 14:54:11,845 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/dev/core' 2022-02-11 14:54:11,845 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '^/proc' 2022-02-11 14:54:11,846 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '.log$\|.swp$' 2022-02-11 14:54:11,846 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:235 at main(): INFO: (6004): No diff for file: '/etc/ssl/private.key' 2022-02-11 14:54:11,846 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:245 at main(): INFO: (6016): Directory set for real time monitoring: '/testdir2'. 2022-02-11 14:54:11,846 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] syscheck_audit.c:243 at audit_init(): WARNING: (6924): Who-data engine cannot start because Auditd is not running. 2022-02-11 14:54:11,846 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:264 at main(): WARNING: (6913): Who-data engine could not start. Switching who-data to real-time. 2022-02-11 14:54:11,846 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] run_check.c:194 at start_daemon(): DEBUG: (6320): Setting process priority to: '10' 2022-02-11 14:54:11,846 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:54:11,847 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] run_check.c:229 at start_daemon(): INFO: (6000): Starting daemon... 2022-02-11 14:54:11,847 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] run_check.c:232 at start_daemon(): INFO: (6010): File integrity monitoring scan frequency: 20 seconds 2022-02-11 14:54:11,847 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 14:54:11,847 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644602045}} 2022-02-11 14:54:11,847 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 14:54:11,847 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-11 14:54:11,847 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-11 14:54:11,847 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-11 14:54:11,848 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-11 14:54:11,848 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 14:54:11,848 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 14:54:11,848 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644602045}} 2022-02-11 14:54:11,848 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.342 sec (0.341 clock sec) 2022-02-11 14:54:11,848 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1621, path count: 1627 2022-02-11 14:54:11,848 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:54:11,849 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:54:11,849 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] run_check.c:387 at fim_run_realtime(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-11 14:54:11,849 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] run_check.c:543 at log_realtime_status(): INFO: (6012): Real-time file integrity monitoring started. 2022-02-11 14:54:11,849 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:54:11,849 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. 2022-02-11 14:54:11,850 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-agent1 and message: .Initializing FIM Integrity Synchronization check. (.+)$ 2022-02-11 14:54:12,828 - wazuh_testing - DEBUG - Cleaning temporal files... 2022-02-11 14:54:12,829 - wazuh_testing - DEBUG - Checking results... 2022-02-11 14:54:12,831 - wazuh_testing - DEBUG - Received from wazuh-agent1 the expected message: Sync interval is 300 seconds. -------------------------------Captured log call-------------------------------- DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:1005 Cleaning temporal files... DEBUG wazuh_testing:monitoring.py:994 Checking results... DEBUG wazuh_testing:monitoring.py:1000 Received from wazuh-agent1 the expected message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1644602027,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"11cbd079915ee62c666637dc79878ff3b05e0aee"}} DEBUG wazuh_testing:monitoring.py:1000 Received from wazuh-manager the expected message: fim_file DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:1005 Cleaning temporal files... DEBUG wazuh_testing:monitoring.py:994 Checking results... DEBUG wazuh_testing:monitoring.py:1000 Received from wazuh-agent1 the expected message: Sync interval is 300 seconds.
Passed	test_synchronization.py::test_synchronization[testdir1-add-wazuh-manager]	44.07
------------------------------Captured stderr call------------------------------ 2022-02-11 14:54:25,702 - wazuh_testing - DEBUG - Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-11 14:54:25,703 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-11 14:54:25,704 - wazuh_testing - DEBUG - Starting file composer for wazuh-agent1 and path: /var/ossec/logs/ossec.log. Composite file in /home/camila/Escritorio/repo/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-agent1_ossec.log.tmp 2022-02-11 14:54:25,704 - wazuh_testing - DEBUG - Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-11 14:54:25,705 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-agent1 and message: .Sending integrity control message: (.+)$ 2022-02-11 14:54:25,705 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-11 14:54:25,706 - wazuh_testing - DEBUG - Starting file composer for wazuh-manager and path: /var/ossec/logs/ossec.log. Composite file in /home/camila/Escritorio/repo/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-manager_ossec.log.tmp 2022-02-11 14:54:25,707 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-manager and message: .Agent 001 query: (.+) save2 2022-02-11 14:54:27,206 - wazuh_testing - DEBUG - 2022/02/11 18:54:00 wazuh-logcollector: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:54:27,207 - wazuh_testing - DEBUG - 2022/02/11 18:54:00 wazuh-syscheckd[16091] sig_op.c:49 at HandleSIG(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:54:27,207 - wazuh_testing - DEBUG - 2022/02/11 18:54:00 wazuh-agentd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:54:27,207 - wazuh_testing - DEBUG - 2022/02/11 18:54:00 wazuh-execd: INFO: (1314): Shutdown received. Deleting responses. 2022-02-11 14:54:27,207 - wazuh_testing - DEBUG - 2022/02/11 18:54:00 wazuh-execd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:54:27,207 - wazuh_testing - DEBUG - 2022/02/11 18:54:03 wazuh-syscheckd[16517] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 14:54:27,208 - wazuh_testing - DEBUG - 2022/02/11 18:54:03 wazuh-syscheckd[16517] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 14:54:27,208 - wazuh_testing - DEBUG - 2022/02/11 18:54:03 wazuh-syscheckd[16517] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-11 14:54:27,208 - wazuh_testing - DEBUG - 2022/02/11 18:54:03 wazuh-syscheckd[16517] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-11 14:54:27,209 - wazuh_testing - DEBUG - 2022/02/11 18:54:03 wazuh-syscheckd[16517] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-11 14:54:27,209 - wazuh_testing - DEBUG - 2022/02/11 18:53:57 wazuh-db[13476] wdb.c:918 at wdb_commit_old(): DEBUG: Agent 'global' database commited. Time: 11.980 ms. 2022-02-11 14:54:27,209 - wazuh_testing - DEBUG - 2022/02/11 18:54:03 wazuh-syscheckd[16517] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-11 14:54:27,209 - wazuh_testing - DEBUG - 2022/02/11 18:54:00 wazuh-db[13476] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-connection-status {"id":1,"connection_status":"disconnected","sync_status":"synced"} 2022-02-11 14:54:27,209 - wazuh_testing - DEBUG - 2022/02/11 18:54:03 wazuh-syscheckd[16517] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-11 14:54:27,209 - wazuh_testing - DEBUG - 2022/02/11 18:54:03 wazuh-syscheckd[16517] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$\|.swp$ 2022-02-11 14:54:27,210 - wazuh_testing - DEBUG - 2022/02/11 18:54:00 wazuh-db[13476] main.c:290 at run_dealer(): DEBUG: New client connected (37). 2022-02-11 14:54:27,210 - wazuh_testing - DEBUG - 2022/02/11 18:54:03 wazuh-syscheckd[16517] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$\|.swp$ OK? 2022-02-11 14:54:27,210 - wazuh_testing - DEBUG - 2022/02/11 18:54:00 wazuh-db[13476] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: get-labels 1 2022-02-11 14:54:27,210 - wazuh_testing - DEBUG - 2022/02/11 18:54:03 wazuh-syscheckd[16517] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-11 14:54:27,210 - wazuh_testing - DEBUG - 2022/02/11 18:54:03 wazuh-db[13476] wdb.c:918 at wdb_commit_old(): DEBUG: Agent '001' database commited. Time: 3.105 ms. 2022-02-11 14:54:27,210 - wazuh_testing - DEBUG - 2022/02/11 18:54:03 wazuh-syscheckd[16517] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-11 14:54:27,210 - wazuh_testing - DEBUG - 2022/02/11 18:54:04 wazuh-db[13476] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-keepalive {"id":1,"connection_status":"pending","sync_status":"synced"} 2022-02-11 14:54:27,210 - wazuh_testing - DEBUG - 2022/02/11 18:54:03 wazuh-syscheckd[16517] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 14:54:27,211 - wazuh_testing - DEBUG - 2022/02/11 18:54:03 wazuh-syscheckd[16517] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 14:54:27,211 - wazuh_testing - DEBUG - 2022/02/11 18:54:03 wazuh-syscheckd[16517] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 14:54:27,211 - wazuh_testing - DEBUG - 2022/02/11 18:54:03 wazuh-syscheckd[16517] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 14:54:27,211 - wazuh_testing - DEBUG - 2022/02/11 18:54:08 wazuh-db[13476] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux \|wazuh-agent1 \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64","os_arch":"x86_64"} 2022-02-11 14:54:27,212 - wazuh_testing - DEBUG - 2022/02/11 18:54:03 wazuh-syscheckd[16517] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 14:54:27,212 - wazuh_testing - DEBUG - 2022/02/11 18:54:08 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1644602045 2022-02-11 14:54:27,212 - wazuh_testing - DEBUG - 2022/02/11 18:54:03 wazuh-syscheckd[16517] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 14:54:27,212 - wazuh_testing - DEBUG - 2022/02/11 18:54:08 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update end_scan 1644602045 2022-02-11 14:54:27,212 - wazuh_testing - DEBUG - 2022/02/11 18:54:03 wazuh-execd: INFO: Started (pid: 16530). 2022-02-11 14:54:27,213 - wazuh_testing - DEBUG - 2022/02/11 18:54:08 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_global {"id":1644602045,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"af3a4ad03c9cdbe303c7a2b0f0e17c3846f806dd"} 2022-02-11 14:54:27,213 - wazuh_testing - DEBUG - 2022/02/11 18:54:04 wazuh-agentd: INFO: (1410): Reading authentication keys file. 2022-02-11 14:54:27,213 - wazuh_testing - DEBUG - 2022/02/11 18:54:08 wazuh-db[13476] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 1.405 ms. 2022-02-11 14:54:27,213 - wazuh_testing - DEBUG - 2022/02/11 18:54:04 wazuh-agentd: INFO: Using notify time: 10 and max time to reconnect: 60 2022-02-11 14:54:27,214 - wazuh_testing - DEBUG - 2022/02/11 18:54:08 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602045,"version":2,"begin":"/bin/bash","end":"/sbin/chcpu","tail":"/sbin/ctrlaltdel","checksum":"57402e3268a27191e04bfc132831045ee0296f32"} 2022-02-11 14:54:27,214 - wazuh_testing - DEBUG - 2022/02/11 18:54:04 wazuh-agentd: INFO: Version detected -> Linux \|wazuh-agent1 \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64 [Debian GNU/Linux\|debian: 10 (buster)] - Wazuh v4.2.5 2022-02-11 14:54:27,214 - wazuh_testing - DEBUG - 2022/02/11 18:54:08 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602045,"version":2,"begin":"/sbin/ctrlaltdel","end":"/usr/sbin/zic","checksum":"5028791b98f61910d0c69406855c6c894318d04b"} 2022-02-11 14:54:27,214 - wazuh_testing - DEBUG - 2022/02/11 18:54:04 wazuh-agentd: INFO: Started (pid: 16541). 2022-02-11 14:54:27,214 - wazuh_testing - DEBUG - 2022/02/11 18:54:08 wazuh-db[13476] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.417 ms. 2022-02-11 14:54:27,214 - wazuh_testing - DEBUG - 2022/02/11 18:54:08 wazuh-db[13476] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.406 ms. 2022-02-11 14:54:27,214 - wazuh_testing - DEBUG - 2022/02/11 18:54:04 wazuh-agentd: INFO: Server IP Address: wazuh-manager/172.17.0.2 2022-02-11 14:54:27,215 - wazuh_testing - DEBUG - 2022/02/11 18:54:04 wazuh-agentd: INFO: Using AES as encryption method. 2022-02-11 14:54:27,215 - wazuh_testing - DEBUG - 2022/02/11 18:54:08 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602045,"version":2,"begin":"/sbin/ctrlaltdel","end":"/usr/bin/pdb","tail":"/usr/bin/pdb2","checksum":"b4d7462fdfe788800b506fe753ed068da636330c"} 2022-02-11 14:54:27,215 - wazuh_testing - DEBUG - 2022/02/11 18:54:04 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 14:54:27,215 - wazuh_testing - DEBUG - 2022/02/11 18:54:08 wazuh-db[13476] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.236 ms. 2022-02-11 14:54:27,215 - wazuh_testing - DEBUG - 2022/02/11 18:54:04 wazuh-agentd: INFO: (4102): Connected to the server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 14:54:27,216 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 14:54:27,216 - wazuh_testing - DEBUG - 2022/02/11 18:54:08 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602045,"version":2,"begin":"/usr/bin/pdb2","end":"/usr/sbin/zic","checksum":"f13d51f7876684d6bc17db143ee1529b892c54d2"} 2022-02-11 14:54:27,216 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 14:54:27,216 - wazuh_testing - DEBUG - 2022/02/11 18:54:08 wazuh-db[13476] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.240 ms. 2022-02-11 14:54:27,216 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-11 14:54:27,216 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-11 14:54:27,217 - wazuh_testing - DEBUG - 2022/02/11 18:54:08 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602045,"version":2,"begin":"/sbin/ctrlaltdel","end":"/usr/bin/dpkg-divert","tail":"/usr/bin/dpkg-genbuildinfo","checksum":"e6bc38c95c20a00084730203df2a560e313f6b10"} 2022-02-11 14:54:27,217 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-11 14:54:27,217 - wazuh_testing - DEBUG - 2022/02/11 18:54:08 wazuh-db[13476] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.137 ms. 2022-02-11 14:54:27,217 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-11 14:54:27,217 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-11 14:54:27,217 - wazuh_testing - DEBUG - 2022/02/11 18:54:08 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602045,"version":2,"begin":"/usr/bin/dpkg-genbuildinfo","end":"/usr/bin/pdb","checksum":"fcd12ca69011f5033c3706ba868e7f2983050598"} 2022-02-11 14:54:27,217 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$\|.swp$ 2022-02-11 14:54:27,217 - wazuh_testing - DEBUG - 2022/02/11 18:54:08 wazuh-db[13476] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.149 ms. 2022-02-11 14:54:27,217 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$\|.swp$ OK? 2022-02-11 14:54:27,217 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-11 14:54:27,218 - wazuh_testing - DEBUG - 2022/02/11 18:54:08 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602045,"version":2,"begin":"/sbin/ctrlaltdel","end":"/usr/bin/apt-extracttemplates","tail":"/usr/bin/apt-ftparchive","checksum":"1cbc63a4d292d40d27c10f7ea872364d4096d8b2"} 2022-02-11 14:54:27,218 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-11 14:54:27,218 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 14:54:27,218 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 14:54:27,218 - wazuh_testing - DEBUG - 2022/02/11 18:54:08 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602045,"version":2,"begin":"/usr/bin/apt-ftparchive","end":"/usr/bin/dpkg-divert","checksum":"ab79628f5b16446ec1a1f2daeaf1afd2511680e1"} 2022-02-11 14:54:27,218 - wazuh_testing - DEBUG - 2022/02/11 18:54:08 wazuh-db[13476] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.152 ms. 2022-02-11 14:54:27,218 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 14:54:27,218 - wazuh_testing - DEBUG - 2022/02/11 18:54:08 wazuh-db[13476] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.124 ms. 2022-02-11 14:54:27,218 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 14:54:27,219 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 14:54:27,219 - wazuh_testing - DEBUG - 2022/02/11 18:54:08 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602045,"version":2,"begin":"/sbin/ctrlaltdel","end":"/sbin/mkhomedir_helper","tail":"/sbin/mkswap","checksum":"7a7df0bd9bb5154b28eb072bebe1af0b79c59afb"} 2022-02-11 14:54:27,219 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 14:54:27,219 - wazuh_testing - DEBUG - 2022/02/11 18:54:08 wazuh-db[13476] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.071 ms. 2022-02-11 14:54:27,219 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 rootcheck[16553] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled. 2022-02-11 14:54:27,219 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:54:27,219 - wazuh_testing - DEBUG - 2022/02/11 18:54:09 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602045,"version":2,"begin":"/sbin/mkswap","end":"/usr/bin/apt-extracttemplates","checksum":"b755308ef4a494912d88652ae09ce34c1a2326df"} 2022-02-11 14:54:27,219 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] syscom.c:123 at syscom_main(): DEBUG: (6284): Local requests thread ready. 2022-02-11 14:54:27,219 - wazuh_testing - DEBUG - 2022/02/11 18:54:09 wazuh-db[13476] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.107 ms. 2022-02-11 14:54:27,219 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] mq_op.c:47 at StartMQ(): DEBUG: Connected succesfully to 'queue/sockets/queue' after 0 attempts 2022-02-11 14:54:27,220 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] mq_op.c:48 at StartMQ(): DEBUG: (unix_domain) Maximum send buffer set to: '212992'. 2022-02-11 14:54:27,220 - wazuh_testing - DEBUG - 2022/02/11 18:54:09 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602045,"version":2,"begin":"/sbin/mkswap","end":"/sbin/start-stop-daemon","tail":"/sbin/sulogin","checksum":"b356159685213d77a501787c4ba65eff3cf7fba1"} 2022-02-11 14:54:27,220 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:185 at main(): INFO: Started (pid: 16555). 2022-02-11 14:54:27,220 - wazuh_testing - DEBUG - 2022/02/11 18:54:09 wazuh-db[13476] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.101 ms. 2022-02-11 14:54:27,220 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:193 at main(): INFO: (6003): Monitoring path: '/bin', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 14:54:27,220 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:193 at main(): INFO: (6003): Monitoring path: '/boot', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 14:54:27,220 - wazuh_testing - DEBUG - 2022/02/11 18:54:09 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602045,"version":2,"begin":"/sbin/sulogin","end":"/usr/bin/apt-extracttemplates","checksum":"a46d2d1c40e92816731762f03d1aad771df679f5"} 2022-02-11 14:54:27,220 - wazuh_testing - DEBUG - 2022/02/11 18:54:09 wazuh-db[13476] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.099 ms. 2022-02-11 14:54:27,220 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:193 at main(): INFO: (6003): Monitoring path: '/etc', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 14:54:27,220 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:193 at main(): INFO: (6003): Monitoring path: '/sbin', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 14:54:27,220 - wazuh_testing - DEBUG - 2022/02/11 18:54:09 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602045,"version":2,"begin":"/sbin/sulogin","end":"/sbin/wipefs","tail":"/sbin/zramctl","checksum":"086fb81bf040732edfe2a920d67de456c77c8c3d"} 2022-02-11 14:54:27,221 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir1', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 14:54:27,221 - wazuh_testing - DEBUG - 2022/02/11 18:54:09 wazuh-db[13476] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.067 ms. 2022-02-11 14:54:27,221 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir2', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| realtime'. 2022-02-11 14:54:27,221 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir3', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| whodata'. 2022-02-11 14:54:27,221 - wazuh_testing - DEBUG - 2022/02/11 18:54:09 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602045,"version":2,"begin":"/sbin/zramctl","end":"/usr/bin/apt-extracttemplates","checksum":"0b1e04c133203dc555dc2ffbfef39cec86d0eb9d"} 2022-02-11 14:54:27,221 - wazuh_testing - DEBUG - 2022/02/11 18:54:09 wazuh-db[13476] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.038 ms. 2022-02-11 14:54:27,221 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/bin', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 14:54:27,221 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/sbin', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 14:54:27,221 - wazuh_testing - DEBUG - 2022/02/11 18:54:09 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602045,"version":2,"begin":"/sbin/zramctl","end":"/usr/bin/aclocal-1.16","tail":"/usr/bin/addpart","checksum":"b71ddd7342a42435577047887e06c05d0c8098d7"} 2022-02-11 14:54:27,221 - wazuh_testing - DEBUG - 2022/02/11 18:54:09 wazuh-db[13476] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.021 ms. 2022-02-11 14:54:27,221 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:215 at main(): DEBUG: (6357): Maximum disk quota size limit configured to '1048576 KB'. 2022-02-11 14:54:27,222 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mtab' 2022-02-11 14:54:27,222 - wazuh_testing - DEBUG - 2022/02/11 18:54:09 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602045,"version":2,"begin":"/usr/bin/addpart","end":"/usr/bin/apt-extracttemplates","checksum":"7d1a3bbe28f2c9e567f8311757d46ea5365d7112"} 2022-02-11 14:54:27,222 - wazuh_testing - DEBUG - 2022/02/11 18:54:09 wazuh-db[13476] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.022 ms. 2022-02-11 14:54:27,222 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/hosts.deny' 2022-02-11 14:54:27,222 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mail/statistics' 2022-02-11 14:54:27,222 - wazuh_testing - DEBUG - 2022/02/11 18:54:09 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602045,"version":2,"begin":"/sbin/zramctl","end":"/usr/bin/2to3-2.7","tail":"/usr/bin/[","checksum":"35391c7317f1cbceb690591be2e8df4aa129e3a1"} 2022-02-11 14:54:27,222 - wazuh_testing - DEBUG - 2022/02/11 18:54:09 wazuh-db[13476] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.016 ms. 2022-02-11 14:54:27,222 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random-seed' 2022-02-11 14:54:27,222 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random.seed' 2022-02-11 14:54:27,223 - wazuh_testing - DEBUG - 2022/02/11 18:54:09 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602045,"version":2,"begin":"/usr/bin/[","end":"/usr/bin/aclocal-1.16","checksum":"0f1d35a6565c33bf9697c50fd2d7d2a4ebccbc45"} 2022-02-11 14:54:27,223 - wazuh_testing - DEBUG - 2022/02/11 18:54:09 wazuh-db[13476] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.017 ms. 2022-02-11 14:54:27,223 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/adjtime' 2022-02-11 14:54:27,223 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/httpd/logs' 2022-02-11 14:54:27,223 - wazuh_testing - DEBUG - 2022/02/11 18:54:09 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602045,"version":2,"begin":"/sbin/zramctl","end":"/sbin/zramctl","tail":"/testdir1/testdir1.txt","checksum":"58b2b87ce2162d80a895c740e0ed2124836230b7"} 2022-02-11 14:54:27,223 - wazuh_testing - DEBUG - 2022/02/11 18:54:09 wazuh-db[13476] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.025 ms. 2022-02-11 14:54:27,223 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/utmpx' 2022-02-11 14:54:27,223 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/wtmpx' 2022-02-11 14:54:27,223 - wazuh_testing - DEBUG - 2022/02/11 18:54:10 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602045,"version":2,"begin":"/testdir1/testdir1.txt","end":"/usr/bin/2to3-2.7","checksum":"2c79e892adc7529e55eff6653843fd7846a8358f"} 2022-02-11 14:54:27,223 - wazuh_testing - DEBUG - 2022/02/11 18:54:10 wazuh-db[13476] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.036 ms. 2022-02-11 14:54:27,223 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/cups/certs' 2022-02-11 14:54:27,223 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/dumpdates' 2022-02-11 14:54:27,224 - wazuh_testing - DEBUG - 2022/02/11 18:54:10 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602045,"version":2,"begin":"/testdir1/testdir1.txt","end":"/testdir1/testdir1.txt","tail":"/usr/bin/2to3-2.7","checksum":"dcd7a54a75977ca82c8ce658c0a1c2a731dd8313"} 2022-02-11 14:54:27,224 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/svc/volatile' 2022-02-11 14:54:27,224 - wazuh_testing - DEBUG - 2022/02/11 18:54:10 wazuh-db[13476] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.020 ms. 2022-02-11 14:54:27,224 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/security' 2022-02-11 14:54:27,224 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/debug' 2022-02-11 14:54:27,224 - wazuh_testing - DEBUG - 2022/02/11 18:54:10 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602045,"version":2,"begin":"/usr/bin/2to3-2.7","end":"/usr/bin/2to3-2.7","checksum":"f621f8dd560e58c5f017dfd42d98bb3a72466d1d"} 2022-02-11 14:54:27,224 - wazuh_testing - DEBUG - 2022/02/11 18:54:10 wazuh-db[13476] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.014 ms. 2022-02-11 14:54:27,224 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/dev/core' 2022-02-11 14:54:27,224 - wazuh_testing - DEBUG - 2022/02/11 18:54:10 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file save2 {"path":"/testdir1/testdir1.txt","timestamp":1644602045,"version":2,"attributes":{"type":"file","size":0,"perm":"rw-r--r--","uid":"0","gid":"0","user_name":"root","group_name":"root","inode":17179747,"mtime":1644602041,"hash_md5":"d41d8cd98f00b204e9800998ecf8427e","hash_sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","hash_sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","checksum":"3faa025745f68843235fae68297251c316dfd174"}} 2022-02-11 14:54:27,225 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '^/proc' 2022-02-11 14:54:27,225 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '.log$\|.swp$' 2022-02-11 14:54:27,225 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-manager and message: .Agent 001 query: (.+) save2 2022-02-11 14:54:27,225 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:235 at main(): INFO: (6004): No diff for file: '/etc/ssl/private.key' 2022-02-11 14:54:27,225 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:245 at main(): INFO: (6016): Directory set for real time monitoring: '/testdir2'. 2022-02-11 14:54:27,226 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] syscheck_audit.c:243 at audit_init(): WARNING: (6924): Who-data engine cannot start because Auditd is not running. 2022-02-11 14:54:27,226 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:264 at main(): WARNING: (6913): Who-data engine could not start. Switching who-data to real-time. 2022-02-11 14:54:27,226 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] run_check.c:194 at start_daemon(): DEBUG: (6320): Setting process priority to: '10' 2022-02-11 14:54:27,226 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:54:27,226 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] run_check.c:229 at start_daemon(): INFO: (6000): Starting daemon... 2022-02-11 14:54:27,226 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] run_check.c:232 at start_daemon(): INFO: (6010): File integrity monitoring scan frequency: 20 seconds 2022-02-11 14:54:27,227 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 14:54:27,227 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644602045}} 2022-02-11 14:54:27,227 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 14:54:27,227 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-11 14:54:27,227 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-11 14:54:27,228 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-11 14:54:27,228 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-11 14:54:27,228 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 14:54:27,228 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 14:54:27,228 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644602045}} 2022-02-11 14:54:27,229 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.342 sec (0.341 clock sec) 2022-02-11 14:54:27,229 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1621, path count: 1627 2022-02-11 14:54:27,229 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:54:27,229 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:54:27,230 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] run_check.c:387 at fim_run_realtime(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-11 14:54:27,230 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] run_check.c:543 at log_realtime_status(): INFO: (6012): Real-time file integrity monitoring started. 2022-02-11 14:54:27,230 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:54:27,231 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. 2022-02-11 14:54:27,231 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] run_check.c:568 at symlink_checker_thread(): DEBUG: (6033): Starting symbolic link updater. Interval '600'. 2022-02-11 14:54:27,231 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] run_check.c:82 at fim_send_sync_msg(): DEBUG: (6317): Sending integrity control message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1644602045,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"af3a4ad03c9cdbe303c7a2b0f0e17c3846f806dd"}} 2022-02-11 14:54:27,232 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-agent1 and message: .Sending integrity control message: (.+)$ 2022-02-11 14:54:28,211 - wazuh_testing - DEBUG - Cleaning temporal files... 2022-02-11 14:54:28,211 - wazuh_testing - DEBUG - Checking results... 2022-02-11 14:54:28,212 - wazuh_testing - DEBUG - Received from wazuh-manager the expected message: fim_file 2022-02-11 14:54:28,212 - wazuh_testing - DEBUG - Received from wazuh-agent1 the expected message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1644602045,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"af3a4ad03c9cdbe303c7a2b0f0e17c3846f806dd"}} 2022-02-11 14:54:54,501 - wazuh_testing - DEBUG - Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-11 14:54:54,502 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-11 14:54:54,503 - wazuh_testing - DEBUG - Starting file composer for wazuh-manager and path: /var/ossec/logs/ossec.log. Composite file in /home/camila/Escritorio/repo/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-manager_ossec.log.tmp 2022-02-11 14:54:54,504 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-manager and message: .Initializing FIM Integrity Synchronization check. (.+)$ 2022-02-11 14:54:56,006 - wazuh_testing - DEBUG - 2022/02/11 18:54:30 wazuh-db[13476] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux \|wazuh-agent1 \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64","os_arch":"x86_64"} 2022-02-11 14:54:56,007 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-modulesd:syscollector: INFO: Stop received for Syscollector. 2022-02-11 14:54:56,007 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 11 disconnected. 2022-02-11 14:54:56,008 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-monitord: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:54:56,008 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-logcollector: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:54:56,008 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-remoted: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:54:56,008 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 28 disconnected. 2022-02-11 14:54:56,009 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 22 disconnected. 2022-02-11 14:54:56,009 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 18 disconnected. 2022-02-11 14:54:56,009 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 16 disconnected. 2022-02-11 14:54:56,009 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-syscheckd[13610] sig_op.c:49 at HandleSIG(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:54:56,010 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-analysisd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:54:56,010 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 38 disconnected. 2022-02-11 14:54:56,010 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 35 disconnected. 2022-02-11 14:54:56,010 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 34 disconnected. 2022-02-11 14:54:56,010 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 30 disconnected. 2022-02-11 14:54:56,011 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 29 disconnected. 2022-02-11 14:54:56,011 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 26 disconnected. 2022-02-11 14:54:56,011 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 31 disconnected. 2022-02-11 14:54:56,011 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 24 disconnected. 2022-02-11 14:54:56,011 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 23 disconnected. 2022-02-11 14:54:56,012 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 21 disconnected. 2022-02-11 14:54:56,012 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 27 disconnected. 2022-02-11 14:54:56,012 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 13 disconnected. 2022-02-11 14:54:56,012 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 25 disconnected. 2022-02-11 14:54:56,013 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 32 disconnected. 2022-02-11 14:54:56,013 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 37 disconnected. 2022-02-11 14:54:56,013 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 20 disconnected. 2022-02-11 14:54:56,013 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 19 disconnected. 2022-02-11 14:54:56,014 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 33 disconnected. 2022-02-11 14:54:56,014 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 12 disconnected. 2022-02-11 14:54:56,014 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 10 disconnected. 2022-02-11 14:54:56,014 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 6 disconnected. 2022-02-11 14:54:56,015 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-execd: INFO: (1314): Shutdown received. Deleting responses. 2022-02-11 14:54:56,015 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-execd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:54:56,015 - wazuh_testing - DEBUG - 2022/02/11 18:54:34 wazuh-db[13476] main.c:468 at handler(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:54:56,015 - wazuh_testing - DEBUG - 2022/02/11 18:54:34 wazuh-db[13476] wdb.c:872 at wdb_close_all(): DEBUG: Closing all databases... 2022-02-11 14:54:56,016 - wazuh_testing - DEBUG - 2022/02/11 18:54:34 wazuh-db[13476] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent 001 2022-02-11 14:54:56,016 - wazuh_testing - DEBUG - 2022/02/11 18:54:34 wazuh-db[13476] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent 000 2022-02-11 14:54:56,016 - wazuh_testing - DEBUG - 2022/02/11 18:54:34 wazuh-db[13476] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent mitre 2022-02-11 14:54:56,016 - wazuh_testing - DEBUG - 2022/02/11 18:54:34 wazuh-db[13476] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent global 2022-02-11 14:54:56,017 - wazuh_testing - DEBUG - 2022/02/11 18:54:34 wazuh-db[13476] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent tasks 2022-02-11 14:54:56,017 - wazuh_testing - DEBUG - 2022/02/11 18:54:34 wazuh-db[13476] main.c:231 at main(): DEBUG: Template file removed again: queue/db/.template.db 2022-02-11 14:54:56,017 - wazuh_testing - DEBUG - 2022/02/11 18:54:34 wazuh-authd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:54:56,017 - wazuh_testing - DEBUG - 2022/02/11 18:54:35 wazuh-authd: INFO: Exiting... 2022-02-11 14:54:56,018 - wazuh_testing - DEBUG - 2022/02/11 18:54:40 wazuh-db[14402] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 14:54:56,018 - wazuh_testing - DEBUG - 2022/02/11 18:54:40 wazuh-db[14402] main.c:101 at main(): DEBUG: Wazuh home directory: /var/ossec 2022-02-11 14:54:56,018 - wazuh_testing - DEBUG - 2022/02/11 18:54:40 wazuh-syscheckd[14406] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 14:54:56,018 - wazuh_testing - DEBUG - 2022/02/11 18:54:40 wazuh-syscheckd[14406] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 14:54:56,018 - wazuh_testing - DEBUG - 2022/02/11 18:54:40 wazuh-syscheckd[14406] syscheck-config.c:122 at organize_syscheck_dirs(): DEBUG: No directory entries to organize in syscheck configuration. 2022-02-11 14:54:56,019 - wazuh_testing - DEBUG - 2022/02/11 18:54:42 wazuh-csyslogd: INFO: Remote syslog server not configured. Clean exit. 2022-02-11 14:54:56,019 - wazuh_testing - DEBUG - 2022/02/11 18:54:42 wazuh-dbd: INFO: Database not configured. Clean exit. 2022-02-11 14:54:56,019 - wazuh_testing - DEBUG - 2022/02/11 18:54:42 wazuh-integratord: INFO: Remote integrations not configured. Clean exit. 2022-02-11 14:54:56,019 - wazuh_testing - DEBUG - 2022/02/11 18:54:42 wazuh-agentlessd: INFO: Not configured. Exiting. 2022-02-11 14:54:56,019 - wazuh_testing - DEBUG - 2022/02/11 18:54:42 wazuh-authd: INFO: Started (pid: 14472). 2022-02-11 14:54:56,020 - wazuh_testing - DEBUG - 2022/02/11 18:54:42 wazuh-authd: INFO: Accepting connections on port 1515. No password required. 2022-02-11 14:54:56,020 - wazuh_testing - DEBUG - 2022/02/11 18:54:42 wazuh-authd: INFO: Setting network timeout to 1.000000 sec. 2022-02-11 14:54:56,020 - wazuh_testing - DEBUG - 2022/02/11 18:54:43 wazuh-db[14486] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 14:54:56,020 - wazuh_testing - DEBUG - 2022/02/11 18:54:43 wazuh-db[14486] main.c:101 at main(): DEBUG: Wazuh home directory: /var/ossec 2022-02-11 14:54:56,020 - wazuh_testing - DEBUG - 2022/02/11 18:54:43 wazuh-db[14486] main.c:122 at main(): DEBUG: Template file removed: /var/ossec/queue/db/.template.db 2022-02-11 14:54:56,021 - wazuh_testing - DEBUG - 2022/02/11 18:54:43 wazuh-db[14486] main.c:178 at main(): INFO: Started (pid: 14488). 2022-02-11 14:54:56,021 - wazuh_testing - DEBUG - 2022/02/11 18:54:45 wazuh-execd: INFO: (1350): Active response disabled. 2022-02-11 14:54:56,021 - wazuh_testing - DEBUG - 2022/02/11 18:54:45 wazuh-execd: INFO: Started (pid: 14511). 2022-02-11 14:54:56,021 - wazuh_testing - DEBUG - 2022/02/11 18:54:46 wazuh-analysisd: INFO: Total rules enabled: '3882' 2022-02-11 14:54:56,021 - wazuh_testing - DEBUG - 2022/02/11 18:54:46 wazuh-analysisd: INFO: Started (pid: 14525). 2022-02-11 14:54:56,022 - wazuh_testing - DEBUG - 2022/02/11 18:54:46 wazuh-db[14486] main.c:290 at run_dealer(): DEBUG: New client connected (6). 2022-02-11 14:54:56,022 - wazuh_testing - DEBUG - 2022/02/11 18:54:46 wazuh-analysisd: INFO: (7200): Logtest started 2022-02-11 14:54:56,022 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 14:54:56,022 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 14:54:56,022 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] syscheck-config.c:122 at organize_syscheck_dirs(): DEBUG: No directory entries to organize in syscheck configuration. 2022-02-11 14:54:56,023 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] main.c:118 at main(): INFO: (6678): No directory provided for syscheck to monitor. 2022-02-11 14:54:56,023 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] main.c:136 at main(): INFO: (6001): File integrity monitoring disabled. 2022-02-11 14:54:56,023 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 rootcheck[14620] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled. 2022-02-11 14:54:56,024 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:54:56,024 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] syscom.c:123 at syscom_main(): DEBUG: (6284): Local requests thread ready. 2022-02-11 14:54:56,024 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] mq_op.c:47 at StartMQ(): DEBUG: Connected succesfully to 'queue/sockets/queue' after 0 attempts 2022-02-11 14:54:56,024 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] mq_op.c:48 at StartMQ(): DEBUG: (unix_domain) Maximum send buffer set to: '212992'. 2022-02-11 14:54:56,025 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] main.c:185 at main(): INFO: Started (pid: 14622). 2022-02-11 14:54:56,025 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] main.c:215 at main(): DEBUG: (6357): Maximum disk quota size limit configured to '1048576 KB'. 2022-02-11 14:54:56,025 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] run_check.c:194 at start_daemon(): DEBUG: (6320): Setting process priority to: '10' 2022-02-11 14:54:56,025 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:54:56,025 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] run_check.c:229 at start_daemon(): INFO: (6000): Starting daemon... 2022-02-11 14:54:56,025 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] run_check.c:232 at start_daemon(): INFO: (6010): File integrity monitoring scan frequency: 43200 seconds 2022-02-11 14:54:56,026 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 14:54:56,026 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644602087}} 2022-02-11 14:54:56,026 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 14:54:56,026 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-db[14486] main.c:290 at run_dealer(): DEBUG: New client connected (10). 2022-02-11 14:54:56,027 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 14:54:56,027 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 14:54:56,027 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-db[14486] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 000 query: syscheck scan_info_update start_scan 1644602087 2022-02-11 14:54:56,027 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644602087}} 2022-02-11 14:54:56,027 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.000 sec (0.000 clock sec) 2022-02-11 14:54:56,028 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 0, path count: 0 2022-02-11 14:54:56,028 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:54:56,028 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-db[14486] main.c:290 at run_dealer(): DEBUG: New client connected (11). 2022-02-11 14:54:56,028 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-db[14486] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 000 query: syscheck scan_info_update end_scan 1644602087 2022-02-11 14:54:56,028 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:54:56,029 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:54:56,029 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. 2022-02-11 14:54:56,030 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-manager and message: .Initializing FIM Integrity Synchronization check. (.+)$ 2022-02-11 14:54:57,007 - wazuh_testing - DEBUG - Cleaning temporal files... 2022-02-11 14:54:57,008 - wazuh_testing - DEBUG - Checking results... 2022-02-11 14:54:57,010 - wazuh_testing - DEBUG - Received from wazuh-manager the expected message: Sync interval is 300 seconds. -------------------------------Captured log call-------------------------------- DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:1005 Cleaning temporal files... DEBUG wazuh_testing:monitoring.py:994 Checking results... DEBUG wazuh_testing:monitoring.py:1000 Received from wazuh-manager the expected message: fim_file DEBUG wazuh_testing:monitoring.py:1000 Received from wazuh-agent1 the expected message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1644602045,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"af3a4ad03c9cdbe303c7a2b0f0e17c3846f806dd"}} DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:1005 Cleaning temporal files... DEBUG wazuh_testing:monitoring.py:994 Checking results... DEBUG wazuh_testing:monitoring.py:1000 Received from wazuh-manager the expected message: Sync interval is 300 seconds.
Passed	test_synchronization.py::test_synchronization[testdir1-modify-wazuh-agent1]	33.91
------------------------------Captured stderr call------------------------------ 2022-02-11 14:55:09,836 - wazuh_testing - DEBUG - Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-11 14:55:09,837 - wazuh_testing - DEBUG - Starting file composer for wazuh-agent1 and path: /var/ossec/logs/ossec.log. Composite file in /home/camila/Escritorio/repo/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-agent1_ossec.log.tmp 2022-02-11 14:55:09,837 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-11 14:55:09,838 - wazuh_testing - DEBUG - Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-11 14:55:09,838 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-agent1 and message: .Sending integrity control message: (.+)$ 2022-02-11 14:55:09,839 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-11 14:55:09,840 - wazuh_testing - DEBUG - Starting file composer for wazuh-manager and path: /var/ossec/logs/ossec.log. Composite file in /home/camila/Escritorio/repo/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-manager_ossec.log.tmp 2022-02-11 14:55:09,841 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-manager and message: .Agent 001 query: (.+) save2 2022-02-11 14:55:11,340 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-agentd: ERROR: (1137): Lost connection with manager. Setting lock. 2022-02-11 14:55:11,341 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-agentd: INFO: Closing connection to server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 14:55:11,341 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 14:55:11,341 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-agentd: ERROR: (1216): Unable to connect to '172.17.0.2:1514/tcp': 'Connection refused'. 2022-02-11 14:55:11,341 - wazuh_testing - DEBUG - 2022/02/11 18:54:42 wazuh-syscheckd[17052] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 14:55:11,342 - wazuh_testing - DEBUG - 2022/02/11 18:54:42 wazuh-syscheckd[17052] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644602082}} 2022-02-11 14:55:11,342 - wazuh_testing - DEBUG - 2022/02/11 18:54:42 wazuh-syscheckd[17052] wait_op.c:101 at os_wait(): WARNING: Process locked due to agent is offline. Waiting for connection... 2022-02-11 14:55:11,342 - wazuh_testing - DEBUG - 2022/02/11 18:54:43 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 14:55:11,342 - wazuh_testing - DEBUG - 2022/02/11 18:54:43 wazuh-agentd: ERROR: (1216): Unable to connect to '172.17.0.2:1514/tcp': 'Connection refused'. 2022-02-11 14:55:11,342 - wazuh_testing - DEBUG - 2022/02/11 18:54:53 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 14:55:11,343 - wazuh_testing - DEBUG - 2022/02/11 18:54:53 wazuh-agentd: INFO: (4102): Connected to the server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 14:55:11,343 - wazuh_testing - DEBUG - 2022/02/11 18:54:53 wazuh-agentd: INFO: Server responded. Releasing lock. 2022-02-11 14:55:11,343 - wazuh_testing - DEBUG - 2022/02/11 18:54:57 wazuh-syscheckd[17052] wait_op.c:116 at os_wait(): INFO: Agent is now online. Process unlocked, continuing... 2022-02-11 14:55:11,343 - wazuh_testing - DEBUG - 2022/02/11 18:54:57 wazuh-syscheckd[17052] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 14:55:11,344 - wazuh_testing - DEBUG - 2022/02/11 18:54:57 wazuh-syscheckd[17052] fim_db.c:436 at fim_db_check_transaction(): DEBUG: Database transaction completed. 2022-02-11 14:55:11,344 - wazuh_testing - DEBUG - 2022/02/11 18:54:57 wazuh-syscheckd[17052] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-11 14:55:11,344 - wazuh_testing - DEBUG - 2022/02/11 18:54:57 wazuh-syscheckd[17052] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-11 14:55:11,344 - wazuh_testing - DEBUG - 2022/02/11 18:54:30 wazuh-db[13476] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux \|wazuh-agent1 \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64","os_arch":"x86_64"} 2022-02-11 14:55:11,345 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-modulesd:syscollector: INFO: Stop received for Syscollector. 2022-02-11 14:55:11,345 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 11 disconnected. 2022-02-11 14:55:11,345 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-monitord: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:55:11,345 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-logcollector: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:55:11,346 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-remoted: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:55:11,346 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 28 disconnected. 2022-02-11 14:55:11,346 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 22 disconnected. 2022-02-11 14:55:11,346 - wazuh_testing - DEBUG - 2022/02/11 18:54:57 wazuh-syscheckd[17052] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"event","data":{"path":"/testdir1/testdir1.txt","version":2,"mode":"scheduled","type":"modified","timestamp":1644602097,"attributes":{"type":"file","size":0,"perm":"rw-r--r--","uid":"0","gid":"0","user_name":"root","group_name":"root","inode":17179747,"mtime":1644602077,"hash_md5":"d41d8cd98f00b204e9800998ecf8427e","hash_sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","hash_sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","checksum":"81af4bf6ffbfe6505b173f2243e65e454f2bafd5"},"changed_attributes":["mtime"],"old_attributes":{"type":"file","size":0,"perm":"rw-r--r--","uid":"0","gid":"0","user_name":"root","group_name":"root","inode":17179747,"mtime":1644602056,"hash_md5":"d41d8cd98f00b204e9800998ecf8427e","hash_sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","hash_sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","checksum":"7adc6f102cf20c0d2d206ff0ad4b72f8c92bd196"}}} 2022-02-11 14:55:11,346 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 18 disconnected. 2022-02-11 14:55:11,346 - wazuh_testing - DEBUG - 2022/02/11 18:54:57 wazuh-syscheckd[17052] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-11 14:55:11,346 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 16 disconnected. 2022-02-11 14:55:11,347 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-syscheckd[13610] sig_op.c:49 at HandleSIG(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:55:11,347 - wazuh_testing - DEBUG - 2022/02/11 18:54:57 wazuh-syscheckd[17052] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-11 14:55:11,347 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-analysisd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:55:11,347 - wazuh_testing - DEBUG - 2022/02/11 18:54:58 wazuh-syscheckd[17052] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 14:55:11,347 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 38 disconnected. 2022-02-11 14:55:11,347 - wazuh_testing - DEBUG - 2022/02/11 18:54:58 wazuh-syscheckd[17052] create_db.c:220 at fim_scan(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-11 14:55:11,347 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 35 disconnected. 2022-02-11 14:55:11,347 - wazuh_testing - DEBUG - 2022/02/11 18:54:58 wazuh-syscheckd[17052] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 14:55:11,348 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 34 disconnected. 2022-02-11 14:55:11,348 - wazuh_testing - DEBUG - 2022/02/11 18:54:58 wazuh-syscheckd[17052] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644602098}} 2022-02-11 14:55:11,348 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 30 disconnected. 2022-02-11 14:55:11,348 - wazuh_testing - DEBUG - 2022/02/11 18:54:58 wazuh-syscheckd[17052] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 15.606 sec (0.568 clock sec) 2022-02-11 14:55:11,348 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 29 disconnected. 2022-02-11 14:55:11,348 - wazuh_testing - DEBUG - 2022/02/11 18:54:58 wazuh-syscheckd[17052] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1621, path count: 1627 2022-02-11 14:55:11,348 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 26 disconnected. 2022-02-11 14:55:11,348 - wazuh_testing - DEBUG - 2022/02/11 18:55:03 wazuh-logcollector: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:55:11,349 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 31 disconnected. 2022-02-11 14:55:11,349 - wazuh_testing - DEBUG - 2022/02/11 18:55:03 wazuh-syscheckd[17052] sig_op.c:49 at HandleSIG(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:55:11,349 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 24 disconnected. 2022-02-11 14:55:11,349 - wazuh_testing - DEBUG - 2022/02/11 18:55:03 wazuh-agentd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:55:11,349 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 23 disconnected. 2022-02-11 14:55:11,349 - wazuh_testing - DEBUG - 2022/02/11 18:55:03 wazuh-execd: INFO: (1314): Shutdown received. Deleting responses. 2022-02-11 14:55:11,349 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 21 disconnected. 2022-02-11 14:55:11,349 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 27 disconnected. 2022-02-11 14:55:11,349 - wazuh_testing - DEBUG - 2022/02/11 18:55:03 wazuh-execd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:55:11,350 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 13 disconnected. 2022-02-11 14:55:11,350 - wazuh_testing - DEBUG - 2022/02/11 18:55:03 wazuh-syscheckd[17675] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 14:55:11,350 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 25 disconnected. 2022-02-11 14:55:11,350 - wazuh_testing - DEBUG - 2022/02/11 18:55:03 wazuh-syscheckd[17675] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 14:55:11,350 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 32 disconnected. 2022-02-11 14:55:11,350 - wazuh_testing - DEBUG - 2022/02/11 18:55:03 wazuh-syscheckd[17675] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-11 14:55:11,350 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 37 disconnected. 2022-02-11 14:55:11,350 - wazuh_testing - DEBUG - 2022/02/11 18:55:03 wazuh-syscheckd[17675] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-11 14:55:11,350 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 20 disconnected. 2022-02-11 14:55:11,350 - wazuh_testing - DEBUG - 2022/02/11 18:55:03 wazuh-syscheckd[17675] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-11 14:55:11,351 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 19 disconnected. 2022-02-11 14:55:11,351 - wazuh_testing - DEBUG - 2022/02/11 18:55:03 wazuh-syscheckd[17675] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-11 14:55:11,351 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 33 disconnected. 2022-02-11 14:55:11,351 - wazuh_testing - DEBUG - 2022/02/11 18:55:03 wazuh-syscheckd[17675] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-11 14:55:11,351 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 12 disconnected. 2022-02-11 14:55:11,351 - wazuh_testing - DEBUG - 2022/02/11 18:55:03 wazuh-syscheckd[17675] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$\|.swp$ 2022-02-11 14:55:11,351 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 10 disconnected. 2022-02-11 14:55:11,351 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 6 disconnected. 2022-02-11 14:55:11,351 - wazuh_testing - DEBUG - 2022/02/11 18:55:03 wazuh-syscheckd[17675] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$\|.swp$ OK? 2022-02-11 14:55:11,351 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-execd: INFO: (1314): Shutdown received. Deleting responses. 2022-02-11 14:55:11,352 - wazuh_testing - DEBUG - 2022/02/11 18:55:03 wazuh-syscheckd[17675] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-11 14:55:11,352 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-execd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:55:11,352 - wazuh_testing - DEBUG - 2022/02/11 18:55:03 wazuh-syscheckd[17675] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-11 14:55:11,352 - wazuh_testing - DEBUG - 2022/02/11 18:54:34 wazuh-db[13476] main.c:468 at handler(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:55:11,352 - wazuh_testing - DEBUG - 2022/02/11 18:55:03 wazuh-syscheckd[17675] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 14:55:11,352 - wazuh_testing - DEBUG - 2022/02/11 18:54:34 wazuh-db[13476] wdb.c:872 at wdb_close_all(): DEBUG: Closing all databases... 2022-02-11 14:55:11,352 - wazuh_testing - DEBUG - 2022/02/11 18:55:03 wazuh-syscheckd[17675] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 14:55:11,352 - wazuh_testing - DEBUG - 2022/02/11 18:54:34 wazuh-db[13476] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent 001 2022-02-11 14:55:11,352 - wazuh_testing - DEBUG - 2022/02/11 18:55:03 wazuh-syscheckd[17675] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 14:55:11,352 - wazuh_testing - DEBUG - 2022/02/11 18:54:34 wazuh-db[13476] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent 000 2022-02-11 14:55:11,353 - wazuh_testing - DEBUG - 2022/02/11 18:55:03 wazuh-syscheckd[17675] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 14:55:11,353 - wazuh_testing - DEBUG - 2022/02/11 18:54:34 wazuh-db[13476] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent mitre 2022-02-11 14:55:11,353 - wazuh_testing - DEBUG - 2022/02/11 18:55:03 wazuh-syscheckd[17675] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 14:55:11,353 - wazuh_testing - DEBUG - 2022/02/11 18:54:34 wazuh-db[13476] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent global 2022-02-11 14:55:11,353 - wazuh_testing - DEBUG - 2022/02/11 18:55:03 wazuh-syscheckd[17675] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 14:55:11,353 - wazuh_testing - DEBUG - 2022/02/11 18:54:34 wazuh-db[13476] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent tasks 2022-02-11 14:55:11,353 - wazuh_testing - DEBUG - 2022/02/11 18:55:03 wazuh-execd: INFO: Started (pid: 17688). 2022-02-11 14:55:11,353 - wazuh_testing - DEBUG - 2022/02/11 18:54:34 wazuh-db[13476] main.c:231 at main(): DEBUG: Template file removed again: queue/db/.template.db 2022-02-11 14:55:11,353 - wazuh_testing - DEBUG - 2022/02/11 18:55:04 wazuh-agentd: INFO: (1410): Reading authentication keys file. 2022-02-11 14:55:11,353 - wazuh_testing - DEBUG - 2022/02/11 18:54:34 wazuh-authd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:55:11,354 - wazuh_testing - DEBUG - 2022/02/11 18:54:35 wazuh-authd: INFO: Exiting... 2022-02-11 14:55:11,354 - wazuh_testing - DEBUG - 2022/02/11 18:55:04 wazuh-agentd: INFO: Using notify time: 10 and max time to reconnect: 60 2022-02-11 14:55:11,354 - wazuh_testing - DEBUG - 2022/02/11 18:54:40 wazuh-db[14402] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 14:55:11,354 - wazuh_testing - DEBUG - 2022/02/11 18:55:04 wazuh-agentd: INFO: Version detected -> Linux \|wazuh-agent1 \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64 [Debian GNU/Linux\|debian: 10 (buster)] - Wazuh v4.2.5 2022-02-11 14:55:11,354 - wazuh_testing - DEBUG - 2022/02/11 18:54:40 wazuh-db[14402] main.c:101 at main(): DEBUG: Wazuh home directory: /var/ossec 2022-02-11 14:55:11,354 - wazuh_testing - DEBUG - 2022/02/11 18:55:04 wazuh-agentd: INFO: Started (pid: 17699). 2022-02-11 14:55:11,354 - wazuh_testing - DEBUG - 2022/02/11 18:54:40 wazuh-syscheckd[14406] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 14:55:11,354 - wazuh_testing - DEBUG - 2022/02/11 18:55:04 wazuh-agentd: INFO: Server IP Address: wazuh-manager/172.17.0.2 2022-02-11 14:55:11,354 - wazuh_testing - DEBUG - 2022/02/11 18:54:40 wazuh-syscheckd[14406] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 14:55:11,354 - wazuh_testing - DEBUG - 2022/02/11 18:55:04 wazuh-agentd: INFO: Using AES as encryption method. 2022-02-11 14:55:11,355 - wazuh_testing - DEBUG - 2022/02/11 18:54:40 wazuh-syscheckd[14406] syscheck-config.c:122 at organize_syscheck_dirs(): DEBUG: No directory entries to organize in syscheck configuration. 2022-02-11 14:55:11,355 - wazuh_testing - DEBUG - 2022/02/11 18:55:04 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 14:55:11,355 - wazuh_testing - DEBUG - 2022/02/11 18:54:42 wazuh-csyslogd: INFO: Remote syslog server not configured. Clean exit. 2022-02-11 14:55:11,355 - wazuh_testing - DEBUG - 2022/02/11 18:55:04 wazuh-agentd: INFO: (4102): Connected to the server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 14:55:11,355 - wazuh_testing - DEBUG - 2022/02/11 18:54:42 wazuh-dbd: INFO: Database not configured. Clean exit. 2022-02-11 14:55:11,355 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 14:55:11,355 - wazuh_testing - DEBUG - 2022/02/11 18:54:42 wazuh-integratord: INFO: Remote integrations not configured. Clean exit. 2022-02-11 14:55:11,355 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 14:55:11,355 - wazuh_testing - DEBUG - 2022/02/11 18:54:42 wazuh-agentlessd: INFO: Not configured. Exiting. 2022-02-11 14:55:11,355 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-11 14:55:11,356 - wazuh_testing - DEBUG - 2022/02/11 18:54:42 wazuh-authd: INFO: Started (pid: 14472). 2022-02-11 14:55:11,356 - wazuh_testing - DEBUG - 2022/02/11 18:54:42 wazuh-authd: INFO: Accepting connections on port 1515. No password required. 2022-02-11 14:55:11,356 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-11 14:55:11,356 - wazuh_testing - DEBUG - 2022/02/11 18:54:42 wazuh-authd: INFO: Setting network timeout to 1.000000 sec. 2022-02-11 14:55:11,356 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-11 14:55:11,356 - wazuh_testing - DEBUG - 2022/02/11 18:54:43 wazuh-db[14486] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 14:55:11,356 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-11 14:55:11,356 - wazuh_testing - DEBUG - 2022/02/11 18:54:43 wazuh-db[14486] main.c:101 at main(): DEBUG: Wazuh home directory: /var/ossec 2022-02-11 14:55:11,357 - wazuh_testing - DEBUG - 2022/02/11 18:54:43 wazuh-db[14486] main.c:122 at main(): DEBUG: Template file removed: /var/ossec/queue/db/.template.db 2022-02-11 14:55:11,357 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-11 14:55:11,357 - wazuh_testing - DEBUG - 2022/02/11 18:54:43 wazuh-db[14486] main.c:178 at main(): INFO: Started (pid: 14488). 2022-02-11 14:55:11,357 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$\|.swp$ 2022-02-11 14:55:11,357 - wazuh_testing - DEBUG - 2022/02/11 18:54:45 wazuh-execd: INFO: (1350): Active response disabled. 2022-02-11 14:55:11,357 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$\|.swp$ OK? 2022-02-11 14:55:11,357 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-11 14:55:11,357 - wazuh_testing - DEBUG - 2022/02/11 18:54:45 wazuh-execd: INFO: Started (pid: 14511). 2022-02-11 14:55:11,357 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-11 14:55:11,358 - wazuh_testing - DEBUG - 2022/02/11 18:54:46 wazuh-analysisd: INFO: Total rules enabled: '3882' 2022-02-11 14:55:11,358 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 14:55:11,358 - wazuh_testing - DEBUG - 2022/02/11 18:54:46 wazuh-analysisd: INFO: Started (pid: 14525). 2022-02-11 14:55:11,358 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 14:55:11,358 - wazuh_testing - DEBUG - 2022/02/11 18:54:46 wazuh-db[14486] main.c:290 at run_dealer(): DEBUG: New client connected (6). 2022-02-11 14:55:11,358 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 14:55:11,358 - wazuh_testing - DEBUG - 2022/02/11 18:54:46 wazuh-analysisd: INFO: (7200): Logtest started 2022-02-11 14:55:11,358 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 14:55:11,358 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 14:55:11,358 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 14:55:11,358 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 14:55:11,358 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 14:55:11,358 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] syscheck-config.c:122 at organize_syscheck_dirs(): DEBUG: No directory entries to organize in syscheck configuration. 2022-02-11 14:55:11,359 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 rootcheck[17711] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled. 2022-02-11 14:55:11,359 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] main.c:118 at main(): INFO: (6678): No directory provided for syscheck to monitor. 2022-02-11 14:55:11,359 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] main.c:136 at main(): INFO: (6001): File integrity monitoring disabled. 2022-02-11 14:55:11,359 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:55:11,359 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 rootcheck[14620] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled. 2022-02-11 14:55:11,359 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] syscom.c:123 at syscom_main(): DEBUG: (6284): Local requests thread ready. 2022-02-11 14:55:11,359 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:55:11,359 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] mq_op.c:47 at StartMQ(): DEBUG: Connected succesfully to 'queue/sockets/queue' after 0 attempts 2022-02-11 14:55:11,359 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] syscom.c:123 at syscom_main(): DEBUG: (6284): Local requests thread ready. 2022-02-11 14:55:11,359 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] mq_op.c:48 at StartMQ(): DEBUG: (unix_domain) Maximum send buffer set to: '212992'. 2022-02-11 14:55:11,359 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] mq_op.c:47 at StartMQ(): DEBUG: Connected succesfully to 'queue/sockets/queue' after 0 attempts 2022-02-11 14:55:11,359 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] main.c:185 at main(): INFO: Started (pid: 17713). 2022-02-11 14:55:11,359 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] mq_op.c:48 at StartMQ(): DEBUG: (unix_domain) Maximum send buffer set to: '212992'. 2022-02-11 14:55:11,359 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] main.c:193 at main(): INFO: (6003): Monitoring path: '/bin', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 14:55:11,360 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] main.c:185 at main(): INFO: Started (pid: 14622). 2022-02-11 14:55:11,360 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] main.c:193 at main(): INFO: (6003): Monitoring path: '/boot', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 14:55:11,360 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] main.c:215 at main(): DEBUG: (6357): Maximum disk quota size limit configured to '1048576 KB'. 2022-02-11 14:55:11,360 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] main.c:193 at main(): INFO: (6003): Monitoring path: '/etc', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 14:55:11,360 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] run_check.c:194 at start_daemon(): DEBUG: (6320): Setting process priority to: '10' 2022-02-11 14:55:11,360 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] main.c:193 at main(): INFO: (6003): Monitoring path: '/sbin', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 14:55:11,360 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:55:11,360 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir1', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 14:55:11,360 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] run_check.c:229 at start_daemon(): INFO: (6000): Starting daemon... 2022-02-11 14:55:11,360 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] run_check.c:232 at start_daemon(): INFO: (6010): File integrity monitoring scan frequency: 43200 seconds 2022-02-11 14:55:11,360 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir2', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| realtime'. 2022-02-11 14:55:11,360 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir3', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| whodata'. 2022-02-11 14:55:11,361 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/bin', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 14:55:11,361 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 14:55:11,361 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/sbin', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 14:55:11,361 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] main.c:215 at main(): DEBUG: (6357): Maximum disk quota size limit configured to '1048576 KB'. 2022-02-11 14:55:11,361 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644602087}} 2022-02-11 14:55:11,361 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mtab' 2022-02-11 14:55:11,361 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 14:55:11,361 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-db[14486] main.c:290 at run_dealer(): DEBUG: New client connected (10). 2022-02-11 14:55:11,362 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/hosts.deny' 2022-02-11 14:55:11,362 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 14:55:11,362 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 14:55:11,362 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mail/statistics' 2022-02-11 14:55:11,362 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random-seed' 2022-02-11 14:55:11,362 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-db[14486] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 000 query: syscheck scan_info_update start_scan 1644602087 2022-02-11 14:55:11,362 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random.seed' 2022-02-11 14:55:11,362 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644602087}} 2022-02-11 14:55:11,362 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/adjtime' 2022-02-11 14:55:11,362 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.000 sec (0.000 clock sec) 2022-02-11 14:55:11,362 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/httpd/logs' 2022-02-11 14:55:11,362 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 0, path count: 0 2022-02-11 14:55:11,362 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/utmpx' 2022-02-11 14:55:11,362 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:55:11,363 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/wtmpx' 2022-02-11 14:55:11,363 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-db[14486] main.c:290 at run_dealer(): DEBUG: New client connected (11). 2022-02-11 14:55:11,363 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/cups/certs' 2022-02-11 14:55:11,363 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-db[14486] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 000 query: syscheck scan_info_update end_scan 1644602087 2022-02-11 14:55:11,363 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/dumpdates' 2022-02-11 14:55:11,363 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:55:11,363 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/svc/volatile' 2022-02-11 14:55:11,363 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:55:11,363 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. 2022-02-11 14:55:11,363 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/security' 2022-02-11 14:55:11,363 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/debug' 2022-02-11 14:55:11,363 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] run_check.c:568 at symlink_checker_thread(): DEBUG: (6033): Starting symbolic link updater. Interval '600'. 2022-02-11 14:55:11,363 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/dev/core' 2022-02-11 14:55:11,363 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] run_check.c:82 at fim_send_sync_msg(): DEBUG: (6317): Sending integrity control message: {"component":"fim_file","type":"integrity_clear","data":{"id":1644602087,"version":2}} 2022-02-11 14:55:11,364 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '^/proc' 2022-02-11 14:55:11,364 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] fim_sync.c:70 at fim_run_integrity(): DEBUG: Finished calculating FIM integrity. Time: 0.000 seconds. 2022-02-11 14:55:11,364 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '.log$\|.swp$' 2022-02-11 14:55:11,364 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-db[14486] main.c:290 at run_dealer(): DEBUG: New client connected (13). 2022-02-11 14:55:11,364 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] main.c:235 at main(): INFO: (6004): No diff for file: '/etc/ssl/private.key' 2022-02-11 14:55:11,364 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-db[14486] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 000 query: fim_file integrity_clear {"id":1644602087,"version":2} 2022-02-11 14:55:11,364 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] main.c:245 at main(): INFO: (6016): Directory set for real time monitoring: '/testdir2'. 2022-02-11 14:55:11,364 - wazuh_testing - DEBUG - 2022/02/11 18:54:48 wazuh-remoted: INFO: Started (pid: 14641). Listening on port 1514/TCP (secure). 2022-02-11 14:55:11,364 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] syscheck_audit.c:243 at audit_init(): WARNING: (6924): Who-data engine cannot start because Auditd is not running. 2022-02-11 14:55:11,364 - wazuh_testing - DEBUG - 2022/02/11 18:54:48 wazuh-db[14486] main.c:290 at run_dealer(): DEBUG: New client connected (12). 2022-02-11 14:55:11,365 - wazuh_testing - DEBUG - 2022/02/11 18:54:48 wazuh-db[14486] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: reset-agents-connection synced 2022-02-11 14:55:11,365 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] main.c:264 at main(): WARNING: (6913): Who-data engine could not start. Switching who-data to real-time. 2022-02-11 14:55:11,365 - wazuh_testing - DEBUG - 2022/02/11 18:54:48 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 12 disconnected. 2022-02-11 14:55:11,365 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] run_check.c:194 at start_daemon(): DEBUG: (6320): Setting process priority to: '10' 2022-02-11 14:55:11,365 - wazuh_testing - DEBUG - 2022/02/11 18:54:48 wazuh-remoted: INFO: (1410): Reading authentication keys file. 2022-02-11 14:55:11,365 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:55:11,365 - wazuh_testing - DEBUG - 2022/02/11 18:54:49 wazuh-logcollector: INFO: (1950): Analyzing file: '/var/ossec/logs/active-responses.log'. 2022-02-11 14:55:11,365 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] run_check.c:229 at start_daemon(): INFO: (6000): Starting daemon... 2022-02-11 14:55:11,366 - wazuh_testing - DEBUG - 2022/02/11 18:54:49 wazuh-logcollector: INFO: (1950): Analyzing file: '/var/log/dpkg.log'. 2022-02-11 14:55:11,366 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] run_check.c:232 at start_daemon(): INFO: (6010): File integrity monitoring scan frequency: 20 seconds 2022-02-11 14:55:11,366 - wazuh_testing - DEBUG - 2022/02/11 18:54:49 wazuh-logcollector: INFO: Started (pid: 14676). 2022-02-11 14:55:11,366 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 14:55:11,366 - wazuh_testing - DEBUG - 2022/02/11 18:54:50 wazuh-monitord: INFO: Started (pid: 14695). 2022-02-11 14:55:11,366 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644602105}} 2022-02-11 14:55:11,366 - wazuh_testing - DEBUG - 2022/02/11 18:54:51 wazuh-modulesd: INFO: Started (pid: 14707). 2022-02-11 14:55:11,366 - wazuh_testing - DEBUG - 2022/02/11 18:54:51 wazuh-modulesd:agent-upgrade: INFO: (8153): Module Agent Upgrade started. 2022-02-11 14:55:11,366 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 14:55:11,367 - wazuh_testing - DEBUG - 2022/02/11 18:54:51 wazuh-modulesd:ciscat: INFO: Module disabled. Exiting... 2022-02-11 14:55:11,367 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-11 14:55:11,367 - wazuh_testing - DEBUG - 2022/02/11 18:54:51 wazuh-modulesd:syscollector: INFO: Module disabled. Exiting... 2022-02-11 14:55:11,367 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-11 14:55:11,367 - wazuh_testing - DEBUG - 2022/02/11 18:54:51 wazuh-modulesd:osquery: INFO: Module disabled. Exiting... 2022-02-11 14:55:11,367 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-11 14:55:11,367 - wazuh_testing - DEBUG - 2022/02/11 18:54:51 sca: INFO: Module disabled. Exiting. 2022-02-11 14:55:11,367 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-11 14:55:11,367 - wazuh_testing - DEBUG - 2022/02/11 18:54:51 wazuh-modulesd:database: INFO: Module started. 2022-02-11 14:55:11,367 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 14:55:11,368 - wazuh_testing - DEBUG - 2022/02/11 18:54:51 wazuh-modulesd:download: INFO: Module started. 2022-02-11 14:55:11,368 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 14:55:11,368 - wazuh_testing - DEBUG - 2022/02/11 18:54:51 wazuh-modulesd:control: INFO: Starting control thread. 2022-02-11 14:55:11,368 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644602105}} 2022-02-11 14:55:11,368 - wazuh_testing - DEBUG - 2022/02/11 18:54:51 wazuh-db[14486] main.c:290 at run_dealer(): DEBUG: New client connected (12). 2022-02-11 14:55:11,368 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.337 sec (0.336 clock sec) 2022-02-11 14:55:11,368 - wazuh_testing - DEBUG - 2022/02/11 18:54:51 wazuh-db[14486] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-name {"id":0,"name":"wazuh-manager"} 2022-02-11 14:55:11,368 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1621, path count: 1627 2022-02-11 14:55:11,369 - wazuh_testing - DEBUG - 2022/02/11 18:54:51 wazuh-modulesd:task-manager: INFO: (8200): Module Task Manager started. 2022-02-11 14:55:11,369 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:55:11,369 - wazuh_testing - DEBUG - 2022/02/11 18:54:51 wazuh-db[14486] main.c:290 at run_dealer(): DEBUG: New client connected (16). 2022-02-11 14:55:11,369 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:55:11,369 - wazuh_testing - DEBUG - 2022/02/11 18:54:51 wazuh-db[14486] wdb_parser.c:928 at wdb_parse(): DEBUG: Task query: set_timeout {"now":1644602091,"interval":900} 2022-02-11 14:55:11,369 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:55:11,369 - wazuh_testing - DEBUG - 2022/02/11 18:54:51 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 16 disconnected. 2022-02-11 14:55:11,369 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] run_check.c:387 at fim_run_realtime(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-11 14:55:11,369 - wazuh_testing - DEBUG - 2022/02/11 18:54:51 wazuh-db[14486] main.c:290 at run_dealer(): DEBUG: New client connected (16). 2022-02-11 14:55:11,370 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] run_check.c:543 at log_realtime_status(): INFO: (6012): Real-time file integrity monitoring started. 2022-02-11 14:55:11,370 - wazuh_testing - DEBUG - 2022/02/11 18:54:51 wazuh-db[14486] wdb_parser.c:928 at wdb_parse(): DEBUG: Task query: delete_old {"timestamp":1643997291} 2022-02-11 14:55:11,370 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. 2022-02-11 14:55:11,370 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] run_check.c:568 at symlink_checker_thread(): DEBUG: (6033): Starting symbolic link updater. Interval '600'. 2022-02-11 14:55:11,370 - wazuh_testing - DEBUG - 2022/02/11 18:54:51 wazuh-db[14486] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":0,"version":"Wazuh v4.2.5","manager_host":"wazuh-manager","node_name":"wazuh-master","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux \|wazuh-manager \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64","os_arch":"x86_64"} 2022-02-11 14:55:11,370 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] run_check.c:82 at fim_send_sync_msg(): DEBUG: (6317): Sending integrity control message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1644602105,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"7a6b6cca3d5b0c4708859eaf35f191e6e6fce693"}} 2022-02-11 14:55:11,370 - wazuh_testing - DEBUG - 2022/02/11 18:54:51 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 16 disconnected. 2022-02-11 14:55:11,370 - wazuh_testing - DEBUG - 2022/02/11 18:54:51 wazuh-db[14486] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: insert-agent {"id":1,"name":"wazuh-agent1","register_ip":"any","internal_key":"1111111111111111111111111111111111111111111111111111111111111111","group":"default","date_add":0} 2022-02-11 14:55:11,371 - wazuh_testing - DEBUG - 2022/02/11 18:54:51 wazuh-db[14486] wdb_global.c:89 at wdb_global_insert_agent(): DEBUG: SQLite: UNIQUE constraint failed: agent.id 2022-02-11 14:55:11,371 - wazuh_testing - DEBUG - 2022/02/11 18:54:51 wazuh-db[14486] wdb_parser.c:4784 at wdb_parse_global_insert_agent(): DEBUG: Global DB Cannot execute SQL query; err database queue/db/global.db: UNIQUE constraint failed: agent.id 2022-02-11 14:55:11,371 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-agent1 and message: .Sending integrity control message: (.+)$ 2022-02-11 14:55:11,371 - wazuh_testing - DEBUG - 2022/02/11 18:54:51 wazuh-db[14486] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-group {"id":1,"group":"default"} 2022-02-11 14:55:11,371 - wazuh_testing - DEBUG - 2022/02/11 18:54:51 wazuh-db[14486] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: delete-agent-belong 1 2022-02-11 14:55:11,372 - wazuh_testing - DEBUG - 2022/02/11 18:54:51 wazuh-db[14486] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: find-group default 2022-02-11 14:55:11,372 - wazuh_testing - DEBUG - 2022/02/11 18:54:51 wazuh-db[14486] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: insert-agent-belong {"id_group":1,"id_agent":1} 2022-02-11 14:55:11,372 - wazuh_testing - DEBUG - 2022/02/11 18:54:51 wazuh-db[14486] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: get-all-agents last_id 0 2022-02-11 14:55:11,373 - wazuh_testing - DEBUG - 2022/02/11 18:54:51 wazuh-db[14486] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: select-groups 2022-02-11 14:55:11,373 - wazuh_testing - DEBUG - 2022/02/11 18:54:51 wazuh-db[14486] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: find-group default 2022-02-11 14:55:11,373 - wazuh_testing - DEBUG - 2022/02/11 18:54:51 wazuh-db[14486] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: get-all-agents last_id 0 2022-02-11 14:55:11,373 - wazuh_testing - DEBUG - 2022/02/11 18:54:51 wazuh-db[14486] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: select-agent-group 1 2022-02-11 14:55:11,374 - wazuh_testing - DEBUG - 2022/02/11 18:54:51 wazuh-db[14486] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: delete-agent-belong 1 2022-02-11 14:55:11,374 - wazuh_testing - DEBUG - 2022/02/11 18:54:51 wazuh-db[14486] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: find-group default 2022-02-11 14:55:11,374 - wazuh_testing - DEBUG - 2022/02/11 18:54:51 wazuh-db[14486] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: insert-agent-belong {"id_group":1,"id_agent":1} 2022-02-11 14:55:11,375 - wazuh_testing - DEBUG - 2022/02/11 18:54:51 wazuh-db[14486] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: select-agent-name 1 2022-02-11 14:55:11,375 - wazuh_testing - DEBUG - 2022/02/11 18:54:51 wazuh-db[14486] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: select-agent-name 1 2022-02-11 14:55:11,375 - wazuh_testing - DEBUG - 2022/02/11 18:54:53 wazuh-db[14486] main.c:290 at run_dealer(): DEBUG: New client connected (16). 2022-02-11 14:55:11,375 - wazuh_testing - DEBUG - 2022/02/11 18:54:53 wazuh-db[14486] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-keepalive {"id":1,"connection_status":"pending","sync_status":"synced"} 2022-02-11 14:55:11,375 - wazuh_testing - DEBUG - 2022/02/11 18:54:53 wazuh-db[14486] main.c:290 at run_dealer(): DEBUG: New client connected (18). 2022-02-11 14:55:11,376 - wazuh_testing - DEBUG - 2022/02/11 18:54:53 wazuh-db[14486] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux \|wazuh-agent1 \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64","os_arch":"x86_64"} 2022-02-11 14:55:11,376 - wazuh_testing - DEBUG - 2022/02/11 18:54:57 wazuh-db[14486] wdb.c:918 at wdb_commit_old(): DEBUG: Agent 'mitre' database commited. Time: 0.042 ms. 2022-02-11 14:55:11,376 - wazuh_testing - DEBUG - 2022/02/11 18:54:57 wazuh-db[14486] main.c:290 at run_dealer(): DEBUG: New client connected (19). 2022-02-11 14:55:11,377 - wazuh_testing - DEBUG - 2022/02/11 18:54:57 wazuh-db[14486] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1644602082 2022-02-11 14:55:11,377 - wazuh_testing - DEBUG - 2022/02/11 18:54:57 wazuh-db[14486] main.c:290 at run_dealer(): DEBUG: New client connected (20). 2022-02-11 14:55:11,377 - wazuh_testing - DEBUG - 2022/02/11 18:54:57 wazuh-db[14486] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck save2 {"path":"/testdir1/testdir1.txt","version":2,"timestamp":1644602097,"attributes":{"type":"file","size":0,"perm":"rw-r--r--","uid":"0","gid":"0","user_name":"root","group_name":"root","inode":17179747,"mtime":1644602077,"hash_md5":"d41d8cd98f00b204e9800998ecf8427e","hash_sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","hash_sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","checksum":"81af4bf6ffbfe6505b173f2243e65e454f2bafd5"}} 2022-02-11 14:55:11,379 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-manager and message: .Agent 001 query: (.+) save2 2022-02-11 14:55:12,348 - wazuh_testing - DEBUG - Cleaning temporal files... 2022-02-11 14:55:12,348 - wazuh_testing - DEBUG - Checking results... 2022-02-11 14:55:12,349 - wazuh_testing - DEBUG - Received from wazuh-agent1 the expected message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1644602105,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"7a6b6cca3d5b0c4708859eaf35f191e6e6fce693"}} 2022-02-11 14:55:12,350 - wazuh_testing - DEBUG - Received from wazuh-manager the expected message: syscheck 2022-02-11 14:55:28,319 - wazuh_testing - DEBUG - Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-11 14:55:28,320 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-11 14:55:28,320 - wazuh_testing - DEBUG - Starting file composer for wazuh-agent1 and path: /var/ossec/logs/ossec.log. Composite file in /home/camila/Escritorio/repo/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-agent1_ossec.log.tmp 2022-02-11 14:55:28,321 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-agent1 and message: .Initializing FIM Integrity Synchronization check. (.+)$ 2022-02-11 14:55:29,823 - wazuh_testing - DEBUG - 2022/02/11 18:55:17 wazuh-logcollector: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:55:29,823 - wazuh_testing - DEBUG - 2022/02/11 18:55:17 wazuh-syscheckd[17711] sig_op.c:49 at HandleSIG(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:55:29,824 - wazuh_testing - DEBUG - 2022/02/11 18:55:17 wazuh-agentd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:55:29,824 - wazuh_testing - DEBUG - 2022/02/11 18:55:17 wazuh-execd: INFO: (1314): Shutdown received. Deleting responses. 2022-02-11 14:55:29,824 - wazuh_testing - DEBUG - 2022/02/11 18:55:17 wazuh-execd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:55:29,824 - wazuh_testing - DEBUG - 2022/02/11 18:55:21 wazuh-syscheckd[18208] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 14:55:29,824 - wazuh_testing - DEBUG - 2022/02/11 18:55:21 wazuh-syscheckd[18208] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 14:55:29,825 - wazuh_testing - DEBUG - 2022/02/11 18:55:21 wazuh-syscheckd[18208] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-11 14:55:29,825 - wazuh_testing - DEBUG - 2022/02/11 18:55:21 wazuh-syscheckd[18208] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-11 14:55:29,825 - wazuh_testing - DEBUG - 2022/02/11 18:55:21 wazuh-syscheckd[18208] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-11 14:55:29,825 - wazuh_testing - DEBUG - 2022/02/11 18:55:21 wazuh-syscheckd[18208] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-11 14:55:29,826 - wazuh_testing - DEBUG - 2022/02/11 18:55:21 wazuh-syscheckd[18208] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-11 14:55:29,826 - wazuh_testing - DEBUG - 2022/02/11 18:55:21 wazuh-syscheckd[18208] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$\|.swp$ 2022-02-11 14:55:29,826 - wazuh_testing - DEBUG - 2022/02/11 18:55:21 wazuh-syscheckd[18208] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$\|.swp$ OK? 2022-02-11 14:55:29,826 - wazuh_testing - DEBUG - 2022/02/11 18:55:21 wazuh-syscheckd[18208] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-11 14:55:29,827 - wazuh_testing - DEBUG - 2022/02/11 18:55:21 wazuh-syscheckd[18208] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-11 14:55:29,827 - wazuh_testing - DEBUG - 2022/02/11 18:55:21 wazuh-syscheckd[18208] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 14:55:29,827 - wazuh_testing - DEBUG - 2022/02/11 18:55:21 wazuh-syscheckd[18208] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 14:55:29,827 - wazuh_testing - DEBUG - 2022/02/11 18:55:21 wazuh-syscheckd[18208] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 14:55:29,828 - wazuh_testing - DEBUG - 2022/02/11 18:55:21 wazuh-syscheckd[18208] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 14:55:29,828 - wazuh_testing - DEBUG - 2022/02/11 18:55:21 wazuh-syscheckd[18208] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 14:55:29,828 - wazuh_testing - DEBUG - 2022/02/11 18:55:21 wazuh-syscheckd[18208] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 14:55:29,828 - wazuh_testing - DEBUG - 2022/02/11 18:55:21 wazuh-execd: INFO: Started (pid: 18221). 2022-02-11 14:55:29,828 - wazuh_testing - DEBUG - 2022/02/11 18:55:22 wazuh-agentd: INFO: (1410): Reading authentication keys file. 2022-02-11 14:55:29,829 - wazuh_testing - DEBUG - 2022/02/11 18:55:22 wazuh-agentd: INFO: Using notify time: 10 and max time to reconnect: 60 2022-02-11 14:55:29,829 - wazuh_testing - DEBUG - 2022/02/11 18:55:22 wazuh-agentd: INFO: Version detected -> Linux \|wazuh-agent1 \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64 [Debian GNU/Linux\|debian: 10 (buster)] - Wazuh v4.2.5 2022-02-11 14:55:29,829 - wazuh_testing - DEBUG - 2022/02/11 18:55:22 wazuh-agentd: INFO: Started (pid: 18232). 2022-02-11 14:55:29,830 - wazuh_testing - DEBUG - 2022/02/11 18:55:22 wazuh-agentd: INFO: Server IP Address: wazuh-manager/172.17.0.2 2022-02-11 14:55:29,830 - wazuh_testing - DEBUG - 2022/02/11 18:55:22 wazuh-agentd: INFO: Using AES as encryption method. 2022-02-11 14:55:29,830 - wazuh_testing - DEBUG - 2022/02/11 18:55:22 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 14:55:29,830 - wazuh_testing - DEBUG - 2022/02/11 18:55:22 wazuh-agentd: INFO: (4102): Connected to the server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 14:55:29,830 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 14:55:29,831 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 14:55:29,831 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-11 14:55:29,831 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-11 14:55:29,831 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-11 14:55:29,832 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-11 14:55:29,832 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-11 14:55:29,832 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$\|.swp$ 2022-02-11 14:55:29,833 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$\|.swp$ OK? 2022-02-11 14:55:29,833 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-11 14:55:29,833 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-11 14:55:29,833 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 14:55:29,833 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 14:55:29,834 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 14:55:29,834 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 14:55:29,834 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 14:55:29,834 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 14:55:29,834 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 rootcheck[18244] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled. 2022-02-11 14:55:29,835 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:55:29,835 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] syscom.c:123 at syscom_main(): DEBUG: (6284): Local requests thread ready. 2022-02-11 14:55:29,835 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] mq_op.c:47 at StartMQ(): DEBUG: Connected succesfully to 'queue/sockets/queue' after 0 attempts 2022-02-11 14:55:29,835 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] mq_op.c:48 at StartMQ(): DEBUG: (unix_domain) Maximum send buffer set to: '212992'. 2022-02-11 14:55:29,835 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:185 at main(): INFO: Started (pid: 18246). 2022-02-11 14:55:29,836 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:193 at main(): INFO: (6003): Monitoring path: '/bin', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 14:55:29,836 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:193 at main(): INFO: (6003): Monitoring path: '/boot', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 14:55:29,836 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:193 at main(): INFO: (6003): Monitoring path: '/etc', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 14:55:29,836 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:193 at main(): INFO: (6003): Monitoring path: '/sbin', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 14:55:29,836 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir1', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 14:55:29,837 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir2', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| realtime'. 2022-02-11 14:55:29,837 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir3', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| whodata'. 2022-02-11 14:55:29,837 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/bin', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 14:55:29,837 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/sbin', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 14:55:29,837 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:215 at main(): DEBUG: (6357): Maximum disk quota size limit configured to '1048576 KB'. 2022-02-11 14:55:29,838 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mtab' 2022-02-11 14:55:29,838 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/hosts.deny' 2022-02-11 14:55:29,838 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mail/statistics' 2022-02-11 14:55:29,839 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random-seed' 2022-02-11 14:55:29,839 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random.seed' 2022-02-11 14:55:29,840 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/adjtime' 2022-02-11 14:55:29,840 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/httpd/logs' 2022-02-11 14:55:29,840 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/utmpx' 2022-02-11 14:55:29,840 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/wtmpx' 2022-02-11 14:55:29,840 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/cups/certs' 2022-02-11 14:55:29,840 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/dumpdates' 2022-02-11 14:55:29,841 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/svc/volatile' 2022-02-11 14:55:29,841 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/security' 2022-02-11 14:55:29,841 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/debug' 2022-02-11 14:55:29,841 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/dev/core' 2022-02-11 14:55:29,841 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '^/proc' 2022-02-11 14:55:29,841 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '.log$\|.swp$' 2022-02-11 14:55:29,841 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:235 at main(): INFO: (6004): No diff for file: '/etc/ssl/private.key' 2022-02-11 14:55:29,842 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:245 at main(): INFO: (6016): Directory set for real time monitoring: '/testdir2'. 2022-02-11 14:55:29,842 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] syscheck_audit.c:243 at audit_init(): WARNING: (6924): Who-data engine cannot start because Auditd is not running. 2022-02-11 14:55:29,842 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:264 at main(): WARNING: (6913): Who-data engine could not start. Switching who-data to real-time. 2022-02-11 14:55:29,842 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] run_check.c:194 at start_daemon(): DEBUG: (6320): Setting process priority to: '10' 2022-02-11 14:55:29,842 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:55:29,842 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] run_check.c:229 at start_daemon(): INFO: (6000): Starting daemon... 2022-02-11 14:55:29,842 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] run_check.c:232 at start_daemon(): INFO: (6010): File integrity monitoring scan frequency: 20 seconds 2022-02-11 14:55:29,842 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 14:55:29,843 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644602123}} 2022-02-11 14:55:29,843 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 14:55:29,843 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-11 14:55:29,843 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-11 14:55:29,843 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-11 14:55:29,843 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-11 14:55:29,844 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 14:55:29,844 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 14:55:29,844 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644602123}} 2022-02-11 14:55:29,844 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.339 sec (0.338 clock sec) 2022-02-11 14:55:29,844 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1622, path count: 1628 2022-02-11 14:55:29,844 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:55:29,844 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:55:29,845 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:55:29,845 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. 2022-02-11 14:55:29,845 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-agent1 and message: .Initializing FIM Integrity Synchronization check. (.+)$ 2022-02-11 14:55:30,825 - wazuh_testing - DEBUG - Cleaning temporal files... 2022-02-11 14:55:30,826 - wazuh_testing - DEBUG - Checking results... 2022-02-11 14:55:30,827 - wazuh_testing - DEBUG - Received from wazuh-agent1 the expected message: Sync interval is 300 seconds. -------------------------------Captured log call-------------------------------- DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:1005 Cleaning temporal files... DEBUG wazuh_testing:monitoring.py:994 Checking results... DEBUG wazuh_testing:monitoring.py:1000 Received from wazuh-agent1 the expected message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1644602105,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"7a6b6cca3d5b0c4708859eaf35f191e6e6fce693"}} DEBUG wazuh_testing:monitoring.py:1000 Received from wazuh-manager the expected message: syscheck DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:1005 Cleaning temporal files... DEBUG wazuh_testing:monitoring.py:994 Checking results... DEBUG wazuh_testing:monitoring.py:1000 Received from wazuh-agent1 the expected message: Sync interval is 300 seconds.
Passed	test_synchronization.py::test_synchronization[testdir1-modify-wazuh-manager]	46.89
------------------------------Captured stderr call------------------------------ 2022-02-11 14:55:44,715 - wazuh_testing - DEBUG - Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-11 14:55:44,716 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-11 14:55:44,717 - wazuh_testing - DEBUG - Starting file composer for wazuh-agent1 and path: /var/ossec/logs/ossec.log. Composite file in /home/camila/Escritorio/repo/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-agent1_ossec.log.tmp 2022-02-11 14:55:44,717 - wazuh_testing - DEBUG - Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-11 14:55:44,718 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-agent1 and message: .Sending integrity control message: (.+)$ 2022-02-11 14:55:44,719 - wazuh_testing - DEBUG - Starting file composer for wazuh-manager and path: /var/ossec/logs/ossec.log. Composite file in /home/camila/Escritorio/repo/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-manager_ossec.log.tmp 2022-02-11 14:55:44,719 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-11 14:55:44,720 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-manager and message: .Agent 001 query: (.+) save2 2022-02-11 14:55:46,220 - wazuh_testing - DEBUG - 2022/02/11 18:55:17 wazuh-logcollector: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:55:46,220 - wazuh_testing - DEBUG - 2022/02/11 18:55:17 wazuh-syscheckd[17711] sig_op.c:49 at HandleSIG(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:55:46,220 - wazuh_testing - DEBUG - 2022/02/11 18:55:17 wazuh-agentd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:55:46,221 - wazuh_testing - DEBUG - 2022/02/11 18:55:17 wazuh-execd: INFO: (1314): Shutdown received. Deleting responses. 2022-02-11 14:55:46,221 - wazuh_testing - DEBUG - 2022/02/11 18:55:17 wazuh-execd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:55:46,221 - wazuh_testing - DEBUG - 2022/02/11 18:55:21 wazuh-syscheckd[18208] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 14:55:46,221 - wazuh_testing - DEBUG - 2022/02/11 18:55:21 wazuh-syscheckd[18208] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 14:55:46,221 - wazuh_testing - DEBUG - 2022/02/11 18:55:21 wazuh-syscheckd[18208] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-11 14:55:46,222 - wazuh_testing - DEBUG - 2022/02/11 18:55:21 wazuh-syscheckd[18208] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-11 14:55:46,222 - wazuh_testing - DEBUG - 2022/02/11 18:55:14 wazuh-db[14486] main.c:290 at run_dealer(): DEBUG: New client connected (34). 2022-02-11 14:55:46,222 - wazuh_testing - DEBUG - 2022/02/11 18:55:21 wazuh-syscheckd[18208] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-11 14:55:46,222 - wazuh_testing - DEBUG - 2022/02/11 18:55:21 wazuh-syscheckd[18208] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-11 14:55:46,223 - wazuh_testing - DEBUG - 2022/02/11 18:55:21 wazuh-syscheckd[18208] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-11 14:55:46,223 - wazuh_testing - DEBUG - 2022/02/11 18:55:21 wazuh-syscheckd[18208] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$\|.swp$ 2022-02-11 14:55:46,223 - wazuh_testing - DEBUG - 2022/02/11 18:55:14 wazuh-db[14486] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux \|wazuh-agent1 \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64","os_arch":"x86_64"} 2022-02-11 14:55:46,223 - wazuh_testing - DEBUG - 2022/02/11 18:55:21 wazuh-syscheckd[18208] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$\|.swp$ OK? 2022-02-11 14:55:46,223 - wazuh_testing - DEBUG - 2022/02/11 18:55:17 wazuh-db[14486] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-connection-status {"id":1,"connection_status":"disconnected","sync_status":"synced"} 2022-02-11 14:55:46,224 - wazuh_testing - DEBUG - 2022/02/11 18:55:17 wazuh-db[14486] main.c:290 at run_dealer(): DEBUG: New client connected (35). 2022-02-11 14:55:46,224 - wazuh_testing - DEBUG - 2022/02/11 18:55:21 wazuh-syscheckd[18208] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-11 14:55:46,224 - wazuh_testing - DEBUG - 2022/02/11 18:55:17 wazuh-db[14486] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: get-labels 1 2022-02-11 14:55:46,224 - wazuh_testing - DEBUG - 2022/02/11 18:55:21 wazuh-syscheckd[18208] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-11 14:55:46,224 - wazuh_testing - DEBUG - 2022/02/11 18:55:20 wazuh-db[14486] wdb.c:918 at wdb_commit_old(): DEBUG: Agent '001' database commited. Time: 12.066 ms. 2022-02-11 14:55:46,224 - wazuh_testing - DEBUG - 2022/02/11 18:55:21 wazuh-syscheckd[18208] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 14:55:46,224 - wazuh_testing - DEBUG - 2022/02/11 18:55:21 wazuh-db[14486] main.c:290 at run_dealer(): DEBUG: New client connected (21). 2022-02-11 14:55:46,224 - wazuh_testing - DEBUG - 2022/02/11 18:55:21 wazuh-db[14486] wdb_parser.c:928 at wdb_parse(): DEBUG: Task query: upgrade_cancel_tasks {"node":"wazuh-master"} 2022-02-11 14:55:46,224 - wazuh_testing - DEBUG - 2022/02/11 18:55:21 wazuh-syscheckd[18208] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 14:55:46,225 - wazuh_testing - DEBUG - 2022/02/11 18:55:21 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 21 disconnected. 2022-02-11 14:55:46,225 - wazuh_testing - DEBUG - 2022/02/11 18:55:21 wazuh-syscheckd[18208] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 14:55:46,225 - wazuh_testing - DEBUG - 2022/02/11 18:55:22 wazuh-db[14486] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-keepalive {"id":1,"connection_status":"pending","sync_status":"synced"} 2022-02-11 14:55:46,225 - wazuh_testing - DEBUG - 2022/02/11 18:55:21 wazuh-syscheckd[18208] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 14:55:46,225 - wazuh_testing - DEBUG - 2022/02/11 18:55:21 wazuh-syscheckd[18208] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 14:55:46,226 - wazuh_testing - DEBUG - 2022/02/11 18:55:26 wazuh-db[14486] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux \|wazuh-agent1 \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64","os_arch":"x86_64"} 2022-02-11 14:55:46,226 - wazuh_testing - DEBUG - 2022/02/11 18:55:21 wazuh-syscheckd[18208] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 14:55:46,226 - wazuh_testing - DEBUG - 2022/02/11 18:55:26 wazuh-db[14486] main.c:290 at run_dealer(): DEBUG: New client connected (21). 2022-02-11 14:55:46,226 - wazuh_testing - DEBUG - 2022/02/11 18:55:21 wazuh-execd: INFO: Started (pid: 18221). 2022-02-11 14:55:46,226 - wazuh_testing - DEBUG - 2022/02/11 18:55:26 wazuh-db[14486] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1644602123 2022-02-11 14:55:46,226 - wazuh_testing - DEBUG - 2022/02/11 18:55:22 wazuh-agentd: INFO: (1410): Reading authentication keys file. 2022-02-11 14:55:46,227 - wazuh_testing - DEBUG - 2022/02/11 18:55:26 wazuh-db[14486] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update end_scan 1644602123 2022-02-11 14:55:46,227 - wazuh_testing - DEBUG - 2022/02/11 18:55:22 wazuh-agentd: INFO: Using notify time: 10 and max time to reconnect: 60 2022-02-11 14:55:46,227 - wazuh_testing - DEBUG - 2022/02/11 18:55:22 wazuh-agentd: INFO: Version detected -> Linux \|wazuh-agent1 \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64 [Debian GNU/Linux\|debian: 10 (buster)] - Wazuh v4.2.5 2022-02-11 14:55:46,227 - wazuh_testing - DEBUG - 2022/02/11 18:55:26 wazuh-db[14486] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_global {"id":1644602123,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"30e88bbb0f161ad5eb67fa3dfe3db60a39f80b5b"} 2022-02-11 14:55:46,227 - wazuh_testing - DEBUG - 2022/02/11 18:55:22 wazuh-agentd: INFO: Started (pid: 18232). 2022-02-11 14:55:46,227 - wazuh_testing - DEBUG - 2022/02/11 18:55:26 wazuh-db[14486] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 1.476 ms. 2022-02-11 14:55:46,228 - wazuh_testing - DEBUG - 2022/02/11 18:55:22 wazuh-agentd: INFO: Server IP Address: wazuh-manager/172.17.0.2 2022-02-11 14:55:46,228 - wazuh_testing - DEBUG - 2022/02/11 18:55:22 wazuh-agentd: INFO: Using AES as encryption method. 2022-02-11 14:55:46,228 - wazuh_testing - DEBUG - 2022/02/11 18:55:26 wazuh-db[14486] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602123,"version":2,"begin":"/bin/bash","end":"/sbin/ctrlaltdel","tail":"/sbin/debugfs","checksum":"478eb6380ccc2c04fef49b0edc2715bece72ba41"} 2022-02-11 14:55:46,228 - wazuh_testing - DEBUG - 2022/02/11 18:55:22 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 14:55:46,228 - wazuh_testing - DEBUG - 2022/02/11 18:55:22 wazuh-agentd: INFO: (4102): Connected to the server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 14:55:46,228 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 14:55:46,229 - wazuh_testing - DEBUG - 2022/02/11 18:55:26 wazuh-db[14486] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602123,"version":2,"begin":"/sbin/debugfs","end":"/usr/sbin/zic","checksum":"f3f5d06e0887e000619927383fbff6a8e6f1783c"} 2022-02-11 14:55:46,229 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 14:55:46,229 - wazuh_testing - DEBUG - 2022/02/11 18:55:26 wazuh-db[14486] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.520 ms. 2022-02-11 14:55:46,229 - wazuh_testing - DEBUG - 2022/02/11 18:55:26 wazuh-db[14486] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.490 ms. 2022-02-11 14:55:46,229 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-11 14:55:46,229 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-11 14:55:46,229 - wazuh_testing - DEBUG - 2022/02/11 18:55:26 wazuh-db[14486] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602123,"version":2,"begin":"/sbin/debugfs","end":"/usr/bin/pdb","tail":"/usr/bin/pdb2","checksum":"065ab3bed34964b92d530764cf24456ca8f52a40"} 2022-02-11 14:55:46,229 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-11 14:55:46,230 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-11 14:55:46,230 - wazuh_testing - DEBUG - 2022/02/11 18:55:26 wazuh-db[14486] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602123,"version":2,"begin":"/usr/bin/pdb2","end":"/usr/sbin/zic","checksum":"f13d51f7876684d6bc17db143ee1529b892c54d2"} 2022-02-11 14:55:46,230 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-11 14:55:46,230 - wazuh_testing - DEBUG - 2022/02/11 18:55:26 wazuh-db[14486] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.422 ms. 2022-02-11 14:55:46,230 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$\|.swp$ 2022-02-11 14:55:46,230 - wazuh_testing - DEBUG - 2022/02/11 18:55:26 wazuh-db[14486] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.307 ms. 2022-02-11 14:55:46,230 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$\|.swp$ OK? 2022-02-11 14:55:46,231 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-11 14:55:46,231 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-11 14:55:46,231 - wazuh_testing - DEBUG - 2022/02/11 18:55:26 wazuh-db[14486] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602123,"version":2,"begin":"/sbin/debugfs","end":"/usr/bin/dpkg-divert","tail":"/usr/bin/dpkg-genbuildinfo","checksum":"8c4e55b1f5769fbc8fee9952284f5231bc422f1e"} 2022-02-11 14:55:46,231 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 14:55:46,231 - wazuh_testing - DEBUG - 2022/02/11 18:55:26 wazuh-db[14486] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.147 ms. 2022-02-11 14:55:46,231 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 14:55:46,231 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 14:55:46,231 - wazuh_testing - DEBUG - 2022/02/11 18:55:26 wazuh-db[14486] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602123,"version":2,"begin":"/usr/bin/dpkg-genbuildinfo","end":"/usr/bin/pdb","checksum":"fcd12ca69011f5033c3706ba868e7f2983050598"} 2022-02-11 14:55:46,232 - wazuh_testing - DEBUG - 2022/02/11 18:55:26 wazuh-db[14486] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.129 ms. 2022-02-11 14:55:46,232 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 14:55:46,232 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 14:55:46,232 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 14:55:46,232 - wazuh_testing - DEBUG - 2022/02/11 18:55:26 wazuh-db[14486] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602123,"version":2,"begin":"/sbin/debugfs","end":"/usr/bin/apt-extracttemplates","tail":"/usr/bin/apt-ftparchive","checksum":"a08a247c17332b9363f9205ba92d0a74c7739fc4"} 2022-02-11 14:55:46,232 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 rootcheck[18244] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled. 2022-02-11 14:55:46,232 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:55:46,232 - wazuh_testing - DEBUG - 2022/02/11 18:55:26 wazuh-db[14486] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602123,"version":2,"begin":"/usr/bin/apt-ftparchive","end":"/usr/bin/dpkg-divert","checksum":"ab79628f5b16446ec1a1f2daeaf1afd2511680e1"} 2022-02-11 14:55:46,233 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] syscom.c:123 at syscom_main(): DEBUG: (6284): Local requests thread ready. 2022-02-11 14:55:46,233 - wazuh_testing - DEBUG - 2022/02/11 18:55:26 wazuh-db[14486] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.138 ms. 2022-02-11 14:55:46,233 - wazuh_testing - DEBUG - 2022/02/11 18:55:26 wazuh-db[14486] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.148 ms. 2022-02-11 14:55:46,233 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] mq_op.c:47 at StartMQ(): DEBUG: Connected succesfully to 'queue/sockets/queue' after 0 attempts 2022-02-11 14:55:46,233 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] mq_op.c:48 at StartMQ(): DEBUG: (unix_domain) Maximum send buffer set to: '212992'. 2022-02-11 14:55:46,233 - wazuh_testing - DEBUG - 2022/02/11 18:55:26 wazuh-db[14486] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602123,"version":2,"begin":"/sbin/debugfs","end":"/sbin/mkswap","tail":"/sbin/nameif","checksum":"57eae3b131abc8053756527449ccaf84d8226ff2"} 2022-02-11 14:55:46,233 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:185 at main(): INFO: Started (pid: 18246). 2022-02-11 14:55:46,233 - wazuh_testing - DEBUG - 2022/02/11 18:55:26 wazuh-db[14486] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.126 ms. 2022-02-11 14:55:46,233 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:193 at main(): INFO: (6003): Monitoring path: '/bin', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 14:55:46,234 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:193 at main(): INFO: (6003): Monitoring path: '/boot', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 14:55:46,234 - wazuh_testing - DEBUG - 2022/02/11 18:55:27 wazuh-db[14486] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602123,"version":2,"begin":"/sbin/nameif","end":"/usr/bin/apt-extracttemplates","checksum":"2c55e994d598331eec01b63340d458de3ad09198"} 2022-02-11 14:55:46,234 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:193 at main(): INFO: (6003): Monitoring path: '/etc', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 14:55:46,234 - wazuh_testing - DEBUG - 2022/02/11 18:55:27 wazuh-db[14486] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.147 ms. 2022-02-11 14:55:46,234 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:193 at main(): INFO: (6003): Monitoring path: '/sbin', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 14:55:46,234 - wazuh_testing - DEBUG - 2022/02/11 18:55:27 wazuh-db[14486] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602123,"version":2,"begin":"/sbin/nameif","end":"/sbin/sulogin","tail":"/sbin/swaplabel","checksum":"c21468dc0dfc12ca36a7129f43587e57807e1deb"} 2022-02-11 14:55:46,234 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir1', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 14:55:46,234 - wazuh_testing - DEBUG - 2022/02/11 18:55:27 wazuh-db[14486] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.085 ms. 2022-02-11 14:55:46,235 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir2', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| realtime'. 2022-02-11 14:55:46,235 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir3', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| whodata'. 2022-02-11 14:55:46,235 - wazuh_testing - DEBUG - 2022/02/11 18:55:27 wazuh-db[14486] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602123,"version":2,"begin":"/sbin/swaplabel","end":"/usr/bin/apt-extracttemplates","checksum":"84a201764c34c7c163e129b53e15f500373919f5"} 2022-02-11 14:55:46,235 - wazuh_testing - DEBUG - 2022/02/11 18:55:27 wazuh-db[14486] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.061 ms. 2022-02-11 14:55:46,235 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/bin', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 14:55:46,235 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/sbin', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 14:55:46,235 - wazuh_testing - DEBUG - 2022/02/11 18:55:27 wazuh-db[14486] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602123,"version":2,"begin":"/sbin/swaplabel","end":"/sbin/zramctl","tail":"/testdir1/testdir1.txt","checksum":"1212bd95c0c53ba86e112b40a0b267faf3f2be0d"} 2022-02-11 14:55:46,235 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:215 at main(): DEBUG: (6357): Maximum disk quota size limit configured to '1048576 KB'. 2022-02-11 14:55:46,235 - wazuh_testing - DEBUG - 2022/02/11 18:55:27 wazuh-db[14486] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.067 ms. 2022-02-11 14:55:46,235 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mtab' 2022-02-11 14:55:46,235 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/hosts.deny' 2022-02-11 14:55:46,235 - wazuh_testing - DEBUG - 2022/02/11 18:55:27 wazuh-db[14486] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602123,"version":2,"begin":"/testdir1/testdir1.txt","end":"/usr/bin/apt-extracttemplates","checksum":"5ab8d75eb93cb176331f7b7d368c417f4988b7d0"} 2022-02-11 14:55:46,236 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mail/statistics' 2022-02-11 14:55:46,236 - wazuh_testing - DEBUG - 2022/02/11 18:55:27 wazuh-db[14486] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.085 ms. 2022-02-11 14:55:46,236 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random-seed' 2022-02-11 14:55:46,236 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random.seed' 2022-02-11 14:55:46,236 - wazuh_testing - DEBUG - 2022/02/11 18:55:27 wazuh-db[14486] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602123,"version":2,"begin":"/testdir1/testdir1.txt","end":"/usr/bin/aclocal-1.16","tail":"/usr/bin/addpart","checksum":"babad00412333f227208b88a8e2525d1f9106bc4"} 2022-02-11 14:55:46,236 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/adjtime' 2022-02-11 14:55:46,236 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/httpd/logs' 2022-02-11 14:55:46,236 - wazuh_testing - DEBUG - 2022/02/11 18:55:27 wazuh-db[14486] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602123,"version":2,"begin":"/usr/bin/addpart","end":"/usr/bin/apt-extracttemplates","checksum":"7d1a3bbe28f2c9e567f8311757d46ea5365d7112"} 2022-02-11 14:55:46,236 - wazuh_testing - DEBUG - 2022/02/11 18:55:27 wazuh-db[14486] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.056 ms. 2022-02-11 14:55:46,236 - wazuh_testing - DEBUG - 2022/02/11 18:55:27 wazuh-db[14486] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.065 ms. 2022-02-11 14:55:46,237 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/utmpx' 2022-02-11 14:55:46,237 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/wtmpx' 2022-02-11 14:55:46,237 - wazuh_testing - DEBUG - 2022/02/11 18:55:27 wazuh-db[14486] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602123,"version":2,"begin":"/testdir1/testdir1.txt","end":"/usr/bin/2to3-2.7","tail":"/usr/bin/[","checksum":"37c18d98d033f6a2ee930f1407ee50d5b0366af2"} 2022-02-11 14:55:46,237 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/cups/certs' 2022-02-11 14:55:46,237 - wazuh_testing - DEBUG - 2022/02/11 18:55:27 wazuh-db[14486] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.059 ms. 2022-02-11 14:55:46,237 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/dumpdates' 2022-02-11 14:55:46,237 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/svc/volatile' 2022-02-11 14:55:46,237 - wazuh_testing - DEBUG - 2022/02/11 18:55:27 wazuh-db[14486] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602123,"version":2,"begin":"/usr/bin/[","end":"/usr/bin/aclocal-1.16","checksum":"0f1d35a6565c33bf9697c50fd2d7d2a4ebccbc45"} 2022-02-11 14:55:46,237 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/security' 2022-02-11 14:55:46,238 - wazuh_testing - DEBUG - 2022/02/11 18:55:27 wazuh-db[14486] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.052 ms. 2022-02-11 14:55:46,238 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/debug' 2022-02-11 14:55:46,238 - wazuh_testing - DEBUG - 2022/02/11 18:55:27 wazuh-db[14486] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602123,"version":2,"begin":"/testdir1/testdir1.txt","end":"/testdir1/testdir1.txt","tail":"/testdir1/tmp455bwhgt","checksum":"05b06dc38cc601d640e0763aaa1b6e8416884906"} 2022-02-11 14:55:46,238 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/dev/core' 2022-02-11 14:55:46,238 - wazuh_testing - DEBUG - 2022/02/11 18:55:27 wazuh-db[14486] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.070 ms. 2022-02-11 14:55:46,238 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '^/proc' 2022-02-11 14:55:46,238 - wazuh_testing - DEBUG - 2022/02/11 18:55:28 wazuh-db[14486] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602123,"version":2,"begin":"/testdir1/tmp455bwhgt","end":"/usr/bin/2to3-2.7","checksum":"203d7bf715ca718d5eb8b256f3deb53aeaca757c"} 2022-02-11 14:55:46,238 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '.log$\|.swp$' 2022-02-11 14:55:46,238 - wazuh_testing - DEBUG - 2022/02/11 18:55:28 wazuh-db[14486] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.042 ms. 2022-02-11 14:55:46,239 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:235 at main(): INFO: (6004): No diff for file: '/etc/ssl/private.key' 2022-02-11 14:55:46,239 - wazuh_testing - DEBUG - 2022/02/11 18:55:28 wazuh-db[14486] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602123,"version":2,"begin":"/testdir1/tmp455bwhgt","end":"/testdir1/tmp455bwhgt","tail":"/usr/bin/2to3-2.7","checksum":"a6dee7df792943682003b702ea80223b4fae8d18"} 2022-02-11 14:55:46,239 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:245 at main(): INFO: (6016): Directory set for real time monitoring: '/testdir2'. 2022-02-11 14:55:46,239 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] syscheck_audit.c:243 at audit_init(): WARNING: (6924): Who-data engine cannot start because Auditd is not running. 2022-02-11 14:55:46,239 - wazuh_testing - DEBUG - 2022/02/11 18:55:28 wazuh-db[14486] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602123,"version":2,"begin":"/usr/bin/2to3-2.7","end":"/usr/bin/2to3-2.7","checksum":"f621f8dd560e58c5f017dfd42d98bb3a72466d1d"} 2022-02-11 14:55:46,239 - wazuh_testing - DEBUG - 2022/02/11 18:55:28 wazuh-db[14486] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.024 ms. 2022-02-11 14:55:46,239 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:264 at main(): WARNING: (6913): Who-data engine could not start. Switching who-data to real-time. 2022-02-11 14:55:46,239 - wazuh_testing - DEBUG - 2022/02/11 18:55:28 wazuh-db[14486] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file save2 {"path":"/testdir1/tmp455bwhgt","timestamp":1644602123,"version":2,"attributes":{"type":"file","size":8,"perm":"rw-r--r--","uid":"0","gid":"0","user_name":"root","group_name":"root","inode":17314756,"mtime":1644602119,"hash_md5":"e770e54c4c42d3307c141c0c8948992a","hash_sha1":"9eab19985b11b15f91f936e463ea74f1dfe88e32","hash_sha256":"b1893f8d4b1596c20d6f83a784b2b0468c22fb83ce4ff2033ff86a37865d41d8","checksum":"aa968351684f1c1ab8e5401d30ca6bc1f6a75d92"}} 2022-02-11 14:55:46,239 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] run_check.c:194 at start_daemon(): DEBUG: (6320): Setting process priority to: '10' 2022-02-11 14:55:46,239 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:55:46,240 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] run_check.c:229 at start_daemon(): INFO: (6000): Starting daemon... 2022-02-11 14:55:46,240 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] run_check.c:232 at start_daemon(): INFO: (6010): File integrity monitoring scan frequency: 20 seconds 2022-02-11 14:55:46,240 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 14:55:46,240 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-manager and message: .Agent 001 query: (.+) save2 2022-02-11 14:55:46,240 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644602123}} 2022-02-11 14:55:46,240 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 14:55:46,240 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-11 14:55:46,240 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-11 14:55:46,241 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-11 14:55:46,241 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-11 14:55:46,241 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 14:55:46,241 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 14:55:46,241 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644602123}} 2022-02-11 14:55:46,241 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.339 sec (0.338 clock sec) 2022-02-11 14:55:46,242 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1622, path count: 1628 2022-02-11 14:55:46,242 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:55:46,242 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:55:46,242 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:55:46,242 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. 2022-02-11 14:55:46,242 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] run_check.c:568 at symlink_checker_thread(): DEBUG: (6033): Starting symbolic link updater. Interval '600'. 2022-02-11 14:55:46,242 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] run_check.c:387 at fim_run_realtime(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-11 14:55:46,243 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] run_check.c:543 at log_realtime_status(): INFO: (6012): Real-time file integrity monitoring started. 2022-02-11 14:55:46,243 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] run_check.c:82 at fim_send_sync_msg(): DEBUG: (6317): Sending integrity control message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1644602123,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"30e88bbb0f161ad5eb67fa3dfe3db60a39f80b5b"}} 2022-02-11 14:55:46,243 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-agent1 and message: .Sending integrity control message: (.+)$ 2022-02-11 14:55:47,224 - wazuh_testing - DEBUG - Cleaning temporal files... 2022-02-11 14:55:47,224 - wazuh_testing - DEBUG - Checking results... 2022-02-11 14:55:47,225 - wazuh_testing - DEBUG - Received from wazuh-manager the expected message: fim_file 2022-02-11 14:55:47,225 - wazuh_testing - DEBUG - Received from wazuh-agent1 the expected message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1644602123,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"30e88bbb0f161ad5eb67fa3dfe3db60a39f80b5b"}} 2022-02-11 14:56:15,151 - wazuh_testing - DEBUG - Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-11 14:56:15,152 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-11 14:56:15,153 - wazuh_testing - DEBUG - Starting file composer for wazuh-manager and path: /var/ossec/logs/ossec.log. Composite file in /home/camila/Escritorio/repo/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-manager_ossec.log.tmp 2022-02-11 14:56:15,153 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-manager and message: .Initializing FIM Integrity Synchronization check. (.+)$ 2022-02-11 14:56:16,655 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-modulesd:syscollector: INFO: Stop received for Syscollector. 2022-02-11 14:56:16,656 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 12 disconnected. 2022-02-11 14:56:16,656 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-monitord: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:56:16,656 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-logcollector: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:56:16,657 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-remoted: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:56:16,657 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 34 disconnected. 2022-02-11 14:56:16,657 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 24 disconnected. 2022-02-11 14:56:16,657 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 18 disconnected. 2022-02-11 14:56:16,657 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 16 disconnected. 2022-02-11 14:56:16,658 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-syscheckd[14620] sig_op.c:49 at HandleSIG(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:56:16,658 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-analysisd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:56:16,658 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 37 disconnected. 2022-02-11 14:56:16,658 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 35 disconnected. 2022-02-11 14:56:16,658 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 31 disconnected. 2022-02-11 14:56:16,659 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 33 disconnected. 2022-02-11 14:56:16,659 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 25 disconnected. 2022-02-11 14:56:16,659 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 32 disconnected. 2022-02-11 14:56:16,659 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 23 disconnected. 2022-02-11 14:56:16,659 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 30 disconnected. 2022-02-11 14:56:16,660 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 27 disconnected. 2022-02-11 14:56:16,660 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 20 disconnected. 2022-02-11 14:56:16,660 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 29 disconnected. 2022-02-11 14:56:16,660 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 11 disconnected. 2022-02-11 14:56:16,661 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 28 disconnected. 2022-02-11 14:56:16,661 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 10 disconnected. 2022-02-11 14:56:16,661 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 21 disconnected. 2022-02-11 14:56:16,661 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 19 disconnected. 2022-02-11 14:56:16,662 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 13 disconnected. 2022-02-11 14:56:16,662 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 26 disconnected. 2022-02-11 14:56:16,662 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 6 disconnected. 2022-02-11 14:56:16,662 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 22 disconnected. 2022-02-11 14:56:16,662 - wazuh_testing - DEBUG - 2022/02/11 18:55:53 wazuh-execd: INFO: (1314): Shutdown received. Deleting responses. 2022-02-11 14:56:16,663 - wazuh_testing - DEBUG - 2022/02/11 18:55:53 wazuh-execd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:56:16,663 - wazuh_testing - DEBUG - 2022/02/11 18:55:53 wazuh-db[14486] main.c:468 at handler(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:56:16,663 - wazuh_testing - DEBUG - 2022/02/11 18:55:54 wazuh-db[14486] wdb.c:872 at wdb_close_all(): DEBUG: Closing all databases... 2022-02-11 14:56:16,663 - wazuh_testing - DEBUG - 2022/02/11 18:55:54 wazuh-db[14486] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent 001 2022-02-11 14:56:16,664 - wazuh_testing - DEBUG - 2022/02/11 18:55:54 wazuh-db[14486] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent 000 2022-02-11 14:56:16,664 - wazuh_testing - DEBUG - 2022/02/11 18:55:54 wazuh-db[14486] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent mitre 2022-02-11 14:56:16,664 - wazuh_testing - DEBUG - 2022/02/11 18:55:54 wazuh-db[14486] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent global 2022-02-11 14:56:16,664 - wazuh_testing - DEBUG - 2022/02/11 18:55:54 wazuh-db[14486] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent tasks 2022-02-11 14:56:16,664 - wazuh_testing - DEBUG - 2022/02/11 18:55:54 wazuh-db[14486] main.c:231 at main(): DEBUG: Template file removed again: queue/db/.template.db 2022-02-11 14:56:16,665 - wazuh_testing - DEBUG - 2022/02/11 18:55:54 wazuh-authd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:56:16,665 - wazuh_testing - DEBUG - 2022/02/11 18:55:55 wazuh-authd: INFO: Exiting... 2022-02-11 14:56:16,665 - wazuh_testing - DEBUG - 2022/02/11 18:56:00 wazuh-db[15358] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 14:56:16,665 - wazuh_testing - DEBUG - 2022/02/11 18:56:00 wazuh-db[15358] main.c:101 at main(): DEBUG: Wazuh home directory: /var/ossec 2022-02-11 14:56:16,666 - wazuh_testing - DEBUG - 2022/02/11 18:56:00 wazuh-syscheckd[15362] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 14:56:16,666 - wazuh_testing - DEBUG - 2022/02/11 18:56:00 wazuh-syscheckd[15362] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 14:56:16,666 - wazuh_testing - DEBUG - 2022/02/11 18:56:00 wazuh-syscheckd[15362] syscheck-config.c:122 at organize_syscheck_dirs(): DEBUG: No directory entries to organize in syscheck configuration. 2022-02-11 14:56:16,666 - wazuh_testing - DEBUG - 2022/02/11 18:56:03 wazuh-csyslogd: INFO: Remote syslog server not configured. Clean exit. 2022-02-11 14:56:16,666 - wazuh_testing - DEBUG - 2022/02/11 18:56:03 wazuh-dbd: INFO: Database not configured. Clean exit. 2022-02-11 14:56:16,667 - wazuh_testing - DEBUG - 2022/02/11 18:56:03 wazuh-integratord: INFO: Remote integrations not configured. Clean exit. 2022-02-11 14:56:16,667 - wazuh_testing - DEBUG - 2022/02/11 18:56:03 wazuh-agentlessd: INFO: Not configured. Exiting. 2022-02-11 14:56:16,667 - wazuh_testing - DEBUG - 2022/02/11 18:56:03 wazuh-authd: INFO: Started (pid: 15428). 2022-02-11 14:56:16,667 - wazuh_testing - DEBUG - 2022/02/11 18:56:03 wazuh-authd: INFO: Accepting connections on port 1515. No password required. 2022-02-11 14:56:16,668 - wazuh_testing - DEBUG - 2022/02/11 18:56:03 wazuh-authd: INFO: Setting network timeout to 1.000000 sec. 2022-02-11 14:56:16,668 - wazuh_testing - DEBUG - 2022/02/11 18:56:04 wazuh-db[15442] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 14:56:16,668 - wazuh_testing - DEBUG - 2022/02/11 18:56:04 wazuh-db[15442] main.c:101 at main(): DEBUG: Wazuh home directory: /var/ossec 2022-02-11 14:56:16,668 - wazuh_testing - DEBUG - 2022/02/11 18:56:04 wazuh-db[15442] main.c:122 at main(): DEBUG: Template file removed: /var/ossec/queue/db/.template.db 2022-02-11 14:56:16,668 - wazuh_testing - DEBUG - 2022/02/11 18:56:04 wazuh-db[15442] main.c:178 at main(): INFO: Started (pid: 15444). 2022-02-11 14:56:16,669 - wazuh_testing - DEBUG - 2022/02/11 18:56:05 wazuh-execd: INFO: (1350): Active response disabled. 2022-02-11 14:56:16,669 - wazuh_testing - DEBUG - 2022/02/11 18:56:05 wazuh-execd: INFO: Started (pid: 15467). 2022-02-11 14:56:16,669 - wazuh_testing - DEBUG - 2022/02/11 18:56:06 wazuh-analysisd: INFO: Total rules enabled: '3882' 2022-02-11 14:56:16,669 - wazuh_testing - DEBUG - 2022/02/11 18:56:06 wazuh-analysisd: INFO: Started (pid: 15481). 2022-02-11 14:56:16,669 - wazuh_testing - DEBUG - 2022/02/11 18:56:06 wazuh-db[15442] main.c:290 at run_dealer(): DEBUG: New client connected (6). 2022-02-11 14:56:16,669 - wazuh_testing - DEBUG - 2022/02/11 18:56:06 wazuh-analysisd: INFO: (7200): Logtest started 2022-02-11 14:56:16,670 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 14:56:16,670 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 14:56:16,670 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] syscheck-config.c:122 at organize_syscheck_dirs(): DEBUG: No directory entries to organize in syscheck configuration. 2022-02-11 14:56:16,670 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] main.c:118 at main(): INFO: (6678): No directory provided for syscheck to monitor. 2022-02-11 14:56:16,670 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] main.c:136 at main(): INFO: (6001): File integrity monitoring disabled. 2022-02-11 14:56:16,671 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 rootcheck[15576] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled. 2022-02-11 14:56:16,671 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:56:16,671 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] syscom.c:123 at syscom_main(): DEBUG: (6284): Local requests thread ready. 2022-02-11 14:56:16,671 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] mq_op.c:47 at StartMQ(): DEBUG: Connected succesfully to 'queue/sockets/queue' after 0 attempts 2022-02-11 14:56:16,671 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] mq_op.c:48 at StartMQ(): DEBUG: (unix_domain) Maximum send buffer set to: '212992'. 2022-02-11 14:56:16,672 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] main.c:185 at main(): INFO: Started (pid: 15578). 2022-02-11 14:56:16,672 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] main.c:215 at main(): DEBUG: (6357): Maximum disk quota size limit configured to '1048576 KB'. 2022-02-11 14:56:16,672 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] run_check.c:194 at start_daemon(): DEBUG: (6320): Setting process priority to: '10' 2022-02-11 14:56:16,672 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:56:16,672 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] run_check.c:229 at start_daemon(): INFO: (6000): Starting daemon... 2022-02-11 14:56:16,672 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] run_check.c:232 at start_daemon(): INFO: (6010): File integrity monitoring scan frequency: 43200 seconds 2022-02-11 14:56:16,672 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 14:56:16,673 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644602167}} 2022-02-11 14:56:16,673 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 14:56:16,673 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 14:56:16,673 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 14:56:16,673 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644602167}} 2022-02-11 14:56:16,673 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.000 sec (0.000 clock sec) 2022-02-11 14:56:16,673 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 0, path count: 0 2022-02-11 14:56:16,674 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-db[15442] main.c:290 at run_dealer(): DEBUG: New client connected (10). 2022-02-11 14:56:16,674 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:56:16,674 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-db[15442] main.c:290 at run_dealer(): DEBUG: New client connected (11). 2022-02-11 14:56:16,674 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 000 query: syscheck scan_info_update start_scan 1644602167 2022-02-11 14:56:16,674 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 000 query: syscheck scan_info_update end_scan 1644602167 2022-02-11 14:56:16,674 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:56:16,675 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:56:16,675 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. 2022-02-11 14:56:16,675 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-manager and message: .Initializing FIM Integrity Synchronization check. (.+)$ 2022-02-11 14:56:17,657 - wazuh_testing - DEBUG - Cleaning temporal files... 2022-02-11 14:56:17,658 - wazuh_testing - DEBUG - Checking results... 2022-02-11 14:56:17,659 - wazuh_testing - DEBUG - Received from wazuh-manager the expected message: Sync interval is 300 seconds. -------------------------------Captured log call-------------------------------- DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:1005 Cleaning temporal files... DEBUG wazuh_testing:monitoring.py:994 Checking results... DEBUG wazuh_testing:monitoring.py:1000 Received from wazuh-manager the expected message: fim_file DEBUG wazuh_testing:monitoring.py:1000 Received from wazuh-agent1 the expected message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1644602123,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"30e88bbb0f161ad5eb67fa3dfe3db60a39f80b5b"}} DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:1005 Cleaning temporal files... DEBUG wazuh_testing:monitoring.py:994 Checking results... DEBUG wazuh_testing:monitoring.py:1000 Received from wazuh-manager the expected message: Sync interval is 300 seconds.
Passed	test_synchronization.py::test_synchronization[testdir1-delete-wazuh-agent1]	40.07
------------------------------Captured stderr call------------------------------ 2022-02-11 14:56:31,937 - wazuh_testing - DEBUG - Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-11 14:56:31,939 - wazuh_testing - DEBUG - Starting file composer for wazuh-agent1 and path: /var/ossec/logs/ossec.log. Composite file in /home/camila/Escritorio/repo/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-agent1_ossec.log.tmp 2022-02-11 14:56:31,939 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-11 14:56:31,940 - wazuh_testing - DEBUG - Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-11 14:56:31,941 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-agent1 and message: .Sending integrity control message: (.+)$ 2022-02-11 14:56:31,942 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-11 14:56:31,942 - wazuh_testing - DEBUG - Starting file composer for wazuh-manager and path: /var/ossec/logs/ossec.log. Composite file in /home/camila/Escritorio/repo/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-manager_ossec.log.tmp 2022-02-11 14:56:31,944 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-manager and message: .Agent 001 query: (.+) save2 2022-02-11 14:56:33,442 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-agentd: ERROR: (1137): Lost connection with manager. Setting lock. 2022-02-11 14:56:33,443 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-agentd: INFO: Closing connection to server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 14:56:33,443 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 14:56:33,443 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-agentd: ERROR: (1216): Unable to connect to '172.17.0.2:1514/tcp': 'Connection refused'. 2022-02-11 14:56:33,443 - wazuh_testing - DEBUG - 2022/02/11 18:56:00 wazuh-syscheckd[18745] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 14:56:33,444 - wazuh_testing - DEBUG - 2022/02/11 18:56:00 wazuh-syscheckd[18745] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644602160}} 2022-02-11 14:56:33,444 - wazuh_testing - DEBUG - 2022/02/11 18:56:00 wazuh-syscheckd[18745] wait_op.c:101 at os_wait(): WARNING: Process locked due to agent is offline. Waiting for connection... 2022-02-11 14:56:33,444 - wazuh_testing - DEBUG - 2022/02/11 18:56:02 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 14:56:33,444 - wazuh_testing - DEBUG - 2022/02/11 18:56:02 wazuh-agentd: ERROR: (1216): Unable to connect to '172.17.0.2:1514/tcp': 'Connection refused'. 2022-02-11 14:56:33,444 - wazuh_testing - DEBUG - 2022/02/11 18:56:12 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 14:56:33,445 - wazuh_testing - DEBUG - 2022/02/11 18:56:12 wazuh-agentd: INFO: (4102): Connected to the server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 14:56:33,445 - wazuh_testing - DEBUG - 2022/02/11 18:56:12 wazuh-agentd: INFO: Server responded. Releasing lock. 2022-02-11 14:56:33,445 - wazuh_testing - DEBUG - 2022/02/11 18:56:15 wazuh-syscheckd[18745] wait_op.c:116 at os_wait(): INFO: Agent is now online. Process unlocked, continuing... 2022-02-11 14:56:33,445 - wazuh_testing - DEBUG - 2022/02/11 18:56:15 wazuh-syscheckd[18745] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 14:56:33,445 - wazuh_testing - DEBUG - 2022/02/11 18:56:15 wazuh-syscheckd[18745] fim_db.c:436 at fim_db_check_transaction(): DEBUG: Database transaction completed. 2022-02-11 14:56:33,446 - wazuh_testing - DEBUG - 2022/02/11 18:56:15 wazuh-syscheckd[18745] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-11 14:56:33,446 - wazuh_testing - DEBUG - 2022/02/11 18:56:15 wazuh-syscheckd[18745] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-11 14:56:33,446 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-modulesd:syscollector: INFO: Stop received for Syscollector. 2022-02-11 14:56:33,446 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 12 disconnected. 2022-02-11 14:56:33,446 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-monitord: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:56:33,447 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-logcollector: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:56:33,447 - wazuh_testing - DEBUG - 2022/02/11 18:56:15 wazuh-syscheckd[18745] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"event","data":{"path":"/testdir1/tmp1zw22waf","version":2,"mode":"scheduled","type":"added","timestamp":1644602175,"attributes":{"type":"file","size":8,"perm":"rw-r--r--","uid":"0","gid":"0","user_name":"root","group_name":"root","inode":17314755,"mtime":1644602156,"hash_md5":"e770e54c4c42d3307c141c0c8948992a","hash_sha1":"9eab19985b11b15f91f936e463ea74f1dfe88e32","hash_sha256":"b1893f8d4b1596c20d6f83a784b2b0468c22fb83ce4ff2033ff86a37865d41d8","checksum":"ce868c7e893d53100d43402f6a55a254bdd97f37"}}} 2022-02-11 14:56:33,447 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-remoted: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:56:33,447 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 34 disconnected. 2022-02-11 14:56:33,447 - wazuh_testing - DEBUG - 2022/02/11 18:56:15 wazuh-syscheckd[18745] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-11 14:56:33,447 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 24 disconnected. 2022-02-11 14:56:33,447 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 18 disconnected. 2022-02-11 14:56:33,447 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 16 disconnected. 2022-02-11 14:56:33,447 - wazuh_testing - DEBUG - 2022/02/11 18:56:15 wazuh-syscheckd[18745] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-11 14:56:33,448 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-syscheckd[14620] sig_op.c:49 at HandleSIG(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:56:33,448 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-analysisd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:56:33,448 - wazuh_testing - DEBUG - 2022/02/11 18:56:16 wazuh-syscheckd[18745] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 14:56:33,448 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 37 disconnected. 2022-02-11 14:56:33,448 - wazuh_testing - DEBUG - 2022/02/11 18:56:16 wazuh-syscheckd[18745] create_db.c:220 at fim_scan(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-11 14:56:33,448 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 35 disconnected. 2022-02-11 14:56:33,448 - wazuh_testing - DEBUG - 2022/02/11 18:56:16 wazuh-syscheckd[18745] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 14:56:33,448 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 31 disconnected. 2022-02-11 14:56:33,449 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 33 disconnected. 2022-02-11 14:56:33,449 - wazuh_testing - DEBUG - 2022/02/11 18:56:16 wazuh-syscheckd[18745] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644602176}} 2022-02-11 14:56:33,449 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 25 disconnected. 2022-02-11 14:56:33,449 - wazuh_testing - DEBUG - 2022/02/11 18:56:16 wazuh-syscheckd[18745] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 15.366 sec (0.354 clock sec) 2022-02-11 14:56:33,449 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 32 disconnected. 2022-02-11 14:56:33,449 - wazuh_testing - DEBUG - 2022/02/11 18:56:16 wazuh-syscheckd[18745] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1622, path count: 1628 2022-02-11 14:56:33,449 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 23 disconnected. 2022-02-11 14:56:33,449 - wazuh_testing - DEBUG - 2022/02/11 18:56:24 wazuh-logcollector: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:56:33,449 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 30 disconnected. 2022-02-11 14:56:33,450 - wazuh_testing - DEBUG - 2022/02/11 18:56:24 wazuh-syscheckd[18745] sig_op.c:49 at HandleSIG(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:56:33,450 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 27 disconnected. 2022-02-11 14:56:33,450 - wazuh_testing - DEBUG - 2022/02/11 18:56:24 wazuh-agentd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:56:33,450 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 20 disconnected. 2022-02-11 14:56:33,450 - wazuh_testing - DEBUG - 2022/02/11 18:56:24 wazuh-execd: INFO: (1314): Shutdown received. Deleting responses. 2022-02-11 14:56:33,450 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 29 disconnected. 2022-02-11 14:56:33,450 - wazuh_testing - DEBUG - 2022/02/11 18:56:24 wazuh-execd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:56:33,450 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 11 disconnected. 2022-02-11 14:56:33,450 - wazuh_testing - DEBUG - 2022/02/11 18:56:24 wazuh-syscheckd[19444] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 14:56:33,450 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 28 disconnected. 2022-02-11 14:56:33,451 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 10 disconnected. 2022-02-11 14:56:33,451 - wazuh_testing - DEBUG - 2022/02/11 18:56:24 wazuh-syscheckd[19444] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 14:56:33,451 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 21 disconnected. 2022-02-11 14:56:33,451 - wazuh_testing - DEBUG - 2022/02/11 18:56:24 wazuh-syscheckd[19444] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-11 14:56:33,451 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 19 disconnected. 2022-02-11 14:56:33,451 - wazuh_testing - DEBUG - 2022/02/11 18:56:24 wazuh-syscheckd[19444] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-11 14:56:33,451 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 13 disconnected. 2022-02-11 14:56:33,451 - wazuh_testing - DEBUG - 2022/02/11 18:56:24 wazuh-syscheckd[19444] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-11 14:56:33,451 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 26 disconnected. 2022-02-11 14:56:33,452 - wazuh_testing - DEBUG - 2022/02/11 18:56:24 wazuh-syscheckd[19444] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-11 14:56:33,452 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 6 disconnected. 2022-02-11 14:56:33,452 - wazuh_testing - DEBUG - 2022/02/11 18:56:24 wazuh-syscheckd[19444] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-11 14:56:33,452 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 22 disconnected. 2022-02-11 14:56:33,452 - wazuh_testing - DEBUG - 2022/02/11 18:55:53 wazuh-execd: INFO: (1314): Shutdown received. Deleting responses. 2022-02-11 14:56:33,452 - wazuh_testing - DEBUG - 2022/02/11 18:56:24 wazuh-syscheckd[19444] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$\|.swp$ 2022-02-11 14:56:33,452 - wazuh_testing - DEBUG - 2022/02/11 18:55:53 wazuh-execd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:56:33,452 - wazuh_testing - DEBUG - 2022/02/11 18:56:24 wazuh-syscheckd[19444] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$\|.swp$ OK? 2022-02-11 14:56:33,453 - wazuh_testing - DEBUG - 2022/02/11 18:55:53 wazuh-db[14486] main.c:468 at handler(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:56:33,453 - wazuh_testing - DEBUG - 2022/02/11 18:56:24 wazuh-syscheckd[19444] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-11 14:56:33,453 - wazuh_testing - DEBUG - 2022/02/11 18:55:54 wazuh-db[14486] wdb.c:872 at wdb_close_all(): DEBUG: Closing all databases... 2022-02-11 14:56:33,453 - wazuh_testing - DEBUG - 2022/02/11 18:56:24 wazuh-syscheckd[19444] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-11 14:56:33,453 - wazuh_testing - DEBUG - 2022/02/11 18:55:54 wazuh-db[14486] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent 001 2022-02-11 14:56:33,453 - wazuh_testing - DEBUG - 2022/02/11 18:56:24 wazuh-syscheckd[19444] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 14:56:33,453 - wazuh_testing - DEBUG - 2022/02/11 18:55:54 wazuh-db[14486] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent 000 2022-02-11 14:56:33,454 - wazuh_testing - DEBUG - 2022/02/11 18:56:24 wazuh-syscheckd[19444] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 14:56:33,454 - wazuh_testing - DEBUG - 2022/02/11 18:56:24 wazuh-syscheckd[19444] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 14:56:33,454 - wazuh_testing - DEBUG - 2022/02/11 18:55:54 wazuh-db[14486] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent mitre 2022-02-11 14:56:33,454 - wazuh_testing - DEBUG - 2022/02/11 18:56:24 wazuh-syscheckd[19444] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 14:56:33,454 - wazuh_testing - DEBUG - 2022/02/11 18:55:54 wazuh-db[14486] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent global 2022-02-11 14:56:33,454 - wazuh_testing - DEBUG - 2022/02/11 18:56:24 wazuh-syscheckd[19444] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 14:56:33,454 - wazuh_testing - DEBUG - 2022/02/11 18:55:54 wazuh-db[14486] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent tasks 2022-02-11 14:56:33,454 - wazuh_testing - DEBUG - 2022/02/11 18:55:54 wazuh-db[14486] main.c:231 at main(): DEBUG: Template file removed again: queue/db/.template.db 2022-02-11 14:56:33,454 - wazuh_testing - DEBUG - 2022/02/11 18:56:24 wazuh-syscheckd[19444] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 14:56:33,455 - wazuh_testing - DEBUG - 2022/02/11 18:55:54 wazuh-authd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:56:33,455 - wazuh_testing - DEBUG - 2022/02/11 18:55:55 wazuh-authd: INFO: Exiting... 2022-02-11 14:56:33,455 - wazuh_testing - DEBUG - 2022/02/11 18:56:24 wazuh-execd: INFO: Started (pid: 19457). 2022-02-11 14:56:33,455 - wazuh_testing - DEBUG - 2022/02/11 18:56:00 wazuh-db[15358] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 14:56:33,455 - wazuh_testing - DEBUG - 2022/02/11 18:56:00 wazuh-db[15358] main.c:101 at main(): DEBUG: Wazuh home directory: /var/ossec 2022-02-11 14:56:33,455 - wazuh_testing - DEBUG - 2022/02/11 18:56:25 wazuh-agentd: INFO: (1410): Reading authentication keys file. 2022-02-11 14:56:33,455 - wazuh_testing - DEBUG - 2022/02/11 18:56:00 wazuh-syscheckd[15362] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 14:56:33,455 - wazuh_testing - DEBUG - 2022/02/11 18:56:00 wazuh-syscheckd[15362] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 14:56:33,455 - wazuh_testing - DEBUG - 2022/02/11 18:56:25 wazuh-agentd: INFO: Using notify time: 10 and max time to reconnect: 60 2022-02-11 14:56:33,455 - wazuh_testing - DEBUG - 2022/02/11 18:56:00 wazuh-syscheckd[15362] syscheck-config.c:122 at organize_syscheck_dirs(): DEBUG: No directory entries to organize in syscheck configuration. 2022-02-11 14:56:33,456 - wazuh_testing - DEBUG - 2022/02/11 18:56:03 wazuh-csyslogd: INFO: Remote syslog server not configured. Clean exit. 2022-02-11 14:56:33,456 - wazuh_testing - DEBUG - 2022/02/11 18:56:25 wazuh-agentd: INFO: Version detected -> Linux \|wazuh-agent1 \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64 [Debian GNU/Linux\|debian: 10 (buster)] - Wazuh v4.2.5 2022-02-11 14:56:33,456 - wazuh_testing - DEBUG - 2022/02/11 18:56:03 wazuh-dbd: INFO: Database not configured. Clean exit. 2022-02-11 14:56:33,456 - wazuh_testing - DEBUG - 2022/02/11 18:56:25 wazuh-agentd: INFO: Started (pid: 19468). 2022-02-11 14:56:33,456 - wazuh_testing - DEBUG - 2022/02/11 18:56:25 wazuh-agentd: INFO: Server IP Address: wazuh-manager/172.17.0.2 2022-02-11 14:56:33,456 - wazuh_testing - DEBUG - 2022/02/11 18:56:25 wazuh-agentd: INFO: Using AES as encryption method. 2022-02-11 14:56:33,456 - wazuh_testing - DEBUG - 2022/02/11 18:56:03 wazuh-integratord: INFO: Remote integrations not configured. Clean exit. 2022-02-11 14:56:33,456 - wazuh_testing - DEBUG - 2022/02/11 18:56:25 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 14:56:33,456 - wazuh_testing - DEBUG - 2022/02/11 18:56:03 wazuh-agentlessd: INFO: Not configured. Exiting. 2022-02-11 14:56:33,456 - wazuh_testing - DEBUG - 2022/02/11 18:56:25 wazuh-agentd: INFO: (4102): Connected to the server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 14:56:33,457 - wazuh_testing - DEBUG - 2022/02/11 18:56:03 wazuh-authd: INFO: Started (pid: 15428). 2022-02-11 14:56:33,457 - wazuh_testing - DEBUG - 2022/02/11 18:56:03 wazuh-authd: INFO: Accepting connections on port 1515. No password required. 2022-02-11 14:56:33,457 - wazuh_testing - DEBUG - 2022/02/11 18:56:03 wazuh-authd: INFO: Setting network timeout to 1.000000 sec. 2022-02-11 14:56:33,457 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 14:56:33,457 - wazuh_testing - DEBUG - 2022/02/11 18:56:04 wazuh-db[15442] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 14:56:33,457 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 14:56:33,457 - wazuh_testing - DEBUG - 2022/02/11 18:56:04 wazuh-db[15442] main.c:101 at main(): DEBUG: Wazuh home directory: /var/ossec 2022-02-11 14:56:33,457 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-11 14:56:33,457 - wazuh_testing - DEBUG - 2022/02/11 18:56:04 wazuh-db[15442] main.c:122 at main(): DEBUG: Template file removed: /var/ossec/queue/db/.template.db 2022-02-11 14:56:33,457 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-11 14:56:33,457 - wazuh_testing - DEBUG - 2022/02/11 18:56:04 wazuh-db[15442] main.c:178 at main(): INFO: Started (pid: 15444). 2022-02-11 14:56:33,457 - wazuh_testing - DEBUG - 2022/02/11 18:56:05 wazuh-execd: INFO: (1350): Active response disabled. 2022-02-11 14:56:33,457 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-11 14:56:33,458 - wazuh_testing - DEBUG - 2022/02/11 18:56:05 wazuh-execd: INFO: Started (pid: 15467). 2022-02-11 14:56:33,458 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-11 14:56:33,458 - wazuh_testing - DEBUG - 2022/02/11 18:56:06 wazuh-analysisd: INFO: Total rules enabled: '3882' 2022-02-11 14:56:33,458 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-11 14:56:33,458 - wazuh_testing - DEBUG - 2022/02/11 18:56:06 wazuh-analysisd: INFO: Started (pid: 15481). 2022-02-11 14:56:33,458 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$\|.swp$ 2022-02-11 14:56:33,458 - wazuh_testing - DEBUG - 2022/02/11 18:56:06 wazuh-db[15442] main.c:290 at run_dealer(): DEBUG: New client connected (6). 2022-02-11 14:56:33,458 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$\|.swp$ OK? 2022-02-11 14:56:33,458 - wazuh_testing - DEBUG - 2022/02/11 18:56:06 wazuh-analysisd: INFO: (7200): Logtest started 2022-02-11 14:56:33,458 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-11 14:56:33,458 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 14:56:33,458 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-11 14:56:33,458 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 14:56:33,458 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 14:56:33,458 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] syscheck-config.c:122 at organize_syscheck_dirs(): DEBUG: No directory entries to organize in syscheck configuration. 2022-02-11 14:56:33,458 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 14:56:33,459 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] main.c:118 at main(): INFO: (6678): No directory provided for syscheck to monitor. 2022-02-11 14:56:33,459 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 14:56:33,459 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] main.c:136 at main(): INFO: (6001): File integrity monitoring disabled. 2022-02-11 14:56:33,459 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 14:56:33,459 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 rootcheck[15576] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled. 2022-02-11 14:56:33,459 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 14:56:33,459 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:56:33,459 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 14:56:33,459 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] syscom.c:123 at syscom_main(): DEBUG: (6284): Local requests thread ready. 2022-02-11 14:56:33,459 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 rootcheck[19480] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled. 2022-02-11 14:56:33,459 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] mq_op.c:47 at StartMQ(): DEBUG: Connected succesfully to 'queue/sockets/queue' after 0 attempts 2022-02-11 14:56:33,459 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:56:33,459 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] mq_op.c:48 at StartMQ(): DEBUG: (unix_domain) Maximum send buffer set to: '212992'. 2022-02-11 14:56:33,459 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] syscom.c:123 at syscom_main(): DEBUG: (6284): Local requests thread ready. 2022-02-11 14:56:33,459 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] main.c:185 at main(): INFO: Started (pid: 15578). 2022-02-11 14:56:33,460 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] mq_op.c:47 at StartMQ(): DEBUG: Connected succesfully to 'queue/sockets/queue' after 0 attempts 2022-02-11 14:56:33,460 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] main.c:215 at main(): DEBUG: (6357): Maximum disk quota size limit configured to '1048576 KB'. 2022-02-11 14:56:33,460 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] mq_op.c:48 at StartMQ(): DEBUG: (unix_domain) Maximum send buffer set to: '212992'. 2022-02-11 14:56:33,460 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] run_check.c:194 at start_daemon(): DEBUG: (6320): Setting process priority to: '10' 2022-02-11 14:56:33,460 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] main.c:185 at main(): INFO: Started (pid: 19482). 2022-02-11 14:56:33,460 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:56:33,460 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] main.c:193 at main(): INFO: (6003): Monitoring path: '/bin', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 14:56:33,460 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] run_check.c:229 at start_daemon(): INFO: (6000): Starting daemon... 2022-02-11 14:56:33,460 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] main.c:193 at main(): INFO: (6003): Monitoring path: '/boot', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 14:56:33,460 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] run_check.c:232 at start_daemon(): INFO: (6010): File integrity monitoring scan frequency: 43200 seconds 2022-02-11 14:56:33,460 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] main.c:193 at main(): INFO: (6003): Monitoring path: '/etc', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 14:56:33,460 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 14:56:33,460 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644602167}} 2022-02-11 14:56:33,460 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] main.c:193 at main(): INFO: (6003): Monitoring path: '/sbin', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 14:56:33,461 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 14:56:33,461 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir1', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 14:56:33,461 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 14:56:33,461 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir2', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| realtime'. 2022-02-11 14:56:33,461 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 14:56:33,461 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir3', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| whodata'. 2022-02-11 14:56:33,461 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644602167}} 2022-02-11 14:56:33,461 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/bin', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 14:56:33,461 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.000 sec (0.000 clock sec) 2022-02-11 14:56:33,461 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/sbin', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 14:56:33,461 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 0, path count: 0 2022-02-11 14:56:33,461 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] main.c:215 at main(): DEBUG: (6357): Maximum disk quota size limit configured to '1048576 KB'. 2022-02-11 14:56:33,461 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-db[15442] main.c:290 at run_dealer(): DEBUG: New client connected (10). 2022-02-11 14:56:33,461 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mtab' 2022-02-11 14:56:33,462 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:56:33,462 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/hosts.deny' 2022-02-11 14:56:33,462 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-db[15442] main.c:290 at run_dealer(): DEBUG: New client connected (11). 2022-02-11 14:56:33,462 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mail/statistics' 2022-02-11 14:56:33,462 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 000 query: syscheck scan_info_update start_scan 1644602167 2022-02-11 14:56:33,462 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random-seed' 2022-02-11 14:56:33,462 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 000 query: syscheck scan_info_update end_scan 1644602167 2022-02-11 14:56:33,462 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random.seed' 2022-02-11 14:56:33,462 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:56:33,462 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/adjtime' 2022-02-11 14:56:33,462 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:56:33,462 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/httpd/logs' 2022-02-11 14:56:33,462 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. 2022-02-11 14:56:33,462 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/utmpx' 2022-02-11 14:56:33,462 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] run_check.c:568 at symlink_checker_thread(): DEBUG: (6033): Starting symbolic link updater. Interval '600'. 2022-02-11 14:56:33,463 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/wtmpx' 2022-02-11 14:56:33,463 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] run_check.c:82 at fim_send_sync_msg(): DEBUG: (6317): Sending integrity control message: {"component":"fim_file","type":"integrity_clear","data":{"id":1644602167,"version":2}} 2022-02-11 14:56:33,463 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/cups/certs' 2022-02-11 14:56:33,463 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] fim_sync.c:70 at fim_run_integrity(): DEBUG: Finished calculating FIM integrity. Time: 0.000 seconds. 2022-02-11 14:56:33,463 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/dumpdates' 2022-02-11 14:56:33,463 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-db[15442] main.c:290 at run_dealer(): DEBUG: New client connected (13). 2022-02-11 14:56:33,463 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 000 query: fim_file integrity_clear {"id":1644602167,"version":2} 2022-02-11 14:56:33,463 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/svc/volatile' 2022-02-11 14:56:33,463 - wazuh_testing - DEBUG - 2022/02/11 18:56:08 wazuh-remoted: INFO: Started (pid: 15596). Listening on port 1514/TCP (secure). 2022-02-11 14:56:33,464 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/security' 2022-02-11 14:56:33,464 - wazuh_testing - DEBUG - 2022/02/11 18:56:08 wazuh-db[15442] main.c:290 at run_dealer(): DEBUG: New client connected (12). 2022-02-11 14:56:33,464 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/debug' 2022-02-11 14:56:33,464 - wazuh_testing - DEBUG - 2022/02/11 18:56:08 wazuh-db[15442] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: reset-agents-connection synced 2022-02-11 14:56:33,464 - wazuh_testing - DEBUG - 2022/02/11 18:56:08 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 12 disconnected. 2022-02-11 14:56:33,464 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/dev/core' 2022-02-11 14:56:33,464 - wazuh_testing - DEBUG - 2022/02/11 18:56:08 wazuh-remoted: INFO: (1410): Reading authentication keys file. 2022-02-11 14:56:33,464 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '^/proc' 2022-02-11 14:56:33,465 - wazuh_testing - DEBUG - 2022/02/11 18:56:09 wazuh-logcollector: INFO: (1950): Analyzing file: '/var/ossec/logs/active-responses.log'. 2022-02-11 14:56:33,465 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '.log$\|.swp$' 2022-02-11 14:56:33,465 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] main.c:235 at main(): INFO: (6004): No diff for file: '/etc/ssl/private.key' 2022-02-11 14:56:33,465 - wazuh_testing - DEBUG - 2022/02/11 18:56:09 wazuh-logcollector: INFO: (1950): Analyzing file: '/var/log/dpkg.log'. 2022-02-11 14:56:33,465 - wazuh_testing - DEBUG - 2022/02/11 18:56:09 wazuh-logcollector: INFO: Started (pid: 15628). 2022-02-11 14:56:33,465 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] main.c:245 at main(): INFO: (6016): Directory set for real time monitoring: '/testdir2'. 2022-02-11 14:56:33,465 - wazuh_testing - DEBUG - 2022/02/11 18:56:10 wazuh-monitord: INFO: Started (pid: 15651). 2022-02-11 14:56:33,465 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] syscheck_audit.c:243 at audit_init(): WARNING: (6924): Who-data engine cannot start because Auditd is not running. 2022-02-11 14:56:33,465 - wazuh_testing - DEBUG - 2022/02/11 18:56:11 wazuh-modulesd: INFO: Started (pid: 15663). 2022-02-11 14:56:33,465 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] main.c:264 at main(): WARNING: (6913): Who-data engine could not start. Switching who-data to real-time. 2022-02-11 14:56:33,466 - wazuh_testing - DEBUG - 2022/02/11 18:56:11 wazuh-modulesd:agent-upgrade: INFO: (8153): Module Agent Upgrade started. 2022-02-11 14:56:33,466 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] run_check.c:194 at start_daemon(): DEBUG: (6320): Setting process priority to: '10' 2022-02-11 14:56:33,466 - wazuh_testing - DEBUG - 2022/02/11 18:56:11 wazuh-modulesd:ciscat: INFO: Module disabled. Exiting... 2022-02-11 14:56:33,466 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:56:33,466 - wazuh_testing - DEBUG - 2022/02/11 18:56:11 wazuh-modulesd:osquery: INFO: Module disabled. Exiting... 2022-02-11 14:56:33,466 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] run_check.c:229 at start_daemon(): INFO: (6000): Starting daemon... 2022-02-11 14:56:33,466 - wazuh_testing - DEBUG - 2022/02/11 18:56:11 wazuh-modulesd:syscollector: INFO: Module disabled. Exiting... 2022-02-11 14:56:33,466 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] run_check.c:232 at start_daemon(): INFO: (6010): File integrity monitoring scan frequency: 20 seconds 2022-02-11 14:56:33,466 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 14:56:33,466 - wazuh_testing - DEBUG - 2022/02/11 18:56:11 sca: INFO: Module disabled. Exiting. 2022-02-11 14:56:33,466 - wazuh_testing - DEBUG - 2022/02/11 18:56:11 wazuh-modulesd:database: INFO: Module started. 2022-02-11 14:56:33,466 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644602186}} 2022-02-11 14:56:33,467 - wazuh_testing - DEBUG - 2022/02/11 18:56:11 wazuh-modulesd:download: INFO: Module started. 2022-02-11 14:56:33,467 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 14:56:33,467 - wazuh_testing - DEBUG - 2022/02/11 18:56:11 wazuh-modulesd:control: INFO: Starting control thread. 2022-02-11 14:56:33,467 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-11 14:56:33,467 - wazuh_testing - DEBUG - 2022/02/11 18:56:11 wazuh-db[15442] main.c:290 at run_dealer(): DEBUG: New client connected (12). 2022-02-11 14:56:33,467 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-11 14:56:33,467 - wazuh_testing - DEBUG - 2022/02/11 18:56:11 wazuh-db[15442] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-name {"id":0,"name":"wazuh-manager"} 2022-02-11 14:56:33,467 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-11 14:56:33,468 - wazuh_testing - DEBUG - 2022/02/11 18:56:11 wazuh-modulesd:task-manager: INFO: (8200): Module Task Manager started. 2022-02-11 14:56:33,468 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-11 14:56:33,468 - wazuh_testing - DEBUG - 2022/02/11 18:56:11 wazuh-db[15442] main.c:290 at run_dealer(): DEBUG: New client connected (16). 2022-02-11 14:56:33,468 - wazuh_testing - DEBUG - 2022/02/11 18:56:27 wazuh-syscheckd[19480] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 14:56:33,468 - wazuh_testing - DEBUG - 2022/02/11 18:56:11 wazuh-db[15442] wdb_parser.c:928 at wdb_parse(): DEBUG: Task query: set_timeout {"now":1644602171,"interval":900} 2022-02-11 14:56:33,468 - wazuh_testing - DEBUG - 2022/02/11 18:56:27 wazuh-syscheckd[19480] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 14:56:33,468 - wazuh_testing - DEBUG - 2022/02/11 18:56:11 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 16 disconnected. 2022-02-11 14:56:33,468 - wazuh_testing - DEBUG - 2022/02/11 18:56:27 wazuh-syscheckd[19480] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644602187}} 2022-02-11 14:56:33,468 - wazuh_testing - DEBUG - 2022/02/11 18:56:11 wazuh-db[15442] main.c:290 at run_dealer(): DEBUG: New client connected (16). 2022-02-11 14:56:33,468 - wazuh_testing - DEBUG - 2022/02/11 18:56:27 wazuh-syscheckd[19480] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.349 sec (0.347 clock sec) 2022-02-11 14:56:33,469 - wazuh_testing - DEBUG - 2022/02/11 18:56:11 wazuh-db[15442] wdb_parser.c:928 at wdb_parse(): DEBUG: Task query: delete_old {"timestamp":1643997371} 2022-02-11 14:56:33,469 - wazuh_testing - DEBUG - 2022/02/11 18:56:27 wazuh-syscheckd[19480] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1621, path count: 1627 2022-02-11 14:56:33,469 - wazuh_testing - DEBUG - 2022/02/11 18:56:27 wazuh-syscheckd[19480] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:56:33,469 - wazuh_testing - DEBUG - 2022/02/11 18:56:11 wazuh-db[15442] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":0,"version":"Wazuh v4.2.5","manager_host":"wazuh-manager","node_name":"wazuh-master","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux \|wazuh-manager \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64","os_arch":"x86_64"} 2022-02-11 14:56:33,469 - wazuh_testing - DEBUG - 2022/02/11 18:56:27 wazuh-syscheckd[19480] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:56:33,469 - wazuh_testing - DEBUG - 2022/02/11 18:56:11 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 16 disconnected. 2022-02-11 14:56:33,470 - wazuh_testing - DEBUG - 2022/02/11 18:56:27 wazuh-syscheckd[19480] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:56:33,470 - wazuh_testing - DEBUG - 2022/02/11 18:56:11 wazuh-db[15442] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: insert-agent {"id":1,"name":"wazuh-agent1","register_ip":"any","internal_key":"1111111111111111111111111111111111111111111111111111111111111111","group":"default","date_add":0} 2022-02-11 14:56:33,470 - wazuh_testing - DEBUG - 2022/02/11 18:56:27 wazuh-syscheckd[19480] run_check.c:387 at fim_run_realtime(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-11 14:56:33,470 - wazuh_testing - DEBUG - 2022/02/11 18:56:11 wazuh-db[15442] wdb_global.c:89 at wdb_global_insert_agent(): DEBUG: SQLite: UNIQUE constraint failed: agent.id 2022-02-11 14:56:33,470 - wazuh_testing - DEBUG - 2022/02/11 18:56:27 wazuh-syscheckd[19480] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. 2022-02-11 14:56:33,471 - wazuh_testing - DEBUG - 2022/02/11 18:56:11 wazuh-db[15442] wdb_parser.c:4784 at wdb_parse_global_insert_agent(): DEBUG: Global DB Cannot execute SQL query; err database queue/db/global.db: UNIQUE constraint failed: agent.id 2022-02-11 14:56:33,471 - wazuh_testing - DEBUG - 2022/02/11 18:56:27 wazuh-syscheckd[19480] run_check.c:543 at log_realtime_status(): INFO: (6012): Real-time file integrity monitoring started. 2022-02-11 14:56:33,471 - wazuh_testing - DEBUG - 2022/02/11 18:56:11 wazuh-db[15442] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-group {"id":1,"group":"default"} 2022-02-11 14:56:33,471 - wazuh_testing - DEBUG - 2022/02/11 18:56:27 wazuh-syscheckd[19480] run_check.c:568 at symlink_checker_thread(): DEBUG: (6033): Starting symbolic link updater. Interval '600'. 2022-02-11 14:56:33,471 - wazuh_testing - DEBUG - 2022/02/11 18:56:11 wazuh-db[15442] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: delete-agent-belong 1 2022-02-11 14:56:33,472 - wazuh_testing - DEBUG - 2022/02/11 18:56:11 wazuh-db[15442] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: find-group default 2022-02-11 14:56:33,472 - wazuh_testing - DEBUG - 2022/02/11 18:56:27 wazuh-syscheckd[19480] run_check.c:82 at fim_send_sync_msg(): DEBUG: (6317): Sending integrity control message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1644602187,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"ac2db358c1aefae00e2cbb0cfa343cc816a6e98a"}} 2022-02-11 14:56:33,472 - wazuh_testing - DEBUG - 2022/02/11 18:56:11 wazuh-db[15442] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: insert-agent-belong {"id_group":1,"id_agent":1} 2022-02-11 14:56:33,472 - wazuh_testing - DEBUG - 2022/02/11 18:56:11 wazuh-db[15442] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: get-all-agents last_id 0 2022-02-11 14:56:33,473 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-agent1 and message: .Sending integrity control message: (.+)$ 2022-02-11 14:56:33,473 - wazuh_testing - DEBUG - 2022/02/11 18:56:11 wazuh-db[15442] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: select-groups 2022-02-11 14:56:33,473 - wazuh_testing - DEBUG - 2022/02/11 18:56:11 wazuh-db[15442] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: find-group default 2022-02-11 14:56:33,473 - wazuh_testing - DEBUG - 2022/02/11 18:56:11 wazuh-db[15442] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: get-all-agents last_id 0 2022-02-11 14:56:33,473 - wazuh_testing - DEBUG - 2022/02/11 18:56:11 wazuh-db[15442] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: select-agent-group 1 2022-02-11 14:56:33,474 - wazuh_testing - DEBUG - 2022/02/11 18:56:11 wazuh-db[15442] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: delete-agent-belong 1 2022-02-11 14:56:33,474 - wazuh_testing - DEBUG - 2022/02/11 18:56:11 wazuh-db[15442] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: find-group default 2022-02-11 14:56:33,474 - wazuh_testing - DEBUG - 2022/02/11 18:56:11 wazuh-db[15442] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: insert-agent-belong {"id_group":1,"id_agent":1} 2022-02-11 14:56:33,474 - wazuh_testing - DEBUG - 2022/02/11 18:56:11 wazuh-db[15442] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: select-agent-name 1 2022-02-11 14:56:33,474 - wazuh_testing - DEBUG - 2022/02/11 18:56:11 wazuh-db[15442] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: select-agent-name 1 2022-02-11 14:56:33,475 - wazuh_testing - DEBUG - 2022/02/11 18:56:12 wazuh-db[15442] main.c:290 at run_dealer(): DEBUG: New client connected (16). 2022-02-11 14:56:33,475 - wazuh_testing - DEBUG - 2022/02/11 18:56:12 wazuh-db[15442] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-keepalive {"id":1,"connection_status":"pending","sync_status":"synced"} 2022-02-11 14:56:33,475 - wazuh_testing - DEBUG - 2022/02/11 18:56:12 wazuh-db[15442] main.c:290 at run_dealer(): DEBUG: New client connected (18). 2022-02-11 14:56:33,476 - wazuh_testing - DEBUG - 2022/02/11 18:56:12 wazuh-db[15442] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux \|wazuh-agent1 \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64","os_arch":"x86_64"} 2022-02-11 14:56:33,476 - wazuh_testing - DEBUG - 2022/02/11 18:56:15 wazuh-db[15442] main.c:290 at run_dealer(): DEBUG: New client connected (19). 2022-02-11 14:56:33,476 - wazuh_testing - DEBUG - 2022/02/11 18:56:15 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1644602160 2022-02-11 14:56:33,476 - wazuh_testing - DEBUG - 2022/02/11 18:56:15 wazuh-db[15442] main.c:290 at run_dealer(): DEBUG: New client connected (20). 2022-02-11 14:56:33,476 - wazuh_testing - DEBUG - 2022/02/11 18:56:15 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck save2 {"path":"/testdir1/tmp1zw22waf","version":2,"timestamp":1644602175,"attributes":{"type":"file","size":8,"perm":"rw-r--r--","uid":"0","gid":"0","user_name":"root","group_name":"root","inode":17314755,"mtime":1644602156,"hash_md5":"e770e54c4c42d3307c141c0c8948992a","hash_sha1":"9eab19985b11b15f91f936e463ea74f1dfe88e32","hash_sha256":"b1893f8d4b1596c20d6f83a784b2b0468c22fb83ce4ff2033ff86a37865d41d8","checksum":"ce868c7e893d53100d43402f6a55a254bdd97f37"}} 2022-02-11 14:56:33,477 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-manager and message: .Agent 001 query: (.+) save2 2022-02-11 14:56:34,447 - wazuh_testing - DEBUG - Cleaning temporal files... 2022-02-11 14:56:34,448 - wazuh_testing - DEBUG - Checking results... 2022-02-11 14:56:34,449 - wazuh_testing - DEBUG - Received from wazuh-agent1 the expected message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1644602187,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"ac2db358c1aefae00e2cbb0cfa343cc816a6e98a"}} 2022-02-11 14:56:34,450 - wazuh_testing - DEBUG - Received from wazuh-manager the expected message: syscheck 2022-02-11 14:56:49,815 - wazuh_testing - DEBUG - Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-11 14:56:49,816 - wazuh_testing - DEBUG - Starting file composer for wazuh-agent1 and path: /var/ossec/logs/ossec.log. Composite file in /home/camila/Escritorio/repo/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-agent1_ossec.log.tmp 2022-02-11 14:56:49,816 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-11 14:56:49,818 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-agent1 and message: .Initializing FIM Integrity Synchronization check. (.+)$ 2022-02-11 14:56:51,320 - wazuh_testing - DEBUG - 2022/02/11 18:56:39 wazuh-logcollector: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:56:51,320 - wazuh_testing - DEBUG - 2022/02/11 18:56:39 wazuh-syscheckd[19480] sig_op.c:49 at HandleSIG(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:56:51,321 - wazuh_testing - DEBUG - 2022/02/11 18:56:39 wazuh-agentd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:56:51,321 - wazuh_testing - DEBUG - 2022/02/11 18:56:40 wazuh-execd: INFO: (1314): Shutdown received. Deleting responses. 2022-02-11 14:56:51,321 - wazuh_testing - DEBUG - 2022/02/11 18:56:40 wazuh-execd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:56:51,321 - wazuh_testing - DEBUG - 2022/02/11 18:56:43 wazuh-syscheckd[19908] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 14:56:51,322 - wazuh_testing - DEBUG - 2022/02/11 18:56:43 wazuh-syscheckd[19908] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 14:56:51,322 - wazuh_testing - DEBUG - 2022/02/11 18:56:43 wazuh-syscheckd[19908] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir1' due to [(2)-(No such file or directory)]. 2022-02-11 14:56:51,322 - wazuh_testing - DEBUG - 2022/02/11 18:56:43 wazuh-syscheckd[19908] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-11 14:56:51,322 - wazuh_testing - DEBUG - 2022/02/11 18:56:43 wazuh-syscheckd[19908] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-11 14:56:51,323 - wazuh_testing - DEBUG - 2022/02/11 18:56:43 wazuh-syscheckd[19908] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-11 14:56:51,323 - wazuh_testing - DEBUG - 2022/02/11 18:56:43 wazuh-syscheckd[19908] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-11 14:56:51,323 - wazuh_testing - DEBUG - 2022/02/11 18:56:43 wazuh-syscheckd[19908] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-11 14:56:51,324 - wazuh_testing - DEBUG - 2022/02/11 18:56:43 wazuh-syscheckd[19908] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$\|.swp$ 2022-02-11 14:56:51,324 - wazuh_testing - DEBUG - 2022/02/11 18:56:43 wazuh-syscheckd[19908] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$\|.swp$ OK? 2022-02-11 14:56:51,324 - wazuh_testing - DEBUG - 2022/02/11 18:56:43 wazuh-syscheckd[19908] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-11 14:56:51,324 - wazuh_testing - DEBUG - 2022/02/11 18:56:43 wazuh-syscheckd[19908] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-11 14:56:51,324 - wazuh_testing - DEBUG - 2022/02/11 18:56:43 wazuh-syscheckd[19908] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 14:56:51,325 - wazuh_testing - DEBUG - 2022/02/11 18:56:43 wazuh-syscheckd[19908] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 14:56:51,325 - wazuh_testing - DEBUG - 2022/02/11 18:56:43 wazuh-syscheckd[19908] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 14:56:51,325 - wazuh_testing - DEBUG - 2022/02/11 18:56:43 wazuh-syscheckd[19908] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 14:56:51,325 - wazuh_testing - DEBUG - 2022/02/11 18:56:43 wazuh-syscheckd[19908] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 14:56:51,325 - wazuh_testing - DEBUG - 2022/02/11 18:56:43 wazuh-syscheckd[19908] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 14:56:51,325 - wazuh_testing - DEBUG - 2022/02/11 18:56:43 wazuh-execd: INFO: Started (pid: 19921). 2022-02-11 14:56:51,326 - wazuh_testing - DEBUG - 2022/02/11 18:56:44 wazuh-agentd: INFO: (1410): Reading authentication keys file. 2022-02-11 14:56:51,326 - wazuh_testing - DEBUG - 2022/02/11 18:56:44 wazuh-agentd: INFO: Using notify time: 10 and max time to reconnect: 60 2022-02-11 14:56:51,326 - wazuh_testing - DEBUG - 2022/02/11 18:56:44 wazuh-agentd: INFO: Version detected -> Linux \|wazuh-agent1 \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64 [Debian GNU/Linux\|debian: 10 (buster)] - Wazuh v4.2.5 2022-02-11 14:56:51,326 - wazuh_testing - DEBUG - 2022/02/11 18:56:44 wazuh-agentd: INFO: Started (pid: 19932). 2022-02-11 14:56:51,327 - wazuh_testing - DEBUG - 2022/02/11 18:56:44 wazuh-agentd: INFO: Server IP Address: wazuh-manager/172.17.0.2 2022-02-11 14:56:51,327 - wazuh_testing - DEBUG - 2022/02/11 18:56:44 wazuh-agentd: INFO: Using AES as encryption method. 2022-02-11 14:56:51,327 - wazuh_testing - DEBUG - 2022/02/11 18:56:44 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 14:56:51,327 - wazuh_testing - DEBUG - 2022/02/11 18:56:44 wazuh-agentd: INFO: (4102): Connected to the server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 14:56:51,327 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 14:56:51,328 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 14:56:51,328 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir1' due to [(2)-(No such file or directory)]. 2022-02-11 14:56:51,328 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-11 14:56:51,329 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-11 14:56:51,329 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-11 14:56:51,329 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-11 14:56:51,329 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-11 14:56:51,330 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$\|.swp$ 2022-02-11 14:56:51,330 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$\|.swp$ OK? 2022-02-11 14:56:51,331 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-11 14:56:51,331 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-11 14:56:51,331 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 14:56:51,331 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 14:56:51,332 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 14:56:51,332 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 14:56:51,332 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 14:56:51,332 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 14:56:51,332 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 rootcheck[19944] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled. 2022-02-11 14:56:51,333 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:56:51,333 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] syscom.c:123 at syscom_main(): DEBUG: (6284): Local requests thread ready. 2022-02-11 14:56:51,333 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] mq_op.c:47 at StartMQ(): DEBUG: Connected succesfully to 'queue/sockets/queue' after 0 attempts 2022-02-11 14:56:51,333 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] mq_op.c:48 at StartMQ(): DEBUG: (unix_domain) Maximum send buffer set to: '212992'. 2022-02-11 14:56:51,333 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:185 at main(): INFO: Started (pid: 19946). 2022-02-11 14:56:51,334 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:193 at main(): INFO: (6003): Monitoring path: '/bin', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 14:56:51,334 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:193 at main(): INFO: (6003): Monitoring path: '/boot', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 14:56:51,334 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:193 at main(): INFO: (6003): Monitoring path: '/etc', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 14:56:51,334 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:193 at main(): INFO: (6003): Monitoring path: '/sbin', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 14:56:51,334 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir1', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 14:56:51,335 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir2', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| realtime'. 2022-02-11 14:56:51,335 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir3', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| whodata'. 2022-02-11 14:56:51,335 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/bin', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 14:56:51,335 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/sbin', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 14:56:51,336 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:215 at main(): DEBUG: (6357): Maximum disk quota size limit configured to '1048576 KB'. 2022-02-11 14:56:51,336 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mtab' 2022-02-11 14:56:51,336 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/hosts.deny' 2022-02-11 14:56:51,336 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mail/statistics' 2022-02-11 14:56:51,337 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random-seed' 2022-02-11 14:56:51,337 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random.seed' 2022-02-11 14:56:51,337 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/adjtime' 2022-02-11 14:56:51,338 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/httpd/logs' 2022-02-11 14:56:51,338 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/utmpx' 2022-02-11 14:56:51,338 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/wtmpx' 2022-02-11 14:56:51,338 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/cups/certs' 2022-02-11 14:56:51,338 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/dumpdates' 2022-02-11 14:56:51,339 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/svc/volatile' 2022-02-11 14:56:51,339 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/security' 2022-02-11 14:56:51,339 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/debug' 2022-02-11 14:56:51,339 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/dev/core' 2022-02-11 14:56:51,339 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '^/proc' 2022-02-11 14:56:51,339 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '.log$\|.swp$' 2022-02-11 14:56:51,340 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:235 at main(): INFO: (6004): No diff for file: '/etc/ssl/private.key' 2022-02-11 14:56:51,340 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:245 at main(): INFO: (6016): Directory set for real time monitoring: '/testdir2'. 2022-02-11 14:56:51,340 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] syscheck_audit.c:243 at audit_init(): WARNING: (6924): Who-data engine cannot start because Auditd is not running. 2022-02-11 14:56:51,340 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:264 at main(): WARNING: (6913): Who-data engine could not start. Switching who-data to real-time. 2022-02-11 14:56:51,340 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] run_check.c:194 at start_daemon(): DEBUG: (6320): Setting process priority to: '10' 2022-02-11 14:56:51,341 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:56:51,341 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] run_check.c:229 at start_daemon(): INFO: (6000): Starting daemon... 2022-02-11 14:56:51,341 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] run_check.c:232 at start_daemon(): INFO: (6010): File integrity monitoring scan frequency: 20 seconds 2022-02-11 14:56:51,341 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 14:56:51,341 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644602205}} 2022-02-11 14:56:51,341 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 14:56:51,342 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-11 14:56:51,342 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-11 14:56:51,342 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-11 14:56:51,342 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-11 14:56:51,342 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 14:56:51,343 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 14:56:51,343 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644602205}} 2022-02-11 14:56:51,343 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.356 sec (0.354 clock sec) 2022-02-11 14:56:51,343 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1620, path count: 1626 2022-02-11 14:56:51,344 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:56:51,344 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:56:51,344 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] run_check.c:387 at fim_run_realtime(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-11 14:56:51,344 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:56:51,344 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] run_check.c:543 at log_realtime_status(): INFO: (6012): Real-time file integrity monitoring started. 2022-02-11 14:56:51,345 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] run_check.c:568 at symlink_checker_thread(): DEBUG: (6033): Starting symbolic link updater. Interval '600'. 2022-02-11 14:56:51,345 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. 2022-02-11 14:56:51,345 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-agent1 and message: .Initializing FIM Integrity Synchronization check. (.+)$ 2022-02-11 14:56:52,322 - wazuh_testing - DEBUG - Cleaning temporal files... 2022-02-11 14:56:52,323 - wazuh_testing - DEBUG - Checking results... 2022-02-11 14:56:52,324 - wazuh_testing - DEBUG - Received from wazuh-agent1 the expected message: Sync interval is 300 seconds. -------------------------------Captured log call-------------------------------- DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:1005 Cleaning temporal files... DEBUG wazuh_testing:monitoring.py:994 Checking results... DEBUG wazuh_testing:monitoring.py:1000 Received from wazuh-agent1 the expected message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1644602187,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"ac2db358c1aefae00e2cbb0cfa343cc816a6e98a"}} DEBUG wazuh_testing:monitoring.py:1000 Received from wazuh-manager the expected message: syscheck DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:1005 Cleaning temporal files... DEBUG wazuh_testing:monitoring.py:994 Checking results... DEBUG wazuh_testing:monitoring.py:1000 Received from wazuh-agent1 the expected message: Sync interval is 300 seconds.
Passed	test_synchronization.py::test_synchronization[testdir1-delete-wazuh-manager]	50.90
------------------------------Captured stderr call------------------------------ 2022-02-11 14:57:11,801 - wazuh_testing - DEBUG - Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-11 14:57:11,802 - wazuh_testing - DEBUG - Starting file composer for wazuh-agent1 and path: /var/ossec/logs/ossec.log. Composite file in /home/camila/Escritorio/repo/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-agent1_ossec.log.tmp 2022-02-11 14:57:11,803 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-11 14:57:11,805 - wazuh_testing - DEBUG - Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-11 14:57:11,805 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-agent1 and message: .Sending integrity control message: (.+)$ 2022-02-11 14:57:11,807 - wazuh_testing - DEBUG - Starting file composer for wazuh-manager and path: /var/ossec/logs/ossec.log. Composite file in /home/camila/Escritorio/repo/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-manager_ossec.log.tmp 2022-02-11 14:57:11,807 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-11 14:57:11,808 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-manager and message: .Agent 001 query: (.+) save2 2022-02-11 14:57:13,307 - wazuh_testing - DEBUG - 2022/02/11 18:56:39 wazuh-logcollector: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:57:13,307 - wazuh_testing - DEBUG - 2022/02/11 18:56:39 wazuh-syscheckd[19480] sig_op.c:49 at HandleSIG(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:57:13,307 - wazuh_testing - DEBUG - 2022/02/11 18:56:39 wazuh-agentd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:57:13,307 - wazuh_testing - DEBUG - 2022/02/11 18:56:40 wazuh-execd: INFO: (1314): Shutdown received. Deleting responses. 2022-02-11 14:57:13,308 - wazuh_testing - DEBUG - 2022/02/11 18:56:40 wazuh-execd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:57:13,308 - wazuh_testing - DEBUG - 2022/02/11 18:56:43 wazuh-syscheckd[19908] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 14:57:13,308 - wazuh_testing - DEBUG - 2022/02/11 18:56:43 wazuh-syscheckd[19908] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 14:57:13,308 - wazuh_testing - DEBUG - 2022/02/11 18:56:43 wazuh-syscheckd[19908] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir1' due to [(2)-(No such file or directory)]. 2022-02-11 14:57:13,308 - wazuh_testing - DEBUG - 2022/02/11 18:56:43 wazuh-syscheckd[19908] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-11 14:57:13,309 - wazuh_testing - DEBUG - 2022/02/11 18:56:43 wazuh-syscheckd[19908] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-11 14:57:13,309 - wazuh_testing - DEBUG - 2022/02/11 18:56:43 wazuh-syscheckd[19908] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-11 14:57:13,309 - wazuh_testing - DEBUG - 2022/02/11 18:56:43 wazuh-syscheckd[19908] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-11 14:57:13,309 - wazuh_testing - DEBUG - 2022/02/11 18:56:43 wazuh-syscheckd[19908] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-11 14:57:13,309 - wazuh_testing - DEBUG - 2022/02/11 18:56:43 wazuh-syscheckd[19908] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$\|.swp$ 2022-02-11 14:57:13,310 - wazuh_testing - DEBUG - 2022/02/11 18:56:43 wazuh-syscheckd[19908] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$\|.swp$ OK? 2022-02-11 14:57:13,310 - wazuh_testing - DEBUG - 2022/02/11 18:56:43 wazuh-syscheckd[19908] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-11 14:57:13,310 - wazuh_testing - DEBUG - 2022/02/11 18:56:43 wazuh-syscheckd[19908] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-11 14:57:13,310 - wazuh_testing - DEBUG - 2022/02/11 18:56:43 wazuh-syscheckd[19908] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 14:57:13,311 - wazuh_testing - DEBUG - 2022/02/11 18:56:39 wazuh-db[15442] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-connection-status {"id":1,"connection_status":"disconnected","sync_status":"synced"} 2022-02-11 14:57:13,311 - wazuh_testing - DEBUG - 2022/02/11 18:56:43 wazuh-syscheckd[19908] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 14:57:13,311 - wazuh_testing - DEBUG - 2022/02/11 18:56:43 wazuh-syscheckd[19908] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 14:57:13,311 - wazuh_testing - DEBUG - 2022/02/11 18:56:39 wazuh-db[15442] main.c:290 at run_dealer(): DEBUG: New client connected (35). 2022-02-11 14:57:13,311 - wazuh_testing - DEBUG - 2022/02/11 18:56:43 wazuh-syscheckd[19908] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 14:57:13,311 - wazuh_testing - DEBUG - 2022/02/11 18:56:39 wazuh-db[15442] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: get-labels 1 2022-02-11 14:57:13,311 - wazuh_testing - DEBUG - 2022/02/11 18:56:41 wazuh-db[15442] main.c:290 at run_dealer(): DEBUG: New client connected (36). 2022-02-11 14:57:13,312 - wazuh_testing - DEBUG - 2022/02/11 18:56:43 wazuh-syscheckd[19908] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 14:57:13,312 - wazuh_testing - DEBUG - 2022/02/11 18:56:41 wazuh-db[15442] wdb_parser.c:928 at wdb_parse(): DEBUG: Task query: upgrade_cancel_tasks {"node":"wazuh-master"} 2022-02-11 14:57:13,312 - wazuh_testing - DEBUG - 2022/02/11 18:56:41 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 36 disconnected. 2022-02-11 14:57:13,312 - wazuh_testing - DEBUG - 2022/02/11 18:56:43 wazuh-syscheckd[19908] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 14:57:13,312 - wazuh_testing - DEBUG - 2022/02/11 18:56:43 wazuh-execd: INFO: Started (pid: 19921). 2022-02-11 14:57:13,312 - wazuh_testing - DEBUG - 2022/02/11 18:56:42 wazuh-db[15442] wdb.c:918 at wdb_commit_old(): DEBUG: Agent '001' database commited. Time: 12.080 ms. 2022-02-11 14:57:13,312 - wazuh_testing - DEBUG - 2022/02/11 18:56:44 wazuh-agentd: INFO: (1410): Reading authentication keys file. 2022-02-11 14:57:13,313 - wazuh_testing - DEBUG - 2022/02/11 18:56:44 wazuh-db[15442] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-keepalive {"id":1,"connection_status":"pending","sync_status":"synced"} 2022-02-11 14:57:13,313 - wazuh_testing - DEBUG - 2022/02/11 18:56:44 wazuh-agentd: INFO: Using notify time: 10 and max time to reconnect: 60 2022-02-11 14:57:13,313 - wazuh_testing - DEBUG - 2022/02/11 18:56:47 wazuh-db[15442] main.c:290 at run_dealer(): DEBUG: New client connected (34). 2022-02-11 14:57:13,313 - wazuh_testing - DEBUG - 2022/02/11 18:56:44 wazuh-agentd: INFO: Version detected -> Linux \|wazuh-agent1 \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64 [Debian GNU/Linux\|debian: 10 (buster)] - Wazuh v4.2.5 2022-02-11 14:57:13,313 - wazuh_testing - DEBUG - 2022/02/11 18:56:44 wazuh-agentd: INFO: Started (pid: 19932). 2022-02-11 14:57:13,313 - wazuh_testing - DEBUG - 2022/02/11 18:56:44 wazuh-agentd: INFO: Server IP Address: wazuh-manager/172.17.0.2 2022-02-11 14:57:13,314 - wazuh_testing - DEBUG - 2022/02/11 18:56:44 wazuh-agentd: INFO: Using AES as encryption method. 2022-02-11 14:57:13,314 - wazuh_testing - DEBUG - 2022/02/11 18:56:47 wazuh-db[15442] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux \|wazuh-agent1 \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64","os_arch":"x86_64"} 2022-02-11 14:57:13,314 - wazuh_testing - DEBUG - 2022/02/11 18:56:44 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 14:57:13,314 - wazuh_testing - DEBUG - 2022/02/11 18:56:47 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1644602205 2022-02-11 14:57:13,314 - wazuh_testing - DEBUG - 2022/02/11 18:56:44 wazuh-agentd: INFO: (4102): Connected to the server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 14:57:13,314 - wazuh_testing - DEBUG - 2022/02/11 18:56:47 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update end_scan 1644602205 2022-02-11 14:57:13,314 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 14:57:13,314 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 14:57:13,315 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir1' due to [(2)-(No such file or directory)]. 2022-02-11 14:57:13,315 - wazuh_testing - DEBUG - 2022/02/11 18:56:47 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_global {"id":1644602205,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"c7d4e863493255e1f6dd0a90c6f1bba963e76a4b"} 2022-02-11 14:57:13,315 - wazuh_testing - DEBUG - 2022/02/11 18:56:47 wazuh-db[15442] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.916 ms. 2022-02-11 14:57:13,315 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-11 14:57:13,315 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-11 14:57:13,315 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-11 14:57:13,315 - wazuh_testing - DEBUG - 2022/02/11 18:56:47 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602205,"version":2,"begin":"/bin/bash","end":"/sbin/chcpu","tail":"/sbin/ctrlaltdel","checksum":"57402e3268a27191e04bfc132831045ee0296f32"} 2022-02-11 14:57:13,316 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-11 14:57:13,316 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-11 14:57:13,316 - wazuh_testing - DEBUG - 2022/02/11 18:56:47 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602205,"version":2,"begin":"/sbin/ctrlaltdel","end":"/usr/sbin/zic","checksum":"3b41a81d6e4d0a0cbef3d511ad9d87bc241c6525"} 2022-02-11 14:57:13,316 - wazuh_testing - DEBUG - 2022/02/11 18:56:47 wazuh-db[15442] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.264 ms. 2022-02-11 14:57:13,316 - wazuh_testing - DEBUG - 2022/02/11 18:56:47 wazuh-db[15442] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.228 ms. 2022-02-11 14:57:13,316 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$\|.swp$ 2022-02-11 14:57:13,317 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$\|.swp$ OK? 2022-02-11 14:57:13,317 - wazuh_testing - DEBUG - 2022/02/11 18:56:47 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602205,"version":2,"begin":"/sbin/ctrlaltdel","end":"/usr/bin/pdb","tail":"/usr/bin/pdb2","checksum":"7002e71f8a0a01cb65aadb40c212bd7eb99628a7"} 2022-02-11 14:57:13,317 - wazuh_testing - DEBUG - 2022/02/11 18:56:47 wazuh-db[15442] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.123 ms. 2022-02-11 14:57:13,317 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-11 14:57:13,317 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-11 14:57:13,317 - wazuh_testing - DEBUG - 2022/02/11 18:56:47 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602205,"version":2,"begin":"/usr/bin/pdb2","end":"/usr/sbin/zic","checksum":"f13d51f7876684d6bc17db143ee1529b892c54d2"} 2022-02-11 14:57:13,317 - wazuh_testing - DEBUG - 2022/02/11 18:56:47 wazuh-db[15442] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.128 ms. 2022-02-11 14:57:13,317 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 14:57:13,318 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 14:57:13,318 - wazuh_testing - DEBUG - 2022/02/11 18:56:47 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602205,"version":2,"begin":"/usr/bin/dpkg-genchanges","end":"/usr/bin/pdb","checksum":"ff9bbbbd6461e1dbdffe13c29b2906bb00bc7a1b"} 2022-02-11 14:57:13,318 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 14:57:13,318 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 14:57:13,318 - wazuh_testing - DEBUG - 2022/02/11 18:56:47 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602205,"version":2,"begin":"/sbin/ctrlaltdel","end":"/usr/bin/dpkg-genbuildinfo","tail":"/usr/bin/dpkg-genchanges","checksum":"bb676047497d09140f97bb2e25f3ee35609f9ac3"} 2022-02-11 14:57:13,319 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 14:57:13,319 - wazuh_testing - DEBUG - 2022/02/11 18:56:47 wazuh-db[15442] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.318 ms. 2022-02-11 14:57:13,319 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 14:57:13,319 - wazuh_testing - DEBUG - 2022/02/11 18:56:47 wazuh-db[15442] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.353 ms. 2022-02-11 14:57:13,319 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 rootcheck[19944] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled. 2022-02-11 14:57:13,319 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:57:13,320 - wazuh_testing - DEBUG - 2022/02/11 18:56:47 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602205,"version":2,"begin":"/sbin/ctrlaltdel","end":"/usr/bin/apt-ftparchive","tail":"/usr/bin/apt-get","checksum":"250b2f6fc0cab9fc45ba6ac43a777b2ff67ea1c8"} 2022-02-11 14:57:13,320 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] syscom.c:123 at syscom_main(): DEBUG: (6284): Local requests thread ready. 2022-02-11 14:57:13,320 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] mq_op.c:47 at StartMQ(): DEBUG: Connected succesfully to 'queue/sockets/queue' after 0 attempts 2022-02-11 14:57:13,320 - wazuh_testing - DEBUG - 2022/02/11 18:56:47 wazuh-db[15442] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.115 ms. 2022-02-11 14:57:13,320 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] mq_op.c:48 at StartMQ(): DEBUG: (unix_domain) Maximum send buffer set to: '212992'. 2022-02-11 14:57:13,320 - wazuh_testing - DEBUG - 2022/02/11 18:56:47 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602205,"version":2,"begin":"/usr/bin/apt-get","end":"/usr/bin/dpkg-genbuildinfo","checksum":"56074249484c9c92717d5c3bd886ddd98c728323"} 2022-02-11 14:57:13,320 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:185 at main(): INFO: Started (pid: 19946). 2022-02-11 14:57:13,320 - wazuh_testing - DEBUG - 2022/02/11 18:56:47 wazuh-db[15442] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.140 ms. 2022-02-11 14:57:13,320 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:193 at main(): INFO: (6003): Monitoring path: '/bin', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 14:57:13,321 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:193 at main(): INFO: (6003): Monitoring path: '/boot', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 14:57:13,321 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:193 at main(): INFO: (6003): Monitoring path: '/etc', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 14:57:13,321 - wazuh_testing - DEBUG - 2022/02/11 18:56:47 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602205,"version":2,"begin":"/sbin/ctrlaltdel","end":"/sbin/mkhomedir_helper","tail":"/sbin/mkswap","checksum":"7a7df0bd9bb5154b28eb072bebe1af0b79c59afb"} 2022-02-11 14:57:13,321 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:193 at main(): INFO: (6003): Monitoring path: '/sbin', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 14:57:13,321 - wazuh_testing - DEBUG - 2022/02/11 18:56:47 wazuh-db[15442] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.102 ms. 2022-02-11 14:57:13,321 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir1', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 14:57:13,321 - wazuh_testing - DEBUG - 2022/02/11 18:56:48 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602205,"version":2,"begin":"/sbin/mkswap","end":"/usr/bin/apt-ftparchive","checksum":"a47a6c5678344283714ed664abc9a85413fc444d"} 2022-02-11 14:57:13,321 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir2', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| realtime'. 2022-02-11 14:57:13,321 - wazuh_testing - DEBUG - 2022/02/11 18:56:48 wazuh-db[15442] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.105 ms. 2022-02-11 14:57:13,321 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir3', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| whodata'. 2022-02-11 14:57:13,322 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/bin', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 14:57:13,322 - wazuh_testing - DEBUG - 2022/02/11 18:56:48 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602205,"version":2,"begin":"/sbin/mkswap","end":"/sbin/start-stop-daemon","tail":"/sbin/sulogin","checksum":"b356159685213d77a501787c4ba65eff3cf7fba1"} 2022-02-11 14:57:13,322 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/sbin', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 14:57:13,322 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:215 at main(): DEBUG: (6357): Maximum disk quota size limit configured to '1048576 KB'. 2022-02-11 14:57:13,322 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mtab' 2022-02-11 14:57:13,322 - wazuh_testing - DEBUG - 2022/02/11 18:56:48 wazuh-db[15442] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.102 ms. 2022-02-11 14:57:13,322 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/hosts.deny' 2022-02-11 14:57:13,322 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mail/statistics' 2022-02-11 14:57:13,322 - wazuh_testing - DEBUG - 2022/02/11 18:56:48 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602205,"version":2,"begin":"/sbin/sulogin","end":"/usr/bin/apt-ftparchive","checksum":"a9b1eb7c788d7e88889b5abba258bd64f03e7546"} 2022-02-11 14:57:13,322 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random-seed' 2022-02-11 14:57:13,322 - wazuh_testing - DEBUG - 2022/02/11 18:56:48 wazuh-db[15442] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.097 ms. 2022-02-11 14:57:13,322 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random.seed' 2022-02-11 14:57:13,323 - wazuh_testing - DEBUG - 2022/02/11 18:56:48 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602205,"version":2,"begin":"/sbin/sulogin","end":"/sbin/wipefs","tail":"/sbin/zramctl","checksum":"086fb81bf040732edfe2a920d67de456c77c8c3d"} 2022-02-11 14:57:13,323 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/adjtime' 2022-02-11 14:57:13,323 - wazuh_testing - DEBUG - 2022/02/11 18:56:48 wazuh-db[15442] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.085 ms. 2022-02-11 14:57:13,323 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/httpd/logs' 2022-02-11 14:57:13,323 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/utmpx' 2022-02-11 14:57:13,323 - wazuh_testing - DEBUG - 2022/02/11 18:56:48 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602205,"version":2,"begin":"/sbin/zramctl","end":"/usr/bin/apt-ftparchive","checksum":"174a46ff91239e95a534c5be9f1126cf6bcaba27"} 2022-02-11 14:57:13,323 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/wtmpx' 2022-02-11 14:57:13,323 - wazuh_testing - DEBUG - 2022/02/11 18:56:48 wazuh-db[15442] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.080 ms. 2022-02-11 14:57:13,323 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/cups/certs' 2022-02-11 14:57:13,323 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/dumpdates' 2022-02-11 14:57:13,323 - wazuh_testing - DEBUG - 2022/02/11 18:56:48 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602205,"version":2,"begin":"/sbin/zramctl","end":"/usr/bin/addpart","tail":"/usr/bin/addr2line","checksum":"fb4a71a3419fae54401ef5cbedba509446f836eb"} 2022-02-11 14:57:13,323 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/svc/volatile' 2022-02-11 14:57:13,323 - wazuh_testing - DEBUG - 2022/02/11 18:56:48 wazuh-db[15442] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.069 ms. 2022-02-11 14:57:13,323 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/security' 2022-02-11 14:57:13,324 - wazuh_testing - DEBUG - 2022/02/11 18:56:48 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602205,"version":2,"begin":"/usr/bin/addr2line","end":"/usr/bin/apt-ftparchive","checksum":"59201a3f75bcbf8838c851c3821c5407a36b74bb"} 2022-02-11 14:57:13,324 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/debug' 2022-02-11 14:57:13,324 - wazuh_testing - DEBUG - 2022/02/11 18:56:48 wazuh-db[15442] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.093 ms. 2022-02-11 14:57:13,324 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/dev/core' 2022-02-11 14:57:13,324 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '^/proc' 2022-02-11 14:57:13,324 - wazuh_testing - DEBUG - 2022/02/11 18:56:48 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602205,"version":2,"begin":"/sbin/zramctl","end":"/usr/bin/[","tail":"/usr/bin/aclocal","checksum":"d083d6d286795943f55fdf45b82f6bd7837af9fe"} 2022-02-11 14:57:13,324 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '.log$\|.swp$' 2022-02-11 14:57:13,324 - wazuh_testing - DEBUG - 2022/02/11 18:56:48 wazuh-db[15442] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.052 ms. 2022-02-11 14:57:13,324 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:235 at main(): INFO: (6004): No diff for file: '/etc/ssl/private.key' 2022-02-11 14:57:13,324 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:245 at main(): INFO: (6016): Directory set for real time monitoring: '/testdir2'. 2022-02-11 14:57:13,324 - wazuh_testing - DEBUG - 2022/02/11 18:56:48 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602205,"version":2,"begin":"/usr/bin/aclocal","end":"/usr/bin/addpart","checksum":"6d0f3eb4c663d5a1d575d605ff8c76994f48d9b2"} 2022-02-11 14:57:13,324 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] syscheck_audit.c:243 at audit_init(): WARNING: (6924): Who-data engine cannot start because Auditd is not running. 2022-02-11 14:57:13,324 - wazuh_testing - DEBUG - 2022/02/11 18:56:48 wazuh-db[15442] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.062 ms. 2022-02-11 14:57:13,325 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:264 at main(): WARNING: (6913): Who-data engine could not start. Switching who-data to real-time. 2022-02-11 14:57:13,325 - wazuh_testing - DEBUG - 2022/02/11 18:56:48 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602205,"version":2,"begin":"/sbin/zramctl","end":"/sbin/zramctl","tail":"/usr/bin/2to3-2.7","checksum":"58b2b87ce2162d80a895c740e0ed2124836230b7"} 2022-02-11 14:57:13,325 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] run_check.c:194 at start_daemon(): DEBUG: (6320): Setting process priority to: '10' 2022-02-11 14:57:13,325 - wazuh_testing - DEBUG - 2022/02/11 18:56:48 wazuh-db[15442] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.042 ms. 2022-02-11 14:57:13,325 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:57:13,325 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] run_check.c:229 at start_daemon(): INFO: (6000): Starting daemon... 2022-02-11 14:57:13,325 - wazuh_testing - DEBUG - 2022/02/11 18:56:49 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602205,"version":2,"begin":"/usr/bin/2to3-2.7","end":"/usr/bin/[","checksum":"97375af060bd460f67eb174cbf79b28414737339"} 2022-02-11 14:57:13,325 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] run_check.c:232 at start_daemon(): INFO: (6010): File integrity monitoring scan frequency: 20 seconds 2022-02-11 14:57:13,325 - wazuh_testing - DEBUG - 2022/02/11 18:56:49 wazuh-db[15442] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.062 ms. 2022-02-11 14:57:13,325 - wazuh_testing - DEBUG - 2022/02/11 18:56:52 wazuh-db[15442] wdb.c:918 at wdb_commit_old(): DEBUG: Agent 'tasks' database commited. Time: 0.038 ms. 2022-02-11 14:57:13,325 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 14:57:13,325 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644602205}} 2022-02-11 14:57:13,326 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 14:57:13,326 - wazuh_testing - DEBUG - 2022/02/11 18:56:54 wazuh-db[15442] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux \|wazuh-agent1 \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64","os_arch":"x86_64"} 2022-02-11 14:57:13,326 - wazuh_testing - DEBUG - 2022/02/11 18:57:04 wazuh-db[15442] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-connection-status {"id":1,"connection_status":"disconnected","sync_status":"synced"} 2022-02-11 14:57:13,326 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-11 14:57:13,326 - wazuh_testing - DEBUG - 2022/02/11 18:57:04 wazuh-db[15442] main.c:290 at run_dealer(): DEBUG: New client connected (36). 2022-02-11 14:57:13,326 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-11 14:57:13,326 - wazuh_testing - DEBUG - 2022/02/11 18:57:04 wazuh-db[15442] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: get-labels 1 2022-02-11 14:57:13,326 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-11 14:57:13,326 - wazuh_testing - DEBUG - 2022/02/11 18:57:05 wazuh-db[15442] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-keepalive {"id":1,"connection_status":"pending","sync_status":"synced"} 2022-02-11 14:57:13,326 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-11 14:57:13,326 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 14:57:13,327 - wazuh_testing - DEBUG - 2022/02/11 18:57:09 wazuh-db[15442] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux \|wazuh-agent1 \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64","os_arch":"x86_64"} 2022-02-11 14:57:13,327 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 14:57:13,327 - wazuh_testing - DEBUG - 2022/02/11 18:57:09 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1644602226 2022-02-11 14:57:13,327 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644602205}} 2022-02-11 14:57:13,327 - wazuh_testing - DEBUG - 2022/02/11 18:57:09 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update end_scan 1644602226 2022-02-11 14:57:13,327 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.356 sec (0.354 clock sec) 2022-02-11 14:57:13,327 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1620, path count: 1626 2022-02-11 14:57:13,327 - wazuh_testing - DEBUG - 2022/02/11 18:57:09 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_global {"id":1644602226,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"daad6ca3d01be9b9d4ac643a212c6136b020a144"} 2022-02-11 14:57:13,327 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:57:13,327 - wazuh_testing - DEBUG - 2022/02/11 18:57:09 wazuh-db[15442] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 1.158 ms. 2022-02-11 14:57:13,327 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:57:13,328 - wazuh_testing - DEBUG - 2022/02/11 18:57:09 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602226,"version":2,"begin":"/bin/bash","end":"/sbin/chcpu","tail":"/sbin/ctrlaltdel","checksum":"57402e3268a27191e04bfc132831045ee0296f32"} 2022-02-11 14:57:13,328 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] run_check.c:387 at fim_run_realtime(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-11 14:57:13,328 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:57:13,328 - wazuh_testing - DEBUG - 2022/02/11 18:57:09 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602226,"version":2,"begin":"/sbin/ctrlaltdel","end":"/usr/sbin/zic","checksum":"2a384fbf0ce2638dd0ca71f805cf631aab0134b1"} 2022-02-11 14:57:13,328 - wazuh_testing - DEBUG - 2022/02/11 18:57:09 wazuh-db[15442] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.587 ms. 2022-02-11 14:57:13,328 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] run_check.c:543 at log_realtime_status(): INFO: (6012): Real-time file integrity monitoring started. 2022-02-11 14:57:13,328 - wazuh_testing - DEBUG - 2022/02/11 18:57:09 wazuh-db[15442] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.617 ms. 2022-02-11 14:57:13,328 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] run_check.c:568 at symlink_checker_thread(): DEBUG: (6033): Starting symbolic link updater. Interval '600'. 2022-02-11 14:57:13,328 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. 2022-02-11 14:57:13,329 - wazuh_testing - DEBUG - 2022/02/11 18:57:09 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602226,"version":2,"begin":"/sbin/ctrlaltdel","end":"/usr/bin/pdb","tail":"/usr/bin/pdb2","checksum":"39af41e590393a200922cdc10bffeb64402ecfb6"} 2022-02-11 14:57:13,329 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] run_check.c:82 at fim_send_sync_msg(): DEBUG: (6317): Sending integrity control message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1644602205,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"c7d4e863493255e1f6dd0a90c6f1bba963e76a4b"}} 2022-02-11 14:57:13,329 - wazuh_testing - DEBUG - 2022/02/11 18:57:09 wazuh-db[15442] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.335 ms. 2022-02-11 14:57:13,329 - wazuh_testing - DEBUG - 2022/02/11 18:57:09 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602226,"version":2,"begin":"/usr/bin/pdb2","end":"/usr/sbin/zic","checksum":"f13d51f7876684d6bc17db143ee1529b892c54d2"} 2022-02-11 14:57:13,329 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-agent1 and message: .Sending integrity control message: (.+)$ 2022-02-11 14:57:13,329 - wazuh_testing - DEBUG - 2022/02/11 18:57:09 wazuh-db[15442] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.290 ms. 2022-02-11 14:57:13,330 - wazuh_testing - DEBUG - 2022/02/11 18:57:09 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602226,"version":2,"begin":"/usr/bin/dpkg-genbuildinfo","end":"/usr/bin/pdb","checksum":"fcd12ca69011f5033c3706ba868e7f2983050598"} 2022-02-11 14:57:13,330 - wazuh_testing - DEBUG - 2022/02/11 18:57:09 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602226,"version":2,"begin":"/sbin/ctrlaltdel","end":"/usr/bin/dpkg-divert","tail":"/usr/bin/dpkg-genbuildinfo","checksum":"4a07284f21e8a009d58c48f66a6e9f44a1f767eb"} 2022-02-11 14:57:13,330 - wazuh_testing - DEBUG - 2022/02/11 18:57:09 wazuh-db[15442] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.217 ms. 2022-02-11 14:57:13,330 - wazuh_testing - DEBUG - 2022/02/11 18:57:09 wazuh-db[15442] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.219 ms. 2022-02-11 14:57:13,331 - wazuh_testing - DEBUG - 2022/02/11 18:57:09 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602226,"version":2,"begin":"/sbin/ctrlaltdel","end":"/usr/bin/apt-extracttemplates","tail":"/usr/bin/apt-ftparchive","checksum":"15865b7a5b68953e0e38ee5b9455f40589c06baa"} 2022-02-11 14:57:13,331 - wazuh_testing - DEBUG - 2022/02/11 18:57:09 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602226,"version":2,"begin":"/usr/bin/apt-ftparchive","end":"/usr/bin/dpkg-divert","checksum":"ab79628f5b16446ec1a1f2daeaf1afd2511680e1"} 2022-02-11 14:57:13,331 - wazuh_testing - DEBUG - 2022/02/11 18:57:09 wazuh-db[15442] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.118 ms. 2022-02-11 14:57:13,331 - wazuh_testing - DEBUG - 2022/02/11 18:57:09 wazuh-db[15442] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.144 ms. 2022-02-11 14:57:13,331 - wazuh_testing - DEBUG - 2022/02/11 18:57:09 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602226,"version":2,"begin":"/sbin/ctrlaltdel","end":"/sbin/mkhomedir_helper","tail":"/sbin/mkswap","checksum":"7a7df0bd9bb5154b28eb072bebe1af0b79c59afb"} 2022-02-11 14:57:13,332 - wazuh_testing - DEBUG - 2022/02/11 18:57:09 wazuh-db[15442] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.109 ms. 2022-02-11 14:57:13,332 - wazuh_testing - DEBUG - 2022/02/11 18:57:09 wazuh-db[15442] wdb.c:918 at wdb_commit_old(): DEBUG: Agent 'global' database commited. Time: 1.927 ms. 2022-02-11 14:57:13,332 - wazuh_testing - DEBUG - 2022/02/11 18:57:10 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602226,"version":2,"begin":"/sbin/mkswap","end":"/usr/bin/apt-extracttemplates","checksum":"c2ae2fd91af3dee7c8257d90eaedc4955df6bcab"} 2022-02-11 14:57:13,332 - wazuh_testing - DEBUG - 2022/02/11 18:57:10 wazuh-db[15442] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.126 ms. 2022-02-11 14:57:13,332 - wazuh_testing - DEBUG - 2022/02/11 18:57:10 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602226,"version":2,"begin":"/sbin/mkswap","end":"/sbin/start-stop-daemon","tail":"/sbin/sulogin","checksum":"b356159685213d77a501787c4ba65eff3cf7fba1"} 2022-02-11 14:57:13,333 - wazuh_testing - DEBUG - 2022/02/11 18:57:10 wazuh-db[15442] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.097 ms. 2022-02-11 14:57:13,333 - wazuh_testing - DEBUG - 2022/02/11 18:57:10 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602226,"version":2,"begin":"/sbin/sulogin","end":"/usr/bin/apt-extracttemplates","checksum":"b25cbcfe959c68329d80d2c41c9ac29dedd32317"} 2022-02-11 14:57:13,333 - wazuh_testing - DEBUG - 2022/02/11 18:57:10 wazuh-db[15442] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.069 ms. 2022-02-11 14:57:13,333 - wazuh_testing - DEBUG - 2022/02/11 18:57:10 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602226,"version":2,"begin":"/sbin/sulogin","end":"/sbin/wipefs","tail":"/sbin/zramctl","checksum":"086fb81bf040732edfe2a920d67de456c77c8c3d"} 2022-02-11 14:57:13,333 - wazuh_testing - DEBUG - 2022/02/11 18:57:10 wazuh-db[15442] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.050 ms. 2022-02-11 14:57:13,334 - wazuh_testing - DEBUG - 2022/02/11 18:57:10 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602226,"version":2,"begin":"/sbin/zramctl","end":"/usr/bin/apt-extracttemplates","checksum":"8317dc49483af0f040600a4f13cf3f597c453df6"} 2022-02-11 14:57:13,334 - wazuh_testing - DEBUG - 2022/02/11 18:57:10 wazuh-db[15442] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.048 ms. 2022-02-11 14:57:13,334 - wazuh_testing - DEBUG - 2022/02/11 18:57:10 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602226,"version":2,"begin":"/sbin/zramctl","end":"/usr/bin/aclocal-1.16","tail":"/usr/bin/addpart","checksum":"b3e1a9428a044f6c3c234cd57a3b595eae8fb273"} 2022-02-11 14:57:13,335 - wazuh_testing - DEBUG - 2022/02/11 18:57:10 wazuh-db[15442] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.061 ms. 2022-02-11 14:57:13,335 - wazuh_testing - DEBUG - 2022/02/11 18:57:10 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602226,"version":2,"begin":"/usr/bin/addpart","end":"/usr/bin/apt-extracttemplates","checksum":"7d1a3bbe28f2c9e567f8311757d46ea5365d7112"} 2022-02-11 14:57:13,336 - wazuh_testing - DEBUG - 2022/02/11 18:57:10 wazuh-db[15442] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.077 ms. 2022-02-11 14:57:13,337 - wazuh_testing - DEBUG - 2022/02/11 18:57:10 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602226,"version":2,"begin":"/sbin/zramctl","end":"/usr/bin/2to3-2.7","tail":"/usr/bin/[","checksum":"3cff87cf26bf29ff907b37fce0a8a66f3359d6b3"} 2022-02-11 14:57:13,337 - wazuh_testing - DEBUG - 2022/02/11 18:57:10 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602226,"version":2,"begin":"/usr/bin/[","end":"/usr/bin/aclocal-1.16","checksum":"0f1d35a6565c33bf9697c50fd2d7d2a4ebccbc45"} 2022-02-11 14:57:13,338 - wazuh_testing - DEBUG - 2022/02/11 18:57:10 wazuh-db[15442] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.070 ms. 2022-02-11 14:57:13,338 - wazuh_testing - DEBUG - 2022/02/11 18:57:10 wazuh-db[15442] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.071 ms. 2022-02-11 14:57:13,338 - wazuh_testing - DEBUG - 2022/02/11 18:57:10 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602226,"version":2,"begin":"/sbin/zramctl","end":"/sbin/zramctl","tail":"/testdir1/testdir1.txt","checksum":"58b2b87ce2162d80a895c740e0ed2124836230b7"} 2022-02-11 14:57:13,338 - wazuh_testing - DEBUG - 2022/02/11 18:57:10 wazuh-db[15442] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.044 ms. 2022-02-11 14:57:13,339 - wazuh_testing - DEBUG - 2022/02/11 18:57:11 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602226,"version":2,"begin":"/testdir1/testdir1.txt","end":"/usr/bin/2to3-2.7","checksum":"83c0056e450270dc3ffcab4eec742e766eb04cc4"} 2022-02-11 14:57:13,339 - wazuh_testing - DEBUG - 2022/02/11 18:57:11 wazuh-db[15442] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.041 ms. 2022-02-11 14:57:13,339 - wazuh_testing - DEBUG - 2022/02/11 18:57:11 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602226,"version":2,"begin":"/testdir1/testdir1.txt","end":"/testdir1/testdir1.txt","tail":"/usr/bin/2to3-2.7","checksum":"b8fdcb227b8ba010c4ef935cee3fa4c20ee3f677"} 2022-02-11 14:57:13,339 - wazuh_testing - DEBUG - 2022/02/11 18:57:11 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602226,"version":2,"begin":"/usr/bin/2to3-2.7","end":"/usr/bin/2to3-2.7","checksum":"f621f8dd560e58c5f017dfd42d98bb3a72466d1d"} 2022-02-11 14:57:13,339 - wazuh_testing - DEBUG - 2022/02/11 18:57:11 wazuh-db[15442] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.028 ms. 2022-02-11 14:57:13,340 - wazuh_testing - DEBUG - 2022/02/11 18:57:11 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file save2 {"path":"/testdir1/testdir1.txt","timestamp":1644602226,"version":2,"attributes":{"type":"file","size":0,"perm":"rw-r--r--","uid":"0","gid":"0","user_name":"root","group_name":"root","inode":17179747,"mtime":1644602221,"hash_md5":"d41d8cd98f00b204e9800998ecf8427e","hash_sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","hash_sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","checksum":"a379395aba018f41dca7ff13d29a976a8910c040"}} 2022-02-11 14:57:13,340 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-manager and message: .Agent 001 query: (.+) save2 2022-02-11 14:57:14,314 - wazuh_testing - DEBUG - Cleaning temporal files... 2022-02-11 14:57:14,314 - wazuh_testing - DEBUG - Checking results... 2022-02-11 14:57:14,315 - wazuh_testing - DEBUG - Received from wazuh-agent1 the expected message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1644602205,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"c7d4e863493255e1f6dd0a90c6f1bba963e76a4b"}} 2022-02-11 14:57:14,316 - wazuh_testing - DEBUG - Received from wazuh-manager the expected message: fim_file 2022-02-11 14:57:40,782 - wazuh_testing - DEBUG - Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-11 14:57:40,783 - wazuh_testing - DEBUG - Starting file composer for wazuh-manager and path: /var/ossec/logs/ossec.log. Composite file in /home/camila/Escritorio/repo/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-manager_ossec.log.tmp 2022-02-11 14:57:40,784 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-11 14:57:40,787 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-manager and message: .Initializing FIM Integrity Synchronization check. (.+)$ 2022-02-11 14:57:42,289 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-modulesd:syscollector: INFO: Stop received for Syscollector. 2022-02-11 14:57:42,289 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 12 disconnected. 2022-02-11 14:57:42,289 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-monitord: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:57:42,289 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-logcollector: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:57:42,289 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-remoted: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:57:42,289 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 25 disconnected. 2022-02-11 14:57:42,289 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 24 disconnected. 2022-02-11 14:57:42,289 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 18 disconnected. 2022-02-11 14:57:42,289 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 16 disconnected. 2022-02-11 14:57:42,289 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-syscheckd[15576] sig_op.c:49 at HandleSIG(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:57:42,289 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-analysisd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:57:42,289 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 36 disconnected. 2022-02-11 14:57:42,289 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 34 disconnected. 2022-02-11 14:57:42,290 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 33 disconnected. 2022-02-11 14:57:42,290 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 35 disconnected. 2022-02-11 14:57:42,290 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 31 disconnected. 2022-02-11 14:57:42,290 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 28 disconnected. 2022-02-11 14:57:42,290 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 27 disconnected. 2022-02-11 14:57:42,290 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 29 disconnected. 2022-02-11 14:57:42,290 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 22 disconnected. 2022-02-11 14:57:42,290 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 20 disconnected. 2022-02-11 14:57:42,290 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 32 disconnected. 2022-02-11 14:57:42,290 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 21 disconnected. 2022-02-11 14:57:42,291 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 30 disconnected. 2022-02-11 14:57:42,291 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 6 disconnected. 2022-02-11 14:57:42,291 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 26 disconnected. 2022-02-11 14:57:42,291 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 19 disconnected. 2022-02-11 14:57:42,291 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 13 disconnected. 2022-02-11 14:57:42,291 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 11 disconnected. 2022-02-11 14:57:42,291 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 23 disconnected. 2022-02-11 14:57:42,291 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 10 disconnected. 2022-02-11 14:57:42,291 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-execd: INFO: (1314): Shutdown received. Deleting responses. 2022-02-11 14:57:42,291 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-execd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:57:42,291 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:468 at handler(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:57:42,291 - wazuh_testing - DEBUG - 2022/02/11 18:57:21 wazuh-db[15442] wdb.c:872 at wdb_close_all(): DEBUG: Closing all databases... 2022-02-11 14:57:42,292 - wazuh_testing - DEBUG - 2022/02/11 18:57:21 wazuh-db[15442] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent 001 2022-02-11 14:57:42,292 - wazuh_testing - DEBUG - 2022/02/11 18:57:21 wazuh-db[15442] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent 000 2022-02-11 14:57:42,292 - wazuh_testing - DEBUG - 2022/02/11 18:57:21 wazuh-db[15442] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent mitre 2022-02-11 14:57:42,292 - wazuh_testing - DEBUG - 2022/02/11 18:57:21 wazuh-db[15442] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent global 2022-02-11 14:57:42,292 - wazuh_testing - DEBUG - 2022/02/11 18:57:21 wazuh-db[15442] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent tasks 2022-02-11 14:57:42,292 - wazuh_testing - DEBUG - 2022/02/11 18:57:21 wazuh-db[15442] main.c:231 at main(): DEBUG: Template file removed again: queue/db/.template.db 2022-02-11 14:57:42,292 - wazuh_testing - DEBUG - 2022/02/11 18:57:21 wazuh-authd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:57:42,292 - wazuh_testing - DEBUG - 2022/02/11 18:57:22 wazuh-authd: INFO: Exiting... 2022-02-11 14:57:42,292 - wazuh_testing - DEBUG - 2022/02/11 18:57:27 wazuh-db[16372] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 14:57:42,292 - wazuh_testing - DEBUG - 2022/02/11 18:57:27 wazuh-db[16372] main.c:101 at main(): DEBUG: Wazuh home directory: /var/ossec 2022-02-11 14:57:42,293 - wazuh_testing - DEBUG - 2022/02/11 18:57:27 wazuh-syscheckd[16376] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 14:57:42,293 - wazuh_testing - DEBUG - 2022/02/11 18:57:27 wazuh-syscheckd[16376] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 14:57:42,293 - wazuh_testing - DEBUG - 2022/02/11 18:57:27 wazuh-syscheckd[16376] syscheck-config.c:122 at organize_syscheck_dirs(): DEBUG: No directory entries to organize in syscheck configuration. 2022-02-11 14:57:42,293 - wazuh_testing - DEBUG - 2022/02/11 18:57:30 wazuh-csyslogd: INFO: Remote syslog server not configured. Clean exit. 2022-02-11 14:57:42,293 - wazuh_testing - DEBUG - 2022/02/11 18:57:30 wazuh-dbd: INFO: Database not configured. Clean exit. 2022-02-11 14:57:42,293 - wazuh_testing - DEBUG - 2022/02/11 18:57:30 wazuh-integratord: INFO: Remote integrations not configured. Clean exit. 2022-02-11 14:57:42,293 - wazuh_testing - DEBUG - 2022/02/11 18:57:30 wazuh-agentlessd: INFO: Not configured. Exiting. 2022-02-11 14:57:42,293 - wazuh_testing - DEBUG - 2022/02/11 18:57:30 wazuh-authd: INFO: Started (pid: 16442). 2022-02-11 14:57:42,293 - wazuh_testing - DEBUG - 2022/02/11 18:57:30 wazuh-authd: INFO: Accepting connections on port 1515. No password required. 2022-02-11 14:57:42,293 - wazuh_testing - DEBUG - 2022/02/11 18:57:30 wazuh-authd: INFO: Setting network timeout to 1.000000 sec. 2022-02-11 14:57:42,294 - wazuh_testing - DEBUG - 2022/02/11 18:57:31 wazuh-db[16456] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 14:57:42,294 - wazuh_testing - DEBUG - 2022/02/11 18:57:31 wazuh-db[16456] main.c:101 at main(): DEBUG: Wazuh home directory: /var/ossec 2022-02-11 14:57:42,294 - wazuh_testing - DEBUG - 2022/02/11 18:57:31 wazuh-db[16456] main.c:122 at main(): DEBUG: Template file removed: /var/ossec/queue/db/.template.db 2022-02-11 14:57:42,294 - wazuh_testing - DEBUG - 2022/02/11 18:57:31 wazuh-db[16456] main.c:178 at main(): INFO: Started (pid: 16458). 2022-02-11 14:57:42,294 - wazuh_testing - DEBUG - 2022/02/11 18:57:32 wazuh-execd: INFO: (1350): Active response disabled. 2022-02-11 14:57:42,294 - wazuh_testing - DEBUG - 2022/02/11 18:57:32 wazuh-execd: INFO: Started (pid: 16481). 2022-02-11 14:57:42,294 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 14:57:42,294 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 14:57:42,294 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] syscheck-config.c:122 at organize_syscheck_dirs(): DEBUG: No directory entries to organize in syscheck configuration. 2022-02-11 14:57:42,295 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] main.c:118 at main(): INFO: (6678): No directory provided for syscheck to monitor. 2022-02-11 14:57:42,295 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] main.c:136 at main(): INFO: (6001): File integrity monitoring disabled. 2022-02-11 14:57:42,295 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 rootcheck[16502] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled. 2022-02-11 14:57:42,295 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:57:42,295 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] syscom.c:123 at syscom_main(): DEBUG: (6284): Local requests thread ready. 2022-02-11 14:57:42,295 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] mq_op.c:47 at StartMQ(): DEBUG: Connected succesfully to 'queue/sockets/queue' after 0 attempts 2022-02-11 14:57:42,295 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] mq_op.c:48 at StartMQ(): DEBUG: (unix_domain) Maximum send buffer set to: '212992'. 2022-02-11 14:57:42,295 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] main.c:185 at main(): INFO: Started (pid: 16504). 2022-02-11 14:57:42,295 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] main.c:215 at main(): DEBUG: (6357): Maximum disk quota size limit configured to '1048576 KB'. 2022-02-11 14:57:42,296 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] run_check.c:194 at start_daemon(): DEBUG: (6320): Setting process priority to: '10' 2022-02-11 14:57:42,296 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:57:42,296 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] run_check.c:229 at start_daemon(): INFO: (6000): Starting daemon... 2022-02-11 14:57:42,296 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] run_check.c:232 at start_daemon(): INFO: (6010): File integrity monitoring scan frequency: 43200 seconds 2022-02-11 14:57:42,296 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 14:57:42,296 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644602253}} 2022-02-11 14:57:42,296 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 14:57:42,297 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 14:57:42,297 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 14:57:42,297 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644602253}} 2022-02-11 14:57:42,297 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.000 sec (0.000 clock sec) 2022-02-11 14:57:42,297 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 0, path count: 0 2022-02-11 14:57:42,297 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:57:42,298 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:57:42,298 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:57:42,298 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. 2022-02-11 14:57:42,298 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-manager and message: .Initializing FIM Integrity Synchronization check. (.+)$ 2022-02-11 14:57:43,289 - wazuh_testing - DEBUG - Cleaning temporal files... 2022-02-11 14:57:43,289 - wazuh_testing - DEBUG - Checking results... 2022-02-11 14:57:43,290 - wazuh_testing - DEBUG - Received from wazuh-manager the expected message: Sync interval is 300 seconds. -------------------------------Captured log call-------------------------------- DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:1005 Cleaning temporal files... DEBUG wazuh_testing:monitoring.py:994 Checking results... DEBUG wazuh_testing:monitoring.py:1000 Received from wazuh-agent1 the expected message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1644602205,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"c7d4e863493255e1f6dd0a90c6f1bba963e76a4b"}} DEBUG wazuh_testing:monitoring.py:1000 Received from wazuh-manager the expected message: fim_file DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:1005 Cleaning temporal files... DEBUG wazuh_testing:monitoring.py:994 Checking results... DEBUG wazuh_testing:monitoring.py:1000 Received from wazuh-manager the expected message: Sync interval is 300 seconds.

Result

Test

Duration

Links

Passed

test_synchronization.py::test_synchronization[testdir1-add-wazuh-agent1]

34.02

------------------------------Captured stderr call------------------------------
2022-02-11 14:53:52,734 - wazuh_testing - DEBUG - Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-11 14:53:52,735 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-11 14:53:52,735 - wazuh_testing - DEBUG - Starting file composer for wazuh-agent1 and path: /var/ossec/logs/ossec.log. Composite file in /home/camila/Escritorio/repo/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-agent1_ossec.log.tmp 2022-02-11 14:53:52,736 - wazuh_testing - DEBUG - Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-11 14:53:52,736 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-agent1 and message: .*Sending integrity control message: (.+)$ 2022-02-11 14:53:52,737 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-11 14:53:52,737 - wazuh_testing - DEBUG - Starting file composer for wazuh-manager and path: /var/ossec/logs/ossec.log. Composite file in /home/camila/Escritorio/repo/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-manager_ossec.log.tmp 2022-02-11 14:53:52,738 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-manager and message: .*Agent 001 query: (.+) save2 2022-02-11 14:53:54,238 - wazuh_testing - DEBUG - 2022/02/11 18:51:36 wazuh-agentd: ERROR: (1137): Lost connection with manager. Setting lock. 2022-02-11 14:53:54,238 - wazuh_testing - DEBUG - 2022/02/11 18:51:36 wazuh-agentd: INFO: Closing connection to server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 14:53:54,239 - wazuh_testing - DEBUG - 2022/02/11 18:51:36 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 14:53:54,239 - wazuh_testing - DEBUG - 2022/02/11 18:51:36 wazuh-agentd: ERROR: (1216): Unable to connect to '172.17.0.2:1514/tcp': 'Connection refused'. 2022-02-11 14:53:54,239 - wazuh_testing - DEBUG - 2022/02/11 18:51:44 wazuh-syscheckd[15434] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 14:53:54,239 - wazuh_testing - DEBUG - 2022/02/11 18:51:44 wazuh-syscheckd[15434] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644601904}} 2022-02-11 14:53:54,239 - wazuh_testing - DEBUG - 2022/02/11 18:51:44 wazuh-syscheckd[15434] wait_op.c:101 at os_wait(): WARNING: Process locked due to agent is offline. Waiting for connection... 2022-02-11 14:53:54,240 - wazuh_testing - DEBUG - 2022/02/11 18:51:46 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 14:53:54,240 - wazuh_testing - DEBUG - 2022/02/11 18:51:46 wazuh-agentd: ERROR: (1216): Unable to connect to '172.17.0.2:1514/tcp': 'Connection refused'. 2022-02-11 14:53:54,240 - wazuh_testing - DEBUG - 2022/02/11 18:51:35 wazuh-modulesd:syscollector: INFO: Stop received for Syscollector. 2022-02-11 14:53:54,240 - wazuh_testing - DEBUG - 2022/02/11 18:51:56 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 14:53:54,240 - wazuh_testing - DEBUG - 2022/02/11 18:51:56 wazuh-agentd: INFO: (4102): Connected to the server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 14:53:54,240 - wazuh_testing - DEBUG - 2022/02/11 18:51:35 wazuh-db[12471] main.c:352 at run_worker(): DEBUG: Client 13 disconnected. 2022-02-11 14:53:54,240 - wazuh_testing - DEBUG - 2022/02/11 18:51:56 wazuh-agentd: INFO: Server responded. Releasing lock. 2022-02-11 14:53:54,240 - wazuh_testing - DEBUG - 2022/02/11 18:51:35 wazuh-monitord: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:53:54,241 - wazuh_testing - DEBUG - 2022/02/11 18:51:59 wazuh-syscheckd[15434] wait_op.c:116 at os_wait(): INFO: Agent is now online. Process unlocked, continuing... 2022-02-11 14:53:54,241 - wazuh_testing - DEBUG - 2022/02/11 18:51:36 wazuh-logcollector: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:53:54,241 - wazuh_testing - DEBUG - 2022/02/11 18:51:36 wazuh-remoted: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:53:54,241 - wazuh_testing - DEBUG - 2022/02/11 18:51:59 wazuh-syscheckd[15434] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 14:53:54,241 - wazuh_testing - DEBUG - 2022/02/11 18:51:36 wazuh-db[12471] main.c:352 at run_worker(): DEBUG: Client 25 disconnected. 2022-02-11 14:53:54,241 - wazuh_testing - DEBUG - 2022/02/11 18:51:59 wazuh-syscheckd[15434] fim_db.c:436 at fim_db_check_transaction(): DEBUG: Database transaction completed. 2022-02-11 14:53:54,241 - wazuh_testing - DEBUG - 2022/02/11 18:51:36 wazuh-db[12471] main.c:352 at run_worker(): DEBUG: Client 18 disconnected. 2022-02-11 14:53:54,241 - wazuh_testing - DEBUG - 2022/02/11 18:51:59 wazuh-syscheckd[15434] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-11 14:53:54,241 - wazuh_testing - DEBUG - 2022/02/11 18:51:36 wazuh-db[12471] main.c:352 at run_worker(): DEBUG: Client 24 disconnected. 2022-02-11 14:53:54,242 - wazuh_testing - DEBUG - 2022/02/11 18:51:36 wazuh-db[12471] main.c:352 at run_worker(): DEBUG: Client 16 disconnected. 2022-02-11 14:53:54,242 - wazuh_testing - DEBUG - 2022/02/11 18:51:59 wazuh-syscheckd[15434] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-11 14:53:54,242 - wazuh_testing - DEBUG - 2022/02/11 18:51:36 wazuh-syscheckd[12605] sig_op.c:49 at HandleSIG(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:53:54,242 - wazuh_testing - DEBUG - 2022/02/11 18:51:36 wazuh-analysisd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:53:54,242 - wazuh_testing - DEBUG - 2022/02/11 18:51:59 wazuh-syscheckd[15434] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-11 14:53:54,242 - wazuh_testing - DEBUG - 2022/02/11 18:51:36 wazuh-db[12471] main.c:352 at run_worker(): DEBUG: Client 34 disconnected. 2022-02-11 14:53:54,242 - wazuh_testing - DEBUG - 2022/02/11 18:51:59 wazuh-syscheckd[15434] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-11 14:53:54,242 - wazuh_testing - DEBUG - 2022/02/11 18:51:36 wazuh-db[12471] main.c:352 at run_worker(): DEBUG: Client 36 disconnected. 2022-02-11 14:53:54,243 - wazuh_testing - DEBUG - 2022/02/11 18:51:59 wazuh-syscheckd[15434] create_db.c:109 at fim_delete_file_event(): DEBUG: (6220): Sending delete message for file: '/testdir1/testdir1.txt' 2022-02-11 14:53:54,243 - wazuh_testing - DEBUG - 2022/02/11 18:51:36 wazuh-db[12471] main.c:352 at run_worker(): DEBUG: Client 35 disconnected. 2022-02-11 14:53:54,243 - wazuh_testing - DEBUG - 2022/02/11 18:51:36 wazuh-db[12471] main.c:352 at run_worker(): DEBUG: Client 32 disconnected. 2022-02-11 14:53:54,243 - wazuh_testing - DEBUG - 2022/02/11 18:51:36 wazuh-db[12471] main.c:352 at run_worker(): DEBUG: Client 30 disconnected. 2022-02-11 14:53:54,243 - wazuh_testing - DEBUG - 2022/02/11 18:51:36 wazuh-db[12471] main.c:352 at run_worker(): DEBUG: Client 27 disconnected. 2022-02-11 14:53:54,243 - wazuh_testing - DEBUG - 2022/02/11 18:51:59 wazuh-syscheckd[15434] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"event","data":{"path":"/testdir1/testdir1.txt","version":2,"mode":"scheduled","type":"deleted","timestamp":1644601883,"attributes":{"type":"file","size":0,"perm":"rw-r--r--","uid":"0","gid":"0","user_name":"root","group_name":"root","inode":17179747,"mtime":1644601878,"hash_md5":"d41d8cd98f00b204e9800998ecf8427e","hash_sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","hash_sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","checksum":"fad6effa1e26ea58a7c2ef8d7ff23ddb630a2dc3"}}} 2022-02-11 14:53:54,243 - wazuh_testing - DEBUG - 2022/02/11 18:51:36 wazuh-db[12471] main.c:352 at run_worker(): DEBUG: Client 33 disconnected. 2022-02-11 14:53:54,244 - wazuh_testing - DEBUG - 2022/02/11 18:51:36 wazuh-db[12471] main.c:352 at run_worker(): DEBUG: Client 28 disconnected. 2022-02-11 14:53:54,244 - wazuh_testing - DEBUG - 2022/02/11 18:51:59 wazuh-syscheckd[15434] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 14:53:54,244 - wazuh_testing - DEBUG - 2022/02/11 18:51:36 wazuh-db[12471] main.c:352 at run_worker(): DEBUG: Client 20 disconnected. 2022-02-11 14:53:54,244 - wazuh_testing - DEBUG - 2022/02/11 18:51:59 wazuh-syscheckd[15434] create_db.c:220 at fim_scan(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-11 14:53:54,244 - wazuh_testing - DEBUG - 2022/02/11 18:51:36 wazuh-db[12471] main.c:352 at run_worker(): DEBUG: Client 31 disconnected. 2022-02-11 14:53:54,244 - wazuh_testing - DEBUG - 2022/02/11 18:51:59 wazuh-syscheckd[15434] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 14:53:54,244 - wazuh_testing - DEBUG - 2022/02/11 18:51:36 wazuh-db[12471] main.c:352 at run_worker(): DEBUG: Client 12 disconnected. 2022-02-11 14:53:54,245 - wazuh_testing - DEBUG - 2022/02/11 18:51:59 wazuh-syscheckd[15434] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644601919}} 2022-02-11 14:53:54,245 - wazuh_testing - DEBUG - 2022/02/11 18:51:36 wazuh-db[12471] main.c:352 at run_worker(): DEBUG: Client 26 disconnected. 2022-02-11 14:53:54,245 - wazuh_testing - DEBUG - 2022/02/11 18:51:59 wazuh-syscheckd[15434] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 15.366 sec (0.354 clock sec) 2022-02-11 14:53:54,245 - wazuh_testing - DEBUG - 2022/02/11 18:51:36 wazuh-db[12471] main.c:352 at run_worker(): DEBUG: Client 11 disconnected. 2022-02-11 14:53:54,245 - wazuh_testing - DEBUG - 2022/02/11 18:51:59 wazuh-syscheckd[15434] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1620, path count: 1626 2022-02-11 14:53:54,245 - wazuh_testing - DEBUG - 2022/02/11 18:51:36 wazuh-db[12471] main.c:352 at run_worker(): DEBUG: Client 10 disconnected. 2022-02-11 14:53:54,246 - wazuh_testing - DEBUG - 2022/02/11 18:51:36 wazuh-db[12471] main.c:352 at run_worker(): DEBUG: Client 29 disconnected. 2022-02-11 14:53:54,246 - wazuh_testing - DEBUG - 2022/02/11 18:52:20 wazuh-syscheckd[15434] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 14:53:54,246 - wazuh_testing - DEBUG - 2022/02/11 18:51:36 wazuh-db[12471] main.c:352 at run_worker(): DEBUG: Client 6 disconnected. 2022-02-11 14:53:54,246 - wazuh_testing - DEBUG - 2022/02/11 18:51:36 wazuh-db[12471] main.c:352 at run_worker(): DEBUG: Client 21 disconnected. 2022-02-11 14:53:54,246 - wazuh_testing - DEBUG - 2022/02/11 18:52:20 wazuh-syscheckd[15434] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644601940}} 2022-02-11 14:53:54,246 - wazuh_testing - DEBUG - 2022/02/11 18:51:36 wazuh-db[12471] main.c:352 at run_worker(): DEBUG: Client 23 disconnected. 2022-02-11 14:53:54,247 - wazuh_testing - DEBUG - 2022/02/11 18:52:20 wazuh-syscheckd[15434] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 14:53:54,247 - wazuh_testing - DEBUG - 2022/02/11 18:51:36 wazuh-db[12471] main.c:352 at run_worker(): DEBUG: Client 22 disconnected. 2022-02-11 14:53:54,247 - wazuh_testing - DEBUG - 2022/02/11 18:51:36 wazuh-db[12471] main.c:352 at run_worker(): DEBUG: Client 19 disconnected. 2022-02-11 14:53:54,247 - wazuh_testing - DEBUG - 2022/02/11 18:52:20 wazuh-syscheckd[15434] fim_db.c:436 at fim_db_check_transaction(): DEBUG: Database transaction completed. 2022-02-11 14:53:54,247 - wazuh_testing - DEBUG - 2022/02/11 18:51:36 wazuh-execd: INFO: (1314): Shutdown received. Deleting responses. 2022-02-11 14:53:54,247 - wazuh_testing - DEBUG - 2022/02/11 18:51:36 wazuh-execd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:53:54,247 - wazuh_testing - DEBUG - 2022/02/11 18:52:20 wazuh-syscheckd[15434] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-11 14:53:54,248 - wazuh_testing - DEBUG - 2022/02/11 18:51:36 wazuh-db[12471] main.c:468 at handler(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:53:54,248 - wazuh_testing - DEBUG - 2022/02/11 18:51:37 wazuh-db[12471] wdb.c:872 at wdb_close_all(): DEBUG: Closing all databases... 2022-02-11 14:53:54,248 - wazuh_testing - DEBUG - 2022/02/11 18:52:20 wazuh-syscheckd[15434] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-11 14:53:54,248 - wazuh_testing - DEBUG - 2022/02/11 18:51:37 wazuh-db[12471] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent 001 2022-02-11 14:53:54,248 - wazuh_testing - DEBUG - 2022/02/11 18:51:37 wazuh-db[12471] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent 000 2022-02-11 14:53:54,248 - wazuh_testing - DEBUG - 2022/02/11 18:52:20 wazuh-syscheckd[15434] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-11 14:53:54,248 - wazuh_testing - DEBUG - 2022/02/11 18:51:37 wazuh-db[12471] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent mitre 2022-02-11 14:53:54,249 - wazuh_testing - DEBUG - 2022/02/11 18:52:20 wazuh-syscheckd[15434] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-11 14:53:54,249 - wazuh_testing - DEBUG - 2022/02/11 18:51:37 wazuh-db[12471] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent global 2022-02-11 14:53:54,249 - wazuh_testing - DEBUG - 2022/02/11 18:52:21 wazuh-syscheckd[15434] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 14:53:54,249 - wazuh_testing - DEBUG - 2022/02/11 18:51:37 wazuh-db[12471] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent tasks 2022-02-11 14:53:54,249 - wazuh_testing - DEBUG - 2022/02/11 18:52:21 wazuh-syscheckd[15434] create_db.c:220 at fim_scan(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-11 14:53:54,249 - wazuh_testing - DEBUG - 2022/02/11 18:51:37 wazuh-db[12471] main.c:231 at main(): DEBUG: Template file removed again: queue/db/.template.db 2022-02-11 14:53:54,249 - wazuh_testing - DEBUG - 2022/02/11 18:52:21 wazuh-syscheckd[15434] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 14:53:54,249 - wazuh_testing - DEBUG - 2022/02/11 18:51:37 wazuh-authd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:53:54,250 - wazuh_testing - DEBUG - 2022/02/11 18:52:21 wazuh-syscheckd[15434] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644601941}} 2022-02-11 14:53:54,250 - wazuh_testing - DEBUG - 2022/02/11 18:51:38 wazuh-authd: INFO: Exiting... 2022-02-11 14:53:54,250 - wazuh_testing - DEBUG - 2022/02/11 18:52:21 wazuh-syscheckd[15434] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.339 sec (0.335 clock sec) 2022-02-11 14:53:54,250 - wazuh_testing - DEBUG - 2022/02/11 18:51:42 wazuh-db[13395] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 14:53:54,250 - wazuh_testing - DEBUG - 2022/02/11 18:52:21 wazuh-syscheckd[15434] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1620, path count: 1626 2022-02-11 14:53:54,250 - wazuh_testing - DEBUG - 2022/02/11 18:51:42 wazuh-db[13395] main.c:101 at main(): DEBUG: Wazuh home directory: /var/ossec 2022-02-11 14:53:54,250 - wazuh_testing - DEBUG - 2022/02/11 18:52:42 wazuh-syscheckd[15434] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 14:53:54,250 - wazuh_testing - DEBUG - 2022/02/11 18:51:42 wazuh-syscheckd[13399] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 14:53:54,250 - wazuh_testing - DEBUG - 2022/02/11 18:52:42 wazuh-syscheckd[15434] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644601962}} 2022-02-11 14:53:54,250 - wazuh_testing - DEBUG - 2022/02/11 18:51:42 wazuh-syscheckd[13399] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 14:53:54,251 - wazuh_testing - DEBUG - 2022/02/11 18:52:42 wazuh-syscheckd[15434] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 14:53:54,251 - wazuh_testing - DEBUG - 2022/02/11 18:51:42 wazuh-syscheckd[13399] syscheck-config.c:122 at organize_syscheck_dirs(): DEBUG: No directory entries to organize in syscheck configuration. 2022-02-11 14:53:54,251 - wazuh_testing - DEBUG - 2022/02/11 18:52:42 wazuh-syscheckd[15434] fim_db.c:436 at fim_db_check_transaction(): DEBUG: Database transaction completed. 2022-02-11 14:53:54,251 - wazuh_testing - DEBUG - 2022/02/11 18:51:45 wazuh-csyslogd: INFO: Remote syslog server not configured. Clean exit. 2022-02-11 14:53:54,251 - wazuh_testing - DEBUG - 2022/02/11 18:52:42 wazuh-syscheckd[15434] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-11 14:53:54,251 - wazuh_testing - DEBUG - 2022/02/11 18:51:45 wazuh-dbd: INFO: Database not configured. Clean exit. 2022-02-11 14:53:54,251 - wazuh_testing - DEBUG - 2022/02/11 18:52:42 wazuh-syscheckd[15434] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-11 14:53:54,251 - wazuh_testing - DEBUG - 2022/02/11 18:51:45 wazuh-integratord: INFO: Remote integrations not configured. Clean exit. 2022-02-11 14:53:54,251 - wazuh_testing - DEBUG - 2022/02/11 18:52:42 wazuh-syscheckd[15434] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-11 14:53:54,251 - wazuh_testing - DEBUG - 2022/02/11 18:51:45 wazuh-agentlessd: INFO: Not configured. Exiting. 2022-02-11 14:53:54,251 - wazuh_testing - DEBUG - 2022/02/11 18:51:45 wazuh-authd: INFO: Started (pid: 13465). 2022-02-11 14:53:54,251 - wazuh_testing - DEBUG - 2022/02/11 18:52:42 wazuh-syscheckd[15434] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-11 14:53:54,252 - wazuh_testing - DEBUG - 2022/02/11 18:51:45 wazuh-authd: INFO: Accepting connections on port 1515. No password required. 2022-02-11 14:53:54,252 - wazuh_testing - DEBUG - 2022/02/11 18:52:42 wazuh-syscheckd[15434] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 14:53:54,252 - wazuh_testing - DEBUG - 2022/02/11 18:51:45 wazuh-authd: INFO: Setting network timeout to 1.000000 sec. 2022-02-11 14:53:54,252 - wazuh_testing - DEBUG - 2022/02/11 18:52:42 wazuh-syscheckd[15434] create_db.c:220 at fim_scan(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-11 14:53:54,252 - wazuh_testing - DEBUG - 2022/02/11 18:51:45 wazuh-db[13476] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 14:53:54,252 - wazuh_testing - DEBUG - 2022/02/11 18:52:42 wazuh-syscheckd[15434] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 14:53:54,252 - wazuh_testing - DEBUG - 2022/02/11 18:51:45 wazuh-db[13476] main.c:101 at main(): DEBUG: Wazuh home directory: /var/ossec 2022-02-11 14:53:54,252 - wazuh_testing - DEBUG - 2022/02/11 18:52:42 wazuh-syscheckd[15434] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644601962}} 2022-02-11 14:53:54,252 - wazuh_testing - DEBUG - 2022/02/11 18:51:45 wazuh-db[13476] main.c:122 at main(): DEBUG: Template file removed: /var/ossec/queue/db/.template.db 2022-02-11 14:53:54,252 - wazuh_testing - DEBUG - 2022/02/11 18:52:42 wazuh-syscheckd[15434] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.324 sec (0.320 clock sec) 2022-02-11 14:53:54,253 - wazuh_testing - DEBUG - 2022/02/11 18:52:42 wazuh-syscheckd[15434] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1620, path count: 1626 2022-02-11 14:53:54,253 - wazuh_testing - DEBUG - 2022/02/11 18:51:45 wazuh-db[13476] main.c:178 at main(): INFO: Started (pid: 13478). 2022-02-11 14:53:54,253 - wazuh_testing - DEBUG - 2022/02/11 18:51:46 wazuh-execd: INFO: (1350): Active response disabled. 2022-02-11 14:53:54,253 - wazuh_testing - DEBUG - 2022/02/11 18:53:03 wazuh-syscheckd[15434] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 14:53:54,253 - wazuh_testing - DEBUG - 2022/02/11 18:51:46 wazuh-execd: INFO: Started (pid: 13501). 2022-02-11 14:53:54,253 - wazuh_testing - DEBUG - 2022/02/11 18:53:03 wazuh-syscheckd[15434] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644601983}} 2022-02-11 14:53:54,253 - wazuh_testing - DEBUG - 2022/02/11 18:51:47 wazuh-analysisd: INFO: Total rules enabled: '3882' 2022-02-11 14:53:54,253 - wazuh_testing - DEBUG - 2022/02/11 18:53:03 wazuh-syscheckd[15434] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 14:53:54,253 - wazuh_testing - DEBUG - 2022/02/11 18:51:47 wazuh-analysisd: INFO: Started (pid: 13515). 2022-02-11 14:53:54,253 - wazuh_testing - DEBUG - 2022/02/11 18:53:03 wazuh-syscheckd[15434] fim_db.c:436 at fim_db_check_transaction(): DEBUG: Database transaction completed. 2022-02-11 14:53:54,253 - wazuh_testing - DEBUG - 2022/02/11 18:51:47 wazuh-db[13476] main.c:290 at run_dealer(): DEBUG: New client connected (6). 2022-02-11 14:53:54,253 - wazuh_testing - DEBUG - 2022/02/11 18:53:03 wazuh-syscheckd[15434] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-11 14:53:54,254 - wazuh_testing - DEBUG - 2022/02/11 18:51:47 wazuh-analysisd: INFO: (7200): Logtest started 2022-02-11 14:53:54,254 - wazuh_testing - DEBUG - 2022/02/11 18:53:03 wazuh-syscheckd[15434] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-11 14:53:54,254 - wazuh_testing - DEBUG - 2022/02/11 18:51:48 wazuh-syscheckd[13610] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 14:53:54,254 - wazuh_testing - DEBUG - 2022/02/11 18:53:03 wazuh-syscheckd[15434] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-11 14:53:54,254 - wazuh_testing - DEBUG - 2022/02/11 18:51:48 wazuh-syscheckd[13610] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 14:53:54,254 - wazuh_testing - DEBUG - 2022/02/11 18:53:03 wazuh-syscheckd[15434] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-11 14:53:54,254 - wazuh_testing - DEBUG - 2022/02/11 18:51:48 wazuh-syscheckd[13610] syscheck-config.c:122 at organize_syscheck_dirs(): DEBUG: No directory entries to organize in syscheck configuration. 2022-02-11 14:53:54,254 - wazuh_testing - DEBUG - 2022/02/11 18:53:03 wazuh-syscheckd[15434] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 14:53:54,254 - wazuh_testing - DEBUG - 2022/02/11 18:51:48 wazuh-syscheckd[13610] main.c:118 at main(): INFO: (6678): No directory provided for syscheck to monitor. 2022-02-11 14:53:54,254 - wazuh_testing - DEBUG - 2022/02/11 18:53:03 wazuh-syscheckd[15434] create_db.c:220 at fim_scan(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-11 14:53:54,254 - wazuh_testing - DEBUG - 2022/02/11 18:51:48 wazuh-syscheckd[13610] main.c:136 at main(): INFO: (6001): File integrity monitoring disabled. 2022-02-11 14:53:54,254 - wazuh_testing - DEBUG - 2022/02/11 18:53:03 wazuh-syscheckd[15434] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 14:53:54,254 - wazuh_testing - DEBUG - 2022/02/11 18:51:48 rootcheck[13610] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled. 2022-02-11 14:53:54,255 - wazuh_testing - DEBUG - 2022/02/11 18:53:03 wazuh-syscheckd[15434] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644601983}} 2022-02-11 14:53:54,255 - wazuh_testing - DEBUG - 2022/02/11 18:51:48 wazuh-syscheckd[13610] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:53:54,255 - wazuh_testing - DEBUG - 2022/02/11 18:53:03 wazuh-syscheckd[15434] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.321 sec (0.318 clock sec) 2022-02-11 14:53:54,255 - wazuh_testing - DEBUG - 2022/02/11 18:51:48 wazuh-syscheckd[13610] syscom.c:123 at syscom_main(): DEBUG: (6284): Local requests thread ready. 2022-02-11 14:53:54,255 - wazuh_testing - DEBUG - 2022/02/11 18:53:03 wazuh-syscheckd[15434] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1620, path count: 1626 2022-02-11 14:53:54,255 - wazuh_testing - DEBUG - 2022/02/11 18:51:48 wazuh-syscheckd[13610] mq_op.c:47 at StartMQ(): DEBUG: Connected succesfully to 'queue/sockets/queue' after 0 attempts 2022-02-11 14:53:54,255 - wazuh_testing - DEBUG - 2022/02/11 18:53:24 wazuh-syscheckd[15434] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 14:53:54,255 - wazuh_testing - DEBUG - 2022/02/11 18:51:48 wazuh-syscheckd[13610] mq_op.c:48 at StartMQ(): DEBUG: (unix_domain) Maximum send buffer set to: '212992'. 2022-02-11 14:53:54,255 - wazuh_testing - DEBUG - 2022/02/11 18:53:24 wazuh-syscheckd[15434] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644602004}} 2022-02-11 14:53:54,255 - wazuh_testing - DEBUG - 2022/02/11 18:51:48 wazuh-syscheckd[13610] main.c:185 at main(): INFO: Started (pid: 13612). 2022-02-11 14:53:54,255 - wazuh_testing - DEBUG - 2022/02/11 18:53:24 wazuh-syscheckd[15434] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 14:53:54,255 - wazuh_testing - DEBUG - 2022/02/11 18:51:48 wazuh-syscheckd[13610] main.c:215 at main(): DEBUG: (6357): Maximum disk quota size limit configured to '1048576 KB'. 2022-02-11 14:53:54,255 - wazuh_testing - DEBUG - 2022/02/11 18:53:24 wazuh-syscheckd[15434] fim_db.c:436 at fim_db_check_transaction(): DEBUG: Database transaction completed. 2022-02-11 14:53:54,256 - wazuh_testing - DEBUG - 2022/02/11 18:51:48 wazuh-syscheckd[13610] run_check.c:194 at start_daemon(): DEBUG: (6320): Setting process priority to: '10' 2022-02-11 14:53:54,256 - wazuh_testing - DEBUG - 2022/02/11 18:53:24 wazuh-syscheckd[15434] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-11 14:53:54,256 - wazuh_testing - DEBUG - 2022/02/11 18:51:48 wazuh-syscheckd[13610] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:53:54,256 - wazuh_testing - DEBUG - 2022/02/11 18:53:24 wazuh-syscheckd[15434] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-11 14:53:54,256 - wazuh_testing - DEBUG - 2022/02/11 18:51:48 wazuh-syscheckd[13610] run_check.c:229 at start_daemon(): INFO: (6000): Starting daemon... 2022-02-11 14:53:54,256 - wazuh_testing - DEBUG - 2022/02/11 18:53:24 wazuh-syscheckd[15434] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-11 14:53:54,256 - wazuh_testing - DEBUG - 2022/02/11 18:51:48 wazuh-syscheckd[13610] run_check.c:232 at start_daemon(): INFO: (6010): File integrity monitoring scan frequency: 43200 seconds 2022-02-11 14:53:54,256 - wazuh_testing - DEBUG - 2022/02/11 18:53:24 wazuh-syscheckd[15434] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-11 14:53:54,256 - wazuh_testing - DEBUG - 2022/02/11 18:51:48 wazuh-syscheckd[13610] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 14:53:54,256 - wazuh_testing - DEBUG - 2022/02/11 18:53:25 wazuh-syscheckd[15434] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 14:53:54,256 - wazuh_testing - DEBUG - 2022/02/11 18:51:48 wazuh-syscheckd[13610] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644601908}} 2022-02-11 14:53:54,256 - wazuh_testing - DEBUG - 2022/02/11 18:53:25 wazuh-syscheckd[15434] create_db.c:220 at fim_scan(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-11 14:53:54,256 - wazuh_testing - DEBUG - 2022/02/11 18:51:48 wazuh-syscheckd[13610] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 14:53:54,256 - wazuh_testing - DEBUG - 2022/02/11 18:53:25 wazuh-syscheckd[15434] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 14:53:54,256 - wazuh_testing - DEBUG - 2022/02/11 18:51:48 wazuh-syscheckd[13610] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 14:53:54,257 - wazuh_testing - DEBUG - 2022/02/11 18:53:25 wazuh-syscheckd[15434] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644602005}} 2022-02-11 14:53:54,257 - wazuh_testing - DEBUG - 2022/02/11 18:51:48 wazuh-db[13476] main.c:290 at run_dealer(): DEBUG: New client connected (10). 2022-02-11 14:53:54,257 - wazuh_testing - DEBUG - 2022/02/11 18:53:25 wazuh-syscheckd[15434] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.322 sec (0.319 clock sec) 2022-02-11 14:53:54,257 - wazuh_testing - DEBUG - 2022/02/11 18:51:48 wazuh-syscheckd[13610] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 14:53:54,257 - wazuh_testing - DEBUG - 2022/02/11 18:53:25 wazuh-syscheckd[15434] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1620, path count: 1626 2022-02-11 14:53:54,257 - wazuh_testing - DEBUG - 2022/02/11 18:51:48 wazuh-syscheckd[13610] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644601908}} 2022-02-11 14:53:54,257 - wazuh_testing - DEBUG - 2022/02/11 18:53:44 wazuh-logcollector: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:53:54,257 - wazuh_testing - DEBUG - 2022/02/11 18:51:48 wazuh-syscheckd[13610] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.000 sec (0.000 clock sec) 2022-02-11 14:53:54,257 - wazuh_testing - DEBUG - 2022/02/11 18:53:45 wazuh-syscheckd[15434] sig_op.c:49 at HandleSIG(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:53:54,257 - wazuh_testing - DEBUG - 2022/02/11 18:51:48 wazuh-syscheckd[13610] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 0, path count: 0 2022-02-11 14:53:54,257 - wazuh_testing - DEBUG - 2022/02/11 18:53:45 wazuh-agentd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:53:54,257 - wazuh_testing - DEBUG - 2022/02/11 18:51:48 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 000 query: syscheck scan_info_update start_scan 1644601908 2022-02-11 14:53:54,257 - wazuh_testing - DEBUG - 2022/02/11 18:53:45 wazuh-execd: INFO: (1314): Shutdown received. Deleting responses. 2022-02-11 14:53:54,257 - wazuh_testing - DEBUG - 2022/02/11 18:51:48 wazuh-syscheckd[13610] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:53:54,257 - wazuh_testing - DEBUG - 2022/02/11 18:53:45 wazuh-execd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:53:54,258 - wazuh_testing - DEBUG - 2022/02/11 18:51:48 wazuh-db[13476] main.c:290 at run_dealer(): DEBUG: New client connected (12). 2022-02-11 14:53:54,258 - wazuh_testing - DEBUG - 2022/02/11 18:53:45 wazuh-syscheckd[16055] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 14:53:54,258 - wazuh_testing - DEBUG - 2022/02/11 18:51:48 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 000 query: syscheck scan_info_update end_scan 1644601908 2022-02-11 14:53:54,258 - wazuh_testing - DEBUG - 2022/02/11 18:53:45 wazuh-syscheckd[16055] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 14:53:54,258 - wazuh_testing - DEBUG - 2022/02/11 18:53:45 wazuh-syscheckd[16055] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-11 14:53:54,258 - wazuh_testing - DEBUG - 2022/02/11 18:51:48 wazuh-syscheckd[13610] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:53:54,258 - wazuh_testing - DEBUG - 2022/02/11 18:53:45 wazuh-syscheckd[16055] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-11 14:53:54,258 - wazuh_testing - DEBUG - 2022/02/11 18:51:48 wazuh-syscheckd[13610] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:53:54,258 - wazuh_testing - DEBUG - 2022/02/11 18:53:45 wazuh-syscheckd[16055] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-11 14:53:54,258 - wazuh_testing - DEBUG - 2022/02/11 18:51:48 wazuh-syscheckd[13610] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. 2022-02-11 14:53:54,258 - wazuh_testing - DEBUG - 2022/02/11 18:53:45 wazuh-syscheckd[16055] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-11 14:53:54,258 - wazuh_testing - DEBUG - 2022/02/11 18:51:48 wazuh-syscheckd[13610] run_check.c:568 at symlink_checker_thread(): DEBUG: (6033): Starting symbolic link updater. Interval '600'. 2022-02-11 14:53:54,258 - wazuh_testing - DEBUG - 2022/02/11 18:53:45 wazuh-syscheckd[16055] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-11 14:53:54,259 - wazuh_testing - DEBUG - 2022/02/11 18:51:48 wazuh-syscheckd[13610] run_check.c:82 at fim_send_sync_msg(): DEBUG: (6317): Sending integrity control message: {"component":"fim_file","type":"integrity_clear","data":{"id":1644601908,"version":2}} 2022-02-11 14:53:54,259 - wazuh_testing - DEBUG - 2022/02/11 18:53:45 wazuh-syscheckd[16055] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ 2022-02-11 14:53:54,259 - wazuh_testing - DEBUG - 2022/02/11 18:51:48 wazuh-syscheckd[13610] fim_sync.c:70 at fim_run_integrity(): DEBUG: Finished calculating FIM integrity. Time: 0.000 seconds. 2022-02-11 14:53:54,259 - wazuh_testing - DEBUG - 2022/02/11 18:53:45 wazuh-syscheckd[16055] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ OK? 2022-02-11 14:53:54,259 - wazuh_testing - DEBUG - 2022/02/11 18:51:48 wazuh-db[13476] main.c:290 at run_dealer(): DEBUG: New client connected (13). 2022-02-11 14:53:54,259 - wazuh_testing - DEBUG - 2022/02/11 18:53:45 wazuh-syscheckd[16055] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-11 14:53:54,259 - wazuh_testing - DEBUG - 2022/02/11 18:51:48 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 000 query: fim_file integrity_clear {"id":1644601908,"version":2} 2022-02-11 14:53:54,259 - wazuh_testing - DEBUG - 2022/02/11 18:53:45 wazuh-syscheckd[16055] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-11 14:53:54,259 - wazuh_testing - DEBUG - 2022/02/11 18:51:49 wazuh-remoted: INFO: Started (pid: 13631). Listening on port 1514/TCP (secure). 2022-02-11 14:53:54,259 - wazuh_testing - DEBUG - 2022/02/11 18:53:45 wazuh-syscheckd[16055] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 14:53:54,259 - wazuh_testing - DEBUG - 2022/02/11 18:51:49 wazuh-db[13476] main.c:290 at run_dealer(): DEBUG: New client connected (11). 2022-02-11 14:53:54,260 - wazuh_testing - DEBUG - 2022/02/11 18:53:45 wazuh-syscheckd[16055] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 14:53:54,260 - wazuh_testing - DEBUG - 2022/02/11 18:51:49 wazuh-db[13476] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: reset-agents-connection synced 2022-02-11 14:53:54,260 - wazuh_testing - DEBUG - 2022/02/11 18:53:45 wazuh-syscheckd[16055] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 14:53:54,260 - wazuh_testing - DEBUG - 2022/02/11 18:51:49 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 11 disconnected. 2022-02-11 14:53:54,260 - wazuh_testing - DEBUG - 2022/02/11 18:53:45 wazuh-syscheckd[16055] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 14:53:54,260 - wazuh_testing - DEBUG - 2022/02/11 18:51:49 wazuh-remoted: INFO: (1410): Reading authentication keys file. 2022-02-11 14:53:54,260 - wazuh_testing - DEBUG - 2022/02/11 18:53:45 wazuh-syscheckd[16055] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 14:53:54,260 - wazuh_testing - DEBUG - 2022/02/11 18:51:50 wazuh-logcollector: INFO: (1950): Analyzing file: '/var/ossec/logs/active-responses.log'. 2022-02-11 14:53:54,260 - wazuh_testing - DEBUG - 2022/02/11 18:53:45 wazuh-syscheckd[16055] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 14:53:54,260 - wazuh_testing - DEBUG - 2022/02/11 18:51:50 wazuh-logcollector: INFO: (1950): Analyzing file: '/var/log/dpkg.log'. 2022-02-11 14:53:54,260 - wazuh_testing - DEBUG - 2022/02/11 18:53:45 wazuh-execd: INFO: Started (pid: 16068). 2022-02-11 14:53:54,260 - wazuh_testing - DEBUG - 2022/02/11 18:51:50 wazuh-logcollector: INFO: Started (pid: 13662). 2022-02-11 14:53:54,261 - wazuh_testing - DEBUG - 2022/02/11 18:53:46 wazuh-agentd: INFO: (1410): Reading authentication keys file. 2022-02-11 14:53:54,261 - wazuh_testing - DEBUG - 2022/02/11 18:51:50 wazuh-monitord: INFO: Started (pid: 13678). 2022-02-11 14:53:54,261 - wazuh_testing - DEBUG - 2022/02/11 18:53:46 wazuh-agentd: INFO: Using notify time: 10 and max time to reconnect: 60 2022-02-11 14:53:54,261 - wazuh_testing - DEBUG - 2022/02/11 18:51:51 wazuh-modulesd: INFO: Started (pid: 13694). 2022-02-11 14:53:54,261 - wazuh_testing - DEBUG - 2022/02/11 18:53:46 wazuh-agentd: INFO: Version detected -> Linux |wazuh-agent1 |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64 [Debian GNU/Linux|debian: 10 (buster)] - Wazuh v4.2.5 2022-02-11 14:53:54,261 - wazuh_testing - DEBUG - 2022/02/11 18:51:51 wazuh-modulesd:agent-upgrade: INFO: (8153): Module Agent Upgrade started. 2022-02-11 14:53:54,262 - wazuh_testing - DEBUG - 2022/02/11 18:51:51 wazuh-modulesd:ciscat: INFO: Module disabled. Exiting... 2022-02-11 14:53:54,262 - wazuh_testing - DEBUG - 2022/02/11 18:53:46 wazuh-agentd: INFO: Started (pid: 16079). 2022-02-11 14:53:54,262 - wazuh_testing - DEBUG - 2022/02/11 18:51:51 wazuh-modulesd:osquery: INFO: Module disabled. Exiting... 2022-02-11 14:53:54,262 - wazuh_testing - DEBUG - 2022/02/11 18:51:51 sca: INFO: Module disabled. Exiting. 2022-02-11 14:53:54,262 - wazuh_testing - DEBUG - 2022/02/11 18:53:46 wazuh-agentd: INFO: Server IP Address: wazuh-manager/172.17.0.2 2022-02-11 14:53:54,262 - wazuh_testing - DEBUG - 2022/02/11 18:51:51 wazuh-modulesd:database: INFO: Module started. 2022-02-11 14:53:54,263 - wazuh_testing - DEBUG - 2022/02/11 18:51:51 wazuh-modulesd:download: INFO: Module started. 2022-02-11 14:53:54,263 - wazuh_testing - DEBUG - 2022/02/11 18:53:46 wazuh-agentd: INFO: Using AES as encryption method. 2022-02-11 14:53:54,263 - wazuh_testing - DEBUG - 2022/02/11 18:51:51 wazuh-modulesd:syscollector: INFO: Module disabled. Exiting... 2022-02-11 14:53:54,263 - wazuh_testing - DEBUG - 2022/02/11 18:53:46 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 14:53:54,263 - wazuh_testing - DEBUG - 2022/02/11 18:51:51 wazuh-db[13476] main.c:290 at run_dealer(): DEBUG: New client connected (11). 2022-02-11 14:53:54,263 - wazuh_testing - DEBUG - 2022/02/11 18:51:51 wazuh-modulesd:control: INFO: Starting control thread. 2022-02-11 14:53:54,263 - wazuh_testing - DEBUG - 2022/02/11 18:53:46 wazuh-agentd: INFO: (4102): Connected to the server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 14:53:54,263 - wazuh_testing - DEBUG - 2022/02/11 18:51:51 wazuh-db[13476] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-name {"id":0,"name":"wazuh-manager"} 2022-02-11 14:53:54,263 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 14:53:54,263 - wazuh_testing - DEBUG - 2022/02/11 18:51:51 wazuh-modulesd:task-manager: INFO: (8200): Module Task Manager started. 2022-02-11 14:53:54,263 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 14:53:54,264 - wazuh_testing - DEBUG - 2022/02/11 18:51:51 wazuh-db[13476] main.c:290 at run_dealer(): DEBUG: New client connected (16). 2022-02-11 14:53:54,264 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-11 14:53:54,264 - wazuh_testing - DEBUG - 2022/02/11 18:51:51 wazuh-db[13476] wdb_parser.c:928 at wdb_parse(): DEBUG: Task query: set_timeout {"now":1644601911,"interval":900} 2022-02-11 14:53:54,264 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-11 14:53:54,264 - wazuh_testing - DEBUG - 2022/02/11 18:51:51 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 16 disconnected. 2022-02-11 14:53:54,264 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-11 14:53:54,264 - wazuh_testing - DEBUG - 2022/02/11 18:51:51 wazuh-db[13476] main.c:290 at run_dealer(): DEBUG: New client connected (16). 2022-02-11 14:53:54,264 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-11 14:53:54,265 - wazuh_testing - DEBUG - 2022/02/11 18:51:51 wazuh-db[13476] wdb_parser.c:928 at wdb_parse(): DEBUG: Task query: delete_old {"timestamp":1643997111} 2022-02-11 14:53:54,265 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-11 14:53:54,265 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ 2022-02-11 14:53:54,265 - wazuh_testing - DEBUG - 2022/02/11 18:51:51 wazuh-db[13476] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":0,"version":"Wazuh v4.2.5","manager_host":"wazuh-manager","node_name":"wazuh-master","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-manager |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64","os_arch":"x86_64"} 2022-02-11 14:53:54,265 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ OK? 2022-02-11 14:53:54,265 - wazuh_testing - DEBUG - 2022/02/11 18:51:51 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 16 disconnected. 2022-02-11 14:53:54,265 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-11 14:53:54,266 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-11 14:53:54,266 - wazuh_testing - DEBUG - 2022/02/11 18:51:51 wazuh-db[13476] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: insert-agent {"id":1,"name":"wazuh-agent1","register_ip":"any","internal_key":"1111111111111111111111111111111111111111111111111111111111111111","group":"default","date_add":0} 2022-02-11 14:53:54,266 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 14:53:54,266 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 14:53:54,266 - wazuh_testing - DEBUG - 2022/02/11 18:51:51 wazuh-db[13476] wdb_global.c:89 at wdb_global_insert_agent(): DEBUG: SQLite: UNIQUE constraint failed: agent.id 2022-02-11 14:53:54,266 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 14:53:54,266 - wazuh_testing - DEBUG - 2022/02/11 18:51:51 wazuh-db[13476] wdb_parser.c:4784 at wdb_parse_global_insert_agent(): DEBUG: Global DB Cannot execute SQL query; err database queue/db/global.db: UNIQUE constraint failed: agent.id 2022-02-11 14:53:54,266 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 14:53:54,266 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 14:53:54,267 - wazuh_testing - DEBUG - 2022/02/11 18:51:51 wazuh-db[13476] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-group {"id":1,"group":"default"} 2022-02-11 14:53:54,267 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 14:53:54,267 - wazuh_testing - DEBUG - 2022/02/11 18:51:51 wazuh-db[13476] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: delete-agent-belong 1 2022-02-11 14:53:54,267 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 rootcheck[16091] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled. 2022-02-11 14:53:54,267 - wazuh_testing - DEBUG - 2022/02/11 18:51:51 wazuh-db[13476] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: find-group default 2022-02-11 14:53:54,267 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:53:54,267 - wazuh_testing - DEBUG - 2022/02/11 18:51:51 wazuh-db[13476] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: insert-agent-belong {"id_group":1,"id_agent":1} 2022-02-11 14:53:54,267 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] syscom.c:123 at syscom_main(): DEBUG: (6284): Local requests thread ready. 2022-02-11 14:53:54,267 - wazuh_testing - DEBUG - 2022/02/11 18:51:51 wazuh-db[13476] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: get-all-agents last_id 0 2022-02-11 14:53:54,268 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] mq_op.c:47 at StartMQ(): DEBUG: Connected succesfully to 'queue/sockets/queue' after 0 attempts 2022-02-11 14:53:54,268 - wazuh_testing - DEBUG - 2022/02/11 18:51:51 wazuh-db[13476] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: select-groups 2022-02-11 14:53:54,268 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] mq_op.c:48 at StartMQ(): DEBUG: (unix_domain) Maximum send buffer set to: '212992'. 2022-02-11 14:53:54,268 - wazuh_testing - DEBUG - 2022/02/11 18:51:51 wazuh-db[13476] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: find-group default 2022-02-11 14:53:54,268 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] main.c:185 at main(): INFO: Started (pid: 16093). 2022-02-11 14:53:54,268 - wazuh_testing - DEBUG - 2022/02/11 18:51:51 wazuh-db[13476] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: get-all-agents last_id 0 2022-02-11 14:53:54,268 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] main.c:193 at main(): INFO: (6003): Monitoring path: '/bin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 14:53:54,268 - wazuh_testing - DEBUG - 2022/02/11 18:51:51 wazuh-db[13476] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: select-agent-group 1 2022-02-11 14:53:54,269 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] main.c:193 at main(): INFO: (6003): Monitoring path: '/boot', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 14:53:54,269 - wazuh_testing - DEBUG - 2022/02/11 18:51:51 wazuh-db[13476] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: delete-agent-belong 1 2022-02-11 14:53:54,269 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] main.c:193 at main(): INFO: (6003): Monitoring path: '/etc', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 14:53:54,269 - wazuh_testing - DEBUG - 2022/02/11 18:51:51 wazuh-db[13476] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: find-group default 2022-02-11 14:53:54,269 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] main.c:193 at main(): INFO: (6003): Monitoring path: '/sbin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 14:53:54,269 - wazuh_testing - DEBUG - 2022/02/11 18:51:51 wazuh-db[13476] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: insert-agent-belong {"id_group":1,"id_agent":1} 2022-02-11 14:53:54,269 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir1', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 14:53:54,269 - wazuh_testing - DEBUG - 2022/02/11 18:51:51 wazuh-db[13476] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: select-agent-name 1 2022-02-11 14:53:54,269 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir2', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | realtime'. 2022-02-11 14:53:54,270 - wazuh_testing - DEBUG - 2022/02/11 18:51:51 wazuh-db[13476] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: select-agent-name 1 2022-02-11 14:53:54,270 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir3', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | whodata'. 2022-02-11 14:53:54,270 - wazuh_testing - DEBUG - 2022/02/11 18:51:56 wazuh-db[13476] main.c:290 at run_dealer(): DEBUG: New client connected (16). 2022-02-11 14:53:54,270 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/bin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 14:53:54,270 - wazuh_testing - DEBUG - 2022/02/11 18:51:56 wazuh-db[13476] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-keepalive {"id":1,"connection_status":"pending","sync_status":"synced"} 2022-02-11 14:53:54,270 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/sbin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 14:53:54,270 - wazuh_testing - DEBUG - 2022/02/11 18:51:56 wazuh-db[13476] main.c:290 at run_dealer(): DEBUG: New client connected (18). 2022-02-11 14:53:54,270 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] main.c:215 at main(): DEBUG: (6357): Maximum disk quota size limit configured to '1048576 KB'. 2022-02-11 14:53:54,271 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mtab' 2022-02-11 14:53:54,271 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/hosts.deny' 2022-02-11 14:53:54,271 - wazuh_testing - DEBUG - 2022/02/11 18:51:56 wazuh-db[13476] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64","os_arch":"x86_64"} 2022-02-11 14:53:54,271 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mail/statistics' 2022-02-11 14:53:54,271 - wazuh_testing - DEBUG - 2022/02/11 18:51:58 wazuh-db[13476] wdb.c:918 at wdb_commit_old(): DEBUG: Agent 'mitre' database commited. Time: 0.023 ms. 2022-02-11 14:53:54,271 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random-seed' 2022-02-11 14:53:54,271 - wazuh_testing - DEBUG - 2022/02/11 18:51:59 wazuh-db[13476] main.c:290 at run_dealer(): DEBUG: New client connected (19). 2022-02-11 14:53:54,272 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random.seed' 2022-02-11 14:53:54,272 - wazuh_testing - DEBUG - 2022/02/11 18:51:59 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1644601904 2022-02-11 14:53:54,272 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/adjtime' 2022-02-11 14:53:54,272 - wazuh_testing - DEBUG - 2022/02/11 18:51:59 wazuh-db[13476] main.c:290 at run_dealer(): DEBUG: New client connected (20). 2022-02-11 14:53:54,272 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/httpd/logs' 2022-02-11 14:53:54,272 - wazuh_testing - DEBUG - 2022/02/11 18:51:59 wazuh-db[13476] main.c:290 at run_dealer(): DEBUG: New client connected (21). 2022-02-11 14:53:54,272 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/utmpx' 2022-02-11 14:53:54,272 - wazuh_testing - DEBUG - 2022/02/11 18:51:59 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck delete /testdir1/testdir1.txt 2022-02-11 14:53:54,272 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/wtmpx' 2022-02-11 14:53:54,273 - wazuh_testing - DEBUG - 2022/02/11 18:51:59 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update end_scan 1644601919 2022-02-11 14:53:54,273 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/cups/certs' 2022-02-11 14:53:54,273 - wazuh_testing - DEBUG - 2022/02/11 18:51:59 wazuh-db[13476] main.c:290 at run_dealer(): DEBUG: New client connected (23). 2022-02-11 14:53:54,273 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/dumpdates' 2022-02-11 14:53:54,273 - wazuh_testing - DEBUG - 2022/02/11 18:51:59 wazuh-db[13476] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: get-labels 1 2022-02-11 14:53:54,273 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/svc/volatile' 2022-02-11 14:53:54,273 - wazuh_testing - DEBUG - 2022/02/11 18:52:02 wazuh-db[13476] wdb.c:918 at wdb_commit_old(): DEBUG: Agent 'tasks' database commited. Time: 0.045 ms. 2022-02-11 14:53:54,273 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/security' 2022-02-11 14:53:54,274 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/debug' 2022-02-11 14:53:54,274 - wazuh_testing - DEBUG - 2022/02/11 18:52:06 wazuh-db[13476] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64","os_arch":"x86_64"} 2022-02-11 14:53:54,274 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/dev/core' 2022-02-11 14:53:54,274 - wazuh_testing - DEBUG - 2022/02/11 18:52:16 wazuh-db[13476] main.c:290 at run_dealer(): DEBUG: New client connected (22). 2022-02-11 14:53:54,274 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '^/proc' 2022-02-11 14:53:54,274 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '.log$|.swp$' 2022-02-11 14:53:54,275 - wazuh_testing - DEBUG - 2022/02/11 18:52:16 wazuh-db[13476] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64","os_arch":"x86_64"} 2022-02-11 14:53:54,275 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] main.c:235 at main(): INFO: (6004): No diff for file: '/etc/ssl/private.key' 2022-02-11 14:53:54,275 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] main.c:245 at main(): INFO: (6016): Directory set for real time monitoring: '/testdir2'. 2022-02-11 14:53:54,275 - wazuh_testing - DEBUG - 2022/02/11 18:52:20 wazuh-db[13476] main.c:290 at run_dealer(): DEBUG: New client connected (24). 2022-02-11 14:53:54,275 - wazuh_testing - DEBUG - 2022/02/11 18:52:20 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1644601940 2022-02-11 14:53:54,275 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] syscheck_audit.c:243 at audit_init(): WARNING: (6924): Who-data engine cannot start because Auditd is not running. 2022-02-11 14:53:54,276 - wazuh_testing - DEBUG - 2022/02/11 18:52:21 wazuh-db[13476] main.c:290 at run_dealer(): DEBUG: New client connected (25). 2022-02-11 14:53:54,276 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] main.c:264 at main(): WARNING: (6913): Who-data engine could not start. Switching who-data to real-time. 2022-02-11 14:53:54,276 - wazuh_testing - DEBUG - 2022/02/11 18:52:21 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update end_scan 1644601941 2022-02-11 14:53:54,276 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] run_check.c:194 at start_daemon(): DEBUG: (6320): Setting process priority to: '10' 2022-02-11 14:53:54,276 - wazuh_testing - DEBUG - 2022/02/11 18:52:21 wazuh-db[13476] main.c:290 at run_dealer(): DEBUG: New client connected (26). 2022-02-11 14:53:54,276 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:53:54,277 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] run_check.c:229 at start_daemon(): INFO: (6000): Starting daemon... 2022-02-11 14:53:54,277 - wazuh_testing - DEBUG - 2022/02/11 18:52:21 wazuh-db[13476] wdb_parser.c:928 at wdb_parse(): DEBUG: Task query: upgrade_cancel_tasks {"node":"wazuh-master"} 2022-02-11 14:53:54,277 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] run_check.c:232 at start_daemon(): INFO: (6010): File integrity monitoring scan frequency: 20 seconds 2022-02-11 14:53:54,278 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 14:53:54,278 - wazuh_testing - DEBUG - 2022/02/11 18:52:21 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 26 disconnected. 2022-02-11 14:53:54,278 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644602027}} 2022-02-11 14:53:54,278 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 14:53:54,278 - wazuh_testing - DEBUG - 2022/02/11 18:52:26 wazuh-db[13476] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64","os_arch":"x86_64"} 2022-02-11 14:53:54,279 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-11 14:53:54,279 - wazuh_testing - DEBUG - 2022/02/11 18:52:32 wazuh-db[13476] wdb.c:918 at wdb_commit_old(): DEBUG: Agent 'tasks' database commited. Time: 0.060 ms. 2022-02-11 14:53:54,279 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-11 14:53:54,279 - wazuh_testing - DEBUG - 2022/02/11 18:52:36 wazuh-db[13476] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64","os_arch":"x86_64"} 2022-02-11 14:53:54,279 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-11 14:53:54,280 - wazuh_testing - DEBUG - 2022/02/11 18:52:42 wazuh-db[13476] main.c:290 at run_dealer(): DEBUG: New client connected (26). 2022-02-11 14:53:54,280 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-11 14:53:54,280 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 14:53:54,280 - wazuh_testing - DEBUG - 2022/02/11 18:52:42 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1644601962 2022-02-11 14:53:54,281 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 14:53:54,281 - wazuh_testing - DEBUG - 2022/02/11 18:52:42 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update end_scan 1644601962 2022-02-11 14:53:54,281 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644602027}} 2022-02-11 14:53:54,281 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.328 sec (0.327 clock sec) 2022-02-11 14:53:54,281 - wazuh_testing - DEBUG - 2022/02/11 18:52:46 wazuh-db[13476] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64","os_arch":"x86_64"} 2022-02-11 14:53:54,282 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1621, path count: 1627 2022-02-11 14:53:54,282 - wazuh_testing - DEBUG - 2022/02/11 18:52:50 wazuh-db[13476] wdb.c:918 at wdb_commit_old(): DEBUG: Agent 'global' database commited. Time: 2.283 ms. 2022-02-11 14:53:54,282 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:53:54,282 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:53:54,282 - wazuh_testing - DEBUG - 2022/02/11 18:52:56 wazuh-db[13476] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64","os_arch":"x86_64"} 2022-02-11 14:53:54,282 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] run_check.c:387 at fim_run_realtime(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-11 14:53:54,282 - wazuh_testing - DEBUG - 2022/02/11 18:53:03 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1644601983 2022-02-11 14:53:54,283 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:53:54,283 - wazuh_testing - DEBUG - 2022/02/11 18:53:03 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update end_scan 1644601983 2022-02-11 14:53:54,283 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] run_check.c:543 at log_realtime_status(): INFO: (6012): Real-time file integrity monitoring started. 2022-02-11 14:53:54,283 - wazuh_testing - DEBUG - 2022/02/11 18:53:06 wazuh-db[13476] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64","os_arch":"x86_64"} 2022-02-11 14:53:54,283 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. 2022-02-11 14:53:54,284 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] run_check.c:568 at symlink_checker_thread(): DEBUG: (6033): Starting symbolic link updater. Interval '600'. 2022-02-11 14:53:54,284 - wazuh_testing - DEBUG - 2022/02/11 18:53:16 wazuh-db[13476] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64","os_arch":"x86_64"} 2022-02-11 14:53:54,284 - wazuh_testing - DEBUG - 2022/02/11 18:53:47 wazuh-syscheckd[16091] run_check.c:82 at fim_send_sync_msg(): DEBUG: (6317): Sending integrity control message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1644602027,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"11cbd079915ee62c666637dc79878ff3b05e0aee"}} 2022-02-11 14:53:54,284 - wazuh_testing - DEBUG - 2022/02/11 18:53:24 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1644602004 2022-02-11 14:53:54,285 - wazuh_testing - DEBUG - 2022/02/11 18:53:25 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update end_scan 1644602005 2022-02-11 14:53:54,285 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-agent1 and message: .*Sending integrity control message: (.+)$ 2022-02-11 14:53:54,285 - wazuh_testing - DEBUG - 2022/02/11 18:53:26 wazuh-db[13476] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64","os_arch":"x86_64"} 2022-02-11 14:53:54,286 - wazuh_testing - DEBUG - 2022/02/11 18:53:36 wazuh-db[13476] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64","os_arch":"x86_64"} 2022-02-11 14:53:54,286 - wazuh_testing - DEBUG - 2022/02/11 18:53:45 wazuh-db[13476] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-connection-status {"id":1,"connection_status":"disconnected","sync_status":"synced"} 2022-02-11 14:53:54,287 - wazuh_testing - DEBUG - 2022/02/11 18:53:45 wazuh-db[13476] main.c:290 at run_dealer(): DEBUG: New client connected (27). 2022-02-11 14:53:54,287 - wazuh_testing - DEBUG - 2022/02/11 18:53:45 wazuh-db[13476] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: get-labels 1 2022-02-11 14:53:54,287 - wazuh_testing - DEBUG - 2022/02/11 18:53:46 wazuh-db[13476] main.c:290 at run_dealer(): DEBUG: New client connected (28). 2022-02-11 14:53:54,287 - wazuh_testing - DEBUG - 2022/02/11 18:53:46 wazuh-db[13476] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-keepalive {"id":1,"connection_status":"pending","sync_status":"synced"} 2022-02-11 14:53:54,288 - wazuh_testing - DEBUG - 2022/02/11 18:53:50 wazuh-db[13476] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64","os_arch":"x86_64"} 2022-02-11 14:53:54,288 - wazuh_testing - DEBUG - 2022/02/11 18:53:50 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1644602027 2022-02-11 14:53:54,288 - wazuh_testing - DEBUG - 2022/02/11 18:53:50 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update end_scan 1644602027 2022-02-11 14:53:54,288 - wazuh_testing - DEBUG - 2022/02/11 18:53:50 wazuh-db[13476] main.c:290 at run_dealer(): DEBUG: New client connected (31). 2022-02-11 14:53:54,289 - wazuh_testing - DEBUG - 2022/02/11 18:53:50 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_global {"id":1644602027,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"11cbd079915ee62c666637dc79878ff3b05e0aee"} 2022-02-11 14:53:54,289 - wazuh_testing - DEBUG - 2022/02/11 18:53:50 wazuh-db[13476] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 2.115 ms. 2022-02-11 14:53:54,289 - wazuh_testing - DEBUG - 2022/02/11 18:53:50 wazuh-db[13476] main.c:290 at run_dealer(): DEBUG: New client connected (29). 2022-02-11 14:53:54,290 - wazuh_testing - DEBUG - 2022/02/11 18:53:50 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602027,"version":2,"begin":"/bin/bash","end":"/sbin/chcpu","tail":"/sbin/ctrlaltdel","checksum":"57402e3268a27191e04bfc132831045ee0296f32"} 2022-02-11 14:53:54,290 - wazuh_testing - DEBUG - 2022/02/11 18:53:50 wazuh-db[13476] main.c:290 at run_dealer(): DEBUG: New client connected (30). 2022-02-11 14:53:54,290 - wazuh_testing - DEBUG - 2022/02/11 18:53:50 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602027,"version":2,"begin":"/sbin/ctrlaltdel","end":"/usr/sbin/zic","checksum":"cdd30affc706a53f9a166760ac3a8c29082f190b"} 2022-02-11 14:53:54,290 - wazuh_testing - DEBUG - 2022/02/11 18:53:50 wazuh-db[13476] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.639 ms. 2022-02-11 14:53:54,291 - wazuh_testing - DEBUG - 2022/02/11 18:53:50 wazuh-db[13476] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 1.308 ms. 2022-02-11 14:53:54,291 - wazuh_testing - DEBUG - 2022/02/11 18:53:50 wazuh-db[13476] main.c:290 at run_dealer(): DEBUG: New client connected (32). 2022-02-11 14:53:54,291 - wazuh_testing - DEBUG - 2022/02/11 18:53:50 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602027,"version":2,"begin":"/sbin/ctrlaltdel","end":"/usr/bin/pdb","tail":"/usr/bin/pdb2","checksum":"8cf6899740a36e03a9a8eb51d4c13e335bbd9f7b"} 2022-02-11 14:53:54,292 - wazuh_testing - DEBUG - 2022/02/11 18:53:50 wazuh-db[13476] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.328 ms. 2022-02-11 14:53:54,292 - wazuh_testing - DEBUG - 2022/02/11 18:53:50 wazuh-db[13476] main.c:290 at run_dealer(): DEBUG: New client connected (33). 2022-02-11 14:53:54,292 - wazuh_testing - DEBUG - 2022/02/11 18:53:50 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602027,"version":2,"begin":"/usr/bin/pdb2","end":"/usr/sbin/zic","checksum":"f13d51f7876684d6bc17db143ee1529b892c54d2"} 2022-02-11 14:53:54,293 - wazuh_testing - DEBUG - 2022/02/11 18:53:50 wazuh-db[13476] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.486 ms. 2022-02-11 14:53:54,293 - wazuh_testing - DEBUG - 2022/02/11 18:53:50 wazuh-db[13476] main.c:290 at run_dealer(): DEBUG: New client connected (34). 2022-02-11 14:53:54,294 - wazuh_testing - DEBUG - 2022/02/11 18:53:50 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602027,"version":2,"begin":"/sbin/ctrlaltdel","end":"/usr/bin/dpkg-divert","tail":"/usr/bin/dpkg-genbuildinfo","checksum":"4117634674257c24391174cee8cd90ede8df70f1"} 2022-02-11 14:53:54,294 - wazuh_testing - DEBUG - 2022/02/11 18:53:50 wazuh-db[13476] main.c:290 at run_dealer(): DEBUG: New client connected (35). 2022-02-11 14:53:54,295 - wazuh_testing - DEBUG - 2022/02/11 18:53:50 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602027,"version":2,"begin":"/usr/bin/dpkg-genbuildinfo","end":"/usr/bin/pdb","checksum":"fcd12ca69011f5033c3706ba868e7f2983050598"} 2022-02-11 14:53:54,295 - wazuh_testing - DEBUG - 2022/02/11 18:53:50 wazuh-db[13476] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.287 ms. 2022-02-11 14:53:54,295 - wazuh_testing - DEBUG - 2022/02/11 18:53:50 wazuh-db[13476] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.118 ms. 2022-02-11 14:53:54,296 - wazuh_testing - DEBUG - 2022/02/11 18:53:50 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602027,"version":2,"begin":"/sbin/ctrlaltdel","end":"/usr/bin/apt-extracttemplates","tail":"/usr/bin/apt-ftparchive","checksum":"0e318043b7526f5862784ee7f31f941e29dfd7c5"} 2022-02-11 14:53:54,296 - wazuh_testing - DEBUG - 2022/02/11 18:53:50 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602027,"version":2,"begin":"/usr/bin/apt-ftparchive","end":"/usr/bin/dpkg-divert","checksum":"ab79628f5b16446ec1a1f2daeaf1afd2511680e1"} 2022-02-11 14:53:54,297 - wazuh_testing - DEBUG - 2022/02/11 18:53:50 wazuh-db[13476] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.053 ms. 2022-02-11 14:53:54,297 - wazuh_testing - DEBUG - 2022/02/11 18:53:50 wazuh-db[13476] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.042 ms. 2022-02-11 14:53:54,297 - wazuh_testing - DEBUG - 2022/02/11 18:53:50 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602027,"version":2,"begin":"/sbin/ctrlaltdel","end":"/sbin/mkhomedir_helper","tail":"/sbin/mkswap","checksum":"7a7df0bd9bb5154b28eb072bebe1af0b79c59afb"} 2022-02-11 14:53:54,298 - wazuh_testing - DEBUG - 2022/02/11 18:53:50 wazuh-db[13476] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.062 ms. 2022-02-11 14:53:54,298 - wazuh_testing - DEBUG - 2022/02/11 18:53:51 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602027,"version":2,"begin":"/sbin/mkswap","end":"/usr/bin/apt-extracttemplates","checksum":"973ba5ec08d3cbfac4d0278ea149e22985bcb482"} 2022-02-11 14:53:54,298 - wazuh_testing - DEBUG - 2022/02/11 18:53:51 wazuh-db[13476] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.183 ms. 2022-02-11 14:53:54,299 - wazuh_testing - DEBUG - 2022/02/11 18:53:51 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602027,"version":2,"begin":"/sbin/mkswap","end":"/sbin/start-stop-daemon","tail":"/sbin/sulogin","checksum":"b356159685213d77a501787c4ba65eff3cf7fba1"} 2022-02-11 14:53:54,299 - wazuh_testing - DEBUG - 2022/02/11 18:53:51 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602027,"version":2,"begin":"/sbin/sulogin","end":"/usr/bin/apt-extracttemplates","checksum":"d1df09ed7a3ab3641d76aeceecb658c66bf6b911"} 2022-02-11 14:53:54,300 - wazuh_testing - DEBUG - 2022/02/11 18:53:51 wazuh-db[13476] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.075 ms. 2022-02-11 14:53:54,300 - wazuh_testing - DEBUG - 2022/02/11 18:53:51 wazuh-db[13476] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.081 ms. 2022-02-11 14:53:54,300 - wazuh_testing - DEBUG - 2022/02/11 18:53:51 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602027,"version":2,"begin":"/sbin/sulogin","end":"/sbin/wipefs","tail":"/sbin/zramctl","checksum":"086fb81bf040732edfe2a920d67de456c77c8c3d"} 2022-02-11 14:53:54,301 - wazuh_testing - DEBUG - 2022/02/11 18:53:51 wazuh-db[13476] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.054 ms. 2022-02-11 14:53:54,301 - wazuh_testing - DEBUG - 2022/02/11 18:53:51 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602027,"version":2,"begin":"/sbin/zramctl","end":"/usr/bin/apt-extracttemplates","checksum":"9d848a62fcda70c885aba806c0038a1754f8484d"} 2022-02-11 14:53:54,301 - wazuh_testing - DEBUG - 2022/02/11 18:53:51 wazuh-db[13476] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.054 ms. 2022-02-11 14:53:54,302 - wazuh_testing - DEBUG - 2022/02/11 18:53:51 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602027,"version":2,"begin":"/sbin/zramctl","end":"/usr/bin/aclocal-1.16","tail":"/usr/bin/addpart","checksum":"052be79cee6a8e47c79ccf7a219a75404c06c98b"} 2022-02-11 14:53:54,302 - wazuh_testing - DEBUG - 2022/02/11 18:53:51 wazuh-db[13476] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.048 ms. 2022-02-11 14:53:54,303 - wazuh_testing - DEBUG - 2022/02/11 18:53:51 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602027,"version":2,"begin":"/usr/bin/addpart","end":"/usr/bin/apt-extracttemplates","checksum":"7d1a3bbe28f2c9e567f8311757d46ea5365d7112"} 2022-02-11 14:53:54,303 - wazuh_testing - DEBUG - 2022/02/11 18:53:51 wazuh-db[13476] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.042 ms. 2022-02-11 14:53:54,303 - wazuh_testing - DEBUG - 2022/02/11 18:53:51 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602027,"version":2,"begin":"/usr/bin/[","end":"/usr/bin/aclocal-1.16","checksum":"0f1d35a6565c33bf9697c50fd2d7d2a4ebccbc45"} 2022-02-11 14:53:54,304 - wazuh_testing - DEBUG - 2022/02/11 18:53:51 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602027,"version":2,"begin":"/sbin/zramctl","end":"/usr/bin/2to3-2.7","tail":"/usr/bin/[","checksum":"c18e63a1c7a50a8370ad3378bd342e21f84ccd11"} 2022-02-11 14:53:54,304 - wazuh_testing - DEBUG - 2022/02/11 18:53:51 wazuh-db[13476] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.075 ms. 2022-02-11 14:53:54,304 - wazuh_testing - DEBUG - 2022/02/11 18:53:51 wazuh-db[13476] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.056 ms. 2022-02-11 14:53:54,305 - wazuh_testing - DEBUG - 2022/02/11 18:53:51 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602027,"version":2,"begin":"/sbin/zramctl","end":"/sbin/zramctl","tail":"/testdir1/testdir1.txt","checksum":"58b2b87ce2162d80a895c740e0ed2124836230b7"} 2022-02-11 14:53:54,305 - wazuh_testing - DEBUG - 2022/02/11 18:53:51 wazuh-db[13476] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.053 ms. 2022-02-11 14:53:54,305 - wazuh_testing - DEBUG - 2022/02/11 18:53:52 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602027,"version":2,"begin":"/testdir1/testdir1.txt","end":"/usr/bin/2to3-2.7","checksum":"2411466124371047c8486a9638c0766c2bc0570f"} 2022-02-11 14:53:54,306 - wazuh_testing - DEBUG - 2022/02/11 18:53:52 wazuh-db[13476] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.040 ms. 2022-02-11 14:53:54,306 - wazuh_testing - DEBUG - 2022/02/11 18:53:52 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602027,"version":2,"begin":"/testdir1/testdir1.txt","end":"/testdir1/testdir1.txt","tail":"/usr/bin/2to3-2.7","checksum":"74a05ce96d5e122d646f869e810146b3c069d576"} 2022-02-11 14:53:54,306 - wazuh_testing - DEBUG - 2022/02/11 18:53:52 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602027,"version":2,"begin":"/usr/bin/2to3-2.7","end":"/usr/bin/2to3-2.7","checksum":"f621f8dd560e58c5f017dfd42d98bb3a72466d1d"} 2022-02-11 14:53:54,307 - wazuh_testing - DEBUG - 2022/02/11 18:53:52 wazuh-db[13476] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.029 ms. 2022-02-11 14:53:54,307 - wazuh_testing - DEBUG - 2022/02/11 18:53:52 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file save2 {"path":"/testdir1/testdir1.txt","timestamp":1644602027,"version":2,"attributes":{"type":"file","size":0,"perm":"rw-r--r--","uid":"0","gid":"0","user_name":"root","group_name":"root","inode":17179747,"mtime":1644602022,"hash_md5":"d41d8cd98f00b204e9800998ecf8427e","hash_sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","hash_sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","checksum":"c92a1833bd4ff3cbce18837fd47df6aab6476148"}} 2022-02-11 14:53:54,308 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-manager and message: .*Agent 001 query: (.+) save2 2022-02-11 14:53:55,243 - wazuh_testing - DEBUG - Cleaning temporal files... 2022-02-11 14:53:55,244 - wazuh_testing - DEBUG - Checking results... 2022-02-11 14:53:55,246 - wazuh_testing - DEBUG - Received from wazuh-agent1 the expected message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1644602027,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"11cbd079915ee62c666637dc79878ff3b05e0aee"}} 2022-02-11 14:53:55,246 - wazuh_testing - DEBUG - Received from wazuh-manager the expected message: fim_file 2022-02-11 14:54:10,322 - wazuh_testing - DEBUG - Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-11 14:54:10,323 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-11 14:54:10,323 - wazuh_testing - DEBUG - Starting file composer for wazuh-agent1 and path: /var/ossec/logs/ossec.log. Composite file in /home/camila/Escritorio/repo/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-agent1_ossec.log.tmp 2022-02-11 14:54:10,324 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-agent1 and message: .*Initializing FIM Integrity Synchronization check. (.+)$ 2022-02-11 14:54:11,826 - wazuh_testing - DEBUG - 2022/02/11 18:54:00 wazuh-logcollector: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:54:11,827 - wazuh_testing - DEBUG - 2022/02/11 18:54:00 wazuh-syscheckd[16091] sig_op.c:49 at HandleSIG(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:54:11,827 - wazuh_testing - DEBUG - 2022/02/11 18:54:00 wazuh-agentd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:54:11,827 - wazuh_testing - DEBUG - 2022/02/11 18:54:00 wazuh-execd: INFO: (1314): Shutdown received. Deleting responses. 2022-02-11 14:54:11,827 - wazuh_testing - DEBUG - 2022/02/11 18:54:00 wazuh-execd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:54:11,827 - wazuh_testing - DEBUG - 2022/02/11 18:54:03 wazuh-syscheckd[16517] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 14:54:11,828 - wazuh_testing - DEBUG - 2022/02/11 18:54:03 wazuh-syscheckd[16517] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 14:54:11,828 - wazuh_testing - DEBUG - 2022/02/11 18:54:03 wazuh-syscheckd[16517] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-11 14:54:11,828 - wazuh_testing - DEBUG - 2022/02/11 18:54:03 wazuh-syscheckd[16517] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-11 14:54:11,828 - wazuh_testing - DEBUG - 2022/02/11 18:54:03 wazuh-syscheckd[16517] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-11 14:54:11,829 - wazuh_testing - DEBUG - 2022/02/11 18:54:03 wazuh-syscheckd[16517] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-11 14:54:11,829 - wazuh_testing - DEBUG - 2022/02/11 18:54:03 wazuh-syscheckd[16517] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-11 14:54:11,829 - wazuh_testing - DEBUG - 2022/02/11 18:54:03 wazuh-syscheckd[16517] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ 2022-02-11 14:54:11,830 - wazuh_testing - DEBUG - 2022/02/11 18:54:03 wazuh-syscheckd[16517] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ OK? 2022-02-11 14:54:11,830 - wazuh_testing - DEBUG - 2022/02/11 18:54:03 wazuh-syscheckd[16517] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-11 14:54:11,830 - wazuh_testing - DEBUG - 2022/02/11 18:54:03 wazuh-syscheckd[16517] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-11 14:54:11,830 - wazuh_testing - DEBUG - 2022/02/11 18:54:03 wazuh-syscheckd[16517] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 14:54:11,830 - wazuh_testing - DEBUG - 2022/02/11 18:54:03 wazuh-syscheckd[16517] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 14:54:11,831 - wazuh_testing - DEBUG - 2022/02/11 18:54:03 wazuh-syscheckd[16517] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 14:54:11,831 - wazuh_testing - DEBUG - 2022/02/11 18:54:03 wazuh-syscheckd[16517] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 14:54:11,831 - wazuh_testing - DEBUG - 2022/02/11 18:54:03 wazuh-syscheckd[16517] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 14:54:11,831 - wazuh_testing - DEBUG - 2022/02/11 18:54:03 wazuh-syscheckd[16517] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 14:54:11,832 - wazuh_testing - DEBUG - 2022/02/11 18:54:03 wazuh-execd: INFO: Started (pid: 16530). 2022-02-11 14:54:11,832 - wazuh_testing - DEBUG - 2022/02/11 18:54:04 wazuh-agentd: INFO: (1410): Reading authentication keys file. 2022-02-11 14:54:11,832 - wazuh_testing - DEBUG - 2022/02/11 18:54:04 wazuh-agentd: INFO: Using notify time: 10 and max time to reconnect: 60 2022-02-11 14:54:11,833 - wazuh_testing - DEBUG - 2022/02/11 18:54:04 wazuh-agentd: INFO: Version detected -> Linux |wazuh-agent1 |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64 [Debian GNU/Linux|debian: 10 (buster)] - Wazuh v4.2.5 2022-02-11 14:54:11,833 - wazuh_testing - DEBUG - 2022/02/11 18:54:04 wazuh-agentd: INFO: Started (pid: 16541). 2022-02-11 14:54:11,834 - wazuh_testing - DEBUG - 2022/02/11 18:54:04 wazuh-agentd: INFO: Server IP Address: wazuh-manager/172.17.0.2 2022-02-11 14:54:11,834 - wazuh_testing - DEBUG - 2022/02/11 18:54:04 wazuh-agentd: INFO: Using AES as encryption method. 2022-02-11 14:54:11,834 - wazuh_testing - DEBUG - 2022/02/11 18:54:04 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 14:54:11,834 - wazuh_testing - DEBUG - 2022/02/11 18:54:04 wazuh-agentd: INFO: (4102): Connected to the server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 14:54:11,835 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 14:54:11,835 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 14:54:11,835 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-11 14:54:11,836 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-11 14:54:11,836 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-11 14:54:11,836 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-11 14:54:11,836 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-11 14:54:11,837 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ 2022-02-11 14:54:11,837 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ OK? 2022-02-11 14:54:11,837 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-11 14:54:11,837 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-11 14:54:11,838 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 14:54:11,838 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 14:54:11,838 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 14:54:11,838 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 14:54:11,839 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 14:54:11,839 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 14:54:11,839 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 rootcheck[16553] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled. 2022-02-11 14:54:11,839 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:54:11,839 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] syscom.c:123 at syscom_main(): DEBUG: (6284): Local requests thread ready. 2022-02-11 14:54:11,840 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] mq_op.c:47 at StartMQ(): DEBUG: Connected succesfully to 'queue/sockets/queue' after 0 attempts 2022-02-11 14:54:11,840 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] mq_op.c:48 at StartMQ(): DEBUG: (unix_domain) Maximum send buffer set to: '212992'. 2022-02-11 14:54:11,840 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:185 at main(): INFO: Started (pid: 16555). 2022-02-11 14:54:11,840 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:193 at main(): INFO: (6003): Monitoring path: '/bin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 14:54:11,840 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:193 at main(): INFO: (6003): Monitoring path: '/boot', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 14:54:11,841 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:193 at main(): INFO: (6003): Monitoring path: '/etc', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 14:54:11,841 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:193 at main(): INFO: (6003): Monitoring path: '/sbin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 14:54:11,842 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir1', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 14:54:11,842 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir2', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | realtime'. 2022-02-11 14:54:11,842 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir3', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | whodata'. 2022-02-11 14:54:11,842 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/bin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 14:54:11,843 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/sbin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 14:54:11,843 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:215 at main(): DEBUG: (6357): Maximum disk quota size limit configured to '1048576 KB'. 2022-02-11 14:54:11,843 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mtab' 2022-02-11 14:54:11,843 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/hosts.deny' 2022-02-11 14:54:11,843 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mail/statistics' 2022-02-11 14:54:11,843 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random-seed' 2022-02-11 14:54:11,844 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random.seed' 2022-02-11 14:54:11,844 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/adjtime' 2022-02-11 14:54:11,844 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/httpd/logs' 2022-02-11 14:54:11,844 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/utmpx' 2022-02-11 14:54:11,844 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/wtmpx' 2022-02-11 14:54:11,844 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/cups/certs' 2022-02-11 14:54:11,844 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/dumpdates' 2022-02-11 14:54:11,845 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/svc/volatile' 2022-02-11 14:54:11,845 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/security' 2022-02-11 14:54:11,845 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/debug' 2022-02-11 14:54:11,845 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/dev/core' 2022-02-11 14:54:11,845 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '^/proc' 2022-02-11 14:54:11,846 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '.log$|.swp$' 2022-02-11 14:54:11,846 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:235 at main(): INFO: (6004): No diff for file: '/etc/ssl/private.key' 2022-02-11 14:54:11,846 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:245 at main(): INFO: (6016): Directory set for real time monitoring: '/testdir2'. 2022-02-11 14:54:11,846 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] syscheck_audit.c:243 at audit_init(): WARNING: (6924): Who-data engine cannot start because Auditd is not running. 2022-02-11 14:54:11,846 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:264 at main(): WARNING: (6913): Who-data engine could not start. Switching who-data to real-time. 2022-02-11 14:54:11,846 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] run_check.c:194 at start_daemon(): DEBUG: (6320): Setting process priority to: '10' 2022-02-11 14:54:11,846 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:54:11,847 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] run_check.c:229 at start_daemon(): INFO: (6000): Starting daemon... 2022-02-11 14:54:11,847 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] run_check.c:232 at start_daemon(): INFO: (6010): File integrity monitoring scan frequency: 20 seconds 2022-02-11 14:54:11,847 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 14:54:11,847 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644602045}} 2022-02-11 14:54:11,847 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 14:54:11,847 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-11 14:54:11,847 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-11 14:54:11,847 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-11 14:54:11,848 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-11 14:54:11,848 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 14:54:11,848 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 14:54:11,848 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644602045}} 2022-02-11 14:54:11,848 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.342 sec (0.341 clock sec) 2022-02-11 14:54:11,848 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1621, path count: 1627 2022-02-11 14:54:11,848 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:54:11,849 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:54:11,849 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] run_check.c:387 at fim_run_realtime(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-11 14:54:11,849 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] run_check.c:543 at log_realtime_status(): INFO: (6012): Real-time file integrity monitoring started. 2022-02-11 14:54:11,849 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:54:11,849 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. 2022-02-11 14:54:11,850 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-agent1 and message: .*Initializing FIM Integrity Synchronization check. (.+)$ 2022-02-11 14:54:12,828 - wazuh_testing - DEBUG - Cleaning temporal files... 2022-02-11 14:54:12,829 - wazuh_testing - DEBUG - Checking results... 2022-02-11 14:54:12,831 - wazuh_testing - DEBUG - Received from wazuh-agent1 the expected message: Sync interval is 300 seconds.
-------------------------------Captured log call--------------------------------
DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:1005 Cleaning temporal files... DEBUG wazuh_testing:monitoring.py:994 Checking results... DEBUG wazuh_testing:monitoring.py:1000 Received from wazuh-agent1 the expected message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1644602027,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"11cbd079915ee62c666637dc79878ff3b05e0aee"}} DEBUG wazuh_testing:monitoring.py:1000 Received from wazuh-manager the expected message: fim_file DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:1005 Cleaning temporal files... DEBUG wazuh_testing:monitoring.py:994 Checking results... DEBUG wazuh_testing:monitoring.py:1000 Received from wazuh-agent1 the expected message: Sync interval is 300 seconds.

Passed

test_synchronization.py::test_synchronization[testdir1-add-wazuh-manager]

44.07

------------------------------Captured stderr call------------------------------
2022-02-11 14:54:25,702 - wazuh_testing - DEBUG - Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-11 14:54:25,703 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-11 14:54:25,704 - wazuh_testing - DEBUG - Starting file composer for wazuh-agent1 and path: /var/ossec/logs/ossec.log. Composite file in /home/camila/Escritorio/repo/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-agent1_ossec.log.tmp 2022-02-11 14:54:25,704 - wazuh_testing - DEBUG - Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-11 14:54:25,705 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-agent1 and message: .*Sending integrity control message: (.+)$ 2022-02-11 14:54:25,705 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-11 14:54:25,706 - wazuh_testing - DEBUG - Starting file composer for wazuh-manager and path: /var/ossec/logs/ossec.log. Composite file in /home/camila/Escritorio/repo/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-manager_ossec.log.tmp 2022-02-11 14:54:25,707 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-manager and message: .*Agent 001 query: (.+) save2 2022-02-11 14:54:27,206 - wazuh_testing - DEBUG - 2022/02/11 18:54:00 wazuh-logcollector: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:54:27,207 - wazuh_testing - DEBUG - 2022/02/11 18:54:00 wazuh-syscheckd[16091] sig_op.c:49 at HandleSIG(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:54:27,207 - wazuh_testing - DEBUG - 2022/02/11 18:54:00 wazuh-agentd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:54:27,207 - wazuh_testing - DEBUG - 2022/02/11 18:54:00 wazuh-execd: INFO: (1314): Shutdown received. Deleting responses. 2022-02-11 14:54:27,207 - wazuh_testing - DEBUG - 2022/02/11 18:54:00 wazuh-execd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:54:27,207 - wazuh_testing - DEBUG - 2022/02/11 18:54:03 wazuh-syscheckd[16517] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 14:54:27,208 - wazuh_testing - DEBUG - 2022/02/11 18:54:03 wazuh-syscheckd[16517] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 14:54:27,208 - wazuh_testing - DEBUG - 2022/02/11 18:54:03 wazuh-syscheckd[16517] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-11 14:54:27,208 - wazuh_testing - DEBUG - 2022/02/11 18:54:03 wazuh-syscheckd[16517] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-11 14:54:27,209 - wazuh_testing - DEBUG - 2022/02/11 18:54:03 wazuh-syscheckd[16517] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-11 14:54:27,209 - wazuh_testing - DEBUG - 2022/02/11 18:53:57 wazuh-db[13476] wdb.c:918 at wdb_commit_old(): DEBUG: Agent 'global' database commited. Time: 11.980 ms. 2022-02-11 14:54:27,209 - wazuh_testing - DEBUG - 2022/02/11 18:54:03 wazuh-syscheckd[16517] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-11 14:54:27,209 - wazuh_testing - DEBUG - 2022/02/11 18:54:00 wazuh-db[13476] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-connection-status {"id":1,"connection_status":"disconnected","sync_status":"synced"} 2022-02-11 14:54:27,209 - wazuh_testing - DEBUG - 2022/02/11 18:54:03 wazuh-syscheckd[16517] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-11 14:54:27,209 - wazuh_testing - DEBUG - 2022/02/11 18:54:03 wazuh-syscheckd[16517] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ 2022-02-11 14:54:27,210 - wazuh_testing - DEBUG - 2022/02/11 18:54:00 wazuh-db[13476] main.c:290 at run_dealer(): DEBUG: New client connected (37). 2022-02-11 14:54:27,210 - wazuh_testing - DEBUG - 2022/02/11 18:54:03 wazuh-syscheckd[16517] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ OK? 2022-02-11 14:54:27,210 - wazuh_testing - DEBUG - 2022/02/11 18:54:00 wazuh-db[13476] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: get-labels 1 2022-02-11 14:54:27,210 - wazuh_testing - DEBUG - 2022/02/11 18:54:03 wazuh-syscheckd[16517] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-11 14:54:27,210 - wazuh_testing - DEBUG - 2022/02/11 18:54:03 wazuh-db[13476] wdb.c:918 at wdb_commit_old(): DEBUG: Agent '001' database commited. Time: 3.105 ms. 2022-02-11 14:54:27,210 - wazuh_testing - DEBUG - 2022/02/11 18:54:03 wazuh-syscheckd[16517] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-11 14:54:27,210 - wazuh_testing - DEBUG - 2022/02/11 18:54:04 wazuh-db[13476] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-keepalive {"id":1,"connection_status":"pending","sync_status":"synced"} 2022-02-11 14:54:27,210 - wazuh_testing - DEBUG - 2022/02/11 18:54:03 wazuh-syscheckd[16517] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 14:54:27,211 - wazuh_testing - DEBUG - 2022/02/11 18:54:03 wazuh-syscheckd[16517] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 14:54:27,211 - wazuh_testing - DEBUG - 2022/02/11 18:54:03 wazuh-syscheckd[16517] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 14:54:27,211 - wazuh_testing - DEBUG - 2022/02/11 18:54:03 wazuh-syscheckd[16517] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 14:54:27,211 - wazuh_testing - DEBUG - 2022/02/11 18:54:08 wazuh-db[13476] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64","os_arch":"x86_64"} 2022-02-11 14:54:27,212 - wazuh_testing - DEBUG - 2022/02/11 18:54:03 wazuh-syscheckd[16517] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 14:54:27,212 - wazuh_testing - DEBUG - 2022/02/11 18:54:08 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1644602045 2022-02-11 14:54:27,212 - wazuh_testing - DEBUG - 2022/02/11 18:54:03 wazuh-syscheckd[16517] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 14:54:27,212 - wazuh_testing - DEBUG - 2022/02/11 18:54:08 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update end_scan 1644602045 2022-02-11 14:54:27,212 - wazuh_testing - DEBUG - 2022/02/11 18:54:03 wazuh-execd: INFO: Started (pid: 16530). 2022-02-11 14:54:27,213 - wazuh_testing - DEBUG - 2022/02/11 18:54:08 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_global {"id":1644602045,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"af3a4ad03c9cdbe303c7a2b0f0e17c3846f806dd"} 2022-02-11 14:54:27,213 - wazuh_testing - DEBUG - 2022/02/11 18:54:04 wazuh-agentd: INFO: (1410): Reading authentication keys file. 2022-02-11 14:54:27,213 - wazuh_testing - DEBUG - 2022/02/11 18:54:08 wazuh-db[13476] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 1.405 ms. 2022-02-11 14:54:27,213 - wazuh_testing - DEBUG - 2022/02/11 18:54:04 wazuh-agentd: INFO: Using notify time: 10 and max time to reconnect: 60 2022-02-11 14:54:27,214 - wazuh_testing - DEBUG - 2022/02/11 18:54:08 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602045,"version":2,"begin":"/bin/bash","end":"/sbin/chcpu","tail":"/sbin/ctrlaltdel","checksum":"57402e3268a27191e04bfc132831045ee0296f32"} 2022-02-11 14:54:27,214 - wazuh_testing - DEBUG - 2022/02/11 18:54:04 wazuh-agentd: INFO: Version detected -> Linux |wazuh-agent1 |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64 [Debian GNU/Linux|debian: 10 (buster)] - Wazuh v4.2.5 2022-02-11 14:54:27,214 - wazuh_testing - DEBUG - 2022/02/11 18:54:08 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602045,"version":2,"begin":"/sbin/ctrlaltdel","end":"/usr/sbin/zic","checksum":"5028791b98f61910d0c69406855c6c894318d04b"} 2022-02-11 14:54:27,214 - wazuh_testing - DEBUG - 2022/02/11 18:54:04 wazuh-agentd: INFO: Started (pid: 16541). 2022-02-11 14:54:27,214 - wazuh_testing - DEBUG - 2022/02/11 18:54:08 wazuh-db[13476] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.417 ms. 2022-02-11 14:54:27,214 - wazuh_testing - DEBUG - 2022/02/11 18:54:08 wazuh-db[13476] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.406 ms. 2022-02-11 14:54:27,214 - wazuh_testing - DEBUG - 2022/02/11 18:54:04 wazuh-agentd: INFO: Server IP Address: wazuh-manager/172.17.0.2 2022-02-11 14:54:27,215 - wazuh_testing - DEBUG - 2022/02/11 18:54:04 wazuh-agentd: INFO: Using AES as encryption method. 2022-02-11 14:54:27,215 - wazuh_testing - DEBUG - 2022/02/11 18:54:08 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602045,"version":2,"begin":"/sbin/ctrlaltdel","end":"/usr/bin/pdb","tail":"/usr/bin/pdb2","checksum":"b4d7462fdfe788800b506fe753ed068da636330c"} 2022-02-11 14:54:27,215 - wazuh_testing - DEBUG - 2022/02/11 18:54:04 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 14:54:27,215 - wazuh_testing - DEBUG - 2022/02/11 18:54:08 wazuh-db[13476] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.236 ms. 2022-02-11 14:54:27,215 - wazuh_testing - DEBUG - 2022/02/11 18:54:04 wazuh-agentd: INFO: (4102): Connected to the server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 14:54:27,216 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 14:54:27,216 - wazuh_testing - DEBUG - 2022/02/11 18:54:08 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602045,"version":2,"begin":"/usr/bin/pdb2","end":"/usr/sbin/zic","checksum":"f13d51f7876684d6bc17db143ee1529b892c54d2"} 2022-02-11 14:54:27,216 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 14:54:27,216 - wazuh_testing - DEBUG - 2022/02/11 18:54:08 wazuh-db[13476] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.240 ms. 2022-02-11 14:54:27,216 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-11 14:54:27,216 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-11 14:54:27,217 - wazuh_testing - DEBUG - 2022/02/11 18:54:08 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602045,"version":2,"begin":"/sbin/ctrlaltdel","end":"/usr/bin/dpkg-divert","tail":"/usr/bin/dpkg-genbuildinfo","checksum":"e6bc38c95c20a00084730203df2a560e313f6b10"} 2022-02-11 14:54:27,217 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-11 14:54:27,217 - wazuh_testing - DEBUG - 2022/02/11 18:54:08 wazuh-db[13476] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.137 ms. 2022-02-11 14:54:27,217 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-11 14:54:27,217 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-11 14:54:27,217 - wazuh_testing - DEBUG - 2022/02/11 18:54:08 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602045,"version":2,"begin":"/usr/bin/dpkg-genbuildinfo","end":"/usr/bin/pdb","checksum":"fcd12ca69011f5033c3706ba868e7f2983050598"} 2022-02-11 14:54:27,217 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ 2022-02-11 14:54:27,217 - wazuh_testing - DEBUG - 2022/02/11 18:54:08 wazuh-db[13476] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.149 ms. 2022-02-11 14:54:27,217 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ OK? 2022-02-11 14:54:27,217 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-11 14:54:27,218 - wazuh_testing - DEBUG - 2022/02/11 18:54:08 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602045,"version":2,"begin":"/sbin/ctrlaltdel","end":"/usr/bin/apt-extracttemplates","tail":"/usr/bin/apt-ftparchive","checksum":"1cbc63a4d292d40d27c10f7ea872364d4096d8b2"} 2022-02-11 14:54:27,218 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-11 14:54:27,218 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 14:54:27,218 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 14:54:27,218 - wazuh_testing - DEBUG - 2022/02/11 18:54:08 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602045,"version":2,"begin":"/usr/bin/apt-ftparchive","end":"/usr/bin/dpkg-divert","checksum":"ab79628f5b16446ec1a1f2daeaf1afd2511680e1"} 2022-02-11 14:54:27,218 - wazuh_testing - DEBUG - 2022/02/11 18:54:08 wazuh-db[13476] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.152 ms. 2022-02-11 14:54:27,218 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 14:54:27,218 - wazuh_testing - DEBUG - 2022/02/11 18:54:08 wazuh-db[13476] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.124 ms. 2022-02-11 14:54:27,218 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 14:54:27,219 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 14:54:27,219 - wazuh_testing - DEBUG - 2022/02/11 18:54:08 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602045,"version":2,"begin":"/sbin/ctrlaltdel","end":"/sbin/mkhomedir_helper","tail":"/sbin/mkswap","checksum":"7a7df0bd9bb5154b28eb072bebe1af0b79c59afb"} 2022-02-11 14:54:27,219 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 14:54:27,219 - wazuh_testing - DEBUG - 2022/02/11 18:54:08 wazuh-db[13476] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.071 ms. 2022-02-11 14:54:27,219 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 rootcheck[16553] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled. 2022-02-11 14:54:27,219 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:54:27,219 - wazuh_testing - DEBUG - 2022/02/11 18:54:09 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602045,"version":2,"begin":"/sbin/mkswap","end":"/usr/bin/apt-extracttemplates","checksum":"b755308ef4a494912d88652ae09ce34c1a2326df"} 2022-02-11 14:54:27,219 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] syscom.c:123 at syscom_main(): DEBUG: (6284): Local requests thread ready. 2022-02-11 14:54:27,219 - wazuh_testing - DEBUG - 2022/02/11 18:54:09 wazuh-db[13476] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.107 ms. 2022-02-11 14:54:27,219 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] mq_op.c:47 at StartMQ(): DEBUG: Connected succesfully to 'queue/sockets/queue' after 0 attempts 2022-02-11 14:54:27,220 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] mq_op.c:48 at StartMQ(): DEBUG: (unix_domain) Maximum send buffer set to: '212992'. 2022-02-11 14:54:27,220 - wazuh_testing - DEBUG - 2022/02/11 18:54:09 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602045,"version":2,"begin":"/sbin/mkswap","end":"/sbin/start-stop-daemon","tail":"/sbin/sulogin","checksum":"b356159685213d77a501787c4ba65eff3cf7fba1"} 2022-02-11 14:54:27,220 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:185 at main(): INFO: Started (pid: 16555). 2022-02-11 14:54:27,220 - wazuh_testing - DEBUG - 2022/02/11 18:54:09 wazuh-db[13476] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.101 ms. 2022-02-11 14:54:27,220 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:193 at main(): INFO: (6003): Monitoring path: '/bin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 14:54:27,220 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:193 at main(): INFO: (6003): Monitoring path: '/boot', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 14:54:27,220 - wazuh_testing - DEBUG - 2022/02/11 18:54:09 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602045,"version":2,"begin":"/sbin/sulogin","end":"/usr/bin/apt-extracttemplates","checksum":"a46d2d1c40e92816731762f03d1aad771df679f5"} 2022-02-11 14:54:27,220 - wazuh_testing - DEBUG - 2022/02/11 18:54:09 wazuh-db[13476] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.099 ms. 2022-02-11 14:54:27,220 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:193 at main(): INFO: (6003): Monitoring path: '/etc', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 14:54:27,220 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:193 at main(): INFO: (6003): Monitoring path: '/sbin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 14:54:27,220 - wazuh_testing - DEBUG - 2022/02/11 18:54:09 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602045,"version":2,"begin":"/sbin/sulogin","end":"/sbin/wipefs","tail":"/sbin/zramctl","checksum":"086fb81bf040732edfe2a920d67de456c77c8c3d"} 2022-02-11 14:54:27,221 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir1', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 14:54:27,221 - wazuh_testing - DEBUG - 2022/02/11 18:54:09 wazuh-db[13476] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.067 ms. 2022-02-11 14:54:27,221 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir2', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | realtime'. 2022-02-11 14:54:27,221 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir3', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | whodata'. 2022-02-11 14:54:27,221 - wazuh_testing - DEBUG - 2022/02/11 18:54:09 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602045,"version":2,"begin":"/sbin/zramctl","end":"/usr/bin/apt-extracttemplates","checksum":"0b1e04c133203dc555dc2ffbfef39cec86d0eb9d"} 2022-02-11 14:54:27,221 - wazuh_testing - DEBUG - 2022/02/11 18:54:09 wazuh-db[13476] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.038 ms. 2022-02-11 14:54:27,221 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/bin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 14:54:27,221 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/sbin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 14:54:27,221 - wazuh_testing - DEBUG - 2022/02/11 18:54:09 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602045,"version":2,"begin":"/sbin/zramctl","end":"/usr/bin/aclocal-1.16","tail":"/usr/bin/addpart","checksum":"b71ddd7342a42435577047887e06c05d0c8098d7"} 2022-02-11 14:54:27,221 - wazuh_testing - DEBUG - 2022/02/11 18:54:09 wazuh-db[13476] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.021 ms. 2022-02-11 14:54:27,221 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:215 at main(): DEBUG: (6357): Maximum disk quota size limit configured to '1048576 KB'. 2022-02-11 14:54:27,222 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mtab' 2022-02-11 14:54:27,222 - wazuh_testing - DEBUG - 2022/02/11 18:54:09 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602045,"version":2,"begin":"/usr/bin/addpart","end":"/usr/bin/apt-extracttemplates","checksum":"7d1a3bbe28f2c9e567f8311757d46ea5365d7112"} 2022-02-11 14:54:27,222 - wazuh_testing - DEBUG - 2022/02/11 18:54:09 wazuh-db[13476] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.022 ms. 2022-02-11 14:54:27,222 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/hosts.deny' 2022-02-11 14:54:27,222 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mail/statistics' 2022-02-11 14:54:27,222 - wazuh_testing - DEBUG - 2022/02/11 18:54:09 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602045,"version":2,"begin":"/sbin/zramctl","end":"/usr/bin/2to3-2.7","tail":"/usr/bin/[","checksum":"35391c7317f1cbceb690591be2e8df4aa129e3a1"} 2022-02-11 14:54:27,222 - wazuh_testing - DEBUG - 2022/02/11 18:54:09 wazuh-db[13476] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.016 ms. 2022-02-11 14:54:27,222 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random-seed' 2022-02-11 14:54:27,222 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random.seed' 2022-02-11 14:54:27,223 - wazuh_testing - DEBUG - 2022/02/11 18:54:09 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602045,"version":2,"begin":"/usr/bin/[","end":"/usr/bin/aclocal-1.16","checksum":"0f1d35a6565c33bf9697c50fd2d7d2a4ebccbc45"} 2022-02-11 14:54:27,223 - wazuh_testing - DEBUG - 2022/02/11 18:54:09 wazuh-db[13476] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.017 ms. 2022-02-11 14:54:27,223 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/adjtime' 2022-02-11 14:54:27,223 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/httpd/logs' 2022-02-11 14:54:27,223 - wazuh_testing - DEBUG - 2022/02/11 18:54:09 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602045,"version":2,"begin":"/sbin/zramctl","end":"/sbin/zramctl","tail":"/testdir1/testdir1.txt","checksum":"58b2b87ce2162d80a895c740e0ed2124836230b7"} 2022-02-11 14:54:27,223 - wazuh_testing - DEBUG - 2022/02/11 18:54:09 wazuh-db[13476] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.025 ms. 2022-02-11 14:54:27,223 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/utmpx' 2022-02-11 14:54:27,223 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/wtmpx' 2022-02-11 14:54:27,223 - wazuh_testing - DEBUG - 2022/02/11 18:54:10 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602045,"version":2,"begin":"/testdir1/testdir1.txt","end":"/usr/bin/2to3-2.7","checksum":"2c79e892adc7529e55eff6653843fd7846a8358f"} 2022-02-11 14:54:27,223 - wazuh_testing - DEBUG - 2022/02/11 18:54:10 wazuh-db[13476] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.036 ms. 2022-02-11 14:54:27,223 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/cups/certs' 2022-02-11 14:54:27,223 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/dumpdates' 2022-02-11 14:54:27,224 - wazuh_testing - DEBUG - 2022/02/11 18:54:10 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602045,"version":2,"begin":"/testdir1/testdir1.txt","end":"/testdir1/testdir1.txt","tail":"/usr/bin/2to3-2.7","checksum":"dcd7a54a75977ca82c8ce658c0a1c2a731dd8313"} 2022-02-11 14:54:27,224 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/svc/volatile' 2022-02-11 14:54:27,224 - wazuh_testing - DEBUG - 2022/02/11 18:54:10 wazuh-db[13476] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.020 ms. 2022-02-11 14:54:27,224 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/security' 2022-02-11 14:54:27,224 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/debug' 2022-02-11 14:54:27,224 - wazuh_testing - DEBUG - 2022/02/11 18:54:10 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602045,"version":2,"begin":"/usr/bin/2to3-2.7","end":"/usr/bin/2to3-2.7","checksum":"f621f8dd560e58c5f017dfd42d98bb3a72466d1d"} 2022-02-11 14:54:27,224 - wazuh_testing - DEBUG - 2022/02/11 18:54:10 wazuh-db[13476] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.014 ms. 2022-02-11 14:54:27,224 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/dev/core' 2022-02-11 14:54:27,224 - wazuh_testing - DEBUG - 2022/02/11 18:54:10 wazuh-db[13476] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file save2 {"path":"/testdir1/testdir1.txt","timestamp":1644602045,"version":2,"attributes":{"type":"file","size":0,"perm":"rw-r--r--","uid":"0","gid":"0","user_name":"root","group_name":"root","inode":17179747,"mtime":1644602041,"hash_md5":"d41d8cd98f00b204e9800998ecf8427e","hash_sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","hash_sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","checksum":"3faa025745f68843235fae68297251c316dfd174"}} 2022-02-11 14:54:27,225 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '^/proc' 2022-02-11 14:54:27,225 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '.log$|.swp$' 2022-02-11 14:54:27,225 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-manager and message: .*Agent 001 query: (.+) save2 2022-02-11 14:54:27,225 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:235 at main(): INFO: (6004): No diff for file: '/etc/ssl/private.key' 2022-02-11 14:54:27,225 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:245 at main(): INFO: (6016): Directory set for real time monitoring: '/testdir2'. 2022-02-11 14:54:27,226 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] syscheck_audit.c:243 at audit_init(): WARNING: (6924): Who-data engine cannot start because Auditd is not running. 2022-02-11 14:54:27,226 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] main.c:264 at main(): WARNING: (6913): Who-data engine could not start. Switching who-data to real-time. 2022-02-11 14:54:27,226 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] run_check.c:194 at start_daemon(): DEBUG: (6320): Setting process priority to: '10' 2022-02-11 14:54:27,226 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:54:27,226 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] run_check.c:229 at start_daemon(): INFO: (6000): Starting daemon... 2022-02-11 14:54:27,226 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] run_check.c:232 at start_daemon(): INFO: (6010): File integrity monitoring scan frequency: 20 seconds 2022-02-11 14:54:27,227 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 14:54:27,227 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644602045}} 2022-02-11 14:54:27,227 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 14:54:27,227 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-11 14:54:27,227 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-11 14:54:27,228 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-11 14:54:27,228 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-11 14:54:27,228 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 14:54:27,228 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 14:54:27,228 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644602045}} 2022-02-11 14:54:27,229 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.342 sec (0.341 clock sec) 2022-02-11 14:54:27,229 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1621, path count: 1627 2022-02-11 14:54:27,229 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:54:27,229 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:54:27,230 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] run_check.c:387 at fim_run_realtime(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-11 14:54:27,230 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] run_check.c:543 at log_realtime_status(): INFO: (6012): Real-time file integrity monitoring started. 2022-02-11 14:54:27,230 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:54:27,231 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. 2022-02-11 14:54:27,231 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] run_check.c:568 at symlink_checker_thread(): DEBUG: (6033): Starting symbolic link updater. Interval '600'. 2022-02-11 14:54:27,231 - wazuh_testing - DEBUG - 2022/02/11 18:54:05 wazuh-syscheckd[16553] run_check.c:82 at fim_send_sync_msg(): DEBUG: (6317): Sending integrity control message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1644602045,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"af3a4ad03c9cdbe303c7a2b0f0e17c3846f806dd"}} 2022-02-11 14:54:27,232 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-agent1 and message: .*Sending integrity control message: (.+)$ 2022-02-11 14:54:28,211 - wazuh_testing - DEBUG - Cleaning temporal files... 2022-02-11 14:54:28,211 - wazuh_testing - DEBUG - Checking results... 2022-02-11 14:54:28,212 - wazuh_testing - DEBUG - Received from wazuh-manager the expected message: fim_file 2022-02-11 14:54:28,212 - wazuh_testing - DEBUG - Received from wazuh-agent1 the expected message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1644602045,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"af3a4ad03c9cdbe303c7a2b0f0e17c3846f806dd"}} 2022-02-11 14:54:54,501 - wazuh_testing - DEBUG - Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-11 14:54:54,502 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-11 14:54:54,503 - wazuh_testing - DEBUG - Starting file composer for wazuh-manager and path: /var/ossec/logs/ossec.log. Composite file in /home/camila/Escritorio/repo/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-manager_ossec.log.tmp 2022-02-11 14:54:54,504 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-manager and message: .*Initializing FIM Integrity Synchronization check. (.+)$ 2022-02-11 14:54:56,006 - wazuh_testing - DEBUG - 2022/02/11 18:54:30 wazuh-db[13476] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64","os_arch":"x86_64"} 2022-02-11 14:54:56,007 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-modulesd:syscollector: INFO: Stop received for Syscollector. 2022-02-11 14:54:56,007 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 11 disconnected. 2022-02-11 14:54:56,008 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-monitord: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:54:56,008 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-logcollector: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:54:56,008 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-remoted: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:54:56,008 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 28 disconnected. 2022-02-11 14:54:56,009 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 22 disconnected. 2022-02-11 14:54:56,009 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 18 disconnected. 2022-02-11 14:54:56,009 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 16 disconnected. 2022-02-11 14:54:56,009 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-syscheckd[13610] sig_op.c:49 at HandleSIG(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:54:56,010 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-analysisd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:54:56,010 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 38 disconnected. 2022-02-11 14:54:56,010 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 35 disconnected. 2022-02-11 14:54:56,010 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 34 disconnected. 2022-02-11 14:54:56,010 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 30 disconnected. 2022-02-11 14:54:56,011 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 29 disconnected. 2022-02-11 14:54:56,011 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 26 disconnected. 2022-02-11 14:54:56,011 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 31 disconnected. 2022-02-11 14:54:56,011 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 24 disconnected. 2022-02-11 14:54:56,011 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 23 disconnected. 2022-02-11 14:54:56,012 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 21 disconnected. 2022-02-11 14:54:56,012 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 27 disconnected. 2022-02-11 14:54:56,012 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 13 disconnected. 2022-02-11 14:54:56,012 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 25 disconnected. 2022-02-11 14:54:56,013 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 32 disconnected. 2022-02-11 14:54:56,013 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 37 disconnected. 2022-02-11 14:54:56,013 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 20 disconnected. 2022-02-11 14:54:56,013 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 19 disconnected. 2022-02-11 14:54:56,014 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 33 disconnected. 2022-02-11 14:54:56,014 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 12 disconnected. 2022-02-11 14:54:56,014 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 10 disconnected. 2022-02-11 14:54:56,014 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 6 disconnected. 2022-02-11 14:54:56,015 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-execd: INFO: (1314): Shutdown received. Deleting responses. 2022-02-11 14:54:56,015 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-execd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:54:56,015 - wazuh_testing - DEBUG - 2022/02/11 18:54:34 wazuh-db[13476] main.c:468 at handler(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:54:56,015 - wazuh_testing - DEBUG - 2022/02/11 18:54:34 wazuh-db[13476] wdb.c:872 at wdb_close_all(): DEBUG: Closing all databases... 2022-02-11 14:54:56,016 - wazuh_testing - DEBUG - 2022/02/11 18:54:34 wazuh-db[13476] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent 001 2022-02-11 14:54:56,016 - wazuh_testing - DEBUG - 2022/02/11 18:54:34 wazuh-db[13476] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent 000 2022-02-11 14:54:56,016 - wazuh_testing - DEBUG - 2022/02/11 18:54:34 wazuh-db[13476] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent mitre 2022-02-11 14:54:56,016 - wazuh_testing - DEBUG - 2022/02/11 18:54:34 wazuh-db[13476] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent global 2022-02-11 14:54:56,017 - wazuh_testing - DEBUG - 2022/02/11 18:54:34 wazuh-db[13476] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent tasks 2022-02-11 14:54:56,017 - wazuh_testing - DEBUG - 2022/02/11 18:54:34 wazuh-db[13476] main.c:231 at main(): DEBUG: Template file removed again: queue/db/.template.db 2022-02-11 14:54:56,017 - wazuh_testing - DEBUG - 2022/02/11 18:54:34 wazuh-authd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:54:56,017 - wazuh_testing - DEBUG - 2022/02/11 18:54:35 wazuh-authd: INFO: Exiting... 2022-02-11 14:54:56,018 - wazuh_testing - DEBUG - 2022/02/11 18:54:40 wazuh-db[14402] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 14:54:56,018 - wazuh_testing - DEBUG - 2022/02/11 18:54:40 wazuh-db[14402] main.c:101 at main(): DEBUG: Wazuh home directory: /var/ossec 2022-02-11 14:54:56,018 - wazuh_testing - DEBUG - 2022/02/11 18:54:40 wazuh-syscheckd[14406] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 14:54:56,018 - wazuh_testing - DEBUG - 2022/02/11 18:54:40 wazuh-syscheckd[14406] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 14:54:56,018 - wazuh_testing - DEBUG - 2022/02/11 18:54:40 wazuh-syscheckd[14406] syscheck-config.c:122 at organize_syscheck_dirs(): DEBUG: No directory entries to organize in syscheck configuration. 2022-02-11 14:54:56,019 - wazuh_testing - DEBUG - 2022/02/11 18:54:42 wazuh-csyslogd: INFO: Remote syslog server not configured. Clean exit. 2022-02-11 14:54:56,019 - wazuh_testing - DEBUG - 2022/02/11 18:54:42 wazuh-dbd: INFO: Database not configured. Clean exit. 2022-02-11 14:54:56,019 - wazuh_testing - DEBUG - 2022/02/11 18:54:42 wazuh-integratord: INFO: Remote integrations not configured. Clean exit. 2022-02-11 14:54:56,019 - wazuh_testing - DEBUG - 2022/02/11 18:54:42 wazuh-agentlessd: INFO: Not configured. Exiting. 2022-02-11 14:54:56,019 - wazuh_testing - DEBUG - 2022/02/11 18:54:42 wazuh-authd: INFO: Started (pid: 14472). 2022-02-11 14:54:56,020 - wazuh_testing - DEBUG - 2022/02/11 18:54:42 wazuh-authd: INFO: Accepting connections on port 1515. No password required. 2022-02-11 14:54:56,020 - wazuh_testing - DEBUG - 2022/02/11 18:54:42 wazuh-authd: INFO: Setting network timeout to 1.000000 sec. 2022-02-11 14:54:56,020 - wazuh_testing - DEBUG - 2022/02/11 18:54:43 wazuh-db[14486] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 14:54:56,020 - wazuh_testing - DEBUG - 2022/02/11 18:54:43 wazuh-db[14486] main.c:101 at main(): DEBUG: Wazuh home directory: /var/ossec 2022-02-11 14:54:56,020 - wazuh_testing - DEBUG - 2022/02/11 18:54:43 wazuh-db[14486] main.c:122 at main(): DEBUG: Template file removed: /var/ossec/queue/db/.template.db 2022-02-11 14:54:56,021 - wazuh_testing - DEBUG - 2022/02/11 18:54:43 wazuh-db[14486] main.c:178 at main(): INFO: Started (pid: 14488). 2022-02-11 14:54:56,021 - wazuh_testing - DEBUG - 2022/02/11 18:54:45 wazuh-execd: INFO: (1350): Active response disabled. 2022-02-11 14:54:56,021 - wazuh_testing - DEBUG - 2022/02/11 18:54:45 wazuh-execd: INFO: Started (pid: 14511). 2022-02-11 14:54:56,021 - wazuh_testing - DEBUG - 2022/02/11 18:54:46 wazuh-analysisd: INFO: Total rules enabled: '3882' 2022-02-11 14:54:56,021 - wazuh_testing - DEBUG - 2022/02/11 18:54:46 wazuh-analysisd: INFO: Started (pid: 14525). 2022-02-11 14:54:56,022 - wazuh_testing - DEBUG - 2022/02/11 18:54:46 wazuh-db[14486] main.c:290 at run_dealer(): DEBUG: New client connected (6). 2022-02-11 14:54:56,022 - wazuh_testing - DEBUG - 2022/02/11 18:54:46 wazuh-analysisd: INFO: (7200): Logtest started 2022-02-11 14:54:56,022 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 14:54:56,022 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 14:54:56,022 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] syscheck-config.c:122 at organize_syscheck_dirs(): DEBUG: No directory entries to organize in syscheck configuration. 2022-02-11 14:54:56,023 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] main.c:118 at main(): INFO: (6678): No directory provided for syscheck to monitor. 2022-02-11 14:54:56,023 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] main.c:136 at main(): INFO: (6001): File integrity monitoring disabled. 2022-02-11 14:54:56,023 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 rootcheck[14620] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled. 2022-02-11 14:54:56,024 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:54:56,024 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] syscom.c:123 at syscom_main(): DEBUG: (6284): Local requests thread ready. 2022-02-11 14:54:56,024 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] mq_op.c:47 at StartMQ(): DEBUG: Connected succesfully to 'queue/sockets/queue' after 0 attempts 2022-02-11 14:54:56,024 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] mq_op.c:48 at StartMQ(): DEBUG: (unix_domain) Maximum send buffer set to: '212992'. 2022-02-11 14:54:56,025 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] main.c:185 at main(): INFO: Started (pid: 14622). 2022-02-11 14:54:56,025 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] main.c:215 at main(): DEBUG: (6357): Maximum disk quota size limit configured to '1048576 KB'. 2022-02-11 14:54:56,025 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] run_check.c:194 at start_daemon(): DEBUG: (6320): Setting process priority to: '10' 2022-02-11 14:54:56,025 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:54:56,025 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] run_check.c:229 at start_daemon(): INFO: (6000): Starting daemon... 2022-02-11 14:54:56,025 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] run_check.c:232 at start_daemon(): INFO: (6010): File integrity monitoring scan frequency: 43200 seconds 2022-02-11 14:54:56,026 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 14:54:56,026 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644602087}} 2022-02-11 14:54:56,026 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 14:54:56,026 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-db[14486] main.c:290 at run_dealer(): DEBUG: New client connected (10). 2022-02-11 14:54:56,027 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 14:54:56,027 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 14:54:56,027 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-db[14486] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 000 query: syscheck scan_info_update start_scan 1644602087 2022-02-11 14:54:56,027 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644602087}} 2022-02-11 14:54:56,027 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.000 sec (0.000 clock sec) 2022-02-11 14:54:56,028 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 0, path count: 0 2022-02-11 14:54:56,028 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:54:56,028 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-db[14486] main.c:290 at run_dealer(): DEBUG: New client connected (11). 2022-02-11 14:54:56,028 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-db[14486] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 000 query: syscheck scan_info_update end_scan 1644602087 2022-02-11 14:54:56,028 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:54:56,029 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:54:56,029 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. 2022-02-11 14:54:56,030 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-manager and message: .*Initializing FIM Integrity Synchronization check. (.+)$ 2022-02-11 14:54:57,007 - wazuh_testing - DEBUG - Cleaning temporal files... 2022-02-11 14:54:57,008 - wazuh_testing - DEBUG - Checking results... 2022-02-11 14:54:57,010 - wazuh_testing - DEBUG - Received from wazuh-manager the expected message: Sync interval is 300 seconds.
-------------------------------Captured log call--------------------------------
DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:1005 Cleaning temporal files... DEBUG wazuh_testing:monitoring.py:994 Checking results... DEBUG wazuh_testing:monitoring.py:1000 Received from wazuh-manager the expected message: fim_file DEBUG wazuh_testing:monitoring.py:1000 Received from wazuh-agent1 the expected message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1644602045,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"af3a4ad03c9cdbe303c7a2b0f0e17c3846f806dd"}} DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:1005 Cleaning temporal files... DEBUG wazuh_testing:monitoring.py:994 Checking results... DEBUG wazuh_testing:monitoring.py:1000 Received from wazuh-manager the expected message: Sync interval is 300 seconds.

Passed

test_synchronization.py::test_synchronization[testdir1-modify-wazuh-agent1]

33.91

------------------------------Captured stderr call------------------------------
2022-02-11 14:55:09,836 - wazuh_testing - DEBUG - Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-11 14:55:09,837 - wazuh_testing - DEBUG - Starting file composer for wazuh-agent1 and path: /var/ossec/logs/ossec.log. Composite file in /home/camila/Escritorio/repo/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-agent1_ossec.log.tmp 2022-02-11 14:55:09,837 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-11 14:55:09,838 - wazuh_testing - DEBUG - Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-11 14:55:09,838 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-agent1 and message: .*Sending integrity control message: (.+)$ 2022-02-11 14:55:09,839 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-11 14:55:09,840 - wazuh_testing - DEBUG - Starting file composer for wazuh-manager and path: /var/ossec/logs/ossec.log. Composite file in /home/camila/Escritorio/repo/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-manager_ossec.log.tmp 2022-02-11 14:55:09,841 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-manager and message: .*Agent 001 query: (.+) save2 2022-02-11 14:55:11,340 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-agentd: ERROR: (1137): Lost connection with manager. Setting lock. 2022-02-11 14:55:11,341 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-agentd: INFO: Closing connection to server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 14:55:11,341 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 14:55:11,341 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-agentd: ERROR: (1216): Unable to connect to '172.17.0.2:1514/tcp': 'Connection refused'. 2022-02-11 14:55:11,341 - wazuh_testing - DEBUG - 2022/02/11 18:54:42 wazuh-syscheckd[17052] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 14:55:11,342 - wazuh_testing - DEBUG - 2022/02/11 18:54:42 wazuh-syscheckd[17052] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644602082}} 2022-02-11 14:55:11,342 - wazuh_testing - DEBUG - 2022/02/11 18:54:42 wazuh-syscheckd[17052] wait_op.c:101 at os_wait(): WARNING: Process locked due to agent is offline. Waiting for connection... 2022-02-11 14:55:11,342 - wazuh_testing - DEBUG - 2022/02/11 18:54:43 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 14:55:11,342 - wazuh_testing - DEBUG - 2022/02/11 18:54:43 wazuh-agentd: ERROR: (1216): Unable to connect to '172.17.0.2:1514/tcp': 'Connection refused'. 2022-02-11 14:55:11,342 - wazuh_testing - DEBUG - 2022/02/11 18:54:53 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 14:55:11,343 - wazuh_testing - DEBUG - 2022/02/11 18:54:53 wazuh-agentd: INFO: (4102): Connected to the server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 14:55:11,343 - wazuh_testing - DEBUG - 2022/02/11 18:54:53 wazuh-agentd: INFO: Server responded. Releasing lock. 2022-02-11 14:55:11,343 - wazuh_testing - DEBUG - 2022/02/11 18:54:57 wazuh-syscheckd[17052] wait_op.c:116 at os_wait(): INFO: Agent is now online. Process unlocked, continuing... 2022-02-11 14:55:11,343 - wazuh_testing - DEBUG - 2022/02/11 18:54:57 wazuh-syscheckd[17052] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 14:55:11,344 - wazuh_testing - DEBUG - 2022/02/11 18:54:57 wazuh-syscheckd[17052] fim_db.c:436 at fim_db_check_transaction(): DEBUG: Database transaction completed. 2022-02-11 14:55:11,344 - wazuh_testing - DEBUG - 2022/02/11 18:54:57 wazuh-syscheckd[17052] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-11 14:55:11,344 - wazuh_testing - DEBUG - 2022/02/11 18:54:57 wazuh-syscheckd[17052] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-11 14:55:11,344 - wazuh_testing - DEBUG - 2022/02/11 18:54:30 wazuh-db[13476] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64","os_arch":"x86_64"} 2022-02-11 14:55:11,345 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-modulesd:syscollector: INFO: Stop received for Syscollector. 2022-02-11 14:55:11,345 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 11 disconnected. 2022-02-11 14:55:11,345 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-monitord: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:55:11,345 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-logcollector: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:55:11,346 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-remoted: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:55:11,346 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 28 disconnected. 2022-02-11 14:55:11,346 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 22 disconnected. 2022-02-11 14:55:11,346 - wazuh_testing - DEBUG - 2022/02/11 18:54:57 wazuh-syscheckd[17052] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"event","data":{"path":"/testdir1/testdir1.txt","version":2,"mode":"scheduled","type":"modified","timestamp":1644602097,"attributes":{"type":"file","size":0,"perm":"rw-r--r--","uid":"0","gid":"0","user_name":"root","group_name":"root","inode":17179747,"mtime":1644602077,"hash_md5":"d41d8cd98f00b204e9800998ecf8427e","hash_sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","hash_sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","checksum":"81af4bf6ffbfe6505b173f2243e65e454f2bafd5"},"changed_attributes":["mtime"],"old_attributes":{"type":"file","size":0,"perm":"rw-r--r--","uid":"0","gid":"0","user_name":"root","group_name":"root","inode":17179747,"mtime":1644602056,"hash_md5":"d41d8cd98f00b204e9800998ecf8427e","hash_sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","hash_sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","checksum":"7adc6f102cf20c0d2d206ff0ad4b72f8c92bd196"}}} 2022-02-11 14:55:11,346 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 18 disconnected. 2022-02-11 14:55:11,346 - wazuh_testing - DEBUG - 2022/02/11 18:54:57 wazuh-syscheckd[17052] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-11 14:55:11,346 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 16 disconnected. 2022-02-11 14:55:11,347 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-syscheckd[13610] sig_op.c:49 at HandleSIG(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:55:11,347 - wazuh_testing - DEBUG - 2022/02/11 18:54:57 wazuh-syscheckd[17052] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-11 14:55:11,347 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-analysisd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:55:11,347 - wazuh_testing - DEBUG - 2022/02/11 18:54:58 wazuh-syscheckd[17052] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 14:55:11,347 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 38 disconnected. 2022-02-11 14:55:11,347 - wazuh_testing - DEBUG - 2022/02/11 18:54:58 wazuh-syscheckd[17052] create_db.c:220 at fim_scan(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-11 14:55:11,347 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 35 disconnected. 2022-02-11 14:55:11,347 - wazuh_testing - DEBUG - 2022/02/11 18:54:58 wazuh-syscheckd[17052] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 14:55:11,348 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 34 disconnected. 2022-02-11 14:55:11,348 - wazuh_testing - DEBUG - 2022/02/11 18:54:58 wazuh-syscheckd[17052] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644602098}} 2022-02-11 14:55:11,348 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 30 disconnected. 2022-02-11 14:55:11,348 - wazuh_testing - DEBUG - 2022/02/11 18:54:58 wazuh-syscheckd[17052] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 15.606 sec (0.568 clock sec) 2022-02-11 14:55:11,348 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 29 disconnected. 2022-02-11 14:55:11,348 - wazuh_testing - DEBUG - 2022/02/11 18:54:58 wazuh-syscheckd[17052] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1621, path count: 1627 2022-02-11 14:55:11,348 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 26 disconnected. 2022-02-11 14:55:11,348 - wazuh_testing - DEBUG - 2022/02/11 18:55:03 wazuh-logcollector: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:55:11,349 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 31 disconnected. 2022-02-11 14:55:11,349 - wazuh_testing - DEBUG - 2022/02/11 18:55:03 wazuh-syscheckd[17052] sig_op.c:49 at HandleSIG(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:55:11,349 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 24 disconnected. 2022-02-11 14:55:11,349 - wazuh_testing - DEBUG - 2022/02/11 18:55:03 wazuh-agentd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:55:11,349 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 23 disconnected. 2022-02-11 14:55:11,349 - wazuh_testing - DEBUG - 2022/02/11 18:55:03 wazuh-execd: INFO: (1314): Shutdown received. Deleting responses. 2022-02-11 14:55:11,349 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 21 disconnected. 2022-02-11 14:55:11,349 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 27 disconnected. 2022-02-11 14:55:11,349 - wazuh_testing - DEBUG - 2022/02/11 18:55:03 wazuh-execd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:55:11,350 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 13 disconnected. 2022-02-11 14:55:11,350 - wazuh_testing - DEBUG - 2022/02/11 18:55:03 wazuh-syscheckd[17675] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 14:55:11,350 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 25 disconnected. 2022-02-11 14:55:11,350 - wazuh_testing - DEBUG - 2022/02/11 18:55:03 wazuh-syscheckd[17675] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 14:55:11,350 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 32 disconnected. 2022-02-11 14:55:11,350 - wazuh_testing - DEBUG - 2022/02/11 18:55:03 wazuh-syscheckd[17675] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-11 14:55:11,350 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 37 disconnected. 2022-02-11 14:55:11,350 - wazuh_testing - DEBUG - 2022/02/11 18:55:03 wazuh-syscheckd[17675] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-11 14:55:11,350 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 20 disconnected. 2022-02-11 14:55:11,350 - wazuh_testing - DEBUG - 2022/02/11 18:55:03 wazuh-syscheckd[17675] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-11 14:55:11,351 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 19 disconnected. 2022-02-11 14:55:11,351 - wazuh_testing - DEBUG - 2022/02/11 18:55:03 wazuh-syscheckd[17675] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-11 14:55:11,351 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 33 disconnected. 2022-02-11 14:55:11,351 - wazuh_testing - DEBUG - 2022/02/11 18:55:03 wazuh-syscheckd[17675] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-11 14:55:11,351 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 12 disconnected. 2022-02-11 14:55:11,351 - wazuh_testing - DEBUG - 2022/02/11 18:55:03 wazuh-syscheckd[17675] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ 2022-02-11 14:55:11,351 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 10 disconnected. 2022-02-11 14:55:11,351 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-db[13476] main.c:352 at run_worker(): DEBUG: Client 6 disconnected. 2022-02-11 14:55:11,351 - wazuh_testing - DEBUG - 2022/02/11 18:55:03 wazuh-syscheckd[17675] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ OK? 2022-02-11 14:55:11,351 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-execd: INFO: (1314): Shutdown received. Deleting responses. 2022-02-11 14:55:11,352 - wazuh_testing - DEBUG - 2022/02/11 18:55:03 wazuh-syscheckd[17675] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-11 14:55:11,352 - wazuh_testing - DEBUG - 2022/02/11 18:54:33 wazuh-execd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:55:11,352 - wazuh_testing - DEBUG - 2022/02/11 18:55:03 wazuh-syscheckd[17675] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-11 14:55:11,352 - wazuh_testing - DEBUG - 2022/02/11 18:54:34 wazuh-db[13476] main.c:468 at handler(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:55:11,352 - wazuh_testing - DEBUG - 2022/02/11 18:55:03 wazuh-syscheckd[17675] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 14:55:11,352 - wazuh_testing - DEBUG - 2022/02/11 18:54:34 wazuh-db[13476] wdb.c:872 at wdb_close_all(): DEBUG: Closing all databases... 2022-02-11 14:55:11,352 - wazuh_testing - DEBUG - 2022/02/11 18:55:03 wazuh-syscheckd[17675] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 14:55:11,352 - wazuh_testing - DEBUG - 2022/02/11 18:54:34 wazuh-db[13476] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent 001 2022-02-11 14:55:11,352 - wazuh_testing - DEBUG - 2022/02/11 18:55:03 wazuh-syscheckd[17675] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 14:55:11,352 - wazuh_testing - DEBUG - 2022/02/11 18:54:34 wazuh-db[13476] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent 000 2022-02-11 14:55:11,353 - wazuh_testing - DEBUG - 2022/02/11 18:55:03 wazuh-syscheckd[17675] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 14:55:11,353 - wazuh_testing - DEBUG - 2022/02/11 18:54:34 wazuh-db[13476] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent mitre 2022-02-11 14:55:11,353 - wazuh_testing - DEBUG - 2022/02/11 18:55:03 wazuh-syscheckd[17675] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 14:55:11,353 - wazuh_testing - DEBUG - 2022/02/11 18:54:34 wazuh-db[13476] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent global 2022-02-11 14:55:11,353 - wazuh_testing - DEBUG - 2022/02/11 18:55:03 wazuh-syscheckd[17675] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 14:55:11,353 - wazuh_testing - DEBUG - 2022/02/11 18:54:34 wazuh-db[13476] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent tasks 2022-02-11 14:55:11,353 - wazuh_testing - DEBUG - 2022/02/11 18:55:03 wazuh-execd: INFO: Started (pid: 17688). 2022-02-11 14:55:11,353 - wazuh_testing - DEBUG - 2022/02/11 18:54:34 wazuh-db[13476] main.c:231 at main(): DEBUG: Template file removed again: queue/db/.template.db 2022-02-11 14:55:11,353 - wazuh_testing - DEBUG - 2022/02/11 18:55:04 wazuh-agentd: INFO: (1410): Reading authentication keys file. 2022-02-11 14:55:11,353 - wazuh_testing - DEBUG - 2022/02/11 18:54:34 wazuh-authd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:55:11,354 - wazuh_testing - DEBUG - 2022/02/11 18:54:35 wazuh-authd: INFO: Exiting... 2022-02-11 14:55:11,354 - wazuh_testing - DEBUG - 2022/02/11 18:55:04 wazuh-agentd: INFO: Using notify time: 10 and max time to reconnect: 60 2022-02-11 14:55:11,354 - wazuh_testing - DEBUG - 2022/02/11 18:54:40 wazuh-db[14402] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 14:55:11,354 - wazuh_testing - DEBUG - 2022/02/11 18:55:04 wazuh-agentd: INFO: Version detected -> Linux |wazuh-agent1 |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64 [Debian GNU/Linux|debian: 10 (buster)] - Wazuh v4.2.5 2022-02-11 14:55:11,354 - wazuh_testing - DEBUG - 2022/02/11 18:54:40 wazuh-db[14402] main.c:101 at main(): DEBUG: Wazuh home directory: /var/ossec 2022-02-11 14:55:11,354 - wazuh_testing - DEBUG - 2022/02/11 18:55:04 wazuh-agentd: INFO: Started (pid: 17699). 2022-02-11 14:55:11,354 - wazuh_testing - DEBUG - 2022/02/11 18:54:40 wazuh-syscheckd[14406] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 14:55:11,354 - wazuh_testing - DEBUG - 2022/02/11 18:55:04 wazuh-agentd: INFO: Server IP Address: wazuh-manager/172.17.0.2 2022-02-11 14:55:11,354 - wazuh_testing - DEBUG - 2022/02/11 18:54:40 wazuh-syscheckd[14406] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 14:55:11,354 - wazuh_testing - DEBUG - 2022/02/11 18:55:04 wazuh-agentd: INFO: Using AES as encryption method. 2022-02-11 14:55:11,355 - wazuh_testing - DEBUG - 2022/02/11 18:54:40 wazuh-syscheckd[14406] syscheck-config.c:122 at organize_syscheck_dirs(): DEBUG: No directory entries to organize in syscheck configuration. 2022-02-11 14:55:11,355 - wazuh_testing - DEBUG - 2022/02/11 18:55:04 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 14:55:11,355 - wazuh_testing - DEBUG - 2022/02/11 18:54:42 wazuh-csyslogd: INFO: Remote syslog server not configured. Clean exit. 2022-02-11 14:55:11,355 - wazuh_testing - DEBUG - 2022/02/11 18:55:04 wazuh-agentd: INFO: (4102): Connected to the server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 14:55:11,355 - wazuh_testing - DEBUG - 2022/02/11 18:54:42 wazuh-dbd: INFO: Database not configured. Clean exit. 2022-02-11 14:55:11,355 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 14:55:11,355 - wazuh_testing - DEBUG - 2022/02/11 18:54:42 wazuh-integratord: INFO: Remote integrations not configured. Clean exit. 2022-02-11 14:55:11,355 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 14:55:11,355 - wazuh_testing - DEBUG - 2022/02/11 18:54:42 wazuh-agentlessd: INFO: Not configured. Exiting. 2022-02-11 14:55:11,355 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-11 14:55:11,356 - wazuh_testing - DEBUG - 2022/02/11 18:54:42 wazuh-authd: INFO: Started (pid: 14472). 2022-02-11 14:55:11,356 - wazuh_testing - DEBUG - 2022/02/11 18:54:42 wazuh-authd: INFO: Accepting connections on port 1515. No password required. 2022-02-11 14:55:11,356 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-11 14:55:11,356 - wazuh_testing - DEBUG - 2022/02/11 18:54:42 wazuh-authd: INFO: Setting network timeout to 1.000000 sec. 2022-02-11 14:55:11,356 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-11 14:55:11,356 - wazuh_testing - DEBUG - 2022/02/11 18:54:43 wazuh-db[14486] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 14:55:11,356 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-11 14:55:11,356 - wazuh_testing - DEBUG - 2022/02/11 18:54:43 wazuh-db[14486] main.c:101 at main(): DEBUG: Wazuh home directory: /var/ossec 2022-02-11 14:55:11,357 - wazuh_testing - DEBUG - 2022/02/11 18:54:43 wazuh-db[14486] main.c:122 at main(): DEBUG: Template file removed: /var/ossec/queue/db/.template.db 2022-02-11 14:55:11,357 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-11 14:55:11,357 - wazuh_testing - DEBUG - 2022/02/11 18:54:43 wazuh-db[14486] main.c:178 at main(): INFO: Started (pid: 14488). 2022-02-11 14:55:11,357 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ 2022-02-11 14:55:11,357 - wazuh_testing - DEBUG - 2022/02/11 18:54:45 wazuh-execd: INFO: (1350): Active response disabled. 2022-02-11 14:55:11,357 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ OK? 2022-02-11 14:55:11,357 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-11 14:55:11,357 - wazuh_testing - DEBUG - 2022/02/11 18:54:45 wazuh-execd: INFO: Started (pid: 14511). 2022-02-11 14:55:11,357 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-11 14:55:11,358 - wazuh_testing - DEBUG - 2022/02/11 18:54:46 wazuh-analysisd: INFO: Total rules enabled: '3882' 2022-02-11 14:55:11,358 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 14:55:11,358 - wazuh_testing - DEBUG - 2022/02/11 18:54:46 wazuh-analysisd: INFO: Started (pid: 14525). 2022-02-11 14:55:11,358 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 14:55:11,358 - wazuh_testing - DEBUG - 2022/02/11 18:54:46 wazuh-db[14486] main.c:290 at run_dealer(): DEBUG: New client connected (6). 2022-02-11 14:55:11,358 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 14:55:11,358 - wazuh_testing - DEBUG - 2022/02/11 18:54:46 wazuh-analysisd: INFO: (7200): Logtest started 2022-02-11 14:55:11,358 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 14:55:11,358 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 14:55:11,358 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 14:55:11,358 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 14:55:11,358 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 14:55:11,358 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] syscheck-config.c:122 at organize_syscheck_dirs(): DEBUG: No directory entries to organize in syscheck configuration. 2022-02-11 14:55:11,359 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 rootcheck[17711] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled. 2022-02-11 14:55:11,359 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] main.c:118 at main(): INFO: (6678): No directory provided for syscheck to monitor. 2022-02-11 14:55:11,359 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] main.c:136 at main(): INFO: (6001): File integrity monitoring disabled. 2022-02-11 14:55:11,359 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:55:11,359 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 rootcheck[14620] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled. 2022-02-11 14:55:11,359 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] syscom.c:123 at syscom_main(): DEBUG: (6284): Local requests thread ready. 2022-02-11 14:55:11,359 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:55:11,359 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] mq_op.c:47 at StartMQ(): DEBUG: Connected succesfully to 'queue/sockets/queue' after 0 attempts 2022-02-11 14:55:11,359 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] syscom.c:123 at syscom_main(): DEBUG: (6284): Local requests thread ready. 2022-02-11 14:55:11,359 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] mq_op.c:48 at StartMQ(): DEBUG: (unix_domain) Maximum send buffer set to: '212992'. 2022-02-11 14:55:11,359 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] mq_op.c:47 at StartMQ(): DEBUG: Connected succesfully to 'queue/sockets/queue' after 0 attempts 2022-02-11 14:55:11,359 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] main.c:185 at main(): INFO: Started (pid: 17713). 2022-02-11 14:55:11,359 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] mq_op.c:48 at StartMQ(): DEBUG: (unix_domain) Maximum send buffer set to: '212992'. 2022-02-11 14:55:11,359 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] main.c:193 at main(): INFO: (6003): Monitoring path: '/bin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 14:55:11,360 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] main.c:185 at main(): INFO: Started (pid: 14622). 2022-02-11 14:55:11,360 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] main.c:193 at main(): INFO: (6003): Monitoring path: '/boot', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 14:55:11,360 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] main.c:215 at main(): DEBUG: (6357): Maximum disk quota size limit configured to '1048576 KB'. 2022-02-11 14:55:11,360 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] main.c:193 at main(): INFO: (6003): Monitoring path: '/etc', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 14:55:11,360 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] run_check.c:194 at start_daemon(): DEBUG: (6320): Setting process priority to: '10' 2022-02-11 14:55:11,360 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] main.c:193 at main(): INFO: (6003): Monitoring path: '/sbin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 14:55:11,360 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:55:11,360 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir1', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 14:55:11,360 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] run_check.c:229 at start_daemon(): INFO: (6000): Starting daemon... 2022-02-11 14:55:11,360 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] run_check.c:232 at start_daemon(): INFO: (6010): File integrity monitoring scan frequency: 43200 seconds 2022-02-11 14:55:11,360 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir2', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | realtime'. 2022-02-11 14:55:11,360 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir3', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | whodata'. 2022-02-11 14:55:11,361 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/bin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 14:55:11,361 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 14:55:11,361 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/sbin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 14:55:11,361 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] main.c:215 at main(): DEBUG: (6357): Maximum disk quota size limit configured to '1048576 KB'. 2022-02-11 14:55:11,361 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644602087}} 2022-02-11 14:55:11,361 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mtab' 2022-02-11 14:55:11,361 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 14:55:11,361 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-db[14486] main.c:290 at run_dealer(): DEBUG: New client connected (10). 2022-02-11 14:55:11,362 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/hosts.deny' 2022-02-11 14:55:11,362 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 14:55:11,362 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 14:55:11,362 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mail/statistics' 2022-02-11 14:55:11,362 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random-seed' 2022-02-11 14:55:11,362 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-db[14486] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 000 query: syscheck scan_info_update start_scan 1644602087 2022-02-11 14:55:11,362 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random.seed' 2022-02-11 14:55:11,362 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644602087}} 2022-02-11 14:55:11,362 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/adjtime' 2022-02-11 14:55:11,362 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.000 sec (0.000 clock sec) 2022-02-11 14:55:11,362 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/httpd/logs' 2022-02-11 14:55:11,362 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 0, path count: 0 2022-02-11 14:55:11,362 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/utmpx' 2022-02-11 14:55:11,362 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:55:11,363 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/wtmpx' 2022-02-11 14:55:11,363 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-db[14486] main.c:290 at run_dealer(): DEBUG: New client connected (11). 2022-02-11 14:55:11,363 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/cups/certs' 2022-02-11 14:55:11,363 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-db[14486] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 000 query: syscheck scan_info_update end_scan 1644602087 2022-02-11 14:55:11,363 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/dumpdates' 2022-02-11 14:55:11,363 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:55:11,363 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/svc/volatile' 2022-02-11 14:55:11,363 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:55:11,363 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. 2022-02-11 14:55:11,363 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/security' 2022-02-11 14:55:11,363 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/debug' 2022-02-11 14:55:11,363 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] run_check.c:568 at symlink_checker_thread(): DEBUG: (6033): Starting symbolic link updater. Interval '600'. 2022-02-11 14:55:11,363 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/dev/core' 2022-02-11 14:55:11,363 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] run_check.c:82 at fim_send_sync_msg(): DEBUG: (6317): Sending integrity control message: {"component":"fim_file","type":"integrity_clear","data":{"id":1644602087,"version":2}} 2022-02-11 14:55:11,364 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '^/proc' 2022-02-11 14:55:11,364 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-syscheckd[14620] fim_sync.c:70 at fim_run_integrity(): DEBUG: Finished calculating FIM integrity. Time: 0.000 seconds. 2022-02-11 14:55:11,364 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '.log$|.swp$' 2022-02-11 14:55:11,364 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-db[14486] main.c:290 at run_dealer(): DEBUG: New client connected (13). 2022-02-11 14:55:11,364 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] main.c:235 at main(): INFO: (6004): No diff for file: '/etc/ssl/private.key' 2022-02-11 14:55:11,364 - wazuh_testing - DEBUG - 2022/02/11 18:54:47 wazuh-db[14486] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 000 query: fim_file integrity_clear {"id":1644602087,"version":2} 2022-02-11 14:55:11,364 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] main.c:245 at main(): INFO: (6016): Directory set for real time monitoring: '/testdir2'. 2022-02-11 14:55:11,364 - wazuh_testing - DEBUG - 2022/02/11 18:54:48 wazuh-remoted: INFO: Started (pid: 14641). Listening on port 1514/TCP (secure). 2022-02-11 14:55:11,364 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] syscheck_audit.c:243 at audit_init(): WARNING: (6924): Who-data engine cannot start because Auditd is not running. 2022-02-11 14:55:11,364 - wazuh_testing - DEBUG - 2022/02/11 18:54:48 wazuh-db[14486] main.c:290 at run_dealer(): DEBUG: New client connected (12). 2022-02-11 14:55:11,365 - wazuh_testing - DEBUG - 2022/02/11 18:54:48 wazuh-db[14486] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: reset-agents-connection synced 2022-02-11 14:55:11,365 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] main.c:264 at main(): WARNING: (6913): Who-data engine could not start. Switching who-data to real-time. 2022-02-11 14:55:11,365 - wazuh_testing - DEBUG - 2022/02/11 18:54:48 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 12 disconnected. 2022-02-11 14:55:11,365 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] run_check.c:194 at start_daemon(): DEBUG: (6320): Setting process priority to: '10' 2022-02-11 14:55:11,365 - wazuh_testing - DEBUG - 2022/02/11 18:54:48 wazuh-remoted: INFO: (1410): Reading authentication keys file. 2022-02-11 14:55:11,365 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:55:11,365 - wazuh_testing - DEBUG - 2022/02/11 18:54:49 wazuh-logcollector: INFO: (1950): Analyzing file: '/var/ossec/logs/active-responses.log'. 2022-02-11 14:55:11,365 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] run_check.c:229 at start_daemon(): INFO: (6000): Starting daemon... 2022-02-11 14:55:11,366 - wazuh_testing - DEBUG - 2022/02/11 18:54:49 wazuh-logcollector: INFO: (1950): Analyzing file: '/var/log/dpkg.log'. 2022-02-11 14:55:11,366 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] run_check.c:232 at start_daemon(): INFO: (6010): File integrity monitoring scan frequency: 20 seconds 2022-02-11 14:55:11,366 - wazuh_testing - DEBUG - 2022/02/11 18:54:49 wazuh-logcollector: INFO: Started (pid: 14676). 2022-02-11 14:55:11,366 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 14:55:11,366 - wazuh_testing - DEBUG - 2022/02/11 18:54:50 wazuh-monitord: INFO: Started (pid: 14695). 2022-02-11 14:55:11,366 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644602105}} 2022-02-11 14:55:11,366 - wazuh_testing - DEBUG - 2022/02/11 18:54:51 wazuh-modulesd: INFO: Started (pid: 14707). 2022-02-11 14:55:11,366 - wazuh_testing - DEBUG - 2022/02/11 18:54:51 wazuh-modulesd:agent-upgrade: INFO: (8153): Module Agent Upgrade started. 2022-02-11 14:55:11,366 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 14:55:11,367 - wazuh_testing - DEBUG - 2022/02/11 18:54:51 wazuh-modulesd:ciscat: INFO: Module disabled. Exiting... 2022-02-11 14:55:11,367 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-11 14:55:11,367 - wazuh_testing - DEBUG - 2022/02/11 18:54:51 wazuh-modulesd:syscollector: INFO: Module disabled. Exiting... 2022-02-11 14:55:11,367 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-11 14:55:11,367 - wazuh_testing - DEBUG - 2022/02/11 18:54:51 wazuh-modulesd:osquery: INFO: Module disabled. Exiting... 2022-02-11 14:55:11,367 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-11 14:55:11,367 - wazuh_testing - DEBUG - 2022/02/11 18:54:51 sca: INFO: Module disabled. Exiting. 2022-02-11 14:55:11,367 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-11 14:55:11,367 - wazuh_testing - DEBUG - 2022/02/11 18:54:51 wazuh-modulesd:database: INFO: Module started. 2022-02-11 14:55:11,367 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 14:55:11,368 - wazuh_testing - DEBUG - 2022/02/11 18:54:51 wazuh-modulesd:download: INFO: Module started. 2022-02-11 14:55:11,368 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 14:55:11,368 - wazuh_testing - DEBUG - 2022/02/11 18:54:51 wazuh-modulesd:control: INFO: Starting control thread. 2022-02-11 14:55:11,368 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644602105}} 2022-02-11 14:55:11,368 - wazuh_testing - DEBUG - 2022/02/11 18:54:51 wazuh-db[14486] main.c:290 at run_dealer(): DEBUG: New client connected (12). 2022-02-11 14:55:11,368 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.337 sec (0.336 clock sec) 2022-02-11 14:55:11,368 - wazuh_testing - DEBUG - 2022/02/11 18:54:51 wazuh-db[14486] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-name {"id":0,"name":"wazuh-manager"} 2022-02-11 14:55:11,368 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1621, path count: 1627 2022-02-11 14:55:11,369 - wazuh_testing - DEBUG - 2022/02/11 18:54:51 wazuh-modulesd:task-manager: INFO: (8200): Module Task Manager started. 2022-02-11 14:55:11,369 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:55:11,369 - wazuh_testing - DEBUG - 2022/02/11 18:54:51 wazuh-db[14486] main.c:290 at run_dealer(): DEBUG: New client connected (16). 2022-02-11 14:55:11,369 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:55:11,369 - wazuh_testing - DEBUG - 2022/02/11 18:54:51 wazuh-db[14486] wdb_parser.c:928 at wdb_parse(): DEBUG: Task query: set_timeout {"now":1644602091,"interval":900} 2022-02-11 14:55:11,369 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:55:11,369 - wazuh_testing - DEBUG - 2022/02/11 18:54:51 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 16 disconnected. 2022-02-11 14:55:11,369 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] run_check.c:387 at fim_run_realtime(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-11 14:55:11,369 - wazuh_testing - DEBUG - 2022/02/11 18:54:51 wazuh-db[14486] main.c:290 at run_dealer(): DEBUG: New client connected (16). 2022-02-11 14:55:11,370 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] run_check.c:543 at log_realtime_status(): INFO: (6012): Real-time file integrity monitoring started. 2022-02-11 14:55:11,370 - wazuh_testing - DEBUG - 2022/02/11 18:54:51 wazuh-db[14486] wdb_parser.c:928 at wdb_parse(): DEBUG: Task query: delete_old {"timestamp":1643997291} 2022-02-11 14:55:11,370 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. 2022-02-11 14:55:11,370 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] run_check.c:568 at symlink_checker_thread(): DEBUG: (6033): Starting symbolic link updater. Interval '600'. 2022-02-11 14:55:11,370 - wazuh_testing - DEBUG - 2022/02/11 18:54:51 wazuh-db[14486] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":0,"version":"Wazuh v4.2.5","manager_host":"wazuh-manager","node_name":"wazuh-master","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-manager |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64","os_arch":"x86_64"} 2022-02-11 14:55:11,370 - wazuh_testing - DEBUG - 2022/02/11 18:55:05 wazuh-syscheckd[17711] run_check.c:82 at fim_send_sync_msg(): DEBUG: (6317): Sending integrity control message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1644602105,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"7a6b6cca3d5b0c4708859eaf35f191e6e6fce693"}} 2022-02-11 14:55:11,370 - wazuh_testing - DEBUG - 2022/02/11 18:54:51 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 16 disconnected. 2022-02-11 14:55:11,370 - wazuh_testing - DEBUG - 2022/02/11 18:54:51 wazuh-db[14486] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: insert-agent {"id":1,"name":"wazuh-agent1","register_ip":"any","internal_key":"1111111111111111111111111111111111111111111111111111111111111111","group":"default","date_add":0} 2022-02-11 14:55:11,371 - wazuh_testing - DEBUG - 2022/02/11 18:54:51 wazuh-db[14486] wdb_global.c:89 at wdb_global_insert_agent(): DEBUG: SQLite: UNIQUE constraint failed: agent.id 2022-02-11 14:55:11,371 - wazuh_testing - DEBUG - 2022/02/11 18:54:51 wazuh-db[14486] wdb_parser.c:4784 at wdb_parse_global_insert_agent(): DEBUG: Global DB Cannot execute SQL query; err database queue/db/global.db: UNIQUE constraint failed: agent.id 2022-02-11 14:55:11,371 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-agent1 and message: .*Sending integrity control message: (.+)$ 2022-02-11 14:55:11,371 - wazuh_testing - DEBUG - 2022/02/11 18:54:51 wazuh-db[14486] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-group {"id":1,"group":"default"} 2022-02-11 14:55:11,371 - wazuh_testing - DEBUG - 2022/02/11 18:54:51 wazuh-db[14486] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: delete-agent-belong 1 2022-02-11 14:55:11,372 - wazuh_testing - DEBUG - 2022/02/11 18:54:51 wazuh-db[14486] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: find-group default 2022-02-11 14:55:11,372 - wazuh_testing - DEBUG - 2022/02/11 18:54:51 wazuh-db[14486] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: insert-agent-belong {"id_group":1,"id_agent":1} 2022-02-11 14:55:11,372 - wazuh_testing - DEBUG - 2022/02/11 18:54:51 wazuh-db[14486] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: get-all-agents last_id 0 2022-02-11 14:55:11,373 - wazuh_testing - DEBUG - 2022/02/11 18:54:51 wazuh-db[14486] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: select-groups 2022-02-11 14:55:11,373 - wazuh_testing - DEBUG - 2022/02/11 18:54:51 wazuh-db[14486] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: find-group default 2022-02-11 14:55:11,373 - wazuh_testing - DEBUG - 2022/02/11 18:54:51 wazuh-db[14486] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: get-all-agents last_id 0 2022-02-11 14:55:11,373 - wazuh_testing - DEBUG - 2022/02/11 18:54:51 wazuh-db[14486] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: select-agent-group 1 2022-02-11 14:55:11,374 - wazuh_testing - DEBUG - 2022/02/11 18:54:51 wazuh-db[14486] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: delete-agent-belong 1 2022-02-11 14:55:11,374 - wazuh_testing - DEBUG - 2022/02/11 18:54:51 wazuh-db[14486] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: find-group default 2022-02-11 14:55:11,374 - wazuh_testing - DEBUG - 2022/02/11 18:54:51 wazuh-db[14486] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: insert-agent-belong {"id_group":1,"id_agent":1} 2022-02-11 14:55:11,375 - wazuh_testing - DEBUG - 2022/02/11 18:54:51 wazuh-db[14486] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: select-agent-name 1 2022-02-11 14:55:11,375 - wazuh_testing - DEBUG - 2022/02/11 18:54:51 wazuh-db[14486] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: select-agent-name 1 2022-02-11 14:55:11,375 - wazuh_testing - DEBUG - 2022/02/11 18:54:53 wazuh-db[14486] main.c:290 at run_dealer(): DEBUG: New client connected (16). 2022-02-11 14:55:11,375 - wazuh_testing - DEBUG - 2022/02/11 18:54:53 wazuh-db[14486] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-keepalive {"id":1,"connection_status":"pending","sync_status":"synced"} 2022-02-11 14:55:11,375 - wazuh_testing - DEBUG - 2022/02/11 18:54:53 wazuh-db[14486] main.c:290 at run_dealer(): DEBUG: New client connected (18). 2022-02-11 14:55:11,376 - wazuh_testing - DEBUG - 2022/02/11 18:54:53 wazuh-db[14486] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64","os_arch":"x86_64"} 2022-02-11 14:55:11,376 - wazuh_testing - DEBUG - 2022/02/11 18:54:57 wazuh-db[14486] wdb.c:918 at wdb_commit_old(): DEBUG: Agent 'mitre' database commited. Time: 0.042 ms. 2022-02-11 14:55:11,376 - wazuh_testing - DEBUG - 2022/02/11 18:54:57 wazuh-db[14486] main.c:290 at run_dealer(): DEBUG: New client connected (19). 2022-02-11 14:55:11,377 - wazuh_testing - DEBUG - 2022/02/11 18:54:57 wazuh-db[14486] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1644602082 2022-02-11 14:55:11,377 - wazuh_testing - DEBUG - 2022/02/11 18:54:57 wazuh-db[14486] main.c:290 at run_dealer(): DEBUG: New client connected (20). 2022-02-11 14:55:11,377 - wazuh_testing - DEBUG - 2022/02/11 18:54:57 wazuh-db[14486] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck save2 {"path":"/testdir1/testdir1.txt","version":2,"timestamp":1644602097,"attributes":{"type":"file","size":0,"perm":"rw-r--r--","uid":"0","gid":"0","user_name":"root","group_name":"root","inode":17179747,"mtime":1644602077,"hash_md5":"d41d8cd98f00b204e9800998ecf8427e","hash_sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","hash_sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","checksum":"81af4bf6ffbfe6505b173f2243e65e454f2bafd5"}} 2022-02-11 14:55:11,379 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-manager and message: .*Agent 001 query: (.+) save2 2022-02-11 14:55:12,348 - wazuh_testing - DEBUG - Cleaning temporal files... 2022-02-11 14:55:12,348 - wazuh_testing - DEBUG - Checking results... 2022-02-11 14:55:12,349 - wazuh_testing - DEBUG - Received from wazuh-agent1 the expected message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1644602105,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"7a6b6cca3d5b0c4708859eaf35f191e6e6fce693"}} 2022-02-11 14:55:12,350 - wazuh_testing - DEBUG - Received from wazuh-manager the expected message: syscheck 2022-02-11 14:55:28,319 - wazuh_testing - DEBUG - Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-11 14:55:28,320 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-11 14:55:28,320 - wazuh_testing - DEBUG - Starting file composer for wazuh-agent1 and path: /var/ossec/logs/ossec.log. Composite file in /home/camila/Escritorio/repo/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-agent1_ossec.log.tmp 2022-02-11 14:55:28,321 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-agent1 and message: .*Initializing FIM Integrity Synchronization check. (.+)$ 2022-02-11 14:55:29,823 - wazuh_testing - DEBUG - 2022/02/11 18:55:17 wazuh-logcollector: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:55:29,823 - wazuh_testing - DEBUG - 2022/02/11 18:55:17 wazuh-syscheckd[17711] sig_op.c:49 at HandleSIG(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:55:29,824 - wazuh_testing - DEBUG - 2022/02/11 18:55:17 wazuh-agentd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:55:29,824 - wazuh_testing - DEBUG - 2022/02/11 18:55:17 wazuh-execd: INFO: (1314): Shutdown received. Deleting responses. 2022-02-11 14:55:29,824 - wazuh_testing - DEBUG - 2022/02/11 18:55:17 wazuh-execd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:55:29,824 - wazuh_testing - DEBUG - 2022/02/11 18:55:21 wazuh-syscheckd[18208] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 14:55:29,824 - wazuh_testing - DEBUG - 2022/02/11 18:55:21 wazuh-syscheckd[18208] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 14:55:29,825 - wazuh_testing - DEBUG - 2022/02/11 18:55:21 wazuh-syscheckd[18208] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-11 14:55:29,825 - wazuh_testing - DEBUG - 2022/02/11 18:55:21 wazuh-syscheckd[18208] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-11 14:55:29,825 - wazuh_testing - DEBUG - 2022/02/11 18:55:21 wazuh-syscheckd[18208] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-11 14:55:29,825 - wazuh_testing - DEBUG - 2022/02/11 18:55:21 wazuh-syscheckd[18208] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-11 14:55:29,826 - wazuh_testing - DEBUG - 2022/02/11 18:55:21 wazuh-syscheckd[18208] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-11 14:55:29,826 - wazuh_testing - DEBUG - 2022/02/11 18:55:21 wazuh-syscheckd[18208] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ 2022-02-11 14:55:29,826 - wazuh_testing - DEBUG - 2022/02/11 18:55:21 wazuh-syscheckd[18208] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ OK? 2022-02-11 14:55:29,826 - wazuh_testing - DEBUG - 2022/02/11 18:55:21 wazuh-syscheckd[18208] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-11 14:55:29,827 - wazuh_testing - DEBUG - 2022/02/11 18:55:21 wazuh-syscheckd[18208] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-11 14:55:29,827 - wazuh_testing - DEBUG - 2022/02/11 18:55:21 wazuh-syscheckd[18208] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 14:55:29,827 - wazuh_testing - DEBUG - 2022/02/11 18:55:21 wazuh-syscheckd[18208] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 14:55:29,827 - wazuh_testing - DEBUG - 2022/02/11 18:55:21 wazuh-syscheckd[18208] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 14:55:29,828 - wazuh_testing - DEBUG - 2022/02/11 18:55:21 wazuh-syscheckd[18208] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 14:55:29,828 - wazuh_testing - DEBUG - 2022/02/11 18:55:21 wazuh-syscheckd[18208] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 14:55:29,828 - wazuh_testing - DEBUG - 2022/02/11 18:55:21 wazuh-syscheckd[18208] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 14:55:29,828 - wazuh_testing - DEBUG - 2022/02/11 18:55:21 wazuh-execd: INFO: Started (pid: 18221). 2022-02-11 14:55:29,828 - wazuh_testing - DEBUG - 2022/02/11 18:55:22 wazuh-agentd: INFO: (1410): Reading authentication keys file. 2022-02-11 14:55:29,829 - wazuh_testing - DEBUG - 2022/02/11 18:55:22 wazuh-agentd: INFO: Using notify time: 10 and max time to reconnect: 60 2022-02-11 14:55:29,829 - wazuh_testing - DEBUG - 2022/02/11 18:55:22 wazuh-agentd: INFO: Version detected -> Linux |wazuh-agent1 |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64 [Debian GNU/Linux|debian: 10 (buster)] - Wazuh v4.2.5 2022-02-11 14:55:29,829 - wazuh_testing - DEBUG - 2022/02/11 18:55:22 wazuh-agentd: INFO: Started (pid: 18232). 2022-02-11 14:55:29,830 - wazuh_testing - DEBUG - 2022/02/11 18:55:22 wazuh-agentd: INFO: Server IP Address: wazuh-manager/172.17.0.2 2022-02-11 14:55:29,830 - wazuh_testing - DEBUG - 2022/02/11 18:55:22 wazuh-agentd: INFO: Using AES as encryption method. 2022-02-11 14:55:29,830 - wazuh_testing - DEBUG - 2022/02/11 18:55:22 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 14:55:29,830 - wazuh_testing - DEBUG - 2022/02/11 18:55:22 wazuh-agentd: INFO: (4102): Connected to the server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 14:55:29,830 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 14:55:29,831 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 14:55:29,831 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-11 14:55:29,831 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-11 14:55:29,831 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-11 14:55:29,832 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-11 14:55:29,832 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-11 14:55:29,832 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ 2022-02-11 14:55:29,833 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ OK? 2022-02-11 14:55:29,833 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-11 14:55:29,833 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-11 14:55:29,833 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 14:55:29,833 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 14:55:29,834 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 14:55:29,834 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 14:55:29,834 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 14:55:29,834 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 14:55:29,834 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 rootcheck[18244] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled. 2022-02-11 14:55:29,835 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:55:29,835 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] syscom.c:123 at syscom_main(): DEBUG: (6284): Local requests thread ready. 2022-02-11 14:55:29,835 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] mq_op.c:47 at StartMQ(): DEBUG: Connected succesfully to 'queue/sockets/queue' after 0 attempts 2022-02-11 14:55:29,835 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] mq_op.c:48 at StartMQ(): DEBUG: (unix_domain) Maximum send buffer set to: '212992'. 2022-02-11 14:55:29,835 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:185 at main(): INFO: Started (pid: 18246). 2022-02-11 14:55:29,836 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:193 at main(): INFO: (6003): Monitoring path: '/bin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 14:55:29,836 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:193 at main(): INFO: (6003): Monitoring path: '/boot', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 14:55:29,836 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:193 at main(): INFO: (6003): Monitoring path: '/etc', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 14:55:29,836 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:193 at main(): INFO: (6003): Monitoring path: '/sbin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 14:55:29,836 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir1', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 14:55:29,837 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir2', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | realtime'. 2022-02-11 14:55:29,837 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir3', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | whodata'. 2022-02-11 14:55:29,837 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/bin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 14:55:29,837 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/sbin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 14:55:29,837 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:215 at main(): DEBUG: (6357): Maximum disk quota size limit configured to '1048576 KB'. 2022-02-11 14:55:29,838 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mtab' 2022-02-11 14:55:29,838 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/hosts.deny' 2022-02-11 14:55:29,838 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mail/statistics' 2022-02-11 14:55:29,839 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random-seed' 2022-02-11 14:55:29,839 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random.seed' 2022-02-11 14:55:29,840 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/adjtime' 2022-02-11 14:55:29,840 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/httpd/logs' 2022-02-11 14:55:29,840 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/utmpx' 2022-02-11 14:55:29,840 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/wtmpx' 2022-02-11 14:55:29,840 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/cups/certs' 2022-02-11 14:55:29,840 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/dumpdates' 2022-02-11 14:55:29,841 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/svc/volatile' 2022-02-11 14:55:29,841 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/security' 2022-02-11 14:55:29,841 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/debug' 2022-02-11 14:55:29,841 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/dev/core' 2022-02-11 14:55:29,841 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '^/proc' 2022-02-11 14:55:29,841 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '.log$|.swp$' 2022-02-11 14:55:29,841 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:235 at main(): INFO: (6004): No diff for file: '/etc/ssl/private.key' 2022-02-11 14:55:29,842 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:245 at main(): INFO: (6016): Directory set for real time monitoring: '/testdir2'. 2022-02-11 14:55:29,842 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] syscheck_audit.c:243 at audit_init(): WARNING: (6924): Who-data engine cannot start because Auditd is not running. 2022-02-11 14:55:29,842 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:264 at main(): WARNING: (6913): Who-data engine could not start. Switching who-data to real-time. 2022-02-11 14:55:29,842 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] run_check.c:194 at start_daemon(): DEBUG: (6320): Setting process priority to: '10' 2022-02-11 14:55:29,842 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:55:29,842 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] run_check.c:229 at start_daemon(): INFO: (6000): Starting daemon... 2022-02-11 14:55:29,842 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] run_check.c:232 at start_daemon(): INFO: (6010): File integrity monitoring scan frequency: 20 seconds 2022-02-11 14:55:29,842 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 14:55:29,843 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644602123}} 2022-02-11 14:55:29,843 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 14:55:29,843 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-11 14:55:29,843 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-11 14:55:29,843 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-11 14:55:29,843 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-11 14:55:29,844 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 14:55:29,844 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 14:55:29,844 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644602123}} 2022-02-11 14:55:29,844 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.339 sec (0.338 clock sec) 2022-02-11 14:55:29,844 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1622, path count: 1628 2022-02-11 14:55:29,844 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:55:29,844 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:55:29,845 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:55:29,845 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. 2022-02-11 14:55:29,845 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-agent1 and message: .*Initializing FIM Integrity Synchronization check. (.+)$ 2022-02-11 14:55:30,825 - wazuh_testing - DEBUG - Cleaning temporal files... 2022-02-11 14:55:30,826 - wazuh_testing - DEBUG - Checking results... 2022-02-11 14:55:30,827 - wazuh_testing - DEBUG - Received from wazuh-agent1 the expected message: Sync interval is 300 seconds.
-------------------------------Captured log call--------------------------------
DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:1005 Cleaning temporal files... DEBUG wazuh_testing:monitoring.py:994 Checking results... DEBUG wazuh_testing:monitoring.py:1000 Received from wazuh-agent1 the expected message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1644602105,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"7a6b6cca3d5b0c4708859eaf35f191e6e6fce693"}} DEBUG wazuh_testing:monitoring.py:1000 Received from wazuh-manager the expected message: syscheck DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:1005 Cleaning temporal files... DEBUG wazuh_testing:monitoring.py:994 Checking results... DEBUG wazuh_testing:monitoring.py:1000 Received from wazuh-agent1 the expected message: Sync interval is 300 seconds.

Passed

test_synchronization.py::test_synchronization[testdir1-modify-wazuh-manager]

46.89

------------------------------Captured stderr call------------------------------
2022-02-11 14:55:44,715 - wazuh_testing - DEBUG - Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-11 14:55:44,716 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-11 14:55:44,717 - wazuh_testing - DEBUG - Starting file composer for wazuh-agent1 and path: /var/ossec/logs/ossec.log. Composite file in /home/camila/Escritorio/repo/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-agent1_ossec.log.tmp 2022-02-11 14:55:44,717 - wazuh_testing - DEBUG - Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-11 14:55:44,718 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-agent1 and message: .*Sending integrity control message: (.+)$ 2022-02-11 14:55:44,719 - wazuh_testing - DEBUG - Starting file composer for wazuh-manager and path: /var/ossec/logs/ossec.log. Composite file in /home/camila/Escritorio/repo/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-manager_ossec.log.tmp 2022-02-11 14:55:44,719 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-11 14:55:44,720 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-manager and message: .*Agent 001 query: (.+) save2 2022-02-11 14:55:46,220 - wazuh_testing - DEBUG - 2022/02/11 18:55:17 wazuh-logcollector: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:55:46,220 - wazuh_testing - DEBUG - 2022/02/11 18:55:17 wazuh-syscheckd[17711] sig_op.c:49 at HandleSIG(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:55:46,220 - wazuh_testing - DEBUG - 2022/02/11 18:55:17 wazuh-agentd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:55:46,221 - wazuh_testing - DEBUG - 2022/02/11 18:55:17 wazuh-execd: INFO: (1314): Shutdown received. Deleting responses. 2022-02-11 14:55:46,221 - wazuh_testing - DEBUG - 2022/02/11 18:55:17 wazuh-execd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:55:46,221 - wazuh_testing - DEBUG - 2022/02/11 18:55:21 wazuh-syscheckd[18208] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 14:55:46,221 - wazuh_testing - DEBUG - 2022/02/11 18:55:21 wazuh-syscheckd[18208] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 14:55:46,221 - wazuh_testing - DEBUG - 2022/02/11 18:55:21 wazuh-syscheckd[18208] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-11 14:55:46,222 - wazuh_testing - DEBUG - 2022/02/11 18:55:21 wazuh-syscheckd[18208] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-11 14:55:46,222 - wazuh_testing - DEBUG - 2022/02/11 18:55:14 wazuh-db[14486] main.c:290 at run_dealer(): DEBUG: New client connected (34). 2022-02-11 14:55:46,222 - wazuh_testing - DEBUG - 2022/02/11 18:55:21 wazuh-syscheckd[18208] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-11 14:55:46,222 - wazuh_testing - DEBUG - 2022/02/11 18:55:21 wazuh-syscheckd[18208] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-11 14:55:46,223 - wazuh_testing - DEBUG - 2022/02/11 18:55:21 wazuh-syscheckd[18208] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-11 14:55:46,223 - wazuh_testing - DEBUG - 2022/02/11 18:55:21 wazuh-syscheckd[18208] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ 2022-02-11 14:55:46,223 - wazuh_testing - DEBUG - 2022/02/11 18:55:14 wazuh-db[14486] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64","os_arch":"x86_64"} 2022-02-11 14:55:46,223 - wazuh_testing - DEBUG - 2022/02/11 18:55:21 wazuh-syscheckd[18208] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ OK? 2022-02-11 14:55:46,223 - wazuh_testing - DEBUG - 2022/02/11 18:55:17 wazuh-db[14486] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-connection-status {"id":1,"connection_status":"disconnected","sync_status":"synced"} 2022-02-11 14:55:46,224 - wazuh_testing - DEBUG - 2022/02/11 18:55:17 wazuh-db[14486] main.c:290 at run_dealer(): DEBUG: New client connected (35). 2022-02-11 14:55:46,224 - wazuh_testing - DEBUG - 2022/02/11 18:55:21 wazuh-syscheckd[18208] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-11 14:55:46,224 - wazuh_testing - DEBUG - 2022/02/11 18:55:17 wazuh-db[14486] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: get-labels 1 2022-02-11 14:55:46,224 - wazuh_testing - DEBUG - 2022/02/11 18:55:21 wazuh-syscheckd[18208] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-11 14:55:46,224 - wazuh_testing - DEBUG - 2022/02/11 18:55:20 wazuh-db[14486] wdb.c:918 at wdb_commit_old(): DEBUG: Agent '001' database commited. Time: 12.066 ms. 2022-02-11 14:55:46,224 - wazuh_testing - DEBUG - 2022/02/11 18:55:21 wazuh-syscheckd[18208] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 14:55:46,224 - wazuh_testing - DEBUG - 2022/02/11 18:55:21 wazuh-db[14486] main.c:290 at run_dealer(): DEBUG: New client connected (21). 2022-02-11 14:55:46,224 - wazuh_testing - DEBUG - 2022/02/11 18:55:21 wazuh-db[14486] wdb_parser.c:928 at wdb_parse(): DEBUG: Task query: upgrade_cancel_tasks {"node":"wazuh-master"} 2022-02-11 14:55:46,224 - wazuh_testing - DEBUG - 2022/02/11 18:55:21 wazuh-syscheckd[18208] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 14:55:46,225 - wazuh_testing - DEBUG - 2022/02/11 18:55:21 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 21 disconnected. 2022-02-11 14:55:46,225 - wazuh_testing - DEBUG - 2022/02/11 18:55:21 wazuh-syscheckd[18208] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 14:55:46,225 - wazuh_testing - DEBUG - 2022/02/11 18:55:22 wazuh-db[14486] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-keepalive {"id":1,"connection_status":"pending","sync_status":"synced"} 2022-02-11 14:55:46,225 - wazuh_testing - DEBUG - 2022/02/11 18:55:21 wazuh-syscheckd[18208] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 14:55:46,225 - wazuh_testing - DEBUG - 2022/02/11 18:55:21 wazuh-syscheckd[18208] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 14:55:46,226 - wazuh_testing - DEBUG - 2022/02/11 18:55:26 wazuh-db[14486] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64","os_arch":"x86_64"} 2022-02-11 14:55:46,226 - wazuh_testing - DEBUG - 2022/02/11 18:55:21 wazuh-syscheckd[18208] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 14:55:46,226 - wazuh_testing - DEBUG - 2022/02/11 18:55:26 wazuh-db[14486] main.c:290 at run_dealer(): DEBUG: New client connected (21). 2022-02-11 14:55:46,226 - wazuh_testing - DEBUG - 2022/02/11 18:55:21 wazuh-execd: INFO: Started (pid: 18221). 2022-02-11 14:55:46,226 - wazuh_testing - DEBUG - 2022/02/11 18:55:26 wazuh-db[14486] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1644602123 2022-02-11 14:55:46,226 - wazuh_testing - DEBUG - 2022/02/11 18:55:22 wazuh-agentd: INFO: (1410): Reading authentication keys file. 2022-02-11 14:55:46,227 - wazuh_testing - DEBUG - 2022/02/11 18:55:26 wazuh-db[14486] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update end_scan 1644602123 2022-02-11 14:55:46,227 - wazuh_testing - DEBUG - 2022/02/11 18:55:22 wazuh-agentd: INFO: Using notify time: 10 and max time to reconnect: 60 2022-02-11 14:55:46,227 - wazuh_testing - DEBUG - 2022/02/11 18:55:22 wazuh-agentd: INFO: Version detected -> Linux |wazuh-agent1 |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64 [Debian GNU/Linux|debian: 10 (buster)] - Wazuh v4.2.5 2022-02-11 14:55:46,227 - wazuh_testing - DEBUG - 2022/02/11 18:55:26 wazuh-db[14486] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_global {"id":1644602123,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"30e88bbb0f161ad5eb67fa3dfe3db60a39f80b5b"} 2022-02-11 14:55:46,227 - wazuh_testing - DEBUG - 2022/02/11 18:55:22 wazuh-agentd: INFO: Started (pid: 18232). 2022-02-11 14:55:46,227 - wazuh_testing - DEBUG - 2022/02/11 18:55:26 wazuh-db[14486] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 1.476 ms. 2022-02-11 14:55:46,228 - wazuh_testing - DEBUG - 2022/02/11 18:55:22 wazuh-agentd: INFO: Server IP Address: wazuh-manager/172.17.0.2 2022-02-11 14:55:46,228 - wazuh_testing - DEBUG - 2022/02/11 18:55:22 wazuh-agentd: INFO: Using AES as encryption method. 2022-02-11 14:55:46,228 - wazuh_testing - DEBUG - 2022/02/11 18:55:26 wazuh-db[14486] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602123,"version":2,"begin":"/bin/bash","end":"/sbin/ctrlaltdel","tail":"/sbin/debugfs","checksum":"478eb6380ccc2c04fef49b0edc2715bece72ba41"} 2022-02-11 14:55:46,228 - wazuh_testing - DEBUG - 2022/02/11 18:55:22 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 14:55:46,228 - wazuh_testing - DEBUG - 2022/02/11 18:55:22 wazuh-agentd: INFO: (4102): Connected to the server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 14:55:46,228 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 14:55:46,229 - wazuh_testing - DEBUG - 2022/02/11 18:55:26 wazuh-db[14486] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602123,"version":2,"begin":"/sbin/debugfs","end":"/usr/sbin/zic","checksum":"f3f5d06e0887e000619927383fbff6a8e6f1783c"} 2022-02-11 14:55:46,229 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 14:55:46,229 - wazuh_testing - DEBUG - 2022/02/11 18:55:26 wazuh-db[14486] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.520 ms. 2022-02-11 14:55:46,229 - wazuh_testing - DEBUG - 2022/02/11 18:55:26 wazuh-db[14486] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.490 ms. 2022-02-11 14:55:46,229 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-11 14:55:46,229 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-11 14:55:46,229 - wazuh_testing - DEBUG - 2022/02/11 18:55:26 wazuh-db[14486] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602123,"version":2,"begin":"/sbin/debugfs","end":"/usr/bin/pdb","tail":"/usr/bin/pdb2","checksum":"065ab3bed34964b92d530764cf24456ca8f52a40"} 2022-02-11 14:55:46,229 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-11 14:55:46,230 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-11 14:55:46,230 - wazuh_testing - DEBUG - 2022/02/11 18:55:26 wazuh-db[14486] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602123,"version":2,"begin":"/usr/bin/pdb2","end":"/usr/sbin/zic","checksum":"f13d51f7876684d6bc17db143ee1529b892c54d2"} 2022-02-11 14:55:46,230 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-11 14:55:46,230 - wazuh_testing - DEBUG - 2022/02/11 18:55:26 wazuh-db[14486] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.422 ms. 2022-02-11 14:55:46,230 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ 2022-02-11 14:55:46,230 - wazuh_testing - DEBUG - 2022/02/11 18:55:26 wazuh-db[14486] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.307 ms. 2022-02-11 14:55:46,230 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ OK? 2022-02-11 14:55:46,231 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-11 14:55:46,231 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-11 14:55:46,231 - wazuh_testing - DEBUG - 2022/02/11 18:55:26 wazuh-db[14486] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602123,"version":2,"begin":"/sbin/debugfs","end":"/usr/bin/dpkg-divert","tail":"/usr/bin/dpkg-genbuildinfo","checksum":"8c4e55b1f5769fbc8fee9952284f5231bc422f1e"} 2022-02-11 14:55:46,231 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 14:55:46,231 - wazuh_testing - DEBUG - 2022/02/11 18:55:26 wazuh-db[14486] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.147 ms. 2022-02-11 14:55:46,231 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 14:55:46,231 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 14:55:46,231 - wazuh_testing - DEBUG - 2022/02/11 18:55:26 wazuh-db[14486] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602123,"version":2,"begin":"/usr/bin/dpkg-genbuildinfo","end":"/usr/bin/pdb","checksum":"fcd12ca69011f5033c3706ba868e7f2983050598"} 2022-02-11 14:55:46,232 - wazuh_testing - DEBUG - 2022/02/11 18:55:26 wazuh-db[14486] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.129 ms. 2022-02-11 14:55:46,232 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 14:55:46,232 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 14:55:46,232 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 14:55:46,232 - wazuh_testing - DEBUG - 2022/02/11 18:55:26 wazuh-db[14486] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602123,"version":2,"begin":"/sbin/debugfs","end":"/usr/bin/apt-extracttemplates","tail":"/usr/bin/apt-ftparchive","checksum":"a08a247c17332b9363f9205ba92d0a74c7739fc4"} 2022-02-11 14:55:46,232 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 rootcheck[18244] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled. 2022-02-11 14:55:46,232 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:55:46,232 - wazuh_testing - DEBUG - 2022/02/11 18:55:26 wazuh-db[14486] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602123,"version":2,"begin":"/usr/bin/apt-ftparchive","end":"/usr/bin/dpkg-divert","checksum":"ab79628f5b16446ec1a1f2daeaf1afd2511680e1"} 2022-02-11 14:55:46,233 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] syscom.c:123 at syscom_main(): DEBUG: (6284): Local requests thread ready. 2022-02-11 14:55:46,233 - wazuh_testing - DEBUG - 2022/02/11 18:55:26 wazuh-db[14486] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.138 ms. 2022-02-11 14:55:46,233 - wazuh_testing - DEBUG - 2022/02/11 18:55:26 wazuh-db[14486] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.148 ms. 2022-02-11 14:55:46,233 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] mq_op.c:47 at StartMQ(): DEBUG: Connected succesfully to 'queue/sockets/queue' after 0 attempts 2022-02-11 14:55:46,233 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] mq_op.c:48 at StartMQ(): DEBUG: (unix_domain) Maximum send buffer set to: '212992'. 2022-02-11 14:55:46,233 - wazuh_testing - DEBUG - 2022/02/11 18:55:26 wazuh-db[14486] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602123,"version":2,"begin":"/sbin/debugfs","end":"/sbin/mkswap","tail":"/sbin/nameif","checksum":"57eae3b131abc8053756527449ccaf84d8226ff2"} 2022-02-11 14:55:46,233 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:185 at main(): INFO: Started (pid: 18246). 2022-02-11 14:55:46,233 - wazuh_testing - DEBUG - 2022/02/11 18:55:26 wazuh-db[14486] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.126 ms. 2022-02-11 14:55:46,233 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:193 at main(): INFO: (6003): Monitoring path: '/bin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 14:55:46,234 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:193 at main(): INFO: (6003): Monitoring path: '/boot', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 14:55:46,234 - wazuh_testing - DEBUG - 2022/02/11 18:55:27 wazuh-db[14486] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602123,"version":2,"begin":"/sbin/nameif","end":"/usr/bin/apt-extracttemplates","checksum":"2c55e994d598331eec01b63340d458de3ad09198"} 2022-02-11 14:55:46,234 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:193 at main(): INFO: (6003): Monitoring path: '/etc', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 14:55:46,234 - wazuh_testing - DEBUG - 2022/02/11 18:55:27 wazuh-db[14486] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.147 ms. 2022-02-11 14:55:46,234 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:193 at main(): INFO: (6003): Monitoring path: '/sbin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 14:55:46,234 - wazuh_testing - DEBUG - 2022/02/11 18:55:27 wazuh-db[14486] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602123,"version":2,"begin":"/sbin/nameif","end":"/sbin/sulogin","tail":"/sbin/swaplabel","checksum":"c21468dc0dfc12ca36a7129f43587e57807e1deb"} 2022-02-11 14:55:46,234 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir1', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 14:55:46,234 - wazuh_testing - DEBUG - 2022/02/11 18:55:27 wazuh-db[14486] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.085 ms. 2022-02-11 14:55:46,235 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir2', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | realtime'. 2022-02-11 14:55:46,235 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir3', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | whodata'. 2022-02-11 14:55:46,235 - wazuh_testing - DEBUG - 2022/02/11 18:55:27 wazuh-db[14486] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602123,"version":2,"begin":"/sbin/swaplabel","end":"/usr/bin/apt-extracttemplates","checksum":"84a201764c34c7c163e129b53e15f500373919f5"} 2022-02-11 14:55:46,235 - wazuh_testing - DEBUG - 2022/02/11 18:55:27 wazuh-db[14486] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.061 ms. 2022-02-11 14:55:46,235 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/bin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 14:55:46,235 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/sbin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 14:55:46,235 - wazuh_testing - DEBUG - 2022/02/11 18:55:27 wazuh-db[14486] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602123,"version":2,"begin":"/sbin/swaplabel","end":"/sbin/zramctl","tail":"/testdir1/testdir1.txt","checksum":"1212bd95c0c53ba86e112b40a0b267faf3f2be0d"} 2022-02-11 14:55:46,235 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:215 at main(): DEBUG: (6357): Maximum disk quota size limit configured to '1048576 KB'. 2022-02-11 14:55:46,235 - wazuh_testing - DEBUG - 2022/02/11 18:55:27 wazuh-db[14486] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.067 ms. 2022-02-11 14:55:46,235 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mtab' 2022-02-11 14:55:46,235 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/hosts.deny' 2022-02-11 14:55:46,235 - wazuh_testing - DEBUG - 2022/02/11 18:55:27 wazuh-db[14486] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602123,"version":2,"begin":"/testdir1/testdir1.txt","end":"/usr/bin/apt-extracttemplates","checksum":"5ab8d75eb93cb176331f7b7d368c417f4988b7d0"} 2022-02-11 14:55:46,236 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mail/statistics' 2022-02-11 14:55:46,236 - wazuh_testing - DEBUG - 2022/02/11 18:55:27 wazuh-db[14486] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.085 ms. 2022-02-11 14:55:46,236 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random-seed' 2022-02-11 14:55:46,236 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random.seed' 2022-02-11 14:55:46,236 - wazuh_testing - DEBUG - 2022/02/11 18:55:27 wazuh-db[14486] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602123,"version":2,"begin":"/testdir1/testdir1.txt","end":"/usr/bin/aclocal-1.16","tail":"/usr/bin/addpart","checksum":"babad00412333f227208b88a8e2525d1f9106bc4"} 2022-02-11 14:55:46,236 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/adjtime' 2022-02-11 14:55:46,236 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/httpd/logs' 2022-02-11 14:55:46,236 - wazuh_testing - DEBUG - 2022/02/11 18:55:27 wazuh-db[14486] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602123,"version":2,"begin":"/usr/bin/addpart","end":"/usr/bin/apt-extracttemplates","checksum":"7d1a3bbe28f2c9e567f8311757d46ea5365d7112"} 2022-02-11 14:55:46,236 - wazuh_testing - DEBUG - 2022/02/11 18:55:27 wazuh-db[14486] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.056 ms. 2022-02-11 14:55:46,236 - wazuh_testing - DEBUG - 2022/02/11 18:55:27 wazuh-db[14486] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.065 ms. 2022-02-11 14:55:46,237 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/utmpx' 2022-02-11 14:55:46,237 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/wtmpx' 2022-02-11 14:55:46,237 - wazuh_testing - DEBUG - 2022/02/11 18:55:27 wazuh-db[14486] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602123,"version":2,"begin":"/testdir1/testdir1.txt","end":"/usr/bin/2to3-2.7","tail":"/usr/bin/[","checksum":"37c18d98d033f6a2ee930f1407ee50d5b0366af2"} 2022-02-11 14:55:46,237 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/cups/certs' 2022-02-11 14:55:46,237 - wazuh_testing - DEBUG - 2022/02/11 18:55:27 wazuh-db[14486] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.059 ms. 2022-02-11 14:55:46,237 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/dumpdates' 2022-02-11 14:55:46,237 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/svc/volatile' 2022-02-11 14:55:46,237 - wazuh_testing - DEBUG - 2022/02/11 18:55:27 wazuh-db[14486] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602123,"version":2,"begin":"/usr/bin/[","end":"/usr/bin/aclocal-1.16","checksum":"0f1d35a6565c33bf9697c50fd2d7d2a4ebccbc45"} 2022-02-11 14:55:46,237 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/security' 2022-02-11 14:55:46,238 - wazuh_testing - DEBUG - 2022/02/11 18:55:27 wazuh-db[14486] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.052 ms. 2022-02-11 14:55:46,238 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/debug' 2022-02-11 14:55:46,238 - wazuh_testing - DEBUG - 2022/02/11 18:55:27 wazuh-db[14486] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602123,"version":2,"begin":"/testdir1/testdir1.txt","end":"/testdir1/testdir1.txt","tail":"/testdir1/tmp455bwhgt","checksum":"05b06dc38cc601d640e0763aaa1b6e8416884906"} 2022-02-11 14:55:46,238 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/dev/core' 2022-02-11 14:55:46,238 - wazuh_testing - DEBUG - 2022/02/11 18:55:27 wazuh-db[14486] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.070 ms. 2022-02-11 14:55:46,238 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '^/proc' 2022-02-11 14:55:46,238 - wazuh_testing - DEBUG - 2022/02/11 18:55:28 wazuh-db[14486] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602123,"version":2,"begin":"/testdir1/tmp455bwhgt","end":"/usr/bin/2to3-2.7","checksum":"203d7bf715ca718d5eb8b256f3deb53aeaca757c"} 2022-02-11 14:55:46,238 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '.log$|.swp$' 2022-02-11 14:55:46,238 - wazuh_testing - DEBUG - 2022/02/11 18:55:28 wazuh-db[14486] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.042 ms. 2022-02-11 14:55:46,239 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:235 at main(): INFO: (6004): No diff for file: '/etc/ssl/private.key' 2022-02-11 14:55:46,239 - wazuh_testing - DEBUG - 2022/02/11 18:55:28 wazuh-db[14486] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602123,"version":2,"begin":"/testdir1/tmp455bwhgt","end":"/testdir1/tmp455bwhgt","tail":"/usr/bin/2to3-2.7","checksum":"a6dee7df792943682003b702ea80223b4fae8d18"} 2022-02-11 14:55:46,239 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:245 at main(): INFO: (6016): Directory set for real time monitoring: '/testdir2'. 2022-02-11 14:55:46,239 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] syscheck_audit.c:243 at audit_init(): WARNING: (6924): Who-data engine cannot start because Auditd is not running. 2022-02-11 14:55:46,239 - wazuh_testing - DEBUG - 2022/02/11 18:55:28 wazuh-db[14486] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602123,"version":2,"begin":"/usr/bin/2to3-2.7","end":"/usr/bin/2to3-2.7","checksum":"f621f8dd560e58c5f017dfd42d98bb3a72466d1d"} 2022-02-11 14:55:46,239 - wazuh_testing - DEBUG - 2022/02/11 18:55:28 wazuh-db[14486] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.024 ms. 2022-02-11 14:55:46,239 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] main.c:264 at main(): WARNING: (6913): Who-data engine could not start. Switching who-data to real-time. 2022-02-11 14:55:46,239 - wazuh_testing - DEBUG - 2022/02/11 18:55:28 wazuh-db[14486] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file save2 {"path":"/testdir1/tmp455bwhgt","timestamp":1644602123,"version":2,"attributes":{"type":"file","size":8,"perm":"rw-r--r--","uid":"0","gid":"0","user_name":"root","group_name":"root","inode":17314756,"mtime":1644602119,"hash_md5":"e770e54c4c42d3307c141c0c8948992a","hash_sha1":"9eab19985b11b15f91f936e463ea74f1dfe88e32","hash_sha256":"b1893f8d4b1596c20d6f83a784b2b0468c22fb83ce4ff2033ff86a37865d41d8","checksum":"aa968351684f1c1ab8e5401d30ca6bc1f6a75d92"}} 2022-02-11 14:55:46,239 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] run_check.c:194 at start_daemon(): DEBUG: (6320): Setting process priority to: '10' 2022-02-11 14:55:46,239 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:55:46,240 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] run_check.c:229 at start_daemon(): INFO: (6000): Starting daemon... 2022-02-11 14:55:46,240 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] run_check.c:232 at start_daemon(): INFO: (6010): File integrity monitoring scan frequency: 20 seconds 2022-02-11 14:55:46,240 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 14:55:46,240 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-manager and message: .*Agent 001 query: (.+) save2 2022-02-11 14:55:46,240 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644602123}} 2022-02-11 14:55:46,240 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 14:55:46,240 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-11 14:55:46,240 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-11 14:55:46,241 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-11 14:55:46,241 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-11 14:55:46,241 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 14:55:46,241 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 14:55:46,241 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644602123}} 2022-02-11 14:55:46,241 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.339 sec (0.338 clock sec) 2022-02-11 14:55:46,242 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1622, path count: 1628 2022-02-11 14:55:46,242 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:55:46,242 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:55:46,242 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:55:46,242 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. 2022-02-11 14:55:46,242 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] run_check.c:568 at symlink_checker_thread(): DEBUG: (6033): Starting symbolic link updater. Interval '600'. 2022-02-11 14:55:46,242 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] run_check.c:387 at fim_run_realtime(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-11 14:55:46,243 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] run_check.c:543 at log_realtime_status(): INFO: (6012): Real-time file integrity monitoring started. 2022-02-11 14:55:46,243 - wazuh_testing - DEBUG - 2022/02/11 18:55:23 wazuh-syscheckd[18244] run_check.c:82 at fim_send_sync_msg(): DEBUG: (6317): Sending integrity control message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1644602123,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"30e88bbb0f161ad5eb67fa3dfe3db60a39f80b5b"}} 2022-02-11 14:55:46,243 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-agent1 and message: .*Sending integrity control message: (.+)$ 2022-02-11 14:55:47,224 - wazuh_testing - DEBUG - Cleaning temporal files... 2022-02-11 14:55:47,224 - wazuh_testing - DEBUG - Checking results... 2022-02-11 14:55:47,225 - wazuh_testing - DEBUG - Received from wazuh-manager the expected message: fim_file 2022-02-11 14:55:47,225 - wazuh_testing - DEBUG - Received from wazuh-agent1 the expected message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1644602123,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"30e88bbb0f161ad5eb67fa3dfe3db60a39f80b5b"}} 2022-02-11 14:56:15,151 - wazuh_testing - DEBUG - Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-11 14:56:15,152 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-11 14:56:15,153 - wazuh_testing - DEBUG - Starting file composer for wazuh-manager and path: /var/ossec/logs/ossec.log. Composite file in /home/camila/Escritorio/repo/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-manager_ossec.log.tmp 2022-02-11 14:56:15,153 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-manager and message: .*Initializing FIM Integrity Synchronization check. (.+)$ 2022-02-11 14:56:16,655 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-modulesd:syscollector: INFO: Stop received for Syscollector. 2022-02-11 14:56:16,656 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 12 disconnected. 2022-02-11 14:56:16,656 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-monitord: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:56:16,656 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-logcollector: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:56:16,657 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-remoted: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:56:16,657 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 34 disconnected. 2022-02-11 14:56:16,657 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 24 disconnected. 2022-02-11 14:56:16,657 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 18 disconnected. 2022-02-11 14:56:16,657 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 16 disconnected. 2022-02-11 14:56:16,658 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-syscheckd[14620] sig_op.c:49 at HandleSIG(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:56:16,658 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-analysisd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:56:16,658 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 37 disconnected. 2022-02-11 14:56:16,658 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 35 disconnected. 2022-02-11 14:56:16,658 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 31 disconnected. 2022-02-11 14:56:16,659 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 33 disconnected. 2022-02-11 14:56:16,659 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 25 disconnected. 2022-02-11 14:56:16,659 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 32 disconnected. 2022-02-11 14:56:16,659 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 23 disconnected. 2022-02-11 14:56:16,659 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 30 disconnected. 2022-02-11 14:56:16,660 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 27 disconnected. 2022-02-11 14:56:16,660 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 20 disconnected. 2022-02-11 14:56:16,660 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 29 disconnected. 2022-02-11 14:56:16,660 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 11 disconnected. 2022-02-11 14:56:16,661 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 28 disconnected. 2022-02-11 14:56:16,661 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 10 disconnected. 2022-02-11 14:56:16,661 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 21 disconnected. 2022-02-11 14:56:16,661 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 19 disconnected. 2022-02-11 14:56:16,662 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 13 disconnected. 2022-02-11 14:56:16,662 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 26 disconnected. 2022-02-11 14:56:16,662 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 6 disconnected. 2022-02-11 14:56:16,662 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 22 disconnected. 2022-02-11 14:56:16,662 - wazuh_testing - DEBUG - 2022/02/11 18:55:53 wazuh-execd: INFO: (1314): Shutdown received. Deleting responses. 2022-02-11 14:56:16,663 - wazuh_testing - DEBUG - 2022/02/11 18:55:53 wazuh-execd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:56:16,663 - wazuh_testing - DEBUG - 2022/02/11 18:55:53 wazuh-db[14486] main.c:468 at handler(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:56:16,663 - wazuh_testing - DEBUG - 2022/02/11 18:55:54 wazuh-db[14486] wdb.c:872 at wdb_close_all(): DEBUG: Closing all databases... 2022-02-11 14:56:16,663 - wazuh_testing - DEBUG - 2022/02/11 18:55:54 wazuh-db[14486] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent 001 2022-02-11 14:56:16,664 - wazuh_testing - DEBUG - 2022/02/11 18:55:54 wazuh-db[14486] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent 000 2022-02-11 14:56:16,664 - wazuh_testing - DEBUG - 2022/02/11 18:55:54 wazuh-db[14486] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent mitre 2022-02-11 14:56:16,664 - wazuh_testing - DEBUG - 2022/02/11 18:55:54 wazuh-db[14486] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent global 2022-02-11 14:56:16,664 - wazuh_testing - DEBUG - 2022/02/11 18:55:54 wazuh-db[14486] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent tasks 2022-02-11 14:56:16,664 - wazuh_testing - DEBUG - 2022/02/11 18:55:54 wazuh-db[14486] main.c:231 at main(): DEBUG: Template file removed again: queue/db/.template.db 2022-02-11 14:56:16,665 - wazuh_testing - DEBUG - 2022/02/11 18:55:54 wazuh-authd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:56:16,665 - wazuh_testing - DEBUG - 2022/02/11 18:55:55 wazuh-authd: INFO: Exiting... 2022-02-11 14:56:16,665 - wazuh_testing - DEBUG - 2022/02/11 18:56:00 wazuh-db[15358] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 14:56:16,665 - wazuh_testing - DEBUG - 2022/02/11 18:56:00 wazuh-db[15358] main.c:101 at main(): DEBUG: Wazuh home directory: /var/ossec 2022-02-11 14:56:16,666 - wazuh_testing - DEBUG - 2022/02/11 18:56:00 wazuh-syscheckd[15362] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 14:56:16,666 - wazuh_testing - DEBUG - 2022/02/11 18:56:00 wazuh-syscheckd[15362] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 14:56:16,666 - wazuh_testing - DEBUG - 2022/02/11 18:56:00 wazuh-syscheckd[15362] syscheck-config.c:122 at organize_syscheck_dirs(): DEBUG: No directory entries to organize in syscheck configuration. 2022-02-11 14:56:16,666 - wazuh_testing - DEBUG - 2022/02/11 18:56:03 wazuh-csyslogd: INFO: Remote syslog server not configured. Clean exit. 2022-02-11 14:56:16,666 - wazuh_testing - DEBUG - 2022/02/11 18:56:03 wazuh-dbd: INFO: Database not configured. Clean exit. 2022-02-11 14:56:16,667 - wazuh_testing - DEBUG - 2022/02/11 18:56:03 wazuh-integratord: INFO: Remote integrations not configured. Clean exit. 2022-02-11 14:56:16,667 - wazuh_testing - DEBUG - 2022/02/11 18:56:03 wazuh-agentlessd: INFO: Not configured. Exiting. 2022-02-11 14:56:16,667 - wazuh_testing - DEBUG - 2022/02/11 18:56:03 wazuh-authd: INFO: Started (pid: 15428). 2022-02-11 14:56:16,667 - wazuh_testing - DEBUG - 2022/02/11 18:56:03 wazuh-authd: INFO: Accepting connections on port 1515. No password required. 2022-02-11 14:56:16,668 - wazuh_testing - DEBUG - 2022/02/11 18:56:03 wazuh-authd: INFO: Setting network timeout to 1.000000 sec. 2022-02-11 14:56:16,668 - wazuh_testing - DEBUG - 2022/02/11 18:56:04 wazuh-db[15442] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 14:56:16,668 - wazuh_testing - DEBUG - 2022/02/11 18:56:04 wazuh-db[15442] main.c:101 at main(): DEBUG: Wazuh home directory: /var/ossec 2022-02-11 14:56:16,668 - wazuh_testing - DEBUG - 2022/02/11 18:56:04 wazuh-db[15442] main.c:122 at main(): DEBUG: Template file removed: /var/ossec/queue/db/.template.db 2022-02-11 14:56:16,668 - wazuh_testing - DEBUG - 2022/02/11 18:56:04 wazuh-db[15442] main.c:178 at main(): INFO: Started (pid: 15444). 2022-02-11 14:56:16,669 - wazuh_testing - DEBUG - 2022/02/11 18:56:05 wazuh-execd: INFO: (1350): Active response disabled. 2022-02-11 14:56:16,669 - wazuh_testing - DEBUG - 2022/02/11 18:56:05 wazuh-execd: INFO: Started (pid: 15467). 2022-02-11 14:56:16,669 - wazuh_testing - DEBUG - 2022/02/11 18:56:06 wazuh-analysisd: INFO: Total rules enabled: '3882' 2022-02-11 14:56:16,669 - wazuh_testing - DEBUG - 2022/02/11 18:56:06 wazuh-analysisd: INFO: Started (pid: 15481). 2022-02-11 14:56:16,669 - wazuh_testing - DEBUG - 2022/02/11 18:56:06 wazuh-db[15442] main.c:290 at run_dealer(): DEBUG: New client connected (6). 2022-02-11 14:56:16,669 - wazuh_testing - DEBUG - 2022/02/11 18:56:06 wazuh-analysisd: INFO: (7200): Logtest started 2022-02-11 14:56:16,670 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 14:56:16,670 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 14:56:16,670 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] syscheck-config.c:122 at organize_syscheck_dirs(): DEBUG: No directory entries to organize in syscheck configuration. 2022-02-11 14:56:16,670 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] main.c:118 at main(): INFO: (6678): No directory provided for syscheck to monitor. 2022-02-11 14:56:16,670 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] main.c:136 at main(): INFO: (6001): File integrity monitoring disabled. 2022-02-11 14:56:16,671 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 rootcheck[15576] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled. 2022-02-11 14:56:16,671 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:56:16,671 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] syscom.c:123 at syscom_main(): DEBUG: (6284): Local requests thread ready. 2022-02-11 14:56:16,671 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] mq_op.c:47 at StartMQ(): DEBUG: Connected succesfully to 'queue/sockets/queue' after 0 attempts 2022-02-11 14:56:16,671 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] mq_op.c:48 at StartMQ(): DEBUG: (unix_domain) Maximum send buffer set to: '212992'. 2022-02-11 14:56:16,672 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] main.c:185 at main(): INFO: Started (pid: 15578). 2022-02-11 14:56:16,672 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] main.c:215 at main(): DEBUG: (6357): Maximum disk quota size limit configured to '1048576 KB'. 2022-02-11 14:56:16,672 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] run_check.c:194 at start_daemon(): DEBUG: (6320): Setting process priority to: '10' 2022-02-11 14:56:16,672 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:56:16,672 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] run_check.c:229 at start_daemon(): INFO: (6000): Starting daemon... 2022-02-11 14:56:16,672 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] run_check.c:232 at start_daemon(): INFO: (6010): File integrity monitoring scan frequency: 43200 seconds 2022-02-11 14:56:16,672 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 14:56:16,673 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644602167}} 2022-02-11 14:56:16,673 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 14:56:16,673 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 14:56:16,673 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 14:56:16,673 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644602167}} 2022-02-11 14:56:16,673 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.000 sec (0.000 clock sec) 2022-02-11 14:56:16,673 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 0, path count: 0 2022-02-11 14:56:16,674 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-db[15442] main.c:290 at run_dealer(): DEBUG: New client connected (10). 2022-02-11 14:56:16,674 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:56:16,674 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-db[15442] main.c:290 at run_dealer(): DEBUG: New client connected (11). 2022-02-11 14:56:16,674 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 000 query: syscheck scan_info_update start_scan 1644602167 2022-02-11 14:56:16,674 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 000 query: syscheck scan_info_update end_scan 1644602167 2022-02-11 14:56:16,674 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:56:16,675 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:56:16,675 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. 2022-02-11 14:56:16,675 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-manager and message: .*Initializing FIM Integrity Synchronization check. (.+)$ 2022-02-11 14:56:17,657 - wazuh_testing - DEBUG - Cleaning temporal files... 2022-02-11 14:56:17,658 - wazuh_testing - DEBUG - Checking results... 2022-02-11 14:56:17,659 - wazuh_testing - DEBUG - Received from wazuh-manager the expected message: Sync interval is 300 seconds.
-------------------------------Captured log call--------------------------------
DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:1005 Cleaning temporal files... DEBUG wazuh_testing:monitoring.py:994 Checking results... DEBUG wazuh_testing:monitoring.py:1000 Received from wazuh-manager the expected message: fim_file DEBUG wazuh_testing:monitoring.py:1000 Received from wazuh-agent1 the expected message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1644602123,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"30e88bbb0f161ad5eb67fa3dfe3db60a39f80b5b"}} DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:1005 Cleaning temporal files... DEBUG wazuh_testing:monitoring.py:994 Checking results... DEBUG wazuh_testing:monitoring.py:1000 Received from wazuh-manager the expected message: Sync interval is 300 seconds.

Passed

test_synchronization.py::test_synchronization[testdir1-delete-wazuh-agent1]

40.07

------------------------------Captured stderr call------------------------------
2022-02-11 14:56:31,937 - wazuh_testing - DEBUG - Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-11 14:56:31,939 - wazuh_testing - DEBUG - Starting file composer for wazuh-agent1 and path: /var/ossec/logs/ossec.log. Composite file in /home/camila/Escritorio/repo/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-agent1_ossec.log.tmp 2022-02-11 14:56:31,939 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-11 14:56:31,940 - wazuh_testing - DEBUG - Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-11 14:56:31,941 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-agent1 and message: .*Sending integrity control message: (.+)$ 2022-02-11 14:56:31,942 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-11 14:56:31,942 - wazuh_testing - DEBUG - Starting file composer for wazuh-manager and path: /var/ossec/logs/ossec.log. Composite file in /home/camila/Escritorio/repo/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-manager_ossec.log.tmp 2022-02-11 14:56:31,944 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-manager and message: .*Agent 001 query: (.+) save2 2022-02-11 14:56:33,442 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-agentd: ERROR: (1137): Lost connection with manager. Setting lock. 2022-02-11 14:56:33,443 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-agentd: INFO: Closing connection to server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 14:56:33,443 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 14:56:33,443 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-agentd: ERROR: (1216): Unable to connect to '172.17.0.2:1514/tcp': 'Connection refused'. 2022-02-11 14:56:33,443 - wazuh_testing - DEBUG - 2022/02/11 18:56:00 wazuh-syscheckd[18745] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 14:56:33,444 - wazuh_testing - DEBUG - 2022/02/11 18:56:00 wazuh-syscheckd[18745] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644602160}} 2022-02-11 14:56:33,444 - wazuh_testing - DEBUG - 2022/02/11 18:56:00 wazuh-syscheckd[18745] wait_op.c:101 at os_wait(): WARNING: Process locked due to agent is offline. Waiting for connection... 2022-02-11 14:56:33,444 - wazuh_testing - DEBUG - 2022/02/11 18:56:02 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 14:56:33,444 - wazuh_testing - DEBUG - 2022/02/11 18:56:02 wazuh-agentd: ERROR: (1216): Unable to connect to '172.17.0.2:1514/tcp': 'Connection refused'. 2022-02-11 14:56:33,444 - wazuh_testing - DEBUG - 2022/02/11 18:56:12 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 14:56:33,445 - wazuh_testing - DEBUG - 2022/02/11 18:56:12 wazuh-agentd: INFO: (4102): Connected to the server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 14:56:33,445 - wazuh_testing - DEBUG - 2022/02/11 18:56:12 wazuh-agentd: INFO: Server responded. Releasing lock. 2022-02-11 14:56:33,445 - wazuh_testing - DEBUG - 2022/02/11 18:56:15 wazuh-syscheckd[18745] wait_op.c:116 at os_wait(): INFO: Agent is now online. Process unlocked, continuing... 2022-02-11 14:56:33,445 - wazuh_testing - DEBUG - 2022/02/11 18:56:15 wazuh-syscheckd[18745] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 14:56:33,445 - wazuh_testing - DEBUG - 2022/02/11 18:56:15 wazuh-syscheckd[18745] fim_db.c:436 at fim_db_check_transaction(): DEBUG: Database transaction completed. 2022-02-11 14:56:33,446 - wazuh_testing - DEBUG - 2022/02/11 18:56:15 wazuh-syscheckd[18745] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-11 14:56:33,446 - wazuh_testing - DEBUG - 2022/02/11 18:56:15 wazuh-syscheckd[18745] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-11 14:56:33,446 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-modulesd:syscollector: INFO: Stop received for Syscollector. 2022-02-11 14:56:33,446 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 12 disconnected. 2022-02-11 14:56:33,446 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-monitord: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:56:33,447 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-logcollector: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:56:33,447 - wazuh_testing - DEBUG - 2022/02/11 18:56:15 wazuh-syscheckd[18745] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"event","data":{"path":"/testdir1/tmp1zw22waf","version":2,"mode":"scheduled","type":"added","timestamp":1644602175,"attributes":{"type":"file","size":8,"perm":"rw-r--r--","uid":"0","gid":"0","user_name":"root","group_name":"root","inode":17314755,"mtime":1644602156,"hash_md5":"e770e54c4c42d3307c141c0c8948992a","hash_sha1":"9eab19985b11b15f91f936e463ea74f1dfe88e32","hash_sha256":"b1893f8d4b1596c20d6f83a784b2b0468c22fb83ce4ff2033ff86a37865d41d8","checksum":"ce868c7e893d53100d43402f6a55a254bdd97f37"}}} 2022-02-11 14:56:33,447 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-remoted: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:56:33,447 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 34 disconnected. 2022-02-11 14:56:33,447 - wazuh_testing - DEBUG - 2022/02/11 18:56:15 wazuh-syscheckd[18745] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-11 14:56:33,447 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 24 disconnected. 2022-02-11 14:56:33,447 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 18 disconnected. 2022-02-11 14:56:33,447 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 16 disconnected. 2022-02-11 14:56:33,447 - wazuh_testing - DEBUG - 2022/02/11 18:56:15 wazuh-syscheckd[18745] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-11 14:56:33,448 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-syscheckd[14620] sig_op.c:49 at HandleSIG(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:56:33,448 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-analysisd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:56:33,448 - wazuh_testing - DEBUG - 2022/02/11 18:56:16 wazuh-syscheckd[18745] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 14:56:33,448 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 37 disconnected. 2022-02-11 14:56:33,448 - wazuh_testing - DEBUG - 2022/02/11 18:56:16 wazuh-syscheckd[18745] create_db.c:220 at fim_scan(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-11 14:56:33,448 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 35 disconnected. 2022-02-11 14:56:33,448 - wazuh_testing - DEBUG - 2022/02/11 18:56:16 wazuh-syscheckd[18745] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 14:56:33,448 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 31 disconnected. 2022-02-11 14:56:33,449 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 33 disconnected. 2022-02-11 14:56:33,449 - wazuh_testing - DEBUG - 2022/02/11 18:56:16 wazuh-syscheckd[18745] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644602176}} 2022-02-11 14:56:33,449 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 25 disconnected. 2022-02-11 14:56:33,449 - wazuh_testing - DEBUG - 2022/02/11 18:56:16 wazuh-syscheckd[18745] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 15.366 sec (0.354 clock sec) 2022-02-11 14:56:33,449 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 32 disconnected. 2022-02-11 14:56:33,449 - wazuh_testing - DEBUG - 2022/02/11 18:56:16 wazuh-syscheckd[18745] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1622, path count: 1628 2022-02-11 14:56:33,449 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 23 disconnected. 2022-02-11 14:56:33,449 - wazuh_testing - DEBUG - 2022/02/11 18:56:24 wazuh-logcollector: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:56:33,449 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 30 disconnected. 2022-02-11 14:56:33,450 - wazuh_testing - DEBUG - 2022/02/11 18:56:24 wazuh-syscheckd[18745] sig_op.c:49 at HandleSIG(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:56:33,450 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 27 disconnected. 2022-02-11 14:56:33,450 - wazuh_testing - DEBUG - 2022/02/11 18:56:24 wazuh-agentd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:56:33,450 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 20 disconnected. 2022-02-11 14:56:33,450 - wazuh_testing - DEBUG - 2022/02/11 18:56:24 wazuh-execd: INFO: (1314): Shutdown received. Deleting responses. 2022-02-11 14:56:33,450 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 29 disconnected. 2022-02-11 14:56:33,450 - wazuh_testing - DEBUG - 2022/02/11 18:56:24 wazuh-execd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:56:33,450 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 11 disconnected. 2022-02-11 14:56:33,450 - wazuh_testing - DEBUG - 2022/02/11 18:56:24 wazuh-syscheckd[19444] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 14:56:33,450 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 28 disconnected. 2022-02-11 14:56:33,451 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 10 disconnected. 2022-02-11 14:56:33,451 - wazuh_testing - DEBUG - 2022/02/11 18:56:24 wazuh-syscheckd[19444] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 14:56:33,451 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 21 disconnected. 2022-02-11 14:56:33,451 - wazuh_testing - DEBUG - 2022/02/11 18:56:24 wazuh-syscheckd[19444] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-11 14:56:33,451 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 19 disconnected. 2022-02-11 14:56:33,451 - wazuh_testing - DEBUG - 2022/02/11 18:56:24 wazuh-syscheckd[19444] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-11 14:56:33,451 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 13 disconnected. 2022-02-11 14:56:33,451 - wazuh_testing - DEBUG - 2022/02/11 18:56:24 wazuh-syscheckd[19444] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-11 14:56:33,451 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 26 disconnected. 2022-02-11 14:56:33,452 - wazuh_testing - DEBUG - 2022/02/11 18:56:24 wazuh-syscheckd[19444] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-11 14:56:33,452 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 6 disconnected. 2022-02-11 14:56:33,452 - wazuh_testing - DEBUG - 2022/02/11 18:56:24 wazuh-syscheckd[19444] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-11 14:56:33,452 - wazuh_testing - DEBUG - 2022/02/11 18:55:52 wazuh-db[14486] main.c:352 at run_worker(): DEBUG: Client 22 disconnected. 2022-02-11 14:56:33,452 - wazuh_testing - DEBUG - 2022/02/11 18:55:53 wazuh-execd: INFO: (1314): Shutdown received. Deleting responses. 2022-02-11 14:56:33,452 - wazuh_testing - DEBUG - 2022/02/11 18:56:24 wazuh-syscheckd[19444] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ 2022-02-11 14:56:33,452 - wazuh_testing - DEBUG - 2022/02/11 18:55:53 wazuh-execd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:56:33,452 - wazuh_testing - DEBUG - 2022/02/11 18:56:24 wazuh-syscheckd[19444] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ OK? 2022-02-11 14:56:33,453 - wazuh_testing - DEBUG - 2022/02/11 18:55:53 wazuh-db[14486] main.c:468 at handler(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:56:33,453 - wazuh_testing - DEBUG - 2022/02/11 18:56:24 wazuh-syscheckd[19444] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-11 14:56:33,453 - wazuh_testing - DEBUG - 2022/02/11 18:55:54 wazuh-db[14486] wdb.c:872 at wdb_close_all(): DEBUG: Closing all databases... 2022-02-11 14:56:33,453 - wazuh_testing - DEBUG - 2022/02/11 18:56:24 wazuh-syscheckd[19444] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-11 14:56:33,453 - wazuh_testing - DEBUG - 2022/02/11 18:55:54 wazuh-db[14486] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent 001 2022-02-11 14:56:33,453 - wazuh_testing - DEBUG - 2022/02/11 18:56:24 wazuh-syscheckd[19444] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 14:56:33,453 - wazuh_testing - DEBUG - 2022/02/11 18:55:54 wazuh-db[14486] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent 000 2022-02-11 14:56:33,454 - wazuh_testing - DEBUG - 2022/02/11 18:56:24 wazuh-syscheckd[19444] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 14:56:33,454 - wazuh_testing - DEBUG - 2022/02/11 18:56:24 wazuh-syscheckd[19444] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 14:56:33,454 - wazuh_testing - DEBUG - 2022/02/11 18:55:54 wazuh-db[14486] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent mitre 2022-02-11 14:56:33,454 - wazuh_testing - DEBUG - 2022/02/11 18:56:24 wazuh-syscheckd[19444] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 14:56:33,454 - wazuh_testing - DEBUG - 2022/02/11 18:55:54 wazuh-db[14486] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent global 2022-02-11 14:56:33,454 - wazuh_testing - DEBUG - 2022/02/11 18:56:24 wazuh-syscheckd[19444] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 14:56:33,454 - wazuh_testing - DEBUG - 2022/02/11 18:55:54 wazuh-db[14486] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent tasks 2022-02-11 14:56:33,454 - wazuh_testing - DEBUG - 2022/02/11 18:55:54 wazuh-db[14486] main.c:231 at main(): DEBUG: Template file removed again: queue/db/.template.db 2022-02-11 14:56:33,454 - wazuh_testing - DEBUG - 2022/02/11 18:56:24 wazuh-syscheckd[19444] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 14:56:33,455 - wazuh_testing - DEBUG - 2022/02/11 18:55:54 wazuh-authd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:56:33,455 - wazuh_testing - DEBUG - 2022/02/11 18:55:55 wazuh-authd: INFO: Exiting... 2022-02-11 14:56:33,455 - wazuh_testing - DEBUG - 2022/02/11 18:56:24 wazuh-execd: INFO: Started (pid: 19457). 2022-02-11 14:56:33,455 - wazuh_testing - DEBUG - 2022/02/11 18:56:00 wazuh-db[15358] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 14:56:33,455 - wazuh_testing - DEBUG - 2022/02/11 18:56:00 wazuh-db[15358] main.c:101 at main(): DEBUG: Wazuh home directory: /var/ossec 2022-02-11 14:56:33,455 - wazuh_testing - DEBUG - 2022/02/11 18:56:25 wazuh-agentd: INFO: (1410): Reading authentication keys file. 2022-02-11 14:56:33,455 - wazuh_testing - DEBUG - 2022/02/11 18:56:00 wazuh-syscheckd[15362] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 14:56:33,455 - wazuh_testing - DEBUG - 2022/02/11 18:56:00 wazuh-syscheckd[15362] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 14:56:33,455 - wazuh_testing - DEBUG - 2022/02/11 18:56:25 wazuh-agentd: INFO: Using notify time: 10 and max time to reconnect: 60 2022-02-11 14:56:33,455 - wazuh_testing - DEBUG - 2022/02/11 18:56:00 wazuh-syscheckd[15362] syscheck-config.c:122 at organize_syscheck_dirs(): DEBUG: No directory entries to organize in syscheck configuration. 2022-02-11 14:56:33,456 - wazuh_testing - DEBUG - 2022/02/11 18:56:03 wazuh-csyslogd: INFO: Remote syslog server not configured. Clean exit. 2022-02-11 14:56:33,456 - wazuh_testing - DEBUG - 2022/02/11 18:56:25 wazuh-agentd: INFO: Version detected -> Linux |wazuh-agent1 |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64 [Debian GNU/Linux|debian: 10 (buster)] - Wazuh v4.2.5 2022-02-11 14:56:33,456 - wazuh_testing - DEBUG - 2022/02/11 18:56:03 wazuh-dbd: INFO: Database not configured. Clean exit. 2022-02-11 14:56:33,456 - wazuh_testing - DEBUG - 2022/02/11 18:56:25 wazuh-agentd: INFO: Started (pid: 19468). 2022-02-11 14:56:33,456 - wazuh_testing - DEBUG - 2022/02/11 18:56:25 wazuh-agentd: INFO: Server IP Address: wazuh-manager/172.17.0.2 2022-02-11 14:56:33,456 - wazuh_testing - DEBUG - 2022/02/11 18:56:25 wazuh-agentd: INFO: Using AES as encryption method. 2022-02-11 14:56:33,456 - wazuh_testing - DEBUG - 2022/02/11 18:56:03 wazuh-integratord: INFO: Remote integrations not configured. Clean exit. 2022-02-11 14:56:33,456 - wazuh_testing - DEBUG - 2022/02/11 18:56:25 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 14:56:33,456 - wazuh_testing - DEBUG - 2022/02/11 18:56:03 wazuh-agentlessd: INFO: Not configured. Exiting. 2022-02-11 14:56:33,456 - wazuh_testing - DEBUG - 2022/02/11 18:56:25 wazuh-agentd: INFO: (4102): Connected to the server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 14:56:33,457 - wazuh_testing - DEBUG - 2022/02/11 18:56:03 wazuh-authd: INFO: Started (pid: 15428). 2022-02-11 14:56:33,457 - wazuh_testing - DEBUG - 2022/02/11 18:56:03 wazuh-authd: INFO: Accepting connections on port 1515. No password required. 2022-02-11 14:56:33,457 - wazuh_testing - DEBUG - 2022/02/11 18:56:03 wazuh-authd: INFO: Setting network timeout to 1.000000 sec. 2022-02-11 14:56:33,457 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 14:56:33,457 - wazuh_testing - DEBUG - 2022/02/11 18:56:04 wazuh-db[15442] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 14:56:33,457 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 14:56:33,457 - wazuh_testing - DEBUG - 2022/02/11 18:56:04 wazuh-db[15442] main.c:101 at main(): DEBUG: Wazuh home directory: /var/ossec 2022-02-11 14:56:33,457 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-11 14:56:33,457 - wazuh_testing - DEBUG - 2022/02/11 18:56:04 wazuh-db[15442] main.c:122 at main(): DEBUG: Template file removed: /var/ossec/queue/db/.template.db 2022-02-11 14:56:33,457 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-11 14:56:33,457 - wazuh_testing - DEBUG - 2022/02/11 18:56:04 wazuh-db[15442] main.c:178 at main(): INFO: Started (pid: 15444). 2022-02-11 14:56:33,457 - wazuh_testing - DEBUG - 2022/02/11 18:56:05 wazuh-execd: INFO: (1350): Active response disabled. 2022-02-11 14:56:33,457 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-11 14:56:33,458 - wazuh_testing - DEBUG - 2022/02/11 18:56:05 wazuh-execd: INFO: Started (pid: 15467). 2022-02-11 14:56:33,458 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-11 14:56:33,458 - wazuh_testing - DEBUG - 2022/02/11 18:56:06 wazuh-analysisd: INFO: Total rules enabled: '3882' 2022-02-11 14:56:33,458 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-11 14:56:33,458 - wazuh_testing - DEBUG - 2022/02/11 18:56:06 wazuh-analysisd: INFO: Started (pid: 15481). 2022-02-11 14:56:33,458 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ 2022-02-11 14:56:33,458 - wazuh_testing - DEBUG - 2022/02/11 18:56:06 wazuh-db[15442] main.c:290 at run_dealer(): DEBUG: New client connected (6). 2022-02-11 14:56:33,458 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ OK? 2022-02-11 14:56:33,458 - wazuh_testing - DEBUG - 2022/02/11 18:56:06 wazuh-analysisd: INFO: (7200): Logtest started 2022-02-11 14:56:33,458 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-11 14:56:33,458 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 14:56:33,458 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-11 14:56:33,458 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 14:56:33,458 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 14:56:33,458 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] syscheck-config.c:122 at organize_syscheck_dirs(): DEBUG: No directory entries to organize in syscheck configuration. 2022-02-11 14:56:33,458 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 14:56:33,459 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] main.c:118 at main(): INFO: (6678): No directory provided for syscheck to monitor. 2022-02-11 14:56:33,459 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 14:56:33,459 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] main.c:136 at main(): INFO: (6001): File integrity monitoring disabled. 2022-02-11 14:56:33,459 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 14:56:33,459 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 rootcheck[15576] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled. 2022-02-11 14:56:33,459 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 14:56:33,459 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:56:33,459 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 14:56:33,459 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] syscom.c:123 at syscom_main(): DEBUG: (6284): Local requests thread ready. 2022-02-11 14:56:33,459 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 rootcheck[19480] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled. 2022-02-11 14:56:33,459 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] mq_op.c:47 at StartMQ(): DEBUG: Connected succesfully to 'queue/sockets/queue' after 0 attempts 2022-02-11 14:56:33,459 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:56:33,459 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] mq_op.c:48 at StartMQ(): DEBUG: (unix_domain) Maximum send buffer set to: '212992'. 2022-02-11 14:56:33,459 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] syscom.c:123 at syscom_main(): DEBUG: (6284): Local requests thread ready. 2022-02-11 14:56:33,459 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] main.c:185 at main(): INFO: Started (pid: 15578). 2022-02-11 14:56:33,460 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] mq_op.c:47 at StartMQ(): DEBUG: Connected succesfully to 'queue/sockets/queue' after 0 attempts 2022-02-11 14:56:33,460 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] main.c:215 at main(): DEBUG: (6357): Maximum disk quota size limit configured to '1048576 KB'. 2022-02-11 14:56:33,460 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] mq_op.c:48 at StartMQ(): DEBUG: (unix_domain) Maximum send buffer set to: '212992'. 2022-02-11 14:56:33,460 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] run_check.c:194 at start_daemon(): DEBUG: (6320): Setting process priority to: '10' 2022-02-11 14:56:33,460 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] main.c:185 at main(): INFO: Started (pid: 19482). 2022-02-11 14:56:33,460 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:56:33,460 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] main.c:193 at main(): INFO: (6003): Monitoring path: '/bin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 14:56:33,460 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] run_check.c:229 at start_daemon(): INFO: (6000): Starting daemon... 2022-02-11 14:56:33,460 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] main.c:193 at main(): INFO: (6003): Monitoring path: '/boot', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 14:56:33,460 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] run_check.c:232 at start_daemon(): INFO: (6010): File integrity monitoring scan frequency: 43200 seconds 2022-02-11 14:56:33,460 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] main.c:193 at main(): INFO: (6003): Monitoring path: '/etc', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 14:56:33,460 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 14:56:33,460 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644602167}} 2022-02-11 14:56:33,460 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] main.c:193 at main(): INFO: (6003): Monitoring path: '/sbin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 14:56:33,461 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 14:56:33,461 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir1', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 14:56:33,461 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 14:56:33,461 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir2', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | realtime'. 2022-02-11 14:56:33,461 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 14:56:33,461 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir3', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | whodata'. 2022-02-11 14:56:33,461 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644602167}} 2022-02-11 14:56:33,461 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/bin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 14:56:33,461 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.000 sec (0.000 clock sec) 2022-02-11 14:56:33,461 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/sbin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 14:56:33,461 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 0, path count: 0 2022-02-11 14:56:33,461 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] main.c:215 at main(): DEBUG: (6357): Maximum disk quota size limit configured to '1048576 KB'. 2022-02-11 14:56:33,461 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-db[15442] main.c:290 at run_dealer(): DEBUG: New client connected (10). 2022-02-11 14:56:33,461 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mtab' 2022-02-11 14:56:33,462 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:56:33,462 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/hosts.deny' 2022-02-11 14:56:33,462 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-db[15442] main.c:290 at run_dealer(): DEBUG: New client connected (11). 2022-02-11 14:56:33,462 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mail/statistics' 2022-02-11 14:56:33,462 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 000 query: syscheck scan_info_update start_scan 1644602167 2022-02-11 14:56:33,462 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random-seed' 2022-02-11 14:56:33,462 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 000 query: syscheck scan_info_update end_scan 1644602167 2022-02-11 14:56:33,462 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random.seed' 2022-02-11 14:56:33,462 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:56:33,462 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/adjtime' 2022-02-11 14:56:33,462 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:56:33,462 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/httpd/logs' 2022-02-11 14:56:33,462 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. 2022-02-11 14:56:33,462 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/utmpx' 2022-02-11 14:56:33,462 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] run_check.c:568 at symlink_checker_thread(): DEBUG: (6033): Starting symbolic link updater. Interval '600'. 2022-02-11 14:56:33,463 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/wtmpx' 2022-02-11 14:56:33,463 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] run_check.c:82 at fim_send_sync_msg(): DEBUG: (6317): Sending integrity control message: {"component":"fim_file","type":"integrity_clear","data":{"id":1644602167,"version":2}} 2022-02-11 14:56:33,463 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/cups/certs' 2022-02-11 14:56:33,463 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-syscheckd[15576] fim_sync.c:70 at fim_run_integrity(): DEBUG: Finished calculating FIM integrity. Time: 0.000 seconds. 2022-02-11 14:56:33,463 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/dumpdates' 2022-02-11 14:56:33,463 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-db[15442] main.c:290 at run_dealer(): DEBUG: New client connected (13). 2022-02-11 14:56:33,463 - wazuh_testing - DEBUG - 2022/02/11 18:56:07 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 000 query: fim_file integrity_clear {"id":1644602167,"version":2} 2022-02-11 14:56:33,463 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/svc/volatile' 2022-02-11 14:56:33,463 - wazuh_testing - DEBUG - 2022/02/11 18:56:08 wazuh-remoted: INFO: Started (pid: 15596). Listening on port 1514/TCP (secure). 2022-02-11 14:56:33,464 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/security' 2022-02-11 14:56:33,464 - wazuh_testing - DEBUG - 2022/02/11 18:56:08 wazuh-db[15442] main.c:290 at run_dealer(): DEBUG: New client connected (12). 2022-02-11 14:56:33,464 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/debug' 2022-02-11 14:56:33,464 - wazuh_testing - DEBUG - 2022/02/11 18:56:08 wazuh-db[15442] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: reset-agents-connection synced 2022-02-11 14:56:33,464 - wazuh_testing - DEBUG - 2022/02/11 18:56:08 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 12 disconnected. 2022-02-11 14:56:33,464 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/dev/core' 2022-02-11 14:56:33,464 - wazuh_testing - DEBUG - 2022/02/11 18:56:08 wazuh-remoted: INFO: (1410): Reading authentication keys file. 2022-02-11 14:56:33,464 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '^/proc' 2022-02-11 14:56:33,465 - wazuh_testing - DEBUG - 2022/02/11 18:56:09 wazuh-logcollector: INFO: (1950): Analyzing file: '/var/ossec/logs/active-responses.log'. 2022-02-11 14:56:33,465 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '.log$|.swp$' 2022-02-11 14:56:33,465 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] main.c:235 at main(): INFO: (6004): No diff for file: '/etc/ssl/private.key' 2022-02-11 14:56:33,465 - wazuh_testing - DEBUG - 2022/02/11 18:56:09 wazuh-logcollector: INFO: (1950): Analyzing file: '/var/log/dpkg.log'. 2022-02-11 14:56:33,465 - wazuh_testing - DEBUG - 2022/02/11 18:56:09 wazuh-logcollector: INFO: Started (pid: 15628). 2022-02-11 14:56:33,465 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] main.c:245 at main(): INFO: (6016): Directory set for real time monitoring: '/testdir2'. 2022-02-11 14:56:33,465 - wazuh_testing - DEBUG - 2022/02/11 18:56:10 wazuh-monitord: INFO: Started (pid: 15651). 2022-02-11 14:56:33,465 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] syscheck_audit.c:243 at audit_init(): WARNING: (6924): Who-data engine cannot start because Auditd is not running. 2022-02-11 14:56:33,465 - wazuh_testing - DEBUG - 2022/02/11 18:56:11 wazuh-modulesd: INFO: Started (pid: 15663). 2022-02-11 14:56:33,465 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] main.c:264 at main(): WARNING: (6913): Who-data engine could not start. Switching who-data to real-time. 2022-02-11 14:56:33,466 - wazuh_testing - DEBUG - 2022/02/11 18:56:11 wazuh-modulesd:agent-upgrade: INFO: (8153): Module Agent Upgrade started. 2022-02-11 14:56:33,466 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] run_check.c:194 at start_daemon(): DEBUG: (6320): Setting process priority to: '10' 2022-02-11 14:56:33,466 - wazuh_testing - DEBUG - 2022/02/11 18:56:11 wazuh-modulesd:ciscat: INFO: Module disabled. Exiting... 2022-02-11 14:56:33,466 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:56:33,466 - wazuh_testing - DEBUG - 2022/02/11 18:56:11 wazuh-modulesd:osquery: INFO: Module disabled. Exiting... 2022-02-11 14:56:33,466 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] run_check.c:229 at start_daemon(): INFO: (6000): Starting daemon... 2022-02-11 14:56:33,466 - wazuh_testing - DEBUG - 2022/02/11 18:56:11 wazuh-modulesd:syscollector: INFO: Module disabled. Exiting... 2022-02-11 14:56:33,466 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] run_check.c:232 at start_daemon(): INFO: (6010): File integrity monitoring scan frequency: 20 seconds 2022-02-11 14:56:33,466 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 14:56:33,466 - wazuh_testing - DEBUG - 2022/02/11 18:56:11 sca: INFO: Module disabled. Exiting. 2022-02-11 14:56:33,466 - wazuh_testing - DEBUG - 2022/02/11 18:56:11 wazuh-modulesd:database: INFO: Module started. 2022-02-11 14:56:33,466 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644602186}} 2022-02-11 14:56:33,467 - wazuh_testing - DEBUG - 2022/02/11 18:56:11 wazuh-modulesd:download: INFO: Module started. 2022-02-11 14:56:33,467 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 14:56:33,467 - wazuh_testing - DEBUG - 2022/02/11 18:56:11 wazuh-modulesd:control: INFO: Starting control thread. 2022-02-11 14:56:33,467 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-11 14:56:33,467 - wazuh_testing - DEBUG - 2022/02/11 18:56:11 wazuh-db[15442] main.c:290 at run_dealer(): DEBUG: New client connected (12). 2022-02-11 14:56:33,467 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-11 14:56:33,467 - wazuh_testing - DEBUG - 2022/02/11 18:56:11 wazuh-db[15442] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-name {"id":0,"name":"wazuh-manager"} 2022-02-11 14:56:33,467 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-11 14:56:33,468 - wazuh_testing - DEBUG - 2022/02/11 18:56:11 wazuh-modulesd:task-manager: INFO: (8200): Module Task Manager started. 2022-02-11 14:56:33,468 - wazuh_testing - DEBUG - 2022/02/11 18:56:26 wazuh-syscheckd[19480] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-11 14:56:33,468 - wazuh_testing - DEBUG - 2022/02/11 18:56:11 wazuh-db[15442] main.c:290 at run_dealer(): DEBUG: New client connected (16). 2022-02-11 14:56:33,468 - wazuh_testing - DEBUG - 2022/02/11 18:56:27 wazuh-syscheckd[19480] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 14:56:33,468 - wazuh_testing - DEBUG - 2022/02/11 18:56:11 wazuh-db[15442] wdb_parser.c:928 at wdb_parse(): DEBUG: Task query: set_timeout {"now":1644602171,"interval":900} 2022-02-11 14:56:33,468 - wazuh_testing - DEBUG - 2022/02/11 18:56:27 wazuh-syscheckd[19480] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 14:56:33,468 - wazuh_testing - DEBUG - 2022/02/11 18:56:11 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 16 disconnected. 2022-02-11 14:56:33,468 - wazuh_testing - DEBUG - 2022/02/11 18:56:27 wazuh-syscheckd[19480] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644602187}} 2022-02-11 14:56:33,468 - wazuh_testing - DEBUG - 2022/02/11 18:56:11 wazuh-db[15442] main.c:290 at run_dealer(): DEBUG: New client connected (16). 2022-02-11 14:56:33,468 - wazuh_testing - DEBUG - 2022/02/11 18:56:27 wazuh-syscheckd[19480] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.349 sec (0.347 clock sec) 2022-02-11 14:56:33,469 - wazuh_testing - DEBUG - 2022/02/11 18:56:11 wazuh-db[15442] wdb_parser.c:928 at wdb_parse(): DEBUG: Task query: delete_old {"timestamp":1643997371} 2022-02-11 14:56:33,469 - wazuh_testing - DEBUG - 2022/02/11 18:56:27 wazuh-syscheckd[19480] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1621, path count: 1627 2022-02-11 14:56:33,469 - wazuh_testing - DEBUG - 2022/02/11 18:56:27 wazuh-syscheckd[19480] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:56:33,469 - wazuh_testing - DEBUG - 2022/02/11 18:56:11 wazuh-db[15442] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":0,"version":"Wazuh v4.2.5","manager_host":"wazuh-manager","node_name":"wazuh-master","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-manager |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64","os_arch":"x86_64"} 2022-02-11 14:56:33,469 - wazuh_testing - DEBUG - 2022/02/11 18:56:27 wazuh-syscheckd[19480] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:56:33,469 - wazuh_testing - DEBUG - 2022/02/11 18:56:11 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 16 disconnected. 2022-02-11 14:56:33,470 - wazuh_testing - DEBUG - 2022/02/11 18:56:27 wazuh-syscheckd[19480] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:56:33,470 - wazuh_testing - DEBUG - 2022/02/11 18:56:11 wazuh-db[15442] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: insert-agent {"id":1,"name":"wazuh-agent1","register_ip":"any","internal_key":"1111111111111111111111111111111111111111111111111111111111111111","group":"default","date_add":0} 2022-02-11 14:56:33,470 - wazuh_testing - DEBUG - 2022/02/11 18:56:27 wazuh-syscheckd[19480] run_check.c:387 at fim_run_realtime(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-11 14:56:33,470 - wazuh_testing - DEBUG - 2022/02/11 18:56:11 wazuh-db[15442] wdb_global.c:89 at wdb_global_insert_agent(): DEBUG: SQLite: UNIQUE constraint failed: agent.id 2022-02-11 14:56:33,470 - wazuh_testing - DEBUG - 2022/02/11 18:56:27 wazuh-syscheckd[19480] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. 2022-02-11 14:56:33,471 - wazuh_testing - DEBUG - 2022/02/11 18:56:11 wazuh-db[15442] wdb_parser.c:4784 at wdb_parse_global_insert_agent(): DEBUG: Global DB Cannot execute SQL query; err database queue/db/global.db: UNIQUE constraint failed: agent.id 2022-02-11 14:56:33,471 - wazuh_testing - DEBUG - 2022/02/11 18:56:27 wazuh-syscheckd[19480] run_check.c:543 at log_realtime_status(): INFO: (6012): Real-time file integrity monitoring started. 2022-02-11 14:56:33,471 - wazuh_testing - DEBUG - 2022/02/11 18:56:11 wazuh-db[15442] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-group {"id":1,"group":"default"} 2022-02-11 14:56:33,471 - wazuh_testing - DEBUG - 2022/02/11 18:56:27 wazuh-syscheckd[19480] run_check.c:568 at symlink_checker_thread(): DEBUG: (6033): Starting symbolic link updater. Interval '600'. 2022-02-11 14:56:33,471 - wazuh_testing - DEBUG - 2022/02/11 18:56:11 wazuh-db[15442] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: delete-agent-belong 1 2022-02-11 14:56:33,472 - wazuh_testing - DEBUG - 2022/02/11 18:56:11 wazuh-db[15442] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: find-group default 2022-02-11 14:56:33,472 - wazuh_testing - DEBUG - 2022/02/11 18:56:27 wazuh-syscheckd[19480] run_check.c:82 at fim_send_sync_msg(): DEBUG: (6317): Sending integrity control message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1644602187,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"ac2db358c1aefae00e2cbb0cfa343cc816a6e98a"}} 2022-02-11 14:56:33,472 - wazuh_testing - DEBUG - 2022/02/11 18:56:11 wazuh-db[15442] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: insert-agent-belong {"id_group":1,"id_agent":1} 2022-02-11 14:56:33,472 - wazuh_testing - DEBUG - 2022/02/11 18:56:11 wazuh-db[15442] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: get-all-agents last_id 0 2022-02-11 14:56:33,473 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-agent1 and message: .*Sending integrity control message: (.+)$ 2022-02-11 14:56:33,473 - wazuh_testing - DEBUG - 2022/02/11 18:56:11 wazuh-db[15442] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: select-groups 2022-02-11 14:56:33,473 - wazuh_testing - DEBUG - 2022/02/11 18:56:11 wazuh-db[15442] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: find-group default 2022-02-11 14:56:33,473 - wazuh_testing - DEBUG - 2022/02/11 18:56:11 wazuh-db[15442] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: get-all-agents last_id 0 2022-02-11 14:56:33,473 - wazuh_testing - DEBUG - 2022/02/11 18:56:11 wazuh-db[15442] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: select-agent-group 1 2022-02-11 14:56:33,474 - wazuh_testing - DEBUG - 2022/02/11 18:56:11 wazuh-db[15442] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: delete-agent-belong 1 2022-02-11 14:56:33,474 - wazuh_testing - DEBUG - 2022/02/11 18:56:11 wazuh-db[15442] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: find-group default 2022-02-11 14:56:33,474 - wazuh_testing - DEBUG - 2022/02/11 18:56:11 wazuh-db[15442] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: insert-agent-belong {"id_group":1,"id_agent":1} 2022-02-11 14:56:33,474 - wazuh_testing - DEBUG - 2022/02/11 18:56:11 wazuh-db[15442] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: select-agent-name 1 2022-02-11 14:56:33,474 - wazuh_testing - DEBUG - 2022/02/11 18:56:11 wazuh-db[15442] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: select-agent-name 1 2022-02-11 14:56:33,475 - wazuh_testing - DEBUG - 2022/02/11 18:56:12 wazuh-db[15442] main.c:290 at run_dealer(): DEBUG: New client connected (16). 2022-02-11 14:56:33,475 - wazuh_testing - DEBUG - 2022/02/11 18:56:12 wazuh-db[15442] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-keepalive {"id":1,"connection_status":"pending","sync_status":"synced"} 2022-02-11 14:56:33,475 - wazuh_testing - DEBUG - 2022/02/11 18:56:12 wazuh-db[15442] main.c:290 at run_dealer(): DEBUG: New client connected (18). 2022-02-11 14:56:33,476 - wazuh_testing - DEBUG - 2022/02/11 18:56:12 wazuh-db[15442] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64","os_arch":"x86_64"} 2022-02-11 14:56:33,476 - wazuh_testing - DEBUG - 2022/02/11 18:56:15 wazuh-db[15442] main.c:290 at run_dealer(): DEBUG: New client connected (19). 2022-02-11 14:56:33,476 - wazuh_testing - DEBUG - 2022/02/11 18:56:15 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1644602160 2022-02-11 14:56:33,476 - wazuh_testing - DEBUG - 2022/02/11 18:56:15 wazuh-db[15442] main.c:290 at run_dealer(): DEBUG: New client connected (20). 2022-02-11 14:56:33,476 - wazuh_testing - DEBUG - 2022/02/11 18:56:15 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck save2 {"path":"/testdir1/tmp1zw22waf","version":2,"timestamp":1644602175,"attributes":{"type":"file","size":8,"perm":"rw-r--r--","uid":"0","gid":"0","user_name":"root","group_name":"root","inode":17314755,"mtime":1644602156,"hash_md5":"e770e54c4c42d3307c141c0c8948992a","hash_sha1":"9eab19985b11b15f91f936e463ea74f1dfe88e32","hash_sha256":"b1893f8d4b1596c20d6f83a784b2b0468c22fb83ce4ff2033ff86a37865d41d8","checksum":"ce868c7e893d53100d43402f6a55a254bdd97f37"}} 2022-02-11 14:56:33,477 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-manager and message: .*Agent 001 query: (.+) save2 2022-02-11 14:56:34,447 - wazuh_testing - DEBUG - Cleaning temporal files... 2022-02-11 14:56:34,448 - wazuh_testing - DEBUG - Checking results... 2022-02-11 14:56:34,449 - wazuh_testing - DEBUG - Received from wazuh-agent1 the expected message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1644602187,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"ac2db358c1aefae00e2cbb0cfa343cc816a6e98a"}} 2022-02-11 14:56:34,450 - wazuh_testing - DEBUG - Received from wazuh-manager the expected message: syscheck 2022-02-11 14:56:49,815 - wazuh_testing - DEBUG - Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-11 14:56:49,816 - wazuh_testing - DEBUG - Starting file composer for wazuh-agent1 and path: /var/ossec/logs/ossec.log. Composite file in /home/camila/Escritorio/repo/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-agent1_ossec.log.tmp 2022-02-11 14:56:49,816 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-11 14:56:49,818 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-agent1 and message: .*Initializing FIM Integrity Synchronization check. (.+)$ 2022-02-11 14:56:51,320 - wazuh_testing - DEBUG - 2022/02/11 18:56:39 wazuh-logcollector: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:56:51,320 - wazuh_testing - DEBUG - 2022/02/11 18:56:39 wazuh-syscheckd[19480] sig_op.c:49 at HandleSIG(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:56:51,321 - wazuh_testing - DEBUG - 2022/02/11 18:56:39 wazuh-agentd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:56:51,321 - wazuh_testing - DEBUG - 2022/02/11 18:56:40 wazuh-execd: INFO: (1314): Shutdown received. Deleting responses. 2022-02-11 14:56:51,321 - wazuh_testing - DEBUG - 2022/02/11 18:56:40 wazuh-execd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:56:51,321 - wazuh_testing - DEBUG - 2022/02/11 18:56:43 wazuh-syscheckd[19908] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 14:56:51,322 - wazuh_testing - DEBUG - 2022/02/11 18:56:43 wazuh-syscheckd[19908] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 14:56:51,322 - wazuh_testing - DEBUG - 2022/02/11 18:56:43 wazuh-syscheckd[19908] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir1' due to [(2)-(No such file or directory)]. 2022-02-11 14:56:51,322 - wazuh_testing - DEBUG - 2022/02/11 18:56:43 wazuh-syscheckd[19908] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-11 14:56:51,322 - wazuh_testing - DEBUG - 2022/02/11 18:56:43 wazuh-syscheckd[19908] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-11 14:56:51,323 - wazuh_testing - DEBUG - 2022/02/11 18:56:43 wazuh-syscheckd[19908] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-11 14:56:51,323 - wazuh_testing - DEBUG - 2022/02/11 18:56:43 wazuh-syscheckd[19908] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-11 14:56:51,323 - wazuh_testing - DEBUG - 2022/02/11 18:56:43 wazuh-syscheckd[19908] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-11 14:56:51,324 - wazuh_testing - DEBUG - 2022/02/11 18:56:43 wazuh-syscheckd[19908] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ 2022-02-11 14:56:51,324 - wazuh_testing - DEBUG - 2022/02/11 18:56:43 wazuh-syscheckd[19908] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ OK? 2022-02-11 14:56:51,324 - wazuh_testing - DEBUG - 2022/02/11 18:56:43 wazuh-syscheckd[19908] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-11 14:56:51,324 - wazuh_testing - DEBUG - 2022/02/11 18:56:43 wazuh-syscheckd[19908] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-11 14:56:51,324 - wazuh_testing - DEBUG - 2022/02/11 18:56:43 wazuh-syscheckd[19908] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 14:56:51,325 - wazuh_testing - DEBUG - 2022/02/11 18:56:43 wazuh-syscheckd[19908] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 14:56:51,325 - wazuh_testing - DEBUG - 2022/02/11 18:56:43 wazuh-syscheckd[19908] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 14:56:51,325 - wazuh_testing - DEBUG - 2022/02/11 18:56:43 wazuh-syscheckd[19908] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 14:56:51,325 - wazuh_testing - DEBUG - 2022/02/11 18:56:43 wazuh-syscheckd[19908] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 14:56:51,325 - wazuh_testing - DEBUG - 2022/02/11 18:56:43 wazuh-syscheckd[19908] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 14:56:51,325 - wazuh_testing - DEBUG - 2022/02/11 18:56:43 wazuh-execd: INFO: Started (pid: 19921). 2022-02-11 14:56:51,326 - wazuh_testing - DEBUG - 2022/02/11 18:56:44 wazuh-agentd: INFO: (1410): Reading authentication keys file. 2022-02-11 14:56:51,326 - wazuh_testing - DEBUG - 2022/02/11 18:56:44 wazuh-agentd: INFO: Using notify time: 10 and max time to reconnect: 60 2022-02-11 14:56:51,326 - wazuh_testing - DEBUG - 2022/02/11 18:56:44 wazuh-agentd: INFO: Version detected -> Linux |wazuh-agent1 |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64 [Debian GNU/Linux|debian: 10 (buster)] - Wazuh v4.2.5 2022-02-11 14:56:51,326 - wazuh_testing - DEBUG - 2022/02/11 18:56:44 wazuh-agentd: INFO: Started (pid: 19932). 2022-02-11 14:56:51,327 - wazuh_testing - DEBUG - 2022/02/11 18:56:44 wazuh-agentd: INFO: Server IP Address: wazuh-manager/172.17.0.2 2022-02-11 14:56:51,327 - wazuh_testing - DEBUG - 2022/02/11 18:56:44 wazuh-agentd: INFO: Using AES as encryption method. 2022-02-11 14:56:51,327 - wazuh_testing - DEBUG - 2022/02/11 18:56:44 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 14:56:51,327 - wazuh_testing - DEBUG - 2022/02/11 18:56:44 wazuh-agentd: INFO: (4102): Connected to the server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 14:56:51,327 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 14:56:51,328 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 14:56:51,328 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir1' due to [(2)-(No such file or directory)]. 2022-02-11 14:56:51,328 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-11 14:56:51,329 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-11 14:56:51,329 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-11 14:56:51,329 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-11 14:56:51,329 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-11 14:56:51,330 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ 2022-02-11 14:56:51,330 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ OK? 2022-02-11 14:56:51,331 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-11 14:56:51,331 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-11 14:56:51,331 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 14:56:51,331 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 14:56:51,332 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 14:56:51,332 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 14:56:51,332 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 14:56:51,332 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 14:56:51,332 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 rootcheck[19944] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled. 2022-02-11 14:56:51,333 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:56:51,333 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] syscom.c:123 at syscom_main(): DEBUG: (6284): Local requests thread ready. 2022-02-11 14:56:51,333 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] mq_op.c:47 at StartMQ(): DEBUG: Connected succesfully to 'queue/sockets/queue' after 0 attempts 2022-02-11 14:56:51,333 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] mq_op.c:48 at StartMQ(): DEBUG: (unix_domain) Maximum send buffer set to: '212992'. 2022-02-11 14:56:51,333 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:185 at main(): INFO: Started (pid: 19946). 2022-02-11 14:56:51,334 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:193 at main(): INFO: (6003): Monitoring path: '/bin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 14:56:51,334 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:193 at main(): INFO: (6003): Monitoring path: '/boot', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 14:56:51,334 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:193 at main(): INFO: (6003): Monitoring path: '/etc', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 14:56:51,334 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:193 at main(): INFO: (6003): Monitoring path: '/sbin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 14:56:51,334 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir1', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 14:56:51,335 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir2', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | realtime'. 2022-02-11 14:56:51,335 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir3', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | whodata'. 2022-02-11 14:56:51,335 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/bin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 14:56:51,335 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/sbin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 14:56:51,336 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:215 at main(): DEBUG: (6357): Maximum disk quota size limit configured to '1048576 KB'. 2022-02-11 14:56:51,336 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mtab' 2022-02-11 14:56:51,336 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/hosts.deny' 2022-02-11 14:56:51,336 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mail/statistics' 2022-02-11 14:56:51,337 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random-seed' 2022-02-11 14:56:51,337 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random.seed' 2022-02-11 14:56:51,337 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/adjtime' 2022-02-11 14:56:51,338 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/httpd/logs' 2022-02-11 14:56:51,338 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/utmpx' 2022-02-11 14:56:51,338 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/wtmpx' 2022-02-11 14:56:51,338 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/cups/certs' 2022-02-11 14:56:51,338 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/dumpdates' 2022-02-11 14:56:51,339 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/svc/volatile' 2022-02-11 14:56:51,339 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/security' 2022-02-11 14:56:51,339 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/debug' 2022-02-11 14:56:51,339 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/dev/core' 2022-02-11 14:56:51,339 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '^/proc' 2022-02-11 14:56:51,339 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '.log$|.swp$' 2022-02-11 14:56:51,340 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:235 at main(): INFO: (6004): No diff for file: '/etc/ssl/private.key' 2022-02-11 14:56:51,340 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:245 at main(): INFO: (6016): Directory set for real time monitoring: '/testdir2'. 2022-02-11 14:56:51,340 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] syscheck_audit.c:243 at audit_init(): WARNING: (6924): Who-data engine cannot start because Auditd is not running. 2022-02-11 14:56:51,340 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:264 at main(): WARNING: (6913): Who-data engine could not start. Switching who-data to real-time. 2022-02-11 14:56:51,340 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] run_check.c:194 at start_daemon(): DEBUG: (6320): Setting process priority to: '10' 2022-02-11 14:56:51,341 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:56:51,341 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] run_check.c:229 at start_daemon(): INFO: (6000): Starting daemon... 2022-02-11 14:56:51,341 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] run_check.c:232 at start_daemon(): INFO: (6010): File integrity monitoring scan frequency: 20 seconds 2022-02-11 14:56:51,341 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 14:56:51,341 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644602205}} 2022-02-11 14:56:51,341 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 14:56:51,342 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-11 14:56:51,342 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-11 14:56:51,342 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-11 14:56:51,342 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-11 14:56:51,342 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 14:56:51,343 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 14:56:51,343 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644602205}} 2022-02-11 14:56:51,343 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.356 sec (0.354 clock sec) 2022-02-11 14:56:51,343 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1620, path count: 1626 2022-02-11 14:56:51,344 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:56:51,344 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:56:51,344 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] run_check.c:387 at fim_run_realtime(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-11 14:56:51,344 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:56:51,344 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] run_check.c:543 at log_realtime_status(): INFO: (6012): Real-time file integrity monitoring started. 2022-02-11 14:56:51,345 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] run_check.c:568 at symlink_checker_thread(): DEBUG: (6033): Starting symbolic link updater. Interval '600'. 2022-02-11 14:56:51,345 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. 2022-02-11 14:56:51,345 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-agent1 and message: .*Initializing FIM Integrity Synchronization check. (.+)$ 2022-02-11 14:56:52,322 - wazuh_testing - DEBUG - Cleaning temporal files... 2022-02-11 14:56:52,323 - wazuh_testing - DEBUG - Checking results... 2022-02-11 14:56:52,324 - wazuh_testing - DEBUG - Received from wazuh-agent1 the expected message: Sync interval is 300 seconds.
-------------------------------Captured log call--------------------------------
DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:1005 Cleaning temporal files... DEBUG wazuh_testing:monitoring.py:994 Checking results... DEBUG wazuh_testing:monitoring.py:1000 Received from wazuh-agent1 the expected message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1644602187,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"ac2db358c1aefae00e2cbb0cfa343cc816a6e98a"}} DEBUG wazuh_testing:monitoring.py:1000 Received from wazuh-manager the expected message: syscheck DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:1005 Cleaning temporal files... DEBUG wazuh_testing:monitoring.py:994 Checking results... DEBUG wazuh_testing:monitoring.py:1000 Received from wazuh-agent1 the expected message: Sync interval is 300 seconds.

Passed

test_synchronization.py::test_synchronization[testdir1-delete-wazuh-manager]

50.90

------------------------------Captured stderr call------------------------------
2022-02-11 14:57:11,801 - wazuh_testing - DEBUG - Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-11 14:57:11,802 - wazuh_testing - DEBUG - Starting file composer for wazuh-agent1 and path: /var/ossec/logs/ossec.log. Composite file in /home/camila/Escritorio/repo/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-agent1_ossec.log.tmp 2022-02-11 14:57:11,803 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-11 14:57:11,805 - wazuh_testing - DEBUG - Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-11 14:57:11,805 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-agent1 and message: .*Sending integrity control message: (.+)$ 2022-02-11 14:57:11,807 - wazuh_testing - DEBUG - Starting file composer for wazuh-manager and path: /var/ossec/logs/ossec.log. Composite file in /home/camila/Escritorio/repo/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-manager_ossec.log.tmp 2022-02-11 14:57:11,807 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-11 14:57:11,808 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-manager and message: .*Agent 001 query: (.+) save2 2022-02-11 14:57:13,307 - wazuh_testing - DEBUG - 2022/02/11 18:56:39 wazuh-logcollector: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:57:13,307 - wazuh_testing - DEBUG - 2022/02/11 18:56:39 wazuh-syscheckd[19480] sig_op.c:49 at HandleSIG(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:57:13,307 - wazuh_testing - DEBUG - 2022/02/11 18:56:39 wazuh-agentd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:57:13,307 - wazuh_testing - DEBUG - 2022/02/11 18:56:40 wazuh-execd: INFO: (1314): Shutdown received. Deleting responses. 2022-02-11 14:57:13,308 - wazuh_testing - DEBUG - 2022/02/11 18:56:40 wazuh-execd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:57:13,308 - wazuh_testing - DEBUG - 2022/02/11 18:56:43 wazuh-syscheckd[19908] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 14:57:13,308 - wazuh_testing - DEBUG - 2022/02/11 18:56:43 wazuh-syscheckd[19908] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 14:57:13,308 - wazuh_testing - DEBUG - 2022/02/11 18:56:43 wazuh-syscheckd[19908] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir1' due to [(2)-(No such file or directory)]. 2022-02-11 14:57:13,308 - wazuh_testing - DEBUG - 2022/02/11 18:56:43 wazuh-syscheckd[19908] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-11 14:57:13,309 - wazuh_testing - DEBUG - 2022/02/11 18:56:43 wazuh-syscheckd[19908] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-11 14:57:13,309 - wazuh_testing - DEBUG - 2022/02/11 18:56:43 wazuh-syscheckd[19908] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-11 14:57:13,309 - wazuh_testing - DEBUG - 2022/02/11 18:56:43 wazuh-syscheckd[19908] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-11 14:57:13,309 - wazuh_testing - DEBUG - 2022/02/11 18:56:43 wazuh-syscheckd[19908] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-11 14:57:13,309 - wazuh_testing - DEBUG - 2022/02/11 18:56:43 wazuh-syscheckd[19908] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ 2022-02-11 14:57:13,310 - wazuh_testing - DEBUG - 2022/02/11 18:56:43 wazuh-syscheckd[19908] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ OK? 2022-02-11 14:57:13,310 - wazuh_testing - DEBUG - 2022/02/11 18:56:43 wazuh-syscheckd[19908] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-11 14:57:13,310 - wazuh_testing - DEBUG - 2022/02/11 18:56:43 wazuh-syscheckd[19908] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-11 14:57:13,310 - wazuh_testing - DEBUG - 2022/02/11 18:56:43 wazuh-syscheckd[19908] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 14:57:13,311 - wazuh_testing - DEBUG - 2022/02/11 18:56:39 wazuh-db[15442] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-connection-status {"id":1,"connection_status":"disconnected","sync_status":"synced"} 2022-02-11 14:57:13,311 - wazuh_testing - DEBUG - 2022/02/11 18:56:43 wazuh-syscheckd[19908] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 14:57:13,311 - wazuh_testing - DEBUG - 2022/02/11 18:56:43 wazuh-syscheckd[19908] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 14:57:13,311 - wazuh_testing - DEBUG - 2022/02/11 18:56:39 wazuh-db[15442] main.c:290 at run_dealer(): DEBUG: New client connected (35). 2022-02-11 14:57:13,311 - wazuh_testing - DEBUG - 2022/02/11 18:56:43 wazuh-syscheckd[19908] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 14:57:13,311 - wazuh_testing - DEBUG - 2022/02/11 18:56:39 wazuh-db[15442] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: get-labels 1 2022-02-11 14:57:13,311 - wazuh_testing - DEBUG - 2022/02/11 18:56:41 wazuh-db[15442] main.c:290 at run_dealer(): DEBUG: New client connected (36). 2022-02-11 14:57:13,312 - wazuh_testing - DEBUG - 2022/02/11 18:56:43 wazuh-syscheckd[19908] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 14:57:13,312 - wazuh_testing - DEBUG - 2022/02/11 18:56:41 wazuh-db[15442] wdb_parser.c:928 at wdb_parse(): DEBUG: Task query: upgrade_cancel_tasks {"node":"wazuh-master"} 2022-02-11 14:57:13,312 - wazuh_testing - DEBUG - 2022/02/11 18:56:41 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 36 disconnected. 2022-02-11 14:57:13,312 - wazuh_testing - DEBUG - 2022/02/11 18:56:43 wazuh-syscheckd[19908] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 14:57:13,312 - wazuh_testing - DEBUG - 2022/02/11 18:56:43 wazuh-execd: INFO: Started (pid: 19921). 2022-02-11 14:57:13,312 - wazuh_testing - DEBUG - 2022/02/11 18:56:42 wazuh-db[15442] wdb.c:918 at wdb_commit_old(): DEBUG: Agent '001' database commited. Time: 12.080 ms. 2022-02-11 14:57:13,312 - wazuh_testing - DEBUG - 2022/02/11 18:56:44 wazuh-agentd: INFO: (1410): Reading authentication keys file. 2022-02-11 14:57:13,313 - wazuh_testing - DEBUG - 2022/02/11 18:56:44 wazuh-db[15442] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-keepalive {"id":1,"connection_status":"pending","sync_status":"synced"} 2022-02-11 14:57:13,313 - wazuh_testing - DEBUG - 2022/02/11 18:56:44 wazuh-agentd: INFO: Using notify time: 10 and max time to reconnect: 60 2022-02-11 14:57:13,313 - wazuh_testing - DEBUG - 2022/02/11 18:56:47 wazuh-db[15442] main.c:290 at run_dealer(): DEBUG: New client connected (34). 2022-02-11 14:57:13,313 - wazuh_testing - DEBUG - 2022/02/11 18:56:44 wazuh-agentd: INFO: Version detected -> Linux |wazuh-agent1 |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64 [Debian GNU/Linux|debian: 10 (buster)] - Wazuh v4.2.5 2022-02-11 14:57:13,313 - wazuh_testing - DEBUG - 2022/02/11 18:56:44 wazuh-agentd: INFO: Started (pid: 19932). 2022-02-11 14:57:13,313 - wazuh_testing - DEBUG - 2022/02/11 18:56:44 wazuh-agentd: INFO: Server IP Address: wazuh-manager/172.17.0.2 2022-02-11 14:57:13,314 - wazuh_testing - DEBUG - 2022/02/11 18:56:44 wazuh-agentd: INFO: Using AES as encryption method. 2022-02-11 14:57:13,314 - wazuh_testing - DEBUG - 2022/02/11 18:56:47 wazuh-db[15442] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64","os_arch":"x86_64"} 2022-02-11 14:57:13,314 - wazuh_testing - DEBUG - 2022/02/11 18:56:44 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 14:57:13,314 - wazuh_testing - DEBUG - 2022/02/11 18:56:47 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1644602205 2022-02-11 14:57:13,314 - wazuh_testing - DEBUG - 2022/02/11 18:56:44 wazuh-agentd: INFO: (4102): Connected to the server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 14:57:13,314 - wazuh_testing - DEBUG - 2022/02/11 18:56:47 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update end_scan 1644602205 2022-02-11 14:57:13,314 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 14:57:13,314 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 14:57:13,315 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir1' due to [(2)-(No such file or directory)]. 2022-02-11 14:57:13,315 - wazuh_testing - DEBUG - 2022/02/11 18:56:47 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_global {"id":1644602205,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"c7d4e863493255e1f6dd0a90c6f1bba963e76a4b"} 2022-02-11 14:57:13,315 - wazuh_testing - DEBUG - 2022/02/11 18:56:47 wazuh-db[15442] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.916 ms. 2022-02-11 14:57:13,315 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-11 14:57:13,315 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-11 14:57:13,315 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-11 14:57:13,315 - wazuh_testing - DEBUG - 2022/02/11 18:56:47 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602205,"version":2,"begin":"/bin/bash","end":"/sbin/chcpu","tail":"/sbin/ctrlaltdel","checksum":"57402e3268a27191e04bfc132831045ee0296f32"} 2022-02-11 14:57:13,316 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-11 14:57:13,316 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-11 14:57:13,316 - wazuh_testing - DEBUG - 2022/02/11 18:56:47 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602205,"version":2,"begin":"/sbin/ctrlaltdel","end":"/usr/sbin/zic","checksum":"3b41a81d6e4d0a0cbef3d511ad9d87bc241c6525"} 2022-02-11 14:57:13,316 - wazuh_testing - DEBUG - 2022/02/11 18:56:47 wazuh-db[15442] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.264 ms. 2022-02-11 14:57:13,316 - wazuh_testing - DEBUG - 2022/02/11 18:56:47 wazuh-db[15442] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.228 ms. 2022-02-11 14:57:13,316 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ 2022-02-11 14:57:13,317 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ OK? 2022-02-11 14:57:13,317 - wazuh_testing - DEBUG - 2022/02/11 18:56:47 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602205,"version":2,"begin":"/sbin/ctrlaltdel","end":"/usr/bin/pdb","tail":"/usr/bin/pdb2","checksum":"7002e71f8a0a01cb65aadb40c212bd7eb99628a7"} 2022-02-11 14:57:13,317 - wazuh_testing - DEBUG - 2022/02/11 18:56:47 wazuh-db[15442] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.123 ms. 2022-02-11 14:57:13,317 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-11 14:57:13,317 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-11 14:57:13,317 - wazuh_testing - DEBUG - 2022/02/11 18:56:47 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602205,"version":2,"begin":"/usr/bin/pdb2","end":"/usr/sbin/zic","checksum":"f13d51f7876684d6bc17db143ee1529b892c54d2"} 2022-02-11 14:57:13,317 - wazuh_testing - DEBUG - 2022/02/11 18:56:47 wazuh-db[15442] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.128 ms. 2022-02-11 14:57:13,317 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 14:57:13,318 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 14:57:13,318 - wazuh_testing - DEBUG - 2022/02/11 18:56:47 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602205,"version":2,"begin":"/usr/bin/dpkg-genchanges","end":"/usr/bin/pdb","checksum":"ff9bbbbd6461e1dbdffe13c29b2906bb00bc7a1b"} 2022-02-11 14:57:13,318 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 14:57:13,318 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 14:57:13,318 - wazuh_testing - DEBUG - 2022/02/11 18:56:47 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602205,"version":2,"begin":"/sbin/ctrlaltdel","end":"/usr/bin/dpkg-genbuildinfo","tail":"/usr/bin/dpkg-genchanges","checksum":"bb676047497d09140f97bb2e25f3ee35609f9ac3"} 2022-02-11 14:57:13,319 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 14:57:13,319 - wazuh_testing - DEBUG - 2022/02/11 18:56:47 wazuh-db[15442] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.318 ms. 2022-02-11 14:57:13,319 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 14:57:13,319 - wazuh_testing - DEBUG - 2022/02/11 18:56:47 wazuh-db[15442] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.353 ms. 2022-02-11 14:57:13,319 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 rootcheck[19944] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled. 2022-02-11 14:57:13,319 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:57:13,320 - wazuh_testing - DEBUG - 2022/02/11 18:56:47 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602205,"version":2,"begin":"/sbin/ctrlaltdel","end":"/usr/bin/apt-ftparchive","tail":"/usr/bin/apt-get","checksum":"250b2f6fc0cab9fc45ba6ac43a777b2ff67ea1c8"} 2022-02-11 14:57:13,320 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] syscom.c:123 at syscom_main(): DEBUG: (6284): Local requests thread ready. 2022-02-11 14:57:13,320 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] mq_op.c:47 at StartMQ(): DEBUG: Connected succesfully to 'queue/sockets/queue' after 0 attempts 2022-02-11 14:57:13,320 - wazuh_testing - DEBUG - 2022/02/11 18:56:47 wazuh-db[15442] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.115 ms. 2022-02-11 14:57:13,320 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] mq_op.c:48 at StartMQ(): DEBUG: (unix_domain) Maximum send buffer set to: '212992'. 2022-02-11 14:57:13,320 - wazuh_testing - DEBUG - 2022/02/11 18:56:47 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602205,"version":2,"begin":"/usr/bin/apt-get","end":"/usr/bin/dpkg-genbuildinfo","checksum":"56074249484c9c92717d5c3bd886ddd98c728323"} 2022-02-11 14:57:13,320 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:185 at main(): INFO: Started (pid: 19946). 2022-02-11 14:57:13,320 - wazuh_testing - DEBUG - 2022/02/11 18:56:47 wazuh-db[15442] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.140 ms. 2022-02-11 14:57:13,320 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:193 at main(): INFO: (6003): Monitoring path: '/bin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 14:57:13,321 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:193 at main(): INFO: (6003): Monitoring path: '/boot', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 14:57:13,321 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:193 at main(): INFO: (6003): Monitoring path: '/etc', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 14:57:13,321 - wazuh_testing - DEBUG - 2022/02/11 18:56:47 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602205,"version":2,"begin":"/sbin/ctrlaltdel","end":"/sbin/mkhomedir_helper","tail":"/sbin/mkswap","checksum":"7a7df0bd9bb5154b28eb072bebe1af0b79c59afb"} 2022-02-11 14:57:13,321 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:193 at main(): INFO: (6003): Monitoring path: '/sbin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 14:57:13,321 - wazuh_testing - DEBUG - 2022/02/11 18:56:47 wazuh-db[15442] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.102 ms. 2022-02-11 14:57:13,321 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir1', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 14:57:13,321 - wazuh_testing - DEBUG - 2022/02/11 18:56:48 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602205,"version":2,"begin":"/sbin/mkswap","end":"/usr/bin/apt-ftparchive","checksum":"a47a6c5678344283714ed664abc9a85413fc444d"} 2022-02-11 14:57:13,321 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir2', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | realtime'. 2022-02-11 14:57:13,321 - wazuh_testing - DEBUG - 2022/02/11 18:56:48 wazuh-db[15442] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.105 ms. 2022-02-11 14:57:13,321 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir3', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | whodata'. 2022-02-11 14:57:13,322 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/bin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 14:57:13,322 - wazuh_testing - DEBUG - 2022/02/11 18:56:48 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602205,"version":2,"begin":"/sbin/mkswap","end":"/sbin/start-stop-daemon","tail":"/sbin/sulogin","checksum":"b356159685213d77a501787c4ba65eff3cf7fba1"} 2022-02-11 14:57:13,322 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/sbin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 14:57:13,322 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:215 at main(): DEBUG: (6357): Maximum disk quota size limit configured to '1048576 KB'. 2022-02-11 14:57:13,322 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mtab' 2022-02-11 14:57:13,322 - wazuh_testing - DEBUG - 2022/02/11 18:56:48 wazuh-db[15442] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.102 ms. 2022-02-11 14:57:13,322 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/hosts.deny' 2022-02-11 14:57:13,322 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mail/statistics' 2022-02-11 14:57:13,322 - wazuh_testing - DEBUG - 2022/02/11 18:56:48 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602205,"version":2,"begin":"/sbin/sulogin","end":"/usr/bin/apt-ftparchive","checksum":"a9b1eb7c788d7e88889b5abba258bd64f03e7546"} 2022-02-11 14:57:13,322 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random-seed' 2022-02-11 14:57:13,322 - wazuh_testing - DEBUG - 2022/02/11 18:56:48 wazuh-db[15442] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.097 ms. 2022-02-11 14:57:13,322 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random.seed' 2022-02-11 14:57:13,323 - wazuh_testing - DEBUG - 2022/02/11 18:56:48 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602205,"version":2,"begin":"/sbin/sulogin","end":"/sbin/wipefs","tail":"/sbin/zramctl","checksum":"086fb81bf040732edfe2a920d67de456c77c8c3d"} 2022-02-11 14:57:13,323 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/adjtime' 2022-02-11 14:57:13,323 - wazuh_testing - DEBUG - 2022/02/11 18:56:48 wazuh-db[15442] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.085 ms. 2022-02-11 14:57:13,323 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/httpd/logs' 2022-02-11 14:57:13,323 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/utmpx' 2022-02-11 14:57:13,323 - wazuh_testing - DEBUG - 2022/02/11 18:56:48 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602205,"version":2,"begin":"/sbin/zramctl","end":"/usr/bin/apt-ftparchive","checksum":"174a46ff91239e95a534c5be9f1126cf6bcaba27"} 2022-02-11 14:57:13,323 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/wtmpx' 2022-02-11 14:57:13,323 - wazuh_testing - DEBUG - 2022/02/11 18:56:48 wazuh-db[15442] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.080 ms. 2022-02-11 14:57:13,323 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/cups/certs' 2022-02-11 14:57:13,323 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/dumpdates' 2022-02-11 14:57:13,323 - wazuh_testing - DEBUG - 2022/02/11 18:56:48 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602205,"version":2,"begin":"/sbin/zramctl","end":"/usr/bin/addpart","tail":"/usr/bin/addr2line","checksum":"fb4a71a3419fae54401ef5cbedba509446f836eb"} 2022-02-11 14:57:13,323 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/svc/volatile' 2022-02-11 14:57:13,323 - wazuh_testing - DEBUG - 2022/02/11 18:56:48 wazuh-db[15442] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.069 ms. 2022-02-11 14:57:13,323 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/security' 2022-02-11 14:57:13,324 - wazuh_testing - DEBUG - 2022/02/11 18:56:48 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602205,"version":2,"begin":"/usr/bin/addr2line","end":"/usr/bin/apt-ftparchive","checksum":"59201a3f75bcbf8838c851c3821c5407a36b74bb"} 2022-02-11 14:57:13,324 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/debug' 2022-02-11 14:57:13,324 - wazuh_testing - DEBUG - 2022/02/11 18:56:48 wazuh-db[15442] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.093 ms. 2022-02-11 14:57:13,324 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/dev/core' 2022-02-11 14:57:13,324 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '^/proc' 2022-02-11 14:57:13,324 - wazuh_testing - DEBUG - 2022/02/11 18:56:48 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602205,"version":2,"begin":"/sbin/zramctl","end":"/usr/bin/[","tail":"/usr/bin/aclocal","checksum":"d083d6d286795943f55fdf45b82f6bd7837af9fe"} 2022-02-11 14:57:13,324 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '.log$|.swp$' 2022-02-11 14:57:13,324 - wazuh_testing - DEBUG - 2022/02/11 18:56:48 wazuh-db[15442] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.052 ms. 2022-02-11 14:57:13,324 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:235 at main(): INFO: (6004): No diff for file: '/etc/ssl/private.key' 2022-02-11 14:57:13,324 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:245 at main(): INFO: (6016): Directory set for real time monitoring: '/testdir2'. 2022-02-11 14:57:13,324 - wazuh_testing - DEBUG - 2022/02/11 18:56:48 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602205,"version":2,"begin":"/usr/bin/aclocal","end":"/usr/bin/addpart","checksum":"6d0f3eb4c663d5a1d575d605ff8c76994f48d9b2"} 2022-02-11 14:57:13,324 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] syscheck_audit.c:243 at audit_init(): WARNING: (6924): Who-data engine cannot start because Auditd is not running. 2022-02-11 14:57:13,324 - wazuh_testing - DEBUG - 2022/02/11 18:56:48 wazuh-db[15442] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.062 ms. 2022-02-11 14:57:13,325 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] main.c:264 at main(): WARNING: (6913): Who-data engine could not start. Switching who-data to real-time. 2022-02-11 14:57:13,325 - wazuh_testing - DEBUG - 2022/02/11 18:56:48 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602205,"version":2,"begin":"/sbin/zramctl","end":"/sbin/zramctl","tail":"/usr/bin/2to3-2.7","checksum":"58b2b87ce2162d80a895c740e0ed2124836230b7"} 2022-02-11 14:57:13,325 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] run_check.c:194 at start_daemon(): DEBUG: (6320): Setting process priority to: '10' 2022-02-11 14:57:13,325 - wazuh_testing - DEBUG - 2022/02/11 18:56:48 wazuh-db[15442] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.042 ms. 2022-02-11 14:57:13,325 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:57:13,325 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] run_check.c:229 at start_daemon(): INFO: (6000): Starting daemon... 2022-02-11 14:57:13,325 - wazuh_testing - DEBUG - 2022/02/11 18:56:49 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602205,"version":2,"begin":"/usr/bin/2to3-2.7","end":"/usr/bin/[","checksum":"97375af060bd460f67eb174cbf79b28414737339"} 2022-02-11 14:57:13,325 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] run_check.c:232 at start_daemon(): INFO: (6010): File integrity monitoring scan frequency: 20 seconds 2022-02-11 14:57:13,325 - wazuh_testing - DEBUG - 2022/02/11 18:56:49 wazuh-db[15442] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.062 ms. 2022-02-11 14:57:13,325 - wazuh_testing - DEBUG - 2022/02/11 18:56:52 wazuh-db[15442] wdb.c:918 at wdb_commit_old(): DEBUG: Agent 'tasks' database commited. Time: 0.038 ms. 2022-02-11 14:57:13,325 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 14:57:13,325 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644602205}} 2022-02-11 14:57:13,326 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 14:57:13,326 - wazuh_testing - DEBUG - 2022/02/11 18:56:54 wazuh-db[15442] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64","os_arch":"x86_64"} 2022-02-11 14:57:13,326 - wazuh_testing - DEBUG - 2022/02/11 18:57:04 wazuh-db[15442] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-connection-status {"id":1,"connection_status":"disconnected","sync_status":"synced"} 2022-02-11 14:57:13,326 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-11 14:57:13,326 - wazuh_testing - DEBUG - 2022/02/11 18:57:04 wazuh-db[15442] main.c:290 at run_dealer(): DEBUG: New client connected (36). 2022-02-11 14:57:13,326 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-11 14:57:13,326 - wazuh_testing - DEBUG - 2022/02/11 18:57:04 wazuh-db[15442] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: get-labels 1 2022-02-11 14:57:13,326 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-11 14:57:13,326 - wazuh_testing - DEBUG - 2022/02/11 18:57:05 wazuh-db[15442] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-keepalive {"id":1,"connection_status":"pending","sync_status":"synced"} 2022-02-11 14:57:13,326 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-11 14:57:13,326 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 14:57:13,327 - wazuh_testing - DEBUG - 2022/02/11 18:57:09 wazuh-db[15442] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64","os_arch":"x86_64"} 2022-02-11 14:57:13,327 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 14:57:13,327 - wazuh_testing - DEBUG - 2022/02/11 18:57:09 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1644602226 2022-02-11 14:57:13,327 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644602205}} 2022-02-11 14:57:13,327 - wazuh_testing - DEBUG - 2022/02/11 18:57:09 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update end_scan 1644602226 2022-02-11 14:57:13,327 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.356 sec (0.354 clock sec) 2022-02-11 14:57:13,327 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1620, path count: 1626 2022-02-11 14:57:13,327 - wazuh_testing - DEBUG - 2022/02/11 18:57:09 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_global {"id":1644602226,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"daad6ca3d01be9b9d4ac643a212c6136b020a144"} 2022-02-11 14:57:13,327 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:57:13,327 - wazuh_testing - DEBUG - 2022/02/11 18:57:09 wazuh-db[15442] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 1.158 ms. 2022-02-11 14:57:13,327 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:57:13,328 - wazuh_testing - DEBUG - 2022/02/11 18:57:09 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602226,"version":2,"begin":"/bin/bash","end":"/sbin/chcpu","tail":"/sbin/ctrlaltdel","checksum":"57402e3268a27191e04bfc132831045ee0296f32"} 2022-02-11 14:57:13,328 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] run_check.c:387 at fim_run_realtime(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-11 14:57:13,328 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:57:13,328 - wazuh_testing - DEBUG - 2022/02/11 18:57:09 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602226,"version":2,"begin":"/sbin/ctrlaltdel","end":"/usr/sbin/zic","checksum":"2a384fbf0ce2638dd0ca71f805cf631aab0134b1"} 2022-02-11 14:57:13,328 - wazuh_testing - DEBUG - 2022/02/11 18:57:09 wazuh-db[15442] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.587 ms. 2022-02-11 14:57:13,328 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] run_check.c:543 at log_realtime_status(): INFO: (6012): Real-time file integrity monitoring started. 2022-02-11 14:57:13,328 - wazuh_testing - DEBUG - 2022/02/11 18:57:09 wazuh-db[15442] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.617 ms. 2022-02-11 14:57:13,328 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] run_check.c:568 at symlink_checker_thread(): DEBUG: (6033): Starting symbolic link updater. Interval '600'. 2022-02-11 14:57:13,328 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. 2022-02-11 14:57:13,329 - wazuh_testing - DEBUG - 2022/02/11 18:57:09 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602226,"version":2,"begin":"/sbin/ctrlaltdel","end":"/usr/bin/pdb","tail":"/usr/bin/pdb2","checksum":"39af41e590393a200922cdc10bffeb64402ecfb6"} 2022-02-11 14:57:13,329 - wazuh_testing - DEBUG - 2022/02/11 18:56:45 wazuh-syscheckd[19944] run_check.c:82 at fim_send_sync_msg(): DEBUG: (6317): Sending integrity control message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1644602205,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"c7d4e863493255e1f6dd0a90c6f1bba963e76a4b"}} 2022-02-11 14:57:13,329 - wazuh_testing - DEBUG - 2022/02/11 18:57:09 wazuh-db[15442] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.335 ms. 2022-02-11 14:57:13,329 - wazuh_testing - DEBUG - 2022/02/11 18:57:09 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602226,"version":2,"begin":"/usr/bin/pdb2","end":"/usr/sbin/zic","checksum":"f13d51f7876684d6bc17db143ee1529b892c54d2"} 2022-02-11 14:57:13,329 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-agent1 and message: .*Sending integrity control message: (.+)$ 2022-02-11 14:57:13,329 - wazuh_testing - DEBUG - 2022/02/11 18:57:09 wazuh-db[15442] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.290 ms. 2022-02-11 14:57:13,330 - wazuh_testing - DEBUG - 2022/02/11 18:57:09 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602226,"version":2,"begin":"/usr/bin/dpkg-genbuildinfo","end":"/usr/bin/pdb","checksum":"fcd12ca69011f5033c3706ba868e7f2983050598"} 2022-02-11 14:57:13,330 - wazuh_testing - DEBUG - 2022/02/11 18:57:09 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602226,"version":2,"begin":"/sbin/ctrlaltdel","end":"/usr/bin/dpkg-divert","tail":"/usr/bin/dpkg-genbuildinfo","checksum":"4a07284f21e8a009d58c48f66a6e9f44a1f767eb"} 2022-02-11 14:57:13,330 - wazuh_testing - DEBUG - 2022/02/11 18:57:09 wazuh-db[15442] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.217 ms. 2022-02-11 14:57:13,330 - wazuh_testing - DEBUG - 2022/02/11 18:57:09 wazuh-db[15442] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.219 ms. 2022-02-11 14:57:13,331 - wazuh_testing - DEBUG - 2022/02/11 18:57:09 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602226,"version":2,"begin":"/sbin/ctrlaltdel","end":"/usr/bin/apt-extracttemplates","tail":"/usr/bin/apt-ftparchive","checksum":"15865b7a5b68953e0e38ee5b9455f40589c06baa"} 2022-02-11 14:57:13,331 - wazuh_testing - DEBUG - 2022/02/11 18:57:09 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602226,"version":2,"begin":"/usr/bin/apt-ftparchive","end":"/usr/bin/dpkg-divert","checksum":"ab79628f5b16446ec1a1f2daeaf1afd2511680e1"} 2022-02-11 14:57:13,331 - wazuh_testing - DEBUG - 2022/02/11 18:57:09 wazuh-db[15442] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.118 ms. 2022-02-11 14:57:13,331 - wazuh_testing - DEBUG - 2022/02/11 18:57:09 wazuh-db[15442] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.144 ms. 2022-02-11 14:57:13,331 - wazuh_testing - DEBUG - 2022/02/11 18:57:09 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602226,"version":2,"begin":"/sbin/ctrlaltdel","end":"/sbin/mkhomedir_helper","tail":"/sbin/mkswap","checksum":"7a7df0bd9bb5154b28eb072bebe1af0b79c59afb"} 2022-02-11 14:57:13,332 - wazuh_testing - DEBUG - 2022/02/11 18:57:09 wazuh-db[15442] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.109 ms. 2022-02-11 14:57:13,332 - wazuh_testing - DEBUG - 2022/02/11 18:57:09 wazuh-db[15442] wdb.c:918 at wdb_commit_old(): DEBUG: Agent 'global' database commited. Time: 1.927 ms. 2022-02-11 14:57:13,332 - wazuh_testing - DEBUG - 2022/02/11 18:57:10 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602226,"version":2,"begin":"/sbin/mkswap","end":"/usr/bin/apt-extracttemplates","checksum":"c2ae2fd91af3dee7c8257d90eaedc4955df6bcab"} 2022-02-11 14:57:13,332 - wazuh_testing - DEBUG - 2022/02/11 18:57:10 wazuh-db[15442] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.126 ms. 2022-02-11 14:57:13,332 - wazuh_testing - DEBUG - 2022/02/11 18:57:10 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602226,"version":2,"begin":"/sbin/mkswap","end":"/sbin/start-stop-daemon","tail":"/sbin/sulogin","checksum":"b356159685213d77a501787c4ba65eff3cf7fba1"} 2022-02-11 14:57:13,333 - wazuh_testing - DEBUG - 2022/02/11 18:57:10 wazuh-db[15442] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.097 ms. 2022-02-11 14:57:13,333 - wazuh_testing - DEBUG - 2022/02/11 18:57:10 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602226,"version":2,"begin":"/sbin/sulogin","end":"/usr/bin/apt-extracttemplates","checksum":"b25cbcfe959c68329d80d2c41c9ac29dedd32317"} 2022-02-11 14:57:13,333 - wazuh_testing - DEBUG - 2022/02/11 18:57:10 wazuh-db[15442] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.069 ms. 2022-02-11 14:57:13,333 - wazuh_testing - DEBUG - 2022/02/11 18:57:10 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602226,"version":2,"begin":"/sbin/sulogin","end":"/sbin/wipefs","tail":"/sbin/zramctl","checksum":"086fb81bf040732edfe2a920d67de456c77c8c3d"} 2022-02-11 14:57:13,333 - wazuh_testing - DEBUG - 2022/02/11 18:57:10 wazuh-db[15442] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.050 ms. 2022-02-11 14:57:13,334 - wazuh_testing - DEBUG - 2022/02/11 18:57:10 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602226,"version":2,"begin":"/sbin/zramctl","end":"/usr/bin/apt-extracttemplates","checksum":"8317dc49483af0f040600a4f13cf3f597c453df6"} 2022-02-11 14:57:13,334 - wazuh_testing - DEBUG - 2022/02/11 18:57:10 wazuh-db[15442] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.048 ms. 2022-02-11 14:57:13,334 - wazuh_testing - DEBUG - 2022/02/11 18:57:10 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602226,"version":2,"begin":"/sbin/zramctl","end":"/usr/bin/aclocal-1.16","tail":"/usr/bin/addpart","checksum":"b3e1a9428a044f6c3c234cd57a3b595eae8fb273"} 2022-02-11 14:57:13,335 - wazuh_testing - DEBUG - 2022/02/11 18:57:10 wazuh-db[15442] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.061 ms. 2022-02-11 14:57:13,335 - wazuh_testing - DEBUG - 2022/02/11 18:57:10 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602226,"version":2,"begin":"/usr/bin/addpart","end":"/usr/bin/apt-extracttemplates","checksum":"7d1a3bbe28f2c9e567f8311757d46ea5365d7112"} 2022-02-11 14:57:13,336 - wazuh_testing - DEBUG - 2022/02/11 18:57:10 wazuh-db[15442] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.077 ms. 2022-02-11 14:57:13,337 - wazuh_testing - DEBUG - 2022/02/11 18:57:10 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602226,"version":2,"begin":"/sbin/zramctl","end":"/usr/bin/2to3-2.7","tail":"/usr/bin/[","checksum":"3cff87cf26bf29ff907b37fce0a8a66f3359d6b3"} 2022-02-11 14:57:13,337 - wazuh_testing - DEBUG - 2022/02/11 18:57:10 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602226,"version":2,"begin":"/usr/bin/[","end":"/usr/bin/aclocal-1.16","checksum":"0f1d35a6565c33bf9697c50fd2d7d2a4ebccbc45"} 2022-02-11 14:57:13,338 - wazuh_testing - DEBUG - 2022/02/11 18:57:10 wazuh-db[15442] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.070 ms. 2022-02-11 14:57:13,338 - wazuh_testing - DEBUG - 2022/02/11 18:57:10 wazuh-db[15442] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.071 ms. 2022-02-11 14:57:13,338 - wazuh_testing - DEBUG - 2022/02/11 18:57:10 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602226,"version":2,"begin":"/sbin/zramctl","end":"/sbin/zramctl","tail":"/testdir1/testdir1.txt","checksum":"58b2b87ce2162d80a895c740e0ed2124836230b7"} 2022-02-11 14:57:13,338 - wazuh_testing - DEBUG - 2022/02/11 18:57:10 wazuh-db[15442] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.044 ms. 2022-02-11 14:57:13,339 - wazuh_testing - DEBUG - 2022/02/11 18:57:11 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602226,"version":2,"begin":"/testdir1/testdir1.txt","end":"/usr/bin/2to3-2.7","checksum":"83c0056e450270dc3ffcab4eec742e766eb04cc4"} 2022-02-11 14:57:13,339 - wazuh_testing - DEBUG - 2022/02/11 18:57:11 wazuh-db[15442] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.041 ms. 2022-02-11 14:57:13,339 - wazuh_testing - DEBUG - 2022/02/11 18:57:11 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602226,"version":2,"begin":"/testdir1/testdir1.txt","end":"/testdir1/testdir1.txt","tail":"/usr/bin/2to3-2.7","checksum":"b8fdcb227b8ba010c4ef935cee3fa4c20ee3f677"} 2022-02-11 14:57:13,339 - wazuh_testing - DEBUG - 2022/02/11 18:57:11 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602226,"version":2,"begin":"/usr/bin/2to3-2.7","end":"/usr/bin/2to3-2.7","checksum":"f621f8dd560e58c5f017dfd42d98bb3a72466d1d"} 2022-02-11 14:57:13,339 - wazuh_testing - DEBUG - 2022/02/11 18:57:11 wazuh-db[15442] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.028 ms. 2022-02-11 14:57:13,340 - wazuh_testing - DEBUG - 2022/02/11 18:57:11 wazuh-db[15442] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file save2 {"path":"/testdir1/testdir1.txt","timestamp":1644602226,"version":2,"attributes":{"type":"file","size":0,"perm":"rw-r--r--","uid":"0","gid":"0","user_name":"root","group_name":"root","inode":17179747,"mtime":1644602221,"hash_md5":"d41d8cd98f00b204e9800998ecf8427e","hash_sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","hash_sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","checksum":"a379395aba018f41dca7ff13d29a976a8910c040"}} 2022-02-11 14:57:13,340 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-manager and message: .*Agent 001 query: (.+) save2 2022-02-11 14:57:14,314 - wazuh_testing - DEBUG - Cleaning temporal files... 2022-02-11 14:57:14,314 - wazuh_testing - DEBUG - Checking results... 2022-02-11 14:57:14,315 - wazuh_testing - DEBUG - Received from wazuh-agent1 the expected message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1644602205,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"c7d4e863493255e1f6dd0a90c6f1bba963e76a4b"}} 2022-02-11 14:57:14,316 - wazuh_testing - DEBUG - Received from wazuh-manager the expected message: fim_file 2022-02-11 14:57:40,782 - wazuh_testing - DEBUG - Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-11 14:57:40,783 - wazuh_testing - DEBUG - Starting file composer for wazuh-manager and path: /var/ossec/logs/ossec.log. Composite file in /home/camila/Escritorio/repo/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-manager_ossec.log.tmp 2022-02-11 14:57:40,784 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-11 14:57:40,787 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-manager and message: .*Initializing FIM Integrity Synchronization check. (.+)$ 2022-02-11 14:57:42,289 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-modulesd:syscollector: INFO: Stop received for Syscollector. 2022-02-11 14:57:42,289 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 12 disconnected. 2022-02-11 14:57:42,289 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-monitord: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:57:42,289 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-logcollector: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:57:42,289 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-remoted: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:57:42,289 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 25 disconnected. 2022-02-11 14:57:42,289 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 24 disconnected. 2022-02-11 14:57:42,289 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 18 disconnected. 2022-02-11 14:57:42,289 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 16 disconnected. 2022-02-11 14:57:42,289 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-syscheckd[15576] sig_op.c:49 at HandleSIG(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:57:42,289 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-analysisd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:57:42,289 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 36 disconnected. 2022-02-11 14:57:42,289 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 34 disconnected. 2022-02-11 14:57:42,290 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 33 disconnected. 2022-02-11 14:57:42,290 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 35 disconnected. 2022-02-11 14:57:42,290 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 31 disconnected. 2022-02-11 14:57:42,290 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 28 disconnected. 2022-02-11 14:57:42,290 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 27 disconnected. 2022-02-11 14:57:42,290 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 29 disconnected. 2022-02-11 14:57:42,290 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 22 disconnected. 2022-02-11 14:57:42,290 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 20 disconnected. 2022-02-11 14:57:42,290 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 32 disconnected. 2022-02-11 14:57:42,290 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 21 disconnected. 2022-02-11 14:57:42,291 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 30 disconnected. 2022-02-11 14:57:42,291 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 6 disconnected. 2022-02-11 14:57:42,291 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 26 disconnected. 2022-02-11 14:57:42,291 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 19 disconnected. 2022-02-11 14:57:42,291 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 13 disconnected. 2022-02-11 14:57:42,291 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 11 disconnected. 2022-02-11 14:57:42,291 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 23 disconnected. 2022-02-11 14:57:42,291 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 10 disconnected. 2022-02-11 14:57:42,291 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-execd: INFO: (1314): Shutdown received. Deleting responses. 2022-02-11 14:57:42,291 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-execd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:57:42,291 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:468 at handler(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:57:42,291 - wazuh_testing - DEBUG - 2022/02/11 18:57:21 wazuh-db[15442] wdb.c:872 at wdb_close_all(): DEBUG: Closing all databases... 2022-02-11 14:57:42,292 - wazuh_testing - DEBUG - 2022/02/11 18:57:21 wazuh-db[15442] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent 001 2022-02-11 14:57:42,292 - wazuh_testing - DEBUG - 2022/02/11 18:57:21 wazuh-db[15442] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent 000 2022-02-11 14:57:42,292 - wazuh_testing - DEBUG - 2022/02/11 18:57:21 wazuh-db[15442] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent mitre 2022-02-11 14:57:42,292 - wazuh_testing - DEBUG - 2022/02/11 18:57:21 wazuh-db[15442] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent global 2022-02-11 14:57:42,292 - wazuh_testing - DEBUG - 2022/02/11 18:57:21 wazuh-db[15442] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent tasks 2022-02-11 14:57:42,292 - wazuh_testing - DEBUG - 2022/02/11 18:57:21 wazuh-db[15442] main.c:231 at main(): DEBUG: Template file removed again: queue/db/.template.db 2022-02-11 14:57:42,292 - wazuh_testing - DEBUG - 2022/02/11 18:57:21 wazuh-authd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 14:57:42,292 - wazuh_testing - DEBUG - 2022/02/11 18:57:22 wazuh-authd: INFO: Exiting... 2022-02-11 14:57:42,292 - wazuh_testing - DEBUG - 2022/02/11 18:57:27 wazuh-db[16372] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 14:57:42,292 - wazuh_testing - DEBUG - 2022/02/11 18:57:27 wazuh-db[16372] main.c:101 at main(): DEBUG: Wazuh home directory: /var/ossec 2022-02-11 14:57:42,293 - wazuh_testing - DEBUG - 2022/02/11 18:57:27 wazuh-syscheckd[16376] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 14:57:42,293 - wazuh_testing - DEBUG - 2022/02/11 18:57:27 wazuh-syscheckd[16376] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 14:57:42,293 - wazuh_testing - DEBUG - 2022/02/11 18:57:27 wazuh-syscheckd[16376] syscheck-config.c:122 at organize_syscheck_dirs(): DEBUG: No directory entries to organize in syscheck configuration. 2022-02-11 14:57:42,293 - wazuh_testing - DEBUG - 2022/02/11 18:57:30 wazuh-csyslogd: INFO: Remote syslog server not configured. Clean exit. 2022-02-11 14:57:42,293 - wazuh_testing - DEBUG - 2022/02/11 18:57:30 wazuh-dbd: INFO: Database not configured. Clean exit. 2022-02-11 14:57:42,293 - wazuh_testing - DEBUG - 2022/02/11 18:57:30 wazuh-integratord: INFO: Remote integrations not configured. Clean exit. 2022-02-11 14:57:42,293 - wazuh_testing - DEBUG - 2022/02/11 18:57:30 wazuh-agentlessd: INFO: Not configured. Exiting. 2022-02-11 14:57:42,293 - wazuh_testing - DEBUG - 2022/02/11 18:57:30 wazuh-authd: INFO: Started (pid: 16442). 2022-02-11 14:57:42,293 - wazuh_testing - DEBUG - 2022/02/11 18:57:30 wazuh-authd: INFO: Accepting connections on port 1515. No password required. 2022-02-11 14:57:42,293 - wazuh_testing - DEBUG - 2022/02/11 18:57:30 wazuh-authd: INFO: Setting network timeout to 1.000000 sec. 2022-02-11 14:57:42,294 - wazuh_testing - DEBUG - 2022/02/11 18:57:31 wazuh-db[16456] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 14:57:42,294 - wazuh_testing - DEBUG - 2022/02/11 18:57:31 wazuh-db[16456] main.c:101 at main(): DEBUG: Wazuh home directory: /var/ossec 2022-02-11 14:57:42,294 - wazuh_testing - DEBUG - 2022/02/11 18:57:31 wazuh-db[16456] main.c:122 at main(): DEBUG: Template file removed: /var/ossec/queue/db/.template.db 2022-02-11 14:57:42,294 - wazuh_testing - DEBUG - 2022/02/11 18:57:31 wazuh-db[16456] main.c:178 at main(): INFO: Started (pid: 16458). 2022-02-11 14:57:42,294 - wazuh_testing - DEBUG - 2022/02/11 18:57:32 wazuh-execd: INFO: (1350): Active response disabled. 2022-02-11 14:57:42,294 - wazuh_testing - DEBUG - 2022/02/11 18:57:32 wazuh-execd: INFO: Started (pid: 16481). 2022-02-11 14:57:42,294 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 14:57:42,294 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 14:57:42,294 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] syscheck-config.c:122 at organize_syscheck_dirs(): DEBUG: No directory entries to organize in syscheck configuration. 2022-02-11 14:57:42,295 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] main.c:118 at main(): INFO: (6678): No directory provided for syscheck to monitor. 2022-02-11 14:57:42,295 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] main.c:136 at main(): INFO: (6001): File integrity monitoring disabled. 2022-02-11 14:57:42,295 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 rootcheck[16502] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled. 2022-02-11 14:57:42,295 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:57:42,295 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] syscom.c:123 at syscom_main(): DEBUG: (6284): Local requests thread ready. 2022-02-11 14:57:42,295 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] mq_op.c:47 at StartMQ(): DEBUG: Connected succesfully to 'queue/sockets/queue' after 0 attempts 2022-02-11 14:57:42,295 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] mq_op.c:48 at StartMQ(): DEBUG: (unix_domain) Maximum send buffer set to: '212992'. 2022-02-11 14:57:42,295 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] main.c:185 at main(): INFO: Started (pid: 16504). 2022-02-11 14:57:42,295 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] main.c:215 at main(): DEBUG: (6357): Maximum disk quota size limit configured to '1048576 KB'. 2022-02-11 14:57:42,296 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] run_check.c:194 at start_daemon(): DEBUG: (6320): Setting process priority to: '10' 2022-02-11 14:57:42,296 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:57:42,296 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] run_check.c:229 at start_daemon(): INFO: (6000): Starting daemon... 2022-02-11 14:57:42,296 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] run_check.c:232 at start_daemon(): INFO: (6010): File integrity monitoring scan frequency: 43200 seconds 2022-02-11 14:57:42,296 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 14:57:42,296 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644602253}} 2022-02-11 14:57:42,296 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 14:57:42,297 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 14:57:42,297 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 14:57:42,297 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644602253}} 2022-02-11 14:57:42,297 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.000 sec (0.000 clock sec) 2022-02-11 14:57:42,297 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 0, path count: 0 2022-02-11 14:57:42,297 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:57:42,298 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:57:42,298 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 14:57:42,298 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. 2022-02-11 14:57:42,298 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-manager and message: .*Initializing FIM Integrity Synchronization check. (.+)$ 2022-02-11 14:57:43,289 - wazuh_testing - DEBUG - Cleaning temporal files... 2022-02-11 14:57:43,289 - wazuh_testing - DEBUG - Checking results... 2022-02-11 14:57:43,290 - wazuh_testing - DEBUG - Received from wazuh-manager the expected message: Sync interval is 300 seconds.
-------------------------------Captured log call--------------------------------
DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:1005 Cleaning temporal files... DEBUG wazuh_testing:monitoring.py:994 Checking results... DEBUG wazuh_testing:monitoring.py:1000 Received from wazuh-agent1 the expected message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1644602205,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"c7d4e863493255e1f6dd0a90c6f1bba963e76a4b"}} DEBUG wazuh_testing:monitoring.py:1000 Received from wazuh-manager the expected message: fim_file DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:1005 Cleaning temporal files... DEBUG wazuh_testing:monitoring.py:994 Checking results... DEBUG wazuh_testing:monitoring.py:1000 Received from wazuh-manager the expected message: Sync interval is 300 seconds.

Packages	{"pluggy": "0.13.1", "py": "1.10.0", "pytest": "6.2.2"}
Platform	Linux-5.10.0-1051-oem-x86_64-with-glibc2.29
Plugins	{"html": "3.1.1", "metadata": "1.11.0", "testinfra": "5.0.0"}
Python	3.8.10

R2.html

Environment

Summary

Results