Test Report

Result	Test	Duration
Passed	test_synchronization.py::test_synchronization[testdir1-add-wazuh-agent1]	32.88
------------------------------Captured stderr call------------------------------ 2022-02-11 15:05:34,673 - wazuh_testing - DEBUG - Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-11 15:05:34,674 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-11 15:05:34,675 - wazuh_testing - DEBUG - Starting file composer for wazuh-agent1 and path: /var/ossec/logs/ossec.log. Composite file in /home/camila/Escritorio/repo/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-agent1_ossec.log.tmp 2022-02-11 15:05:34,676 - wazuh_testing - DEBUG - Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-11 15:05:34,676 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-agent1 and message: .Sending integrity control message: (.+)$ 2022-02-11 15:05:34,677 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-11 15:05:34,677 - wazuh_testing - DEBUG - Starting file composer for wazuh-manager and path: /var/ossec/logs/ossec.log. Composite file in /home/camila/Escritorio/repo/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-manager_ossec.log.tmp 2022-02-11 15:05:34,678 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-manager and message: .Agent 001 query: (.+) save2 2022-02-11 15:05:36,178 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-agentd: ERROR: (1137): Lost connection with manager. Setting lock. 2022-02-11 15:05:36,179 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-agentd: INFO: Closing connection to server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 15:05:36,179 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 15:05:36,179 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-agentd: ERROR: (1216): Unable to connect to '172.17.0.2:1514/tcp': 'Connection refused'. 2022-02-11 15:05:36,179 - wazuh_testing - DEBUG - 2022/02/11 18:57:27 wazuh-syscheckd[20438] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 15:05:36,179 - wazuh_testing - DEBUG - 2022/02/11 18:57:27 wazuh-syscheckd[20438] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644602247}} 2022-02-11 15:05:36,180 - wazuh_testing - DEBUG - 2022/02/11 18:57:27 wazuh-syscheckd[20438] wait_op.c:101 at os_wait(): WARNING: Process locked due to agent is offline. Waiting for connection... 2022-02-11 15:05:36,180 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-modulesd:syscollector: INFO: Stop received for Syscollector. 2022-02-11 15:05:36,180 - wazuh_testing - DEBUG - 2022/02/11 18:57:30 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 15:05:36,180 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 12 disconnected. 2022-02-11 15:05:36,180 - wazuh_testing - DEBUG - 2022/02/11 18:57:30 wazuh-agentd: ERROR: (1216): Unable to connect to '172.17.0.2:1514/tcp': 'Connection refused'. 2022-02-11 15:05:36,180 - wazuh_testing - DEBUG - 2022/02/11 18:57:40 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 15:05:36,180 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-monitord: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:05:36,180 - wazuh_testing - DEBUG - 2022/02/11 18:57:40 wazuh-agentd: INFO: (4102): Connected to the server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 15:05:36,181 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-logcollector: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:05:36,181 - wazuh_testing - DEBUG - 2022/02/11 18:57:40 wazuh-agentd: INFO: Server responded. Releasing lock. 2022-02-11 15:05:36,181 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-remoted: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:05:36,181 - wazuh_testing - DEBUG - 2022/02/11 18:57:42 wazuh-syscheckd[20438] wait_op.c:116 at os_wait(): INFO: Agent is now online. Process unlocked, continuing... 2022-02-11 15:05:36,181 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 25 disconnected. 2022-02-11 15:05:36,181 - wazuh_testing - DEBUG - 2022/02/11 18:57:42 wazuh-syscheckd[20438] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 15:05:36,181 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 24 disconnected. 2022-02-11 15:05:36,181 - wazuh_testing - DEBUG - 2022/02/11 18:57:43 wazuh-syscheckd[20438] fim_db.c:436 at fim_db_check_transaction(): DEBUG: Database transaction completed. 2022-02-11 15:05:36,182 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 18 disconnected. 2022-02-11 15:05:36,182 - wazuh_testing - DEBUG - 2022/02/11 18:57:43 wazuh-syscheckd[20438] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-11 15:05:36,182 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 16 disconnected. 2022-02-11 15:05:36,182 - wazuh_testing - DEBUG - 2022/02/11 18:57:43 wazuh-syscheckd[20438] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-11 15:05:36,182 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-syscheckd[15576] sig_op.c:49 at HandleSIG(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:05:36,182 - wazuh_testing - DEBUG - 2022/02/11 18:57:43 wazuh-syscheckd[20438] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-11 15:05:36,182 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-analysisd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:05:36,183 - wazuh_testing - DEBUG - 2022/02/11 18:57:43 wazuh-syscheckd[20438] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-11 15:05:36,183 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 36 disconnected. 2022-02-11 15:05:36,183 - wazuh_testing - DEBUG - 2022/02/11 18:57:43 wazuh-syscheckd[20438] create_db.c:109 at fim_delete_file_event(): DEBUG: (6220): Sending delete message for file: '/testdir1/testdir1.txt' 2022-02-11 15:05:36,183 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 34 disconnected. 2022-02-11 15:05:36,183 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 33 disconnected. 2022-02-11 15:05:36,183 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 35 disconnected. 2022-02-11 15:05:36,183 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 31 disconnected. 2022-02-11 15:05:36,184 - wazuh_testing - DEBUG - 2022/02/11 18:57:43 wazuh-syscheckd[20438] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"event","data":{"path":"/testdir1/testdir1.txt","version":2,"mode":"scheduled","type":"deleted","timestamp":1644602226,"attributes":{"type":"file","size":0,"perm":"rw-r--r--","uid":"0","gid":"0","user_name":"root","group_name":"root","inode":17179747,"mtime":1644602221,"hash_md5":"d41d8cd98f00b204e9800998ecf8427e","hash_sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","hash_sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","checksum":"a379395aba018f41dca7ff13d29a976a8910c040"}}} 2022-02-11 15:05:36,184 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 28 disconnected. 2022-02-11 15:05:36,184 - wazuh_testing - DEBUG - 2022/02/11 18:57:43 wazuh-syscheckd[20438] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 15:05:36,184 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 27 disconnected. 2022-02-11 15:05:36,184 - wazuh_testing - DEBUG - 2022/02/11 18:57:43 wazuh-syscheckd[20438] create_db.c:220 at fim_scan(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-11 15:05:36,184 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 29 disconnected. 2022-02-11 15:05:36,184 - wazuh_testing - DEBUG - 2022/02/11 18:57:43 wazuh-syscheckd[20438] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 15:05:36,184 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 22 disconnected. 2022-02-11 15:05:36,184 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 20 disconnected. 2022-02-11 15:05:36,184 - wazuh_testing - DEBUG - 2022/02/11 18:57:43 wazuh-syscheckd[20438] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644602263}} 2022-02-11 15:05:36,184 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 32 disconnected. 2022-02-11 15:05:36,184 - wazuh_testing - DEBUG - 2022/02/11 18:57:43 wazuh-syscheckd[20438] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 15.357 sec (0.355 clock sec) 2022-02-11 15:05:36,185 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 21 disconnected. 2022-02-11 15:05:36,185 - wazuh_testing - DEBUG - 2022/02/11 18:57:43 wazuh-syscheckd[20438] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1620, path count: 1626 2022-02-11 15:05:36,185 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 30 disconnected. 2022-02-11 15:05:36,185 - wazuh_testing - DEBUG - 2022/02/11 18:58:04 wazuh-syscheckd[20438] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 15:05:36,185 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 6 disconnected. 2022-02-11 15:05:36,185 - wazuh_testing - DEBUG - 2022/02/11 18:58:04 wazuh-syscheckd[20438] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644602284}} 2022-02-11 15:05:36,185 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 26 disconnected. 2022-02-11 15:05:36,185 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 19 disconnected. 2022-02-11 15:05:36,185 - wazuh_testing - DEBUG - 2022/02/11 18:58:04 wazuh-syscheckd[20438] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 15:05:36,186 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 13 disconnected. 2022-02-11 15:05:36,186 - wazuh_testing - DEBUG - 2022/02/11 18:58:04 wazuh-syscheckd[20438] fim_db.c:436 at fim_db_check_transaction(): DEBUG: Database transaction completed. 2022-02-11 15:05:36,186 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 11 disconnected. 2022-02-11 15:05:36,186 - wazuh_testing - DEBUG - 2022/02/11 18:58:04 wazuh-syscheckd[20438] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-11 15:05:36,186 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 23 disconnected. 2022-02-11 15:05:36,186 - wazuh_testing - DEBUG - 2022/02/11 18:58:04 wazuh-syscheckd[20438] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-11 15:05:36,186 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 10 disconnected. 2022-02-11 15:05:36,186 - wazuh_testing - DEBUG - 2022/02/11 18:58:04 wazuh-syscheckd[20438] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-11 15:05:36,186 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-execd: INFO: (1314): Shutdown received. Deleting responses. 2022-02-11 15:05:36,186 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-execd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:05:36,186 - wazuh_testing - DEBUG - 2022/02/11 18:58:04 wazuh-syscheckd[20438] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-11 15:05:36,186 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:468 at handler(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:05:36,187 - wazuh_testing - DEBUG - 2022/02/11 18:58:04 wazuh-syscheckd[20438] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 15:05:36,187 - wazuh_testing - DEBUG - 2022/02/11 18:57:21 wazuh-db[15442] wdb.c:872 at wdb_close_all(): DEBUG: Closing all databases... 2022-02-11 15:05:36,187 - wazuh_testing - DEBUG - 2022/02/11 18:58:04 wazuh-syscheckd[20438] create_db.c:220 at fim_scan(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-11 15:05:36,187 - wazuh_testing - DEBUG - 2022/02/11 18:57:21 wazuh-db[15442] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent 001 2022-02-11 15:05:36,187 - wazuh_testing - DEBUG - 2022/02/11 18:58:04 wazuh-syscheckd[20438] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 15:05:36,187 - wazuh_testing - DEBUG - 2022/02/11 18:57:21 wazuh-db[15442] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent 000 2022-02-11 15:05:36,187 - wazuh_testing - DEBUG - 2022/02/11 18:57:21 wazuh-db[15442] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent mitre 2022-02-11 15:05:36,187 - wazuh_testing - DEBUG - 2022/02/11 18:58:04 wazuh-syscheckd[20438] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644602284}} 2022-02-11 15:05:36,187 - wazuh_testing - DEBUG - 2022/02/11 18:57:21 wazuh-db[15442] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent global 2022-02-11 15:05:36,187 - wazuh_testing - DEBUG - 2022/02/11 18:58:04 wazuh-syscheckd[20438] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.355 sec (0.345 clock sec) 2022-02-11 15:05:36,187 - wazuh_testing - DEBUG - 2022/02/11 18:57:21 wazuh-db[15442] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent tasks 2022-02-11 15:05:36,187 - wazuh_testing - DEBUG - 2022/02/11 18:58:04 wazuh-syscheckd[20438] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1620, path count: 1626 2022-02-11 15:05:36,188 - wazuh_testing - DEBUG - 2022/02/11 18:57:21 wazuh-db[15442] main.c:231 at main(): DEBUG: Template file removed again: queue/db/.template.db 2022-02-11 15:05:36,188 - wazuh_testing - DEBUG - 2022/02/11 18:58:25 wazuh-syscheckd[20438] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 15:05:36,188 - wazuh_testing - DEBUG - 2022/02/11 18:57:21 wazuh-authd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:05:36,188 - wazuh_testing - DEBUG - 2022/02/11 18:58:25 wazuh-syscheckd[20438] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644602305}} 2022-02-11 15:05:36,188 - wazuh_testing - DEBUG - 2022/02/11 18:57:22 wazuh-authd: INFO: Exiting... 2022-02-11 15:05:36,188 - wazuh_testing - DEBUG - 2022/02/11 18:58:25 wazuh-syscheckd[20438] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 15:05:36,188 - wazuh_testing - DEBUG - 2022/02/11 18:57:27 wazuh-db[16372] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 15:05:36,188 - wazuh_testing - DEBUG - 2022/02/11 18:58:25 wazuh-syscheckd[20438] fim_db.c:436 at fim_db_check_transaction(): DEBUG: Database transaction completed. 2022-02-11 15:05:36,188 - wazuh_testing - DEBUG - 2022/02/11 18:57:27 wazuh-db[16372] main.c:101 at main(): DEBUG: Wazuh home directory: /var/ossec 2022-02-11 15:05:36,188 - wazuh_testing - DEBUG - 2022/02/11 18:58:25 wazuh-syscheckd[20438] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-11 15:05:36,188 - wazuh_testing - DEBUG - 2022/02/11 18:57:27 wazuh-syscheckd[16376] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 15:05:36,188 - wazuh_testing - DEBUG - 2022/02/11 18:58:25 wazuh-syscheckd[20438] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-11 15:05:36,188 - wazuh_testing - DEBUG - 2022/02/11 18:57:27 wazuh-syscheckd[16376] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 15:05:36,189 - wazuh_testing - DEBUG - 2022/02/11 18:58:25 wazuh-syscheckd[20438] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-11 15:05:36,189 - wazuh_testing - DEBUG - 2022/02/11 18:57:27 wazuh-syscheckd[16376] syscheck-config.c:122 at organize_syscheck_dirs(): DEBUG: No directory entries to organize in syscheck configuration. 2022-02-11 15:05:36,189 - wazuh_testing - DEBUG - 2022/02/11 18:58:25 wazuh-syscheckd[20438] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-11 15:05:36,189 - wazuh_testing - DEBUG - 2022/02/11 18:57:30 wazuh-csyslogd: INFO: Remote syslog server not configured. Clean exit. 2022-02-11 15:05:36,189 - wazuh_testing - DEBUG - 2022/02/11 18:58:26 wazuh-syscheckd[20438] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 15:05:36,189 - wazuh_testing - DEBUG - 2022/02/11 18:57:30 wazuh-dbd: INFO: Database not configured. Clean exit. 2022-02-11 15:05:36,189 - wazuh_testing - DEBUG - 2022/02/11 18:57:30 wazuh-integratord: INFO: Remote integrations not configured. Clean exit. 2022-02-11 15:05:36,189 - wazuh_testing - DEBUG - 2022/02/11 18:58:26 wazuh-syscheckd[20438] create_db.c:220 at fim_scan(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-11 15:05:36,189 - wazuh_testing - DEBUG - 2022/02/11 18:57:30 wazuh-agentlessd: INFO: Not configured. Exiting. 2022-02-11 15:05:36,189 - wazuh_testing - DEBUG - 2022/02/11 18:58:26 wazuh-syscheckd[20438] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 15:05:36,189 - wazuh_testing - DEBUG - 2022/02/11 18:57:30 wazuh-authd: INFO: Started (pid: 16442). 2022-02-11 15:05:36,189 - wazuh_testing - DEBUG - 2022/02/11 18:58:26 wazuh-syscheckd[20438] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644602306}} 2022-02-11 15:05:36,189 - wazuh_testing - DEBUG - 2022/02/11 18:57:30 wazuh-authd: INFO: Accepting connections on port 1515. No password required. 2022-02-11 15:05:36,189 - wazuh_testing - DEBUG - 2022/02/11 18:58:26 wazuh-syscheckd[20438] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.345 sec (0.331 clock sec) 2022-02-11 15:05:36,190 - wazuh_testing - DEBUG - 2022/02/11 18:57:30 wazuh-authd: INFO: Setting network timeout to 1.000000 sec. 2022-02-11 15:05:36,190 - wazuh_testing - DEBUG - 2022/02/11 18:58:26 wazuh-syscheckd[20438] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1620, path count: 1626 2022-02-11 15:05:36,190 - wazuh_testing - DEBUG - 2022/02/11 18:57:31 wazuh-db[16456] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 15:05:36,190 - wazuh_testing - DEBUG - 2022/02/11 18:58:47 wazuh-syscheckd[20438] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 15:05:36,190 - wazuh_testing - DEBUG - 2022/02/11 18:57:31 wazuh-db[16456] main.c:101 at main(): DEBUG: Wazuh home directory: /var/ossec 2022-02-11 15:05:36,190 - wazuh_testing - DEBUG - 2022/02/11 18:58:47 wazuh-syscheckd[20438] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644602327}} 2022-02-11 15:05:36,190 - wazuh_testing - DEBUG - 2022/02/11 18:57:31 wazuh-db[16456] main.c:122 at main(): DEBUG: Template file removed: /var/ossec/queue/db/.template.db 2022-02-11 15:05:36,190 - wazuh_testing - DEBUG - 2022/02/11 18:58:47 wazuh-syscheckd[20438] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 15:05:36,190 - wazuh_testing - DEBUG - 2022/02/11 18:57:31 wazuh-db[16456] main.c:178 at main(): INFO: Started (pid: 16458). 2022-02-11 15:05:36,190 - wazuh_testing - DEBUG - 2022/02/11 18:58:47 wazuh-syscheckd[20438] fim_db.c:436 at fim_db_check_transaction(): DEBUG: Database transaction completed. 2022-02-11 15:05:36,190 - wazuh_testing - DEBUG - 2022/02/11 18:57:32 wazuh-execd: INFO: (1350): Active response disabled. 2022-02-11 15:05:36,190 - wazuh_testing - DEBUG - 2022/02/11 18:58:47 wazuh-syscheckd[20438] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-11 15:05:36,190 - wazuh_testing - DEBUG - 2022/02/11 18:57:32 wazuh-execd: INFO: Started (pid: 16481). 2022-02-11 15:05:36,190 - wazuh_testing - DEBUG - 2022/02/11 18:58:47 wazuh-syscheckd[20438] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-11 15:05:36,190 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 15:05:36,191 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 15:05:36,191 - wazuh_testing - DEBUG - 2022/02/11 18:58:47 wazuh-syscheckd[20438] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-11 15:05:36,191 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] syscheck-config.c:122 at organize_syscheck_dirs(): DEBUG: No directory entries to organize in syscheck configuration. 2022-02-11 15:05:36,191 - wazuh_testing - DEBUG - 2022/02/11 18:58:47 wazuh-syscheckd[20438] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-11 15:05:36,191 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] main.c:118 at main(): INFO: (6678): No directory provided for syscheck to monitor. 2022-02-11 15:05:36,191 - wazuh_testing - DEBUG - 2022/02/11 18:58:47 wazuh-syscheckd[20438] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 15:05:36,191 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] main.c:136 at main(): INFO: (6001): File integrity monitoring disabled. 2022-02-11 15:05:36,191 - wazuh_testing - DEBUG - 2022/02/11 18:58:47 wazuh-syscheckd[20438] create_db.c:220 at fim_scan(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-11 15:05:36,191 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 rootcheck[16502] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled. 2022-02-11 15:05:36,191 - wazuh_testing - DEBUG - 2022/02/11 18:58:47 wazuh-syscheckd[20438] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 15:05:36,191 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:05:36,191 - wazuh_testing - DEBUG - 2022/02/11 18:58:47 wazuh-syscheckd[20438] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644602327}} 2022-02-11 15:05:36,191 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] syscom.c:123 at syscom_main(): DEBUG: (6284): Local requests thread ready. 2022-02-11 15:05:36,191 - wazuh_testing - DEBUG - 2022/02/11 18:58:47 wazuh-syscheckd[20438] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.328 sec (0.317 clock sec) 2022-02-11 15:05:36,191 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] mq_op.c:47 at StartMQ(): DEBUG: Connected succesfully to 'queue/sockets/queue' after 0 attempts 2022-02-11 15:05:36,192 - wazuh_testing - DEBUG - 2022/02/11 18:58:47 wazuh-syscheckd[20438] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1620, path count: 1626 2022-02-11 15:05:36,192 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] mq_op.c:48 at StartMQ(): DEBUG: (unix_domain) Maximum send buffer set to: '212992'. 2022-02-11 15:05:36,192 - wazuh_testing - DEBUG - 2022/02/11 18:59:08 wazuh-syscheckd[20438] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 15:05:36,192 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] main.c:185 at main(): INFO: Started (pid: 16504). 2022-02-11 15:05:36,192 - wazuh_testing - DEBUG - 2022/02/11 18:59:08 wazuh-syscheckd[20438] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644602348}} 2022-02-11 15:05:36,192 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] main.c:215 at main(): DEBUG: (6357): Maximum disk quota size limit configured to '1048576 KB'. 2022-02-11 15:05:36,192 - wazuh_testing - DEBUG - 2022/02/11 18:59:08 wazuh-syscheckd[20438] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 15:05:36,192 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] run_check.c:194 at start_daemon(): DEBUG: (6320): Setting process priority to: '10' 2022-02-11 15:05:36,192 - wazuh_testing - DEBUG - 2022/02/11 18:59:08 wazuh-syscheckd[20438] fim_db.c:436 at fim_db_check_transaction(): DEBUG: Database transaction completed. 2022-02-11 15:05:36,192 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:05:36,192 - wazuh_testing - DEBUG - 2022/02/11 18:59:08 wazuh-syscheckd[20438] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-11 15:05:36,192 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] run_check.c:229 at start_daemon(): INFO: (6000): Starting daemon... 2022-02-11 15:05:36,192 - wazuh_testing - DEBUG - 2022/02/11 18:59:08 wazuh-syscheckd[20438] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-11 15:05:36,192 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] run_check.c:232 at start_daemon(): INFO: (6010): File integrity monitoring scan frequency: 43200 seconds 2022-02-11 15:05:36,192 - wazuh_testing - DEBUG - 2022/02/11 18:59:08 wazuh-syscheckd[20438] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-11 15:05:36,192 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 15:05:36,193 - wazuh_testing - DEBUG - 2022/02/11 18:59:08 wazuh-syscheckd[20438] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-11 15:05:36,193 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644602253}} 2022-02-11 15:05:36,193 - wazuh_testing - DEBUG - 2022/02/11 18:59:08 wazuh-syscheckd[20438] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 15:05:36,193 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 15:05:36,193 - wazuh_testing - DEBUG - 2022/02/11 18:59:08 wazuh-syscheckd[20438] create_db.c:220 at fim_scan(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-11 15:05:36,193 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 15:05:36,193 - wazuh_testing - DEBUG - 2022/02/11 18:59:08 wazuh-syscheckd[20438] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 15:05:36,193 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 15:05:36,193 - wazuh_testing - DEBUG - 2022/02/11 18:59:08 wazuh-syscheckd[20438] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644602348}} 2022-02-11 15:05:36,193 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644602253}} 2022-02-11 15:05:36,193 - wazuh_testing - DEBUG - 2022/02/11 18:59:08 wazuh-syscheckd[20438] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.329 sec (0.310 clock sec) 2022-02-11 15:05:36,193 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.000 sec (0.000 clock sec) 2022-02-11 15:05:36,193 - wazuh_testing - DEBUG - 2022/02/11 18:59:08 wazuh-syscheckd[20438] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1620, path count: 1626 2022-02-11 15:05:36,193 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 0, path count: 0 2022-02-11 15:05:36,194 - wazuh_testing - DEBUG - 2022/02/11 18:59:29 wazuh-syscheckd[20438] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 15:05:36,194 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:05:36,194 - wazuh_testing - DEBUG - 2022/02/11 18:59:29 wazuh-syscheckd[20438] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644602369}} 2022-02-11 15:05:36,194 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:05:36,194 - wazuh_testing - DEBUG - 2022/02/11 18:59:29 wazuh-syscheckd[20438] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 15:05:36,194 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:05:36,194 - wazuh_testing - DEBUG - 2022/02/11 18:59:29 wazuh-syscheckd[20438] fim_db.c:436 at fim_db_check_transaction(): DEBUG: Database transaction completed. 2022-02-11 15:05:36,194 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. 2022-02-11 15:05:36,194 - wazuh_testing - DEBUG - 2022/02/11 18:59:29 wazuh-syscheckd[20438] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-11 15:05:36,194 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] run_check.c:568 at symlink_checker_thread(): DEBUG: (6033): Starting symbolic link updater. Interval '600'. 2022-02-11 15:05:36,194 - wazuh_testing - DEBUG - 2022/02/11 18:59:29 wazuh-syscheckd[20438] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-11 15:05:36,194 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] run_check.c:82 at fim_send_sync_msg(): DEBUG: (6317): Sending integrity control message: {"component":"fim_file","type":"integrity_clear","data":{"id":1644602253,"version":2}} 2022-02-11 15:05:36,194 - wazuh_testing - DEBUG - 2022/02/11 18:59:29 wazuh-syscheckd[20438] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-11 15:05:36,194 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] fim_sync.c:70 at fim_run_integrity(): DEBUG: Finished calculating FIM integrity. Time: 0.000 seconds. 2022-02-11 15:05:36,195 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-analysisd: INFO: Total rules enabled: '3882' 2022-02-11 15:05:36,195 - wazuh_testing - DEBUG - 2022/02/11 18:59:29 wazuh-syscheckd[20438] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-11 15:05:36,195 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-analysisd: INFO: Started (pid: 16495). 2022-02-11 15:05:36,195 - wazuh_testing - DEBUG - 2022/02/11 18:59:30 wazuh-syscheckd[20438] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 15:05:36,195 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-db[16456] main.c:290 at run_dealer(): DEBUG: New client connected (6). 2022-02-11 15:05:36,195 - wazuh_testing - DEBUG - 2022/02/11 18:59:30 wazuh-syscheckd[20438] create_db.c:220 at fim_scan(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-11 15:05:36,195 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-analysisd: INFO: (7200): Logtest started 2022-02-11 15:05:36,195 - wazuh_testing - DEBUG - 2022/02/11 18:59:30 wazuh-syscheckd[20438] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 15:05:36,195 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-db[16456] main.c:290 at run_dealer(): DEBUG: New client connected (10). 2022-02-11 15:05:36,195 - wazuh_testing - DEBUG - 2022/02/11 18:59:30 wazuh-syscheckd[20438] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644602370}} 2022-02-11 15:05:36,195 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 000 query: syscheck scan_info_update start_scan 1644602253 2022-02-11 15:05:36,195 - wazuh_testing - DEBUG - 2022/02/11 18:59:30 wazuh-syscheckd[20438] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.360 sec (0.357 clock sec) 2022-02-11 15:05:36,195 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-db[16456] main.c:290 at run_dealer(): DEBUG: New client connected (11). 2022-02-11 15:05:36,195 - wazuh_testing - DEBUG - 2022/02/11 18:59:30 wazuh-syscheckd[20438] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1620, path count: 1626 2022-02-11 15:05:36,195 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 000 query: syscheck scan_info_update end_scan 1644602253 2022-02-11 15:05:36,196 - wazuh_testing - DEBUG - 2022/02/11 18:59:51 wazuh-syscheckd[20438] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 15:05:36,196 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-db[16456] main.c:290 at run_dealer(): DEBUG: New client connected (13). 2022-02-11 15:05:36,196 - wazuh_testing - DEBUG - 2022/02/11 18:59:51 wazuh-syscheckd[20438] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644602391}} 2022-02-11 15:05:36,196 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 000 query: fim_file integrity_clear {"id":1644602253,"version":2} 2022-02-11 15:05:36,196 - wazuh_testing - DEBUG - 2022/02/11 18:59:51 wazuh-syscheckd[20438] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 15:05:36,196 - wazuh_testing - DEBUG - 2022/02/11 18:57:34 wazuh-remoted: INFO: Started (pid: 16608). Listening on port 1514/TCP (secure). 2022-02-11 15:05:36,196 - wazuh_testing - DEBUG - 2022/02/11 18:59:51 wazuh-syscheckd[20438] fim_db.c:436 at fim_db_check_transaction(): DEBUG: Database transaction completed. 2022-02-11 15:05:36,196 - wazuh_testing - DEBUG - 2022/02/11 18:57:34 wazuh-db[16456] main.c:290 at run_dealer(): DEBUG: New client connected (12). 2022-02-11 15:05:36,197 - wazuh_testing - DEBUG - 2022/02/11 18:59:51 wazuh-syscheckd[20438] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-11 15:05:36,197 - wazuh_testing - DEBUG - 2022/02/11 18:57:34 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: reset-agents-connection synced 2022-02-11 15:05:36,197 - wazuh_testing - DEBUG - 2022/02/11 18:57:34 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 12 disconnected. 2022-02-11 15:05:36,197 - wazuh_testing - DEBUG - 2022/02/11 18:59:51 wazuh-syscheckd[20438] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-11 15:05:36,197 - wazuh_testing - DEBUG - 2022/02/11 18:57:34 wazuh-remoted: INFO: (1410): Reading authentication keys file. 2022-02-11 15:05:36,197 - wazuh_testing - DEBUG - 2022/02/11 18:59:51 wazuh-syscheckd[20438] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-11 15:05:36,197 - wazuh_testing - DEBUG - 2022/02/11 18:57:35 wazuh-logcollector: INFO: (1950): Analyzing file: '/var/ossec/logs/active-responses.log'. 2022-02-11 15:05:36,198 - wazuh_testing - DEBUG - 2022/02/11 18:59:51 wazuh-syscheckd[20438] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-11 15:05:36,198 - wazuh_testing - DEBUG - 2022/02/11 18:57:35 wazuh-logcollector: INFO: (1950): Analyzing file: '/var/log/dpkg.log'. 2022-02-11 15:05:36,198 - wazuh_testing - DEBUG - 2022/02/11 18:59:51 wazuh-syscheckd[20438] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 15:05:36,198 - wazuh_testing - DEBUG - 2022/02/11 18:57:35 wazuh-logcollector: INFO: Started (pid: 16639). 2022-02-11 15:05:36,198 - wazuh_testing - DEBUG - 2022/02/11 18:59:51 wazuh-syscheckd[20438] create_db.c:220 at fim_scan(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-11 15:05:36,198 - wazuh_testing - DEBUG - 2022/02/11 18:57:36 wazuh-monitord: INFO: Started (pid: 16662). 2022-02-11 15:05:36,198 - wazuh_testing - DEBUG - 2022/02/11 18:59:51 wazuh-syscheckd[20438] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 15:05:36,198 - wazuh_testing - DEBUG - 2022/02/11 18:57:37 wazuh-modulesd: INFO: Started (pid: 16674). 2022-02-11 15:05:36,198 - wazuh_testing - DEBUG - 2022/02/11 18:59:51 wazuh-syscheckd[20438] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644602391}} 2022-02-11 15:05:36,199 - wazuh_testing - DEBUG - 2022/02/11 18:57:37 wazuh-modulesd:agent-upgrade: INFO: (8153): Module Agent Upgrade started. 2022-02-11 15:05:36,199 - wazuh_testing - DEBUG - 2022/02/11 18:59:51 wazuh-syscheckd[20438] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.319 sec (0.315 clock sec) 2022-02-11 15:05:36,199 - wazuh_testing - DEBUG - 2022/02/11 18:57:37 wazuh-modulesd:ciscat: INFO: Module disabled. Exiting... 2022-02-11 15:05:36,199 - wazuh_testing - DEBUG - 2022/02/11 18:59:51 wazuh-syscheckd[20438] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1620, path count: 1626 2022-02-11 15:05:36,199 - wazuh_testing - DEBUG - 2022/02/11 18:57:37 wazuh-modulesd:osquery: INFO: Module disabled. Exiting... 2022-02-11 15:05:36,199 - wazuh_testing - DEBUG - 2022/02/11 19:00:12 wazuh-syscheckd[20438] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 15:05:36,200 - wazuh_testing - DEBUG - 2022/02/11 18:57:37 wazuh-modulesd:syscollector: INFO: Module disabled. Exiting... 2022-02-11 15:05:36,200 - wazuh_testing - DEBUG - 2022/02/11 19:00:12 wazuh-syscheckd[20438] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644602412}} 2022-02-11 15:05:36,200 - wazuh_testing - DEBUG - 2022/02/11 18:57:37 sca: INFO: Module disabled. Exiting. 2022-02-11 15:05:36,200 - wazuh_testing - DEBUG - 2022/02/11 19:00:12 wazuh-syscheckd[20438] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 15:05:36,200 - wazuh_testing - DEBUG - 2022/02/11 18:57:37 wazuh-modulesd:database: INFO: Module started. 2022-02-11 15:05:36,200 - wazuh_testing - DEBUG - 2022/02/11 19:00:12 wazuh-syscheckd[20438] fim_db.c:436 at fim_db_check_transaction(): DEBUG: Database transaction completed. 2022-02-11 15:05:36,200 - wazuh_testing - DEBUG - 2022/02/11 18:57:37 wazuh-modulesd:download: INFO: Module started. 2022-02-11 15:05:36,200 - wazuh_testing - DEBUG - 2022/02/11 19:00:12 wazuh-syscheckd[20438] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-11 15:05:36,201 - wazuh_testing - DEBUG - 2022/02/11 18:57:37 wazuh-modulesd:control: INFO: Starting control thread. 2022-02-11 15:05:36,201 - wazuh_testing - DEBUG - 2022/02/11 19:00:12 wazuh-syscheckd[20438] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-11 15:05:36,201 - wazuh_testing - DEBUG - 2022/02/11 18:57:37 wazuh-db[16456] main.c:290 at run_dealer(): DEBUG: New client connected (12). 2022-02-11 15:05:36,201 - wazuh_testing - DEBUG - 2022/02/11 19:00:12 wazuh-syscheckd[20438] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-11 15:05:36,201 - wazuh_testing - DEBUG - 2022/02/11 18:57:37 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-name {"id":0,"name":"wazuh-manager"} 2022-02-11 15:05:36,201 - wazuh_testing - DEBUG - 2022/02/11 19:00:12 wazuh-syscheckd[20438] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-11 15:05:36,201 - wazuh_testing - DEBUG - 2022/02/11 18:57:37 wazuh-modulesd:task-manager: INFO: (8200): Module Task Manager started. 2022-02-11 15:05:36,201 - wazuh_testing - DEBUG - 2022/02/11 19:00:12 wazuh-syscheckd[20438] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 15:05:36,201 - wazuh_testing - DEBUG - 2022/02/11 18:57:37 wazuh-db[16456] main.c:290 at run_dealer(): DEBUG: New client connected (16). 2022-02-11 15:05:36,202 - wazuh_testing - DEBUG - 2022/02/11 19:00:12 wazuh-syscheckd[20438] create_db.c:220 at fim_scan(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-11 15:05:36,202 - wazuh_testing - DEBUG - 2022/02/11 18:57:37 wazuh-db[16456] wdb_parser.c:928 at wdb_parse(): DEBUG: Task query: set_timeout {"now":1644602257,"interval":900} 2022-02-11 15:05:36,202 - wazuh_testing - DEBUG - 2022/02/11 19:00:12 wazuh-syscheckd[20438] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 15:05:36,202 - wazuh_testing - DEBUG - 2022/02/11 18:57:37 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 16 disconnected. 2022-02-11 15:05:36,202 - wazuh_testing - DEBUG - 2022/02/11 19:00:12 wazuh-syscheckd[20438] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644602412}} 2022-02-11 15:05:36,202 - wazuh_testing - DEBUG - 2022/02/11 18:57:37 wazuh-db[16456] main.c:290 at run_dealer(): DEBUG: New client connected (16). 2022-02-11 15:05:36,202 - wazuh_testing - DEBUG - 2022/02/11 19:00:12 wazuh-syscheckd[20438] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.317 sec (0.306 clock sec) 2022-02-11 15:05:36,202 - wazuh_testing - DEBUG - 2022/02/11 18:57:37 wazuh-db[16456] wdb_parser.c:928 at wdb_parse(): DEBUG: Task query: delete_old {"timestamp":1643997457} 2022-02-11 15:05:36,202 - wazuh_testing - DEBUG - 2022/02/11 19:00:12 wazuh-syscheckd[20438] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1620, path count: 1626 2022-02-11 15:05:36,202 - wazuh_testing - DEBUG - 2022/02/11 18:57:37 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 16 disconnected. 2022-02-11 15:05:36,203 - wazuh_testing - DEBUG - 2022/02/11 19:00:33 wazuh-syscheckd[20438] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 15:05:36,203 - wazuh_testing - DEBUG - 2022/02/11 18:57:37 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":0,"version":"Wazuh v4.2.5","manager_host":"wazuh-manager","node_name":"wazuh-master","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux \|wazuh-manager \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64","os_arch":"x86_64"} 2022-02-11 15:05:36,203 - wazuh_testing - DEBUG - 2022/02/11 19:00:33 wazuh-syscheckd[20438] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644602433}} 2022-02-11 15:05:36,203 - wazuh_testing - DEBUG - 2022/02/11 18:57:37 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: insert-agent {"id":1,"name":"wazuh-agent1","register_ip":"any","internal_key":"1111111111111111111111111111111111111111111111111111111111111111","group":"default","date_add":0} 2022-02-11 15:05:36,203 - wazuh_testing - DEBUG - 2022/02/11 19:00:33 wazuh-syscheckd[20438] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 15:05:36,203 - wazuh_testing - DEBUG - 2022/02/11 18:57:37 wazuh-db[16456] wdb_global.c:89 at wdb_global_insert_agent(): DEBUG: SQLite: UNIQUE constraint failed: agent.id 2022-02-11 15:05:36,203 - wazuh_testing - DEBUG - 2022/02/11 19:00:33 wazuh-syscheckd[20438] fim_db.c:436 at fim_db_check_transaction(): DEBUG: Database transaction completed. 2022-02-11 15:05:36,204 - wazuh_testing - DEBUG - 2022/02/11 18:57:37 wazuh-db[16456] wdb_parser.c:4784 at wdb_parse_global_insert_agent(): DEBUG: Global DB Cannot execute SQL query; err database queue/db/global.db: UNIQUE constraint failed: agent.id 2022-02-11 15:05:36,204 - wazuh_testing - DEBUG - 2022/02/11 19:00:33 wazuh-syscheckd[20438] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-11 15:05:36,204 - wazuh_testing - DEBUG - 2022/02/11 18:57:37 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-group {"id":1,"group":"default"} 2022-02-11 15:05:36,204 - wazuh_testing - DEBUG - 2022/02/11 19:00:33 wazuh-syscheckd[20438] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-11 15:05:36,204 - wazuh_testing - DEBUG - 2022/02/11 18:57:37 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: delete-agent-belong 1 2022-02-11 15:05:36,204 - wazuh_testing - DEBUG - 2022/02/11 19:00:33 wazuh-syscheckd[20438] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-11 15:05:36,204 - wazuh_testing - DEBUG - 2022/02/11 18:57:37 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: find-group default 2022-02-11 15:05:36,204 - wazuh_testing - DEBUG - 2022/02/11 19:00:33 wazuh-syscheckd[20438] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-11 15:05:36,205 - wazuh_testing - DEBUG - 2022/02/11 18:57:37 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: insert-agent-belong {"id_group":1,"id_agent":1} 2022-02-11 15:05:36,205 - wazuh_testing - DEBUG - 2022/02/11 19:00:34 wazuh-syscheckd[20438] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 15:05:36,205 - wazuh_testing - DEBUG - 2022/02/11 18:57:37 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: get-all-agents last_id 0 2022-02-11 15:05:36,205 - wazuh_testing - DEBUG - 2022/02/11 19:00:34 wazuh-syscheckd[20438] create_db.c:220 at fim_scan(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-11 15:05:36,205 - wazuh_testing - DEBUG - 2022/02/11 18:57:37 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: select-groups 2022-02-11 15:05:36,205 - wazuh_testing - DEBUG - 2022/02/11 19:00:34 wazuh-syscheckd[20438] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 15:05:36,205 - wazuh_testing - DEBUG - 2022/02/11 18:57:37 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: find-group default 2022-02-11 15:05:36,205 - wazuh_testing - DEBUG - 2022/02/11 19:00:34 wazuh-syscheckd[20438] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644602434}} 2022-02-11 15:05:36,206 - wazuh_testing - DEBUG - 2022/02/11 18:57:37 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: get-all-agents last_id 0 2022-02-11 15:05:36,206 - wazuh_testing - DEBUG - 2022/02/11 19:00:34 wazuh-syscheckd[20438] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.310 sec (0.308 clock sec) 2022-02-11 15:05:36,206 - wazuh_testing - DEBUG - 2022/02/11 18:57:37 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: select-agent-group 1 2022-02-11 15:05:36,206 - wazuh_testing - DEBUG - 2022/02/11 19:00:34 wazuh-syscheckd[20438] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1620, path count: 1626 2022-02-11 15:05:36,206 - wazuh_testing - DEBUG - 2022/02/11 18:57:37 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: delete-agent-belong 1 2022-02-11 15:05:36,206 - wazuh_testing - DEBUG - 2022/02/11 19:00:55 wazuh-syscheckd[20438] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 15:05:36,206 - wazuh_testing - DEBUG - 2022/02/11 18:57:37 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: find-group default 2022-02-11 15:05:36,206 - wazuh_testing - DEBUG - 2022/02/11 19:00:55 wazuh-syscheckd[20438] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644602455}} 2022-02-11 15:05:36,206 - wazuh_testing - DEBUG - 2022/02/11 18:57:37 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: insert-agent-belong {"id_group":1,"id_agent":1} 2022-02-11 15:05:36,207 - wazuh_testing - DEBUG - 2022/02/11 19:00:55 wazuh-syscheckd[20438] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 15:05:36,207 - wazuh_testing - DEBUG - 2022/02/11 18:57:37 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: select-agent-name 1 2022-02-11 15:05:36,207 - wazuh_testing - DEBUG - 2022/02/11 19:00:55 wazuh-syscheckd[20438] fim_db.c:436 at fim_db_check_transaction(): DEBUG: Database transaction completed. 2022-02-11 15:05:36,207 - wazuh_testing - DEBUG - 2022/02/11 18:57:37 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: select-agent-name 1 2022-02-11 15:05:36,207 - wazuh_testing - DEBUG - 2022/02/11 19:00:55 wazuh-syscheckd[20438] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-11 15:05:36,207 - wazuh_testing - DEBUG - 2022/02/11 18:57:40 wazuh-db[16456] main.c:290 at run_dealer(): DEBUG: New client connected (16). 2022-02-11 15:05:36,207 - wazuh_testing - DEBUG - 2022/02/11 19:00:55 wazuh-syscheckd[20438] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-11 15:05:36,207 - wazuh_testing - DEBUG - 2022/02/11 18:57:40 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-keepalive {"id":1,"connection_status":"pending","sync_status":"synced"} 2022-02-11 15:05:36,208 - wazuh_testing - DEBUG - 2022/02/11 19:00:55 wazuh-syscheckd[20438] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-11 15:05:36,208 - wazuh_testing - DEBUG - 2022/02/11 18:57:40 wazuh-db[16456] main.c:290 at run_dealer(): DEBUG: New client connected (18). 2022-02-11 15:05:36,208 - wazuh_testing - DEBUG - 2022/02/11 19:00:55 wazuh-syscheckd[20438] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-11 15:05:36,208 - wazuh_testing - DEBUG - 2022/02/11 19:00:55 wazuh-syscheckd[20438] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 15:05:36,208 - wazuh_testing - DEBUG - 2022/02/11 18:57:40 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux \|wazuh-agent1 \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64","os_arch":"x86_64"} 2022-02-11 15:05:36,208 - wazuh_testing - DEBUG - 2022/02/11 19:00:55 wazuh-syscheckd[20438] create_db.c:220 at fim_scan(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-11 15:05:36,209 - wazuh_testing - DEBUG - 2022/02/11 18:57:42 wazuh-db[16456] main.c:290 at run_dealer(): DEBUG: New client connected (19). 2022-02-11 15:05:36,209 - wazuh_testing - DEBUG - 2022/02/11 19:00:55 wazuh-syscheckd[20438] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 15:05:36,209 - wazuh_testing - DEBUG - 2022/02/11 18:57:42 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1644602247 2022-02-11 15:05:36,209 - wazuh_testing - DEBUG - 2022/02/11 19:00:55 wazuh-syscheckd[20438] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644602455}} 2022-02-11 15:05:36,209 - wazuh_testing - DEBUG - 2022/02/11 18:57:43 wazuh-db[16456] main.c:290 at run_dealer(): DEBUG: New client connected (20). 2022-02-11 15:05:36,209 - wazuh_testing - DEBUG - 2022/02/11 19:00:55 wazuh-syscheckd[20438] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.342 sec (0.339 clock sec) 2022-02-11 15:05:36,209 - wazuh_testing - DEBUG - 2022/02/11 18:57:43 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck delete /testdir1/testdir1.txt 2022-02-11 15:05:36,209 - wazuh_testing - DEBUG - 2022/02/11 19:00:55 wazuh-syscheckd[20438] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1620, path count: 1626 2022-02-11 15:05:36,210 - wazuh_testing - DEBUG - 2022/02/11 18:57:43 wazuh-db[16456] main.c:290 at run_dealer(): DEBUG: New client connected (22). 2022-02-11 15:05:36,210 - wazuh_testing - DEBUG - 2022/02/11 19:01:16 wazuh-syscheckd[20438] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 15:05:36,210 - wazuh_testing - DEBUG - 2022/02/11 19:01:16 wazuh-syscheckd[20438] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644602476}} 2022-02-11 15:05:36,210 - wazuh_testing - DEBUG - 2022/02/11 18:57:43 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update end_scan 1644602263 2022-02-11 15:05:36,210 - wazuh_testing - DEBUG - 2022/02/11 19:01:16 wazuh-syscheckd[20438] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 15:05:36,210 - wazuh_testing - DEBUG - 2022/02/11 18:57:43 wazuh-db[16456] main.c:290 at run_dealer(): DEBUG: New client connected (23). 2022-02-11 15:05:36,210 - wazuh_testing - DEBUG - 2022/02/11 19:01:16 wazuh-syscheckd[20438] fim_db.c:436 at fim_db_check_transaction(): DEBUG: Database transaction completed. 2022-02-11 15:05:36,210 - wazuh_testing - DEBUG - 2022/02/11 18:57:43 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: get-labels 1 2022-02-11 15:05:36,211 - wazuh_testing - DEBUG - 2022/02/11 19:01:16 wazuh-syscheckd[20438] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-11 15:05:36,211 - wazuh_testing - DEBUG - 2022/02/11 18:57:44 wazuh-db[16456] wdb.c:918 at wdb_commit_old(): DEBUG: Agent 'mitre' database commited. Time: 0.028 ms. 2022-02-11 15:05:36,211 - wazuh_testing - DEBUG - 2022/02/11 18:57:48 wazuh-db[16456] wdb.c:918 at wdb_commit_old(): DEBUG: Agent 'tasks' database commited. Time: 0.045 ms. 2022-02-11 15:05:36,211 - wazuh_testing - DEBUG - 2022/02/11 19:01:16 wazuh-syscheckd[20438] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-11 15:05:36,211 - wazuh_testing - DEBUG - 2022/02/11 19:01:16 wazuh-syscheckd[20438] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-11 15:05:36,211 - wazuh_testing - DEBUG - 2022/02/11 18:57:50 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux \|wazuh-agent1 \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64","os_arch":"x86_64"} 2022-02-11 15:05:36,212 - wazuh_testing - DEBUG - 2022/02/11 19:01:16 wazuh-syscheckd[20438] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-11 15:05:36,212 - wazuh_testing - DEBUG - 2022/02/11 18:58:00 wazuh-db[16456] main.c:290 at run_dealer(): DEBUG: New client connected (21). 2022-02-11 15:05:36,212 - wazuh_testing - DEBUG - 2022/02/11 19:01:16 wazuh-syscheckd[20438] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 15:05:36,212 - wazuh_testing - DEBUG - 2022/02/11 19:01:16 wazuh-syscheckd[20438] create_db.c:220 at fim_scan(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-11 15:05:36,212 - wazuh_testing - DEBUG - 2022/02/11 18:58:00 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux \|wazuh-agent1 \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64","os_arch":"x86_64"} 2022-02-11 15:05:36,212 - wazuh_testing - DEBUG - 2022/02/11 19:01:16 wazuh-syscheckd[20438] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 15:05:36,212 - wazuh_testing - DEBUG - 2022/02/11 18:58:04 wazuh-db[16456] main.c:290 at run_dealer(): DEBUG: New client connected (24). 2022-02-11 15:05:36,212 - wazuh_testing - DEBUG - 2022/02/11 19:01:16 wazuh-syscheckd[20438] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644602476}} 2022-02-11 15:05:36,213 - wazuh_testing - DEBUG - 2022/02/11 18:58:04 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1644602284 2022-02-11 15:05:36,213 - wazuh_testing - DEBUG - 2022/02/11 19:01:16 wazuh-syscheckd[20438] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.312 sec (0.309 clock sec) 2022-02-11 15:05:36,213 - wazuh_testing - DEBUG - 2022/02/11 18:58:04 wazuh-db[16456] main.c:290 at run_dealer(): DEBUG: New client connected (25). 2022-02-11 15:05:36,213 - wazuh_testing - DEBUG - 2022/02/11 19:01:16 wazuh-syscheckd[20438] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1620, path count: 1626 2022-02-11 15:05:36,213 - wazuh_testing - DEBUG - 2022/02/11 18:58:04 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update end_scan 1644602284 2022-02-11 15:05:36,213 - wazuh_testing - DEBUG - 2022/02/11 19:01:37 wazuh-syscheckd[20438] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 15:05:36,213 - wazuh_testing - DEBUG - 2022/02/11 18:58:07 wazuh-db[16456] main.c:290 at run_dealer(): DEBUG: New client connected (26). 2022-02-11 15:05:36,214 - wazuh_testing - DEBUG - 2022/02/11 19:01:37 wazuh-syscheckd[20438] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644602497}} 2022-02-11 15:05:36,214 - wazuh_testing - DEBUG - 2022/02/11 18:58:07 wazuh-db[16456] wdb_parser.c:928 at wdb_parse(): DEBUG: Task query: upgrade_cancel_tasks {"node":"wazuh-master"} 2022-02-11 15:05:36,214 - wazuh_testing - DEBUG - 2022/02/11 19:01:37 wazuh-syscheckd[20438] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 15:05:36,214 - wazuh_testing - DEBUG - 2022/02/11 19:01:37 wazuh-syscheckd[20438] fim_db.c:436 at fim_db_check_transaction(): DEBUG: Database transaction completed. 2022-02-11 15:05:36,214 - wazuh_testing - DEBUG - 2022/02/11 18:58:07 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 26 disconnected. 2022-02-11 15:05:36,215 - wazuh_testing - DEBUG - 2022/02/11 19:01:37 wazuh-syscheckd[20438] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-11 15:05:36,215 - wazuh_testing - DEBUG - 2022/02/11 18:58:10 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux \|wazuh-agent1 \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64","os_arch":"x86_64"} 2022-02-11 15:05:36,215 - wazuh_testing - DEBUG - 2022/02/11 19:01:37 wazuh-syscheckd[20438] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-11 15:05:36,215 - wazuh_testing - DEBUG - 2022/02/11 18:58:18 wazuh-db[16456] wdb.c:918 at wdb_commit_old(): DEBUG: Agent 'tasks' database commited. Time: 0.043 ms. 2022-02-11 15:05:36,216 - wazuh_testing - DEBUG - 2022/02/11 19:01:37 wazuh-syscheckd[20438] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-11 15:05:36,216 - wazuh_testing - DEBUG - 2022/02/11 19:01:37 wazuh-syscheckd[20438] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-11 15:05:36,216 - wazuh_testing - DEBUG - 2022/02/11 18:58:20 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux \|wazuh-agent1 \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64","os_arch":"x86_64"} 2022-02-11 15:05:36,216 - wazuh_testing - DEBUG - 2022/02/11 19:01:38 wazuh-syscheckd[20438] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 15:05:36,216 - wazuh_testing - DEBUG - 2022/02/11 18:58:25 wazuh-db[16456] main.c:290 at run_dealer(): DEBUG: New client connected (26). 2022-02-11 15:05:36,217 - wazuh_testing - DEBUG - 2022/02/11 19:01:38 wazuh-syscheckd[20438] create_db.c:220 at fim_scan(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-11 15:05:36,217 - wazuh_testing - DEBUG - 2022/02/11 18:58:25 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1644602305 2022-02-11 15:05:36,217 - wazuh_testing - DEBUG - 2022/02/11 19:01:38 wazuh-syscheckd[20438] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 15:05:36,217 - wazuh_testing - DEBUG - 2022/02/11 18:58:26 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update end_scan 1644602306 2022-02-11 15:05:36,217 - wazuh_testing - DEBUG - 2022/02/11 19:01:38 wazuh-syscheckd[20438] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644602498}} 2022-02-11 15:05:36,218 - wazuh_testing - DEBUG - 2022/02/11 19:01:38 wazuh-syscheckd[20438] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.371 sec (0.357 clock sec) 2022-02-11 15:05:36,218 - wazuh_testing - DEBUG - 2022/02/11 18:58:30 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux \|wazuh-agent1 \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64","os_arch":"x86_64"} 2022-02-11 15:05:36,218 - wazuh_testing - DEBUG - 2022/02/11 19:01:38 wazuh-syscheckd[20438] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1620, path count: 1626 2022-02-11 15:05:36,218 - wazuh_testing - DEBUG - 2022/02/11 18:58:35 wazuh-db[16456] wdb.c:918 at wdb_commit_old(): DEBUG: Agent 'global' database commited. Time: 11.819 ms. 2022-02-11 15:05:36,218 - wazuh_testing - DEBUG - 2022/02/11 19:01:59 wazuh-syscheckd[20438] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 15:05:36,218 - wazuh_testing - DEBUG - 2022/02/11 19:01:59 wazuh-syscheckd[20438] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644602519}} 2022-02-11 15:05:36,219 - wazuh_testing - DEBUG - 2022/02/11 18:58:40 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux \|wazuh-agent1 \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64","os_arch":"x86_64"} 2022-02-11 15:05:36,219 - wazuh_testing - DEBUG - 2022/02/11 19:01:59 wazuh-syscheckd[20438] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 15:05:36,219 - wazuh_testing - DEBUG - 2022/02/11 18:58:47 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1644602327 2022-02-11 15:05:36,219 - wazuh_testing - DEBUG - 2022/02/11 19:01:59 wazuh-syscheckd[20438] fim_db.c:436 at fim_db_check_transaction(): DEBUG: Database transaction completed. 2022-02-11 15:05:36,219 - wazuh_testing - DEBUG - 2022/02/11 18:58:47 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update end_scan 1644602327 2022-02-11 15:05:36,219 - wazuh_testing - DEBUG - 2022/02/11 19:01:59 wazuh-syscheckd[20438] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-11 15:05:36,220 - wazuh_testing - DEBUG - 2022/02/11 19:01:59 wazuh-syscheckd[20438] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-11 15:05:36,220 - wazuh_testing - DEBUG - 2022/02/11 18:58:50 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux \|wazuh-agent1 \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64","os_arch":"x86_64"} 2022-02-11 15:05:36,220 - wazuh_testing - DEBUG - 2022/02/11 19:01:59 wazuh-syscheckd[20438] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-11 15:05:36,220 - wazuh_testing - DEBUG - 2022/02/11 19:01:59 wazuh-syscheckd[20438] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-11 15:05:36,220 - wazuh_testing - DEBUG - 2022/02/11 18:59:00 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux \|wazuh-agent1 \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64","os_arch":"x86_64"} 2022-02-11 15:05:36,221 - wazuh_testing - DEBUG - 2022/02/11 19:01:59 wazuh-syscheckd[20438] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 15:05:36,221 - wazuh_testing - DEBUG - 2022/02/11 18:59:08 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1644602348 2022-02-11 15:05:36,221 - wazuh_testing - DEBUG - 2022/02/11 19:01:59 wazuh-syscheckd[20438] create_db.c:220 at fim_scan(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-11 15:05:36,221 - wazuh_testing - DEBUG - 2022/02/11 18:59:08 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update end_scan 1644602348 2022-02-11 15:05:36,221 - wazuh_testing - DEBUG - 2022/02/11 19:01:59 wazuh-syscheckd[20438] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 15:05:36,222 - wazuh_testing - DEBUG - 2022/02/11 19:01:59 wazuh-syscheckd[20438] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644602519}} 2022-02-11 15:05:36,222 - wazuh_testing - DEBUG - 2022/02/11 18:59:10 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux \|wazuh-agent1 \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64","os_arch":"x86_64"} 2022-02-11 15:05:36,222 - wazuh_testing - DEBUG - 2022/02/11 19:01:59 wazuh-syscheckd[20438] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.317 sec (0.314 clock sec) 2022-02-11 15:05:36,222 - wazuh_testing - DEBUG - 2022/02/11 18:59:20 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux \|wazuh-agent1 \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64","os_arch":"x86_64"} 2022-02-11 15:05:36,222 - wazuh_testing - DEBUG - 2022/02/11 19:01:59 wazuh-syscheckd[20438] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1620, path count: 1626 2022-02-11 15:05:36,223 - wazuh_testing - DEBUG - 2022/02/11 19:02:05 wazuh-syscheckd[20438] fim_sync.c:92 at fim_run_integrity(): DEBUG: FIM Integrity Synchronization check failed. Adjusting sync interval for next run. 2022-02-11 15:05:36,223 - wazuh_testing - DEBUG - 2022/02/11 18:59:29 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1644602369 2022-02-11 15:05:36,223 - wazuh_testing - DEBUG - 2022/02/11 19:02:05 wazuh-syscheckd[20438] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 600 seconds. 2022-02-11 15:05:36,223 - wazuh_testing - DEBUG - 2022/02/11 18:59:30 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update end_scan 1644602370 2022-02-11 15:05:36,223 - wazuh_testing - DEBUG - 2022/02/11 19:02:06 wazuh-syscheckd[20438] fim_db.c:436 at fim_db_check_transaction(): DEBUG: Database transaction completed. 2022-02-11 15:05:36,223 - wazuh_testing - DEBUG - 2022/02/11 18:59:30 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux \|wazuh-agent1 \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64","os_arch":"x86_64"} 2022-02-11 15:05:36,223 - wazuh_testing - DEBUG - 2022/02/11 19:02:06 wazuh-syscheckd[20438] run_check.c:82 at fim_send_sync_msg(): DEBUG: (6317): Sending integrity control message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1644602526,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"c7d4e863493255e1f6dd0a90c6f1bba963e76a4b"}} 2022-02-11 15:05:36,224 - wazuh_testing - DEBUG - 2022/02/11 18:59:40 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux \|wazuh-agent1 \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64","os_arch":"x86_64"} 2022-02-11 15:05:36,224 - wazuh_testing - DEBUG - 2022/02/11 18:59:41 wazuh-db[16456] wdb.c:918 at wdb_commit_old(): DEBUG: Agent 'global' database commited. Time: 2.565 ms. 2022-02-11 15:05:36,224 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-agent1 and message: .Sending integrity control message: (.+)$ 2022-02-11 15:05:36,225 - wazuh_testing - DEBUG - 2022/02/11 18:59:50 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux \|wazuh-agent1 \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64","os_arch":"x86_64"} 2022-02-11 15:05:36,225 - wazuh_testing - DEBUG - 2022/02/11 18:59:51 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1644602391 2022-02-11 15:05:36,225 - wazuh_testing - DEBUG - 2022/02/11 18:59:51 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update end_scan 1644602391 2022-02-11 15:05:36,226 - wazuh_testing - DEBUG - 2022/02/11 19:00:00 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux \|wazuh-agent1 \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64","os_arch":"x86_64"} 2022-02-11 15:05:36,226 - wazuh_testing - DEBUG - 2022/02/11 19:00:10 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux \|wazuh-agent1 \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64","os_arch":"x86_64"} 2022-02-11 15:05:36,227 - wazuh_testing - DEBUG - 2022/02/11 19:00:12 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1644602412 2022-02-11 15:05:36,227 - wazuh_testing - DEBUG - 2022/02/11 19:00:12 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update end_scan 1644602412 2022-02-11 15:05:36,227 - wazuh_testing - DEBUG - 2022/02/11 19:00:20 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux \|wazuh-agent1 \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64","os_arch":"x86_64"} 2022-02-11 15:05:36,228 - wazuh_testing - DEBUG - 2022/02/11 19:00:30 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux \|wazuh-agent1 \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64","os_arch":"x86_64"} 2022-02-11 15:05:36,228 - wazuh_testing - DEBUG - 2022/02/11 19:00:33 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1644602433 2022-02-11 15:05:36,228 - wazuh_testing - DEBUG - 2022/02/11 19:00:34 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update end_scan 1644602434 2022-02-11 15:05:36,229 - wazuh_testing - DEBUG - 2022/02/11 19:00:40 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux \|wazuh-agent1 \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64","os_arch":"x86_64"} 2022-02-11 15:05:36,229 - wazuh_testing - DEBUG - 2022/02/11 19:00:50 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux \|wazuh-agent1 \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64","os_arch":"x86_64"} 2022-02-11 15:05:36,230 - wazuh_testing - DEBUG - 2022/02/11 19:00:51 wazuh-db[16456] wdb.c:918 at wdb_commit_old(): DEBUG: Agent 'global' database commited. Time: 2.505 ms. 2022-02-11 15:05:36,230 - wazuh_testing - DEBUG - 2022/02/11 19:00:55 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1644602455 2022-02-11 15:05:36,230 - wazuh_testing - DEBUG - 2022/02/11 19:00:55 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update end_scan 1644602455 2022-02-11 15:05:36,231 - wazuh_testing - DEBUG - 2022/02/11 19:01:00 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux \|wazuh-agent1 \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64","os_arch":"x86_64"} 2022-02-11 15:05:36,231 - wazuh_testing - DEBUG - 2022/02/11 19:01:10 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux \|wazuh-agent1 \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64","os_arch":"x86_64"} 2022-02-11 15:05:36,232 - wazuh_testing - DEBUG - 2022/02/11 19:01:16 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1644602476 2022-02-11 15:05:36,232 - wazuh_testing - DEBUG - 2022/02/11 19:01:16 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update end_scan 1644602476 2022-02-11 15:05:36,233 - wazuh_testing - DEBUG - 2022/02/11 19:01:20 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux \|wazuh-agent1 \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64","os_arch":"x86_64"} 2022-02-11 15:05:36,233 - wazuh_testing - DEBUG - 2022/02/11 19:01:30 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux \|wazuh-agent1 \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64","os_arch":"x86_64"} 2022-02-11 15:05:36,234 - wazuh_testing - DEBUG - 2022/02/11 19:01:37 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1644602497 2022-02-11 15:05:36,234 - wazuh_testing - DEBUG - 2022/02/11 19:01:38 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update end_scan 1644602498 2022-02-11 15:05:36,235 - wazuh_testing - DEBUG - 2022/02/11 19:01:40 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux \|wazuh-agent1 \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64","os_arch":"x86_64"} 2022-02-11 15:05:36,235 - wazuh_testing - DEBUG - 2022/02/11 19:01:50 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux \|wazuh-agent1 \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64","os_arch":"x86_64"} 2022-02-11 15:05:36,235 - wazuh_testing - DEBUG - 2022/02/11 19:01:56 wazuh-db[16456] wdb.c:918 at wdb_commit_old(): DEBUG: Agent 'global' database commited. Time: 4.196 ms. 2022-02-11 15:05:36,236 - wazuh_testing - DEBUG - 2022/02/11 19:01:59 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1644602519 2022-02-11 15:05:36,236 - wazuh_testing - DEBUG - 2022/02/11 19:01:59 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update end_scan 1644602519 2022-02-11 15:05:36,236 - wazuh_testing - DEBUG - 2022/02/11 19:02:00 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux \|wazuh-agent1 \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64","os_arch":"x86_64"} 2022-02-11 15:05:36,237 - wazuh_testing - DEBUG - 2022/02/11 19:02:06 wazuh-db[16456] main.c:290 at run_dealer(): DEBUG: New client connected (27). 2022-02-11 15:05:36,237 - wazuh_testing - DEBUG - 2022/02/11 19:02:06 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_global {"id":1644602526,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"c7d4e863493255e1f6dd0a90c6f1bba963e76a4b"} 2022-02-11 15:05:36,237 - wazuh_testing - DEBUG - 2022/02/11 19:02:06 wazuh-db[16456] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 1.801 ms. 2022-02-11 15:05:36,238 - wazuh_testing - DEBUG - 2022/02/11 19:02:10 wazuh-db[16456] main.c:290 at run_dealer(): DEBUG: New client connected (28). 2022-02-11 15:05:36,238 - wazuh_testing - DEBUG - 2022/02/11 19:02:10 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux \|wazuh-agent1 \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64","os_arch":"x86_64"} 2022-02-11 15:05:36,239 - wazuh_testing - DEBUG - 2022/02/11 19:02:20 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux \|wazuh-agent1 \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64","os_arch":"x86_64"} 2022-02-11 15:05:36,239 - wazuh_testing - DEBUG - 2022/02/11 19:02:20 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1644602540 2022-02-11 15:05:36,239 - wazuh_testing - DEBUG - 2022/02/11 19:02:20 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update end_scan 1644602540 2022-02-11 15:05:36,240 - wazuh_testing - DEBUG - 2022/02/11 19:02:30 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux \|wazuh-agent1 \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64","os_arch":"x86_64"} 2022-02-11 15:05:36,240 - wazuh_testing - DEBUG - 2022/02/11 19:02:32 wazuh-syscheckd[16502] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. 2022-02-11 15:05:36,240 - wazuh_testing - DEBUG - 2022/02/11 19:02:32 wazuh-syscheckd[16502] fim_db.c:436 at fim_db_check_transaction(): DEBUG: Database transaction completed. 2022-02-11 15:05:36,241 - wazuh_testing - DEBUG - 2022/02/11 19:02:32 wazuh-syscheckd[16502] run_check.c:82 at fim_send_sync_msg(): DEBUG: (6317): Sending integrity control message: {"component":"fim_file","type":"integrity_clear","data":{"id":1644602552,"version":2}} 2022-02-11 15:05:36,241 - wazuh_testing - DEBUG - 2022/02/11 19:02:32 wazuh-syscheckd[16502] fim_sync.c:70 at fim_run_integrity(): DEBUG: Finished calculating FIM integrity. Time: 0.000 seconds. 2022-02-11 15:05:36,241 - wazuh_testing - DEBUG - 2022/02/11 19:02:32 wazuh-db[16456] main.c:290 at run_dealer(): DEBUG: New client connected (29). 2022-02-11 15:05:36,242 - wazuh_testing - DEBUG - 2022/02/11 19:02:32 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 000 query: fim_file integrity_clear {"id":1644602552,"version":2} 2022-02-11 15:05:36,242 - wazuh_testing - DEBUG - 2022/02/11 19:02:40 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux \|wazuh-agent1 \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64","os_arch":"x86_64"} 2022-02-11 15:05:36,242 - wazuh_testing - DEBUG - 2022/02/11 19:02:41 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1644602561 2022-02-11 15:05:36,243 - wazuh_testing - DEBUG - 2022/02/11 19:02:42 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update end_scan 1644602562 2022-02-11 15:05:36,243 - wazuh_testing - DEBUG - 2022/02/11 19:02:50 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux \|wazuh-agent1 \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64","os_arch":"x86_64"} 2022-02-11 15:05:36,244 - wazuh_testing - DEBUG - 2022/02/11 19:03:00 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux \|wazuh-agent1 \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64","os_arch":"x86_64"} 2022-02-11 15:05:36,244 - wazuh_testing - DEBUG - 2022/02/11 19:03:00 wazuh-db[16456] wdb.c:918 at wdb_commit_old(): DEBUG: Agent 'global' database commited. Time: 2.733 ms. 2022-02-11 15:05:36,244 - wazuh_testing - DEBUG - 2022/02/11 19:03:03 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1644602583 2022-02-11 15:05:36,245 - wazuh_testing - DEBUG - 2022/02/11 19:03:03 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update end_scan 1644602583 2022-02-11 15:05:36,245 - wazuh_testing - DEBUG - 2022/02/11 19:03:10 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux \|wazuh-agent1 \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64","os_arch":"x86_64"} 2022-02-11 15:05:36,246 - wazuh_testing - DEBUG - 2022/02/11 19:03:20 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux \|wazuh-agent1 \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64","os_arch":"x86_64"} 2022-02-11 15:05:36,246 - wazuh_testing - DEBUG - 2022/02/11 19:03:24 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1644602604 2022-02-11 15:05:36,246 - wazuh_testing - DEBUG - 2022/02/11 19:03:24 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update end_scan 1644602604 2022-02-11 15:05:36,247 - wazuh_testing - DEBUG - 2022/02/11 19:03:30 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux \|wazuh-agent1 \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64","os_arch":"x86_64"} 2022-02-11 15:05:36,249 - wazuh_testing - DEBUG - 2022/02/11 19:03:40 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux \|wazuh-agent1 \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64","os_arch":"x86_64"} 2022-02-11 15:05:36,250 - wazuh_testing - DEBUG - 2022/02/11 19:03:45 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1644602625 2022-02-11 15:05:36,250 - wazuh_testing - DEBUG - 2022/02/11 19:03:46 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update end_scan 1644602626 2022-02-11 15:05:36,251 - wazuh_testing - DEBUG - 2022/02/11 19:03:50 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux \|wazuh-agent1 \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64","os_arch":"x86_64"} 2022-02-11 15:05:36,252 - wazuh_testing - DEBUG - 2022/02/11 19:04:00 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux \|wazuh-agent1 \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64","os_arch":"x86_64"} 2022-02-11 15:05:36,252 - wazuh_testing - DEBUG - 2022/02/11 19:04:04 wazuh-db[16456] wdb.c:918 at wdb_commit_old(): DEBUG: Agent 'global' database commited. Time: 2.323 ms. 2022-02-11 15:05:36,253 - wazuh_testing - DEBUG - 2022/02/11 19:04:07 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1644602647 2022-02-11 15:05:36,253 - wazuh_testing - DEBUG - 2022/02/11 19:04:07 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update end_scan 1644602647 2022-02-11 15:05:36,254 - wazuh_testing - DEBUG - 2022/02/11 19:04:10 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux \|wazuh-agent1 \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64","os_arch":"x86_64"} 2022-02-11 15:05:36,255 - wazuh_testing - DEBUG - 2022/02/11 19:04:20 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux \|wazuh-agent1 \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64","os_arch":"x86_64"} 2022-02-11 15:05:36,255 - wazuh_testing - DEBUG - 2022/02/11 19:04:28 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1644602668 2022-02-11 15:05:36,256 - wazuh_testing - DEBUG - 2022/02/11 19:04:28 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update end_scan 1644602668 2022-02-11 15:05:36,256 - wazuh_testing - DEBUG - 2022/02/11 19:04:30 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux \|wazuh-agent1 \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64","os_arch":"x86_64"} 2022-02-11 15:05:36,257 - wazuh_testing - DEBUG - 2022/02/11 19:04:40 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux \|wazuh-agent1 \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64","os_arch":"x86_64"} 2022-02-11 15:05:36,258 - wazuh_testing - DEBUG - 2022/02/11 19:04:49 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1644602689 2022-02-11 15:05:36,258 - wazuh_testing - DEBUG - 2022/02/11 19:04:50 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update end_scan 1644602690 2022-02-11 15:05:36,259 - wazuh_testing - DEBUG - 2022/02/11 19:04:50 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux \|wazuh-agent1 \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64","os_arch":"x86_64"} 2022-02-11 15:05:36,259 - wazuh_testing - DEBUG - 2022/02/11 19:05:00 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux \|wazuh-agent1 \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64","os_arch":"x86_64"} 2022-02-11 15:05:36,260 - wazuh_testing - DEBUG - 2022/02/11 19:05:08 wazuh-db[16456] wdb.c:918 at wdb_commit_old(): DEBUG: Agent 'global' database commited. Time: 3.641 ms. 2022-02-11 15:05:36,260 - wazuh_testing - DEBUG - 2022/02/11 19:05:10 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux \|wazuh-agent1 \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64","os_arch":"x86_64"} 2022-02-11 15:05:36,261 - wazuh_testing - DEBUG - 2022/02/11 19:05:11 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1644602711 2022-02-11 15:05:36,261 - wazuh_testing - DEBUG - 2022/02/11 19:05:11 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update end_scan 1644602711 2022-02-11 15:05:36,262 - wazuh_testing - DEBUG - 2022/02/11 19:05:20 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux \|wazuh-agent1 \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64","os_arch":"x86_64"} 2022-02-11 15:05:36,263 - wazuh_testing - DEBUG - 2022/02/11 19:05:28 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-connection-status {"id":1,"connection_status":"disconnected","sync_status":"synced"} 2022-02-11 15:05:36,263 - wazuh_testing - DEBUG - 2022/02/11 19:05:28 wazuh-db[16456] main.c:290 at run_dealer(): DEBUG: New client connected (30). 2022-02-11 15:05:36,264 - wazuh_testing - DEBUG - 2022/02/11 19:05:28 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: get-labels 1 2022-02-11 15:05:36,264 - wazuh_testing - DEBUG - 2022/02/11 19:05:28 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-keepalive {"id":1,"connection_status":"pending","sync_status":"synced"} 2022-02-11 15:05:36,265 - wazuh_testing - DEBUG - 2022/02/11 19:05:32 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux \|wazuh-agent1 \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64","os_arch":"x86_64"} 2022-02-11 15:05:36,265 - wazuh_testing - DEBUG - 2022/02/11 19:05:32 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1644602729 2022-02-11 15:05:36,266 - wazuh_testing - DEBUG - 2022/02/11 19:05:32 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update end_scan 1644602729 2022-02-11 15:05:36,267 - wazuh_testing - DEBUG - 2022/02/11 19:05:32 wazuh-db[16456] main.c:290 at run_dealer(): DEBUG: New client connected (32). 2022-02-11 15:05:36,267 - wazuh_testing - DEBUG - 2022/02/11 19:05:32 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_global {"id":1644602729,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"b111345cc2c9d3c16b9f2ad49be4642045c1d383"} 2022-02-11 15:05:36,268 - wazuh_testing - DEBUG - 2022/02/11 19:05:32 wazuh-db[16456] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.585 ms. 2022-02-11 15:05:36,268 - wazuh_testing - DEBUG - 2022/02/11 19:05:32 wazuh-db[16456] main.c:290 at run_dealer(): DEBUG: New client connected (31). 2022-02-11 15:05:36,269 - wazuh_testing - DEBUG - 2022/02/11 19:05:32 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602729,"version":2,"begin":"/bin/bash","end":"/sbin/chcpu","tail":"/sbin/ctrlaltdel","checksum":"57402e3268a27191e04bfc132831045ee0296f32"} 2022-02-11 15:05:36,269 - wazuh_testing - DEBUG - 2022/02/11 19:05:32 wazuh-db[16456] main.c:290 at run_dealer(): DEBUG: New client connected (33). 2022-02-11 15:05:36,270 - wazuh_testing - DEBUG - 2022/02/11 19:05:32 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602729,"version":2,"begin":"/sbin/ctrlaltdel","end":"/usr/sbin/zic","checksum":"7de11400974a14fa2f33c51f339f0bdf89801e54"} 2022-02-11 15:05:36,271 - wazuh_testing - DEBUG - 2022/02/11 19:05:32 wazuh-db[16456] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.253 ms. 2022-02-11 15:05:36,271 - wazuh_testing - DEBUG - 2022/02/11 19:05:32 wazuh-db[16456] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.279 ms. 2022-02-11 15:05:36,272 - wazuh_testing - DEBUG - 2022/02/11 19:05:32 wazuh-db[16456] main.c:290 at run_dealer(): DEBUG: New client connected (34). 2022-02-11 15:05:36,272 - wazuh_testing - DEBUG - 2022/02/11 19:05:32 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602729,"version":2,"begin":"/sbin/ctrlaltdel","end":"/usr/bin/pdb","tail":"/usr/bin/pdb2","checksum":"c3aa403acf5396f1b8e70aefc8e7d356f64e4fac"} 2022-02-11 15:05:36,273 - wazuh_testing - DEBUG - 2022/02/11 19:05:32 wazuh-db[16456] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.132 ms. 2022-02-11 15:05:36,273 - wazuh_testing - DEBUG - 2022/02/11 19:05:32 wazuh-db[16456] main.c:290 at run_dealer(): DEBUG: New client connected (35). 2022-02-11 15:05:36,274 - wazuh_testing - DEBUG - 2022/02/11 19:05:32 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602729,"version":2,"begin":"/usr/bin/pdb2","end":"/usr/sbin/zic","checksum":"f13d51f7876684d6bc17db143ee1529b892c54d2"} 2022-02-11 15:05:36,275 - wazuh_testing - DEBUG - 2022/02/11 19:05:32 wazuh-db[16456] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.122 ms. 2022-02-11 15:05:36,275 - wazuh_testing - DEBUG - 2022/02/11 19:05:32 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602729,"version":2,"begin":"/sbin/ctrlaltdel","end":"/usr/bin/dpkg-divert","tail":"/usr/bin/dpkg-genbuildinfo","checksum":"24d9374abab867ba4bb77081b4b1d5ff63b02923"} 2022-02-11 15:05:36,276 - wazuh_testing - DEBUG - 2022/02/11 19:05:32 wazuh-db[16456] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.066 ms. 2022-02-11 15:05:36,276 - wazuh_testing - DEBUG - 2022/02/11 19:05:32 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602729,"version":2,"begin":"/usr/bin/dpkg-genbuildinfo","end":"/usr/bin/pdb","checksum":"fcd12ca69011f5033c3706ba868e7f2983050598"} 2022-02-11 15:05:36,277 - wazuh_testing - DEBUG - 2022/02/11 19:05:32 wazuh-db[16456] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.062 ms. 2022-02-11 15:05:36,277 - wazuh_testing - DEBUG - 2022/02/11 19:05:32 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602729,"version":2,"begin":"/usr/bin/apt-ftparchive","end":"/usr/bin/dpkg-divert","checksum":"ab79628f5b16446ec1a1f2daeaf1afd2511680e1"} 2022-02-11 15:05:36,278 - wazuh_testing - DEBUG - 2022/02/11 19:05:32 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602729,"version":2,"begin":"/sbin/ctrlaltdel","end":"/usr/bin/apt-extracttemplates","tail":"/usr/bin/apt-ftparchive","checksum":"71eff2d421c4a539ff300c405cdf404e66189e32"} 2022-02-11 15:05:36,279 - wazuh_testing - DEBUG - 2022/02/11 19:05:32 wazuh-db[16456] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.148 ms. 2022-02-11 15:05:36,279 - wazuh_testing - DEBUG - 2022/02/11 19:05:32 wazuh-db[16456] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.148 ms. 2022-02-11 15:05:36,280 - wazuh_testing - DEBUG - 2022/02/11 19:05:32 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602729,"version":2,"begin":"/sbin/ctrlaltdel","end":"/sbin/mkhomedir_helper","tail":"/sbin/mkswap","checksum":"7a7df0bd9bb5154b28eb072bebe1af0b79c59afb"} 2022-02-11 15:05:36,280 - wazuh_testing - DEBUG - 2022/02/11 19:05:32 wazuh-db[16456] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.079 ms. 2022-02-11 15:05:36,281 - wazuh_testing - DEBUG - 2022/02/11 19:05:33 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602729,"version":2,"begin":"/sbin/mkswap","end":"/usr/bin/apt-extracttemplates","checksum":"410c9508172382a132a2c48fab92c35357d3b201"} 2022-02-11 15:05:36,282 - wazuh_testing - DEBUG - 2022/02/11 19:05:33 wazuh-db[16456] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.057 ms. 2022-02-11 15:05:36,282 - wazuh_testing - DEBUG - 2022/02/11 19:05:33 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602729,"version":2,"begin":"/sbin/mkswap","end":"/sbin/start-stop-daemon","tail":"/sbin/sulogin","checksum":"b356159685213d77a501787c4ba65eff3cf7fba1"} 2022-02-11 15:05:36,283 - wazuh_testing - DEBUG - 2022/02/11 19:05:33 wazuh-db[16456] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.030 ms. 2022-02-11 15:05:36,284 - wazuh_testing - DEBUG - 2022/02/11 19:05:33 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602729,"version":2,"begin":"/sbin/sulogin","end":"/usr/bin/apt-extracttemplates","checksum":"3551dea7e43534cca38509d1ecca66a33e1a3c87"} 2022-02-11 15:05:36,284 - wazuh_testing - DEBUG - 2022/02/11 19:05:33 wazuh-db[16456] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.025 ms. 2022-02-11 15:05:36,285 - wazuh_testing - DEBUG - 2022/02/11 19:05:33 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602729,"version":2,"begin":"/sbin/sulogin","end":"/sbin/wipefs","tail":"/sbin/zramctl","checksum":"086fb81bf040732edfe2a920d67de456c77c8c3d"} 2022-02-11 15:05:36,286 - wazuh_testing - DEBUG - 2022/02/11 19:05:33 wazuh-db[16456] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.030 ms. 2022-02-11 15:05:36,286 - wazuh_testing - DEBUG - 2022/02/11 19:05:33 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602729,"version":2,"begin":"/sbin/zramctl","end":"/usr/bin/apt-extracttemplates","checksum":"96386148c5c53f15cdea4559ea41e81d26dcde21"} 2022-02-11 15:05:36,287 - wazuh_testing - DEBUG - 2022/02/11 19:05:33 wazuh-db[16456] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.067 ms. 2022-02-11 15:05:36,288 - wazuh_testing - DEBUG - 2022/02/11 19:05:33 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602729,"version":2,"begin":"/usr/bin/addpart","end":"/usr/bin/apt-extracttemplates","checksum":"7d1a3bbe28f2c9e567f8311757d46ea5365d7112"} 2022-02-11 15:05:36,288 - wazuh_testing - DEBUG - 2022/02/11 19:05:33 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602729,"version":2,"begin":"/sbin/zramctl","end":"/usr/bin/aclocal-1.16","tail":"/usr/bin/addpart","checksum":"468463a672b2c9f9ba1b92e61ab72aa797753157"} 2022-02-11 15:05:36,289 - wazuh_testing - DEBUG - 2022/02/11 19:05:33 wazuh-db[16456] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.023 ms. 2022-02-11 15:05:36,289 - wazuh_testing - DEBUG - 2022/02/11 19:05:33 wazuh-db[16456] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.019 ms. 2022-02-11 15:05:36,290 - wazuh_testing - DEBUG - 2022/02/11 19:05:33 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602729,"version":2,"begin":"/sbin/zramctl","end":"/usr/bin/2to3-2.7","tail":"/usr/bin/[","checksum":"3cbe8fff156e6c3d71bef1b92904ab753e2c4cfa"} 2022-02-11 15:05:36,291 - wazuh_testing - DEBUG - 2022/02/11 19:05:33 wazuh-db[16456] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.018 ms. 2022-02-11 15:05:36,291 - wazuh_testing - DEBUG - 2022/02/11 19:05:33 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602729,"version":2,"begin":"/usr/bin/[","end":"/usr/bin/aclocal-1.16","checksum":"0f1d35a6565c33bf9697c50fd2d7d2a4ebccbc45"} 2022-02-11 15:05:36,292 - wazuh_testing - DEBUG - 2022/02/11 19:05:33 wazuh-db[16456] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.018 ms. 2022-02-11 15:05:36,293 - wazuh_testing - DEBUG - 2022/02/11 19:05:33 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602729,"version":2,"begin":"/sbin/zramctl","end":"/sbin/zramctl","tail":"/testdir1/testdir1.txt","checksum":"58b2b87ce2162d80a895c740e0ed2124836230b7"} 2022-02-11 15:05:36,293 - wazuh_testing - DEBUG - 2022/02/11 19:05:33 wazuh-db[16456] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.013 ms. 2022-02-11 15:05:36,294 - wazuh_testing - DEBUG - 2022/02/11 19:05:34 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602729,"version":2,"begin":"/testdir1/testdir1.txt","end":"/usr/bin/2to3-2.7","checksum":"5ba8bd024b2f338033171189f2b62535f6f32790"} 2022-02-11 15:05:36,295 - wazuh_testing - DEBUG - 2022/02/11 19:05:34 wazuh-db[16456] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.035 ms. 2022-02-11 15:05:36,295 - wazuh_testing - DEBUG - 2022/02/11 19:05:34 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602729,"version":2,"begin":"/testdir1/testdir1.txt","end":"/testdir1/testdir1.txt","tail":"/usr/bin/2to3-2.7","checksum":"31f9e50e58eb6b6700c8ec3ae72d3cb3dcd17fc2"} 2022-02-11 15:05:36,296 - wazuh_testing - DEBUG - 2022/02/11 19:05:34 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602729,"version":2,"begin":"/usr/bin/2to3-2.7","end":"/usr/bin/2to3-2.7","checksum":"f621f8dd560e58c5f017dfd42d98bb3a72466d1d"} 2022-02-11 15:05:36,297 - wazuh_testing - DEBUG - 2022/02/11 19:05:34 wazuh-db[16456] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.014 ms. 2022-02-11 15:05:36,297 - wazuh_testing - DEBUG - 2022/02/11 19:05:34 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file save2 {"path":"/testdir1/testdir1.txt","timestamp":1644602729,"version":2,"attributes":{"type":"file","size":0,"perm":"rw-r--r--","uid":"0","gid":"0","user_name":"root","group_name":"root","inode":17179747,"mtime":1644602725,"hash_md5":"d41d8cd98f00b204e9800998ecf8427e","hash_sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","hash_sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","checksum":"d01a265c7ded295dee3cfddcd82ecd5d33e9292b"}} 2022-02-11 15:05:36,298 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-manager and message: .Agent 001 query: (.+) save2 2022-02-11 15:05:37,184 - wazuh_testing - DEBUG - Cleaning temporal files... 2022-02-11 15:05:37,185 - wazuh_testing - DEBUG - Checking results... 2022-02-11 15:05:37,188 - wazuh_testing - DEBUG - Received from wazuh-agent1 the expected message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1644602526,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"c7d4e863493255e1f6dd0a90c6f1bba963e76a4b"}} 2022-02-11 15:05:37,188 - wazuh_testing - DEBUG - Received from wazuh-manager the expected message: fim_file 2022-02-11 15:05:52,545 - wazuh_testing - DEBUG - Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-11 15:05:52,546 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-11 15:05:52,546 - wazuh_testing - DEBUG - Starting file composer for wazuh-agent1 and path: /var/ossec/logs/ossec.log. Composite file in /home/camila/Escritorio/repo/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-agent1_ossec.log.tmp 2022-02-11 15:05:52,548 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-agent1 and message: .Initializing FIM Integrity Synchronization check. (.+)$ 2022-02-11 15:05:54,049 - wazuh_testing - DEBUG - 2022/02/11 19:05:42 wazuh-logcollector: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:05:54,050 - wazuh_testing - DEBUG - 2022/02/11 19:05:42 wazuh-syscheckd[21093] sig_op.c:49 at HandleSIG(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:05:54,050 - wazuh_testing - DEBUG - 2022/02/11 19:05:42 wazuh-agentd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:05:54,050 - wazuh_testing - DEBUG - 2022/02/11 19:05:42 wazuh-execd: INFO: (1314): Shutdown received. Deleting responses. 2022-02-11 15:05:54,051 - wazuh_testing - DEBUG - 2022/02/11 19:05:42 wazuh-execd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:05:54,051 - wazuh_testing - DEBUG - 2022/02/11 19:05:45 wazuh-syscheckd[21519] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 15:05:54,051 - wazuh_testing - DEBUG - 2022/02/11 19:05:45 wazuh-syscheckd[21519] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 15:05:54,051 - wazuh_testing - DEBUG - 2022/02/11 19:05:45 wazuh-syscheckd[21519] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-11 15:05:54,051 - wazuh_testing - DEBUG - 2022/02/11 19:05:45 wazuh-syscheckd[21519] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-11 15:05:54,052 - wazuh_testing - DEBUG - 2022/02/11 19:05:45 wazuh-syscheckd[21519] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-11 15:05:54,052 - wazuh_testing - DEBUG - 2022/02/11 19:05:45 wazuh-syscheckd[21519] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-11 15:05:54,052 - wazuh_testing - DEBUG - 2022/02/11 19:05:45 wazuh-syscheckd[21519] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-11 15:05:54,052 - wazuh_testing - DEBUG - 2022/02/11 19:05:45 wazuh-syscheckd[21519] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$\|.swp$ 2022-02-11 15:05:54,052 - wazuh_testing - DEBUG - 2022/02/11 19:05:45 wazuh-syscheckd[21519] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$\|.swp$ OK? 2022-02-11 15:05:54,053 - wazuh_testing - DEBUG - 2022/02/11 19:05:45 wazuh-syscheckd[21519] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-11 15:05:54,053 - wazuh_testing - DEBUG - 2022/02/11 19:05:45 wazuh-syscheckd[21519] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-11 15:05:54,053 - wazuh_testing - DEBUG - 2022/02/11 19:05:45 wazuh-syscheckd[21519] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 15:05:54,054 - wazuh_testing - DEBUG - 2022/02/11 19:05:45 wazuh-syscheckd[21519] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 15:05:54,054 - wazuh_testing - DEBUG - 2022/02/11 19:05:45 wazuh-syscheckd[21519] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 15:05:54,054 - wazuh_testing - DEBUG - 2022/02/11 19:05:45 wazuh-syscheckd[21519] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 15:05:54,054 - wazuh_testing - DEBUG - 2022/02/11 19:05:45 wazuh-syscheckd[21519] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 15:05:54,054 - wazuh_testing - DEBUG - 2022/02/11 19:05:45 wazuh-syscheckd[21519] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 15:05:54,055 - wazuh_testing - DEBUG - 2022/02/11 19:05:45 wazuh-execd: INFO: Started (pid: 21532). 2022-02-11 15:05:54,055 - wazuh_testing - DEBUG - 2022/02/11 19:05:46 wazuh-agentd: INFO: (1410): Reading authentication keys file. 2022-02-11 15:05:54,055 - wazuh_testing - DEBUG - 2022/02/11 19:05:46 wazuh-agentd: INFO: Using notify time: 10 and max time to reconnect: 60 2022-02-11 15:05:54,056 - wazuh_testing - DEBUG - 2022/02/11 19:05:46 wazuh-agentd: INFO: Version detected -> Linux \|wazuh-agent1 \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64 [Debian GNU/Linux\|debian: 10 (buster)] - Wazuh v4.2.5 2022-02-11 15:05:54,056 - wazuh_testing - DEBUG - 2022/02/11 19:05:46 wazuh-agentd: INFO: Started (pid: 21543). 2022-02-11 15:05:54,056 - wazuh_testing - DEBUG - 2022/02/11 19:05:46 wazuh-agentd: INFO: Server IP Address: wazuh-manager/172.17.0.2 2022-02-11 15:05:54,056 - wazuh_testing - DEBUG - 2022/02/11 19:05:46 wazuh-agentd: INFO: Using AES as encryption method. 2022-02-11 15:05:54,057 - wazuh_testing - DEBUG - 2022/02/11 19:05:46 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 15:05:54,057 - wazuh_testing - DEBUG - 2022/02/11 19:05:46 wazuh-agentd: INFO: (4102): Connected to the server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 15:05:54,057 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 15:05:54,057 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 15:05:54,058 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-11 15:05:54,058 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-11 15:05:54,058 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-11 15:05:54,058 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-11 15:05:54,059 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-11 15:05:54,059 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$\|.swp$ 2022-02-11 15:05:54,059 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$\|.swp$ OK? 2022-02-11 15:05:54,059 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-11 15:05:54,060 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-11 15:05:54,060 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 15:05:54,060 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 15:05:54,060 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 15:05:54,061 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 15:05:54,061 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 15:05:54,061 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 15:05:54,061 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 rootcheck[21555] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled. 2022-02-11 15:05:54,062 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:05:54,062 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] syscom.c:123 at syscom_main(): DEBUG: (6284): Local requests thread ready. 2022-02-11 15:05:54,062 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] mq_op.c:47 at StartMQ(): DEBUG: Connected succesfully to 'queue/sockets/queue' after 0 attempts 2022-02-11 15:05:54,062 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] mq_op.c:48 at StartMQ(): DEBUG: (unix_domain) Maximum send buffer set to: '212992'. 2022-02-11 15:05:54,063 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:185 at main(): INFO: Started (pid: 21557). 2022-02-11 15:05:54,063 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:193 at main(): INFO: (6003): Monitoring path: '/bin', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 15:05:54,063 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:193 at main(): INFO: (6003): Monitoring path: '/boot', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 15:05:54,064 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:193 at main(): INFO: (6003): Monitoring path: '/etc', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 15:05:54,064 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:193 at main(): INFO: (6003): Monitoring path: '/sbin', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 15:05:54,064 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir1', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 15:05:54,064 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir2', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| realtime'. 2022-02-11 15:05:54,065 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir3', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| whodata'. 2022-02-11 15:05:54,065 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/bin', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 15:05:54,065 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/sbin', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 15:05:54,065 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:215 at main(): DEBUG: (6357): Maximum disk quota size limit configured to '1048576 KB'. 2022-02-11 15:05:54,065 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mtab' 2022-02-11 15:05:54,066 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/hosts.deny' 2022-02-11 15:05:54,066 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mail/statistics' 2022-02-11 15:05:54,066 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random-seed' 2022-02-11 15:05:54,066 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random.seed' 2022-02-11 15:05:54,067 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/adjtime' 2022-02-11 15:05:54,067 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/httpd/logs' 2022-02-11 15:05:54,067 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/utmpx' 2022-02-11 15:05:54,067 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/wtmpx' 2022-02-11 15:05:54,067 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/cups/certs' 2022-02-11 15:05:54,067 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/dumpdates' 2022-02-11 15:05:54,068 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/svc/volatile' 2022-02-11 15:05:54,068 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/security' 2022-02-11 15:05:54,068 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/debug' 2022-02-11 15:05:54,068 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/dev/core' 2022-02-11 15:05:54,068 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '^/proc' 2022-02-11 15:05:54,068 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '.log$\|.swp$' 2022-02-11 15:05:54,068 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:235 at main(): INFO: (6004): No diff for file: '/etc/ssl/private.key' 2022-02-11 15:05:54,069 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:245 at main(): INFO: (6016): Directory set for real time monitoring: '/testdir2'. 2022-02-11 15:05:54,069 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] syscheck_audit.c:243 at audit_init(): WARNING: (6924): Who-data engine cannot start because Auditd is not running. 2022-02-11 15:05:54,069 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:264 at main(): WARNING: (6913): Who-data engine could not start. Switching who-data to real-time. 2022-02-11 15:05:54,069 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] run_check.c:194 at start_daemon(): DEBUG: (6320): Setting process priority to: '10' 2022-02-11 15:05:54,069 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:05:54,069 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] run_check.c:229 at start_daemon(): INFO: (6000): Starting daemon... 2022-02-11 15:05:54,070 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] run_check.c:232 at start_daemon(): INFO: (6010): File integrity monitoring scan frequency: 20 seconds 2022-02-11 15:05:54,070 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 15:05:54,070 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644602747}} 2022-02-11 15:05:54,070 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 15:05:54,070 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-11 15:05:54,071 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-11 15:05:54,071 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-11 15:05:54,071 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-11 15:05:54,071 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 15:05:54,071 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 15:05:54,071 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644602747}} 2022-02-11 15:05:54,072 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.325 sec (0.321 clock sec) 2022-02-11 15:05:54,072 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1621, path count: 1627 2022-02-11 15:05:54,072 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:05:54,072 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:05:54,072 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:05:54,073 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] run_check.c:387 at fim_run_realtime(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-11 15:05:54,073 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] run_check.c:543 at log_realtime_status(): INFO: (6012): Real-time file integrity monitoring started. 2022-02-11 15:05:54,073 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] run_check.c:568 at symlink_checker_thread(): DEBUG: (6033): Starting symbolic link updater. Interval '600'. 2022-02-11 15:05:54,073 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. 2022-02-11 15:05:54,074 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-agent1 and message: .Initializing FIM Integrity Synchronization check. (.+)$ 2022-02-11 15:05:55,052 - wazuh_testing - DEBUG - Cleaning temporal files... 2022-02-11 15:05:55,052 - wazuh_testing - DEBUG - Checking results... 2022-02-11 15:05:55,054 - wazuh_testing - DEBUG - Received from wazuh-agent1 the expected message: Sync interval is 300 seconds. -------------------------------Captured log call-------------------------------- DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:1005 Cleaning temporal files... DEBUG wazuh_testing:monitoring.py:994 Checking results... DEBUG wazuh_testing:monitoring.py:1000 Received from wazuh-agent1 the expected message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1644602526,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"c7d4e863493255e1f6dd0a90c6f1bba963e76a4b"}} DEBUG wazuh_testing:monitoring.py:1000 Received from wazuh-manager the expected message: fim_file DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:1005 Cleaning temporal files... DEBUG wazuh_testing:monitoring.py:994 Checking results... DEBUG wazuh_testing:monitoring.py:1000 Received from wazuh-agent1 the expected message: Sync interval is 300 seconds.
Passed	test_synchronization.py::test_synchronization[testdir1-add-wazuh-manager]	44.73
------------------------------Captured stderr call------------------------------ 2022-02-11 15:06:08,442 - wazuh_testing - DEBUG - Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-11 15:06:08,443 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-11 15:06:08,444 - wazuh_testing - DEBUG - Starting file composer for wazuh-agent1 and path: /var/ossec/logs/ossec.log. Composite file in /home/camila/Escritorio/repo/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-agent1_ossec.log.tmp 2022-02-11 15:06:08,444 - wazuh_testing - DEBUG - Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-11 15:06:08,445 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-agent1 and message: .Sending integrity control message: (.+)$ 2022-02-11 15:06:08,445 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-11 15:06:08,446 - wazuh_testing - DEBUG - Starting file composer for wazuh-manager and path: /var/ossec/logs/ossec.log. Composite file in /home/camila/Escritorio/repo/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-manager_ossec.log.tmp 2022-02-11 15:06:08,448 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-manager and message: .Agent 001 query: (.+) save2 2022-02-11 15:06:09,947 - wazuh_testing - DEBUG - 2022/02/11 19:05:42 wazuh-logcollector: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:06:09,947 - wazuh_testing - DEBUG - 2022/02/11 19:05:42 wazuh-syscheckd[21093] sig_op.c:49 at HandleSIG(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:06:09,947 - wazuh_testing - DEBUG - 2022/02/11 19:05:42 wazuh-agentd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:06:09,948 - wazuh_testing - DEBUG - 2022/02/11 19:05:42 wazuh-execd: INFO: (1314): Shutdown received. Deleting responses. 2022-02-11 15:06:09,948 - wazuh_testing - DEBUG - 2022/02/11 19:05:42 wazuh-execd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:06:09,948 - wazuh_testing - DEBUG - 2022/02/11 19:05:45 wazuh-syscheckd[21519] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 15:06:09,948 - wazuh_testing - DEBUG - 2022/02/11 19:05:45 wazuh-syscheckd[21519] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 15:06:09,948 - wazuh_testing - DEBUG - 2022/02/11 19:05:45 wazuh-syscheckd[21519] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-11 15:06:09,949 - wazuh_testing - DEBUG - 2022/02/11 19:05:45 wazuh-syscheckd[21519] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-11 15:06:09,949 - wazuh_testing - DEBUG - 2022/02/11 19:05:45 wazuh-syscheckd[21519] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-11 15:06:09,949 - wazuh_testing - DEBUG - 2022/02/11 19:05:45 wazuh-syscheckd[21519] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-11 15:06:09,949 - wazuh_testing - DEBUG - 2022/02/11 19:05:45 wazuh-syscheckd[21519] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-11 15:06:09,950 - wazuh_testing - DEBUG - 2022/02/11 19:05:45 wazuh-syscheckd[21519] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$\|.swp$ 2022-02-11 15:06:09,950 - wazuh_testing - DEBUG - 2022/02/11 19:05:45 wazuh-syscheckd[21519] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$\|.swp$ OK? 2022-02-11 15:06:09,950 - wazuh_testing - DEBUG - 2022/02/11 19:05:45 wazuh-syscheckd[21519] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-11 15:06:09,950 - wazuh_testing - DEBUG - 2022/02/11 19:05:42 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-connection-status {"id":1,"connection_status":"disconnected","sync_status":"synced"} 2022-02-11 15:06:09,950 - wazuh_testing - DEBUG - 2022/02/11 19:05:45 wazuh-syscheckd[21519] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-11 15:06:09,950 - wazuh_testing - DEBUG - 2022/02/11 19:05:42 wazuh-db[16456] main.c:290 at run_dealer(): DEBUG: New client connected (37). 2022-02-11 15:06:09,950 - wazuh_testing - DEBUG - 2022/02/11 19:05:42 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: get-labels 1 2022-02-11 15:06:09,951 - wazuh_testing - DEBUG - 2022/02/11 19:05:45 wazuh-syscheckd[21519] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 15:06:09,951 - wazuh_testing - DEBUG - 2022/02/11 19:05:45 wazuh-db[16456] wdb.c:918 at wdb_commit_old(): DEBUG: Agent '001' database commited. Time: 1.941 ms. 2022-02-11 15:06:09,951 - wazuh_testing - DEBUG - 2022/02/11 19:05:45 wazuh-syscheckd[21519] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 15:06:09,951 - wazuh_testing - DEBUG - 2022/02/11 19:05:46 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-keepalive {"id":1,"connection_status":"pending","sync_status":"synced"} 2022-02-11 15:06:09,951 - wazuh_testing - DEBUG - 2022/02/11 19:05:45 wazuh-syscheckd[21519] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 15:06:09,951 - wazuh_testing - DEBUG - 2022/02/11 19:05:45 wazuh-syscheckd[21519] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 15:06:09,952 - wazuh_testing - DEBUG - 2022/02/11 19:05:45 wazuh-syscheckd[21519] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 15:06:09,952 - wazuh_testing - DEBUG - 2022/02/11 19:05:45 wazuh-syscheckd[21519] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 15:06:09,952 - wazuh_testing - DEBUG - 2022/02/11 19:05:50 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux \|wazuh-agent1 \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64","os_arch":"x86_64"} 2022-02-11 15:06:09,952 - wazuh_testing - DEBUG - 2022/02/11 19:05:45 wazuh-execd: INFO: Started (pid: 21532). 2022-02-11 15:06:09,952 - wazuh_testing - DEBUG - 2022/02/11 19:05:50 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1644602747 2022-02-11 15:06:09,952 - wazuh_testing - DEBUG - 2022/02/11 19:05:46 wazuh-agentd: INFO: (1410): Reading authentication keys file. 2022-02-11 15:06:09,952 - wazuh_testing - DEBUG - 2022/02/11 19:05:50 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update end_scan 1644602747 2022-02-11 15:06:09,953 - wazuh_testing - DEBUG - 2022/02/11 19:05:46 wazuh-agentd: INFO: Using notify time: 10 and max time to reconnect: 60 2022-02-11 15:06:09,953 - wazuh_testing - DEBUG - 2022/02/11 19:05:46 wazuh-agentd: INFO: Version detected -> Linux \|wazuh-agent1 \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64 [Debian GNU/Linux\|debian: 10 (buster)] - Wazuh v4.2.5 2022-02-11 15:06:09,953 - wazuh_testing - DEBUG - 2022/02/11 19:05:50 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_global {"id":1644602747,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"7519e3e1108e6887a3132943199870a40d2a3b4e"} 2022-02-11 15:06:09,953 - wazuh_testing - DEBUG - 2022/02/11 19:05:46 wazuh-agentd: INFO: Started (pid: 21543). 2022-02-11 15:06:09,953 - wazuh_testing - DEBUG - 2022/02/11 19:05:50 wazuh-db[16456] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 1.202 ms. 2022-02-11 15:06:09,953 - wazuh_testing - DEBUG - 2022/02/11 19:05:46 wazuh-agentd: INFO: Server IP Address: wazuh-manager/172.17.0.2 2022-02-11 15:06:09,954 - wazuh_testing - DEBUG - 2022/02/11 19:05:46 wazuh-agentd: INFO: Using AES as encryption method. 2022-02-11 15:06:09,954 - wazuh_testing - DEBUG - 2022/02/11 19:05:46 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 15:06:09,954 - wazuh_testing - DEBUG - 2022/02/11 19:05:50 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602747,"version":2,"begin":"/bin/bash","end":"/sbin/chcpu","tail":"/sbin/ctrlaltdel","checksum":"57402e3268a27191e04bfc132831045ee0296f32"} 2022-02-11 15:06:09,954 - wazuh_testing - DEBUG - 2022/02/11 19:05:46 wazuh-agentd: INFO: (4102): Connected to the server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 15:06:09,954 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 15:06:09,955 - wazuh_testing - DEBUG - 2022/02/11 19:05:50 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602747,"version":2,"begin":"/sbin/ctrlaltdel","end":"/usr/sbin/zic","checksum":"ea793b480c81eaa1e5ad9a91231455d6878aded2"} 2022-02-11 15:06:09,955 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 15:06:09,955 - wazuh_testing - DEBUG - 2022/02/11 19:05:50 wazuh-db[16456] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.660 ms. 2022-02-11 15:06:09,955 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-11 15:06:09,955 - wazuh_testing - DEBUG - 2022/02/11 19:05:50 wazuh-db[16456] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.678 ms. 2022-02-11 15:06:09,955 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-11 15:06:09,956 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-11 15:06:09,956 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-11 15:06:09,956 - wazuh_testing - DEBUG - 2022/02/11 19:05:50 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602747,"version":2,"begin":"/sbin/ctrlaltdel","end":"/usr/bin/pdb","tail":"/usr/bin/pdb2","checksum":"527fa8d22cdfa32b107f77373759172575c43618"} 2022-02-11 15:06:09,956 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-11 15:06:09,956 - wazuh_testing - DEBUG - 2022/02/11 19:05:50 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602747,"version":2,"begin":"/usr/bin/pdb2","end":"/usr/sbin/zic","checksum":"f13d51f7876684d6bc17db143ee1529b892c54d2"} 2022-02-11 15:06:09,956 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$\|.swp$ 2022-02-11 15:06:09,957 - wazuh_testing - DEBUG - 2022/02/11 19:05:50 wazuh-db[16456] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.328 ms. 2022-02-11 15:06:09,957 - wazuh_testing - DEBUG - 2022/02/11 19:05:50 wazuh-db[16456] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.322 ms. 2022-02-11 15:06:09,957 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$\|.swp$ OK? 2022-02-11 15:06:09,957 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-11 15:06:09,957 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-11 15:06:09,958 - wazuh_testing - DEBUG - 2022/02/11 19:05:50 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602747,"version":2,"begin":"/sbin/ctrlaltdel","end":"/usr/bin/dpkg-divert","tail":"/usr/bin/dpkg-genbuildinfo","checksum":"56f48a14ffe948b9b2e9dc172423739131452b02"} 2022-02-11 15:06:09,958 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 15:06:09,958 - wazuh_testing - DEBUG - 2022/02/11 19:05:50 wazuh-db[16456] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.165 ms. 2022-02-11 15:06:09,958 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 15:06:09,958 - wazuh_testing - DEBUG - 2022/02/11 19:05:50 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602747,"version":2,"begin":"/usr/bin/dpkg-genbuildinfo","end":"/usr/bin/pdb","checksum":"fcd12ca69011f5033c3706ba868e7f2983050598"} 2022-02-11 15:06:09,958 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 15:06:09,958 - wazuh_testing - DEBUG - 2022/02/11 19:05:50 wazuh-db[16456] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.174 ms. 2022-02-11 15:06:09,958 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 15:06:09,959 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 15:06:09,959 - wazuh_testing - DEBUG - 2022/02/11 19:05:50 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602747,"version":2,"begin":"/sbin/ctrlaltdel","end":"/usr/bin/apt-extracttemplates","tail":"/usr/bin/apt-ftparchive","checksum":"e59c4a767ec9f4a84e8159e698e124a51a766899"} 2022-02-11 15:06:09,959 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 15:06:09,959 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 rootcheck[21555] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled. 2022-02-11 15:06:09,959 - wazuh_testing - DEBUG - 2022/02/11 19:05:50 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602747,"version":2,"begin":"/usr/bin/apt-ftparchive","end":"/usr/bin/dpkg-divert","checksum":"ab79628f5b16446ec1a1f2daeaf1afd2511680e1"} 2022-02-11 15:06:09,959 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:06:09,959 - wazuh_testing - DEBUG - 2022/02/11 19:05:50 wazuh-db[16456] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.213 ms. 2022-02-11 15:06:09,959 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] syscom.c:123 at syscom_main(): DEBUG: (6284): Local requests thread ready. 2022-02-11 15:06:09,960 - wazuh_testing - DEBUG - 2022/02/11 19:05:50 wazuh-db[16456] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.202 ms. 2022-02-11 15:06:09,960 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] mq_op.c:47 at StartMQ(): DEBUG: Connected succesfully to 'queue/sockets/queue' after 0 attempts 2022-02-11 15:06:09,960 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] mq_op.c:48 at StartMQ(): DEBUG: (unix_domain) Maximum send buffer set to: '212992'. 2022-02-11 15:06:09,960 - wazuh_testing - DEBUG - 2022/02/11 19:05:50 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602747,"version":2,"begin":"/sbin/ctrlaltdel","end":"/sbin/mkhomedir_helper","tail":"/sbin/mkswap","checksum":"7a7df0bd9bb5154b28eb072bebe1af0b79c59afb"} 2022-02-11 15:06:09,960 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:185 at main(): INFO: Started (pid: 21557). 2022-02-11 15:06:09,960 - wazuh_testing - DEBUG - 2022/02/11 19:05:50 wazuh-db[16456] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.133 ms. 2022-02-11 15:06:09,960 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:193 at main(): INFO: (6003): Monitoring path: '/bin', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 15:06:09,961 - wazuh_testing - DEBUG - 2022/02/11 19:05:51 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602747,"version":2,"begin":"/sbin/mkswap","end":"/usr/bin/apt-extracttemplates","checksum":"9b9046bdc8a3ae092896ff2f1ee3b4d56d3af034"} 2022-02-11 15:06:09,961 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:193 at main(): INFO: (6003): Monitoring path: '/boot', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 15:06:09,961 - wazuh_testing - DEBUG - 2022/02/11 19:05:51 wazuh-db[16456] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.106 ms. 2022-02-11 15:06:09,961 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:193 at main(): INFO: (6003): Monitoring path: '/etc', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 15:06:09,961 - wazuh_testing - DEBUG - 2022/02/11 19:05:51 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602747,"version":2,"begin":"/sbin/mkswap","end":"/sbin/start-stop-daemon","tail":"/sbin/sulogin","checksum":"b356159685213d77a501787c4ba65eff3cf7fba1"} 2022-02-11 15:06:09,961 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:193 at main(): INFO: (6003): Monitoring path: '/sbin', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 15:06:09,961 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir1', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 15:06:09,961 - wazuh_testing - DEBUG - 2022/02/11 19:05:51 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602747,"version":2,"begin":"/sbin/sulogin","end":"/usr/bin/apt-extracttemplates","checksum":"5500e886efa586868d993de6b6d2a6c07bf1242c"} 2022-02-11 15:06:09,961 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir2', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| realtime'. 2022-02-11 15:06:09,962 - wazuh_testing - DEBUG - 2022/02/11 19:05:51 wazuh-db[16456] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.076 ms. 2022-02-11 15:06:09,962 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir3', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| whodata'. 2022-02-11 15:06:09,962 - wazuh_testing - DEBUG - 2022/02/11 19:05:51 wazuh-db[16456] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.084 ms. 2022-02-11 15:06:09,962 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/bin', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 15:06:09,962 - wazuh_testing - DEBUG - 2022/02/11 19:05:51 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602747,"version":2,"begin":"/sbin/sulogin","end":"/sbin/wipefs","tail":"/sbin/zramctl","checksum":"086fb81bf040732edfe2a920d67de456c77c8c3d"} 2022-02-11 15:06:09,962 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/sbin', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 15:06:09,962 - wazuh_testing - DEBUG - 2022/02/11 19:05:51 wazuh-db[16456] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.079 ms. 2022-02-11 15:06:09,962 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:215 at main(): DEBUG: (6357): Maximum disk quota size limit configured to '1048576 KB'. 2022-02-11 15:06:09,962 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mtab' 2022-02-11 15:06:09,963 - wazuh_testing - DEBUG - 2022/02/11 19:05:51 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602747,"version":2,"begin":"/sbin/zramctl","end":"/usr/bin/apt-extracttemplates","checksum":"8ff04846f6c34bcc55a061881d39b5db64c6be1b"} 2022-02-11 15:06:09,963 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/hosts.deny' 2022-02-11 15:06:09,963 - wazuh_testing - DEBUG - 2022/02/11 19:05:51 wazuh-db[16456] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.059 ms. 2022-02-11 15:06:09,963 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mail/statistics' 2022-02-11 15:06:09,963 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random-seed' 2022-02-11 15:06:09,963 - wazuh_testing - DEBUG - 2022/02/11 19:05:51 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602747,"version":2,"begin":"/sbin/zramctl","end":"/usr/bin/aclocal-1.16","tail":"/usr/bin/addpart","checksum":"25430686c11e3e3f2d7832f1af41125671853a57"} 2022-02-11 15:06:09,963 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random.seed' 2022-02-11 15:06:09,963 - wazuh_testing - DEBUG - 2022/02/11 19:05:51 wazuh-db[16456] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.072 ms. 2022-02-11 15:06:09,964 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/adjtime' 2022-02-11 15:06:09,964 - wazuh_testing - DEBUG - 2022/02/11 19:05:51 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602747,"version":2,"begin":"/usr/bin/addpart","end":"/usr/bin/apt-extracttemplates","checksum":"7d1a3bbe28f2c9e567f8311757d46ea5365d7112"} 2022-02-11 15:06:09,964 - wazuh_testing - DEBUG - 2022/02/11 19:05:51 wazuh-db[16456] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.075 ms. 2022-02-11 15:06:09,964 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/httpd/logs' 2022-02-11 15:06:09,964 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/utmpx' 2022-02-11 15:06:09,964 - wazuh_testing - DEBUG - 2022/02/11 19:05:51 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602747,"version":2,"begin":"/usr/bin/[","end":"/usr/bin/aclocal-1.16","checksum":"0f1d35a6565c33bf9697c50fd2d7d2a4ebccbc45"} 2022-02-11 15:06:09,964 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/wtmpx' 2022-02-11 15:06:09,964 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/cups/certs' 2022-02-11 15:06:09,964 - wazuh_testing - DEBUG - 2022/02/11 19:05:51 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602747,"version":2,"begin":"/sbin/zramctl","end":"/usr/bin/2to3-2.7","tail":"/usr/bin/[","checksum":"b454bd2e2fc67b4bd9be5dfe835303d4a4cc4605"} 2022-02-11 15:06:09,964 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/dumpdates' 2022-02-11 15:06:09,964 - wazuh_testing - DEBUG - 2022/02/11 19:05:51 wazuh-db[16456] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.068 ms. 2022-02-11 15:06:09,965 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/svc/volatile' 2022-02-11 15:06:09,965 - wazuh_testing - DEBUG - 2022/02/11 19:05:51 wazuh-db[16456] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.056 ms. 2022-02-11 15:06:09,965 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/security' 2022-02-11 15:06:09,965 - wazuh_testing - DEBUG - 2022/02/11 19:05:51 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602747,"version":2,"begin":"/sbin/zramctl","end":"/sbin/zramctl","tail":"/testdir1/testdir1.txt","checksum":"58b2b87ce2162d80a895c740e0ed2124836230b7"} 2022-02-11 15:06:09,965 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/debug' 2022-02-11 15:06:09,965 - wazuh_testing - DEBUG - 2022/02/11 19:05:51 wazuh-db[16456] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.043 ms. 2022-02-11 15:06:09,965 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/dev/core' 2022-02-11 15:06:09,965 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '^/proc' 2022-02-11 15:06:09,965 - wazuh_testing - DEBUG - 2022/02/11 19:05:52 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602747,"version":2,"begin":"/testdir1/testdir1.txt","end":"/usr/bin/2to3-2.7","checksum":"d52e35d71d70a93f6663ee86213ccf2f0bb4499e"} 2022-02-11 15:06:09,965 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '.log$\|.swp$' 2022-02-11 15:06:09,965 - wazuh_testing - DEBUG - 2022/02/11 19:05:52 wazuh-db[16456] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.034 ms. 2022-02-11 15:06:09,965 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:235 at main(): INFO: (6004): No diff for file: '/etc/ssl/private.key' 2022-02-11 15:06:09,966 - wazuh_testing - DEBUG - 2022/02/11 19:05:52 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602747,"version":2,"begin":"/testdir1/testdir1.txt","end":"/testdir1/testdir1.txt","tail":"/usr/bin/2to3-2.7","checksum":"74df98e9c3d2e45724b1abb5c124eeef9879e3e9"} 2022-02-11 15:06:09,966 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:245 at main(): INFO: (6016): Directory set for real time monitoring: '/testdir2'. 2022-02-11 15:06:09,966 - wazuh_testing - DEBUG - 2022/02/11 19:05:52 wazuh-db[16456] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.020 ms. 2022-02-11 15:06:09,966 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] syscheck_audit.c:243 at audit_init(): WARNING: (6924): Who-data engine cannot start because Auditd is not running. 2022-02-11 15:06:09,966 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:264 at main(): WARNING: (6913): Who-data engine could not start. Switching who-data to real-time. 2022-02-11 15:06:09,966 - wazuh_testing - DEBUG - 2022/02/11 19:05:52 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602747,"version":2,"begin":"/usr/bin/2to3-2.7","end":"/usr/bin/2to3-2.7","checksum":"f621f8dd560e58c5f017dfd42d98bb3a72466d1d"} 2022-02-11 15:06:09,966 - wazuh_testing - DEBUG - 2022/02/11 19:05:52 wazuh-db[16456] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.021 ms. 2022-02-11 15:06:09,966 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] run_check.c:194 at start_daemon(): DEBUG: (6320): Setting process priority to: '10' 2022-02-11 15:06:09,966 - wazuh_testing - DEBUG - 2022/02/11 19:05:52 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file save2 {"path":"/testdir1/testdir1.txt","timestamp":1644602747,"version":2,"attributes":{"type":"file","size":0,"perm":"rw-r--r--","uid":"0","gid":"0","user_name":"root","group_name":"root","inode":17179747,"mtime":1644602744,"hash_md5":"d41d8cd98f00b204e9800998ecf8427e","hash_sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","hash_sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","checksum":"e3fb1d537c20d8bb657d913a5e2f4d9c1fa89db8"}} 2022-02-11 15:06:09,966 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:06:09,966 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] run_check.c:229 at start_daemon(): INFO: (6000): Starting daemon... 2022-02-11 15:06:09,966 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] run_check.c:232 at start_daemon(): INFO: (6010): File integrity monitoring scan frequency: 20 seconds 2022-02-11 15:06:09,967 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 15:06:09,967 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644602747}} 2022-02-11 15:06:09,967 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-manager and message: .Agent 001 query: (.+) save2 2022-02-11 15:06:09,967 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 15:06:09,967 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-11 15:06:09,967 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-11 15:06:09,967 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-11 15:06:09,967 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-11 15:06:09,968 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 15:06:09,968 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 15:06:09,968 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644602747}} 2022-02-11 15:06:09,968 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.325 sec (0.321 clock sec) 2022-02-11 15:06:09,968 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1621, path count: 1627 2022-02-11 15:06:09,968 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:06:09,969 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:06:09,969 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:06:09,969 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] run_check.c:387 at fim_run_realtime(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-11 15:06:09,970 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] run_check.c:543 at log_realtime_status(): INFO: (6012): Real-time file integrity monitoring started. 2022-02-11 15:06:09,970 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] run_check.c:568 at symlink_checker_thread(): DEBUG: (6033): Starting symbolic link updater. Interval '600'. 2022-02-11 15:06:09,970 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. 2022-02-11 15:06:09,970 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] run_check.c:82 at fim_send_sync_msg(): DEBUG: (6317): Sending integrity control message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1644602747,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"7519e3e1108e6887a3132943199870a40d2a3b4e"}} 2022-02-11 15:06:09,971 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-agent1 and message: .Sending integrity control message: (.+)$ 2022-02-11 15:06:10,953 - wazuh_testing - DEBUG - Cleaning temporal files... 2022-02-11 15:06:10,954 - wazuh_testing - DEBUG - Checking results... 2022-02-11 15:06:10,955 - wazuh_testing - DEBUG - Received from wazuh-manager the expected message: fim_file 2022-02-11 15:06:10,956 - wazuh_testing - DEBUG - Received from wazuh-agent1 the expected message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1644602747,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"7519e3e1108e6887a3132943199870a40d2a3b4e"}} 2022-02-11 15:06:37,268 - wazuh_testing - DEBUG - Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-11 15:06:37,269 - wazuh_testing - DEBUG - Starting file composer for wazuh-manager and path: /var/ossec/logs/ossec.log. Composite file in /home/camila/Escritorio/repo/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-manager_ossec.log.tmp 2022-02-11 15:06:37,270 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-11 15:06:37,272 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-manager and message: .Initializing FIM Integrity Synchronization check. (.+)$ 2022-02-11 15:06:38,774 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-modulesd:syscollector: INFO: Stop received for Syscollector. 2022-02-11 15:06:38,774 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 12 disconnected. 2022-02-11 15:06:38,774 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-monitord: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:06:38,774 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-logcollector: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:06:38,775 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-remoted: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:06:38,775 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 28 disconnected. 2022-02-11 15:06:38,775 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 18 disconnected. 2022-02-11 15:06:38,775 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 21 disconnected. 2022-02-11 15:06:38,775 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 16 disconnected. 2022-02-11 15:06:38,775 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-syscheckd[16502] sig_op.c:49 at HandleSIG(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:06:38,776 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-analysisd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:06:38,776 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 38 disconnected. 2022-02-11 15:06:38,776 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 37 disconnected. 2022-02-11 15:06:38,776 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 34 disconnected. 2022-02-11 15:06:38,777 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 35 disconnected. 2022-02-11 15:06:38,777 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 33 disconnected. 2022-02-11 15:06:38,777 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 31 disconnected. 2022-02-11 15:06:38,777 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 27 disconnected. 2022-02-11 15:06:38,777 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 32 disconnected. 2022-02-11 15:06:38,778 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 25 disconnected. 2022-02-11 15:06:38,778 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 30 disconnected. 2022-02-11 15:06:38,778 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 24 disconnected. 2022-02-11 15:06:38,779 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 22 disconnected. 2022-02-11 15:06:38,779 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 11 disconnected. 2022-02-11 15:06:38,779 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 10 disconnected. 2022-02-11 15:06:38,780 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 13 disconnected. 2022-02-11 15:06:38,780 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 26 disconnected. 2022-02-11 15:06:38,780 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 23 disconnected. 2022-02-11 15:06:38,781 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 20 disconnected. 2022-02-11 15:06:38,781 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 29 disconnected. 2022-02-11 15:06:38,781 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 19 disconnected. 2022-02-11 15:06:38,781 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 6 disconnected. 2022-02-11 15:06:38,782 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-execd: INFO: (1314): Shutdown received. Deleting responses. 2022-02-11 15:06:38,782 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-execd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:06:38,782 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:468 at handler(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:06:38,782 - wazuh_testing - DEBUG - 2022/02/11 19:06:17 wazuh-db[16456] wdb.c:872 at wdb_close_all(): DEBUG: Closing all databases... 2022-02-11 15:06:38,783 - wazuh_testing - DEBUG - 2022/02/11 19:06:17 wazuh-db[16456] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent 001 2022-02-11 15:06:38,783 - wazuh_testing - DEBUG - 2022/02/11 19:06:17 wazuh-db[16456] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent 000 2022-02-11 15:06:38,783 - wazuh_testing - DEBUG - 2022/02/11 19:06:17 wazuh-db[16456] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent mitre 2022-02-11 15:06:38,784 - wazuh_testing - DEBUG - 2022/02/11 19:06:17 wazuh-db[16456] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent global 2022-02-11 15:06:38,784 - wazuh_testing - DEBUG - 2022/02/11 19:06:17 wazuh-db[16456] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent tasks 2022-02-11 15:06:38,784 - wazuh_testing - DEBUG - 2022/02/11 19:06:17 wazuh-db[16456] main.c:231 at main(): DEBUG: Template file removed again: queue/db/.template.db 2022-02-11 15:06:38,784 - wazuh_testing - DEBUG - 2022/02/11 19:06:17 wazuh-authd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:06:38,785 - wazuh_testing - DEBUG - 2022/02/11 19:06:18 wazuh-authd: INFO: Exiting... 2022-02-11 15:06:38,785 - wazuh_testing - DEBUG - 2022/02/11 19:06:23 wazuh-db[17375] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 15:06:38,785 - wazuh_testing - DEBUG - 2022/02/11 19:06:23 wazuh-db[17375] main.c:101 at main(): DEBUG: Wazuh home directory: /var/ossec 2022-02-11 15:06:38,785 - wazuh_testing - DEBUG - 2022/02/11 19:06:23 wazuh-syscheckd[17379] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 15:06:38,786 - wazuh_testing - DEBUG - 2022/02/11 19:06:23 wazuh-syscheckd[17379] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 15:06:38,786 - wazuh_testing - DEBUG - 2022/02/11 19:06:23 wazuh-syscheckd[17379] syscheck-config.c:122 at organize_syscheck_dirs(): DEBUG: No directory entries to organize in syscheck configuration. 2022-02-11 15:06:38,786 - wazuh_testing - DEBUG - 2022/02/11 19:06:25 wazuh-csyslogd: INFO: Remote syslog server not configured. Clean exit. 2022-02-11 15:06:38,787 - wazuh_testing - DEBUG - 2022/02/11 19:06:25 wazuh-dbd: INFO: Database not configured. Clean exit. 2022-02-11 15:06:38,787 - wazuh_testing - DEBUG - 2022/02/11 19:06:25 wazuh-integratord: INFO: Remote integrations not configured. Clean exit. 2022-02-11 15:06:38,787 - wazuh_testing - DEBUG - 2022/02/11 19:06:25 wazuh-agentlessd: INFO: Not configured. Exiting. 2022-02-11 15:06:38,787 - wazuh_testing - DEBUG - 2022/02/11 19:06:25 wazuh-authd: INFO: Started (pid: 17445). 2022-02-11 15:06:38,788 - wazuh_testing - DEBUG - 2022/02/11 19:06:25 wazuh-authd: INFO: Accepting connections on port 1515. No password required. 2022-02-11 15:06:38,788 - wazuh_testing - DEBUG - 2022/02/11 19:06:25 wazuh-authd: INFO: Setting network timeout to 1.000000 sec. 2022-02-11 15:06:38,788 - wazuh_testing - DEBUG - 2022/02/11 19:06:26 wazuh-db[17459] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 15:06:38,788 - wazuh_testing - DEBUG - 2022/02/11 19:06:26 wazuh-db[17459] main.c:101 at main(): DEBUG: Wazuh home directory: /var/ossec 2022-02-11 15:06:38,788 - wazuh_testing - DEBUG - 2022/02/11 19:06:26 wazuh-db[17459] main.c:122 at main(): DEBUG: Template file removed: /var/ossec/queue/db/.template.db 2022-02-11 15:06:38,789 - wazuh_testing - DEBUG - 2022/02/11 19:06:26 wazuh-db[17459] main.c:178 at main(): INFO: Started (pid: 17461). 2022-02-11 15:06:38,789 - wazuh_testing - DEBUG - 2022/02/11 19:06:27 wazuh-execd: INFO: (1350): Active response disabled. 2022-02-11 15:06:38,789 - wazuh_testing - DEBUG - 2022/02/11 19:06:27 wazuh-execd: INFO: Started (pid: 17484). 2022-02-11 15:06:38,789 - wazuh_testing - DEBUG - 2022/02/11 19:06:28 wazuh-analysisd: INFO: Total rules enabled: '3882' 2022-02-11 15:06:38,789 - wazuh_testing - DEBUG - 2022/02/11 19:06:28 wazuh-analysisd: INFO: Started (pid: 17498). 2022-02-11 15:06:38,790 - wazuh_testing - DEBUG - 2022/02/11 19:06:28 wazuh-db[17459] main.c:290 at run_dealer(): DEBUG: New client connected (6). 2022-02-11 15:06:38,790 - wazuh_testing - DEBUG - 2022/02/11 19:06:28 wazuh-analysisd: INFO: (7200): Logtest started 2022-02-11 15:06:38,790 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 15:06:38,790 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 15:06:38,790 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] syscheck-config.c:122 at organize_syscheck_dirs(): DEBUG: No directory entries to organize in syscheck configuration. 2022-02-11 15:06:38,791 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] main.c:118 at main(): INFO: (6678): No directory provided for syscheck to monitor. 2022-02-11 15:06:38,791 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] main.c:136 at main(): INFO: (6001): File integrity monitoring disabled. 2022-02-11 15:06:38,791 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 rootcheck[17593] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled. 2022-02-11 15:06:38,791 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:06:38,791 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] syscom.c:123 at syscom_main(): DEBUG: (6284): Local requests thread ready. 2022-02-11 15:06:38,791 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] mq_op.c:47 at StartMQ(): DEBUG: Connected succesfully to 'queue/sockets/queue' after 0 attempts 2022-02-11 15:06:38,792 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] mq_op.c:48 at StartMQ(): DEBUG: (unix_domain) Maximum send buffer set to: '212992'. 2022-02-11 15:06:38,792 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] main.c:185 at main(): INFO: Started (pid: 17595). 2022-02-11 15:06:38,792 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] main.c:215 at main(): DEBUG: (6357): Maximum disk quota size limit configured to '1048576 KB'. 2022-02-11 15:06:38,792 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] run_check.c:194 at start_daemon(): DEBUG: (6320): Setting process priority to: '10' 2022-02-11 15:06:38,792 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:06:38,793 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] run_check.c:229 at start_daemon(): INFO: (6000): Starting daemon... 2022-02-11 15:06:38,793 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] run_check.c:232 at start_daemon(): INFO: (6010): File integrity monitoring scan frequency: 43200 seconds 2022-02-11 15:06:38,793 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 15:06:38,793 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644602789}} 2022-02-11 15:06:38,793 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 15:06:38,793 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 15:06:38,794 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 15:06:38,794 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644602789}} 2022-02-11 15:06:38,794 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-db[17459] main.c:290 at run_dealer(): DEBUG: New client connected (10). 2022-02-11 15:06:38,794 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.000 sec (0.000 clock sec) 2022-02-11 15:06:38,795 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-db[17459] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 000 query: syscheck scan_info_update start_scan 1644602789 2022-02-11 15:06:38,795 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 0, path count: 0 2022-02-11 15:06:38,795 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-db[17459] main.c:290 at run_dealer(): DEBUG: New client connected (11). 2022-02-11 15:06:38,795 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-db[17459] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 000 query: syscheck scan_info_update end_scan 1644602789 2022-02-11 15:06:38,795 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:06:38,796 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:06:38,796 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:06:38,796 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. 2022-02-11 15:06:38,797 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-manager and message: .Initializing FIM Integrity Synchronization check. (.+)$ 2022-02-11 15:06:39,774 - wazuh_testing - DEBUG - Cleaning temporal files... 2022-02-11 15:06:39,775 - wazuh_testing - DEBUG - Checking results... 2022-02-11 15:06:39,775 - wazuh_testing - DEBUG - Received from wazuh-manager the expected message: Sync interval is 300 seconds. -------------------------------Captured log call-------------------------------- DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:1005 Cleaning temporal files... DEBUG wazuh_testing:monitoring.py:994 Checking results... DEBUG wazuh_testing:monitoring.py:1000 Received from wazuh-manager the expected message: fim_file DEBUG wazuh_testing:monitoring.py:1000 Received from wazuh-agent1 the expected message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1644602747,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"7519e3e1108e6887a3132943199870a40d2a3b4e"}} DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:1005 Cleaning temporal files... DEBUG wazuh_testing:monitoring.py:994 Checking results... DEBUG wazuh_testing:monitoring.py:1000 Received from wazuh-manager the expected message: Sync interval is 300 seconds.
Passed	test_synchronization.py::test_synchronization[testdir1-modify-wazuh-agent1]	34.25
------------------------------Captured stderr call------------------------------ 2022-02-11 15:06:53,233 - wazuh_testing - DEBUG - Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-11 15:06:53,234 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-11 15:06:53,234 - wazuh_testing - DEBUG - Starting file composer for wazuh-agent1 and path: /var/ossec/logs/ossec.log. Composite file in /home/camila/Escritorio/repo/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-agent1_ossec.log.tmp 2022-02-11 15:06:53,236 - wazuh_testing - DEBUG - Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-11 15:06:53,236 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-agent1 and message: .Sending integrity control message: (.+)$ 2022-02-11 15:06:53,237 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-11 15:06:53,238 - wazuh_testing - DEBUG - Starting file composer for wazuh-manager and path: /var/ossec/logs/ossec.log. Composite file in /home/camila/Escritorio/repo/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-manager_ossec.log.tmp 2022-02-11 15:06:53,239 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-manager and message: .Agent 001 query: (.+) save2 2022-02-11 15:06:54,738 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-agentd: ERROR: (1137): Lost connection with manager. Setting lock. 2022-02-11 15:06:54,738 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-agentd: INFO: Closing connection to server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 15:06:54,738 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 15:06:54,738 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-agentd: ERROR: (1216): Unable to connect to '172.17.0.2:1514/tcp': 'Connection refused'. 2022-02-11 15:06:54,739 - wazuh_testing - DEBUG - 2022/02/11 19:06:24 wazuh-syscheckd[22058] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 15:06:54,739 - wazuh_testing - DEBUG - 2022/02/11 19:06:24 wazuh-syscheckd[22058] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644602784}} 2022-02-11 15:06:54,739 - wazuh_testing - DEBUG - 2022/02/11 19:06:24 wazuh-syscheckd[22058] wait_op.c:101 at os_wait(): WARNING: Process locked due to agent is offline. Waiting for connection... 2022-02-11 15:06:54,739 - wazuh_testing - DEBUG - 2022/02/11 19:06:26 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 15:06:54,739 - wazuh_testing - DEBUG - 2022/02/11 19:06:26 wazuh-agentd: ERROR: (1216): Unable to connect to '172.17.0.2:1514/tcp': 'Connection refused'. 2022-02-11 15:06:54,740 - wazuh_testing - DEBUG - 2022/02/11 19:06:36 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 15:06:54,740 - wazuh_testing - DEBUG - 2022/02/11 19:06:36 wazuh-agentd: INFO: (4102): Connected to the server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 15:06:54,740 - wazuh_testing - DEBUG - 2022/02/11 19:06:36 wazuh-agentd: INFO: Server responded. Releasing lock. 2022-02-11 15:06:54,740 - wazuh_testing - DEBUG - 2022/02/11 19:06:39 wazuh-syscheckd[22058] wait_op.c:116 at os_wait(): INFO: Agent is now online. Process unlocked, continuing... 2022-02-11 15:06:54,740 - wazuh_testing - DEBUG - 2022/02/11 19:06:39 wazuh-syscheckd[22058] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 15:06:54,741 - wazuh_testing - DEBUG - 2022/02/11 19:06:39 wazuh-syscheckd[22058] fim_db.c:436 at fim_db_check_transaction(): DEBUG: Database transaction completed. 2022-02-11 15:06:54,741 - wazuh_testing - DEBUG - 2022/02/11 19:06:39 wazuh-syscheckd[22058] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-11 15:06:54,741 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-modulesd:syscollector: INFO: Stop received for Syscollector. 2022-02-11 15:06:54,741 - wazuh_testing - DEBUG - 2022/02/11 19:06:39 wazuh-syscheckd[22058] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-11 15:06:54,741 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 12 disconnected. 2022-02-11 15:06:54,742 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-monitord: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:06:54,742 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-logcollector: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:06:54,742 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-remoted: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:06:54,742 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 28 disconnected. 2022-02-11 15:06:54,742 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 18 disconnected. 2022-02-11 15:06:54,742 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 21 disconnected. 2022-02-11 15:06:54,743 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 16 disconnected. 2022-02-11 15:06:54,743 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-syscheckd[16502] sig_op.c:49 at HandleSIG(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:06:54,743 - wazuh_testing - DEBUG - 2022/02/11 19:06:39 wazuh-syscheckd[22058] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"event","data":{"path":"/testdir1/testdir1.txt","version":2,"mode":"scheduled","type":"modified","timestamp":1644602799,"attributes":{"type":"file","size":0,"perm":"rw-r--r--","uid":"0","gid":"0","user_name":"root","group_name":"root","inode":17179747,"mtime":1644602779,"hash_md5":"d41d8cd98f00b204e9800998ecf8427e","hash_sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","hash_sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","checksum":"c6a35a987856464956920b5b3f8e4240dee330f4"},"changed_attributes":["mtime"],"old_attributes":{"type":"file","size":0,"perm":"rw-r--r--","uid":"0","gid":"0","user_name":"root","group_name":"root","inode":17179747,"mtime":1644602758,"hash_md5":"d41d8cd98f00b204e9800998ecf8427e","hash_sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","hash_sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","checksum":"df8253d9e62c868b158443ea0307fb89e3399e3b"}}} 2022-02-11 15:06:54,743 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-analysisd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:06:54,743 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 38 disconnected. 2022-02-11 15:06:54,743 - wazuh_testing - DEBUG - 2022/02/11 19:06:39 wazuh-syscheckd[22058] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-11 15:06:54,743 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 37 disconnected. 2022-02-11 15:06:54,744 - wazuh_testing - DEBUG - 2022/02/11 19:06:39 wazuh-syscheckd[22058] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-11 15:06:54,744 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 34 disconnected. 2022-02-11 15:06:54,744 - wazuh_testing - DEBUG - 2022/02/11 19:06:39 wazuh-syscheckd[22058] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 15:06:54,744 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 35 disconnected. 2022-02-11 15:06:54,744 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 33 disconnected. 2022-02-11 15:06:54,744 - wazuh_testing - DEBUG - 2022/02/11 19:06:39 wazuh-syscheckd[22058] create_db.c:220 at fim_scan(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-11 15:06:54,744 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 31 disconnected. 2022-02-11 15:06:54,744 - wazuh_testing - DEBUG - 2022/02/11 19:06:39 wazuh-syscheckd[22058] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 15:06:54,745 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 27 disconnected. 2022-02-11 15:06:54,745 - wazuh_testing - DEBUG - 2022/02/11 19:06:39 wazuh-syscheckd[22058] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644602799}} 2022-02-11 15:06:54,745 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 32 disconnected. 2022-02-11 15:06:54,745 - wazuh_testing - DEBUG - 2022/02/11 19:06:39 wazuh-syscheckd[22058] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 15.348 sec (0.344 clock sec) 2022-02-11 15:06:54,745 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 25 disconnected. 2022-02-11 15:06:54,745 - wazuh_testing - DEBUG - 2022/02/11 19:06:39 wazuh-syscheckd[22058] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1621, path count: 1627 2022-02-11 15:06:54,746 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 30 disconnected. 2022-02-11 15:06:54,746 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 24 disconnected. 2022-02-11 15:06:54,746 - wazuh_testing - DEBUG - 2022/02/11 19:06:45 wazuh-logcollector: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:06:54,746 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 22 disconnected. 2022-02-11 15:06:54,746 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 11 disconnected. 2022-02-11 15:06:54,746 - wazuh_testing - DEBUG - 2022/02/11 19:06:45 wazuh-syscheckd[22058] sig_op.c:49 at HandleSIG(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:06:54,747 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 10 disconnected. 2022-02-11 15:06:54,747 - wazuh_testing - DEBUG - 2022/02/11 19:06:45 wazuh-agentd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:06:54,747 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 13 disconnected. 2022-02-11 15:06:54,747 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 26 disconnected. 2022-02-11 15:06:54,747 - wazuh_testing - DEBUG - 2022/02/11 19:06:45 wazuh-execd: INFO: (1314): Shutdown received. Deleting responses. 2022-02-11 15:06:54,747 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 23 disconnected. 2022-02-11 15:06:54,748 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 20 disconnected. 2022-02-11 15:06:54,748 - wazuh_testing - DEBUG - 2022/02/11 19:06:45 wazuh-execd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:06:54,748 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 29 disconnected. 2022-02-11 15:06:54,748 - wazuh_testing - DEBUG - 2022/02/11 19:06:45 wazuh-syscheckd[22685] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 15:06:54,748 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 19 disconnected. 2022-02-11 15:06:54,748 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 6 disconnected. 2022-02-11 15:06:54,749 - wazuh_testing - DEBUG - 2022/02/11 19:06:45 wazuh-syscheckd[22685] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 15:06:54,749 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-execd: INFO: (1314): Shutdown received. Deleting responses. 2022-02-11 15:06:54,749 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-execd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:06:54,749 - wazuh_testing - DEBUG - 2022/02/11 19:06:45 wazuh-syscheckd[22685] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-11 15:06:54,749 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:468 at handler(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:06:54,749 - wazuh_testing - DEBUG - 2022/02/11 19:06:45 wazuh-syscheckd[22685] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-11 15:06:54,749 - wazuh_testing - DEBUG - 2022/02/11 19:06:17 wazuh-db[16456] wdb.c:872 at wdb_close_all(): DEBUG: Closing all databases... 2022-02-11 15:06:54,750 - wazuh_testing - DEBUG - 2022/02/11 19:06:45 wazuh-syscheckd[22685] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-11 15:06:54,750 - wazuh_testing - DEBUG - 2022/02/11 19:06:17 wazuh-db[16456] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent 001 2022-02-11 15:06:54,750 - wazuh_testing - DEBUG - 2022/02/11 19:06:45 wazuh-syscheckd[22685] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-11 15:06:54,750 - wazuh_testing - DEBUG - 2022/02/11 19:06:17 wazuh-db[16456] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent 000 2022-02-11 15:06:54,750 - wazuh_testing - DEBUG - 2022/02/11 19:06:45 wazuh-syscheckd[22685] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-11 15:06:54,750 - wazuh_testing - DEBUG - 2022/02/11 19:06:17 wazuh-db[16456] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent mitre 2022-02-11 15:06:54,750 - wazuh_testing - DEBUG - 2022/02/11 19:06:45 wazuh-syscheckd[22685] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$\|.swp$ 2022-02-11 15:06:54,750 - wazuh_testing - DEBUG - 2022/02/11 19:06:17 wazuh-db[16456] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent global 2022-02-11 15:06:54,751 - wazuh_testing - DEBUG - 2022/02/11 19:06:45 wazuh-syscheckd[22685] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$\|.swp$ OK? 2022-02-11 15:06:54,751 - wazuh_testing - DEBUG - 2022/02/11 19:06:17 wazuh-db[16456] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent tasks 2022-02-11 15:06:54,751 - wazuh_testing - DEBUG - 2022/02/11 19:06:17 wazuh-db[16456] main.c:231 at main(): DEBUG: Template file removed again: queue/db/.template.db 2022-02-11 15:06:54,751 - wazuh_testing - DEBUG - 2022/02/11 19:06:45 wazuh-syscheckd[22685] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-11 15:06:54,751 - wazuh_testing - DEBUG - 2022/02/11 19:06:17 wazuh-authd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:06:54,751 - wazuh_testing - DEBUG - 2022/02/11 19:06:45 wazuh-syscheckd[22685] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-11 15:06:54,751 - wazuh_testing - DEBUG - 2022/02/11 19:06:18 wazuh-authd: INFO: Exiting... 2022-02-11 15:06:54,751 - wazuh_testing - DEBUG - 2022/02/11 19:06:45 wazuh-syscheckd[22685] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 15:06:54,751 - wazuh_testing - DEBUG - 2022/02/11 19:06:23 wazuh-db[17375] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 15:06:54,752 - wazuh_testing - DEBUG - 2022/02/11 19:06:45 wazuh-syscheckd[22685] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 15:06:54,752 - wazuh_testing - DEBUG - 2022/02/11 19:06:23 wazuh-db[17375] main.c:101 at main(): DEBUG: Wazuh home directory: /var/ossec 2022-02-11 15:06:54,752 - wazuh_testing - DEBUG - 2022/02/11 19:06:45 wazuh-syscheckd[22685] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 15:06:54,752 - wazuh_testing - DEBUG - 2022/02/11 19:06:23 wazuh-syscheckd[17379] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 15:06:54,752 - wazuh_testing - DEBUG - 2022/02/11 19:06:45 wazuh-syscheckd[22685] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 15:06:54,752 - wazuh_testing - DEBUG - 2022/02/11 19:06:23 wazuh-syscheckd[17379] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 15:06:54,752 - wazuh_testing - DEBUG - 2022/02/11 19:06:45 wazuh-syscheckd[22685] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 15:06:54,752 - wazuh_testing - DEBUG - 2022/02/11 19:06:45 wazuh-syscheckd[22685] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 15:06:54,752 - wazuh_testing - DEBUG - 2022/02/11 19:06:23 wazuh-syscheckd[17379] syscheck-config.c:122 at organize_syscheck_dirs(): DEBUG: No directory entries to organize in syscheck configuration. 2022-02-11 15:06:54,753 - wazuh_testing - DEBUG - 2022/02/11 19:06:45 wazuh-execd: INFO: Started (pid: 22698). 2022-02-11 15:06:54,753 - wazuh_testing - DEBUG - 2022/02/11 19:06:25 wazuh-csyslogd: INFO: Remote syslog server not configured. Clean exit. 2022-02-11 15:06:54,753 - wazuh_testing - DEBUG - 2022/02/11 19:06:47 wazuh-agentd: INFO: (1410): Reading authentication keys file. 2022-02-11 15:06:54,753 - wazuh_testing - DEBUG - 2022/02/11 19:06:25 wazuh-dbd: INFO: Database not configured. Clean exit. 2022-02-11 15:06:54,753 - wazuh_testing - DEBUG - 2022/02/11 19:06:47 wazuh-agentd: INFO: Using notify time: 10 and max time to reconnect: 60 2022-02-11 15:06:54,753 - wazuh_testing - DEBUG - 2022/02/11 19:06:25 wazuh-integratord: INFO: Remote integrations not configured. Clean exit. 2022-02-11 15:06:54,753 - wazuh_testing - DEBUG - 2022/02/11 19:06:47 wazuh-agentd: INFO: Version detected -> Linux \|wazuh-agent1 \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64 [Debian GNU/Linux\|debian: 10 (buster)] - Wazuh v4.2.5 2022-02-11 15:06:54,753 - wazuh_testing - DEBUG - 2022/02/11 19:06:25 wazuh-agentlessd: INFO: Not configured. Exiting. 2022-02-11 15:06:54,753 - wazuh_testing - DEBUG - 2022/02/11 19:06:47 wazuh-agentd: INFO: Started (pid: 22709). 2022-02-11 15:06:54,753 - wazuh_testing - DEBUG - 2022/02/11 19:06:25 wazuh-authd: INFO: Started (pid: 17445). 2022-02-11 15:06:54,754 - wazuh_testing - DEBUG - 2022/02/11 19:06:47 wazuh-agentd: INFO: Server IP Address: wazuh-manager/172.17.0.2 2022-02-11 15:06:54,754 - wazuh_testing - DEBUG - 2022/02/11 19:06:25 wazuh-authd: INFO: Accepting connections on port 1515. No password required. 2022-02-11 15:06:54,754 - wazuh_testing - DEBUG - 2022/02/11 19:06:47 wazuh-agentd: INFO: Using AES as encryption method. 2022-02-11 15:06:54,754 - wazuh_testing - DEBUG - 2022/02/11 19:06:25 wazuh-authd: INFO: Setting network timeout to 1.000000 sec. 2022-02-11 15:06:54,754 - wazuh_testing - DEBUG - 2022/02/11 19:06:47 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 15:06:54,754 - wazuh_testing - DEBUG - 2022/02/11 19:06:26 wazuh-db[17459] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 15:06:54,754 - wazuh_testing - DEBUG - 2022/02/11 19:06:26 wazuh-db[17459] main.c:101 at main(): DEBUG: Wazuh home directory: /var/ossec 2022-02-11 15:06:54,754 - wazuh_testing - DEBUG - 2022/02/11 19:06:47 wazuh-agentd: INFO: (4102): Connected to the server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 15:06:54,754 - wazuh_testing - DEBUG - 2022/02/11 19:06:26 wazuh-db[17459] main.c:122 at main(): DEBUG: Template file removed: /var/ossec/queue/db/.template.db 2022-02-11 15:06:54,754 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 15:06:54,755 - wazuh_testing - DEBUG - 2022/02/11 19:06:26 wazuh-db[17459] main.c:178 at main(): INFO: Started (pid: 17461). 2022-02-11 15:06:54,755 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 15:06:54,755 - wazuh_testing - DEBUG - 2022/02/11 19:06:27 wazuh-execd: INFO: (1350): Active response disabled. 2022-02-11 15:06:54,755 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-11 15:06:54,755 - wazuh_testing - DEBUG - 2022/02/11 19:06:27 wazuh-execd: INFO: Started (pid: 17484). 2022-02-11 15:06:54,755 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-11 15:06:54,755 - wazuh_testing - DEBUG - 2022/02/11 19:06:28 wazuh-analysisd: INFO: Total rules enabled: '3882' 2022-02-11 15:06:54,755 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-11 15:06:54,755 - wazuh_testing - DEBUG - 2022/02/11 19:06:28 wazuh-analysisd: INFO: Started (pid: 17498). 2022-02-11 15:06:54,755 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-11 15:06:54,755 - wazuh_testing - DEBUG - 2022/02/11 19:06:28 wazuh-db[17459] main.c:290 at run_dealer(): DEBUG: New client connected (6). 2022-02-11 15:06:54,755 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-11 15:06:54,756 - wazuh_testing - DEBUG - 2022/02/11 19:06:28 wazuh-analysisd: INFO: (7200): Logtest started 2022-02-11 15:06:54,756 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$\|.swp$ 2022-02-11 15:06:54,756 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 15:06:54,756 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$\|.swp$ OK? 2022-02-11 15:06:54,756 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 15:06:54,756 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-11 15:06:54,756 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] syscheck-config.c:122 at organize_syscheck_dirs(): DEBUG: No directory entries to organize in syscheck configuration. 2022-02-11 15:06:54,756 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-11 15:06:54,756 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] main.c:118 at main(): INFO: (6678): No directory provided for syscheck to monitor. 2022-02-11 15:06:54,756 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 15:06:54,756 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] main.c:136 at main(): INFO: (6001): File integrity monitoring disabled. 2022-02-11 15:06:54,756 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 15:06:54,757 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 rootcheck[17593] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled. 2022-02-11 15:06:54,757 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 15:06:54,757 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:06:54,757 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 15:06:54,757 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] syscom.c:123 at syscom_main(): DEBUG: (6284): Local requests thread ready. 2022-02-11 15:06:54,757 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 15:06:54,757 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] mq_op.c:47 at StartMQ(): DEBUG: Connected succesfully to 'queue/sockets/queue' after 0 attempts 2022-02-11 15:06:54,757 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 15:06:54,757 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] mq_op.c:48 at StartMQ(): DEBUG: (unix_domain) Maximum send buffer set to: '212992'. 2022-02-11 15:06:54,757 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 rootcheck[22721] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled. 2022-02-11 15:06:54,757 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] main.c:185 at main(): INFO: Started (pid: 17595). 2022-02-11 15:06:54,757 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:06:54,758 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] main.c:215 at main(): DEBUG: (6357): Maximum disk quota size limit configured to '1048576 KB'. 2022-02-11 15:06:54,758 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] syscom.c:123 at syscom_main(): DEBUG: (6284): Local requests thread ready. 2022-02-11 15:06:54,758 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] run_check.c:194 at start_daemon(): DEBUG: (6320): Setting process priority to: '10' 2022-02-11 15:06:54,758 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] mq_op.c:47 at StartMQ(): DEBUG: Connected succesfully to 'queue/sockets/queue' after 0 attempts 2022-02-11 15:06:54,758 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:06:54,758 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] mq_op.c:48 at StartMQ(): DEBUG: (unix_domain) Maximum send buffer set to: '212992'. 2022-02-11 15:06:54,758 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] main.c:185 at main(): INFO: Started (pid: 22723). 2022-02-11 15:06:54,758 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] run_check.c:229 at start_daemon(): INFO: (6000): Starting daemon... 2022-02-11 15:06:54,758 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] run_check.c:232 at start_daemon(): INFO: (6010): File integrity monitoring scan frequency: 43200 seconds 2022-02-11 15:06:54,758 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] main.c:193 at main(): INFO: (6003): Monitoring path: '/bin', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 15:06:54,758 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 15:06:54,758 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] main.c:193 at main(): INFO: (6003): Monitoring path: '/boot', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 15:06:54,758 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] main.c:193 at main(): INFO: (6003): Monitoring path: '/etc', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 15:06:54,759 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] main.c:193 at main(): INFO: (6003): Monitoring path: '/sbin', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 15:06:54,759 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644602789}} 2022-02-11 15:06:54,759 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir1', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 15:06:54,759 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 15:06:54,759 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir2', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| realtime'. 2022-02-11 15:06:54,759 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 15:06:54,759 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir3', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| whodata'. 2022-02-11 15:06:54,759 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 15:06:54,759 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/bin', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 15:06:54,759 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644602789}} 2022-02-11 15:06:54,759 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-db[17459] main.c:290 at run_dealer(): DEBUG: New client connected (10). 2022-02-11 15:06:54,759 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/sbin', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 15:06:54,759 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.000 sec (0.000 clock sec) 2022-02-11 15:06:54,759 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] main.c:215 at main(): DEBUG: (6357): Maximum disk quota size limit configured to '1048576 KB'. 2022-02-11 15:06:54,760 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-db[17459] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 000 query: syscheck scan_info_update start_scan 1644602789 2022-02-11 15:06:54,760 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mtab' 2022-02-11 15:06:54,760 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 0, path count: 0 2022-02-11 15:06:54,760 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-db[17459] main.c:290 at run_dealer(): DEBUG: New client connected (11). 2022-02-11 15:06:54,760 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/hosts.deny' 2022-02-11 15:06:54,760 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-db[17459] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 000 query: syscheck scan_info_update end_scan 1644602789 2022-02-11 15:06:54,760 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mail/statistics' 2022-02-11 15:06:54,760 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:06:54,760 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random-seed' 2022-02-11 15:06:54,760 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:06:54,760 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random.seed' 2022-02-11 15:06:54,761 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:06:54,761 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/adjtime' 2022-02-11 15:06:54,761 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. 2022-02-11 15:06:54,761 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/httpd/logs' 2022-02-11 15:06:54,761 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] run_check.c:568 at symlink_checker_thread(): DEBUG: (6033): Starting symbolic link updater. Interval '600'. 2022-02-11 15:06:54,761 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] run_check.c:82 at fim_send_sync_msg(): DEBUG: (6317): Sending integrity control message: {"component":"fim_file","type":"integrity_clear","data":{"id":1644602789,"version":2}} 2022-02-11 15:06:54,761 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/utmpx' 2022-02-11 15:06:54,761 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] fim_sync.c:70 at fim_run_integrity(): DEBUG: Finished calculating FIM integrity. Time: 0.000 seconds. 2022-02-11 15:06:54,762 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/wtmpx' 2022-02-11 15:06:54,762 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-db[17459] main.c:290 at run_dealer(): DEBUG: New client connected (13). 2022-02-11 15:06:54,762 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-db[17459] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 000 query: fim_file integrity_clear {"id":1644602789,"version":2} 2022-02-11 15:06:54,762 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/cups/certs' 2022-02-11 15:06:54,762 - wazuh_testing - DEBUG - 2022/02/11 19:06:30 wazuh-remoted: INFO: Started (pid: 17614). Listening on port 1514/TCP (secure). 2022-02-11 15:06:54,762 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/dumpdates' 2022-02-11 15:06:54,762 - wazuh_testing - DEBUG - 2022/02/11 19:06:30 wazuh-db[17459] main.c:290 at run_dealer(): DEBUG: New client connected (12). 2022-02-11 15:06:54,762 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/svc/volatile' 2022-02-11 15:06:54,762 - wazuh_testing - DEBUG - 2022/02/11 19:06:30 wazuh-db[17459] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: reset-agents-connection synced 2022-02-11 15:06:54,762 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/security' 2022-02-11 15:06:54,762 - wazuh_testing - DEBUG - 2022/02/11 19:06:30 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 12 disconnected. 2022-02-11 15:06:54,762 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/debug' 2022-02-11 15:06:54,763 - wazuh_testing - DEBUG - 2022/02/11 19:06:30 wazuh-remoted: INFO: (1410): Reading authentication keys file. 2022-02-11 15:06:54,763 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/dev/core' 2022-02-11 15:06:54,763 - wazuh_testing - DEBUG - 2022/02/11 19:06:31 wazuh-logcollector: INFO: (1950): Analyzing file: '/var/ossec/logs/active-responses.log'. 2022-02-11 15:06:54,763 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '^/proc' 2022-02-11 15:06:54,763 - wazuh_testing - DEBUG - 2022/02/11 19:06:31 wazuh-logcollector: INFO: (1950): Analyzing file: '/var/log/dpkg.log'. 2022-02-11 15:06:54,763 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '.log$\|.swp$' 2022-02-11 15:06:54,763 - wazuh_testing - DEBUG - 2022/02/11 19:06:31 wazuh-logcollector: INFO: Started (pid: 17649). 2022-02-11 15:06:54,763 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] main.c:235 at main(): INFO: (6004): No diff for file: '/etc/ssl/private.key' 2022-02-11 15:06:54,763 - wazuh_testing - DEBUG - 2022/02/11 19:06:32 wazuh-monitord: INFO: Started (pid: 17668). 2022-02-11 15:06:54,763 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] main.c:245 at main(): INFO: (6016): Directory set for real time monitoring: '/testdir2'. 2022-02-11 15:06:54,764 - wazuh_testing - DEBUG - 2022/02/11 19:06:33 wazuh-modulesd: INFO: Started (pid: 17680). 2022-02-11 15:06:54,764 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] syscheck_audit.c:243 at audit_init(): WARNING: (6924): Who-data engine cannot start because Auditd is not running. 2022-02-11 15:06:54,764 - wazuh_testing - DEBUG - 2022/02/11 19:06:33 wazuh-modulesd:agent-upgrade: INFO: (8153): Module Agent Upgrade started. 2022-02-11 15:06:54,764 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] main.c:264 at main(): WARNING: (6913): Who-data engine could not start. Switching who-data to real-time. 2022-02-11 15:06:54,764 - wazuh_testing - DEBUG - 2022/02/11 19:06:33 wazuh-modulesd:ciscat: INFO: Module disabled. Exiting... 2022-02-11 15:06:54,764 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] run_check.c:194 at start_daemon(): DEBUG: (6320): Setting process priority to: '10' 2022-02-11 15:06:54,764 - wazuh_testing - DEBUG - 2022/02/11 19:06:33 wazuh-modulesd:osquery: INFO: Module disabled. Exiting... 2022-02-11 15:06:54,764 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:06:54,764 - wazuh_testing - DEBUG - 2022/02/11 19:06:33 wazuh-modulesd:syscollector: INFO: Module disabled. Exiting... 2022-02-11 15:06:54,765 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] run_check.c:229 at start_daemon(): INFO: (6000): Starting daemon... 2022-02-11 15:06:54,765 - wazuh_testing - DEBUG - 2022/02/11 19:06:33 sca: INFO: Module disabled. Exiting. 2022-02-11 15:06:54,765 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] run_check.c:232 at start_daemon(): INFO: (6010): File integrity monitoring scan frequency: 20 seconds 2022-02-11 15:06:54,765 - wazuh_testing - DEBUG - 2022/02/11 19:06:33 wazuh-modulesd:database: INFO: Module started. 2022-02-11 15:06:54,765 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 15:06:54,765 - wazuh_testing - DEBUG - 2022/02/11 19:06:33 wazuh-modulesd:download: INFO: Module started. 2022-02-11 15:06:54,765 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644602808}} 2022-02-11 15:06:54,765 - wazuh_testing - DEBUG - 2022/02/11 19:06:33 wazuh-modulesd:control: INFO: Starting control thread. 2022-02-11 15:06:54,765 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 15:06:54,765 - wazuh_testing - DEBUG - 2022/02/11 19:06:33 wazuh-db[17459] main.c:290 at run_dealer(): DEBUG: New client connected (12). 2022-02-11 15:06:54,765 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-11 15:06:54,766 - wazuh_testing - DEBUG - 2022/02/11 19:06:33 wazuh-db[17459] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-name {"id":0,"name":"wazuh-manager"} 2022-02-11 15:06:54,766 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-11 15:06:54,766 - wazuh_testing - DEBUG - 2022/02/11 19:06:33 wazuh-modulesd:task-manager: INFO: (8200): Module Task Manager started. 2022-02-11 15:06:54,766 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-11 15:06:54,766 - wazuh_testing - DEBUG - 2022/02/11 19:06:33 wazuh-db[17459] main.c:290 at run_dealer(): DEBUG: New client connected (16). 2022-02-11 15:06:54,766 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-11 15:06:54,766 - wazuh_testing - DEBUG - 2022/02/11 19:06:33 wazuh-db[17459] wdb_parser.c:928 at wdb_parse(): DEBUG: Task query: set_timeout {"now":1644602793,"interval":900} 2022-02-11 15:06:54,766 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 15:06:54,766 - wazuh_testing - DEBUG - 2022/02/11 19:06:33 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 16 disconnected. 2022-02-11 15:06:54,766 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 15:06:54,767 - wazuh_testing - DEBUG - 2022/02/11 19:06:33 wazuh-db[17459] main.c:290 at run_dealer(): DEBUG: New client connected (16). 2022-02-11 15:06:54,767 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644602808}} 2022-02-11 15:06:54,767 - wazuh_testing - DEBUG - 2022/02/11 19:06:33 wazuh-db[17459] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":0,"version":"Wazuh v4.2.5","manager_host":"wazuh-manager","node_name":"wazuh-master","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux \|wazuh-manager \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64","os_arch":"x86_64"} 2022-02-11 15:06:54,767 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.334 sec (0.330 clock sec) 2022-02-11 15:06:54,767 - wazuh_testing - DEBUG - 2022/02/11 19:06:33 wazuh-db[17459] wdb_parser.c:928 at wdb_parse(): DEBUG: Task query: delete_old {"timestamp":1643997993} 2022-02-11 15:06:54,767 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1621, path count: 1627 2022-02-11 15:06:54,767 - wazuh_testing - DEBUG - 2022/02/11 19:06:33 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 16 disconnected. 2022-02-11 15:06:54,767 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:06:54,768 - wazuh_testing - DEBUG - 2022/02/11 19:06:33 wazuh-db[17459] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: insert-agent {"id":1,"name":"wazuh-agent1","register_ip":"any","internal_key":"1111111111111111111111111111111111111111111111111111111111111111","group":"default","date_add":0} 2022-02-11 15:06:54,768 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:06:54,768 - wazuh_testing - DEBUG - 2022/02/11 19:06:33 wazuh-db[17459] wdb_global.c:89 at wdb_global_insert_agent(): DEBUG: SQLite: UNIQUE constraint failed: agent.id 2022-02-11 15:06:54,768 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] run_check.c:387 at fim_run_realtime(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-11 15:06:54,768 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] run_check.c:543 at log_realtime_status(): INFO: (6012): Real-time file integrity monitoring started. 2022-02-11 15:06:54,768 - wazuh_testing - DEBUG - 2022/02/11 19:06:33 wazuh-db[17459] wdb_parser.c:4784 at wdb_parse_global_insert_agent(): DEBUG: Global DB Cannot execute SQL query; err database queue/db/global.db: UNIQUE constraint failed: agent.id 2022-02-11 15:06:54,768 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:06:54,768 - wazuh_testing - DEBUG - 2022/02/11 19:06:33 wazuh-db[17459] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-group {"id":1,"group":"default"} 2022-02-11 15:06:54,768 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. 2022-02-11 15:06:54,768 - wazuh_testing - DEBUG - 2022/02/11 19:06:33 wazuh-db[17459] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: delete-agent-belong 1 2022-02-11 15:06:54,769 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] run_check.c:568 at symlink_checker_thread(): DEBUG: (6033): Starting symbolic link updater. Interval '600'. 2022-02-11 15:06:54,769 - wazuh_testing - DEBUG - 2022/02/11 19:06:33 wazuh-db[17459] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: find-group default 2022-02-11 15:06:54,769 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] run_check.c:82 at fim_send_sync_msg(): DEBUG: (6317): Sending integrity control message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1644602808,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"9a33f0b60c5bb05102b85ed3b9bf0650f65ac565"}} 2022-02-11 15:06:54,769 - wazuh_testing - DEBUG - 2022/02/11 19:06:33 wazuh-db[17459] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: insert-agent-belong {"id_group":1,"id_agent":1} 2022-02-11 15:06:54,769 - wazuh_testing - DEBUG - 2022/02/11 19:06:33 wazuh-db[17459] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: get-all-agents last_id 0 2022-02-11 15:06:54,769 - wazuh_testing - DEBUG - 2022/02/11 19:06:33 wazuh-db[17459] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: select-groups 2022-02-11 15:06:54,770 - wazuh_testing - DEBUG - 2022/02/11 19:06:33 wazuh-db[17459] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: find-group default 2022-02-11 15:06:54,770 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-agent1 and message: .Sending integrity control message: (.+)$ 2022-02-11 15:06:54,770 - wazuh_testing - DEBUG - 2022/02/11 19:06:33 wazuh-db[17459] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: get-all-agents last_id 0 2022-02-11 15:06:54,770 - wazuh_testing - DEBUG - 2022/02/11 19:06:33 wazuh-db[17459] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: select-agent-group 1 2022-02-11 15:06:54,770 - wazuh_testing - DEBUG - 2022/02/11 19:06:33 wazuh-db[17459] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: delete-agent-belong 1 2022-02-11 15:06:54,771 - wazuh_testing - DEBUG - 2022/02/11 19:06:33 wazuh-db[17459] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: find-group default 2022-02-11 15:06:54,771 - wazuh_testing - DEBUG - 2022/02/11 19:06:33 wazuh-db[17459] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: insert-agent-belong {"id_group":1,"id_agent":1} 2022-02-11 15:06:54,771 - wazuh_testing - DEBUG - 2022/02/11 19:06:33 wazuh-db[17459] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: select-agent-name 1 2022-02-11 15:06:54,771 - wazuh_testing - DEBUG - 2022/02/11 19:06:33 wazuh-db[17459] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: select-agent-name 1 2022-02-11 15:06:54,772 - wazuh_testing - DEBUG - 2022/02/11 19:06:36 wazuh-db[17459] main.c:290 at run_dealer(): DEBUG: New client connected (16). 2022-02-11 15:06:54,772 - wazuh_testing - DEBUG - 2022/02/11 19:06:36 wazuh-db[17459] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-keepalive {"id":1,"connection_status":"pending","sync_status":"synced"} 2022-02-11 15:06:54,772 - wazuh_testing - DEBUG - 2022/02/11 19:06:36 wazuh-db[17459] main.c:290 at run_dealer(): DEBUG: New client connected (18). 2022-02-11 15:06:54,772 - wazuh_testing - DEBUG - 2022/02/11 19:06:36 wazuh-db[17459] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux \|wazuh-agent1 \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64","os_arch":"x86_64"} 2022-02-11 15:06:54,773 - wazuh_testing - DEBUG - 2022/02/11 19:06:39 wazuh-db[17459] main.c:290 at run_dealer(): DEBUG: New client connected (19). 2022-02-11 15:06:54,773 - wazuh_testing - DEBUG - 2022/02/11 19:06:39 wazuh-db[17459] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1644602784 2022-02-11 15:06:54,773 - wazuh_testing - DEBUG - 2022/02/11 19:06:39 wazuh-db[17459] main.c:290 at run_dealer(): DEBUG: New client connected (20). 2022-02-11 15:06:54,773 - wazuh_testing - DEBUG - 2022/02/11 19:06:39 wazuh-db[17459] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck save2 {"path":"/testdir1/testdir1.txt","version":2,"timestamp":1644602799,"attributes":{"type":"file","size":0,"perm":"rw-r--r--","uid":"0","gid":"0","user_name":"root","group_name":"root","inode":17179747,"mtime":1644602779,"hash_md5":"d41d8cd98f00b204e9800998ecf8427e","hash_sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","hash_sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","checksum":"c6a35a987856464956920b5b3f8e4240dee330f4"}} 2022-02-11 15:06:54,774 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-manager and message: .Agent 001 query: (.+) save2 2022-02-11 15:06:55,745 - wazuh_testing - DEBUG - Cleaning temporal files... 2022-02-11 15:06:55,746 - wazuh_testing - DEBUG - Checking results... 2022-02-11 15:06:55,748 - wazuh_testing - DEBUG - Received from wazuh-agent1 the expected message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1644602808,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"9a33f0b60c5bb05102b85ed3b9bf0650f65ac565"}} 2022-02-11 15:06:55,748 - wazuh_testing - DEBUG - Received from wazuh-manager the expected message: syscheck 2022-02-11 15:07:11,431 - wazuh_testing - DEBUG - Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-11 15:07:11,432 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-11 15:07:11,432 - wazuh_testing - DEBUG - Starting file composer for wazuh-agent1 and path: /var/ossec/logs/ossec.log. Composite file in /home/camila/Escritorio/repo/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-agent1_ossec.log.tmp 2022-02-11 15:07:11,434 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-agent1 and message: .Initializing FIM Integrity Synchronization check. (.+)$ 2022-02-11 15:07:12,935 - wazuh_testing - DEBUG - 2022/02/11 19:07:00 wazuh-logcollector: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:07:12,936 - wazuh_testing - DEBUG - 2022/02/11 19:07:00 wazuh-syscheckd[22721] sig_op.c:49 at HandleSIG(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:07:12,936 - wazuh_testing - DEBUG - 2022/02/11 19:07:00 wazuh-agentd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:07:12,936 - wazuh_testing - DEBUG - 2022/02/11 19:07:01 wazuh-execd: INFO: (1314): Shutdown received. Deleting responses. 2022-02-11 15:07:12,937 - wazuh_testing - DEBUG - 2022/02/11 19:07:01 wazuh-execd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:07:12,937 - wazuh_testing - DEBUG - 2022/02/11 19:07:04 wazuh-syscheckd[23213] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 15:07:12,937 - wazuh_testing - DEBUG - 2022/02/11 19:07:04 wazuh-syscheckd[23213] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 15:07:12,937 - wazuh_testing - DEBUG - 2022/02/11 19:07:04 wazuh-syscheckd[23213] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-11 15:07:12,937 - wazuh_testing - DEBUG - 2022/02/11 19:07:04 wazuh-syscheckd[23213] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-11 15:07:12,937 - wazuh_testing - DEBUG - 2022/02/11 19:07:04 wazuh-syscheckd[23213] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-11 15:07:12,938 - wazuh_testing - DEBUG - 2022/02/11 19:07:04 wazuh-syscheckd[23213] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-11 15:07:12,938 - wazuh_testing - DEBUG - 2022/02/11 19:07:04 wazuh-syscheckd[23213] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-11 15:07:12,938 - wazuh_testing - DEBUG - 2022/02/11 19:07:04 wazuh-syscheckd[23213] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$\|.swp$ 2022-02-11 15:07:12,938 - wazuh_testing - DEBUG - 2022/02/11 19:07:04 wazuh-syscheckd[23213] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$\|.swp$ OK? 2022-02-11 15:07:12,939 - wazuh_testing - DEBUG - 2022/02/11 19:07:04 wazuh-syscheckd[23213] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-11 15:07:12,939 - wazuh_testing - DEBUG - 2022/02/11 19:07:04 wazuh-syscheckd[23213] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-11 15:07:12,939 - wazuh_testing - DEBUG - 2022/02/11 19:07:04 wazuh-syscheckd[23213] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 15:07:12,939 - wazuh_testing - DEBUG - 2022/02/11 19:07:04 wazuh-syscheckd[23213] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 15:07:12,940 - wazuh_testing - DEBUG - 2022/02/11 19:07:04 wazuh-syscheckd[23213] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 15:07:12,940 - wazuh_testing - DEBUG - 2022/02/11 19:07:04 wazuh-syscheckd[23213] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 15:07:12,940 - wazuh_testing - DEBUG - 2022/02/11 19:07:04 wazuh-syscheckd[23213] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 15:07:12,940 - wazuh_testing - DEBUG - 2022/02/11 19:07:04 wazuh-syscheckd[23213] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 15:07:12,940 - wazuh_testing - DEBUG - 2022/02/11 19:07:04 wazuh-execd: INFO: Started (pid: 23226). 2022-02-11 15:07:12,941 - wazuh_testing - DEBUG - 2022/02/11 19:07:05 wazuh-agentd: INFO: (1410): Reading authentication keys file. 2022-02-11 15:07:12,941 - wazuh_testing - DEBUG - 2022/02/11 19:07:05 wazuh-agentd: INFO: Using notify time: 10 and max time to reconnect: 60 2022-02-11 15:07:12,941 - wazuh_testing - DEBUG - 2022/02/11 19:07:05 wazuh-agentd: INFO: Version detected -> Linux \|wazuh-agent1 \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64 [Debian GNU/Linux\|debian: 10 (buster)] - Wazuh v4.2.5 2022-02-11 15:07:12,941 - wazuh_testing - DEBUG - 2022/02/11 19:07:05 wazuh-agentd: INFO: Started (pid: 23237). 2022-02-11 15:07:12,942 - wazuh_testing - DEBUG - 2022/02/11 19:07:05 wazuh-agentd: INFO: Server IP Address: wazuh-manager/172.17.0.2 2022-02-11 15:07:12,942 - wazuh_testing - DEBUG - 2022/02/11 19:07:05 wazuh-agentd: INFO: Using AES as encryption method. 2022-02-11 15:07:12,942 - wazuh_testing - DEBUG - 2022/02/11 19:07:05 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 15:07:12,942 - wazuh_testing - DEBUG - 2022/02/11 19:07:05 wazuh-agentd: INFO: (4102): Connected to the server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 15:07:12,943 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 15:07:12,943 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 15:07:12,943 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-11 15:07:12,944 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-11 15:07:12,944 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-11 15:07:12,944 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-11 15:07:12,945 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-11 15:07:12,945 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$\|.swp$ 2022-02-11 15:07:12,945 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$\|.swp$ OK? 2022-02-11 15:07:12,946 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-11 15:07:12,946 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-11 15:07:12,946 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 15:07:12,946 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 15:07:12,947 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 15:07:12,947 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 15:07:12,947 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 15:07:12,948 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 15:07:12,948 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 rootcheck[23249] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled. 2022-02-11 15:07:12,948 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:07:12,949 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] syscom.c:123 at syscom_main(): DEBUG: (6284): Local requests thread ready. 2022-02-11 15:07:12,949 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] mq_op.c:47 at StartMQ(): DEBUG: Connected succesfully to 'queue/sockets/queue' after 0 attempts 2022-02-11 15:07:12,949 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] mq_op.c:48 at StartMQ(): DEBUG: (unix_domain) Maximum send buffer set to: '212992'. 2022-02-11 15:07:12,949 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:185 at main(): INFO: Started (pid: 23251). 2022-02-11 15:07:12,950 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:193 at main(): INFO: (6003): Monitoring path: '/bin', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 15:07:12,950 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:193 at main(): INFO: (6003): Monitoring path: '/boot', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 15:07:12,950 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:193 at main(): INFO: (6003): Monitoring path: '/etc', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 15:07:12,950 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:193 at main(): INFO: (6003): Monitoring path: '/sbin', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 15:07:12,951 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir1', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 15:07:12,951 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir2', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| realtime'. 2022-02-11 15:07:12,951 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir3', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| whodata'. 2022-02-11 15:07:12,952 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/bin', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 15:07:12,952 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/sbin', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 15:07:12,952 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:215 at main(): DEBUG: (6357): Maximum disk quota size limit configured to '1048576 KB'. 2022-02-11 15:07:12,952 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mtab' 2022-02-11 15:07:12,953 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/hosts.deny' 2022-02-11 15:07:12,953 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mail/statistics' 2022-02-11 15:07:12,953 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random-seed' 2022-02-11 15:07:12,953 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random.seed' 2022-02-11 15:07:12,954 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/adjtime' 2022-02-11 15:07:12,954 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/httpd/logs' 2022-02-11 15:07:12,954 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/utmpx' 2022-02-11 15:07:12,954 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/wtmpx' 2022-02-11 15:07:12,954 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/cups/certs' 2022-02-11 15:07:12,955 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/dumpdates' 2022-02-11 15:07:12,955 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/svc/volatile' 2022-02-11 15:07:12,955 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/security' 2022-02-11 15:07:12,955 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/debug' 2022-02-11 15:07:12,955 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/dev/core' 2022-02-11 15:07:12,955 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '^/proc' 2022-02-11 15:07:12,955 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '.log$\|.swp$' 2022-02-11 15:07:12,956 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:235 at main(): INFO: (6004): No diff for file: '/etc/ssl/private.key' 2022-02-11 15:07:12,956 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:245 at main(): INFO: (6016): Directory set for real time monitoring: '/testdir2'. 2022-02-11 15:07:12,956 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] syscheck_audit.c:243 at audit_init(): WARNING: (6924): Who-data engine cannot start because Auditd is not running. 2022-02-11 15:07:12,956 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:264 at main(): WARNING: (6913): Who-data engine could not start. Switching who-data to real-time. 2022-02-11 15:07:12,956 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] run_check.c:194 at start_daemon(): DEBUG: (6320): Setting process priority to: '10' 2022-02-11 15:07:12,956 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:07:12,957 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] run_check.c:229 at start_daemon(): INFO: (6000): Starting daemon... 2022-02-11 15:07:12,957 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] run_check.c:232 at start_daemon(): INFO: (6010): File integrity monitoring scan frequency: 20 seconds 2022-02-11 15:07:12,957 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 15:07:12,957 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644602826}} 2022-02-11 15:07:12,957 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 15:07:12,957 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-11 15:07:12,958 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-11 15:07:12,958 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-11 15:07:12,958 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-11 15:07:12,958 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 15:07:12,958 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 15:07:12,958 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644602826}} 2022-02-11 15:07:12,958 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.322 sec (0.321 clock sec) 2022-02-11 15:07:12,959 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1622, path count: 1628 2022-02-11 15:07:12,959 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:07:12,959 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:07:12,959 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] run_check.c:387 at fim_run_realtime(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-11 15:07:12,959 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:07:12,959 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] run_check.c:543 at log_realtime_status(): INFO: (6012): Real-time file integrity monitoring started. 2022-02-11 15:07:12,960 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. 2022-02-11 15:07:12,960 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-agent1 and message: .Initializing FIM Integrity Synchronization check. (.+)$ 2022-02-11 15:07:13,937 - wazuh_testing - DEBUG - Cleaning temporal files... 2022-02-11 15:07:13,937 - wazuh_testing - DEBUG - Checking results... 2022-02-11 15:07:13,938 - wazuh_testing - DEBUG - Received from wazuh-agent1 the expected message: Sync interval is 300 seconds. -------------------------------Captured log call-------------------------------- DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:1005 Cleaning temporal files... DEBUG wazuh_testing:monitoring.py:994 Checking results... DEBUG wazuh_testing:monitoring.py:1000 Received from wazuh-agent1 the expected message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1644602808,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"9a33f0b60c5bb05102b85ed3b9bf0650f65ac565"}} DEBUG wazuh_testing:monitoring.py:1000 Received from wazuh-manager the expected message: syscheck DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:1005 Cleaning temporal files... DEBUG wazuh_testing:monitoring.py:994 Checking results... DEBUG wazuh_testing:monitoring.py:1000 Received from wazuh-agent1 the expected message: Sync interval is 300 seconds.
Passed	test_synchronization.py::test_synchronization[testdir1-modify-wazuh-manager]	44.50
------------------------------Captured stderr call------------------------------ 2022-02-11 15:07:27,441 - wazuh_testing - DEBUG - Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-11 15:07:27,442 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-11 15:07:27,442 - wazuh_testing - DEBUG - Starting file composer for wazuh-agent1 and path: /var/ossec/logs/ossec.log. Composite file in /home/camila/Escritorio/repo/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-agent1_ossec.log.tmp 2022-02-11 15:07:27,443 - wazuh_testing - DEBUG - Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-11 15:07:27,444 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-agent1 and message: .Sending integrity control message: (.+)$ 2022-02-11 15:07:27,445 - wazuh_testing - DEBUG - Starting file composer for wazuh-manager and path: /var/ossec/logs/ossec.log. Composite file in /home/camila/Escritorio/repo/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-manager_ossec.log.tmp 2022-02-11 15:07:27,445 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-11 15:07:27,447 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-manager and message: .Agent 001 query: (.+) save2 2022-02-11 15:07:28,946 - wazuh_testing - DEBUG - 2022/02/11 19:07:00 wazuh-logcollector: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:07:28,946 - wazuh_testing - DEBUG - 2022/02/11 19:07:00 wazuh-syscheckd[22721] sig_op.c:49 at HandleSIG(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:07:28,946 - wazuh_testing - DEBUG - 2022/02/11 19:07:00 wazuh-agentd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:07:28,947 - wazuh_testing - DEBUG - 2022/02/11 19:07:01 wazuh-execd: INFO: (1314): Shutdown received. Deleting responses. 2022-02-11 15:07:28,947 - wazuh_testing - DEBUG - 2022/02/11 19:07:01 wazuh-execd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:07:28,947 - wazuh_testing - DEBUG - 2022/02/11 19:07:04 wazuh-syscheckd[23213] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 15:07:28,947 - wazuh_testing - DEBUG - 2022/02/11 19:07:04 wazuh-syscheckd[23213] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 15:07:28,947 - wazuh_testing - DEBUG - 2022/02/11 19:07:04 wazuh-syscheckd[23213] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-11 15:07:28,948 - wazuh_testing - DEBUG - 2022/02/11 19:07:04 wazuh-syscheckd[23213] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-11 15:07:28,948 - wazuh_testing - DEBUG - 2022/02/11 19:07:04 wazuh-syscheckd[23213] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-11 15:07:28,948 - wazuh_testing - DEBUG - 2022/02/11 19:07:04 wazuh-syscheckd[23213] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-11 15:07:28,948 - wazuh_testing - DEBUG - 2022/02/11 19:07:04 wazuh-syscheckd[23213] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-11 15:07:28,948 - wazuh_testing - DEBUG - 2022/02/11 19:07:04 wazuh-syscheckd[23213] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$\|.swp$ 2022-02-11 15:07:28,949 - wazuh_testing - DEBUG - 2022/02/11 19:07:04 wazuh-syscheckd[23213] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$\|.swp$ OK? 2022-02-11 15:07:28,949 - wazuh_testing - DEBUG - 2022/02/11 19:07:04 wazuh-syscheckd[23213] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-11 15:07:28,949 - wazuh_testing - DEBUG - 2022/02/11 19:07:00 wazuh-db[17459] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-connection-status {"id":1,"connection_status":"disconnected","sync_status":"synced"} 2022-02-11 15:07:28,949 - wazuh_testing - DEBUG - 2022/02/11 19:07:04 wazuh-syscheckd[23213] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-11 15:07:28,949 - wazuh_testing - DEBUG - 2022/02/11 19:07:04 wazuh-syscheckd[23213] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 15:07:28,949 - wazuh_testing - DEBUG - 2022/02/11 19:07:00 wazuh-db[17459] main.c:290 at run_dealer(): DEBUG: New client connected (34). 2022-02-11 15:07:28,950 - wazuh_testing - DEBUG - 2022/02/11 19:07:00 wazuh-db[17459] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: get-labels 1 2022-02-11 15:07:28,950 - wazuh_testing - DEBUG - 2022/02/11 19:07:04 wazuh-syscheckd[23213] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 15:07:28,950 - wazuh_testing - DEBUG - 2022/02/11 19:07:03 wazuh-db[17459] main.c:290 at run_dealer(): DEBUG: New client connected (35). 2022-02-11 15:07:28,950 - wazuh_testing - DEBUG - 2022/02/11 19:07:04 wazuh-syscheckd[23213] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 15:07:28,950 - wazuh_testing - DEBUG - 2022/02/11 19:07:03 wazuh-db[17459] wdb_parser.c:928 at wdb_parse(): DEBUG: Task query: upgrade_cancel_tasks {"node":"wazuh-master"} 2022-02-11 15:07:28,950 - wazuh_testing - DEBUG - 2022/02/11 19:07:03 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 35 disconnected. 2022-02-11 15:07:28,950 - wazuh_testing - DEBUG - 2022/02/11 19:07:04 wazuh-syscheckd[23213] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 15:07:28,950 - wazuh_testing - DEBUG - 2022/02/11 19:07:04 wazuh-db[17459] wdb.c:918 at wdb_commit_old(): DEBUG: Agent '001' database commited. Time: 12.950 ms. 2022-02-11 15:07:28,950 - wazuh_testing - DEBUG - 2022/02/11 19:07:04 wazuh-syscheckd[23213] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 15:07:28,950 - wazuh_testing - DEBUG - 2022/02/11 19:07:05 wazuh-db[17459] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-keepalive {"id":1,"connection_status":"pending","sync_status":"synced"} 2022-02-11 15:07:28,951 - wazuh_testing - DEBUG - 2022/02/11 19:07:04 wazuh-syscheckd[23213] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 15:07:28,951 - wazuh_testing - DEBUG - 2022/02/11 19:07:04 wazuh-execd: INFO: Started (pid: 23226). 2022-02-11 15:07:28,951 - wazuh_testing - DEBUG - 2022/02/11 19:07:05 wazuh-agentd: INFO: (1410): Reading authentication keys file. 2022-02-11 15:07:28,951 - wazuh_testing - DEBUG - 2022/02/11 19:07:05 wazuh-agentd: INFO: Using notify time: 10 and max time to reconnect: 60 2022-02-11 15:07:28,951 - wazuh_testing - DEBUG - 2022/02/11 19:07:09 wazuh-db[17459] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux \|wazuh-agent1 \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64","os_arch":"x86_64"} 2022-02-11 15:07:28,952 - wazuh_testing - DEBUG - 2022/02/11 19:07:05 wazuh-agentd: INFO: Version detected -> Linux \|wazuh-agent1 \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64 [Debian GNU/Linux\|debian: 10 (buster)] - Wazuh v4.2.5 2022-02-11 15:07:28,952 - wazuh_testing - DEBUG - 2022/02/11 19:07:09 wazuh-db[17459] main.c:290 at run_dealer(): DEBUG: New client connected (35). 2022-02-11 15:07:28,952 - wazuh_testing - DEBUG - 2022/02/11 19:07:05 wazuh-agentd: INFO: Started (pid: 23237). 2022-02-11 15:07:28,952 - wazuh_testing - DEBUG - 2022/02/11 19:07:05 wazuh-agentd: INFO: Server IP Address: wazuh-manager/172.17.0.2 2022-02-11 15:07:28,952 - wazuh_testing - DEBUG - 2022/02/11 19:07:09 wazuh-db[17459] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1644602826 2022-02-11 15:07:28,952 - wazuh_testing - DEBUG - 2022/02/11 19:07:05 wazuh-agentd: INFO: Using AES as encryption method. 2022-02-11 15:07:28,952 - wazuh_testing - DEBUG - 2022/02/11 19:07:09 wazuh-db[17459] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update end_scan 1644602826 2022-02-11 15:07:28,953 - wazuh_testing - DEBUG - 2022/02/11 19:07:05 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 15:07:28,953 - wazuh_testing - DEBUG - 2022/02/11 19:07:05 wazuh-agentd: INFO: (4102): Connected to the server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 15:07:28,953 - wazuh_testing - DEBUG - 2022/02/11 19:07:09 wazuh-db[17459] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_global {"id":1644602826,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"2dbbef457fb1035aa4d3d07136ae76c39c48b00d"} 2022-02-11 15:07:28,953 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 15:07:28,953 - wazuh_testing - DEBUG - 2022/02/11 19:07:09 wazuh-db[17459] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 1.182 ms. 2022-02-11 15:07:28,953 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 15:07:28,954 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-11 15:07:28,954 - wazuh_testing - DEBUG - 2022/02/11 19:07:09 wazuh-db[17459] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602826,"version":2,"begin":"/bin/bash","end":"/sbin/ctrlaltdel","tail":"/sbin/debugfs","checksum":"478eb6380ccc2c04fef49b0edc2715bece72ba41"} 2022-02-11 15:07:28,954 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-11 15:07:28,954 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-11 15:07:28,954 - wazuh_testing - DEBUG - 2022/02/11 19:07:09 wazuh-db[17459] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602826,"version":2,"begin":"/sbin/debugfs","end":"/usr/sbin/zic","checksum":"3cb26071ac7e52939e4a34b9d7f55ff82f58ad4e"} 2022-02-11 15:07:28,955 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-11 15:07:28,955 - wazuh_testing - DEBUG - 2022/02/11 19:07:09 wazuh-db[17459] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.671 ms. 2022-02-11 15:07:28,955 - wazuh_testing - DEBUG - 2022/02/11 19:07:09 wazuh-db[17459] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.582 ms. 2022-02-11 15:07:28,955 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-11 15:07:28,955 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$\|.swp$ 2022-02-11 15:07:28,956 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$\|.swp$ OK? 2022-02-11 15:07:28,956 - wazuh_testing - DEBUG - 2022/02/11 19:07:09 wazuh-db[17459] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602826,"version":2,"begin":"/sbin/debugfs","end":"/usr/bin/pdb","tail":"/usr/bin/pdb2","checksum":"f1309942196ee399d692f23219704ad1db631d61"} 2022-02-11 15:07:28,956 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-11 15:07:28,956 - wazuh_testing - DEBUG - 2022/02/11 19:07:09 wazuh-db[17459] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602826,"version":2,"begin":"/usr/bin/pdb2","end":"/usr/sbin/zic","checksum":"f13d51f7876684d6bc17db143ee1529b892c54d2"} 2022-02-11 15:07:28,956 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-11 15:07:28,956 - wazuh_testing - DEBUG - 2022/02/11 19:07:09 wazuh-db[17459] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.342 ms. 2022-02-11 15:07:28,956 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 15:07:28,957 - wazuh_testing - DEBUG - 2022/02/11 19:07:09 wazuh-db[17459] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.341 ms. 2022-02-11 15:07:28,957 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 15:07:28,957 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 15:07:28,957 - wazuh_testing - DEBUG - 2022/02/11 19:07:09 wazuh-db[17459] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602826,"version":2,"begin":"/sbin/debugfs","end":"/usr/bin/dpkg-divert","tail":"/usr/bin/dpkg-genbuildinfo","checksum":"c206e7c385b330ee12511b43349def3ec4588d46"} 2022-02-11 15:07:28,957 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 15:07:28,957 - wazuh_testing - DEBUG - 2022/02/11 19:07:09 wazuh-db[17459] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.228 ms. 2022-02-11 15:07:28,957 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 15:07:28,958 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 15:07:28,958 - wazuh_testing - DEBUG - 2022/02/11 19:07:09 wazuh-db[17459] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602826,"version":2,"begin":"/usr/bin/dpkg-genbuildinfo","end":"/usr/bin/pdb","checksum":"fcd12ca69011f5033c3706ba868e7f2983050598"} 2022-02-11 15:07:28,958 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 rootcheck[23249] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled. 2022-02-11 15:07:28,958 - wazuh_testing - DEBUG - 2022/02/11 19:07:09 wazuh-db[17459] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.240 ms. 2022-02-11 15:07:28,958 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:07:28,958 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] syscom.c:123 at syscom_main(): DEBUG: (6284): Local requests thread ready. 2022-02-11 15:07:28,959 - wazuh_testing - DEBUG - 2022/02/11 19:07:09 wazuh-db[17459] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602826,"version":2,"begin":"/sbin/debugfs","end":"/usr/bin/apt-extracttemplates","tail":"/usr/bin/apt-ftparchive","checksum":"da3daabf2d28484c437d2cb826023e29d23a2d5a"} 2022-02-11 15:07:28,959 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] mq_op.c:47 at StartMQ(): DEBUG: Connected succesfully to 'queue/sockets/queue' after 0 attempts 2022-02-11 15:07:28,959 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] mq_op.c:48 at StartMQ(): DEBUG: (unix_domain) Maximum send buffer set to: '212992'. 2022-02-11 15:07:28,959 - wazuh_testing - DEBUG - 2022/02/11 19:07:09 wazuh-db[17459] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602826,"version":2,"begin":"/usr/bin/apt-ftparchive","end":"/usr/bin/dpkg-divert","checksum":"ab79628f5b16446ec1a1f2daeaf1afd2511680e1"} 2022-02-11 15:07:28,959 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:185 at main(): INFO: Started (pid: 23251). 2022-02-11 15:07:28,959 - wazuh_testing - DEBUG - 2022/02/11 19:07:09 wazuh-db[17459] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.146 ms. 2022-02-11 15:07:28,959 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:193 at main(): INFO: (6003): Monitoring path: '/bin', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 15:07:28,960 - wazuh_testing - DEBUG - 2022/02/11 19:07:09 wazuh-db[17459] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.132 ms. 2022-02-11 15:07:28,960 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:193 at main(): INFO: (6003): Monitoring path: '/boot', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 15:07:28,960 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:193 at main(): INFO: (6003): Monitoring path: '/etc', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 15:07:28,960 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:193 at main(): INFO: (6003): Monitoring path: '/sbin', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 15:07:28,960 - wazuh_testing - DEBUG - 2022/02/11 19:07:09 wazuh-db[17459] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602826,"version":2,"begin":"/sbin/debugfs","end":"/sbin/mkswap","tail":"/sbin/nameif","checksum":"57eae3b131abc8053756527449ccaf84d8226ff2"} 2022-02-11 15:07:28,960 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir1', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 15:07:28,961 - wazuh_testing - DEBUG - 2022/02/11 19:07:09 wazuh-db[17459] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.088 ms. 2022-02-11 15:07:28,961 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir2', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| realtime'. 2022-02-11 15:07:28,961 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir3', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| whodata'. 2022-02-11 15:07:28,961 - wazuh_testing - DEBUG - 2022/02/11 19:07:10 wazuh-db[17459] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602826,"version":2,"begin":"/sbin/nameif","end":"/usr/bin/apt-extracttemplates","checksum":"f5f36473141791bf5b496a9285bac2f0fb3a2719"} 2022-02-11 15:07:28,961 - wazuh_testing - DEBUG - 2022/02/11 19:07:10 wazuh-db[17459] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.109 ms. 2022-02-11 15:07:28,961 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/bin', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 15:07:28,961 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/sbin', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 15:07:28,962 - wazuh_testing - DEBUG - 2022/02/11 19:07:10 wazuh-db[17459] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602826,"version":2,"begin":"/sbin/nameif","end":"/sbin/sulogin","tail":"/sbin/swaplabel","checksum":"c21468dc0dfc12ca36a7129f43587e57807e1deb"} 2022-02-11 15:07:28,962 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:215 at main(): DEBUG: (6357): Maximum disk quota size limit configured to '1048576 KB'. 2022-02-11 15:07:28,962 - wazuh_testing - DEBUG - 2022/02/11 19:07:10 wazuh-db[17459] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.075 ms. 2022-02-11 15:07:28,962 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mtab' 2022-02-11 15:07:28,962 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/hosts.deny' 2022-02-11 15:07:28,962 - wazuh_testing - DEBUG - 2022/02/11 19:07:10 wazuh-db[17459] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602826,"version":2,"begin":"/sbin/swaplabel","end":"/usr/bin/apt-extracttemplates","checksum":"922551d30ee500f190c84394e6f5e33042196bdb"} 2022-02-11 15:07:28,962 - wazuh_testing - DEBUG - 2022/02/11 19:07:10 wazuh-db[17459] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.057 ms. 2022-02-11 15:07:28,962 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mail/statistics' 2022-02-11 15:07:28,962 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random-seed' 2022-02-11 15:07:28,962 - wazuh_testing - DEBUG - 2022/02/11 19:07:10 wazuh-db[17459] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602826,"version":2,"begin":"/sbin/swaplabel","end":"/sbin/zramctl","tail":"/testdir1/testdir1.txt","checksum":"1212bd95c0c53ba86e112b40a0b267faf3f2be0d"} 2022-02-11 15:07:28,962 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random.seed' 2022-02-11 15:07:28,962 - wazuh_testing - DEBUG - 2022/02/11 19:07:10 wazuh-db[17459] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.067 ms. 2022-02-11 15:07:28,963 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/adjtime' 2022-02-11 15:07:28,963 - wazuh_testing - DEBUG - 2022/02/11 19:07:10 wazuh-db[17459] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602826,"version":2,"begin":"/testdir1/testdir1.txt","end":"/usr/bin/apt-extracttemplates","checksum":"bd3208a06ad6392c802615508a0f25ef35ae98ef"} 2022-02-11 15:07:28,963 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/httpd/logs' 2022-02-11 15:07:28,963 - wazuh_testing - DEBUG - 2022/02/11 19:07:10 wazuh-db[17459] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.045 ms. 2022-02-11 15:07:28,963 - wazuh_testing - DEBUG - 2022/02/11 19:07:10 wazuh-db[17459] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602826,"version":2,"begin":"/testdir1/testdir1.txt","end":"/usr/bin/aclocal-1.16","tail":"/usr/bin/addpart","checksum":"8de439726eb5d2b1a8a45f1aa48035c3c65668b1"} 2022-02-11 15:07:28,963 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/utmpx' 2022-02-11 15:07:28,963 - wazuh_testing - DEBUG - 2022/02/11 19:07:10 wazuh-db[17459] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.059 ms. 2022-02-11 15:07:28,963 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/wtmpx' 2022-02-11 15:07:28,964 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/cups/certs' 2022-02-11 15:07:28,964 - wazuh_testing - DEBUG - 2022/02/11 19:07:10 wazuh-db[17459] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602826,"version":2,"begin":"/usr/bin/addpart","end":"/usr/bin/apt-extracttemplates","checksum":"7d1a3bbe28f2c9e567f8311757d46ea5365d7112"} 2022-02-11 15:07:28,964 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/dumpdates' 2022-02-11 15:07:28,964 - wazuh_testing - DEBUG - 2022/02/11 19:07:10 wazuh-db[17459] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.060 ms. 2022-02-11 15:07:28,964 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/svc/volatile' 2022-02-11 15:07:28,964 - wazuh_testing - DEBUG - 2022/02/11 19:07:10 wazuh-db[17459] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602826,"version":2,"begin":"/usr/bin/[","end":"/usr/bin/aclocal-1.16","checksum":"0f1d35a6565c33bf9697c50fd2d7d2a4ebccbc45"} 2022-02-11 15:07:28,964 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/security' 2022-02-11 15:07:28,964 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/debug' 2022-02-11 15:07:28,964 - wazuh_testing - DEBUG - 2022/02/11 19:07:10 wazuh-db[17459] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602826,"version":2,"begin":"/testdir1/testdir1.txt","end":"/usr/bin/2to3-2.7","tail":"/usr/bin/[","checksum":"ce3ab35c3a7bcb48bae0ffb9bce0e53960550037"} 2022-02-11 15:07:28,964 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/dev/core' 2022-02-11 15:07:28,964 - wazuh_testing - DEBUG - 2022/02/11 19:07:10 wazuh-db[17459] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.070 ms. 2022-02-11 15:07:28,964 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '^/proc' 2022-02-11 15:07:28,965 - wazuh_testing - DEBUG - 2022/02/11 19:07:10 wazuh-db[17459] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.070 ms. 2022-02-11 15:07:28,965 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '.log$\|.swp$' 2022-02-11 15:07:28,965 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:235 at main(): INFO: (6004): No diff for file: '/etc/ssl/private.key' 2022-02-11 15:07:28,965 - wazuh_testing - DEBUG - 2022/02/11 19:07:10 wazuh-db[17459] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602826,"version":2,"begin":"/testdir1/testdir1.txt","end":"/testdir1/testdir1.txt","tail":"/testdir1/tmp8qs7q6sl","checksum":"15e61ea56faffb636aacff1c74bc8540b0fde9bf"} 2022-02-11 15:07:28,965 - wazuh_testing - DEBUG - 2022/02/11 19:07:10 wazuh-db[17459] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.047 ms. 2022-02-11 15:07:28,965 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:245 at main(): INFO: (6016): Directory set for real time monitoring: '/testdir2'. 2022-02-11 15:07:28,965 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] syscheck_audit.c:243 at audit_init(): WARNING: (6924): Who-data engine cannot start because Auditd is not running. 2022-02-11 15:07:28,965 - wazuh_testing - DEBUG - 2022/02/11 19:07:11 wazuh-db[17459] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602826,"version":2,"begin":"/testdir1/tmp8qs7q6sl","end":"/usr/bin/2to3-2.7","checksum":"654471fafc7ffe79760db9d87d32107666ee22bd"} 2022-02-11 15:07:28,965 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:264 at main(): WARNING: (6913): Who-data engine could not start. Switching who-data to real-time. 2022-02-11 15:07:28,965 - wazuh_testing - DEBUG - 2022/02/11 19:07:11 wazuh-db[17459] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.048 ms. 2022-02-11 15:07:28,965 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] run_check.c:194 at start_daemon(): DEBUG: (6320): Setting process priority to: '10' 2022-02-11 15:07:28,965 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:07:28,965 - wazuh_testing - DEBUG - 2022/02/11 19:07:11 wazuh-db[17459] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602826,"version":2,"begin":"/testdir1/tmp8qs7q6sl","end":"/testdir1/tmp8qs7q6sl","tail":"/usr/bin/2to3-2.7","checksum":"91102bad86e53267c1c2ef184cab6005e339ff18"} 2022-02-11 15:07:28,966 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] run_check.c:229 at start_daemon(): INFO: (6000): Starting daemon... 2022-02-11 15:07:28,966 - wazuh_testing - DEBUG - 2022/02/11 19:07:11 wazuh-db[17459] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602826,"version":2,"begin":"/usr/bin/2to3-2.7","end":"/usr/bin/2to3-2.7","checksum":"f621f8dd560e58c5f017dfd42d98bb3a72466d1d"} 2022-02-11 15:07:28,966 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] run_check.c:232 at start_daemon(): INFO: (6010): File integrity monitoring scan frequency: 20 seconds 2022-02-11 15:07:28,966 - wazuh_testing - DEBUG - 2022/02/11 19:07:11 wazuh-db[17459] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.029 ms. 2022-02-11 15:07:28,966 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 15:07:28,966 - wazuh_testing - DEBUG - 2022/02/11 19:07:11 wazuh-db[17459] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file save2 {"path":"/testdir1/tmp8qs7q6sl","timestamp":1644602826,"version":2,"attributes":{"type":"file","size":8,"perm":"rw-r--r--","uid":"0","gid":"0","user_name":"root","group_name":"root","inode":17314759,"mtime":1644602822,"hash_md5":"e770e54c4c42d3307c141c0c8948992a","hash_sha1":"9eab19985b11b15f91f936e463ea74f1dfe88e32","hash_sha256":"b1893f8d4b1596c20d6f83a784b2b0468c22fb83ce4ff2033ff86a37865d41d8","checksum":"a042cb95c2754fce4039fa24db07ce0759f16ba3"}} 2022-02-11 15:07:28,966 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644602826}} 2022-02-11 15:07:28,966 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 15:07:28,966 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-11 15:07:28,966 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-11 15:07:28,967 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-manager and message: .Agent 001 query: (.+) save2 2022-02-11 15:07:28,967 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-11 15:07:28,967 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-11 15:07:28,967 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 15:07:28,967 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 15:07:28,967 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644602826}} 2022-02-11 15:07:28,967 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.322 sec (0.321 clock sec) 2022-02-11 15:07:28,968 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1622, path count: 1628 2022-02-11 15:07:28,968 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:07:28,968 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:07:28,968 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] run_check.c:387 at fim_run_realtime(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-11 15:07:28,968 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:07:28,968 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] run_check.c:543 at log_realtime_status(): INFO: (6012): Real-time file integrity monitoring started. 2022-02-11 15:07:28,968 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. 2022-02-11 15:07:28,969 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] run_check.c:568 at symlink_checker_thread(): DEBUG: (6033): Starting symbolic link updater. Interval '600'. 2022-02-11 15:07:28,969 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] run_check.c:82 at fim_send_sync_msg(): DEBUG: (6317): Sending integrity control message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1644602826,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"2dbbef457fb1035aa4d3d07136ae76c39c48b00d"}} 2022-02-11 15:07:28,969 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-agent1 and message: .Sending integrity control message: (.+)$ 2022-02-11 15:07:29,953 - wazuh_testing - DEBUG - Cleaning temporal files... 2022-02-11 15:07:29,953 - wazuh_testing - DEBUG - Checking results... 2022-02-11 15:07:29,955 - wazuh_testing - DEBUG - Received from wazuh-manager the expected message: fim_file 2022-02-11 15:07:29,955 - wazuh_testing - DEBUG - Received from wazuh-agent1 the expected message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1644602826,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"2dbbef457fb1035aa4d3d07136ae76c39c48b00d"}} 2022-02-11 15:07:55,737 - wazuh_testing - DEBUG - Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-11 15:07:55,739 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-11 15:07:55,739 - wazuh_testing - DEBUG - Starting file composer for wazuh-manager and path: /var/ossec/logs/ossec.log. Composite file in /home/camila/Escritorio/repo/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-manager_ossec.log.tmp 2022-02-11 15:07:55,740 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-manager and message: .Initializing FIM Integrity Synchronization check. (.+)$ 2022-02-11 15:07:57,242 - wazuh_testing - DEBUG - 2022/02/11 19:07:34 wazuh-modulesd:syscollector: INFO: Stop received for Syscollector. 2022-02-11 15:07:57,242 - wazuh_testing - DEBUG - 2022/02/11 19:07:34 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 12 disconnected. 2022-02-11 15:07:57,242 - wazuh_testing - DEBUG - 2022/02/11 19:07:34 wazuh-monitord: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:07:57,242 - wazuh_testing - DEBUG - 2022/02/11 19:07:34 wazuh-logcollector: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:07:57,243 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-remoted: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:07:57,243 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 36 disconnected. 2022-02-11 15:07:57,243 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 24 disconnected. 2022-02-11 15:07:57,243 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 18 disconnected. 2022-02-11 15:07:57,243 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 16 disconnected. 2022-02-11 15:07:57,244 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-syscheckd[17593] sig_op.c:49 at HandleSIG(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:07:57,244 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-analysisd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:07:57,244 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 35 disconnected. 2022-02-11 15:07:57,244 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 37 disconnected. 2022-02-11 15:07:57,244 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 34 disconnected. 2022-02-11 15:07:57,245 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 32 disconnected. 2022-02-11 15:07:57,245 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 31 disconnected. 2022-02-11 15:07:57,245 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 30 disconnected. 2022-02-11 15:07:57,245 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 28 disconnected. 2022-02-11 15:07:57,246 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 27 disconnected. 2022-02-11 15:07:57,246 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 29 disconnected. 2022-02-11 15:07:57,246 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 23 disconnected. 2022-02-11 15:07:57,246 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 26 disconnected. 2022-02-11 15:07:57,246 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 20 disconnected. 2022-02-11 15:07:57,247 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 21 disconnected. 2022-02-11 15:07:57,247 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 22 disconnected. 2022-02-11 15:07:57,247 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 6 disconnected. 2022-02-11 15:07:57,247 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 25 disconnected. 2022-02-11 15:07:57,247 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 11 disconnected. 2022-02-11 15:07:57,248 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 10 disconnected. 2022-02-11 15:07:57,248 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 13 disconnected. 2022-02-11 15:07:57,248 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 19 disconnected. 2022-02-11 15:07:57,248 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-execd: INFO: (1314): Shutdown received. Deleting responses. 2022-02-11 15:07:57,249 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-execd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:07:57,249 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:468 at handler(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:07:57,249 - wazuh_testing - DEBUG - 2022/02/11 19:07:36 wazuh-db[17459] wdb.c:872 at wdb_close_all(): DEBUG: Closing all databases... 2022-02-11 15:07:57,249 - wazuh_testing - DEBUG - 2022/02/11 19:07:36 wazuh-db[17459] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent 001 2022-02-11 15:07:57,250 - wazuh_testing - DEBUG - 2022/02/11 19:07:36 wazuh-db[17459] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent 000 2022-02-11 15:07:57,250 - wazuh_testing - DEBUG - 2022/02/11 19:07:36 wazuh-db[17459] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent mitre 2022-02-11 15:07:57,250 - wazuh_testing - DEBUG - 2022/02/11 19:07:36 wazuh-db[17459] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent global 2022-02-11 15:07:57,250 - wazuh_testing - DEBUG - 2022/02/11 19:07:36 wazuh-db[17459] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent tasks 2022-02-11 15:07:57,251 - wazuh_testing - DEBUG - 2022/02/11 19:07:36 wazuh-db[17459] main.c:231 at main(): DEBUG: Template file removed again: queue/db/.template.db 2022-02-11 15:07:57,251 - wazuh_testing - DEBUG - 2022/02/11 19:07:36 wazuh-authd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:07:57,251 - wazuh_testing - DEBUG - 2022/02/11 19:07:36 wazuh-authd: INFO: Exiting... 2022-02-11 15:07:57,252 - wazuh_testing - DEBUG - 2022/02/11 19:07:42 wazuh-db[18325] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 15:07:57,252 - wazuh_testing - DEBUG - 2022/02/11 19:07:42 wazuh-db[18325] main.c:101 at main(): DEBUG: Wazuh home directory: /var/ossec 2022-02-11 15:07:57,252 - wazuh_testing - DEBUG - 2022/02/11 19:07:42 wazuh-syscheckd[18329] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 15:07:57,253 - wazuh_testing - DEBUG - 2022/02/11 19:07:42 wazuh-syscheckd[18329] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 15:07:57,253 - wazuh_testing - DEBUG - 2022/02/11 19:07:42 wazuh-syscheckd[18329] syscheck-config.c:122 at organize_syscheck_dirs(): DEBUG: No directory entries to organize in syscheck configuration. 2022-02-11 15:07:57,253 - wazuh_testing - DEBUG - 2022/02/11 19:07:45 wazuh-csyslogd: INFO: Remote syslog server not configured. Clean exit. 2022-02-11 15:07:57,253 - wazuh_testing - DEBUG - 2022/02/11 19:07:45 wazuh-dbd: INFO: Database not configured. Clean exit. 2022-02-11 15:07:57,254 - wazuh_testing - DEBUG - 2022/02/11 19:07:45 wazuh-integratord: INFO: Remote integrations not configured. Clean exit. 2022-02-11 15:07:57,254 - wazuh_testing - DEBUG - 2022/02/11 19:07:45 wazuh-agentlessd: INFO: Not configured. Exiting. 2022-02-11 15:07:57,254 - wazuh_testing - DEBUG - 2022/02/11 19:07:45 wazuh-authd: INFO: Started (pid: 18395). 2022-02-11 15:07:57,254 - wazuh_testing - DEBUG - 2022/02/11 19:07:45 wazuh-authd: INFO: Accepting connections on port 1515. No password required. 2022-02-11 15:07:57,255 - wazuh_testing - DEBUG - 2022/02/11 19:07:45 wazuh-authd: INFO: Setting network timeout to 1.000000 sec. 2022-02-11 15:07:57,255 - wazuh_testing - DEBUG - 2022/02/11 19:07:45 wazuh-db[18406] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 15:07:57,256 - wazuh_testing - DEBUG - 2022/02/11 19:07:45 wazuh-db[18406] main.c:101 at main(): DEBUG: Wazuh home directory: /var/ossec 2022-02-11 15:07:57,256 - wazuh_testing - DEBUG - 2022/02/11 19:07:45 wazuh-db[18406] main.c:122 at main(): DEBUG: Template file removed: /var/ossec/queue/db/.template.db 2022-02-11 15:07:57,256 - wazuh_testing - DEBUG - 2022/02/11 19:07:45 wazuh-db[18406] main.c:178 at main(): INFO: Started (pid: 18408). 2022-02-11 15:07:57,256 - wazuh_testing - DEBUG - 2022/02/11 19:07:46 wazuh-execd: INFO: (1350): Active response disabled. 2022-02-11 15:07:57,257 - wazuh_testing - DEBUG - 2022/02/11 19:07:46 wazuh-execd: INFO: Started (pid: 18431). 2022-02-11 15:07:57,257 - wazuh_testing - DEBUG - 2022/02/11 19:07:47 wazuh-analysisd: INFO: Total rules enabled: '3882' 2022-02-11 15:07:57,257 - wazuh_testing - DEBUG - 2022/02/11 19:07:47 wazuh-analysisd: INFO: Started (pid: 18445). 2022-02-11 15:07:57,257 - wazuh_testing - DEBUG - 2022/02/11 19:07:47 wazuh-db[18406] main.c:290 at run_dealer(): DEBUG: New client connected (6). 2022-02-11 15:07:57,257 - wazuh_testing - DEBUG - 2022/02/11 19:07:47 wazuh-analysisd: INFO: (7200): Logtest started 2022-02-11 15:07:57,258 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 15:07:57,258 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 15:07:57,258 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] syscheck-config.c:122 at organize_syscheck_dirs(): DEBUG: No directory entries to organize in syscheck configuration. 2022-02-11 15:07:57,258 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] main.c:118 at main(): INFO: (6678): No directory provided for syscheck to monitor. 2022-02-11 15:07:57,259 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] main.c:136 at main(): INFO: (6001): File integrity monitoring disabled. 2022-02-11 15:07:57,259 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 rootcheck[18540] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled. 2022-02-11 15:07:57,259 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:07:57,259 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] syscom.c:123 at syscom_main(): DEBUG: (6284): Local requests thread ready. 2022-02-11 15:07:57,259 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] mq_op.c:47 at StartMQ(): DEBUG: Connected succesfully to 'queue/sockets/queue' after 0 attempts 2022-02-11 15:07:57,260 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] mq_op.c:48 at StartMQ(): DEBUG: (unix_domain) Maximum send buffer set to: '212992'. 2022-02-11 15:07:57,260 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] main.c:185 at main(): INFO: Started (pid: 18542). 2022-02-11 15:07:57,260 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] main.c:215 at main(): DEBUG: (6357): Maximum disk quota size limit configured to '1048576 KB'. 2022-02-11 15:07:57,260 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] run_check.c:194 at start_daemon(): DEBUG: (6320): Setting process priority to: '10' 2022-02-11 15:07:57,260 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:07:57,261 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] run_check.c:229 at start_daemon(): INFO: (6000): Starting daemon... 2022-02-11 15:07:57,261 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] run_check.c:232 at start_daemon(): INFO: (6010): File integrity monitoring scan frequency: 43200 seconds 2022-02-11 15:07:57,261 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 15:07:57,261 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644602868}} 2022-02-11 15:07:57,261 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 15:07:57,261 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-db[18406] main.c:290 at run_dealer(): DEBUG: New client connected (10). 2022-02-11 15:07:57,262 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 15:07:57,262 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 000 query: syscheck scan_info_update start_scan 1644602868 2022-02-11 15:07:57,262 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 15:07:57,262 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644602868}} 2022-02-11 15:07:57,262 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.000 sec (0.000 clock sec) 2022-02-11 15:07:57,262 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 0, path count: 0 2022-02-11 15:07:57,263 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-db[18406] main.c:290 at run_dealer(): DEBUG: New client connected (12). 2022-02-11 15:07:57,263 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:07:57,263 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 000 query: syscheck scan_info_update end_scan 1644602868 2022-02-11 15:07:57,263 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:07:57,263 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:07:57,263 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. 2022-02-11 15:07:57,264 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-manager and message: .Initializing FIM Integrity Synchronization check. (.+)$ 2022-02-11 15:07:58,244 - wazuh_testing - DEBUG - Cleaning temporal files... 2022-02-11 15:07:58,244 - wazuh_testing - DEBUG - Checking results... 2022-02-11 15:07:58,246 - wazuh_testing - DEBUG - Received from wazuh-manager the expected message: Sync interval is 300 seconds. -------------------------------Captured log call-------------------------------- DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:1005 Cleaning temporal files... DEBUG wazuh_testing:monitoring.py:994 Checking results... DEBUG wazuh_testing:monitoring.py:1000 Received from wazuh-manager the expected message: fim_file DEBUG wazuh_testing:monitoring.py:1000 Received from wazuh-agent1 the expected message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1644602826,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"2dbbef457fb1035aa4d3d07136ae76c39c48b00d"}} DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:1005 Cleaning temporal files... DEBUG wazuh_testing:monitoring.py:994 Checking results... DEBUG wazuh_testing:monitoring.py:1000 Received from wazuh-manager the expected message: Sync interval is 300 seconds.
Passed	test_synchronization.py::test_synchronization[testdir1-delete-wazuh-agent1]	39.76
------------------------------Captured stderr call------------------------------ 2022-02-11 15:08:12,752 - wazuh_testing - DEBUG - Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-11 15:08:12,754 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-11 15:08:12,754 - wazuh_testing - DEBUG - Starting file composer for wazuh-agent1 and path: /var/ossec/logs/ossec.log. Composite file in /home/camila/Escritorio/repo/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-agent1_ossec.log.tmp 2022-02-11 15:08:12,755 - wazuh_testing - DEBUG - Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-11 15:08:12,755 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-agent1 and message: .Sending integrity control message: (.+)$ 2022-02-11 15:08:12,756 - wazuh_testing - DEBUG - Starting file composer for wazuh-manager and path: /var/ossec/logs/ossec.log. Composite file in /home/camila/Escritorio/repo/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-manager_ossec.log.tmp 2022-02-11 15:08:12,756 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-11 15:08:12,758 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-manager and message: .Agent 001 query: (.+) save2 2022-02-11 15:08:14,256 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-agentd: ERROR: (1137): Lost connection with manager. Setting lock. 2022-02-11 15:08:14,257 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-agentd: INFO: Closing connection to server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 15:08:14,257 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 15:08:14,257 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-agentd: ERROR: (1216): Unable to connect to '172.17.0.2:1514/tcp': 'Connection refused'. 2022-02-11 15:08:14,257 - wazuh_testing - DEBUG - 2022/02/11 19:07:43 wazuh-syscheckd[23748] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 15:08:14,257 - wazuh_testing - DEBUG - 2022/02/11 19:07:43 wazuh-syscheckd[23748] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644602863}} 2022-02-11 15:08:14,257 - wazuh_testing - DEBUG - 2022/02/11 19:07:43 wazuh-syscheckd[23748] wait_op.c:101 at os_wait(): WARNING: Process locked due to agent is offline. Waiting for connection... 2022-02-11 15:08:14,257 - wazuh_testing - DEBUG - 2022/02/11 19:07:45 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 15:08:14,257 - wazuh_testing - DEBUG - 2022/02/11 19:07:45 wazuh-agentd: ERROR: (1216): Unable to connect to '172.17.0.2:1514/tcp': 'Connection refused'. 2022-02-11 15:08:14,257 - wazuh_testing - DEBUG - 2022/02/11 19:07:55 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 15:08:14,257 - wazuh_testing - DEBUG - 2022/02/11 19:07:55 wazuh-agentd: INFO: (4102): Connected to the server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 15:08:14,257 - wazuh_testing - DEBUG - 2022/02/11 19:07:55 wazuh-agentd: INFO: Server responded. Releasing lock. 2022-02-11 15:08:14,257 - wazuh_testing - DEBUG - 2022/02/11 19:07:58 wazuh-syscheckd[23748] wait_op.c:116 at os_wait(): INFO: Agent is now online. Process unlocked, continuing... 2022-02-11 15:08:14,257 - wazuh_testing - DEBUG - 2022/02/11 19:07:58 wazuh-syscheckd[23748] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 15:08:14,257 - wazuh_testing - DEBUG - 2022/02/11 19:07:58 wazuh-syscheckd[23748] fim_db.c:436 at fim_db_check_transaction(): DEBUG: Database transaction completed. 2022-02-11 15:08:14,257 - wazuh_testing - DEBUG - 2022/02/11 19:07:58 wazuh-syscheckd[23748] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-11 15:08:14,258 - wazuh_testing - DEBUG - 2022/02/11 19:07:58 wazuh-syscheckd[23748] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-11 15:08:14,258 - wazuh_testing - DEBUG - 2022/02/11 19:07:58 wazuh-syscheckd[23748] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"event","data":{"path":"/testdir1/tmpcc_tqg9q","version":2,"mode":"scheduled","type":"added","timestamp":1644602878,"attributes":{"type":"file","size":8,"perm":"rw-r--r--","uid":"0","gid":"0","user_name":"root","group_name":"root","inode":17314758,"mtime":1644602858,"hash_md5":"e770e54c4c42d3307c141c0c8948992a","hash_sha1":"9eab19985b11b15f91f936e463ea74f1dfe88e32","hash_sha256":"b1893f8d4b1596c20d6f83a784b2b0468c22fb83ce4ff2033ff86a37865d41d8","checksum":"a186cd744f1485e851c656efb673d004757437fa"}}} 2022-02-11 15:08:14,258 - wazuh_testing - DEBUG - 2022/02/11 19:07:58 wazuh-syscheckd[23748] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-11 15:08:14,258 - wazuh_testing - DEBUG - 2022/02/11 19:07:58 wazuh-syscheckd[23748] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-11 15:08:14,258 - wazuh_testing - DEBUG - 2022/02/11 19:07:59 wazuh-syscheckd[23748] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 15:08:14,259 - wazuh_testing - DEBUG - 2022/02/11 19:07:59 wazuh-syscheckd[23748] create_db.c:220 at fim_scan(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-11 15:08:14,259 - wazuh_testing - DEBUG - 2022/02/11 19:07:59 wazuh-syscheckd[23748] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 15:08:14,259 - wazuh_testing - DEBUG - 2022/02/11 19:07:59 wazuh-syscheckd[23748] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644602879}} 2022-02-11 15:08:14,259 - wazuh_testing - DEBUG - 2022/02/11 19:07:59 wazuh-syscheckd[23748] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 15.590 sec (0.563 clock sec) 2022-02-11 15:08:14,259 - wazuh_testing - DEBUG - 2022/02/11 19:07:34 wazuh-modulesd:syscollector: INFO: Stop received for Syscollector. 2022-02-11 15:08:14,259 - wazuh_testing - DEBUG - 2022/02/11 19:07:59 wazuh-syscheckd[23748] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1622, path count: 1628 2022-02-11 15:08:14,259 - wazuh_testing - DEBUG - 2022/02/11 19:08:04 wazuh-logcollector: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:08:14,259 - wazuh_testing - DEBUG - 2022/02/11 19:07:34 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 12 disconnected. 2022-02-11 15:08:14,259 - wazuh_testing - DEBUG - 2022/02/11 19:08:05 wazuh-syscheckd[23748] sig_op.c:49 at HandleSIG(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:08:14,260 - wazuh_testing - DEBUG - 2022/02/11 19:08:05 wazuh-agentd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:08:14,260 - wazuh_testing - DEBUG - 2022/02/11 19:07:34 wazuh-monitord: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:08:14,260 - wazuh_testing - DEBUG - 2022/02/11 19:08:05 wazuh-execd: INFO: (1314): Shutdown received. Deleting responses. 2022-02-11 15:08:14,260 - wazuh_testing - DEBUG - 2022/02/11 19:07:34 wazuh-logcollector: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:08:14,260 - wazuh_testing - DEBUG - 2022/02/11 19:08:05 wazuh-execd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:08:14,260 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-remoted: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:08:14,260 - wazuh_testing - DEBUG - 2022/02/11 19:08:05 wazuh-syscheckd[24445] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 15:08:14,260 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 36 disconnected. 2022-02-11 15:08:14,260 - wazuh_testing - DEBUG - 2022/02/11 19:08:05 wazuh-syscheckd[24445] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 15:08:14,260 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 24 disconnected. 2022-02-11 15:08:14,260 - wazuh_testing - DEBUG - 2022/02/11 19:08:05 wazuh-syscheckd[24445] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-11 15:08:14,260 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 18 disconnected. 2022-02-11 15:08:14,260 - wazuh_testing - DEBUG - 2022/02/11 19:08:05 wazuh-syscheckd[24445] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-11 15:08:14,261 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 16 disconnected. 2022-02-11 15:08:14,261 - wazuh_testing - DEBUG - 2022/02/11 19:08:05 wazuh-syscheckd[24445] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-11 15:08:14,261 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-syscheckd[17593] sig_op.c:49 at HandleSIG(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:08:14,261 - wazuh_testing - DEBUG - 2022/02/11 19:08:05 wazuh-syscheckd[24445] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-11 15:08:14,261 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-analysisd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:08:14,261 - wazuh_testing - DEBUG - 2022/02/11 19:08:05 wazuh-syscheckd[24445] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-11 15:08:14,261 - wazuh_testing - DEBUG - 2022/02/11 19:08:05 wazuh-syscheckd[24445] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$\|.swp$ 2022-02-11 15:08:14,261 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 35 disconnected. 2022-02-11 15:08:14,261 - wazuh_testing - DEBUG - 2022/02/11 19:08:05 wazuh-syscheckd[24445] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$\|.swp$ OK? 2022-02-11 15:08:14,261 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 37 disconnected. 2022-02-11 15:08:14,261 - wazuh_testing - DEBUG - 2022/02/11 19:08:05 wazuh-syscheckd[24445] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-11 15:08:14,261 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 34 disconnected. 2022-02-11 15:08:14,261 - wazuh_testing - DEBUG - 2022/02/11 19:08:05 wazuh-syscheckd[24445] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-11 15:08:14,262 - wazuh_testing - DEBUG - 2022/02/11 19:08:05 wazuh-syscheckd[24445] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 15:08:14,262 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 32 disconnected. 2022-02-11 15:08:14,262 - wazuh_testing - DEBUG - 2022/02/11 19:08:05 wazuh-syscheckd[24445] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 15:08:14,262 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 31 disconnected. 2022-02-11 15:08:14,262 - wazuh_testing - DEBUG - 2022/02/11 19:08:05 wazuh-syscheckd[24445] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 15:08:14,262 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 30 disconnected. 2022-02-11 15:08:14,262 - wazuh_testing - DEBUG - 2022/02/11 19:08:05 wazuh-syscheckd[24445] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 15:08:14,262 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 28 disconnected. 2022-02-11 15:08:14,262 - wazuh_testing - DEBUG - 2022/02/11 19:08:05 wazuh-syscheckd[24445] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 15:08:14,262 - wazuh_testing - DEBUG - 2022/02/11 19:08:05 wazuh-syscheckd[24445] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 15:08:14,262 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 27 disconnected. 2022-02-11 15:08:14,262 - wazuh_testing - DEBUG - 2022/02/11 19:08:05 wazuh-execd: INFO: Started (pid: 24458). 2022-02-11 15:08:14,262 - wazuh_testing - DEBUG - 2022/02/11 19:08:06 wazuh-agentd: INFO: (1410): Reading authentication keys file. 2022-02-11 15:08:14,263 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 29 disconnected. 2022-02-11 15:08:14,263 - wazuh_testing - DEBUG - 2022/02/11 19:08:06 wazuh-agentd: INFO: Using notify time: 10 and max time to reconnect: 60 2022-02-11 15:08:14,263 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 23 disconnected. 2022-02-11 15:08:14,263 - wazuh_testing - DEBUG - 2022/02/11 19:08:06 wazuh-agentd: INFO: Version detected -> Linux \|wazuh-agent1 \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64 [Debian GNU/Linux\|debian: 10 (buster)] - Wazuh v4.2.5 2022-02-11 15:08:14,263 - wazuh_testing - DEBUG - 2022/02/11 19:08:06 wazuh-agentd: INFO: Started (pid: 24469). 2022-02-11 15:08:14,263 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 26 disconnected. 2022-02-11 15:08:14,263 - wazuh_testing - DEBUG - 2022/02/11 19:08:06 wazuh-agentd: INFO: Server IP Address: wazuh-manager/172.17.0.2 2022-02-11 15:08:14,263 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 20 disconnected. 2022-02-11 15:08:14,263 - wazuh_testing - DEBUG - 2022/02/11 19:08:06 wazuh-agentd: INFO: Using AES as encryption method. 2022-02-11 15:08:14,263 - wazuh_testing - DEBUG - 2022/02/11 19:08:06 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 15:08:14,263 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 21 disconnected. 2022-02-11 15:08:14,263 - wazuh_testing - DEBUG - 2022/02/11 19:08:06 wazuh-agentd: INFO: (4102): Connected to the server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 15:08:14,264 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 22 disconnected. 2022-02-11 15:08:14,264 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 6 disconnected. 2022-02-11 15:08:14,264 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 15:08:14,264 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 25 disconnected. 2022-02-11 15:08:14,264 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 15:08:14,264 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 11 disconnected. 2022-02-11 15:08:14,264 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-11 15:08:14,264 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-11 15:08:14,264 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 10 disconnected. 2022-02-11 15:08:14,264 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-11 15:08:14,265 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 13 disconnected. 2022-02-11 15:08:14,265 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-11 15:08:14,265 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 19 disconnected. 2022-02-11 15:08:14,265 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-11 15:08:14,265 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$\|.swp$ 2022-02-11 15:08:14,265 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-execd: INFO: (1314): Shutdown received. Deleting responses. 2022-02-11 15:08:14,265 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$\|.swp$ OK? 2022-02-11 15:08:14,265 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-execd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:08:14,265 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-11 15:08:14,265 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-11 15:08:14,265 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:468 at handler(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:08:14,265 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 15:08:14,266 - wazuh_testing - DEBUG - 2022/02/11 19:07:36 wazuh-db[17459] wdb.c:872 at wdb_close_all(): DEBUG: Closing all databases... 2022-02-11 15:08:14,266 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 15:08:14,266 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 15:08:14,266 - wazuh_testing - DEBUG - 2022/02/11 19:07:36 wazuh-db[17459] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent 001 2022-02-11 15:08:14,266 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 15:08:14,266 - wazuh_testing - DEBUG - 2022/02/11 19:07:36 wazuh-db[17459] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent 000 2022-02-11 15:08:14,266 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 15:08:14,266 - wazuh_testing - DEBUG - 2022/02/11 19:07:36 wazuh-db[17459] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent mitre 2022-02-11 15:08:14,266 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 15:08:14,266 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 rootcheck[24481] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled. 2022-02-11 15:08:14,266 - wazuh_testing - DEBUG - 2022/02/11 19:07:36 wazuh-db[17459] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent global 2022-02-11 15:08:14,267 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:08:14,267 - wazuh_testing - DEBUG - 2022/02/11 19:07:36 wazuh-db[17459] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent tasks 2022-02-11 15:08:14,267 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] syscom.c:123 at syscom_main(): DEBUG: (6284): Local requests thread ready. 2022-02-11 15:08:14,267 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] mq_op.c:47 at StartMQ(): DEBUG: Connected succesfully to 'queue/sockets/queue' after 0 attempts 2022-02-11 15:08:14,267 - wazuh_testing - DEBUG - 2022/02/11 19:07:36 wazuh-db[17459] main.c:231 at main(): DEBUG: Template file removed again: queue/db/.template.db 2022-02-11 15:08:14,267 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] mq_op.c:48 at StartMQ(): DEBUG: (unix_domain) Maximum send buffer set to: '212992'. 2022-02-11 15:08:14,267 - wazuh_testing - DEBUG - 2022/02/11 19:07:36 wazuh-authd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:08:14,267 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] main.c:185 at main(): INFO: Started (pid: 24483). 2022-02-11 15:08:14,267 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] main.c:193 at main(): INFO: (6003): Monitoring path: '/bin', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 15:08:14,267 - wazuh_testing - DEBUG - 2022/02/11 19:07:36 wazuh-authd: INFO: Exiting... 2022-02-11 15:08:14,268 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] main.c:193 at main(): INFO: (6003): Monitoring path: '/boot', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 15:08:14,268 - wazuh_testing - DEBUG - 2022/02/11 19:07:42 wazuh-db[18325] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 15:08:14,268 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] main.c:193 at main(): INFO: (6003): Monitoring path: '/etc', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 15:08:14,268 - wazuh_testing - DEBUG - 2022/02/11 19:07:42 wazuh-db[18325] main.c:101 at main(): DEBUG: Wazuh home directory: /var/ossec 2022-02-11 15:08:14,268 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] main.c:193 at main(): INFO: (6003): Monitoring path: '/sbin', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 15:08:14,268 - wazuh_testing - DEBUG - 2022/02/11 19:07:42 wazuh-syscheckd[18329] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 15:08:14,268 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir1', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 15:08:14,268 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir2', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| realtime'. 2022-02-11 15:08:14,269 - wazuh_testing - DEBUG - 2022/02/11 19:07:42 wazuh-syscheckd[18329] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 15:08:14,269 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir3', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| whodata'. 2022-02-11 15:08:14,269 - wazuh_testing - DEBUG - 2022/02/11 19:07:42 wazuh-syscheckd[18329] syscheck-config.c:122 at organize_syscheck_dirs(): DEBUG: No directory entries to organize in syscheck configuration. 2022-02-11 15:08:14,269 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/bin', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 15:08:14,269 - wazuh_testing - DEBUG - 2022/02/11 19:07:45 wazuh-csyslogd: INFO: Remote syslog server not configured. Clean exit. 2022-02-11 15:08:14,269 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/sbin', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 15:08:14,269 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] main.c:215 at main(): DEBUG: (6357): Maximum disk quota size limit configured to '1048576 KB'. 2022-02-11 15:08:14,269 - wazuh_testing - DEBUG - 2022/02/11 19:07:45 wazuh-dbd: INFO: Database not configured. Clean exit. 2022-02-11 15:08:14,270 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mtab' 2022-02-11 15:08:14,270 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/hosts.deny' 2022-02-11 15:08:14,270 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mail/statistics' 2022-02-11 15:08:14,270 - wazuh_testing - DEBUG - 2022/02/11 19:07:45 wazuh-integratord: INFO: Remote integrations not configured. Clean exit. 2022-02-11 15:08:14,270 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random-seed' 2022-02-11 15:08:14,270 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random.seed' 2022-02-11 15:08:14,270 - wazuh_testing - DEBUG - 2022/02/11 19:07:45 wazuh-agentlessd: INFO: Not configured. Exiting. 2022-02-11 15:08:14,271 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/adjtime' 2022-02-11 15:08:14,271 - wazuh_testing - DEBUG - 2022/02/11 19:07:45 wazuh-authd: INFO: Started (pid: 18395). 2022-02-11 15:08:14,271 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/httpd/logs' 2022-02-11 15:08:14,271 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/utmpx' 2022-02-11 15:08:14,271 - wazuh_testing - DEBUG - 2022/02/11 19:07:45 wazuh-authd: INFO: Accepting connections on port 1515. No password required. 2022-02-11 15:08:14,271 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/wtmpx' 2022-02-11 15:08:14,271 - wazuh_testing - DEBUG - 2022/02/11 19:07:45 wazuh-authd: INFO: Setting network timeout to 1.000000 sec. 2022-02-11 15:08:14,271 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/cups/certs' 2022-02-11 15:08:14,271 - wazuh_testing - DEBUG - 2022/02/11 19:07:45 wazuh-db[18406] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 15:08:14,272 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/dumpdates' 2022-02-11 15:08:14,272 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/svc/volatile' 2022-02-11 15:08:14,272 - wazuh_testing - DEBUG - 2022/02/11 19:07:45 wazuh-db[18406] main.c:101 at main(): DEBUG: Wazuh home directory: /var/ossec 2022-02-11 15:08:14,272 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/security' 2022-02-11 15:08:14,272 - wazuh_testing - DEBUG - 2022/02/11 19:07:45 wazuh-db[18406] main.c:122 at main(): DEBUG: Template file removed: /var/ossec/queue/db/.template.db 2022-02-11 15:08:14,272 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/debug' 2022-02-11 15:08:14,272 - wazuh_testing - DEBUG - 2022/02/11 19:07:45 wazuh-db[18406] main.c:178 at main(): INFO: Started (pid: 18408). 2022-02-11 15:08:14,272 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/dev/core' 2022-02-11 15:08:14,272 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '^/proc' 2022-02-11 15:08:14,273 - wazuh_testing - DEBUG - 2022/02/11 19:07:46 wazuh-execd: INFO: (1350): Active response disabled. 2022-02-11 15:08:14,273 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '.log$\|.swp$' 2022-02-11 15:08:14,273 - wazuh_testing - DEBUG - 2022/02/11 19:07:46 wazuh-execd: INFO: Started (pid: 18431). 2022-02-11 15:08:14,273 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] main.c:235 at main(): INFO: (6004): No diff for file: '/etc/ssl/private.key' 2022-02-11 15:08:14,273 - wazuh_testing - DEBUG - 2022/02/11 19:07:47 wazuh-analysisd: INFO: Total rules enabled: '3882' 2022-02-11 15:08:14,273 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] main.c:245 at main(): INFO: (6016): Directory set for real time monitoring: '/testdir2'. 2022-02-11 15:08:14,273 - wazuh_testing - DEBUG - 2022/02/11 19:07:47 wazuh-analysisd: INFO: Started (pid: 18445). 2022-02-11 15:08:14,274 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] syscheck_audit.c:243 at audit_init(): WARNING: (6924): Who-data engine cannot start because Auditd is not running. 2022-02-11 15:08:14,274 - wazuh_testing - DEBUG - 2022/02/11 19:07:47 wazuh-db[18406] main.c:290 at run_dealer(): DEBUG: New client connected (6). 2022-02-11 15:08:14,274 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] main.c:264 at main(): WARNING: (6913): Who-data engine could not start. Switching who-data to real-time. 2022-02-11 15:08:14,274 - wazuh_testing - DEBUG - 2022/02/11 19:07:47 wazuh-analysisd: INFO: (7200): Logtest started 2022-02-11 15:08:14,274 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] run_check.c:194 at start_daemon(): DEBUG: (6320): Setting process priority to: '10' 2022-02-11 15:08:14,274 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:08:14,274 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 15:08:14,275 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] run_check.c:229 at start_daemon(): INFO: (6000): Starting daemon... 2022-02-11 15:08:14,275 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 15:08:14,275 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] syscheck-config.c:122 at organize_syscheck_dirs(): DEBUG: No directory entries to organize in syscheck configuration. 2022-02-11 15:08:14,275 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] run_check.c:232 at start_daemon(): INFO: (6010): File integrity monitoring scan frequency: 20 seconds 2022-02-11 15:08:14,275 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] main.c:118 at main(): INFO: (6678): No directory provided for syscheck to monitor. 2022-02-11 15:08:14,276 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 15:08:14,276 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] main.c:136 at main(): INFO: (6001): File integrity monitoring disabled. 2022-02-11 15:08:14,276 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644602887}} 2022-02-11 15:08:14,276 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 rootcheck[18540] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled. 2022-02-11 15:08:14,276 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 15:08:14,276 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:08:14,277 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-11 15:08:14,277 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] syscom.c:123 at syscom_main(): DEBUG: (6284): Local requests thread ready. 2022-02-11 15:08:14,277 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-11 15:08:14,277 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] mq_op.c:47 at StartMQ(): DEBUG: Connected succesfully to 'queue/sockets/queue' after 0 attempts 2022-02-11 15:08:14,277 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-11 15:08:14,278 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] mq_op.c:48 at StartMQ(): DEBUG: (unix_domain) Maximum send buffer set to: '212992'. 2022-02-11 15:08:14,278 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-11 15:08:14,278 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] main.c:185 at main(): INFO: Started (pid: 18542). 2022-02-11 15:08:14,278 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 15:08:14,278 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 15:08:14,278 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] main.c:215 at main(): DEBUG: (6357): Maximum disk quota size limit configured to '1048576 KB'. 2022-02-11 15:08:14,279 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644602887}} 2022-02-11 15:08:14,279 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] run_check.c:194 at start_daemon(): DEBUG: (6320): Setting process priority to: '10' 2022-02-11 15:08:14,279 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.393 sec (0.389 clock sec) 2022-02-11 15:08:14,279 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:08:14,279 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1621, path count: 1627 2022-02-11 15:08:14,279 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] run_check.c:229 at start_daemon(): INFO: (6000): Starting daemon... 2022-02-11 15:08:14,279 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:08:14,280 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:08:14,280 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] run_check.c:232 at start_daemon(): INFO: (6010): File integrity monitoring scan frequency: 43200 seconds 2022-02-11 15:08:14,280 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] run_check.c:387 at fim_run_realtime(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-11 15:08:14,280 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 15:08:14,280 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] run_check.c:543 at log_realtime_status(): INFO: (6012): Real-time file integrity monitoring started. 2022-02-11 15:08:14,280 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644602868}} 2022-02-11 15:08:14,281 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:08:14,281 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. 2022-02-11 15:08:14,281 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 15:08:14,281 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] run_check.c:568 at symlink_checker_thread(): DEBUG: (6033): Starting symbolic link updater. Interval '600'. 2022-02-11 15:08:14,281 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-db[18406] main.c:290 at run_dealer(): DEBUG: New client connected (10). 2022-02-11 15:08:14,281 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] run_check.c:82 at fim_send_sync_msg(): DEBUG: (6317): Sending integrity control message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1644602887,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"da739814f627066b1cd796980bc8358da55cbb0d"}} 2022-02-11 15:08:14,282 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 15:08:14,282 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 000 query: syscheck scan_info_update start_scan 1644602868 2022-02-11 15:08:14,282 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-agent1 and message: .Sending integrity control message: (.+)$ 2022-02-11 15:08:14,282 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 15:08:14,283 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644602868}} 2022-02-11 15:08:14,283 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.000 sec (0.000 clock sec) 2022-02-11 15:08:14,283 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 0, path count: 0 2022-02-11 15:08:14,284 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-db[18406] main.c:290 at run_dealer(): DEBUG: New client connected (12). 2022-02-11 15:08:14,284 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:08:14,284 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 000 query: syscheck scan_info_update end_scan 1644602868 2022-02-11 15:08:14,285 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:08:14,285 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:08:14,285 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. 2022-02-11 15:08:14,285 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] run_check.c:568 at symlink_checker_thread(): DEBUG: (6033): Starting symbolic link updater. Interval '600'. 2022-02-11 15:08:14,286 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] run_check.c:82 at fim_send_sync_msg(): DEBUG: (6317): Sending integrity control message: {"component":"fim_file","type":"integrity_clear","data":{"id":1644602868,"version":2}} 2022-02-11 15:08:14,286 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] fim_sync.c:70 at fim_run_integrity(): DEBUG: Finished calculating FIM integrity. Time: 0.000 seconds. 2022-02-11 15:08:14,287 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-db[18406] main.c:290 at run_dealer(): DEBUG: New client connected (13). 2022-02-11 15:08:14,287 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 000 query: fim_file integrity_clear {"id":1644602868,"version":2} 2022-02-11 15:08:14,287 - wazuh_testing - DEBUG - 2022/02/11 19:07:49 wazuh-remoted: INFO: Started (pid: 18560). Listening on port 1514/TCP (secure). 2022-02-11 15:08:14,287 - wazuh_testing - DEBUG - 2022/02/11 19:07:49 wazuh-db[18406] main.c:290 at run_dealer(): DEBUG: New client connected (11). 2022-02-11 15:08:14,288 - wazuh_testing - DEBUG - 2022/02/11 19:07:49 wazuh-db[18406] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: reset-agents-connection synced 2022-02-11 15:08:14,288 - wazuh_testing - DEBUG - 2022/02/11 19:07:49 wazuh-db[18406] main.c:352 at run_worker(): DEBUG: Client 11 disconnected. 2022-02-11 15:08:14,288 - wazuh_testing - DEBUG - 2022/02/11 19:07:49 wazuh-remoted: INFO: (1410): Reading authentication keys file. 2022-02-11 15:08:14,289 - wazuh_testing - DEBUG - 2022/02/11 19:07:50 wazuh-logcollector: INFO: (1950): Analyzing file: '/var/ossec/logs/active-responses.log'. 2022-02-11 15:08:14,289 - wazuh_testing - DEBUG - 2022/02/11 19:07:50 wazuh-logcollector: INFO: (1950): Analyzing file: '/var/log/dpkg.log'. 2022-02-11 15:08:14,289 - wazuh_testing - DEBUG - 2022/02/11 19:07:50 wazuh-logcollector: INFO: Started (pid: 18592). 2022-02-11 15:08:14,290 - wazuh_testing - DEBUG - 2022/02/11 19:07:51 wazuh-monitord: INFO: Started (pid: 18611). 2022-02-11 15:08:14,290 - wazuh_testing - DEBUG - 2022/02/11 19:07:52 wazuh-modulesd: INFO: Started (pid: 18627). 2022-02-11 15:08:14,290 - wazuh_testing - DEBUG - 2022/02/11 19:07:52 wazuh-modulesd:agent-upgrade: INFO: (8153): Module Agent Upgrade started. 2022-02-11 15:08:14,291 - wazuh_testing - DEBUG - 2022/02/11 19:07:52 wazuh-modulesd:ciscat: INFO: Module disabled. Exiting... 2022-02-11 15:08:14,291 - wazuh_testing - DEBUG - 2022/02/11 19:07:52 wazuh-modulesd:osquery: INFO: Module disabled. Exiting... 2022-02-11 15:08:14,291 - wazuh_testing - DEBUG - 2022/02/11 19:07:52 wazuh-modulesd:syscollector: INFO: Module disabled. Exiting... 2022-02-11 15:08:14,292 - wazuh_testing - DEBUG - 2022/02/11 19:07:52 sca: INFO: Module disabled. Exiting. 2022-02-11 15:08:14,292 - wazuh_testing - DEBUG - 2022/02/11 19:07:52 wazuh-modulesd:database: INFO: Module started. 2022-02-11 15:08:14,293 - wazuh_testing - DEBUG - 2022/02/11 19:07:52 wazuh-modulesd:download: INFO: Module started. 2022-02-11 15:08:14,293 - wazuh_testing - DEBUG - 2022/02/11 19:07:52 wazuh-modulesd:control: INFO: Starting control thread. 2022-02-11 15:08:14,294 - wazuh_testing - DEBUG - 2022/02/11 19:07:52 wazuh-db[18406] main.c:290 at run_dealer(): DEBUG: New client connected (11). 2022-02-11 15:08:14,294 - wazuh_testing - DEBUG - 2022/02/11 19:07:52 wazuh-db[18406] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-name {"id":0,"name":"wazuh-manager"} 2022-02-11 15:08:14,295 - wazuh_testing - DEBUG - 2022/02/11 19:07:52 wazuh-modulesd:task-manager: INFO: (8200): Module Task Manager started. 2022-02-11 15:08:14,295 - wazuh_testing - DEBUG - 2022/02/11 19:07:52 wazuh-db[18406] main.c:290 at run_dealer(): DEBUG: New client connected (16). 2022-02-11 15:08:14,295 - wazuh_testing - DEBUG - 2022/02/11 19:07:52 wazuh-db[18406] wdb_parser.c:928 at wdb_parse(): DEBUG: Task query: set_timeout {"now":1644602872,"interval":900} 2022-02-11 15:08:14,296 - wazuh_testing - DEBUG - 2022/02/11 19:07:52 wazuh-db[18406] main.c:352 at run_worker(): DEBUG: Client 16 disconnected. 2022-02-11 15:08:14,296 - wazuh_testing - DEBUG - 2022/02/11 19:07:52 wazuh-db[18406] main.c:290 at run_dealer(): DEBUG: New client connected (19). 2022-02-11 15:08:14,297 - wazuh_testing - DEBUG - 2022/02/11 19:07:52 wazuh-db[18406] wdb_parser.c:928 at wdb_parse(): DEBUG: Task query: delete_old {"timestamp":1643998072} 2022-02-11 15:08:14,297 - wazuh_testing - DEBUG - 2022/02/11 19:07:52 wazuh-db[18406] main.c:352 at run_worker(): DEBUG: Client 19 disconnected. 2022-02-11 15:08:14,297 - wazuh_testing - DEBUG - 2022/02/11 19:07:52 wazuh-db[18406] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":0,"version":"Wazuh v4.2.5","manager_host":"wazuh-manager","node_name":"wazuh-master","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux \|wazuh-manager \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64","os_arch":"x86_64"} 2022-02-11 15:08:14,298 - wazuh_testing - DEBUG - 2022/02/11 19:07:52 wazuh-db[18406] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: insert-agent {"id":1,"name":"wazuh-agent1","register_ip":"any","internal_key":"1111111111111111111111111111111111111111111111111111111111111111","group":"default","date_add":0} 2022-02-11 15:08:14,298 - wazuh_testing - DEBUG - 2022/02/11 19:07:52 wazuh-db[18406] wdb_global.c:89 at wdb_global_insert_agent(): DEBUG: SQLite: UNIQUE constraint failed: agent.id 2022-02-11 15:08:14,299 - wazuh_testing - DEBUG - 2022/02/11 19:07:52 wazuh-db[18406] wdb_parser.c:4784 at wdb_parse_global_insert_agent(): DEBUG: Global DB Cannot execute SQL query; err database queue/db/global.db: UNIQUE constraint failed: agent.id 2022-02-11 15:08:14,299 - wazuh_testing - DEBUG - 2022/02/11 19:07:52 wazuh-db[18406] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-group {"id":1,"group":"default"} 2022-02-11 15:08:14,299 - wazuh_testing - DEBUG - 2022/02/11 19:07:52 wazuh-db[18406] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: delete-agent-belong 1 2022-02-11 15:08:14,300 - wazuh_testing - DEBUG - 2022/02/11 19:07:52 wazuh-db[18406] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: find-group default 2022-02-11 15:08:14,300 - wazuh_testing - DEBUG - 2022/02/11 19:07:52 wazuh-db[18406] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: insert-agent-belong {"id_group":1,"id_agent":1} 2022-02-11 15:08:14,300 - wazuh_testing - DEBUG - 2022/02/11 19:07:52 wazuh-db[18406] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: get-all-agents last_id 0 2022-02-11 15:08:14,301 - wazuh_testing - DEBUG - 2022/02/11 19:07:52 wazuh-db[18406] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: select-groups 2022-02-11 15:08:14,301 - wazuh_testing - DEBUG - 2022/02/11 19:07:52 wazuh-db[18406] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: find-group default 2022-02-11 15:08:14,302 - wazuh_testing - DEBUG - 2022/02/11 19:07:52 wazuh-db[18406] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: get-all-agents last_id 0 2022-02-11 15:08:14,302 - wazuh_testing - DEBUG - 2022/02/11 19:07:52 wazuh-db[18406] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: select-agent-group 1 2022-02-11 15:08:14,303 - wazuh_testing - DEBUG - 2022/02/11 19:07:52 wazuh-db[18406] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: delete-agent-belong 1 2022-02-11 15:08:14,303 - wazuh_testing - DEBUG - 2022/02/11 19:07:52 wazuh-db[18406] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: find-group default 2022-02-11 15:08:14,304 - wazuh_testing - DEBUG - 2022/02/11 19:07:52 wazuh-db[18406] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: insert-agent-belong {"id_group":1,"id_agent":1} 2022-02-11 15:08:14,304 - wazuh_testing - DEBUG - 2022/02/11 19:07:52 wazuh-db[18406] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: select-agent-name 1 2022-02-11 15:08:14,304 - wazuh_testing - DEBUG - 2022/02/11 19:07:52 wazuh-db[18406] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: select-agent-name 1 2022-02-11 15:08:14,305 - wazuh_testing - DEBUG - 2022/02/11 19:07:55 wazuh-db[18406] main.c:290 at run_dealer(): DEBUG: New client connected (16). 2022-02-11 15:08:14,305 - wazuh_testing - DEBUG - 2022/02/11 19:07:55 wazuh-db[18406] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-keepalive {"id":1,"connection_status":"pending","sync_status":"synced"} 2022-02-11 15:08:14,306 - wazuh_testing - DEBUG - 2022/02/11 19:07:55 wazuh-db[18406] main.c:290 at run_dealer(): DEBUG: New client connected (18). 2022-02-11 15:08:14,307 - wazuh_testing - DEBUG - 2022/02/11 19:07:55 wazuh-db[18406] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux \|wazuh-agent1 \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64","os_arch":"x86_64"} 2022-02-11 15:08:14,307 - wazuh_testing - DEBUG - 2022/02/11 19:07:58 wazuh-db[18406] wdb.c:918 at wdb_commit_old(): DEBUG: Agent 'mitre' database commited. Time: 0.020 ms. 2022-02-11 15:08:14,308 - wazuh_testing - DEBUG - 2022/02/11 19:07:58 wazuh-db[18406] main.c:290 at run_dealer(): DEBUG: New client connected (19). 2022-02-11 15:08:14,308 - wazuh_testing - DEBUG - 2022/02/11 19:07:58 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1644602863 2022-02-11 15:08:14,309 - wazuh_testing - DEBUG - 2022/02/11 19:07:58 wazuh-db[18406] main.c:290 at run_dealer(): DEBUG: New client connected (20). 2022-02-11 15:08:14,309 - wazuh_testing - DEBUG - 2022/02/11 19:07:58 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck save2 {"path":"/testdir1/tmpcc_tqg9q","version":2,"timestamp":1644602878,"attributes":{"type":"file","size":8,"perm":"rw-r--r--","uid":"0","gid":"0","user_name":"root","group_name":"root","inode":17314758,"mtime":1644602858,"hash_md5":"e770e54c4c42d3307c141c0c8948992a","hash_sha1":"9eab19985b11b15f91f936e463ea74f1dfe88e32","hash_sha256":"b1893f8d4b1596c20d6f83a784b2b0468c22fb83ce4ff2033ff86a37865d41d8","checksum":"a186cd744f1485e851c656efb673d004757437fa"}} 2022-02-11 15:08:14,310 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-manager and message: .Agent 001 query: (.+) save2 2022-02-11 15:08:15,262 - wazuh_testing - DEBUG - Cleaning temporal files... 2022-02-11 15:08:15,263 - wazuh_testing - DEBUG - Checking results... 2022-02-11 15:08:15,264 - wazuh_testing - DEBUG - Received from wazuh-agent1 the expected message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1644602887,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"da739814f627066b1cd796980bc8358da55cbb0d"}} 2022-02-11 15:08:15,264 - wazuh_testing - DEBUG - Received from wazuh-manager the expected message: syscheck 2022-02-11 15:08:30,269 - wazuh_testing - DEBUG - Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-11 15:08:30,270 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-11 15:08:30,271 - wazuh_testing - DEBUG - Starting file composer for wazuh-agent1 and path: /var/ossec/logs/ossec.log. Composite file in /home/camila/Escritorio/repo/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-agent1_ossec.log.tmp 2022-02-11 15:08:30,272 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-agent1 and message: .Initializing FIM Integrity Synchronization check. (.+)$ 2022-02-11 15:08:31,773 - wazuh_testing - DEBUG - 2022/02/11 19:08:20 wazuh-logcollector: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:08:31,774 - wazuh_testing - DEBUG - 2022/02/11 19:08:20 wazuh-syscheckd[24481] sig_op.c:49 at HandleSIG(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:08:31,774 - wazuh_testing - DEBUG - 2022/02/11 19:08:20 wazuh-agentd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:08:31,774 - wazuh_testing - DEBUG - 2022/02/11 19:08:20 wazuh-execd: INFO: (1314): Shutdown received. Deleting responses. 2022-02-11 15:08:31,774 - wazuh_testing - DEBUG - 2022/02/11 19:08:20 wazuh-execd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:08:31,775 - wazuh_testing - DEBUG - 2022/02/11 19:08:23 wazuh-syscheckd[24907] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 15:08:31,775 - wazuh_testing - DEBUG - 2022/02/11 19:08:23 wazuh-syscheckd[24907] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 15:08:31,775 - wazuh_testing - DEBUG - 2022/02/11 19:08:23 wazuh-syscheckd[24907] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir1' due to [(2)-(No such file or directory)]. 2022-02-11 15:08:31,775 - wazuh_testing - DEBUG - 2022/02/11 19:08:23 wazuh-syscheckd[24907] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-11 15:08:31,775 - wazuh_testing - DEBUG - 2022/02/11 19:08:23 wazuh-syscheckd[24907] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-11 15:08:31,776 - wazuh_testing - DEBUG - 2022/02/11 19:08:23 wazuh-syscheckd[24907] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-11 15:08:31,776 - wazuh_testing - DEBUG - 2022/02/11 19:08:23 wazuh-syscheckd[24907] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-11 15:08:31,776 - wazuh_testing - DEBUG - 2022/02/11 19:08:23 wazuh-syscheckd[24907] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-11 15:08:31,776 - wazuh_testing - DEBUG - 2022/02/11 19:08:23 wazuh-syscheckd[24907] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$\|.swp$ 2022-02-11 15:08:31,777 - wazuh_testing - DEBUG - 2022/02/11 19:08:23 wazuh-syscheckd[24907] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$\|.swp$ OK? 2022-02-11 15:08:31,777 - wazuh_testing - DEBUG - 2022/02/11 19:08:23 wazuh-syscheckd[24907] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-11 15:08:31,777 - wazuh_testing - DEBUG - 2022/02/11 19:08:23 wazuh-syscheckd[24907] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-11 15:08:31,777 - wazuh_testing - DEBUG - 2022/02/11 19:08:23 wazuh-syscheckd[24907] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 15:08:31,777 - wazuh_testing - DEBUG - 2022/02/11 19:08:23 wazuh-syscheckd[24907] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 15:08:31,778 - wazuh_testing - DEBUG - 2022/02/11 19:08:23 wazuh-syscheckd[24907] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 15:08:31,778 - wazuh_testing - DEBUG - 2022/02/11 19:08:23 wazuh-syscheckd[24907] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 15:08:31,778 - wazuh_testing - DEBUG - 2022/02/11 19:08:23 wazuh-syscheckd[24907] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 15:08:31,778 - wazuh_testing - DEBUG - 2022/02/11 19:08:23 wazuh-syscheckd[24907] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 15:08:31,778 - wazuh_testing - DEBUG - 2022/02/11 19:08:23 wazuh-execd: INFO: Started (pid: 24921). 2022-02-11 15:08:31,779 - wazuh_testing - DEBUG - 2022/02/11 19:08:24 wazuh-agentd: INFO: (1410): Reading authentication keys file. 2022-02-11 15:08:31,779 - wazuh_testing - DEBUG - 2022/02/11 19:08:24 wazuh-agentd: INFO: Using notify time: 10 and max time to reconnect: 60 2022-02-11 15:08:31,779 - wazuh_testing - DEBUG - 2022/02/11 19:08:24 wazuh-agentd: INFO: Version detected -> Linux \|wazuh-agent1 \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64 [Debian GNU/Linux\|debian: 10 (buster)] - Wazuh v4.2.5 2022-02-11 15:08:31,779 - wazuh_testing - DEBUG - 2022/02/11 19:08:24 wazuh-agentd: INFO: Started (pid: 24931). 2022-02-11 15:08:31,780 - wazuh_testing - DEBUG - 2022/02/11 19:08:24 wazuh-agentd: INFO: Server IP Address: wazuh-manager/172.17.0.2 2022-02-11 15:08:31,780 - wazuh_testing - DEBUG - 2022/02/11 19:08:24 wazuh-agentd: INFO: Using AES as encryption method. 2022-02-11 15:08:31,780 - wazuh_testing - DEBUG - 2022/02/11 19:08:24 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 15:08:31,780 - wazuh_testing - DEBUG - 2022/02/11 19:08:24 wazuh-agentd: INFO: (4102): Connected to the server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 15:08:31,781 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 15:08:31,781 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 15:08:31,781 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir1' due to [(2)-(No such file or directory)]. 2022-02-11 15:08:31,781 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-11 15:08:31,782 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-11 15:08:31,782 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-11 15:08:31,782 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-11 15:08:31,782 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-11 15:08:31,783 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$\|.swp$ 2022-02-11 15:08:31,784 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$\|.swp$ OK? 2022-02-11 15:08:31,784 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-11 15:08:31,784 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-11 15:08:31,784 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 15:08:31,785 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 15:08:31,785 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 15:08:31,785 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 15:08:31,786 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 15:08:31,786 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 15:08:31,786 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 rootcheck[24943] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled. 2022-02-11 15:08:31,786 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:08:31,786 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] syscom.c:123 at syscom_main(): DEBUG: (6284): Local requests thread ready. 2022-02-11 15:08:31,787 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] mq_op.c:47 at StartMQ(): DEBUG: Connected succesfully to 'queue/sockets/queue' after 0 attempts 2022-02-11 15:08:31,787 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] mq_op.c:48 at StartMQ(): DEBUG: (unix_domain) Maximum send buffer set to: '212992'. 2022-02-11 15:08:31,787 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:185 at main(): INFO: Started (pid: 24945). 2022-02-11 15:08:31,787 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:193 at main(): INFO: (6003): Monitoring path: '/bin', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 15:08:31,788 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:193 at main(): INFO: (6003): Monitoring path: '/boot', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 15:08:31,788 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:193 at main(): INFO: (6003): Monitoring path: '/etc', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 15:08:31,788 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:193 at main(): INFO: (6003): Monitoring path: '/sbin', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 15:08:31,788 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir1', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 15:08:31,789 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir2', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| realtime'. 2022-02-11 15:08:31,789 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir3', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| whodata'. 2022-02-11 15:08:31,789 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/bin', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 15:08:31,789 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/sbin', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 15:08:31,790 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:215 at main(): DEBUG: (6357): Maximum disk quota size limit configured to '1048576 KB'. 2022-02-11 15:08:31,790 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mtab' 2022-02-11 15:08:31,790 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/hosts.deny' 2022-02-11 15:08:31,790 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mail/statistics' 2022-02-11 15:08:31,791 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random-seed' 2022-02-11 15:08:31,791 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random.seed' 2022-02-11 15:08:31,791 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/adjtime' 2022-02-11 15:08:31,791 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/httpd/logs' 2022-02-11 15:08:31,791 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/utmpx' 2022-02-11 15:08:31,792 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/wtmpx' 2022-02-11 15:08:31,792 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/cups/certs' 2022-02-11 15:08:31,792 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/dumpdates' 2022-02-11 15:08:31,792 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/svc/volatile' 2022-02-11 15:08:31,792 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/security' 2022-02-11 15:08:31,792 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/debug' 2022-02-11 15:08:31,792 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/dev/core' 2022-02-11 15:08:31,793 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '^/proc' 2022-02-11 15:08:31,793 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '.log$\|.swp$' 2022-02-11 15:08:31,793 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:235 at main(): INFO: (6004): No diff for file: '/etc/ssl/private.key' 2022-02-11 15:08:31,793 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:245 at main(): INFO: (6016): Directory set for real time monitoring: '/testdir2'. 2022-02-11 15:08:31,793 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] syscheck_audit.c:243 at audit_init(): WARNING: (6924): Who-data engine cannot start because Auditd is not running. 2022-02-11 15:08:31,793 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:264 at main(): WARNING: (6913): Who-data engine could not start. Switching who-data to real-time. 2022-02-11 15:08:31,794 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] run_check.c:194 at start_daemon(): DEBUG: (6320): Setting process priority to: '10' 2022-02-11 15:08:31,794 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:08:31,794 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] run_check.c:229 at start_daemon(): INFO: (6000): Starting daemon... 2022-02-11 15:08:31,794 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] run_check.c:232 at start_daemon(): INFO: (6010): File integrity monitoring scan frequency: 20 seconds 2022-02-11 15:08:31,794 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 15:08:31,794 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644602905}} 2022-02-11 15:08:31,795 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 15:08:31,795 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-11 15:08:31,795 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-11 15:08:31,795 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-11 15:08:31,795 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-11 15:08:31,795 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 15:08:31,795 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 15:08:31,795 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644602905}} 2022-02-11 15:08:31,796 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.341 sec (0.339 clock sec) 2022-02-11 15:08:31,796 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1620, path count: 1626 2022-02-11 15:08:31,796 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:08:31,796 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:08:31,796 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:08:31,796 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. 2022-02-11 15:08:31,797 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-agent1 and message: .Initializing FIM Integrity Synchronization check. (.+)$ 2022-02-11 15:08:32,776 - wazuh_testing - DEBUG - Cleaning temporal files... 2022-02-11 15:08:32,776 - wazuh_testing - DEBUG - Checking results... 2022-02-11 15:08:32,777 - wazuh_testing - DEBUG - Received from wazuh-agent1 the expected message: Sync interval is 300 seconds. -------------------------------Captured log call-------------------------------- DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:1005 Cleaning temporal files... DEBUG wazuh_testing:monitoring.py:994 Checking results... DEBUG wazuh_testing:monitoring.py:1000 Received from wazuh-agent1 the expected message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1644602887,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"da739814f627066b1cd796980bc8358da55cbb0d"}} DEBUG wazuh_testing:monitoring.py:1000 Received from wazuh-manager the expected message: syscheck DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:1005 Cleaning temporal files... DEBUG wazuh_testing:monitoring.py:994 Checking results... DEBUG wazuh_testing:monitoring.py:1000 Received from wazuh-agent1 the expected message: Sync interval is 300 seconds.
Passed	test_synchronization.py::test_synchronization[testdir1-delete-wazuh-manager]	47.73
------------------------------Captured stderr call------------------------------ 2022-02-11 15:08:50,717 - wazuh_testing - DEBUG - Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-11 15:08:50,719 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-11 15:08:50,719 - wazuh_testing - DEBUG - Starting file composer for wazuh-agent1 and path: /var/ossec/logs/ossec.log. Composite file in /home/camila/Escritorio/repo/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-agent1_ossec.log.tmp 2022-02-11 15:08:50,720 - wazuh_testing - DEBUG - Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-11 15:08:50,720 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-agent1 and message: .Sending integrity control message: (.+)$ 2022-02-11 15:08:50,721 - wazuh_testing - DEBUG - Starting file composer for wazuh-manager and path: /var/ossec/logs/ossec.log. Composite file in /home/camila/Escritorio/repo/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-manager_ossec.log.tmp 2022-02-11 15:08:50,721 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-11 15:08:50,723 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-manager and message: .Agent 001 query: (.+) save2 2022-02-11 15:08:52,222 - wazuh_testing - DEBUG - 2022/02/11 19:08:20 wazuh-logcollector: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:08:52,222 - wazuh_testing - DEBUG - 2022/02/11 19:08:20 wazuh-syscheckd[24481] sig_op.c:49 at HandleSIG(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:08:52,223 - wazuh_testing - DEBUG - 2022/02/11 19:08:20 wazuh-agentd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:08:52,223 - wazuh_testing - DEBUG - 2022/02/11 19:08:20 wazuh-execd: INFO: (1314): Shutdown received. Deleting responses. 2022-02-11 15:08:52,223 - wazuh_testing - DEBUG - 2022/02/11 19:08:20 wazuh-execd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:08:52,223 - wazuh_testing - DEBUG - 2022/02/11 19:08:23 wazuh-syscheckd[24907] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 15:08:52,224 - wazuh_testing - DEBUG - 2022/02/11 19:08:23 wazuh-syscheckd[24907] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 15:08:52,224 - wazuh_testing - DEBUG - 2022/02/11 19:08:23 wazuh-syscheckd[24907] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir1' due to [(2)-(No such file or directory)]. 2022-02-11 15:08:52,224 - wazuh_testing - DEBUG - 2022/02/11 19:08:23 wazuh-syscheckd[24907] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-11 15:08:52,224 - wazuh_testing - DEBUG - 2022/02/11 19:08:23 wazuh-syscheckd[24907] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-11 15:08:52,224 - wazuh_testing - DEBUG - 2022/02/11 19:08:23 wazuh-syscheckd[24907] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-11 15:08:52,225 - wazuh_testing - DEBUG - 2022/02/11 19:08:23 wazuh-syscheckd[24907] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-11 15:08:52,225 - wazuh_testing - DEBUG - 2022/02/11 19:08:23 wazuh-syscheckd[24907] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-11 15:08:52,225 - wazuh_testing - DEBUG - 2022/02/11 19:08:23 wazuh-syscheckd[24907] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$\|.swp$ 2022-02-11 15:08:52,225 - wazuh_testing - DEBUG - 2022/02/11 19:08:23 wazuh-syscheckd[24907] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$\|.swp$ OK? 2022-02-11 15:08:52,225 - wazuh_testing - DEBUG - 2022/02/11 19:08:20 wazuh-db[18406] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-connection-status {"id":1,"connection_status":"disconnected","sync_status":"synced"} 2022-02-11 15:08:52,226 - wazuh_testing - DEBUG - 2022/02/11 19:08:23 wazuh-syscheckd[24907] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-11 15:08:52,226 - wazuh_testing - DEBUG - 2022/02/11 19:08:20 wazuh-db[18406] main.c:290 at run_dealer(): DEBUG: New client connected (35). 2022-02-11 15:08:52,226 - wazuh_testing - DEBUG - 2022/02/11 19:08:23 wazuh-syscheckd[24907] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-11 15:08:52,226 - wazuh_testing - DEBUG - 2022/02/11 19:08:20 wazuh-db[18406] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: get-labels 1 2022-02-11 15:08:52,226 - wazuh_testing - DEBUG - 2022/02/11 19:08:23 wazuh-syscheckd[24907] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 15:08:52,226 - wazuh_testing - DEBUG - 2022/02/11 19:08:22 wazuh-db[18406] main.c:290 at run_dealer(): DEBUG: New client connected (36). 2022-02-11 15:08:52,226 - wazuh_testing - DEBUG - 2022/02/11 19:08:22 wazuh-db[18406] wdb_parser.c:928 at wdb_parse(): DEBUG: Task query: upgrade_cancel_tasks {"node":"wazuh-master"} 2022-02-11 15:08:52,226 - wazuh_testing - DEBUG - 2022/02/11 19:08:23 wazuh-syscheckd[24907] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 15:08:52,226 - wazuh_testing - DEBUG - 2022/02/11 19:08:22 wazuh-db[18406] main.c:352 at run_worker(): DEBUG: Client 36 disconnected. 2022-02-11 15:08:52,227 - wazuh_testing - DEBUG - 2022/02/11 19:08:23 wazuh-syscheckd[24907] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 15:08:52,227 - wazuh_testing - DEBUG - 2022/02/11 19:08:23 wazuh-db[18406] wdb.c:918 at wdb_commit_old(): DEBUG: Agent '001' database commited. Time: 11.810 ms. 2022-02-11 15:08:52,227 - wazuh_testing - DEBUG - 2022/02/11 19:08:24 wazuh-db[18406] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-keepalive {"id":1,"connection_status":"pending","sync_status":"synced"} 2022-02-11 15:08:52,227 - wazuh_testing - DEBUG - 2022/02/11 19:08:23 wazuh-syscheckd[24907] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 15:08:52,227 - wazuh_testing - DEBUG - 2022/02/11 19:08:23 wazuh-syscheckd[24907] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 15:08:52,227 - wazuh_testing - DEBUG - 2022/02/11 19:08:23 wazuh-syscheckd[24907] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 15:08:52,228 - wazuh_testing - DEBUG - 2022/02/11 19:08:23 wazuh-execd: INFO: Started (pid: 24921). 2022-02-11 15:08:52,228 - wazuh_testing - DEBUG - 2022/02/11 19:08:24 wazuh-agentd: INFO: (1410): Reading authentication keys file. 2022-02-11 15:08:52,228 - wazuh_testing - DEBUG - 2022/02/11 19:08:28 wazuh-db[18406] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux \|wazuh-agent1 \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64","os_arch":"x86_64"} 2022-02-11 15:08:52,228 - wazuh_testing - DEBUG - 2022/02/11 19:08:28 wazuh-db[18406] main.c:290 at run_dealer(): DEBUG: New client connected (33). 2022-02-11 15:08:52,228 - wazuh_testing - DEBUG - 2022/02/11 19:08:24 wazuh-agentd: INFO: Using notify time: 10 and max time to reconnect: 60 2022-02-11 15:08:52,228 - wazuh_testing - DEBUG - 2022/02/11 19:08:28 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1644602905 2022-02-11 15:08:52,228 - wazuh_testing - DEBUG - 2022/02/11 19:08:24 wazuh-agentd: INFO: Version detected -> Linux \|wazuh-agent1 \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64 [Debian GNU/Linux\|debian: 10 (buster)] - Wazuh v4.2.5 2022-02-11 15:08:52,229 - wazuh_testing - DEBUG - 2022/02/11 19:08:24 wazuh-agentd: INFO: Started (pid: 24931). 2022-02-11 15:08:52,229 - wazuh_testing - DEBUG - 2022/02/11 19:08:28 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update end_scan 1644602905 2022-02-11 15:08:52,229 - wazuh_testing - DEBUG - 2022/02/11 19:08:24 wazuh-agentd: INFO: Server IP Address: wazuh-manager/172.17.0.2 2022-02-11 15:08:52,229 - wazuh_testing - DEBUG - 2022/02/11 19:08:24 wazuh-agentd: INFO: Using AES as encryption method. 2022-02-11 15:08:52,229 - wazuh_testing - DEBUG - 2022/02/11 19:08:28 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_global {"id":1644602905,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"c7d4e863493255e1f6dd0a90c6f1bba963e76a4b"} 2022-02-11 15:08:52,229 - wazuh_testing - DEBUG - 2022/02/11 19:08:24 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 15:08:52,230 - wazuh_testing - DEBUG - 2022/02/11 19:08:28 wazuh-db[18406] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.639 ms. 2022-02-11 15:08:52,230 - wazuh_testing - DEBUG - 2022/02/11 19:08:24 wazuh-agentd: INFO: (4102): Connected to the server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 15:08:52,230 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 15:08:52,230 - wazuh_testing - DEBUG - 2022/02/11 19:08:28 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602905,"version":2,"begin":"/bin/bash","end":"/sbin/chcpu","tail":"/sbin/ctrlaltdel","checksum":"57402e3268a27191e04bfc132831045ee0296f32"} 2022-02-11 15:08:52,230 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 15:08:52,230 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir1' due to [(2)-(No such file or directory)]. 2022-02-11 15:08:52,231 - wazuh_testing - DEBUG - 2022/02/11 19:08:28 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602905,"version":2,"begin":"/sbin/ctrlaltdel","end":"/usr/sbin/zic","checksum":"3b41a81d6e4d0a0cbef3d511ad9d87bc241c6525"} 2022-02-11 15:08:52,231 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-11 15:08:52,231 - wazuh_testing - DEBUG - 2022/02/11 19:08:28 wazuh-db[18406] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.585 ms. 2022-02-11 15:08:52,231 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-11 15:08:52,231 - wazuh_testing - DEBUG - 2022/02/11 19:08:28 wazuh-db[18406] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.601 ms. 2022-02-11 15:08:52,231 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-11 15:08:52,232 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-11 15:08:52,232 - wazuh_testing - DEBUG - 2022/02/11 19:08:28 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602905,"version":2,"begin":"/sbin/ctrlaltdel","end":"/usr/bin/pdb","tail":"/usr/bin/pdb2","checksum":"7002e71f8a0a01cb65aadb40c212bd7eb99628a7"} 2022-02-11 15:08:52,232 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-11 15:08:52,232 - wazuh_testing - DEBUG - 2022/02/11 19:08:28 wazuh-db[18406] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.290 ms. 2022-02-11 15:08:52,233 - wazuh_testing - DEBUG - 2022/02/11 19:08:28 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602905,"version":2,"begin":"/usr/bin/pdb2","end":"/usr/sbin/zic","checksum":"f13d51f7876684d6bc17db143ee1529b892c54d2"} 2022-02-11 15:08:52,233 - wazuh_testing - DEBUG - 2022/02/11 19:08:28 wazuh-db[18406] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.301 ms. 2022-02-11 15:08:52,233 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$\|.swp$ 2022-02-11 15:08:52,233 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$\|.swp$ OK? 2022-02-11 15:08:52,233 - wazuh_testing - DEBUG - 2022/02/11 19:08:28 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602905,"version":2,"begin":"/usr/bin/dpkg-genchanges","end":"/usr/bin/pdb","checksum":"ff9bbbbd6461e1dbdffe13c29b2906bb00bc7a1b"} 2022-02-11 15:08:52,234 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-11 15:08:52,234 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-11 15:08:52,234 - wazuh_testing - DEBUG - 2022/02/11 19:08:28 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602905,"version":2,"begin":"/sbin/ctrlaltdel","end":"/usr/bin/dpkg-genbuildinfo","tail":"/usr/bin/dpkg-genchanges","checksum":"bb676047497d09140f97bb2e25f3ee35609f9ac3"} 2022-02-11 15:08:52,234 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 15:08:52,234 - wazuh_testing - DEBUG - 2022/02/11 19:08:28 wazuh-db[18406] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.207 ms. 2022-02-11 15:08:52,235 - wazuh_testing - DEBUG - 2022/02/11 19:08:28 wazuh-db[18406] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.201 ms. 2022-02-11 15:08:52,235 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 15:08:52,235 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 15:08:52,235 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 15:08:52,235 - wazuh_testing - DEBUG - 2022/02/11 19:08:28 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602905,"version":2,"begin":"/sbin/ctrlaltdel","end":"/usr/bin/apt-ftparchive","tail":"/usr/bin/apt-get","checksum":"250b2f6fc0cab9fc45ba6ac43a777b2ff67ea1c8"} 2022-02-11 15:08:52,235 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 15:08:52,236 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 15:08:52,236 - wazuh_testing - DEBUG - 2022/02/11 19:08:28 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602905,"version":2,"begin":"/usr/bin/apt-get","end":"/usr/bin/dpkg-genbuildinfo","checksum":"56074249484c9c92717d5c3bd886ddd98c728323"} 2022-02-11 15:08:52,236 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 rootcheck[24943] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled. 2022-02-11 15:08:52,236 - wazuh_testing - DEBUG - 2022/02/11 19:08:28 wazuh-db[18406] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.120 ms. 2022-02-11 15:08:52,236 - wazuh_testing - DEBUG - 2022/02/11 19:08:28 wazuh-db[18406] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.125 ms. 2022-02-11 15:08:52,236 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:08:52,236 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] syscom.c:123 at syscom_main(): DEBUG: (6284): Local requests thread ready. 2022-02-11 15:08:52,236 - wazuh_testing - DEBUG - 2022/02/11 19:08:28 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602905,"version":2,"begin":"/sbin/ctrlaltdel","end":"/sbin/mkhomedir_helper","tail":"/sbin/mkswap","checksum":"7a7df0bd9bb5154b28eb072bebe1af0b79c59afb"} 2022-02-11 15:08:52,236 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] mq_op.c:47 at StartMQ(): DEBUG: Connected succesfully to 'queue/sockets/queue' after 0 attempts 2022-02-11 15:08:52,237 - wazuh_testing - DEBUG - 2022/02/11 19:08:28 wazuh-db[18406] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.067 ms. 2022-02-11 15:08:52,237 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] mq_op.c:48 at StartMQ(): DEBUG: (unix_domain) Maximum send buffer set to: '212992'. 2022-02-11 15:08:52,237 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:185 at main(): INFO: Started (pid: 24945). 2022-02-11 15:08:52,237 - wazuh_testing - DEBUG - 2022/02/11 19:08:29 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602905,"version":2,"begin":"/sbin/mkswap","end":"/usr/bin/apt-ftparchive","checksum":"a47a6c5678344283714ed664abc9a85413fc444d"} 2022-02-11 15:08:52,237 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:193 at main(): INFO: (6003): Monitoring path: '/bin', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 15:08:52,237 - wazuh_testing - DEBUG - 2022/02/11 19:08:29 wazuh-db[18406] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.114 ms. 2022-02-11 15:08:52,237 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:193 at main(): INFO: (6003): Monitoring path: '/boot', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 15:08:52,238 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:193 at main(): INFO: (6003): Monitoring path: '/etc', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 15:08:52,238 - wazuh_testing - DEBUG - 2022/02/11 19:08:29 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602905,"version":2,"begin":"/sbin/mkswap","end":"/sbin/start-stop-daemon","tail":"/sbin/sulogin","checksum":"b356159685213d77a501787c4ba65eff3cf7fba1"} 2022-02-11 15:08:52,238 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:193 at main(): INFO: (6003): Monitoring path: '/sbin', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 15:08:52,238 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir1', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 15:08:52,239 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir2', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| realtime'. 2022-02-11 15:08:52,239 - wazuh_testing - DEBUG - 2022/02/11 19:08:29 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602905,"version":2,"begin":"/sbin/sulogin","end":"/usr/bin/apt-ftparchive","checksum":"a9b1eb7c788d7e88889b5abba258bd64f03e7546"} 2022-02-11 15:08:52,239 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir3', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| whodata'. 2022-02-11 15:08:52,239 - wazuh_testing - DEBUG - 2022/02/11 19:08:29 wazuh-db[18406] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.063 ms. 2022-02-11 15:08:52,239 - wazuh_testing - DEBUG - 2022/02/11 19:08:29 wazuh-db[18406] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.073 ms. 2022-02-11 15:08:52,239 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/bin', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 15:08:52,239 - wazuh_testing - DEBUG - 2022/02/11 19:08:29 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602905,"version":2,"begin":"/sbin/sulogin","end":"/sbin/wipefs","tail":"/sbin/zramctl","checksum":"086fb81bf040732edfe2a920d67de456c77c8c3d"} 2022-02-11 15:08:52,239 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/sbin', with options 'size \| permissions \| owner \| group \| mtime \| inode \| hash_md5 \| hash_sha1 \| hash_sha256 \| scheduled'. 2022-02-11 15:08:52,239 - wazuh_testing - DEBUG - 2022/02/11 19:08:29 wazuh-db[18406] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.052 ms. 2022-02-11 15:08:52,240 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:215 at main(): DEBUG: (6357): Maximum disk quota size limit configured to '1048576 KB'. 2022-02-11 15:08:52,240 - wazuh_testing - DEBUG - 2022/02/11 19:08:29 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602905,"version":2,"begin":"/sbin/zramctl","end":"/usr/bin/apt-ftparchive","checksum":"174a46ff91239e95a534c5be9f1126cf6bcaba27"} 2022-02-11 15:08:52,240 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mtab' 2022-02-11 15:08:52,240 - wazuh_testing - DEBUG - 2022/02/11 19:08:29 wazuh-db[18406] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.061 ms. 2022-02-11 15:08:52,240 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/hosts.deny' 2022-02-11 15:08:52,240 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mail/statistics' 2022-02-11 15:08:52,240 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random-seed' 2022-02-11 15:08:52,241 - wazuh_testing - DEBUG - 2022/02/11 19:08:29 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602905,"version":2,"begin":"/sbin/zramctl","end":"/usr/bin/addpart","tail":"/usr/bin/addr2line","checksum":"fb4a71a3419fae54401ef5cbedba509446f836eb"} 2022-02-11 15:08:52,241 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random.seed' 2022-02-11 15:08:52,241 - wazuh_testing - DEBUG - 2022/02/11 19:08:29 wazuh-db[18406] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.055 ms. 2022-02-11 15:08:52,241 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/adjtime' 2022-02-11 15:08:52,241 - wazuh_testing - DEBUG - 2022/02/11 19:08:29 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602905,"version":2,"begin":"/usr/bin/addr2line","end":"/usr/bin/apt-ftparchive","checksum":"59201a3f75bcbf8838c851c3821c5407a36b74bb"} 2022-02-11 15:08:52,241 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/httpd/logs' 2022-02-11 15:08:52,241 - wazuh_testing - DEBUG - 2022/02/11 19:08:29 wazuh-db[18406] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.053 ms. 2022-02-11 15:08:52,242 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/utmpx' 2022-02-11 15:08:52,242 - wazuh_testing - DEBUG - 2022/02/11 19:08:29 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602905,"version":2,"begin":"/sbin/zramctl","end":"/usr/bin/[","tail":"/usr/bin/aclocal","checksum":"d083d6d286795943f55fdf45b82f6bd7837af9fe"} 2022-02-11 15:08:52,242 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/wtmpx' 2022-02-11 15:08:52,242 - wazuh_testing - DEBUG - 2022/02/11 19:08:29 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602905,"version":2,"begin":"/usr/bin/aclocal","end":"/usr/bin/addpart","checksum":"6d0f3eb4c663d5a1d575d605ff8c76994f48d9b2"} 2022-02-11 15:08:52,242 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/cups/certs' 2022-02-11 15:08:52,242 - wazuh_testing - DEBUG - 2022/02/11 19:08:29 wazuh-db[18406] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.078 ms. 2022-02-11 15:08:52,242 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/dumpdates' 2022-02-11 15:08:52,242 - wazuh_testing - DEBUG - 2022/02/11 19:08:29 wazuh-db[18406] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.091 ms. 2022-02-11 15:08:52,242 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/svc/volatile' 2022-02-11 15:08:52,242 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/security' 2022-02-11 15:08:52,242 - wazuh_testing - DEBUG - 2022/02/11 19:08:29 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602905,"version":2,"begin":"/sbin/zramctl","end":"/sbin/zramctl","tail":"/usr/bin/2to3-2.7","checksum":"58b2b87ce2162d80a895c740e0ed2124836230b7"} 2022-02-11 15:08:52,242 - wazuh_testing - DEBUG - 2022/02/11 19:08:29 wazuh-db[18406] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.045 ms. 2022-02-11 15:08:52,242 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/debug' 2022-02-11 15:08:52,243 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/dev/core' 2022-02-11 15:08:52,243 - wazuh_testing - DEBUG - 2022/02/11 19:08:30 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602905,"version":2,"begin":"/usr/bin/2to3-2.7","end":"/usr/bin/[","checksum":"97375af060bd460f67eb174cbf79b28414737339"} 2022-02-11 15:08:52,243 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '^/proc' 2022-02-11 15:08:52,243 - wazuh_testing - DEBUG - 2022/02/11 19:08:30 wazuh-db[18406] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.125 ms. 2022-02-11 15:08:52,243 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '.log$\|.swp$' 2022-02-11 15:08:52,243 - wazuh_testing - DEBUG - 2022/02/11 19:08:33 wazuh-db[18406] wdb.c:918 at wdb_commit_old(): DEBUG: Agent 'tasks' database commited. Time: 0.042 ms. 2022-02-11 15:08:52,243 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:235 at main(): INFO: (6004): No diff for file: '/etc/ssl/private.key' 2022-02-11 15:08:52,243 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:245 at main(): INFO: (6016): Directory set for real time monitoring: '/testdir2'. 2022-02-11 15:08:52,243 - wazuh_testing - DEBUG - 2022/02/11 19:08:34 wazuh-db[18406] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux \|wazuh-agent1 \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64","os_arch":"x86_64"} 2022-02-11 15:08:52,243 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] syscheck_audit.c:243 at audit_init(): WARNING: (6924): Who-data engine cannot start because Auditd is not running. 2022-02-11 15:08:52,243 - wazuh_testing - DEBUG - 2022/02/11 19:08:44 wazuh-db[18406] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-connection-status {"id":1,"connection_status":"disconnected","sync_status":"synced"} 2022-02-11 15:08:52,243 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:264 at main(): WARNING: (6913): Who-data engine could not start. Switching who-data to real-time. 2022-02-11 15:08:52,243 - wazuh_testing - DEBUG - 2022/02/11 19:08:44 wazuh-db[18406] main.c:290 at run_dealer(): DEBUG: New client connected (36). 2022-02-11 15:08:52,244 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] run_check.c:194 at start_daemon(): DEBUG: (6320): Setting process priority to: '10' 2022-02-11 15:08:52,244 - wazuh_testing - DEBUG - 2022/02/11 19:08:44 wazuh-db[18406] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: get-labels 1 2022-02-11 15:08:52,244 - wazuh_testing - DEBUG - 2022/02/11 19:08:44 wazuh-db[18406] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-keepalive {"id":1,"connection_status":"pending","sync_status":"synced"} 2022-02-11 15:08:52,244 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:08:52,244 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] run_check.c:229 at start_daemon(): INFO: (6000): Starting daemon... 2022-02-11 15:08:52,244 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] run_check.c:232 at start_daemon(): INFO: (6010): File integrity monitoring scan frequency: 20 seconds 2022-02-11 15:08:52,244 - wazuh_testing - DEBUG - 2022/02/11 19:08:48 wazuh-db[18406] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux \|wazuh-agent1 \|5.10.0-1051-oem \|#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 \|x86_64","os_arch":"x86_64"} 2022-02-11 15:08:52,244 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 15:08:52,244 - wazuh_testing - DEBUG - 2022/02/11 19:08:48 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1644602925 2022-02-11 15:08:52,244 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644602905}} 2022-02-11 15:08:52,244 - wazuh_testing - DEBUG - 2022/02/11 19:08:48 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update end_scan 1644602925 2022-02-11 15:08:52,244 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 15:08:52,245 - wazuh_testing - DEBUG - 2022/02/11 19:08:48 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_global {"id":1644602925,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"f812f739216402ad732850016f51b80184e1c3b5"} 2022-02-11 15:08:52,245 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-11 15:08:52,245 - wazuh_testing - DEBUG - 2022/02/11 19:08:48 wazuh-db[18406] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 1.276 ms. 2022-02-11 15:08:52,245 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-11 15:08:52,245 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-11 15:08:52,245 - wazuh_testing - DEBUG - 2022/02/11 19:08:48 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602925,"version":2,"begin":"/bin/bash","end":"/sbin/chcpu","tail":"/sbin/ctrlaltdel","checksum":"57402e3268a27191e04bfc132831045ee0296f32"} 2022-02-11 15:08:52,245 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-11 15:08:52,245 - wazuh_testing - DEBUG - 2022/02/11 19:08:48 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602925,"version":2,"begin":"/sbin/ctrlaltdel","end":"/usr/sbin/zic","checksum":"81ecad988859141973e1ab19a521a39864158960"} 2022-02-11 15:08:52,245 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 15:08:52,245 - wazuh_testing - DEBUG - 2022/02/11 19:08:48 wazuh-db[18406] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.243 ms. 2022-02-11 15:08:52,245 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 15:08:52,245 - wazuh_testing - DEBUG - 2022/02/11 19:08:48 wazuh-db[18406] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.641 ms. 2022-02-11 15:08:52,246 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644602905}} 2022-02-11 15:08:52,246 - wazuh_testing - DEBUG - 2022/02/11 19:08:48 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602925,"version":2,"begin":"/sbin/ctrlaltdel","end":"/usr/bin/pdb","tail":"/usr/bin/pdb2","checksum":"80a42a0ab0451f4cf56bfa55fc49230292bd6d09"} 2022-02-11 15:08:52,246 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.341 sec (0.339 clock sec) 2022-02-11 15:08:52,246 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1620, path count: 1626 2022-02-11 15:08:52,246 - wazuh_testing - DEBUG - 2022/02/11 19:08:48 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602925,"version":2,"begin":"/usr/bin/pdb2","end":"/usr/sbin/zic","checksum":"f13d51f7876684d6bc17db143ee1529b892c54d2"} 2022-02-11 15:08:52,246 - wazuh_testing - DEBUG - 2022/02/11 19:08:48 wazuh-db[18406] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.364 ms. 2022-02-11 15:08:52,246 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:08:52,246 - wazuh_testing - DEBUG - 2022/02/11 19:08:48 wazuh-db[18406] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.282 ms. 2022-02-11 15:08:52,246 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:08:52,246 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:08:52,247 - wazuh_testing - DEBUG - 2022/02/11 19:08:48 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602925,"version":2,"begin":"/sbin/ctrlaltdel","end":"/usr/bin/dpkg-divert","tail":"/usr/bin/dpkg-genbuildinfo","checksum":"e52fccff97771ce2898026d8c43d54ed93bca388"} 2022-02-11 15:08:52,247 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. 2022-02-11 15:08:52,247 - wazuh_testing - DEBUG - 2022/02/11 19:08:48 wazuh-db[18406] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.059 ms. 2022-02-11 15:08:52,247 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] run_check.c:387 at fim_run_realtime(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-11 15:08:52,247 - wazuh_testing - DEBUG - 2022/02/11 19:08:48 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602925,"version":2,"begin":"/usr/bin/dpkg-genbuildinfo","end":"/usr/bin/pdb","checksum":"fcd12ca69011f5033c3706ba868e7f2983050598"} 2022-02-11 15:08:52,247 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] run_check.c:543 at log_realtime_status(): INFO: (6012): Real-time file integrity monitoring started. 2022-02-11 15:08:52,247 - wazuh_testing - DEBUG - 2022/02/11 19:08:48 wazuh-db[18406] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.064 ms. 2022-02-11 15:08:52,247 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] run_check.c:568 at symlink_checker_thread(): DEBUG: (6033): Starting symbolic link updater. Interval '600'. 2022-02-11 15:08:52,247 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] run_check.c:82 at fim_send_sync_msg(): DEBUG: (6317): Sending integrity control message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1644602905,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"c7d4e863493255e1f6dd0a90c6f1bba963e76a4b"}} 2022-02-11 15:08:52,247 - wazuh_testing - DEBUG - 2022/02/11 19:08:48 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602925,"version":2,"begin":"/sbin/ctrlaltdel","end":"/usr/bin/apt-extracttemplates","tail":"/usr/bin/apt-ftparchive","checksum":"92cc39200dab2354529d328a2be95e5921adae93"} 2022-02-11 15:08:52,248 - wazuh_testing - DEBUG - 2022/02/11 19:08:48 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602925,"version":2,"begin":"/usr/bin/apt-ftparchive","end":"/usr/bin/dpkg-divert","checksum":"ab79628f5b16446ec1a1f2daeaf1afd2511680e1"} 2022-02-11 15:08:52,248 - wazuh_testing - DEBUG - 2022/02/11 19:08:48 wazuh-db[18406] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.137 ms. 2022-02-11 15:08:52,248 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-agent1 and message: .Sending integrity control message: (.+)$ 2022-02-11 15:08:52,248 - wazuh_testing - DEBUG - 2022/02/11 19:08:48 wazuh-db[18406] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.146 ms. 2022-02-11 15:08:52,248 - wazuh_testing - DEBUG - 2022/02/11 19:08:48 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602925,"version":2,"begin":"/sbin/ctrlaltdel","end":"/sbin/mkhomedir_helper","tail":"/sbin/mkswap","checksum":"7a7df0bd9bb5154b28eb072bebe1af0b79c59afb"} 2022-02-11 15:08:52,248 - wazuh_testing - DEBUG - 2022/02/11 19:08:48 wazuh-db[18406] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.086 ms. 2022-02-11 15:08:52,249 - wazuh_testing - DEBUG - 2022/02/11 19:08:49 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602925,"version":2,"begin":"/sbin/mkswap","end":"/usr/bin/apt-extracttemplates","checksum":"789b85401ff44d1e17ff45b8cbceb2568127d4c5"} 2022-02-11 15:08:52,249 - wazuh_testing - DEBUG - 2022/02/11 19:08:49 wazuh-db[18406] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.099 ms. 2022-02-11 15:08:52,249 - wazuh_testing - DEBUG - 2022/02/11 19:08:49 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602925,"version":2,"begin":"/sbin/mkswap","end":"/sbin/start-stop-daemon","tail":"/sbin/sulogin","checksum":"b356159685213d77a501787c4ba65eff3cf7fba1"} 2022-02-11 15:08:52,249 - wazuh_testing - DEBUG - 2022/02/11 19:08:49 wazuh-db[18406] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.062 ms. 2022-02-11 15:08:52,250 - wazuh_testing - DEBUG - 2022/02/11 19:08:49 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602925,"version":2,"begin":"/sbin/sulogin","end":"/usr/bin/apt-extracttemplates","checksum":"fd1df3c927498886385531f01ec392a2734e1e1a"} 2022-02-11 15:08:52,250 - wazuh_testing - DEBUG - 2022/02/11 19:08:49 wazuh-db[18406] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.074 ms. 2022-02-11 15:08:52,250 - wazuh_testing - DEBUG - 2022/02/11 19:08:49 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602925,"version":2,"begin":"/sbin/sulogin","end":"/sbin/wipefs","tail":"/sbin/zramctl","checksum":"086fb81bf040732edfe2a920d67de456c77c8c3d"} 2022-02-11 15:08:52,250 - wazuh_testing - DEBUG - 2022/02/11 19:08:49 wazuh-db[18406] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.054 ms. 2022-02-11 15:08:52,250 - wazuh_testing - DEBUG - 2022/02/11 19:08:49 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602925,"version":2,"begin":"/sbin/zramctl","end":"/usr/bin/apt-extracttemplates","checksum":"a221e825e1dec11fda1a6c48f09571f135defaec"} 2022-02-11 15:08:52,251 - wazuh_testing - DEBUG - 2022/02/11 19:08:49 wazuh-db[18406] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.077 ms. 2022-02-11 15:08:52,251 - wazuh_testing - DEBUG - 2022/02/11 19:08:49 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602925,"version":2,"begin":"/sbin/zramctl","end":"/usr/bin/aclocal-1.16","tail":"/usr/bin/addpart","checksum":"8165c1bf9ac3f5b0b7be338983832e921d56b373"} 2022-02-11 15:08:52,251 - wazuh_testing - DEBUG - 2022/02/11 19:08:49 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602925,"version":2,"begin":"/usr/bin/addpart","end":"/usr/bin/apt-extracttemplates","checksum":"7d1a3bbe28f2c9e567f8311757d46ea5365d7112"} 2022-02-11 15:08:52,251 - wazuh_testing - DEBUG - 2022/02/11 19:08:49 wazuh-db[18406] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.056 ms. 2022-02-11 15:08:52,252 - wazuh_testing - DEBUG - 2022/02/11 19:08:49 wazuh-db[18406] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.070 ms. 2022-02-11 15:08:52,252 - wazuh_testing - DEBUG - 2022/02/11 19:08:49 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602925,"version":2,"begin":"/sbin/zramctl","end":"/usr/bin/2to3-2.7","tail":"/usr/bin/[","checksum":"7d9914f9ff84dac403f643ddb0544ab834c05b6c"} 2022-02-11 15:08:52,252 - wazuh_testing - DEBUG - 2022/02/11 19:08:49 wazuh-db[18406] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.046 ms. 2022-02-11 15:08:52,252 - wazuh_testing - DEBUG - 2022/02/11 19:08:49 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602925,"version":2,"begin":"/usr/bin/[","end":"/usr/bin/aclocal-1.16","checksum":"0f1d35a6565c33bf9697c50fd2d7d2a4ebccbc45"} 2022-02-11 15:08:52,253 - wazuh_testing - DEBUG - 2022/02/11 19:08:49 wazuh-db[18406] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.052 ms. 2022-02-11 15:08:52,253 - wazuh_testing - DEBUG - 2022/02/11 19:08:49 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602925,"version":2,"begin":"/sbin/zramctl","end":"/sbin/zramctl","tail":"/testdir1/testdir1.txt","checksum":"58b2b87ce2162d80a895c740e0ed2124836230b7"} 2022-02-11 15:08:52,253 - wazuh_testing - DEBUG - 2022/02/11 19:08:49 wazuh-db[18406] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.041 ms. 2022-02-11 15:08:52,253 - wazuh_testing - DEBUG - 2022/02/11 19:08:50 wazuh-db[18406] wdb.c:918 at wdb_commit_old(): DEBUG: Agent 'global' database commited. Time: 12.014 ms. 2022-02-11 15:08:52,254 - wazuh_testing - DEBUG - 2022/02/11 19:08:50 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602925,"version":2,"begin":"/testdir1/testdir1.txt","end":"/usr/bin/2to3-2.7","checksum":"5638e8b2e6a31f94836128a7a67c93bba0ebeea6"} 2022-02-11 15:08:52,254 - wazuh_testing - DEBUG - 2022/02/11 19:08:50 wazuh-db[18406] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.038 ms. 2022-02-11 15:08:52,254 - wazuh_testing - DEBUG - 2022/02/11 19:08:50 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602925,"version":2,"begin":"/testdir1/testdir1.txt","end":"/testdir1/testdir1.txt","tail":"/usr/bin/2to3-2.7","checksum":"6faac2cab2ff7c3295d470b0c6d457dc581a5227"} 2022-02-11 15:08:52,254 - wazuh_testing - DEBUG - 2022/02/11 19:08:50 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602925,"version":2,"begin":"/usr/bin/2to3-2.7","end":"/usr/bin/2to3-2.7","checksum":"f621f8dd560e58c5f017dfd42d98bb3a72466d1d"} 2022-02-11 15:08:52,255 - wazuh_testing - DEBUG - 2022/02/11 19:08:50 wazuh-db[18406] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.034 ms. 2022-02-11 15:08:52,255 - wazuh_testing - DEBUG - 2022/02/11 19:08:50 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file save2 {"path":"/testdir1/testdir1.txt","timestamp":1644602925,"version":2,"attributes":{"type":"file","size":0,"perm":"rw-r--r--","uid":"0","gid":"0","user_name":"root","group_name":"root","inode":17179747,"mtime":1644602921,"hash_md5":"d41d8cd98f00b204e9800998ecf8427e","hash_sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","hash_sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","checksum":"aae9c4268dcd0c81147f0fab24c0aeeec69f99fb"}} 2022-02-11 15:08:52,255 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-manager and message: .Agent 001 query: (.+) save2 2022-02-11 15:08:53,228 - wazuh_testing - DEBUG - Cleaning temporal files... 2022-02-11 15:08:53,228 - wazuh_testing - DEBUG - Checking results... 2022-02-11 15:08:53,230 - wazuh_testing - DEBUG - Received from wazuh-agent1 the expected message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1644602905,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"c7d4e863493255e1f6dd0a90c6f1bba963e76a4b"}} 2022-02-11 15:08:53,231 - wazuh_testing - DEBUG - Received from wazuh-manager the expected message: fim_file 2022-02-11 15:09:17,918 - wazuh_testing - DEBUG - Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-11 15:09:17,919 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-11 15:09:17,919 - wazuh_testing - DEBUG - Starting file composer for wazuh-manager and path: /var/ossec/logs/ossec.log. Composite file in /home/camila/Escritorio/repo/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-manager_ossec.log.tmp 2022-02-11 15:09:17,920 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-manager and message: .Initializing FIM Integrity Synchronization check. (.+)$ 2022-02-11 15:09:19,422 - wazuh_testing - DEBUG - 2022/02/11 19:08:58 wazuh-modulesd:syscollector: INFO: Stop received for Syscollector. 2022-02-11 15:09:19,422 - wazuh_testing - DEBUG - 2022/02/11 19:08:58 wazuh-db[18406] main.c:352 at run_worker(): DEBUG: Client 11 disconnected. 2022-02-11 15:09:19,423 - wazuh_testing - DEBUG - 2022/02/11 19:08:58 wazuh-monitord: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:09:19,423 - wazuh_testing - DEBUG - 2022/02/11 19:08:58 wazuh-logcollector: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:09:19,423 - wazuh_testing - DEBUG - 2022/02/11 19:08:58 wazuh-remoted: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:09:19,423 - wazuh_testing - DEBUG - 2022/02/11 19:08:58 wazuh-db[18406] main.c:352 at run_worker(): DEBUG: Client 34 disconnected. 2022-02-11 15:09:19,423 - wazuh_testing - DEBUG - 2022/02/11 19:08:58 wazuh-db[18406] main.c:352 at run_worker(): DEBUG: Client 24 disconnected. 2022-02-11 15:09:19,423 - wazuh_testing - DEBUG - 2022/02/11 19:08:58 wazuh-db[18406] main.c:352 at run_worker(): DEBUG: Client 18 disconnected. 2022-02-11 15:09:19,424 - wazuh_testing - DEBUG - 2022/02/11 19:08:58 wazuh-db[18406] main.c:352 at run_worker(): DEBUG: Client 16 disconnected. 2022-02-11 15:09:19,424 - wazuh_testing - DEBUG - 2022/02/11 19:08:58 wazuh-syscheckd[18540] sig_op.c:49 at HandleSIG(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:09:19,424 - wazuh_testing - DEBUG - 2022/02/11 19:08:58 wazuh-analysisd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:09:19,424 - wazuh_testing - DEBUG - 2022/02/11 19:08:58 wazuh-db[18406] main.c:352 at run_worker(): DEBUG: Client 36 disconnected. 2022-02-11 15:09:19,424 - wazuh_testing - DEBUG - 2022/02/11 19:08:58 wazuh-db[18406] main.c:352 at run_worker(): DEBUG: Client 33 disconnected. 2022-02-11 15:09:19,425 - wazuh_testing - DEBUG - 2022/02/11 19:08:58 wazuh-db[18406] main.c:352 at run_worker(): DEBUG: Client 32 disconnected. 2022-02-11 15:09:19,426 - wazuh_testing - DEBUG - 2022/02/11 19:08:58 wazuh-db[18406] main.c:352 at run_worker(): DEBUG: Client 35 disconnected. 2022-02-11 15:09:19,426 - wazuh_testing - DEBUG - 2022/02/11 19:08:58 wazuh-db[18406] main.c:352 at run_worker(): DEBUG: Client 31 disconnected. 2022-02-11 15:09:19,426 - wazuh_testing - DEBUG - 2022/02/11 19:08:58 wazuh-db[18406] main.c:352 at run_worker(): DEBUG: Client 29 disconnected. 2022-02-11 15:09:19,426 - wazuh_testing - DEBUG - 2022/02/11 19:08:58 wazuh-db[18406] main.c:352 at run_worker(): DEBUG: Client 28 disconnected. 2022-02-11 15:09:19,427 - wazuh_testing - DEBUG - 2022/02/11 19:08:58 wazuh-db[18406] main.c:352 at run_worker(): DEBUG: Client 30 disconnected. 2022-02-11 15:09:19,427 - wazuh_testing - DEBUG - 2022/02/11 19:08:58 wazuh-db[18406] main.c:352 at run_worker(): DEBUG: Client 25 disconnected. 2022-02-11 15:09:19,427 - wazuh_testing - DEBUG - 2022/02/11 19:08:58 wazuh-db[18406] main.c:352 at run_worker(): DEBUG: Client 27 disconnected. 2022-02-11 15:09:19,427 - wazuh_testing - DEBUG - 2022/02/11 19:08:58 wazuh-db[18406] main.c:352 at run_worker(): DEBUG: Client 20 disconnected. 2022-02-11 15:09:19,427 - wazuh_testing - DEBUG - 2022/02/11 19:08:58 wazuh-db[18406] main.c:352 at run_worker(): DEBUG: Client 22 disconnected. 2022-02-11 15:09:19,428 - wazuh_testing - DEBUG - 2022/02/11 19:08:58 wazuh-db[18406] main.c:352 at run_worker(): DEBUG: Client 13 disconnected. 2022-02-11 15:09:19,428 - wazuh_testing - DEBUG - 2022/02/11 19:08:58 wazuh-db[18406] main.c:352 at run_worker(): DEBUG: Client 6 disconnected. 2022-02-11 15:09:19,428 - wazuh_testing - DEBUG - 2022/02/11 19:08:58 wazuh-db[18406] main.c:352 at run_worker(): DEBUG: Client 19 disconnected. 2022-02-11 15:09:19,428 - wazuh_testing - DEBUG - 2022/02/11 19:08:58 wazuh-db[18406] main.c:352 at run_worker(): DEBUG: Client 23 disconnected. 2022-02-11 15:09:19,428 - wazuh_testing - DEBUG - 2022/02/11 19:08:58 wazuh-db[18406] main.c:352 at run_worker(): DEBUG: Client 21 disconnected. 2022-02-11 15:09:19,429 - wazuh_testing - DEBUG - 2022/02/11 19:08:58 wazuh-db[18406] main.c:352 at run_worker(): DEBUG: Client 12 disconnected. 2022-02-11 15:09:19,429 - wazuh_testing - DEBUG - 2022/02/11 19:08:58 wazuh-db[18406] main.c:352 at run_worker(): DEBUG: Client 10 disconnected. 2022-02-11 15:09:19,429 - wazuh_testing - DEBUG - 2022/02/11 19:08:58 wazuh-db[18406] main.c:352 at run_worker(): DEBUG: Client 26 disconnected. 2022-02-11 15:09:19,429 - wazuh_testing - DEBUG - 2022/02/11 19:08:58 wazuh-execd: INFO: (1314): Shutdown received. Deleting responses. 2022-02-11 15:09:19,430 - wazuh_testing - DEBUG - 2022/02/11 19:08:58 wazuh-execd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:09:19,430 - wazuh_testing - DEBUG - 2022/02/11 19:08:59 wazuh-db[18406] main.c:468 at handler(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:09:19,430 - wazuh_testing - DEBUG - 2022/02/11 19:08:59 wazuh-db[18406] wdb.c:872 at wdb_close_all(): DEBUG: Closing all databases... 2022-02-11 15:09:19,430 - wazuh_testing - DEBUG - 2022/02/11 19:08:59 wazuh-db[18406] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent 001 2022-02-11 15:09:19,431 - wazuh_testing - DEBUG - 2022/02/11 19:08:59 wazuh-db[18406] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent 000 2022-02-11 15:09:19,431 - wazuh_testing - DEBUG - 2022/02/11 19:08:59 wazuh-db[18406] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent mitre 2022-02-11 15:09:19,431 - wazuh_testing - DEBUG - 2022/02/11 19:08:59 wazuh-db[18406] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent global 2022-02-11 15:09:19,432 - wazuh_testing - DEBUG - 2022/02/11 19:08:59 wazuh-db[18406] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent tasks 2022-02-11 15:09:19,432 - wazuh_testing - DEBUG - 2022/02/11 19:08:59 wazuh-db[18406] main.c:231 at main(): DEBUG: Template file removed again: queue/db/.template.db 2022-02-11 15:09:19,432 - wazuh_testing - DEBUG - 2022/02/11 19:08:59 wazuh-authd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:09:19,432 - wazuh_testing - DEBUG - 2022/02/11 19:09:00 wazuh-authd: INFO: Exiting... 2022-02-11 15:09:19,433 - wazuh_testing - DEBUG - 2022/02/11 19:09:04 wazuh-db[19330] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 15:09:19,433 - wazuh_testing - DEBUG - 2022/02/11 19:09:04 wazuh-db[19330] main.c:101 at main(): DEBUG: Wazuh home directory: /var/ossec 2022-02-11 15:09:19,433 - wazuh_testing - DEBUG - 2022/02/11 19:09:04 wazuh-syscheckd[19334] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 15:09:19,433 - wazuh_testing - DEBUG - 2022/02/11 19:09:04 wazuh-syscheckd[19334] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 15:09:19,434 - wazuh_testing - DEBUG - 2022/02/11 19:09:04 wazuh-syscheckd[19334] syscheck-config.c:122 at organize_syscheck_dirs(): DEBUG: No directory entries to organize in syscheck configuration. 2022-02-11 15:09:19,434 - wazuh_testing - DEBUG - 2022/02/11 19:09:07 wazuh-csyslogd: INFO: Remote syslog server not configured. Clean exit. 2022-02-11 15:09:19,435 - wazuh_testing - DEBUG - 2022/02/11 19:09:07 wazuh-dbd: INFO: Database not configured. Clean exit. 2022-02-11 15:09:19,435 - wazuh_testing - DEBUG - 2022/02/11 19:09:07 wazuh-integratord: INFO: Remote integrations not configured. Clean exit. 2022-02-11 15:09:19,435 - wazuh_testing - DEBUG - 2022/02/11 19:09:07 wazuh-agentlessd: INFO: Not configured. Exiting. 2022-02-11 15:09:19,436 - wazuh_testing - DEBUG - 2022/02/11 19:09:07 wazuh-authd: INFO: Started (pid: 19400). 2022-02-11 15:09:19,436 - wazuh_testing - DEBUG - 2022/02/11 19:09:07 wazuh-authd: INFO: Accepting connections on port 1515. No password required. 2022-02-11 15:09:19,436 - wazuh_testing - DEBUG - 2022/02/11 19:09:07 wazuh-authd: INFO: Setting network timeout to 1.000000 sec. 2022-02-11 15:09:19,437 - wazuh_testing - DEBUG - 2022/02/11 19:09:08 wazuh-db[19414] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 15:09:19,437 - wazuh_testing - DEBUG - 2022/02/11 19:09:08 wazuh-db[19414] main.c:101 at main(): DEBUG: Wazuh home directory: /var/ossec 2022-02-11 15:09:19,438 - wazuh_testing - DEBUG - 2022/02/11 19:09:08 wazuh-db[19414] main.c:122 at main(): DEBUG: Template file removed: /var/ossec/queue/db/.template.db 2022-02-11 15:09:19,438 - wazuh_testing - DEBUG - 2022/02/11 19:09:08 wazuh-db[19414] main.c:178 at main(): INFO: Started (pid: 19416). 2022-02-11 15:09:19,438 - wazuh_testing - DEBUG - 2022/02/11 19:09:09 wazuh-execd: INFO: (1350): Active response disabled. 2022-02-11 15:09:19,438 - wazuh_testing - DEBUG - 2022/02/11 19:09:09 wazuh-execd: INFO: Started (pid: 19439). 2022-02-11 15:09:19,439 - wazuh_testing - DEBUG - 2022/02/11 19:09:10 wazuh-analysisd: INFO: Total rules enabled: '3882' 2022-02-11 15:09:19,439 - wazuh_testing - DEBUG - 2022/02/11 19:09:10 wazuh-analysisd: INFO: Started (pid: 19453). 2022-02-11 15:09:19,439 - wazuh_testing - DEBUG - 2022/02/11 19:09:10 wazuh-db[19414] main.c:290 at run_dealer(): DEBUG: New client connected (6). 2022-02-11 15:09:19,440 - wazuh_testing - DEBUG - 2022/02/11 19:09:10 wazuh-analysisd: INFO: (7200): Logtest started 2022-02-11 15:09:19,440 - wazuh_testing - DEBUG - 2022/02/11 19:09:11 wazuh-syscheckd[19548] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 15:09:19,440 - wazuh_testing - DEBUG - 2022/02/11 19:09:11 wazuh-syscheckd[19548] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 15:09:19,440 - wazuh_testing - DEBUG - 2022/02/11 19:09:11 wazuh-syscheckd[19548] syscheck-config.c:122 at organize_syscheck_dirs(): DEBUG: No directory entries to organize in syscheck configuration. 2022-02-11 15:09:19,440 - wazuh_testing - DEBUG - 2022/02/11 19:09:11 wazuh-syscheckd[19548] main.c:118 at main(): INFO: (6678): No directory provided for syscheck to monitor. 2022-02-11 15:09:19,441 - wazuh_testing - DEBUG - 2022/02/11 19:09:11 wazuh-syscheckd[19548] main.c:136 at main(): INFO: (6001): File integrity monitoring disabled. 2022-02-11 15:09:19,441 - wazuh_testing - DEBUG - 2022/02/11 19:09:11 rootcheck[19548] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled. 2022-02-11 15:09:19,441 - wazuh_testing - DEBUG - 2022/02/11 19:09:11 wazuh-syscheckd[19548] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:09:19,441 - wazuh_testing - DEBUG - 2022/02/11 19:09:11 wazuh-syscheckd[19548] syscom.c:123 at syscom_main(): DEBUG: (6284): Local requests thread ready. 2022-02-11 15:09:19,441 - wazuh_testing - DEBUG - 2022/02/11 19:09:11 wazuh-syscheckd[19548] mq_op.c:47 at StartMQ(): DEBUG: Connected succesfully to 'queue/sockets/queue' after 0 attempts 2022-02-11 15:09:19,441 - wazuh_testing - DEBUG - 2022/02/11 19:09:11 wazuh-syscheckd[19548] mq_op.c:48 at StartMQ(): DEBUG: (unix_domain) Maximum send buffer set to: '212992'. 2022-02-11 15:09:19,442 - wazuh_testing - DEBUG - 2022/02/11 19:09:11 wazuh-syscheckd[19548] main.c:185 at main(): INFO: Started (pid: 19550). 2022-02-11 15:09:19,442 - wazuh_testing - DEBUG - 2022/02/11 19:09:11 wazuh-syscheckd[19548] main.c:215 at main(): DEBUG: (6357): Maximum disk quota size limit configured to '1048576 KB'. 2022-02-11 15:09:19,442 - wazuh_testing - DEBUG - 2022/02/11 19:09:11 wazuh-syscheckd[19548] run_check.c:194 at start_daemon(): DEBUG: (6320): Setting process priority to: '10' 2022-02-11 15:09:19,442 - wazuh_testing - DEBUG - 2022/02/11 19:09:11 wazuh-syscheckd[19548] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:09:19,442 - wazuh_testing - DEBUG - 2022/02/11 19:09:11 wazuh-syscheckd[19548] run_check.c:229 at start_daemon(): INFO: (6000): Starting daemon... 2022-02-11 15:09:19,442 - wazuh_testing - DEBUG - 2022/02/11 19:09:11 wazuh-syscheckd[19548] run_check.c:232 at start_daemon(): INFO: (6010): File integrity monitoring scan frequency: 43200 seconds 2022-02-11 15:09:19,443 - wazuh_testing - DEBUG - 2022/02/11 19:09:11 wazuh-syscheckd[19548] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 15:09:19,443 - wazuh_testing - DEBUG - 2022/02/11 19:09:11 wazuh-syscheckd[19548] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644602951}} 2022-02-11 15:09:19,443 - wazuh_testing - DEBUG - 2022/02/11 19:09:11 wazuh-syscheckd[19548] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 15:09:19,443 - wazuh_testing - DEBUG - 2022/02/11 19:09:11 wazuh-db[19414] main.c:290 at run_dealer(): DEBUG: New client connected (10). 2022-02-11 15:09:19,443 - wazuh_testing - DEBUG - 2022/02/11 19:09:11 wazuh-db[19414] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 000 query: syscheck scan_info_update start_scan 1644602951 2022-02-11 15:09:19,443 - wazuh_testing - DEBUG - 2022/02/11 19:09:11 wazuh-syscheckd[19548] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 15:09:19,443 - wazuh_testing - DEBUG - 2022/02/11 19:09:11 wazuh-syscheckd[19548] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 15:09:19,444 - wazuh_testing - DEBUG - 2022/02/11 19:09:11 wazuh-syscheckd[19548] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644602951}} 2022-02-11 15:09:19,444 - wazuh_testing - DEBUG - 2022/02/11 19:09:11 wazuh-syscheckd[19548] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.000 sec (0.000 clock sec) 2022-02-11 15:09:19,444 - wazuh_testing - DEBUG - 2022/02/11 19:09:11 wazuh-syscheckd[19548] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 0, path count: 0 2022-02-11 15:09:19,444 - wazuh_testing - DEBUG - 2022/02/11 19:09:11 wazuh-db[19414] main.c:290 at run_dealer(): DEBUG: New client connected (12). 2022-02-11 15:09:19,444 - wazuh_testing - DEBUG - 2022/02/11 19:09:11 wazuh-syscheckd[19548] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:09:19,444 - wazuh_testing - DEBUG - 2022/02/11 19:09:11 wazuh-db[19414] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 000 query: syscheck scan_info_update end_scan 1644602951 2022-02-11 15:09:19,444 - wazuh_testing - DEBUG - 2022/02/11 19:09:11 wazuh-syscheckd[19548] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:09:19,444 - wazuh_testing - DEBUG - 2022/02/11 19:09:11 wazuh-syscheckd[19548] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:09:19,445 - wazuh_testing - DEBUG - 2022/02/11 19:09:11 wazuh-syscheckd[19548] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. 2022-02-11 15:09:19,445 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-manager and message: .Initializing FIM Integrity Synchronization check. (.+)$ 2022-02-11 15:09:20,425 - wazuh_testing - DEBUG - Cleaning temporal files... 2022-02-11 15:09:20,425 - wazuh_testing - DEBUG - Checking results... 2022-02-11 15:09:20,427 - wazuh_testing - DEBUG - Received from wazuh-manager the expected message: Sync interval is 300 seconds. -------------------------------Captured log call-------------------------------- DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:1005 Cleaning temporal files... DEBUG wazuh_testing:monitoring.py:994 Checking results... DEBUG wazuh_testing:monitoring.py:1000 Received from wazuh-agent1 the expected message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1644602905,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"c7d4e863493255e1f6dd0a90c6f1bba963e76a4b"}} DEBUG wazuh_testing:monitoring.py:1000 Received from wazuh-manager the expected message: fim_file DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:1005 Cleaning temporal files... DEBUG wazuh_testing:monitoring.py:994 Checking results... DEBUG wazuh_testing:monitoring.py:1000 Received from wazuh-manager the expected message: Sync interval is 300 seconds.

Result

Test

Duration

Links

Passed

test_synchronization.py::test_synchronization[testdir1-add-wazuh-agent1]

32.88

------------------------------Captured stderr call------------------------------
2022-02-11 15:05:34,673 - wazuh_testing - DEBUG - Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-11 15:05:34,674 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-11 15:05:34,675 - wazuh_testing - DEBUG - Starting file composer for wazuh-agent1 and path: /var/ossec/logs/ossec.log. Composite file in /home/camila/Escritorio/repo/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-agent1_ossec.log.tmp 2022-02-11 15:05:34,676 - wazuh_testing - DEBUG - Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-11 15:05:34,676 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-agent1 and message: .*Sending integrity control message: (.+)$ 2022-02-11 15:05:34,677 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-11 15:05:34,677 - wazuh_testing - DEBUG - Starting file composer for wazuh-manager and path: /var/ossec/logs/ossec.log. Composite file in /home/camila/Escritorio/repo/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-manager_ossec.log.tmp 2022-02-11 15:05:34,678 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-manager and message: .*Agent 001 query: (.+) save2 2022-02-11 15:05:36,178 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-agentd: ERROR: (1137): Lost connection with manager. Setting lock. 2022-02-11 15:05:36,179 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-agentd: INFO: Closing connection to server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 15:05:36,179 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 15:05:36,179 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-agentd: ERROR: (1216): Unable to connect to '172.17.0.2:1514/tcp': 'Connection refused'. 2022-02-11 15:05:36,179 - wazuh_testing - DEBUG - 2022/02/11 18:57:27 wazuh-syscheckd[20438] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 15:05:36,179 - wazuh_testing - DEBUG - 2022/02/11 18:57:27 wazuh-syscheckd[20438] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644602247}} 2022-02-11 15:05:36,180 - wazuh_testing - DEBUG - 2022/02/11 18:57:27 wazuh-syscheckd[20438] wait_op.c:101 at os_wait(): WARNING: Process locked due to agent is offline. Waiting for connection... 2022-02-11 15:05:36,180 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-modulesd:syscollector: INFO: Stop received for Syscollector. 2022-02-11 15:05:36,180 - wazuh_testing - DEBUG - 2022/02/11 18:57:30 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 15:05:36,180 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 12 disconnected. 2022-02-11 15:05:36,180 - wazuh_testing - DEBUG - 2022/02/11 18:57:30 wazuh-agentd: ERROR: (1216): Unable to connect to '172.17.0.2:1514/tcp': 'Connection refused'. 2022-02-11 15:05:36,180 - wazuh_testing - DEBUG - 2022/02/11 18:57:40 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 15:05:36,180 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-monitord: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:05:36,180 - wazuh_testing - DEBUG - 2022/02/11 18:57:40 wazuh-agentd: INFO: (4102): Connected to the server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 15:05:36,181 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-logcollector: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:05:36,181 - wazuh_testing - DEBUG - 2022/02/11 18:57:40 wazuh-agentd: INFO: Server responded. Releasing lock. 2022-02-11 15:05:36,181 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-remoted: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:05:36,181 - wazuh_testing - DEBUG - 2022/02/11 18:57:42 wazuh-syscheckd[20438] wait_op.c:116 at os_wait(): INFO: Agent is now online. Process unlocked, continuing... 2022-02-11 15:05:36,181 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 25 disconnected. 2022-02-11 15:05:36,181 - wazuh_testing - DEBUG - 2022/02/11 18:57:42 wazuh-syscheckd[20438] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 15:05:36,181 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 24 disconnected. 2022-02-11 15:05:36,181 - wazuh_testing - DEBUG - 2022/02/11 18:57:43 wazuh-syscheckd[20438] fim_db.c:436 at fim_db_check_transaction(): DEBUG: Database transaction completed. 2022-02-11 15:05:36,182 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 18 disconnected. 2022-02-11 15:05:36,182 - wazuh_testing - DEBUG - 2022/02/11 18:57:43 wazuh-syscheckd[20438] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-11 15:05:36,182 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 16 disconnected. 2022-02-11 15:05:36,182 - wazuh_testing - DEBUG - 2022/02/11 18:57:43 wazuh-syscheckd[20438] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-11 15:05:36,182 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-syscheckd[15576] sig_op.c:49 at HandleSIG(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:05:36,182 - wazuh_testing - DEBUG - 2022/02/11 18:57:43 wazuh-syscheckd[20438] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-11 15:05:36,182 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-analysisd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:05:36,183 - wazuh_testing - DEBUG - 2022/02/11 18:57:43 wazuh-syscheckd[20438] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-11 15:05:36,183 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 36 disconnected. 2022-02-11 15:05:36,183 - wazuh_testing - DEBUG - 2022/02/11 18:57:43 wazuh-syscheckd[20438] create_db.c:109 at fim_delete_file_event(): DEBUG: (6220): Sending delete message for file: '/testdir1/testdir1.txt' 2022-02-11 15:05:36,183 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 34 disconnected. 2022-02-11 15:05:36,183 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 33 disconnected. 2022-02-11 15:05:36,183 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 35 disconnected. 2022-02-11 15:05:36,183 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 31 disconnected. 2022-02-11 15:05:36,184 - wazuh_testing - DEBUG - 2022/02/11 18:57:43 wazuh-syscheckd[20438] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"event","data":{"path":"/testdir1/testdir1.txt","version":2,"mode":"scheduled","type":"deleted","timestamp":1644602226,"attributes":{"type":"file","size":0,"perm":"rw-r--r--","uid":"0","gid":"0","user_name":"root","group_name":"root","inode":17179747,"mtime":1644602221,"hash_md5":"d41d8cd98f00b204e9800998ecf8427e","hash_sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","hash_sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","checksum":"a379395aba018f41dca7ff13d29a976a8910c040"}}} 2022-02-11 15:05:36,184 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 28 disconnected. 2022-02-11 15:05:36,184 - wazuh_testing - DEBUG - 2022/02/11 18:57:43 wazuh-syscheckd[20438] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 15:05:36,184 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 27 disconnected. 2022-02-11 15:05:36,184 - wazuh_testing - DEBUG - 2022/02/11 18:57:43 wazuh-syscheckd[20438] create_db.c:220 at fim_scan(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-11 15:05:36,184 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 29 disconnected. 2022-02-11 15:05:36,184 - wazuh_testing - DEBUG - 2022/02/11 18:57:43 wazuh-syscheckd[20438] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 15:05:36,184 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 22 disconnected. 2022-02-11 15:05:36,184 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 20 disconnected. 2022-02-11 15:05:36,184 - wazuh_testing - DEBUG - 2022/02/11 18:57:43 wazuh-syscheckd[20438] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644602263}} 2022-02-11 15:05:36,184 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 32 disconnected. 2022-02-11 15:05:36,184 - wazuh_testing - DEBUG - 2022/02/11 18:57:43 wazuh-syscheckd[20438] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 15.357 sec (0.355 clock sec) 2022-02-11 15:05:36,185 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 21 disconnected. 2022-02-11 15:05:36,185 - wazuh_testing - DEBUG - 2022/02/11 18:57:43 wazuh-syscheckd[20438] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1620, path count: 1626 2022-02-11 15:05:36,185 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 30 disconnected. 2022-02-11 15:05:36,185 - wazuh_testing - DEBUG - 2022/02/11 18:58:04 wazuh-syscheckd[20438] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 15:05:36,185 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 6 disconnected. 2022-02-11 15:05:36,185 - wazuh_testing - DEBUG - 2022/02/11 18:58:04 wazuh-syscheckd[20438] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644602284}} 2022-02-11 15:05:36,185 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 26 disconnected. 2022-02-11 15:05:36,185 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 19 disconnected. 2022-02-11 15:05:36,185 - wazuh_testing - DEBUG - 2022/02/11 18:58:04 wazuh-syscheckd[20438] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 15:05:36,186 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 13 disconnected. 2022-02-11 15:05:36,186 - wazuh_testing - DEBUG - 2022/02/11 18:58:04 wazuh-syscheckd[20438] fim_db.c:436 at fim_db_check_transaction(): DEBUG: Database transaction completed. 2022-02-11 15:05:36,186 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 11 disconnected. 2022-02-11 15:05:36,186 - wazuh_testing - DEBUG - 2022/02/11 18:58:04 wazuh-syscheckd[20438] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-11 15:05:36,186 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 23 disconnected. 2022-02-11 15:05:36,186 - wazuh_testing - DEBUG - 2022/02/11 18:58:04 wazuh-syscheckd[20438] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-11 15:05:36,186 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:352 at run_worker(): DEBUG: Client 10 disconnected. 2022-02-11 15:05:36,186 - wazuh_testing - DEBUG - 2022/02/11 18:58:04 wazuh-syscheckd[20438] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-11 15:05:36,186 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-execd: INFO: (1314): Shutdown received. Deleting responses. 2022-02-11 15:05:36,186 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-execd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:05:36,186 - wazuh_testing - DEBUG - 2022/02/11 18:58:04 wazuh-syscheckd[20438] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-11 15:05:36,186 - wazuh_testing - DEBUG - 2022/02/11 18:57:20 wazuh-db[15442] main.c:468 at handler(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:05:36,187 - wazuh_testing - DEBUG - 2022/02/11 18:58:04 wazuh-syscheckd[20438] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 15:05:36,187 - wazuh_testing - DEBUG - 2022/02/11 18:57:21 wazuh-db[15442] wdb.c:872 at wdb_close_all(): DEBUG: Closing all databases... 2022-02-11 15:05:36,187 - wazuh_testing - DEBUG - 2022/02/11 18:58:04 wazuh-syscheckd[20438] create_db.c:220 at fim_scan(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-11 15:05:36,187 - wazuh_testing - DEBUG - 2022/02/11 18:57:21 wazuh-db[15442] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent 001 2022-02-11 15:05:36,187 - wazuh_testing - DEBUG - 2022/02/11 18:58:04 wazuh-syscheckd[20438] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 15:05:36,187 - wazuh_testing - DEBUG - 2022/02/11 18:57:21 wazuh-db[15442] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent 000 2022-02-11 15:05:36,187 - wazuh_testing - DEBUG - 2022/02/11 18:57:21 wazuh-db[15442] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent mitre 2022-02-11 15:05:36,187 - wazuh_testing - DEBUG - 2022/02/11 18:58:04 wazuh-syscheckd[20438] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644602284}} 2022-02-11 15:05:36,187 - wazuh_testing - DEBUG - 2022/02/11 18:57:21 wazuh-db[15442] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent global 2022-02-11 15:05:36,187 - wazuh_testing - DEBUG - 2022/02/11 18:58:04 wazuh-syscheckd[20438] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.355 sec (0.345 clock sec) 2022-02-11 15:05:36,187 - wazuh_testing - DEBUG - 2022/02/11 18:57:21 wazuh-db[15442] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent tasks 2022-02-11 15:05:36,187 - wazuh_testing - DEBUG - 2022/02/11 18:58:04 wazuh-syscheckd[20438] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1620, path count: 1626 2022-02-11 15:05:36,188 - wazuh_testing - DEBUG - 2022/02/11 18:57:21 wazuh-db[15442] main.c:231 at main(): DEBUG: Template file removed again: queue/db/.template.db 2022-02-11 15:05:36,188 - wazuh_testing - DEBUG - 2022/02/11 18:58:25 wazuh-syscheckd[20438] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 15:05:36,188 - wazuh_testing - DEBUG - 2022/02/11 18:57:21 wazuh-authd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:05:36,188 - wazuh_testing - DEBUG - 2022/02/11 18:58:25 wazuh-syscheckd[20438] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644602305}} 2022-02-11 15:05:36,188 - wazuh_testing - DEBUG - 2022/02/11 18:57:22 wazuh-authd: INFO: Exiting... 2022-02-11 15:05:36,188 - wazuh_testing - DEBUG - 2022/02/11 18:58:25 wazuh-syscheckd[20438] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 15:05:36,188 - wazuh_testing - DEBUG - 2022/02/11 18:57:27 wazuh-db[16372] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 15:05:36,188 - wazuh_testing - DEBUG - 2022/02/11 18:58:25 wazuh-syscheckd[20438] fim_db.c:436 at fim_db_check_transaction(): DEBUG: Database transaction completed. 2022-02-11 15:05:36,188 - wazuh_testing - DEBUG - 2022/02/11 18:57:27 wazuh-db[16372] main.c:101 at main(): DEBUG: Wazuh home directory: /var/ossec 2022-02-11 15:05:36,188 - wazuh_testing - DEBUG - 2022/02/11 18:58:25 wazuh-syscheckd[20438] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-11 15:05:36,188 - wazuh_testing - DEBUG - 2022/02/11 18:57:27 wazuh-syscheckd[16376] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 15:05:36,188 - wazuh_testing - DEBUG - 2022/02/11 18:58:25 wazuh-syscheckd[20438] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-11 15:05:36,188 - wazuh_testing - DEBUG - 2022/02/11 18:57:27 wazuh-syscheckd[16376] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 15:05:36,189 - wazuh_testing - DEBUG - 2022/02/11 18:58:25 wazuh-syscheckd[20438] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-11 15:05:36,189 - wazuh_testing - DEBUG - 2022/02/11 18:57:27 wazuh-syscheckd[16376] syscheck-config.c:122 at organize_syscheck_dirs(): DEBUG: No directory entries to organize in syscheck configuration. 2022-02-11 15:05:36,189 - wazuh_testing - DEBUG - 2022/02/11 18:58:25 wazuh-syscheckd[20438] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-11 15:05:36,189 - wazuh_testing - DEBUG - 2022/02/11 18:57:30 wazuh-csyslogd: INFO: Remote syslog server not configured. Clean exit. 2022-02-11 15:05:36,189 - wazuh_testing - DEBUG - 2022/02/11 18:58:26 wazuh-syscheckd[20438] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 15:05:36,189 - wazuh_testing - DEBUG - 2022/02/11 18:57:30 wazuh-dbd: INFO: Database not configured. Clean exit. 2022-02-11 15:05:36,189 - wazuh_testing - DEBUG - 2022/02/11 18:57:30 wazuh-integratord: INFO: Remote integrations not configured. Clean exit. 2022-02-11 15:05:36,189 - wazuh_testing - DEBUG - 2022/02/11 18:58:26 wazuh-syscheckd[20438] create_db.c:220 at fim_scan(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-11 15:05:36,189 - wazuh_testing - DEBUG - 2022/02/11 18:57:30 wazuh-agentlessd: INFO: Not configured. Exiting. 2022-02-11 15:05:36,189 - wazuh_testing - DEBUG - 2022/02/11 18:58:26 wazuh-syscheckd[20438] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 15:05:36,189 - wazuh_testing - DEBUG - 2022/02/11 18:57:30 wazuh-authd: INFO: Started (pid: 16442). 2022-02-11 15:05:36,189 - wazuh_testing - DEBUG - 2022/02/11 18:58:26 wazuh-syscheckd[20438] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644602306}} 2022-02-11 15:05:36,189 - wazuh_testing - DEBUG - 2022/02/11 18:57:30 wazuh-authd: INFO: Accepting connections on port 1515. No password required. 2022-02-11 15:05:36,189 - wazuh_testing - DEBUG - 2022/02/11 18:58:26 wazuh-syscheckd[20438] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.345 sec (0.331 clock sec) 2022-02-11 15:05:36,190 - wazuh_testing - DEBUG - 2022/02/11 18:57:30 wazuh-authd: INFO: Setting network timeout to 1.000000 sec. 2022-02-11 15:05:36,190 - wazuh_testing - DEBUG - 2022/02/11 18:58:26 wazuh-syscheckd[20438] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1620, path count: 1626 2022-02-11 15:05:36,190 - wazuh_testing - DEBUG - 2022/02/11 18:57:31 wazuh-db[16456] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 15:05:36,190 - wazuh_testing - DEBUG - 2022/02/11 18:58:47 wazuh-syscheckd[20438] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 15:05:36,190 - wazuh_testing - DEBUG - 2022/02/11 18:57:31 wazuh-db[16456] main.c:101 at main(): DEBUG: Wazuh home directory: /var/ossec 2022-02-11 15:05:36,190 - wazuh_testing - DEBUG - 2022/02/11 18:58:47 wazuh-syscheckd[20438] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644602327}} 2022-02-11 15:05:36,190 - wazuh_testing - DEBUG - 2022/02/11 18:57:31 wazuh-db[16456] main.c:122 at main(): DEBUG: Template file removed: /var/ossec/queue/db/.template.db 2022-02-11 15:05:36,190 - wazuh_testing - DEBUG - 2022/02/11 18:58:47 wazuh-syscheckd[20438] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 15:05:36,190 - wazuh_testing - DEBUG - 2022/02/11 18:57:31 wazuh-db[16456] main.c:178 at main(): INFO: Started (pid: 16458). 2022-02-11 15:05:36,190 - wazuh_testing - DEBUG - 2022/02/11 18:58:47 wazuh-syscheckd[20438] fim_db.c:436 at fim_db_check_transaction(): DEBUG: Database transaction completed. 2022-02-11 15:05:36,190 - wazuh_testing - DEBUG - 2022/02/11 18:57:32 wazuh-execd: INFO: (1350): Active response disabled. 2022-02-11 15:05:36,190 - wazuh_testing - DEBUG - 2022/02/11 18:58:47 wazuh-syscheckd[20438] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-11 15:05:36,190 - wazuh_testing - DEBUG - 2022/02/11 18:57:32 wazuh-execd: INFO: Started (pid: 16481). 2022-02-11 15:05:36,190 - wazuh_testing - DEBUG - 2022/02/11 18:58:47 wazuh-syscheckd[20438] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-11 15:05:36,190 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 15:05:36,191 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 15:05:36,191 - wazuh_testing - DEBUG - 2022/02/11 18:58:47 wazuh-syscheckd[20438] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-11 15:05:36,191 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] syscheck-config.c:122 at organize_syscheck_dirs(): DEBUG: No directory entries to organize in syscheck configuration. 2022-02-11 15:05:36,191 - wazuh_testing - DEBUG - 2022/02/11 18:58:47 wazuh-syscheckd[20438] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-11 15:05:36,191 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] main.c:118 at main(): INFO: (6678): No directory provided for syscheck to monitor. 2022-02-11 15:05:36,191 - wazuh_testing - DEBUG - 2022/02/11 18:58:47 wazuh-syscheckd[20438] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 15:05:36,191 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] main.c:136 at main(): INFO: (6001): File integrity monitoring disabled. 2022-02-11 15:05:36,191 - wazuh_testing - DEBUG - 2022/02/11 18:58:47 wazuh-syscheckd[20438] create_db.c:220 at fim_scan(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-11 15:05:36,191 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 rootcheck[16502] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled. 2022-02-11 15:05:36,191 - wazuh_testing - DEBUG - 2022/02/11 18:58:47 wazuh-syscheckd[20438] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 15:05:36,191 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:05:36,191 - wazuh_testing - DEBUG - 2022/02/11 18:58:47 wazuh-syscheckd[20438] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644602327}} 2022-02-11 15:05:36,191 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] syscom.c:123 at syscom_main(): DEBUG: (6284): Local requests thread ready. 2022-02-11 15:05:36,191 - wazuh_testing - DEBUG - 2022/02/11 18:58:47 wazuh-syscheckd[20438] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.328 sec (0.317 clock sec) 2022-02-11 15:05:36,191 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] mq_op.c:47 at StartMQ(): DEBUG: Connected succesfully to 'queue/sockets/queue' after 0 attempts 2022-02-11 15:05:36,192 - wazuh_testing - DEBUG - 2022/02/11 18:58:47 wazuh-syscheckd[20438] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1620, path count: 1626 2022-02-11 15:05:36,192 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] mq_op.c:48 at StartMQ(): DEBUG: (unix_domain) Maximum send buffer set to: '212992'. 2022-02-11 15:05:36,192 - wazuh_testing - DEBUG - 2022/02/11 18:59:08 wazuh-syscheckd[20438] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 15:05:36,192 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] main.c:185 at main(): INFO: Started (pid: 16504). 2022-02-11 15:05:36,192 - wazuh_testing - DEBUG - 2022/02/11 18:59:08 wazuh-syscheckd[20438] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644602348}} 2022-02-11 15:05:36,192 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] main.c:215 at main(): DEBUG: (6357): Maximum disk quota size limit configured to '1048576 KB'. 2022-02-11 15:05:36,192 - wazuh_testing - DEBUG - 2022/02/11 18:59:08 wazuh-syscheckd[20438] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 15:05:36,192 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] run_check.c:194 at start_daemon(): DEBUG: (6320): Setting process priority to: '10' 2022-02-11 15:05:36,192 - wazuh_testing - DEBUG - 2022/02/11 18:59:08 wazuh-syscheckd[20438] fim_db.c:436 at fim_db_check_transaction(): DEBUG: Database transaction completed. 2022-02-11 15:05:36,192 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:05:36,192 - wazuh_testing - DEBUG - 2022/02/11 18:59:08 wazuh-syscheckd[20438] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-11 15:05:36,192 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] run_check.c:229 at start_daemon(): INFO: (6000): Starting daemon... 2022-02-11 15:05:36,192 - wazuh_testing - DEBUG - 2022/02/11 18:59:08 wazuh-syscheckd[20438] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-11 15:05:36,192 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] run_check.c:232 at start_daemon(): INFO: (6010): File integrity monitoring scan frequency: 43200 seconds 2022-02-11 15:05:36,192 - wazuh_testing - DEBUG - 2022/02/11 18:59:08 wazuh-syscheckd[20438] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-11 15:05:36,192 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 15:05:36,193 - wazuh_testing - DEBUG - 2022/02/11 18:59:08 wazuh-syscheckd[20438] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-11 15:05:36,193 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644602253}} 2022-02-11 15:05:36,193 - wazuh_testing - DEBUG - 2022/02/11 18:59:08 wazuh-syscheckd[20438] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 15:05:36,193 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 15:05:36,193 - wazuh_testing - DEBUG - 2022/02/11 18:59:08 wazuh-syscheckd[20438] create_db.c:220 at fim_scan(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-11 15:05:36,193 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 15:05:36,193 - wazuh_testing - DEBUG - 2022/02/11 18:59:08 wazuh-syscheckd[20438] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 15:05:36,193 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 15:05:36,193 - wazuh_testing - DEBUG - 2022/02/11 18:59:08 wazuh-syscheckd[20438] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644602348}} 2022-02-11 15:05:36,193 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644602253}} 2022-02-11 15:05:36,193 - wazuh_testing - DEBUG - 2022/02/11 18:59:08 wazuh-syscheckd[20438] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.329 sec (0.310 clock sec) 2022-02-11 15:05:36,193 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.000 sec (0.000 clock sec) 2022-02-11 15:05:36,193 - wazuh_testing - DEBUG - 2022/02/11 18:59:08 wazuh-syscheckd[20438] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1620, path count: 1626 2022-02-11 15:05:36,193 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 0, path count: 0 2022-02-11 15:05:36,194 - wazuh_testing - DEBUG - 2022/02/11 18:59:29 wazuh-syscheckd[20438] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 15:05:36,194 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:05:36,194 - wazuh_testing - DEBUG - 2022/02/11 18:59:29 wazuh-syscheckd[20438] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644602369}} 2022-02-11 15:05:36,194 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:05:36,194 - wazuh_testing - DEBUG - 2022/02/11 18:59:29 wazuh-syscheckd[20438] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 15:05:36,194 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:05:36,194 - wazuh_testing - DEBUG - 2022/02/11 18:59:29 wazuh-syscheckd[20438] fim_db.c:436 at fim_db_check_transaction(): DEBUG: Database transaction completed. 2022-02-11 15:05:36,194 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. 2022-02-11 15:05:36,194 - wazuh_testing - DEBUG - 2022/02/11 18:59:29 wazuh-syscheckd[20438] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-11 15:05:36,194 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] run_check.c:568 at symlink_checker_thread(): DEBUG: (6033): Starting symbolic link updater. Interval '600'. 2022-02-11 15:05:36,194 - wazuh_testing - DEBUG - 2022/02/11 18:59:29 wazuh-syscheckd[20438] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-11 15:05:36,194 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] run_check.c:82 at fim_send_sync_msg(): DEBUG: (6317): Sending integrity control message: {"component":"fim_file","type":"integrity_clear","data":{"id":1644602253,"version":2}} 2022-02-11 15:05:36,194 - wazuh_testing - DEBUG - 2022/02/11 18:59:29 wazuh-syscheckd[20438] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-11 15:05:36,194 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-syscheckd[16502] fim_sync.c:70 at fim_run_integrity(): DEBUG: Finished calculating FIM integrity. Time: 0.000 seconds. 2022-02-11 15:05:36,195 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-analysisd: INFO: Total rules enabled: '3882' 2022-02-11 15:05:36,195 - wazuh_testing - DEBUG - 2022/02/11 18:59:29 wazuh-syscheckd[20438] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-11 15:05:36,195 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-analysisd: INFO: Started (pid: 16495). 2022-02-11 15:05:36,195 - wazuh_testing - DEBUG - 2022/02/11 18:59:30 wazuh-syscheckd[20438] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 15:05:36,195 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-db[16456] main.c:290 at run_dealer(): DEBUG: New client connected (6). 2022-02-11 15:05:36,195 - wazuh_testing - DEBUG - 2022/02/11 18:59:30 wazuh-syscheckd[20438] create_db.c:220 at fim_scan(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-11 15:05:36,195 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-analysisd: INFO: (7200): Logtest started 2022-02-11 15:05:36,195 - wazuh_testing - DEBUG - 2022/02/11 18:59:30 wazuh-syscheckd[20438] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 15:05:36,195 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-db[16456] main.c:290 at run_dealer(): DEBUG: New client connected (10). 2022-02-11 15:05:36,195 - wazuh_testing - DEBUG - 2022/02/11 18:59:30 wazuh-syscheckd[20438] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644602370}} 2022-02-11 15:05:36,195 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 000 query: syscheck scan_info_update start_scan 1644602253 2022-02-11 15:05:36,195 - wazuh_testing - DEBUG - 2022/02/11 18:59:30 wazuh-syscheckd[20438] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.360 sec (0.357 clock sec) 2022-02-11 15:05:36,195 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-db[16456] main.c:290 at run_dealer(): DEBUG: New client connected (11). 2022-02-11 15:05:36,195 - wazuh_testing - DEBUG - 2022/02/11 18:59:30 wazuh-syscheckd[20438] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1620, path count: 1626 2022-02-11 15:05:36,195 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 000 query: syscheck scan_info_update end_scan 1644602253 2022-02-11 15:05:36,196 - wazuh_testing - DEBUG - 2022/02/11 18:59:51 wazuh-syscheckd[20438] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 15:05:36,196 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-db[16456] main.c:290 at run_dealer(): DEBUG: New client connected (13). 2022-02-11 15:05:36,196 - wazuh_testing - DEBUG - 2022/02/11 18:59:51 wazuh-syscheckd[20438] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644602391}} 2022-02-11 15:05:36,196 - wazuh_testing - DEBUG - 2022/02/11 18:57:33 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 000 query: fim_file integrity_clear {"id":1644602253,"version":2} 2022-02-11 15:05:36,196 - wazuh_testing - DEBUG - 2022/02/11 18:59:51 wazuh-syscheckd[20438] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 15:05:36,196 - wazuh_testing - DEBUG - 2022/02/11 18:57:34 wazuh-remoted: INFO: Started (pid: 16608). Listening on port 1514/TCP (secure). 2022-02-11 15:05:36,196 - wazuh_testing - DEBUG - 2022/02/11 18:59:51 wazuh-syscheckd[20438] fim_db.c:436 at fim_db_check_transaction(): DEBUG: Database transaction completed. 2022-02-11 15:05:36,196 - wazuh_testing - DEBUG - 2022/02/11 18:57:34 wazuh-db[16456] main.c:290 at run_dealer(): DEBUG: New client connected (12). 2022-02-11 15:05:36,197 - wazuh_testing - DEBUG - 2022/02/11 18:59:51 wazuh-syscheckd[20438] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-11 15:05:36,197 - wazuh_testing - DEBUG - 2022/02/11 18:57:34 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: reset-agents-connection synced 2022-02-11 15:05:36,197 - wazuh_testing - DEBUG - 2022/02/11 18:57:34 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 12 disconnected. 2022-02-11 15:05:36,197 - wazuh_testing - DEBUG - 2022/02/11 18:59:51 wazuh-syscheckd[20438] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-11 15:05:36,197 - wazuh_testing - DEBUG - 2022/02/11 18:57:34 wazuh-remoted: INFO: (1410): Reading authentication keys file. 2022-02-11 15:05:36,197 - wazuh_testing - DEBUG - 2022/02/11 18:59:51 wazuh-syscheckd[20438] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-11 15:05:36,197 - wazuh_testing - DEBUG - 2022/02/11 18:57:35 wazuh-logcollector: INFO: (1950): Analyzing file: '/var/ossec/logs/active-responses.log'. 2022-02-11 15:05:36,198 - wazuh_testing - DEBUG - 2022/02/11 18:59:51 wazuh-syscheckd[20438] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-11 15:05:36,198 - wazuh_testing - DEBUG - 2022/02/11 18:57:35 wazuh-logcollector: INFO: (1950): Analyzing file: '/var/log/dpkg.log'. 2022-02-11 15:05:36,198 - wazuh_testing - DEBUG - 2022/02/11 18:59:51 wazuh-syscheckd[20438] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 15:05:36,198 - wazuh_testing - DEBUG - 2022/02/11 18:57:35 wazuh-logcollector: INFO: Started (pid: 16639). 2022-02-11 15:05:36,198 - wazuh_testing - DEBUG - 2022/02/11 18:59:51 wazuh-syscheckd[20438] create_db.c:220 at fim_scan(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-11 15:05:36,198 - wazuh_testing - DEBUG - 2022/02/11 18:57:36 wazuh-monitord: INFO: Started (pid: 16662). 2022-02-11 15:05:36,198 - wazuh_testing - DEBUG - 2022/02/11 18:59:51 wazuh-syscheckd[20438] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 15:05:36,198 - wazuh_testing - DEBUG - 2022/02/11 18:57:37 wazuh-modulesd: INFO: Started (pid: 16674). 2022-02-11 15:05:36,198 - wazuh_testing - DEBUG - 2022/02/11 18:59:51 wazuh-syscheckd[20438] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644602391}} 2022-02-11 15:05:36,199 - wazuh_testing - DEBUG - 2022/02/11 18:57:37 wazuh-modulesd:agent-upgrade: INFO: (8153): Module Agent Upgrade started. 2022-02-11 15:05:36,199 - wazuh_testing - DEBUG - 2022/02/11 18:59:51 wazuh-syscheckd[20438] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.319 sec (0.315 clock sec) 2022-02-11 15:05:36,199 - wazuh_testing - DEBUG - 2022/02/11 18:57:37 wazuh-modulesd:ciscat: INFO: Module disabled. Exiting... 2022-02-11 15:05:36,199 - wazuh_testing - DEBUG - 2022/02/11 18:59:51 wazuh-syscheckd[20438] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1620, path count: 1626 2022-02-11 15:05:36,199 - wazuh_testing - DEBUG - 2022/02/11 18:57:37 wazuh-modulesd:osquery: INFO: Module disabled. Exiting... 2022-02-11 15:05:36,199 - wazuh_testing - DEBUG - 2022/02/11 19:00:12 wazuh-syscheckd[20438] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 15:05:36,200 - wazuh_testing - DEBUG - 2022/02/11 18:57:37 wazuh-modulesd:syscollector: INFO: Module disabled. Exiting... 2022-02-11 15:05:36,200 - wazuh_testing - DEBUG - 2022/02/11 19:00:12 wazuh-syscheckd[20438] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644602412}} 2022-02-11 15:05:36,200 - wazuh_testing - DEBUG - 2022/02/11 18:57:37 sca: INFO: Module disabled. Exiting. 2022-02-11 15:05:36,200 - wazuh_testing - DEBUG - 2022/02/11 19:00:12 wazuh-syscheckd[20438] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 15:05:36,200 - wazuh_testing - DEBUG - 2022/02/11 18:57:37 wazuh-modulesd:database: INFO: Module started. 2022-02-11 15:05:36,200 - wazuh_testing - DEBUG - 2022/02/11 19:00:12 wazuh-syscheckd[20438] fim_db.c:436 at fim_db_check_transaction(): DEBUG: Database transaction completed. 2022-02-11 15:05:36,200 - wazuh_testing - DEBUG - 2022/02/11 18:57:37 wazuh-modulesd:download: INFO: Module started. 2022-02-11 15:05:36,200 - wazuh_testing - DEBUG - 2022/02/11 19:00:12 wazuh-syscheckd[20438] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-11 15:05:36,201 - wazuh_testing - DEBUG - 2022/02/11 18:57:37 wazuh-modulesd:control: INFO: Starting control thread. 2022-02-11 15:05:36,201 - wazuh_testing - DEBUG - 2022/02/11 19:00:12 wazuh-syscheckd[20438] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-11 15:05:36,201 - wazuh_testing - DEBUG - 2022/02/11 18:57:37 wazuh-db[16456] main.c:290 at run_dealer(): DEBUG: New client connected (12). 2022-02-11 15:05:36,201 - wazuh_testing - DEBUG - 2022/02/11 19:00:12 wazuh-syscheckd[20438] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-11 15:05:36,201 - wazuh_testing - DEBUG - 2022/02/11 18:57:37 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-name {"id":0,"name":"wazuh-manager"} 2022-02-11 15:05:36,201 - wazuh_testing - DEBUG - 2022/02/11 19:00:12 wazuh-syscheckd[20438] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-11 15:05:36,201 - wazuh_testing - DEBUG - 2022/02/11 18:57:37 wazuh-modulesd:task-manager: INFO: (8200): Module Task Manager started. 2022-02-11 15:05:36,201 - wazuh_testing - DEBUG - 2022/02/11 19:00:12 wazuh-syscheckd[20438] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 15:05:36,201 - wazuh_testing - DEBUG - 2022/02/11 18:57:37 wazuh-db[16456] main.c:290 at run_dealer(): DEBUG: New client connected (16). 2022-02-11 15:05:36,202 - wazuh_testing - DEBUG - 2022/02/11 19:00:12 wazuh-syscheckd[20438] create_db.c:220 at fim_scan(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-11 15:05:36,202 - wazuh_testing - DEBUG - 2022/02/11 18:57:37 wazuh-db[16456] wdb_parser.c:928 at wdb_parse(): DEBUG: Task query: set_timeout {"now":1644602257,"interval":900} 2022-02-11 15:05:36,202 - wazuh_testing - DEBUG - 2022/02/11 19:00:12 wazuh-syscheckd[20438] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 15:05:36,202 - wazuh_testing - DEBUG - 2022/02/11 18:57:37 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 16 disconnected. 2022-02-11 15:05:36,202 - wazuh_testing - DEBUG - 2022/02/11 19:00:12 wazuh-syscheckd[20438] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644602412}} 2022-02-11 15:05:36,202 - wazuh_testing - DEBUG - 2022/02/11 18:57:37 wazuh-db[16456] main.c:290 at run_dealer(): DEBUG: New client connected (16). 2022-02-11 15:05:36,202 - wazuh_testing - DEBUG - 2022/02/11 19:00:12 wazuh-syscheckd[20438] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.317 sec (0.306 clock sec) 2022-02-11 15:05:36,202 - wazuh_testing - DEBUG - 2022/02/11 18:57:37 wazuh-db[16456] wdb_parser.c:928 at wdb_parse(): DEBUG: Task query: delete_old {"timestamp":1643997457} 2022-02-11 15:05:36,202 - wazuh_testing - DEBUG - 2022/02/11 19:00:12 wazuh-syscheckd[20438] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1620, path count: 1626 2022-02-11 15:05:36,202 - wazuh_testing - DEBUG - 2022/02/11 18:57:37 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 16 disconnected. 2022-02-11 15:05:36,203 - wazuh_testing - DEBUG - 2022/02/11 19:00:33 wazuh-syscheckd[20438] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 15:05:36,203 - wazuh_testing - DEBUG - 2022/02/11 18:57:37 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":0,"version":"Wazuh v4.2.5","manager_host":"wazuh-manager","node_name":"wazuh-master","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-manager |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64","os_arch":"x86_64"} 2022-02-11 15:05:36,203 - wazuh_testing - DEBUG - 2022/02/11 19:00:33 wazuh-syscheckd[20438] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644602433}} 2022-02-11 15:05:36,203 - wazuh_testing - DEBUG - 2022/02/11 18:57:37 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: insert-agent {"id":1,"name":"wazuh-agent1","register_ip":"any","internal_key":"1111111111111111111111111111111111111111111111111111111111111111","group":"default","date_add":0} 2022-02-11 15:05:36,203 - wazuh_testing - DEBUG - 2022/02/11 19:00:33 wazuh-syscheckd[20438] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 15:05:36,203 - wazuh_testing - DEBUG - 2022/02/11 18:57:37 wazuh-db[16456] wdb_global.c:89 at wdb_global_insert_agent(): DEBUG: SQLite: UNIQUE constraint failed: agent.id 2022-02-11 15:05:36,203 - wazuh_testing - DEBUG - 2022/02/11 19:00:33 wazuh-syscheckd[20438] fim_db.c:436 at fim_db_check_transaction(): DEBUG: Database transaction completed. 2022-02-11 15:05:36,204 - wazuh_testing - DEBUG - 2022/02/11 18:57:37 wazuh-db[16456] wdb_parser.c:4784 at wdb_parse_global_insert_agent(): DEBUG: Global DB Cannot execute SQL query; err database queue/db/global.db: UNIQUE constraint failed: agent.id 2022-02-11 15:05:36,204 - wazuh_testing - DEBUG - 2022/02/11 19:00:33 wazuh-syscheckd[20438] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-11 15:05:36,204 - wazuh_testing - DEBUG - 2022/02/11 18:57:37 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-group {"id":1,"group":"default"} 2022-02-11 15:05:36,204 - wazuh_testing - DEBUG - 2022/02/11 19:00:33 wazuh-syscheckd[20438] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-11 15:05:36,204 - wazuh_testing - DEBUG - 2022/02/11 18:57:37 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: delete-agent-belong 1 2022-02-11 15:05:36,204 - wazuh_testing - DEBUG - 2022/02/11 19:00:33 wazuh-syscheckd[20438] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-11 15:05:36,204 - wazuh_testing - DEBUG - 2022/02/11 18:57:37 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: find-group default 2022-02-11 15:05:36,204 - wazuh_testing - DEBUG - 2022/02/11 19:00:33 wazuh-syscheckd[20438] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-11 15:05:36,205 - wazuh_testing - DEBUG - 2022/02/11 18:57:37 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: insert-agent-belong {"id_group":1,"id_agent":1} 2022-02-11 15:05:36,205 - wazuh_testing - DEBUG - 2022/02/11 19:00:34 wazuh-syscheckd[20438] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 15:05:36,205 - wazuh_testing - DEBUG - 2022/02/11 18:57:37 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: get-all-agents last_id 0 2022-02-11 15:05:36,205 - wazuh_testing - DEBUG - 2022/02/11 19:00:34 wazuh-syscheckd[20438] create_db.c:220 at fim_scan(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-11 15:05:36,205 - wazuh_testing - DEBUG - 2022/02/11 18:57:37 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: select-groups 2022-02-11 15:05:36,205 - wazuh_testing - DEBUG - 2022/02/11 19:00:34 wazuh-syscheckd[20438] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 15:05:36,205 - wazuh_testing - DEBUG - 2022/02/11 18:57:37 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: find-group default 2022-02-11 15:05:36,205 - wazuh_testing - DEBUG - 2022/02/11 19:00:34 wazuh-syscheckd[20438] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644602434}} 2022-02-11 15:05:36,206 - wazuh_testing - DEBUG - 2022/02/11 18:57:37 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: get-all-agents last_id 0 2022-02-11 15:05:36,206 - wazuh_testing - DEBUG - 2022/02/11 19:00:34 wazuh-syscheckd[20438] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.310 sec (0.308 clock sec) 2022-02-11 15:05:36,206 - wazuh_testing - DEBUG - 2022/02/11 18:57:37 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: select-agent-group 1 2022-02-11 15:05:36,206 - wazuh_testing - DEBUG - 2022/02/11 19:00:34 wazuh-syscheckd[20438] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1620, path count: 1626 2022-02-11 15:05:36,206 - wazuh_testing - DEBUG - 2022/02/11 18:57:37 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: delete-agent-belong 1 2022-02-11 15:05:36,206 - wazuh_testing - DEBUG - 2022/02/11 19:00:55 wazuh-syscheckd[20438] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 15:05:36,206 - wazuh_testing - DEBUG - 2022/02/11 18:57:37 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: find-group default 2022-02-11 15:05:36,206 - wazuh_testing - DEBUG - 2022/02/11 19:00:55 wazuh-syscheckd[20438] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644602455}} 2022-02-11 15:05:36,206 - wazuh_testing - DEBUG - 2022/02/11 18:57:37 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: insert-agent-belong {"id_group":1,"id_agent":1} 2022-02-11 15:05:36,207 - wazuh_testing - DEBUG - 2022/02/11 19:00:55 wazuh-syscheckd[20438] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 15:05:36,207 - wazuh_testing - DEBUG - 2022/02/11 18:57:37 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: select-agent-name 1 2022-02-11 15:05:36,207 - wazuh_testing - DEBUG - 2022/02/11 19:00:55 wazuh-syscheckd[20438] fim_db.c:436 at fim_db_check_transaction(): DEBUG: Database transaction completed. 2022-02-11 15:05:36,207 - wazuh_testing - DEBUG - 2022/02/11 18:57:37 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: select-agent-name 1 2022-02-11 15:05:36,207 - wazuh_testing - DEBUG - 2022/02/11 19:00:55 wazuh-syscheckd[20438] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-11 15:05:36,207 - wazuh_testing - DEBUG - 2022/02/11 18:57:40 wazuh-db[16456] main.c:290 at run_dealer(): DEBUG: New client connected (16). 2022-02-11 15:05:36,207 - wazuh_testing - DEBUG - 2022/02/11 19:00:55 wazuh-syscheckd[20438] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-11 15:05:36,207 - wazuh_testing - DEBUG - 2022/02/11 18:57:40 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-keepalive {"id":1,"connection_status":"pending","sync_status":"synced"} 2022-02-11 15:05:36,208 - wazuh_testing - DEBUG - 2022/02/11 19:00:55 wazuh-syscheckd[20438] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-11 15:05:36,208 - wazuh_testing - DEBUG - 2022/02/11 18:57:40 wazuh-db[16456] main.c:290 at run_dealer(): DEBUG: New client connected (18). 2022-02-11 15:05:36,208 - wazuh_testing - DEBUG - 2022/02/11 19:00:55 wazuh-syscheckd[20438] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-11 15:05:36,208 - wazuh_testing - DEBUG - 2022/02/11 19:00:55 wazuh-syscheckd[20438] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 15:05:36,208 - wazuh_testing - DEBUG - 2022/02/11 18:57:40 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64","os_arch":"x86_64"} 2022-02-11 15:05:36,208 - wazuh_testing - DEBUG - 2022/02/11 19:00:55 wazuh-syscheckd[20438] create_db.c:220 at fim_scan(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-11 15:05:36,209 - wazuh_testing - DEBUG - 2022/02/11 18:57:42 wazuh-db[16456] main.c:290 at run_dealer(): DEBUG: New client connected (19). 2022-02-11 15:05:36,209 - wazuh_testing - DEBUG - 2022/02/11 19:00:55 wazuh-syscheckd[20438] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 15:05:36,209 - wazuh_testing - DEBUG - 2022/02/11 18:57:42 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1644602247 2022-02-11 15:05:36,209 - wazuh_testing - DEBUG - 2022/02/11 19:00:55 wazuh-syscheckd[20438] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644602455}} 2022-02-11 15:05:36,209 - wazuh_testing - DEBUG - 2022/02/11 18:57:43 wazuh-db[16456] main.c:290 at run_dealer(): DEBUG: New client connected (20). 2022-02-11 15:05:36,209 - wazuh_testing - DEBUG - 2022/02/11 19:00:55 wazuh-syscheckd[20438] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.342 sec (0.339 clock sec) 2022-02-11 15:05:36,209 - wazuh_testing - DEBUG - 2022/02/11 18:57:43 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck delete /testdir1/testdir1.txt 2022-02-11 15:05:36,209 - wazuh_testing - DEBUG - 2022/02/11 19:00:55 wazuh-syscheckd[20438] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1620, path count: 1626 2022-02-11 15:05:36,210 - wazuh_testing - DEBUG - 2022/02/11 18:57:43 wazuh-db[16456] main.c:290 at run_dealer(): DEBUG: New client connected (22). 2022-02-11 15:05:36,210 - wazuh_testing - DEBUG - 2022/02/11 19:01:16 wazuh-syscheckd[20438] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 15:05:36,210 - wazuh_testing - DEBUG - 2022/02/11 19:01:16 wazuh-syscheckd[20438] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644602476}} 2022-02-11 15:05:36,210 - wazuh_testing - DEBUG - 2022/02/11 18:57:43 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update end_scan 1644602263 2022-02-11 15:05:36,210 - wazuh_testing - DEBUG - 2022/02/11 19:01:16 wazuh-syscheckd[20438] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 15:05:36,210 - wazuh_testing - DEBUG - 2022/02/11 18:57:43 wazuh-db[16456] main.c:290 at run_dealer(): DEBUG: New client connected (23). 2022-02-11 15:05:36,210 - wazuh_testing - DEBUG - 2022/02/11 19:01:16 wazuh-syscheckd[20438] fim_db.c:436 at fim_db_check_transaction(): DEBUG: Database transaction completed. 2022-02-11 15:05:36,210 - wazuh_testing - DEBUG - 2022/02/11 18:57:43 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: get-labels 1 2022-02-11 15:05:36,211 - wazuh_testing - DEBUG - 2022/02/11 19:01:16 wazuh-syscheckd[20438] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-11 15:05:36,211 - wazuh_testing - DEBUG - 2022/02/11 18:57:44 wazuh-db[16456] wdb.c:918 at wdb_commit_old(): DEBUG: Agent 'mitre' database commited. Time: 0.028 ms. 2022-02-11 15:05:36,211 - wazuh_testing - DEBUG - 2022/02/11 18:57:48 wazuh-db[16456] wdb.c:918 at wdb_commit_old(): DEBUG: Agent 'tasks' database commited. Time: 0.045 ms. 2022-02-11 15:05:36,211 - wazuh_testing - DEBUG - 2022/02/11 19:01:16 wazuh-syscheckd[20438] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-11 15:05:36,211 - wazuh_testing - DEBUG - 2022/02/11 19:01:16 wazuh-syscheckd[20438] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-11 15:05:36,211 - wazuh_testing - DEBUG - 2022/02/11 18:57:50 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64","os_arch":"x86_64"} 2022-02-11 15:05:36,212 - wazuh_testing - DEBUG - 2022/02/11 19:01:16 wazuh-syscheckd[20438] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-11 15:05:36,212 - wazuh_testing - DEBUG - 2022/02/11 18:58:00 wazuh-db[16456] main.c:290 at run_dealer(): DEBUG: New client connected (21). 2022-02-11 15:05:36,212 - wazuh_testing - DEBUG - 2022/02/11 19:01:16 wazuh-syscheckd[20438] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 15:05:36,212 - wazuh_testing - DEBUG - 2022/02/11 19:01:16 wazuh-syscheckd[20438] create_db.c:220 at fim_scan(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-11 15:05:36,212 - wazuh_testing - DEBUG - 2022/02/11 18:58:00 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64","os_arch":"x86_64"} 2022-02-11 15:05:36,212 - wazuh_testing - DEBUG - 2022/02/11 19:01:16 wazuh-syscheckd[20438] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 15:05:36,212 - wazuh_testing - DEBUG - 2022/02/11 18:58:04 wazuh-db[16456] main.c:290 at run_dealer(): DEBUG: New client connected (24). 2022-02-11 15:05:36,212 - wazuh_testing - DEBUG - 2022/02/11 19:01:16 wazuh-syscheckd[20438] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644602476}} 2022-02-11 15:05:36,213 - wazuh_testing - DEBUG - 2022/02/11 18:58:04 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1644602284 2022-02-11 15:05:36,213 - wazuh_testing - DEBUG - 2022/02/11 19:01:16 wazuh-syscheckd[20438] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.312 sec (0.309 clock sec) 2022-02-11 15:05:36,213 - wazuh_testing - DEBUG - 2022/02/11 18:58:04 wazuh-db[16456] main.c:290 at run_dealer(): DEBUG: New client connected (25). 2022-02-11 15:05:36,213 - wazuh_testing - DEBUG - 2022/02/11 19:01:16 wazuh-syscheckd[20438] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1620, path count: 1626 2022-02-11 15:05:36,213 - wazuh_testing - DEBUG - 2022/02/11 18:58:04 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update end_scan 1644602284 2022-02-11 15:05:36,213 - wazuh_testing - DEBUG - 2022/02/11 19:01:37 wazuh-syscheckd[20438] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 15:05:36,213 - wazuh_testing - DEBUG - 2022/02/11 18:58:07 wazuh-db[16456] main.c:290 at run_dealer(): DEBUG: New client connected (26). 2022-02-11 15:05:36,214 - wazuh_testing - DEBUG - 2022/02/11 19:01:37 wazuh-syscheckd[20438] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644602497}} 2022-02-11 15:05:36,214 - wazuh_testing - DEBUG - 2022/02/11 18:58:07 wazuh-db[16456] wdb_parser.c:928 at wdb_parse(): DEBUG: Task query: upgrade_cancel_tasks {"node":"wazuh-master"} 2022-02-11 15:05:36,214 - wazuh_testing - DEBUG - 2022/02/11 19:01:37 wazuh-syscheckd[20438] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 15:05:36,214 - wazuh_testing - DEBUG - 2022/02/11 19:01:37 wazuh-syscheckd[20438] fim_db.c:436 at fim_db_check_transaction(): DEBUG: Database transaction completed. 2022-02-11 15:05:36,214 - wazuh_testing - DEBUG - 2022/02/11 18:58:07 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 26 disconnected. 2022-02-11 15:05:36,215 - wazuh_testing - DEBUG - 2022/02/11 19:01:37 wazuh-syscheckd[20438] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-11 15:05:36,215 - wazuh_testing - DEBUG - 2022/02/11 18:58:10 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64","os_arch":"x86_64"} 2022-02-11 15:05:36,215 - wazuh_testing - DEBUG - 2022/02/11 19:01:37 wazuh-syscheckd[20438] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-11 15:05:36,215 - wazuh_testing - DEBUG - 2022/02/11 18:58:18 wazuh-db[16456] wdb.c:918 at wdb_commit_old(): DEBUG: Agent 'tasks' database commited. Time: 0.043 ms. 2022-02-11 15:05:36,216 - wazuh_testing - DEBUG - 2022/02/11 19:01:37 wazuh-syscheckd[20438] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-11 15:05:36,216 - wazuh_testing - DEBUG - 2022/02/11 19:01:37 wazuh-syscheckd[20438] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-11 15:05:36,216 - wazuh_testing - DEBUG - 2022/02/11 18:58:20 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64","os_arch":"x86_64"} 2022-02-11 15:05:36,216 - wazuh_testing - DEBUG - 2022/02/11 19:01:38 wazuh-syscheckd[20438] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 15:05:36,216 - wazuh_testing - DEBUG - 2022/02/11 18:58:25 wazuh-db[16456] main.c:290 at run_dealer(): DEBUG: New client connected (26). 2022-02-11 15:05:36,217 - wazuh_testing - DEBUG - 2022/02/11 19:01:38 wazuh-syscheckd[20438] create_db.c:220 at fim_scan(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-11 15:05:36,217 - wazuh_testing - DEBUG - 2022/02/11 18:58:25 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1644602305 2022-02-11 15:05:36,217 - wazuh_testing - DEBUG - 2022/02/11 19:01:38 wazuh-syscheckd[20438] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 15:05:36,217 - wazuh_testing - DEBUG - 2022/02/11 18:58:26 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update end_scan 1644602306 2022-02-11 15:05:36,217 - wazuh_testing - DEBUG - 2022/02/11 19:01:38 wazuh-syscheckd[20438] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644602498}} 2022-02-11 15:05:36,218 - wazuh_testing - DEBUG - 2022/02/11 19:01:38 wazuh-syscheckd[20438] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.371 sec (0.357 clock sec) 2022-02-11 15:05:36,218 - wazuh_testing - DEBUG - 2022/02/11 18:58:30 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64","os_arch":"x86_64"} 2022-02-11 15:05:36,218 - wazuh_testing - DEBUG - 2022/02/11 19:01:38 wazuh-syscheckd[20438] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1620, path count: 1626 2022-02-11 15:05:36,218 - wazuh_testing - DEBUG - 2022/02/11 18:58:35 wazuh-db[16456] wdb.c:918 at wdb_commit_old(): DEBUG: Agent 'global' database commited. Time: 11.819 ms. 2022-02-11 15:05:36,218 - wazuh_testing - DEBUG - 2022/02/11 19:01:59 wazuh-syscheckd[20438] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 15:05:36,218 - wazuh_testing - DEBUG - 2022/02/11 19:01:59 wazuh-syscheckd[20438] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644602519}} 2022-02-11 15:05:36,219 - wazuh_testing - DEBUG - 2022/02/11 18:58:40 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64","os_arch":"x86_64"} 2022-02-11 15:05:36,219 - wazuh_testing - DEBUG - 2022/02/11 19:01:59 wazuh-syscheckd[20438] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 15:05:36,219 - wazuh_testing - DEBUG - 2022/02/11 18:58:47 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1644602327 2022-02-11 15:05:36,219 - wazuh_testing - DEBUG - 2022/02/11 19:01:59 wazuh-syscheckd[20438] fim_db.c:436 at fim_db_check_transaction(): DEBUG: Database transaction completed. 2022-02-11 15:05:36,219 - wazuh_testing - DEBUG - 2022/02/11 18:58:47 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update end_scan 1644602327 2022-02-11 15:05:36,219 - wazuh_testing - DEBUG - 2022/02/11 19:01:59 wazuh-syscheckd[20438] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-11 15:05:36,220 - wazuh_testing - DEBUG - 2022/02/11 19:01:59 wazuh-syscheckd[20438] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-11 15:05:36,220 - wazuh_testing - DEBUG - 2022/02/11 18:58:50 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64","os_arch":"x86_64"} 2022-02-11 15:05:36,220 - wazuh_testing - DEBUG - 2022/02/11 19:01:59 wazuh-syscheckd[20438] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-11 15:05:36,220 - wazuh_testing - DEBUG - 2022/02/11 19:01:59 wazuh-syscheckd[20438] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-11 15:05:36,220 - wazuh_testing - DEBUG - 2022/02/11 18:59:00 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64","os_arch":"x86_64"} 2022-02-11 15:05:36,221 - wazuh_testing - DEBUG - 2022/02/11 19:01:59 wazuh-syscheckd[20438] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 15:05:36,221 - wazuh_testing - DEBUG - 2022/02/11 18:59:08 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1644602348 2022-02-11 15:05:36,221 - wazuh_testing - DEBUG - 2022/02/11 19:01:59 wazuh-syscheckd[20438] create_db.c:220 at fim_scan(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-11 15:05:36,221 - wazuh_testing - DEBUG - 2022/02/11 18:59:08 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update end_scan 1644602348 2022-02-11 15:05:36,221 - wazuh_testing - DEBUG - 2022/02/11 19:01:59 wazuh-syscheckd[20438] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 15:05:36,222 - wazuh_testing - DEBUG - 2022/02/11 19:01:59 wazuh-syscheckd[20438] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644602519}} 2022-02-11 15:05:36,222 - wazuh_testing - DEBUG - 2022/02/11 18:59:10 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64","os_arch":"x86_64"} 2022-02-11 15:05:36,222 - wazuh_testing - DEBUG - 2022/02/11 19:01:59 wazuh-syscheckd[20438] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.317 sec (0.314 clock sec) 2022-02-11 15:05:36,222 - wazuh_testing - DEBUG - 2022/02/11 18:59:20 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64","os_arch":"x86_64"} 2022-02-11 15:05:36,222 - wazuh_testing - DEBUG - 2022/02/11 19:01:59 wazuh-syscheckd[20438] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1620, path count: 1626 2022-02-11 15:05:36,223 - wazuh_testing - DEBUG - 2022/02/11 19:02:05 wazuh-syscheckd[20438] fim_sync.c:92 at fim_run_integrity(): DEBUG: FIM Integrity Synchronization check failed. Adjusting sync interval for next run. 2022-02-11 15:05:36,223 - wazuh_testing - DEBUG - 2022/02/11 18:59:29 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1644602369 2022-02-11 15:05:36,223 - wazuh_testing - DEBUG - 2022/02/11 19:02:05 wazuh-syscheckd[20438] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 600 seconds. 2022-02-11 15:05:36,223 - wazuh_testing - DEBUG - 2022/02/11 18:59:30 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update end_scan 1644602370 2022-02-11 15:05:36,223 - wazuh_testing - DEBUG - 2022/02/11 19:02:06 wazuh-syscheckd[20438] fim_db.c:436 at fim_db_check_transaction(): DEBUG: Database transaction completed. 2022-02-11 15:05:36,223 - wazuh_testing - DEBUG - 2022/02/11 18:59:30 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64","os_arch":"x86_64"} 2022-02-11 15:05:36,223 - wazuh_testing - DEBUG - 2022/02/11 19:02:06 wazuh-syscheckd[20438] run_check.c:82 at fim_send_sync_msg(): DEBUG: (6317): Sending integrity control message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1644602526,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"c7d4e863493255e1f6dd0a90c6f1bba963e76a4b"}} 2022-02-11 15:05:36,224 - wazuh_testing - DEBUG - 2022/02/11 18:59:40 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64","os_arch":"x86_64"} 2022-02-11 15:05:36,224 - wazuh_testing - DEBUG - 2022/02/11 18:59:41 wazuh-db[16456] wdb.c:918 at wdb_commit_old(): DEBUG: Agent 'global' database commited. Time: 2.565 ms. 2022-02-11 15:05:36,224 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-agent1 and message: .*Sending integrity control message: (.+)$ 2022-02-11 15:05:36,225 - wazuh_testing - DEBUG - 2022/02/11 18:59:50 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64","os_arch":"x86_64"} 2022-02-11 15:05:36,225 - wazuh_testing - DEBUG - 2022/02/11 18:59:51 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1644602391 2022-02-11 15:05:36,225 - wazuh_testing - DEBUG - 2022/02/11 18:59:51 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update end_scan 1644602391 2022-02-11 15:05:36,226 - wazuh_testing - DEBUG - 2022/02/11 19:00:00 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64","os_arch":"x86_64"} 2022-02-11 15:05:36,226 - wazuh_testing - DEBUG - 2022/02/11 19:00:10 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64","os_arch":"x86_64"} 2022-02-11 15:05:36,227 - wazuh_testing - DEBUG - 2022/02/11 19:00:12 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1644602412 2022-02-11 15:05:36,227 - wazuh_testing - DEBUG - 2022/02/11 19:00:12 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update end_scan 1644602412 2022-02-11 15:05:36,227 - wazuh_testing - DEBUG - 2022/02/11 19:00:20 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64","os_arch":"x86_64"} 2022-02-11 15:05:36,228 - wazuh_testing - DEBUG - 2022/02/11 19:00:30 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64","os_arch":"x86_64"} 2022-02-11 15:05:36,228 - wazuh_testing - DEBUG - 2022/02/11 19:00:33 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1644602433 2022-02-11 15:05:36,228 - wazuh_testing - DEBUG - 2022/02/11 19:00:34 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update end_scan 1644602434 2022-02-11 15:05:36,229 - wazuh_testing - DEBUG - 2022/02/11 19:00:40 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64","os_arch":"x86_64"} 2022-02-11 15:05:36,229 - wazuh_testing - DEBUG - 2022/02/11 19:00:50 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64","os_arch":"x86_64"} 2022-02-11 15:05:36,230 - wazuh_testing - DEBUG - 2022/02/11 19:00:51 wazuh-db[16456] wdb.c:918 at wdb_commit_old(): DEBUG: Agent 'global' database commited. Time: 2.505 ms. 2022-02-11 15:05:36,230 - wazuh_testing - DEBUG - 2022/02/11 19:00:55 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1644602455 2022-02-11 15:05:36,230 - wazuh_testing - DEBUG - 2022/02/11 19:00:55 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update end_scan 1644602455 2022-02-11 15:05:36,231 - wazuh_testing - DEBUG - 2022/02/11 19:01:00 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64","os_arch":"x86_64"} 2022-02-11 15:05:36,231 - wazuh_testing - DEBUG - 2022/02/11 19:01:10 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64","os_arch":"x86_64"} 2022-02-11 15:05:36,232 - wazuh_testing - DEBUG - 2022/02/11 19:01:16 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1644602476 2022-02-11 15:05:36,232 - wazuh_testing - DEBUG - 2022/02/11 19:01:16 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update end_scan 1644602476 2022-02-11 15:05:36,233 - wazuh_testing - DEBUG - 2022/02/11 19:01:20 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64","os_arch":"x86_64"} 2022-02-11 15:05:36,233 - wazuh_testing - DEBUG - 2022/02/11 19:01:30 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64","os_arch":"x86_64"} 2022-02-11 15:05:36,234 - wazuh_testing - DEBUG - 2022/02/11 19:01:37 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1644602497 2022-02-11 15:05:36,234 - wazuh_testing - DEBUG - 2022/02/11 19:01:38 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update end_scan 1644602498 2022-02-11 15:05:36,235 - wazuh_testing - DEBUG - 2022/02/11 19:01:40 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64","os_arch":"x86_64"} 2022-02-11 15:05:36,235 - wazuh_testing - DEBUG - 2022/02/11 19:01:50 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64","os_arch":"x86_64"} 2022-02-11 15:05:36,235 - wazuh_testing - DEBUG - 2022/02/11 19:01:56 wazuh-db[16456] wdb.c:918 at wdb_commit_old(): DEBUG: Agent 'global' database commited. Time: 4.196 ms. 2022-02-11 15:05:36,236 - wazuh_testing - DEBUG - 2022/02/11 19:01:59 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1644602519 2022-02-11 15:05:36,236 - wazuh_testing - DEBUG - 2022/02/11 19:01:59 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update end_scan 1644602519 2022-02-11 15:05:36,236 - wazuh_testing - DEBUG - 2022/02/11 19:02:00 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64","os_arch":"x86_64"} 2022-02-11 15:05:36,237 - wazuh_testing - DEBUG - 2022/02/11 19:02:06 wazuh-db[16456] main.c:290 at run_dealer(): DEBUG: New client connected (27). 2022-02-11 15:05:36,237 - wazuh_testing - DEBUG - 2022/02/11 19:02:06 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_global {"id":1644602526,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"c7d4e863493255e1f6dd0a90c6f1bba963e76a4b"} 2022-02-11 15:05:36,237 - wazuh_testing - DEBUG - 2022/02/11 19:02:06 wazuh-db[16456] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 1.801 ms. 2022-02-11 15:05:36,238 - wazuh_testing - DEBUG - 2022/02/11 19:02:10 wazuh-db[16456] main.c:290 at run_dealer(): DEBUG: New client connected (28). 2022-02-11 15:05:36,238 - wazuh_testing - DEBUG - 2022/02/11 19:02:10 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64","os_arch":"x86_64"} 2022-02-11 15:05:36,239 - wazuh_testing - DEBUG - 2022/02/11 19:02:20 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64","os_arch":"x86_64"} 2022-02-11 15:05:36,239 - wazuh_testing - DEBUG - 2022/02/11 19:02:20 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1644602540 2022-02-11 15:05:36,239 - wazuh_testing - DEBUG - 2022/02/11 19:02:20 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update end_scan 1644602540 2022-02-11 15:05:36,240 - wazuh_testing - DEBUG - 2022/02/11 19:02:30 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64","os_arch":"x86_64"} 2022-02-11 15:05:36,240 - wazuh_testing - DEBUG - 2022/02/11 19:02:32 wazuh-syscheckd[16502] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. 2022-02-11 15:05:36,240 - wazuh_testing - DEBUG - 2022/02/11 19:02:32 wazuh-syscheckd[16502] fim_db.c:436 at fim_db_check_transaction(): DEBUG: Database transaction completed. 2022-02-11 15:05:36,241 - wazuh_testing - DEBUG - 2022/02/11 19:02:32 wazuh-syscheckd[16502] run_check.c:82 at fim_send_sync_msg(): DEBUG: (6317): Sending integrity control message: {"component":"fim_file","type":"integrity_clear","data":{"id":1644602552,"version":2}} 2022-02-11 15:05:36,241 - wazuh_testing - DEBUG - 2022/02/11 19:02:32 wazuh-syscheckd[16502] fim_sync.c:70 at fim_run_integrity(): DEBUG: Finished calculating FIM integrity. Time: 0.000 seconds. 2022-02-11 15:05:36,241 - wazuh_testing - DEBUG - 2022/02/11 19:02:32 wazuh-db[16456] main.c:290 at run_dealer(): DEBUG: New client connected (29). 2022-02-11 15:05:36,242 - wazuh_testing - DEBUG - 2022/02/11 19:02:32 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 000 query: fim_file integrity_clear {"id":1644602552,"version":2} 2022-02-11 15:05:36,242 - wazuh_testing - DEBUG - 2022/02/11 19:02:40 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64","os_arch":"x86_64"} 2022-02-11 15:05:36,242 - wazuh_testing - DEBUG - 2022/02/11 19:02:41 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1644602561 2022-02-11 15:05:36,243 - wazuh_testing - DEBUG - 2022/02/11 19:02:42 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update end_scan 1644602562 2022-02-11 15:05:36,243 - wazuh_testing - DEBUG - 2022/02/11 19:02:50 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64","os_arch":"x86_64"} 2022-02-11 15:05:36,244 - wazuh_testing - DEBUG - 2022/02/11 19:03:00 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64","os_arch":"x86_64"} 2022-02-11 15:05:36,244 - wazuh_testing - DEBUG - 2022/02/11 19:03:00 wazuh-db[16456] wdb.c:918 at wdb_commit_old(): DEBUG: Agent 'global' database commited. Time: 2.733 ms. 2022-02-11 15:05:36,244 - wazuh_testing - DEBUG - 2022/02/11 19:03:03 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1644602583 2022-02-11 15:05:36,245 - wazuh_testing - DEBUG - 2022/02/11 19:03:03 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update end_scan 1644602583 2022-02-11 15:05:36,245 - wazuh_testing - DEBUG - 2022/02/11 19:03:10 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64","os_arch":"x86_64"} 2022-02-11 15:05:36,246 - wazuh_testing - DEBUG - 2022/02/11 19:03:20 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64","os_arch":"x86_64"} 2022-02-11 15:05:36,246 - wazuh_testing - DEBUG - 2022/02/11 19:03:24 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1644602604 2022-02-11 15:05:36,246 - wazuh_testing - DEBUG - 2022/02/11 19:03:24 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update end_scan 1644602604 2022-02-11 15:05:36,247 - wazuh_testing - DEBUG - 2022/02/11 19:03:30 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64","os_arch":"x86_64"} 2022-02-11 15:05:36,249 - wazuh_testing - DEBUG - 2022/02/11 19:03:40 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64","os_arch":"x86_64"} 2022-02-11 15:05:36,250 - wazuh_testing - DEBUG - 2022/02/11 19:03:45 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1644602625 2022-02-11 15:05:36,250 - wazuh_testing - DEBUG - 2022/02/11 19:03:46 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update end_scan 1644602626 2022-02-11 15:05:36,251 - wazuh_testing - DEBUG - 2022/02/11 19:03:50 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64","os_arch":"x86_64"} 2022-02-11 15:05:36,252 - wazuh_testing - DEBUG - 2022/02/11 19:04:00 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64","os_arch":"x86_64"} 2022-02-11 15:05:36,252 - wazuh_testing - DEBUG - 2022/02/11 19:04:04 wazuh-db[16456] wdb.c:918 at wdb_commit_old(): DEBUG: Agent 'global' database commited. Time: 2.323 ms. 2022-02-11 15:05:36,253 - wazuh_testing - DEBUG - 2022/02/11 19:04:07 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1644602647 2022-02-11 15:05:36,253 - wazuh_testing - DEBUG - 2022/02/11 19:04:07 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update end_scan 1644602647 2022-02-11 15:05:36,254 - wazuh_testing - DEBUG - 2022/02/11 19:04:10 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64","os_arch":"x86_64"} 2022-02-11 15:05:36,255 - wazuh_testing - DEBUG - 2022/02/11 19:04:20 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64","os_arch":"x86_64"} 2022-02-11 15:05:36,255 - wazuh_testing - DEBUG - 2022/02/11 19:04:28 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1644602668 2022-02-11 15:05:36,256 - wazuh_testing - DEBUG - 2022/02/11 19:04:28 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update end_scan 1644602668 2022-02-11 15:05:36,256 - wazuh_testing - DEBUG - 2022/02/11 19:04:30 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64","os_arch":"x86_64"} 2022-02-11 15:05:36,257 - wazuh_testing - DEBUG - 2022/02/11 19:04:40 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64","os_arch":"x86_64"} 2022-02-11 15:05:36,258 - wazuh_testing - DEBUG - 2022/02/11 19:04:49 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1644602689 2022-02-11 15:05:36,258 - wazuh_testing - DEBUG - 2022/02/11 19:04:50 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update end_scan 1644602690 2022-02-11 15:05:36,259 - wazuh_testing - DEBUG - 2022/02/11 19:04:50 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64","os_arch":"x86_64"} 2022-02-11 15:05:36,259 - wazuh_testing - DEBUG - 2022/02/11 19:05:00 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64","os_arch":"x86_64"} 2022-02-11 15:05:36,260 - wazuh_testing - DEBUG - 2022/02/11 19:05:08 wazuh-db[16456] wdb.c:918 at wdb_commit_old(): DEBUG: Agent 'global' database commited. Time: 3.641 ms. 2022-02-11 15:05:36,260 - wazuh_testing - DEBUG - 2022/02/11 19:05:10 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64","os_arch":"x86_64"} 2022-02-11 15:05:36,261 - wazuh_testing - DEBUG - 2022/02/11 19:05:11 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1644602711 2022-02-11 15:05:36,261 - wazuh_testing - DEBUG - 2022/02/11 19:05:11 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update end_scan 1644602711 2022-02-11 15:05:36,262 - wazuh_testing - DEBUG - 2022/02/11 19:05:20 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64","os_arch":"x86_64"} 2022-02-11 15:05:36,263 - wazuh_testing - DEBUG - 2022/02/11 19:05:28 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-connection-status {"id":1,"connection_status":"disconnected","sync_status":"synced"} 2022-02-11 15:05:36,263 - wazuh_testing - DEBUG - 2022/02/11 19:05:28 wazuh-db[16456] main.c:290 at run_dealer(): DEBUG: New client connected (30). 2022-02-11 15:05:36,264 - wazuh_testing - DEBUG - 2022/02/11 19:05:28 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: get-labels 1 2022-02-11 15:05:36,264 - wazuh_testing - DEBUG - 2022/02/11 19:05:28 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-keepalive {"id":1,"connection_status":"pending","sync_status":"synced"} 2022-02-11 15:05:36,265 - wazuh_testing - DEBUG - 2022/02/11 19:05:32 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64","os_arch":"x86_64"} 2022-02-11 15:05:36,265 - wazuh_testing - DEBUG - 2022/02/11 19:05:32 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1644602729 2022-02-11 15:05:36,266 - wazuh_testing - DEBUG - 2022/02/11 19:05:32 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update end_scan 1644602729 2022-02-11 15:05:36,267 - wazuh_testing - DEBUG - 2022/02/11 19:05:32 wazuh-db[16456] main.c:290 at run_dealer(): DEBUG: New client connected (32). 2022-02-11 15:05:36,267 - wazuh_testing - DEBUG - 2022/02/11 19:05:32 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_global {"id":1644602729,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"b111345cc2c9d3c16b9f2ad49be4642045c1d383"} 2022-02-11 15:05:36,268 - wazuh_testing - DEBUG - 2022/02/11 19:05:32 wazuh-db[16456] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.585 ms. 2022-02-11 15:05:36,268 - wazuh_testing - DEBUG - 2022/02/11 19:05:32 wazuh-db[16456] main.c:290 at run_dealer(): DEBUG: New client connected (31). 2022-02-11 15:05:36,269 - wazuh_testing - DEBUG - 2022/02/11 19:05:32 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602729,"version":2,"begin":"/bin/bash","end":"/sbin/chcpu","tail":"/sbin/ctrlaltdel","checksum":"57402e3268a27191e04bfc132831045ee0296f32"} 2022-02-11 15:05:36,269 - wazuh_testing - DEBUG - 2022/02/11 19:05:32 wazuh-db[16456] main.c:290 at run_dealer(): DEBUG: New client connected (33). 2022-02-11 15:05:36,270 - wazuh_testing - DEBUG - 2022/02/11 19:05:32 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602729,"version":2,"begin":"/sbin/ctrlaltdel","end":"/usr/sbin/zic","checksum":"7de11400974a14fa2f33c51f339f0bdf89801e54"} 2022-02-11 15:05:36,271 - wazuh_testing - DEBUG - 2022/02/11 19:05:32 wazuh-db[16456] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.253 ms. 2022-02-11 15:05:36,271 - wazuh_testing - DEBUG - 2022/02/11 19:05:32 wazuh-db[16456] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.279 ms. 2022-02-11 15:05:36,272 - wazuh_testing - DEBUG - 2022/02/11 19:05:32 wazuh-db[16456] main.c:290 at run_dealer(): DEBUG: New client connected (34). 2022-02-11 15:05:36,272 - wazuh_testing - DEBUG - 2022/02/11 19:05:32 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602729,"version":2,"begin":"/sbin/ctrlaltdel","end":"/usr/bin/pdb","tail":"/usr/bin/pdb2","checksum":"c3aa403acf5396f1b8e70aefc8e7d356f64e4fac"} 2022-02-11 15:05:36,273 - wazuh_testing - DEBUG - 2022/02/11 19:05:32 wazuh-db[16456] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.132 ms. 2022-02-11 15:05:36,273 - wazuh_testing - DEBUG - 2022/02/11 19:05:32 wazuh-db[16456] main.c:290 at run_dealer(): DEBUG: New client connected (35). 2022-02-11 15:05:36,274 - wazuh_testing - DEBUG - 2022/02/11 19:05:32 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602729,"version":2,"begin":"/usr/bin/pdb2","end":"/usr/sbin/zic","checksum":"f13d51f7876684d6bc17db143ee1529b892c54d2"} 2022-02-11 15:05:36,275 - wazuh_testing - DEBUG - 2022/02/11 19:05:32 wazuh-db[16456] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.122 ms. 2022-02-11 15:05:36,275 - wazuh_testing - DEBUG - 2022/02/11 19:05:32 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602729,"version":2,"begin":"/sbin/ctrlaltdel","end":"/usr/bin/dpkg-divert","tail":"/usr/bin/dpkg-genbuildinfo","checksum":"24d9374abab867ba4bb77081b4b1d5ff63b02923"} 2022-02-11 15:05:36,276 - wazuh_testing - DEBUG - 2022/02/11 19:05:32 wazuh-db[16456] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.066 ms. 2022-02-11 15:05:36,276 - wazuh_testing - DEBUG - 2022/02/11 19:05:32 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602729,"version":2,"begin":"/usr/bin/dpkg-genbuildinfo","end":"/usr/bin/pdb","checksum":"fcd12ca69011f5033c3706ba868e7f2983050598"} 2022-02-11 15:05:36,277 - wazuh_testing - DEBUG - 2022/02/11 19:05:32 wazuh-db[16456] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.062 ms. 2022-02-11 15:05:36,277 - wazuh_testing - DEBUG - 2022/02/11 19:05:32 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602729,"version":2,"begin":"/usr/bin/apt-ftparchive","end":"/usr/bin/dpkg-divert","checksum":"ab79628f5b16446ec1a1f2daeaf1afd2511680e1"} 2022-02-11 15:05:36,278 - wazuh_testing - DEBUG - 2022/02/11 19:05:32 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602729,"version":2,"begin":"/sbin/ctrlaltdel","end":"/usr/bin/apt-extracttemplates","tail":"/usr/bin/apt-ftparchive","checksum":"71eff2d421c4a539ff300c405cdf404e66189e32"} 2022-02-11 15:05:36,279 - wazuh_testing - DEBUG - 2022/02/11 19:05:32 wazuh-db[16456] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.148 ms. 2022-02-11 15:05:36,279 - wazuh_testing - DEBUG - 2022/02/11 19:05:32 wazuh-db[16456] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.148 ms. 2022-02-11 15:05:36,280 - wazuh_testing - DEBUG - 2022/02/11 19:05:32 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602729,"version":2,"begin":"/sbin/ctrlaltdel","end":"/sbin/mkhomedir_helper","tail":"/sbin/mkswap","checksum":"7a7df0bd9bb5154b28eb072bebe1af0b79c59afb"} 2022-02-11 15:05:36,280 - wazuh_testing - DEBUG - 2022/02/11 19:05:32 wazuh-db[16456] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.079 ms. 2022-02-11 15:05:36,281 - wazuh_testing - DEBUG - 2022/02/11 19:05:33 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602729,"version":2,"begin":"/sbin/mkswap","end":"/usr/bin/apt-extracttemplates","checksum":"410c9508172382a132a2c48fab92c35357d3b201"} 2022-02-11 15:05:36,282 - wazuh_testing - DEBUG - 2022/02/11 19:05:33 wazuh-db[16456] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.057 ms. 2022-02-11 15:05:36,282 - wazuh_testing - DEBUG - 2022/02/11 19:05:33 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602729,"version":2,"begin":"/sbin/mkswap","end":"/sbin/start-stop-daemon","tail":"/sbin/sulogin","checksum":"b356159685213d77a501787c4ba65eff3cf7fba1"} 2022-02-11 15:05:36,283 - wazuh_testing - DEBUG - 2022/02/11 19:05:33 wazuh-db[16456] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.030 ms. 2022-02-11 15:05:36,284 - wazuh_testing - DEBUG - 2022/02/11 19:05:33 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602729,"version":2,"begin":"/sbin/sulogin","end":"/usr/bin/apt-extracttemplates","checksum":"3551dea7e43534cca38509d1ecca66a33e1a3c87"} 2022-02-11 15:05:36,284 - wazuh_testing - DEBUG - 2022/02/11 19:05:33 wazuh-db[16456] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.025 ms. 2022-02-11 15:05:36,285 - wazuh_testing - DEBUG - 2022/02/11 19:05:33 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602729,"version":2,"begin":"/sbin/sulogin","end":"/sbin/wipefs","tail":"/sbin/zramctl","checksum":"086fb81bf040732edfe2a920d67de456c77c8c3d"} 2022-02-11 15:05:36,286 - wazuh_testing - DEBUG - 2022/02/11 19:05:33 wazuh-db[16456] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.030 ms. 2022-02-11 15:05:36,286 - wazuh_testing - DEBUG - 2022/02/11 19:05:33 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602729,"version":2,"begin":"/sbin/zramctl","end":"/usr/bin/apt-extracttemplates","checksum":"96386148c5c53f15cdea4559ea41e81d26dcde21"} 2022-02-11 15:05:36,287 - wazuh_testing - DEBUG - 2022/02/11 19:05:33 wazuh-db[16456] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.067 ms. 2022-02-11 15:05:36,288 - wazuh_testing - DEBUG - 2022/02/11 19:05:33 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602729,"version":2,"begin":"/usr/bin/addpart","end":"/usr/bin/apt-extracttemplates","checksum":"7d1a3bbe28f2c9e567f8311757d46ea5365d7112"} 2022-02-11 15:05:36,288 - wazuh_testing - DEBUG - 2022/02/11 19:05:33 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602729,"version":2,"begin":"/sbin/zramctl","end":"/usr/bin/aclocal-1.16","tail":"/usr/bin/addpart","checksum":"468463a672b2c9f9ba1b92e61ab72aa797753157"} 2022-02-11 15:05:36,289 - wazuh_testing - DEBUG - 2022/02/11 19:05:33 wazuh-db[16456] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.023 ms. 2022-02-11 15:05:36,289 - wazuh_testing - DEBUG - 2022/02/11 19:05:33 wazuh-db[16456] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.019 ms. 2022-02-11 15:05:36,290 - wazuh_testing - DEBUG - 2022/02/11 19:05:33 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602729,"version":2,"begin":"/sbin/zramctl","end":"/usr/bin/2to3-2.7","tail":"/usr/bin/[","checksum":"3cbe8fff156e6c3d71bef1b92904ab753e2c4cfa"} 2022-02-11 15:05:36,291 - wazuh_testing - DEBUG - 2022/02/11 19:05:33 wazuh-db[16456] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.018 ms. 2022-02-11 15:05:36,291 - wazuh_testing - DEBUG - 2022/02/11 19:05:33 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602729,"version":2,"begin":"/usr/bin/[","end":"/usr/bin/aclocal-1.16","checksum":"0f1d35a6565c33bf9697c50fd2d7d2a4ebccbc45"} 2022-02-11 15:05:36,292 - wazuh_testing - DEBUG - 2022/02/11 19:05:33 wazuh-db[16456] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.018 ms. 2022-02-11 15:05:36,293 - wazuh_testing - DEBUG - 2022/02/11 19:05:33 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602729,"version":2,"begin":"/sbin/zramctl","end":"/sbin/zramctl","tail":"/testdir1/testdir1.txt","checksum":"58b2b87ce2162d80a895c740e0ed2124836230b7"} 2022-02-11 15:05:36,293 - wazuh_testing - DEBUG - 2022/02/11 19:05:33 wazuh-db[16456] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.013 ms. 2022-02-11 15:05:36,294 - wazuh_testing - DEBUG - 2022/02/11 19:05:34 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602729,"version":2,"begin":"/testdir1/testdir1.txt","end":"/usr/bin/2to3-2.7","checksum":"5ba8bd024b2f338033171189f2b62535f6f32790"} 2022-02-11 15:05:36,295 - wazuh_testing - DEBUG - 2022/02/11 19:05:34 wazuh-db[16456] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.035 ms. 2022-02-11 15:05:36,295 - wazuh_testing - DEBUG - 2022/02/11 19:05:34 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602729,"version":2,"begin":"/testdir1/testdir1.txt","end":"/testdir1/testdir1.txt","tail":"/usr/bin/2to3-2.7","checksum":"31f9e50e58eb6b6700c8ec3ae72d3cb3dcd17fc2"} 2022-02-11 15:05:36,296 - wazuh_testing - DEBUG - 2022/02/11 19:05:34 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602729,"version":2,"begin":"/usr/bin/2to3-2.7","end":"/usr/bin/2to3-2.7","checksum":"f621f8dd560e58c5f017dfd42d98bb3a72466d1d"} 2022-02-11 15:05:36,297 - wazuh_testing - DEBUG - 2022/02/11 19:05:34 wazuh-db[16456] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.014 ms. 2022-02-11 15:05:36,297 - wazuh_testing - DEBUG - 2022/02/11 19:05:34 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file save2 {"path":"/testdir1/testdir1.txt","timestamp":1644602729,"version":2,"attributes":{"type":"file","size":0,"perm":"rw-r--r--","uid":"0","gid":"0","user_name":"root","group_name":"root","inode":17179747,"mtime":1644602725,"hash_md5":"d41d8cd98f00b204e9800998ecf8427e","hash_sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","hash_sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","checksum":"d01a265c7ded295dee3cfddcd82ecd5d33e9292b"}} 2022-02-11 15:05:36,298 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-manager and message: .*Agent 001 query: (.+) save2 2022-02-11 15:05:37,184 - wazuh_testing - DEBUG - Cleaning temporal files... 2022-02-11 15:05:37,185 - wazuh_testing - DEBUG - Checking results... 2022-02-11 15:05:37,188 - wazuh_testing - DEBUG - Received from wazuh-agent1 the expected message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1644602526,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"c7d4e863493255e1f6dd0a90c6f1bba963e76a4b"}} 2022-02-11 15:05:37,188 - wazuh_testing - DEBUG - Received from wazuh-manager the expected message: fim_file 2022-02-11 15:05:52,545 - wazuh_testing - DEBUG - Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-11 15:05:52,546 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-11 15:05:52,546 - wazuh_testing - DEBUG - Starting file composer for wazuh-agent1 and path: /var/ossec/logs/ossec.log. Composite file in /home/camila/Escritorio/repo/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-agent1_ossec.log.tmp 2022-02-11 15:05:52,548 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-agent1 and message: .*Initializing FIM Integrity Synchronization check. (.+)$ 2022-02-11 15:05:54,049 - wazuh_testing - DEBUG - 2022/02/11 19:05:42 wazuh-logcollector: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:05:54,050 - wazuh_testing - DEBUG - 2022/02/11 19:05:42 wazuh-syscheckd[21093] sig_op.c:49 at HandleSIG(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:05:54,050 - wazuh_testing - DEBUG - 2022/02/11 19:05:42 wazuh-agentd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:05:54,050 - wazuh_testing - DEBUG - 2022/02/11 19:05:42 wazuh-execd: INFO: (1314): Shutdown received. Deleting responses. 2022-02-11 15:05:54,051 - wazuh_testing - DEBUG - 2022/02/11 19:05:42 wazuh-execd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:05:54,051 - wazuh_testing - DEBUG - 2022/02/11 19:05:45 wazuh-syscheckd[21519] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 15:05:54,051 - wazuh_testing - DEBUG - 2022/02/11 19:05:45 wazuh-syscheckd[21519] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 15:05:54,051 - wazuh_testing - DEBUG - 2022/02/11 19:05:45 wazuh-syscheckd[21519] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-11 15:05:54,051 - wazuh_testing - DEBUG - 2022/02/11 19:05:45 wazuh-syscheckd[21519] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-11 15:05:54,052 - wazuh_testing - DEBUG - 2022/02/11 19:05:45 wazuh-syscheckd[21519] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-11 15:05:54,052 - wazuh_testing - DEBUG - 2022/02/11 19:05:45 wazuh-syscheckd[21519] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-11 15:05:54,052 - wazuh_testing - DEBUG - 2022/02/11 19:05:45 wazuh-syscheckd[21519] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-11 15:05:54,052 - wazuh_testing - DEBUG - 2022/02/11 19:05:45 wazuh-syscheckd[21519] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ 2022-02-11 15:05:54,052 - wazuh_testing - DEBUG - 2022/02/11 19:05:45 wazuh-syscheckd[21519] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ OK? 2022-02-11 15:05:54,053 - wazuh_testing - DEBUG - 2022/02/11 19:05:45 wazuh-syscheckd[21519] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-11 15:05:54,053 - wazuh_testing - DEBUG - 2022/02/11 19:05:45 wazuh-syscheckd[21519] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-11 15:05:54,053 - wazuh_testing - DEBUG - 2022/02/11 19:05:45 wazuh-syscheckd[21519] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 15:05:54,054 - wazuh_testing - DEBUG - 2022/02/11 19:05:45 wazuh-syscheckd[21519] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 15:05:54,054 - wazuh_testing - DEBUG - 2022/02/11 19:05:45 wazuh-syscheckd[21519] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 15:05:54,054 - wazuh_testing - DEBUG - 2022/02/11 19:05:45 wazuh-syscheckd[21519] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 15:05:54,054 - wazuh_testing - DEBUG - 2022/02/11 19:05:45 wazuh-syscheckd[21519] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 15:05:54,054 - wazuh_testing - DEBUG - 2022/02/11 19:05:45 wazuh-syscheckd[21519] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 15:05:54,055 - wazuh_testing - DEBUG - 2022/02/11 19:05:45 wazuh-execd: INFO: Started (pid: 21532). 2022-02-11 15:05:54,055 - wazuh_testing - DEBUG - 2022/02/11 19:05:46 wazuh-agentd: INFO: (1410): Reading authentication keys file. 2022-02-11 15:05:54,055 - wazuh_testing - DEBUG - 2022/02/11 19:05:46 wazuh-agentd: INFO: Using notify time: 10 and max time to reconnect: 60 2022-02-11 15:05:54,056 - wazuh_testing - DEBUG - 2022/02/11 19:05:46 wazuh-agentd: INFO: Version detected -> Linux |wazuh-agent1 |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64 [Debian GNU/Linux|debian: 10 (buster)] - Wazuh v4.2.5 2022-02-11 15:05:54,056 - wazuh_testing - DEBUG - 2022/02/11 19:05:46 wazuh-agentd: INFO: Started (pid: 21543). 2022-02-11 15:05:54,056 - wazuh_testing - DEBUG - 2022/02/11 19:05:46 wazuh-agentd: INFO: Server IP Address: wazuh-manager/172.17.0.2 2022-02-11 15:05:54,056 - wazuh_testing - DEBUG - 2022/02/11 19:05:46 wazuh-agentd: INFO: Using AES as encryption method. 2022-02-11 15:05:54,057 - wazuh_testing - DEBUG - 2022/02/11 19:05:46 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 15:05:54,057 - wazuh_testing - DEBUG - 2022/02/11 19:05:46 wazuh-agentd: INFO: (4102): Connected to the server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 15:05:54,057 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 15:05:54,057 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 15:05:54,058 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-11 15:05:54,058 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-11 15:05:54,058 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-11 15:05:54,058 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-11 15:05:54,059 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-11 15:05:54,059 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ 2022-02-11 15:05:54,059 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ OK? 2022-02-11 15:05:54,059 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-11 15:05:54,060 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-11 15:05:54,060 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 15:05:54,060 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 15:05:54,060 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 15:05:54,061 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 15:05:54,061 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 15:05:54,061 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 15:05:54,061 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 rootcheck[21555] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled. 2022-02-11 15:05:54,062 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:05:54,062 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] syscom.c:123 at syscom_main(): DEBUG: (6284): Local requests thread ready. 2022-02-11 15:05:54,062 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] mq_op.c:47 at StartMQ(): DEBUG: Connected succesfully to 'queue/sockets/queue' after 0 attempts 2022-02-11 15:05:54,062 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] mq_op.c:48 at StartMQ(): DEBUG: (unix_domain) Maximum send buffer set to: '212992'. 2022-02-11 15:05:54,063 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:185 at main(): INFO: Started (pid: 21557). 2022-02-11 15:05:54,063 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:193 at main(): INFO: (6003): Monitoring path: '/bin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 15:05:54,063 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:193 at main(): INFO: (6003): Monitoring path: '/boot', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 15:05:54,064 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:193 at main(): INFO: (6003): Monitoring path: '/etc', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 15:05:54,064 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:193 at main(): INFO: (6003): Monitoring path: '/sbin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 15:05:54,064 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir1', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 15:05:54,064 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir2', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | realtime'. 2022-02-11 15:05:54,065 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir3', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | whodata'. 2022-02-11 15:05:54,065 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/bin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 15:05:54,065 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/sbin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 15:05:54,065 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:215 at main(): DEBUG: (6357): Maximum disk quota size limit configured to '1048576 KB'. 2022-02-11 15:05:54,065 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mtab' 2022-02-11 15:05:54,066 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/hosts.deny' 2022-02-11 15:05:54,066 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mail/statistics' 2022-02-11 15:05:54,066 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random-seed' 2022-02-11 15:05:54,066 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random.seed' 2022-02-11 15:05:54,067 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/adjtime' 2022-02-11 15:05:54,067 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/httpd/logs' 2022-02-11 15:05:54,067 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/utmpx' 2022-02-11 15:05:54,067 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/wtmpx' 2022-02-11 15:05:54,067 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/cups/certs' 2022-02-11 15:05:54,067 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/dumpdates' 2022-02-11 15:05:54,068 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/svc/volatile' 2022-02-11 15:05:54,068 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/security' 2022-02-11 15:05:54,068 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/debug' 2022-02-11 15:05:54,068 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/dev/core' 2022-02-11 15:05:54,068 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '^/proc' 2022-02-11 15:05:54,068 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '.log$|.swp$' 2022-02-11 15:05:54,068 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:235 at main(): INFO: (6004): No diff for file: '/etc/ssl/private.key' 2022-02-11 15:05:54,069 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:245 at main(): INFO: (6016): Directory set for real time monitoring: '/testdir2'. 2022-02-11 15:05:54,069 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] syscheck_audit.c:243 at audit_init(): WARNING: (6924): Who-data engine cannot start because Auditd is not running. 2022-02-11 15:05:54,069 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:264 at main(): WARNING: (6913): Who-data engine could not start. Switching who-data to real-time. 2022-02-11 15:05:54,069 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] run_check.c:194 at start_daemon(): DEBUG: (6320): Setting process priority to: '10' 2022-02-11 15:05:54,069 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:05:54,069 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] run_check.c:229 at start_daemon(): INFO: (6000): Starting daemon... 2022-02-11 15:05:54,070 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] run_check.c:232 at start_daemon(): INFO: (6010): File integrity monitoring scan frequency: 20 seconds 2022-02-11 15:05:54,070 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 15:05:54,070 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644602747}} 2022-02-11 15:05:54,070 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 15:05:54,070 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-11 15:05:54,071 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-11 15:05:54,071 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-11 15:05:54,071 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-11 15:05:54,071 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 15:05:54,071 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 15:05:54,071 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644602747}} 2022-02-11 15:05:54,072 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.325 sec (0.321 clock sec) 2022-02-11 15:05:54,072 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1621, path count: 1627 2022-02-11 15:05:54,072 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:05:54,072 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:05:54,072 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:05:54,073 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] run_check.c:387 at fim_run_realtime(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-11 15:05:54,073 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] run_check.c:543 at log_realtime_status(): INFO: (6012): Real-time file integrity monitoring started. 2022-02-11 15:05:54,073 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] run_check.c:568 at symlink_checker_thread(): DEBUG: (6033): Starting symbolic link updater. Interval '600'. 2022-02-11 15:05:54,073 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. 2022-02-11 15:05:54,074 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-agent1 and message: .*Initializing FIM Integrity Synchronization check. (.+)$ 2022-02-11 15:05:55,052 - wazuh_testing - DEBUG - Cleaning temporal files... 2022-02-11 15:05:55,052 - wazuh_testing - DEBUG - Checking results... 2022-02-11 15:05:55,054 - wazuh_testing - DEBUG - Received from wazuh-agent1 the expected message: Sync interval is 300 seconds.
-------------------------------Captured log call--------------------------------
DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:1005 Cleaning temporal files... DEBUG wazuh_testing:monitoring.py:994 Checking results... DEBUG wazuh_testing:monitoring.py:1000 Received from wazuh-agent1 the expected message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1644602526,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"c7d4e863493255e1f6dd0a90c6f1bba963e76a4b"}} DEBUG wazuh_testing:monitoring.py:1000 Received from wazuh-manager the expected message: fim_file DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:1005 Cleaning temporal files... DEBUG wazuh_testing:monitoring.py:994 Checking results... DEBUG wazuh_testing:monitoring.py:1000 Received from wazuh-agent1 the expected message: Sync interval is 300 seconds.

Passed

test_synchronization.py::test_synchronization[testdir1-add-wazuh-manager]

44.73

------------------------------Captured stderr call------------------------------
2022-02-11 15:06:08,442 - wazuh_testing - DEBUG - Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-11 15:06:08,443 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-11 15:06:08,444 - wazuh_testing - DEBUG - Starting file composer for wazuh-agent1 and path: /var/ossec/logs/ossec.log. Composite file in /home/camila/Escritorio/repo/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-agent1_ossec.log.tmp 2022-02-11 15:06:08,444 - wazuh_testing - DEBUG - Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-11 15:06:08,445 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-agent1 and message: .*Sending integrity control message: (.+)$ 2022-02-11 15:06:08,445 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-11 15:06:08,446 - wazuh_testing - DEBUG - Starting file composer for wazuh-manager and path: /var/ossec/logs/ossec.log. Composite file in /home/camila/Escritorio/repo/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-manager_ossec.log.tmp 2022-02-11 15:06:08,448 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-manager and message: .*Agent 001 query: (.+) save2 2022-02-11 15:06:09,947 - wazuh_testing - DEBUG - 2022/02/11 19:05:42 wazuh-logcollector: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:06:09,947 - wazuh_testing - DEBUG - 2022/02/11 19:05:42 wazuh-syscheckd[21093] sig_op.c:49 at HandleSIG(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:06:09,947 - wazuh_testing - DEBUG - 2022/02/11 19:05:42 wazuh-agentd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:06:09,948 - wazuh_testing - DEBUG - 2022/02/11 19:05:42 wazuh-execd: INFO: (1314): Shutdown received. Deleting responses. 2022-02-11 15:06:09,948 - wazuh_testing - DEBUG - 2022/02/11 19:05:42 wazuh-execd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:06:09,948 - wazuh_testing - DEBUG - 2022/02/11 19:05:45 wazuh-syscheckd[21519] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 15:06:09,948 - wazuh_testing - DEBUG - 2022/02/11 19:05:45 wazuh-syscheckd[21519] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 15:06:09,948 - wazuh_testing - DEBUG - 2022/02/11 19:05:45 wazuh-syscheckd[21519] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-11 15:06:09,949 - wazuh_testing - DEBUG - 2022/02/11 19:05:45 wazuh-syscheckd[21519] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-11 15:06:09,949 - wazuh_testing - DEBUG - 2022/02/11 19:05:45 wazuh-syscheckd[21519] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-11 15:06:09,949 - wazuh_testing - DEBUG - 2022/02/11 19:05:45 wazuh-syscheckd[21519] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-11 15:06:09,949 - wazuh_testing - DEBUG - 2022/02/11 19:05:45 wazuh-syscheckd[21519] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-11 15:06:09,950 - wazuh_testing - DEBUG - 2022/02/11 19:05:45 wazuh-syscheckd[21519] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ 2022-02-11 15:06:09,950 - wazuh_testing - DEBUG - 2022/02/11 19:05:45 wazuh-syscheckd[21519] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ OK? 2022-02-11 15:06:09,950 - wazuh_testing - DEBUG - 2022/02/11 19:05:45 wazuh-syscheckd[21519] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-11 15:06:09,950 - wazuh_testing - DEBUG - 2022/02/11 19:05:42 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-connection-status {"id":1,"connection_status":"disconnected","sync_status":"synced"} 2022-02-11 15:06:09,950 - wazuh_testing - DEBUG - 2022/02/11 19:05:45 wazuh-syscheckd[21519] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-11 15:06:09,950 - wazuh_testing - DEBUG - 2022/02/11 19:05:42 wazuh-db[16456] main.c:290 at run_dealer(): DEBUG: New client connected (37). 2022-02-11 15:06:09,950 - wazuh_testing - DEBUG - 2022/02/11 19:05:42 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: get-labels 1 2022-02-11 15:06:09,951 - wazuh_testing - DEBUG - 2022/02/11 19:05:45 wazuh-syscheckd[21519] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 15:06:09,951 - wazuh_testing - DEBUG - 2022/02/11 19:05:45 wazuh-db[16456] wdb.c:918 at wdb_commit_old(): DEBUG: Agent '001' database commited. Time: 1.941 ms. 2022-02-11 15:06:09,951 - wazuh_testing - DEBUG - 2022/02/11 19:05:45 wazuh-syscheckd[21519] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 15:06:09,951 - wazuh_testing - DEBUG - 2022/02/11 19:05:46 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-keepalive {"id":1,"connection_status":"pending","sync_status":"synced"} 2022-02-11 15:06:09,951 - wazuh_testing - DEBUG - 2022/02/11 19:05:45 wazuh-syscheckd[21519] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 15:06:09,951 - wazuh_testing - DEBUG - 2022/02/11 19:05:45 wazuh-syscheckd[21519] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 15:06:09,952 - wazuh_testing - DEBUG - 2022/02/11 19:05:45 wazuh-syscheckd[21519] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 15:06:09,952 - wazuh_testing - DEBUG - 2022/02/11 19:05:45 wazuh-syscheckd[21519] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 15:06:09,952 - wazuh_testing - DEBUG - 2022/02/11 19:05:50 wazuh-db[16456] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64","os_arch":"x86_64"} 2022-02-11 15:06:09,952 - wazuh_testing - DEBUG - 2022/02/11 19:05:45 wazuh-execd: INFO: Started (pid: 21532). 2022-02-11 15:06:09,952 - wazuh_testing - DEBUG - 2022/02/11 19:05:50 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1644602747 2022-02-11 15:06:09,952 - wazuh_testing - DEBUG - 2022/02/11 19:05:46 wazuh-agentd: INFO: (1410): Reading authentication keys file. 2022-02-11 15:06:09,952 - wazuh_testing - DEBUG - 2022/02/11 19:05:50 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update end_scan 1644602747 2022-02-11 15:06:09,953 - wazuh_testing - DEBUG - 2022/02/11 19:05:46 wazuh-agentd: INFO: Using notify time: 10 and max time to reconnect: 60 2022-02-11 15:06:09,953 - wazuh_testing - DEBUG - 2022/02/11 19:05:46 wazuh-agentd: INFO: Version detected -> Linux |wazuh-agent1 |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64 [Debian GNU/Linux|debian: 10 (buster)] - Wazuh v4.2.5 2022-02-11 15:06:09,953 - wazuh_testing - DEBUG - 2022/02/11 19:05:50 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_global {"id":1644602747,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"7519e3e1108e6887a3132943199870a40d2a3b4e"} 2022-02-11 15:06:09,953 - wazuh_testing - DEBUG - 2022/02/11 19:05:46 wazuh-agentd: INFO: Started (pid: 21543). 2022-02-11 15:06:09,953 - wazuh_testing - DEBUG - 2022/02/11 19:05:50 wazuh-db[16456] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 1.202 ms. 2022-02-11 15:06:09,953 - wazuh_testing - DEBUG - 2022/02/11 19:05:46 wazuh-agentd: INFO: Server IP Address: wazuh-manager/172.17.0.2 2022-02-11 15:06:09,954 - wazuh_testing - DEBUG - 2022/02/11 19:05:46 wazuh-agentd: INFO: Using AES as encryption method. 2022-02-11 15:06:09,954 - wazuh_testing - DEBUG - 2022/02/11 19:05:46 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 15:06:09,954 - wazuh_testing - DEBUG - 2022/02/11 19:05:50 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602747,"version":2,"begin":"/bin/bash","end":"/sbin/chcpu","tail":"/sbin/ctrlaltdel","checksum":"57402e3268a27191e04bfc132831045ee0296f32"} 2022-02-11 15:06:09,954 - wazuh_testing - DEBUG - 2022/02/11 19:05:46 wazuh-agentd: INFO: (4102): Connected to the server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 15:06:09,954 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 15:06:09,955 - wazuh_testing - DEBUG - 2022/02/11 19:05:50 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602747,"version":2,"begin":"/sbin/ctrlaltdel","end":"/usr/sbin/zic","checksum":"ea793b480c81eaa1e5ad9a91231455d6878aded2"} 2022-02-11 15:06:09,955 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 15:06:09,955 - wazuh_testing - DEBUG - 2022/02/11 19:05:50 wazuh-db[16456] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.660 ms. 2022-02-11 15:06:09,955 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-11 15:06:09,955 - wazuh_testing - DEBUG - 2022/02/11 19:05:50 wazuh-db[16456] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.678 ms. 2022-02-11 15:06:09,955 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-11 15:06:09,956 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-11 15:06:09,956 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-11 15:06:09,956 - wazuh_testing - DEBUG - 2022/02/11 19:05:50 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602747,"version":2,"begin":"/sbin/ctrlaltdel","end":"/usr/bin/pdb","tail":"/usr/bin/pdb2","checksum":"527fa8d22cdfa32b107f77373759172575c43618"} 2022-02-11 15:06:09,956 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-11 15:06:09,956 - wazuh_testing - DEBUG - 2022/02/11 19:05:50 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602747,"version":2,"begin":"/usr/bin/pdb2","end":"/usr/sbin/zic","checksum":"f13d51f7876684d6bc17db143ee1529b892c54d2"} 2022-02-11 15:06:09,956 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ 2022-02-11 15:06:09,957 - wazuh_testing - DEBUG - 2022/02/11 19:05:50 wazuh-db[16456] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.328 ms. 2022-02-11 15:06:09,957 - wazuh_testing - DEBUG - 2022/02/11 19:05:50 wazuh-db[16456] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.322 ms. 2022-02-11 15:06:09,957 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ OK? 2022-02-11 15:06:09,957 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-11 15:06:09,957 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-11 15:06:09,958 - wazuh_testing - DEBUG - 2022/02/11 19:05:50 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602747,"version":2,"begin":"/sbin/ctrlaltdel","end":"/usr/bin/dpkg-divert","tail":"/usr/bin/dpkg-genbuildinfo","checksum":"56f48a14ffe948b9b2e9dc172423739131452b02"} 2022-02-11 15:06:09,958 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 15:06:09,958 - wazuh_testing - DEBUG - 2022/02/11 19:05:50 wazuh-db[16456] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.165 ms. 2022-02-11 15:06:09,958 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 15:06:09,958 - wazuh_testing - DEBUG - 2022/02/11 19:05:50 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602747,"version":2,"begin":"/usr/bin/dpkg-genbuildinfo","end":"/usr/bin/pdb","checksum":"fcd12ca69011f5033c3706ba868e7f2983050598"} 2022-02-11 15:06:09,958 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 15:06:09,958 - wazuh_testing - DEBUG - 2022/02/11 19:05:50 wazuh-db[16456] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.174 ms. 2022-02-11 15:06:09,958 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 15:06:09,959 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 15:06:09,959 - wazuh_testing - DEBUG - 2022/02/11 19:05:50 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602747,"version":2,"begin":"/sbin/ctrlaltdel","end":"/usr/bin/apt-extracttemplates","tail":"/usr/bin/apt-ftparchive","checksum":"e59c4a767ec9f4a84e8159e698e124a51a766899"} 2022-02-11 15:06:09,959 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 15:06:09,959 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 rootcheck[21555] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled. 2022-02-11 15:06:09,959 - wazuh_testing - DEBUG - 2022/02/11 19:05:50 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602747,"version":2,"begin":"/usr/bin/apt-ftparchive","end":"/usr/bin/dpkg-divert","checksum":"ab79628f5b16446ec1a1f2daeaf1afd2511680e1"} 2022-02-11 15:06:09,959 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:06:09,959 - wazuh_testing - DEBUG - 2022/02/11 19:05:50 wazuh-db[16456] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.213 ms. 2022-02-11 15:06:09,959 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] syscom.c:123 at syscom_main(): DEBUG: (6284): Local requests thread ready. 2022-02-11 15:06:09,960 - wazuh_testing - DEBUG - 2022/02/11 19:05:50 wazuh-db[16456] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.202 ms. 2022-02-11 15:06:09,960 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] mq_op.c:47 at StartMQ(): DEBUG: Connected succesfully to 'queue/sockets/queue' after 0 attempts 2022-02-11 15:06:09,960 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] mq_op.c:48 at StartMQ(): DEBUG: (unix_domain) Maximum send buffer set to: '212992'. 2022-02-11 15:06:09,960 - wazuh_testing - DEBUG - 2022/02/11 19:05:50 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602747,"version":2,"begin":"/sbin/ctrlaltdel","end":"/sbin/mkhomedir_helper","tail":"/sbin/mkswap","checksum":"7a7df0bd9bb5154b28eb072bebe1af0b79c59afb"} 2022-02-11 15:06:09,960 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:185 at main(): INFO: Started (pid: 21557). 2022-02-11 15:06:09,960 - wazuh_testing - DEBUG - 2022/02/11 19:05:50 wazuh-db[16456] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.133 ms. 2022-02-11 15:06:09,960 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:193 at main(): INFO: (6003): Monitoring path: '/bin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 15:06:09,961 - wazuh_testing - DEBUG - 2022/02/11 19:05:51 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602747,"version":2,"begin":"/sbin/mkswap","end":"/usr/bin/apt-extracttemplates","checksum":"9b9046bdc8a3ae092896ff2f1ee3b4d56d3af034"} 2022-02-11 15:06:09,961 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:193 at main(): INFO: (6003): Monitoring path: '/boot', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 15:06:09,961 - wazuh_testing - DEBUG - 2022/02/11 19:05:51 wazuh-db[16456] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.106 ms. 2022-02-11 15:06:09,961 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:193 at main(): INFO: (6003): Monitoring path: '/etc', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 15:06:09,961 - wazuh_testing - DEBUG - 2022/02/11 19:05:51 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602747,"version":2,"begin":"/sbin/mkswap","end":"/sbin/start-stop-daemon","tail":"/sbin/sulogin","checksum":"b356159685213d77a501787c4ba65eff3cf7fba1"} 2022-02-11 15:06:09,961 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:193 at main(): INFO: (6003): Monitoring path: '/sbin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 15:06:09,961 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir1', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 15:06:09,961 - wazuh_testing - DEBUG - 2022/02/11 19:05:51 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602747,"version":2,"begin":"/sbin/sulogin","end":"/usr/bin/apt-extracttemplates","checksum":"5500e886efa586868d993de6b6d2a6c07bf1242c"} 2022-02-11 15:06:09,961 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir2', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | realtime'. 2022-02-11 15:06:09,962 - wazuh_testing - DEBUG - 2022/02/11 19:05:51 wazuh-db[16456] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.076 ms. 2022-02-11 15:06:09,962 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir3', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | whodata'. 2022-02-11 15:06:09,962 - wazuh_testing - DEBUG - 2022/02/11 19:05:51 wazuh-db[16456] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.084 ms. 2022-02-11 15:06:09,962 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/bin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 15:06:09,962 - wazuh_testing - DEBUG - 2022/02/11 19:05:51 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602747,"version":2,"begin":"/sbin/sulogin","end":"/sbin/wipefs","tail":"/sbin/zramctl","checksum":"086fb81bf040732edfe2a920d67de456c77c8c3d"} 2022-02-11 15:06:09,962 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/sbin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 15:06:09,962 - wazuh_testing - DEBUG - 2022/02/11 19:05:51 wazuh-db[16456] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.079 ms. 2022-02-11 15:06:09,962 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:215 at main(): DEBUG: (6357): Maximum disk quota size limit configured to '1048576 KB'. 2022-02-11 15:06:09,962 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mtab' 2022-02-11 15:06:09,963 - wazuh_testing - DEBUG - 2022/02/11 19:05:51 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602747,"version":2,"begin":"/sbin/zramctl","end":"/usr/bin/apt-extracttemplates","checksum":"8ff04846f6c34bcc55a061881d39b5db64c6be1b"} 2022-02-11 15:06:09,963 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/hosts.deny' 2022-02-11 15:06:09,963 - wazuh_testing - DEBUG - 2022/02/11 19:05:51 wazuh-db[16456] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.059 ms. 2022-02-11 15:06:09,963 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mail/statistics' 2022-02-11 15:06:09,963 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random-seed' 2022-02-11 15:06:09,963 - wazuh_testing - DEBUG - 2022/02/11 19:05:51 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602747,"version":2,"begin":"/sbin/zramctl","end":"/usr/bin/aclocal-1.16","tail":"/usr/bin/addpart","checksum":"25430686c11e3e3f2d7832f1af41125671853a57"} 2022-02-11 15:06:09,963 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random.seed' 2022-02-11 15:06:09,963 - wazuh_testing - DEBUG - 2022/02/11 19:05:51 wazuh-db[16456] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.072 ms. 2022-02-11 15:06:09,964 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/adjtime' 2022-02-11 15:06:09,964 - wazuh_testing - DEBUG - 2022/02/11 19:05:51 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602747,"version":2,"begin":"/usr/bin/addpart","end":"/usr/bin/apt-extracttemplates","checksum":"7d1a3bbe28f2c9e567f8311757d46ea5365d7112"} 2022-02-11 15:06:09,964 - wazuh_testing - DEBUG - 2022/02/11 19:05:51 wazuh-db[16456] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.075 ms. 2022-02-11 15:06:09,964 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/httpd/logs' 2022-02-11 15:06:09,964 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/utmpx' 2022-02-11 15:06:09,964 - wazuh_testing - DEBUG - 2022/02/11 19:05:51 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602747,"version":2,"begin":"/usr/bin/[","end":"/usr/bin/aclocal-1.16","checksum":"0f1d35a6565c33bf9697c50fd2d7d2a4ebccbc45"} 2022-02-11 15:06:09,964 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/wtmpx' 2022-02-11 15:06:09,964 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/cups/certs' 2022-02-11 15:06:09,964 - wazuh_testing - DEBUG - 2022/02/11 19:05:51 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602747,"version":2,"begin":"/sbin/zramctl","end":"/usr/bin/2to3-2.7","tail":"/usr/bin/[","checksum":"b454bd2e2fc67b4bd9be5dfe835303d4a4cc4605"} 2022-02-11 15:06:09,964 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/dumpdates' 2022-02-11 15:06:09,964 - wazuh_testing - DEBUG - 2022/02/11 19:05:51 wazuh-db[16456] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.068 ms. 2022-02-11 15:06:09,965 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/svc/volatile' 2022-02-11 15:06:09,965 - wazuh_testing - DEBUG - 2022/02/11 19:05:51 wazuh-db[16456] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.056 ms. 2022-02-11 15:06:09,965 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/security' 2022-02-11 15:06:09,965 - wazuh_testing - DEBUG - 2022/02/11 19:05:51 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602747,"version":2,"begin":"/sbin/zramctl","end":"/sbin/zramctl","tail":"/testdir1/testdir1.txt","checksum":"58b2b87ce2162d80a895c740e0ed2124836230b7"} 2022-02-11 15:06:09,965 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/debug' 2022-02-11 15:06:09,965 - wazuh_testing - DEBUG - 2022/02/11 19:05:51 wazuh-db[16456] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.043 ms. 2022-02-11 15:06:09,965 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/dev/core' 2022-02-11 15:06:09,965 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '^/proc' 2022-02-11 15:06:09,965 - wazuh_testing - DEBUG - 2022/02/11 19:05:52 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602747,"version":2,"begin":"/testdir1/testdir1.txt","end":"/usr/bin/2to3-2.7","checksum":"d52e35d71d70a93f6663ee86213ccf2f0bb4499e"} 2022-02-11 15:06:09,965 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '.log$|.swp$' 2022-02-11 15:06:09,965 - wazuh_testing - DEBUG - 2022/02/11 19:05:52 wazuh-db[16456] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.034 ms. 2022-02-11 15:06:09,965 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:235 at main(): INFO: (6004): No diff for file: '/etc/ssl/private.key' 2022-02-11 15:06:09,966 - wazuh_testing - DEBUG - 2022/02/11 19:05:52 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602747,"version":2,"begin":"/testdir1/testdir1.txt","end":"/testdir1/testdir1.txt","tail":"/usr/bin/2to3-2.7","checksum":"74df98e9c3d2e45724b1abb5c124eeef9879e3e9"} 2022-02-11 15:06:09,966 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:245 at main(): INFO: (6016): Directory set for real time monitoring: '/testdir2'. 2022-02-11 15:06:09,966 - wazuh_testing - DEBUG - 2022/02/11 19:05:52 wazuh-db[16456] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.020 ms. 2022-02-11 15:06:09,966 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] syscheck_audit.c:243 at audit_init(): WARNING: (6924): Who-data engine cannot start because Auditd is not running. 2022-02-11 15:06:09,966 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] main.c:264 at main(): WARNING: (6913): Who-data engine could not start. Switching who-data to real-time. 2022-02-11 15:06:09,966 - wazuh_testing - DEBUG - 2022/02/11 19:05:52 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602747,"version":2,"begin":"/usr/bin/2to3-2.7","end":"/usr/bin/2to3-2.7","checksum":"f621f8dd560e58c5f017dfd42d98bb3a72466d1d"} 2022-02-11 15:06:09,966 - wazuh_testing - DEBUG - 2022/02/11 19:05:52 wazuh-db[16456] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.021 ms. 2022-02-11 15:06:09,966 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] run_check.c:194 at start_daemon(): DEBUG: (6320): Setting process priority to: '10' 2022-02-11 15:06:09,966 - wazuh_testing - DEBUG - 2022/02/11 19:05:52 wazuh-db[16456] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file save2 {"path":"/testdir1/testdir1.txt","timestamp":1644602747,"version":2,"attributes":{"type":"file","size":0,"perm":"rw-r--r--","uid":"0","gid":"0","user_name":"root","group_name":"root","inode":17179747,"mtime":1644602744,"hash_md5":"d41d8cd98f00b204e9800998ecf8427e","hash_sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","hash_sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","checksum":"e3fb1d537c20d8bb657d913a5e2f4d9c1fa89db8"}} 2022-02-11 15:06:09,966 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:06:09,966 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] run_check.c:229 at start_daemon(): INFO: (6000): Starting daemon... 2022-02-11 15:06:09,966 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] run_check.c:232 at start_daemon(): INFO: (6010): File integrity monitoring scan frequency: 20 seconds 2022-02-11 15:06:09,967 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 15:06:09,967 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644602747}} 2022-02-11 15:06:09,967 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-manager and message: .*Agent 001 query: (.+) save2 2022-02-11 15:06:09,967 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 15:06:09,967 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-11 15:06:09,967 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-11 15:06:09,967 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-11 15:06:09,967 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-11 15:06:09,968 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 15:06:09,968 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 15:06:09,968 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644602747}} 2022-02-11 15:06:09,968 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.325 sec (0.321 clock sec) 2022-02-11 15:06:09,968 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1621, path count: 1627 2022-02-11 15:06:09,968 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:06:09,969 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:06:09,969 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:06:09,969 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] run_check.c:387 at fim_run_realtime(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-11 15:06:09,970 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] run_check.c:543 at log_realtime_status(): INFO: (6012): Real-time file integrity monitoring started. 2022-02-11 15:06:09,970 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] run_check.c:568 at symlink_checker_thread(): DEBUG: (6033): Starting symbolic link updater. Interval '600'. 2022-02-11 15:06:09,970 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. 2022-02-11 15:06:09,970 - wazuh_testing - DEBUG - 2022/02/11 19:05:47 wazuh-syscheckd[21555] run_check.c:82 at fim_send_sync_msg(): DEBUG: (6317): Sending integrity control message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1644602747,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"7519e3e1108e6887a3132943199870a40d2a3b4e"}} 2022-02-11 15:06:09,971 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-agent1 and message: .*Sending integrity control message: (.+)$ 2022-02-11 15:06:10,953 - wazuh_testing - DEBUG - Cleaning temporal files... 2022-02-11 15:06:10,954 - wazuh_testing - DEBUG - Checking results... 2022-02-11 15:06:10,955 - wazuh_testing - DEBUG - Received from wazuh-manager the expected message: fim_file 2022-02-11 15:06:10,956 - wazuh_testing - DEBUG - Received from wazuh-agent1 the expected message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1644602747,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"7519e3e1108e6887a3132943199870a40d2a3b4e"}} 2022-02-11 15:06:37,268 - wazuh_testing - DEBUG - Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-11 15:06:37,269 - wazuh_testing - DEBUG - Starting file composer for wazuh-manager and path: /var/ossec/logs/ossec.log. Composite file in /home/camila/Escritorio/repo/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-manager_ossec.log.tmp 2022-02-11 15:06:37,270 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-11 15:06:37,272 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-manager and message: .*Initializing FIM Integrity Synchronization check. (.+)$ 2022-02-11 15:06:38,774 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-modulesd:syscollector: INFO: Stop received for Syscollector. 2022-02-11 15:06:38,774 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 12 disconnected. 2022-02-11 15:06:38,774 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-monitord: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:06:38,774 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-logcollector: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:06:38,775 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-remoted: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:06:38,775 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 28 disconnected. 2022-02-11 15:06:38,775 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 18 disconnected. 2022-02-11 15:06:38,775 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 21 disconnected. 2022-02-11 15:06:38,775 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 16 disconnected. 2022-02-11 15:06:38,775 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-syscheckd[16502] sig_op.c:49 at HandleSIG(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:06:38,776 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-analysisd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:06:38,776 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 38 disconnected. 2022-02-11 15:06:38,776 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 37 disconnected. 2022-02-11 15:06:38,776 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 34 disconnected. 2022-02-11 15:06:38,777 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 35 disconnected. 2022-02-11 15:06:38,777 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 33 disconnected. 2022-02-11 15:06:38,777 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 31 disconnected. 2022-02-11 15:06:38,777 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 27 disconnected. 2022-02-11 15:06:38,777 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 32 disconnected. 2022-02-11 15:06:38,778 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 25 disconnected. 2022-02-11 15:06:38,778 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 30 disconnected. 2022-02-11 15:06:38,778 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 24 disconnected. 2022-02-11 15:06:38,779 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 22 disconnected. 2022-02-11 15:06:38,779 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 11 disconnected. 2022-02-11 15:06:38,779 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 10 disconnected. 2022-02-11 15:06:38,780 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 13 disconnected. 2022-02-11 15:06:38,780 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 26 disconnected. 2022-02-11 15:06:38,780 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 23 disconnected. 2022-02-11 15:06:38,781 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 20 disconnected. 2022-02-11 15:06:38,781 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 29 disconnected. 2022-02-11 15:06:38,781 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 19 disconnected. 2022-02-11 15:06:38,781 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 6 disconnected. 2022-02-11 15:06:38,782 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-execd: INFO: (1314): Shutdown received. Deleting responses. 2022-02-11 15:06:38,782 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-execd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:06:38,782 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:468 at handler(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:06:38,782 - wazuh_testing - DEBUG - 2022/02/11 19:06:17 wazuh-db[16456] wdb.c:872 at wdb_close_all(): DEBUG: Closing all databases... 2022-02-11 15:06:38,783 - wazuh_testing - DEBUG - 2022/02/11 19:06:17 wazuh-db[16456] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent 001 2022-02-11 15:06:38,783 - wazuh_testing - DEBUG - 2022/02/11 19:06:17 wazuh-db[16456] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent 000 2022-02-11 15:06:38,783 - wazuh_testing - DEBUG - 2022/02/11 19:06:17 wazuh-db[16456] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent mitre 2022-02-11 15:06:38,784 - wazuh_testing - DEBUG - 2022/02/11 19:06:17 wazuh-db[16456] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent global 2022-02-11 15:06:38,784 - wazuh_testing - DEBUG - 2022/02/11 19:06:17 wazuh-db[16456] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent tasks 2022-02-11 15:06:38,784 - wazuh_testing - DEBUG - 2022/02/11 19:06:17 wazuh-db[16456] main.c:231 at main(): DEBUG: Template file removed again: queue/db/.template.db 2022-02-11 15:06:38,784 - wazuh_testing - DEBUG - 2022/02/11 19:06:17 wazuh-authd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:06:38,785 - wazuh_testing - DEBUG - 2022/02/11 19:06:18 wazuh-authd: INFO: Exiting... 2022-02-11 15:06:38,785 - wazuh_testing - DEBUG - 2022/02/11 19:06:23 wazuh-db[17375] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 15:06:38,785 - wazuh_testing - DEBUG - 2022/02/11 19:06:23 wazuh-db[17375] main.c:101 at main(): DEBUG: Wazuh home directory: /var/ossec 2022-02-11 15:06:38,785 - wazuh_testing - DEBUG - 2022/02/11 19:06:23 wazuh-syscheckd[17379] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 15:06:38,786 - wazuh_testing - DEBUG - 2022/02/11 19:06:23 wazuh-syscheckd[17379] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 15:06:38,786 - wazuh_testing - DEBUG - 2022/02/11 19:06:23 wazuh-syscheckd[17379] syscheck-config.c:122 at organize_syscheck_dirs(): DEBUG: No directory entries to organize in syscheck configuration. 2022-02-11 15:06:38,786 - wazuh_testing - DEBUG - 2022/02/11 19:06:25 wazuh-csyslogd: INFO: Remote syslog server not configured. Clean exit. 2022-02-11 15:06:38,787 - wazuh_testing - DEBUG - 2022/02/11 19:06:25 wazuh-dbd: INFO: Database not configured. Clean exit. 2022-02-11 15:06:38,787 - wazuh_testing - DEBUG - 2022/02/11 19:06:25 wazuh-integratord: INFO: Remote integrations not configured. Clean exit. 2022-02-11 15:06:38,787 - wazuh_testing - DEBUG - 2022/02/11 19:06:25 wazuh-agentlessd: INFO: Not configured. Exiting. 2022-02-11 15:06:38,787 - wazuh_testing - DEBUG - 2022/02/11 19:06:25 wazuh-authd: INFO: Started (pid: 17445). 2022-02-11 15:06:38,788 - wazuh_testing - DEBUG - 2022/02/11 19:06:25 wazuh-authd: INFO: Accepting connections on port 1515. No password required. 2022-02-11 15:06:38,788 - wazuh_testing - DEBUG - 2022/02/11 19:06:25 wazuh-authd: INFO: Setting network timeout to 1.000000 sec. 2022-02-11 15:06:38,788 - wazuh_testing - DEBUG - 2022/02/11 19:06:26 wazuh-db[17459] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 15:06:38,788 - wazuh_testing - DEBUG - 2022/02/11 19:06:26 wazuh-db[17459] main.c:101 at main(): DEBUG: Wazuh home directory: /var/ossec 2022-02-11 15:06:38,788 - wazuh_testing - DEBUG - 2022/02/11 19:06:26 wazuh-db[17459] main.c:122 at main(): DEBUG: Template file removed: /var/ossec/queue/db/.template.db 2022-02-11 15:06:38,789 - wazuh_testing - DEBUG - 2022/02/11 19:06:26 wazuh-db[17459] main.c:178 at main(): INFO: Started (pid: 17461). 2022-02-11 15:06:38,789 - wazuh_testing - DEBUG - 2022/02/11 19:06:27 wazuh-execd: INFO: (1350): Active response disabled. 2022-02-11 15:06:38,789 - wazuh_testing - DEBUG - 2022/02/11 19:06:27 wazuh-execd: INFO: Started (pid: 17484). 2022-02-11 15:06:38,789 - wazuh_testing - DEBUG - 2022/02/11 19:06:28 wazuh-analysisd: INFO: Total rules enabled: '3882' 2022-02-11 15:06:38,789 - wazuh_testing - DEBUG - 2022/02/11 19:06:28 wazuh-analysisd: INFO: Started (pid: 17498). 2022-02-11 15:06:38,790 - wazuh_testing - DEBUG - 2022/02/11 19:06:28 wazuh-db[17459] main.c:290 at run_dealer(): DEBUG: New client connected (6). 2022-02-11 15:06:38,790 - wazuh_testing - DEBUG - 2022/02/11 19:06:28 wazuh-analysisd: INFO: (7200): Logtest started 2022-02-11 15:06:38,790 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 15:06:38,790 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 15:06:38,790 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] syscheck-config.c:122 at organize_syscheck_dirs(): DEBUG: No directory entries to organize in syscheck configuration. 2022-02-11 15:06:38,791 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] main.c:118 at main(): INFO: (6678): No directory provided for syscheck to monitor. 2022-02-11 15:06:38,791 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] main.c:136 at main(): INFO: (6001): File integrity monitoring disabled. 2022-02-11 15:06:38,791 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 rootcheck[17593] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled. 2022-02-11 15:06:38,791 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:06:38,791 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] syscom.c:123 at syscom_main(): DEBUG: (6284): Local requests thread ready. 2022-02-11 15:06:38,791 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] mq_op.c:47 at StartMQ(): DEBUG: Connected succesfully to 'queue/sockets/queue' after 0 attempts 2022-02-11 15:06:38,792 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] mq_op.c:48 at StartMQ(): DEBUG: (unix_domain) Maximum send buffer set to: '212992'. 2022-02-11 15:06:38,792 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] main.c:185 at main(): INFO: Started (pid: 17595). 2022-02-11 15:06:38,792 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] main.c:215 at main(): DEBUG: (6357): Maximum disk quota size limit configured to '1048576 KB'. 2022-02-11 15:06:38,792 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] run_check.c:194 at start_daemon(): DEBUG: (6320): Setting process priority to: '10' 2022-02-11 15:06:38,792 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:06:38,793 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] run_check.c:229 at start_daemon(): INFO: (6000): Starting daemon... 2022-02-11 15:06:38,793 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] run_check.c:232 at start_daemon(): INFO: (6010): File integrity monitoring scan frequency: 43200 seconds 2022-02-11 15:06:38,793 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 15:06:38,793 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644602789}} 2022-02-11 15:06:38,793 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 15:06:38,793 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 15:06:38,794 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 15:06:38,794 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644602789}} 2022-02-11 15:06:38,794 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-db[17459] main.c:290 at run_dealer(): DEBUG: New client connected (10). 2022-02-11 15:06:38,794 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.000 sec (0.000 clock sec) 2022-02-11 15:06:38,795 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-db[17459] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 000 query: syscheck scan_info_update start_scan 1644602789 2022-02-11 15:06:38,795 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 0, path count: 0 2022-02-11 15:06:38,795 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-db[17459] main.c:290 at run_dealer(): DEBUG: New client connected (11). 2022-02-11 15:06:38,795 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-db[17459] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 000 query: syscheck scan_info_update end_scan 1644602789 2022-02-11 15:06:38,795 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:06:38,796 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:06:38,796 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:06:38,796 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. 2022-02-11 15:06:38,797 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-manager and message: .*Initializing FIM Integrity Synchronization check. (.+)$ 2022-02-11 15:06:39,774 - wazuh_testing - DEBUG - Cleaning temporal files... 2022-02-11 15:06:39,775 - wazuh_testing - DEBUG - Checking results... 2022-02-11 15:06:39,775 - wazuh_testing - DEBUG - Received from wazuh-manager the expected message: Sync interval is 300 seconds.
-------------------------------Captured log call--------------------------------
DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:1005 Cleaning temporal files... DEBUG wazuh_testing:monitoring.py:994 Checking results... DEBUG wazuh_testing:monitoring.py:1000 Received from wazuh-manager the expected message: fim_file DEBUG wazuh_testing:monitoring.py:1000 Received from wazuh-agent1 the expected message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1644602747,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"7519e3e1108e6887a3132943199870a40d2a3b4e"}} DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:1005 Cleaning temporal files... DEBUG wazuh_testing:monitoring.py:994 Checking results... DEBUG wazuh_testing:monitoring.py:1000 Received from wazuh-manager the expected message: Sync interval is 300 seconds.

Passed

test_synchronization.py::test_synchronization[testdir1-modify-wazuh-agent1]

34.25

------------------------------Captured stderr call------------------------------
2022-02-11 15:06:53,233 - wazuh_testing - DEBUG - Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-11 15:06:53,234 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-11 15:06:53,234 - wazuh_testing - DEBUG - Starting file composer for wazuh-agent1 and path: /var/ossec/logs/ossec.log. Composite file in /home/camila/Escritorio/repo/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-agent1_ossec.log.tmp 2022-02-11 15:06:53,236 - wazuh_testing - DEBUG - Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-11 15:06:53,236 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-agent1 and message: .*Sending integrity control message: (.+)$ 2022-02-11 15:06:53,237 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-11 15:06:53,238 - wazuh_testing - DEBUG - Starting file composer for wazuh-manager and path: /var/ossec/logs/ossec.log. Composite file in /home/camila/Escritorio/repo/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-manager_ossec.log.tmp 2022-02-11 15:06:53,239 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-manager and message: .*Agent 001 query: (.+) save2 2022-02-11 15:06:54,738 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-agentd: ERROR: (1137): Lost connection with manager. Setting lock. 2022-02-11 15:06:54,738 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-agentd: INFO: Closing connection to server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 15:06:54,738 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 15:06:54,738 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-agentd: ERROR: (1216): Unable to connect to '172.17.0.2:1514/tcp': 'Connection refused'. 2022-02-11 15:06:54,739 - wazuh_testing - DEBUG - 2022/02/11 19:06:24 wazuh-syscheckd[22058] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 15:06:54,739 - wazuh_testing - DEBUG - 2022/02/11 19:06:24 wazuh-syscheckd[22058] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644602784}} 2022-02-11 15:06:54,739 - wazuh_testing - DEBUG - 2022/02/11 19:06:24 wazuh-syscheckd[22058] wait_op.c:101 at os_wait(): WARNING: Process locked due to agent is offline. Waiting for connection... 2022-02-11 15:06:54,739 - wazuh_testing - DEBUG - 2022/02/11 19:06:26 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 15:06:54,739 - wazuh_testing - DEBUG - 2022/02/11 19:06:26 wazuh-agentd: ERROR: (1216): Unable to connect to '172.17.0.2:1514/tcp': 'Connection refused'. 2022-02-11 15:06:54,740 - wazuh_testing - DEBUG - 2022/02/11 19:06:36 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 15:06:54,740 - wazuh_testing - DEBUG - 2022/02/11 19:06:36 wazuh-agentd: INFO: (4102): Connected to the server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 15:06:54,740 - wazuh_testing - DEBUG - 2022/02/11 19:06:36 wazuh-agentd: INFO: Server responded. Releasing lock. 2022-02-11 15:06:54,740 - wazuh_testing - DEBUG - 2022/02/11 19:06:39 wazuh-syscheckd[22058] wait_op.c:116 at os_wait(): INFO: Agent is now online. Process unlocked, continuing... 2022-02-11 15:06:54,740 - wazuh_testing - DEBUG - 2022/02/11 19:06:39 wazuh-syscheckd[22058] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 15:06:54,741 - wazuh_testing - DEBUG - 2022/02/11 19:06:39 wazuh-syscheckd[22058] fim_db.c:436 at fim_db_check_transaction(): DEBUG: Database transaction completed. 2022-02-11 15:06:54,741 - wazuh_testing - DEBUG - 2022/02/11 19:06:39 wazuh-syscheckd[22058] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-11 15:06:54,741 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-modulesd:syscollector: INFO: Stop received for Syscollector. 2022-02-11 15:06:54,741 - wazuh_testing - DEBUG - 2022/02/11 19:06:39 wazuh-syscheckd[22058] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-11 15:06:54,741 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 12 disconnected. 2022-02-11 15:06:54,742 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-monitord: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:06:54,742 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-logcollector: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:06:54,742 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-remoted: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:06:54,742 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 28 disconnected. 2022-02-11 15:06:54,742 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 18 disconnected. 2022-02-11 15:06:54,742 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 21 disconnected. 2022-02-11 15:06:54,743 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 16 disconnected. 2022-02-11 15:06:54,743 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-syscheckd[16502] sig_op.c:49 at HandleSIG(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:06:54,743 - wazuh_testing - DEBUG - 2022/02/11 19:06:39 wazuh-syscheckd[22058] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"event","data":{"path":"/testdir1/testdir1.txt","version":2,"mode":"scheduled","type":"modified","timestamp":1644602799,"attributes":{"type":"file","size":0,"perm":"rw-r--r--","uid":"0","gid":"0","user_name":"root","group_name":"root","inode":17179747,"mtime":1644602779,"hash_md5":"d41d8cd98f00b204e9800998ecf8427e","hash_sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","hash_sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","checksum":"c6a35a987856464956920b5b3f8e4240dee330f4"},"changed_attributes":["mtime"],"old_attributes":{"type":"file","size":0,"perm":"rw-r--r--","uid":"0","gid":"0","user_name":"root","group_name":"root","inode":17179747,"mtime":1644602758,"hash_md5":"d41d8cd98f00b204e9800998ecf8427e","hash_sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","hash_sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","checksum":"df8253d9e62c868b158443ea0307fb89e3399e3b"}}} 2022-02-11 15:06:54,743 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-analysisd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:06:54,743 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 38 disconnected. 2022-02-11 15:06:54,743 - wazuh_testing - DEBUG - 2022/02/11 19:06:39 wazuh-syscheckd[22058] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-11 15:06:54,743 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 37 disconnected. 2022-02-11 15:06:54,744 - wazuh_testing - DEBUG - 2022/02/11 19:06:39 wazuh-syscheckd[22058] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-11 15:06:54,744 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 34 disconnected. 2022-02-11 15:06:54,744 - wazuh_testing - DEBUG - 2022/02/11 19:06:39 wazuh-syscheckd[22058] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 15:06:54,744 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 35 disconnected. 2022-02-11 15:06:54,744 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 33 disconnected. 2022-02-11 15:06:54,744 - wazuh_testing - DEBUG - 2022/02/11 19:06:39 wazuh-syscheckd[22058] create_db.c:220 at fim_scan(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-11 15:06:54,744 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 31 disconnected. 2022-02-11 15:06:54,744 - wazuh_testing - DEBUG - 2022/02/11 19:06:39 wazuh-syscheckd[22058] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 15:06:54,745 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 27 disconnected. 2022-02-11 15:06:54,745 - wazuh_testing - DEBUG - 2022/02/11 19:06:39 wazuh-syscheckd[22058] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644602799}} 2022-02-11 15:06:54,745 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 32 disconnected. 2022-02-11 15:06:54,745 - wazuh_testing - DEBUG - 2022/02/11 19:06:39 wazuh-syscheckd[22058] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 15.348 sec (0.344 clock sec) 2022-02-11 15:06:54,745 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 25 disconnected. 2022-02-11 15:06:54,745 - wazuh_testing - DEBUG - 2022/02/11 19:06:39 wazuh-syscheckd[22058] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1621, path count: 1627 2022-02-11 15:06:54,746 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 30 disconnected. 2022-02-11 15:06:54,746 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 24 disconnected. 2022-02-11 15:06:54,746 - wazuh_testing - DEBUG - 2022/02/11 19:06:45 wazuh-logcollector: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:06:54,746 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 22 disconnected. 2022-02-11 15:06:54,746 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 11 disconnected. 2022-02-11 15:06:54,746 - wazuh_testing - DEBUG - 2022/02/11 19:06:45 wazuh-syscheckd[22058] sig_op.c:49 at HandleSIG(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:06:54,747 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 10 disconnected. 2022-02-11 15:06:54,747 - wazuh_testing - DEBUG - 2022/02/11 19:06:45 wazuh-agentd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:06:54,747 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 13 disconnected. 2022-02-11 15:06:54,747 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 26 disconnected. 2022-02-11 15:06:54,747 - wazuh_testing - DEBUG - 2022/02/11 19:06:45 wazuh-execd: INFO: (1314): Shutdown received. Deleting responses. 2022-02-11 15:06:54,747 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 23 disconnected. 2022-02-11 15:06:54,748 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 20 disconnected. 2022-02-11 15:06:54,748 - wazuh_testing - DEBUG - 2022/02/11 19:06:45 wazuh-execd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:06:54,748 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 29 disconnected. 2022-02-11 15:06:54,748 - wazuh_testing - DEBUG - 2022/02/11 19:06:45 wazuh-syscheckd[22685] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 15:06:54,748 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 19 disconnected. 2022-02-11 15:06:54,748 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:352 at run_worker(): DEBUG: Client 6 disconnected. 2022-02-11 15:06:54,749 - wazuh_testing - DEBUG - 2022/02/11 19:06:45 wazuh-syscheckd[22685] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 15:06:54,749 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-execd: INFO: (1314): Shutdown received. Deleting responses. 2022-02-11 15:06:54,749 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-execd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:06:54,749 - wazuh_testing - DEBUG - 2022/02/11 19:06:45 wazuh-syscheckd[22685] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-11 15:06:54,749 - wazuh_testing - DEBUG - 2022/02/11 19:06:16 wazuh-db[16456] main.c:468 at handler(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:06:54,749 - wazuh_testing - DEBUG - 2022/02/11 19:06:45 wazuh-syscheckd[22685] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-11 15:06:54,749 - wazuh_testing - DEBUG - 2022/02/11 19:06:17 wazuh-db[16456] wdb.c:872 at wdb_close_all(): DEBUG: Closing all databases... 2022-02-11 15:06:54,750 - wazuh_testing - DEBUG - 2022/02/11 19:06:45 wazuh-syscheckd[22685] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-11 15:06:54,750 - wazuh_testing - DEBUG - 2022/02/11 19:06:17 wazuh-db[16456] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent 001 2022-02-11 15:06:54,750 - wazuh_testing - DEBUG - 2022/02/11 19:06:45 wazuh-syscheckd[22685] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-11 15:06:54,750 - wazuh_testing - DEBUG - 2022/02/11 19:06:17 wazuh-db[16456] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent 000 2022-02-11 15:06:54,750 - wazuh_testing - DEBUG - 2022/02/11 19:06:45 wazuh-syscheckd[22685] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-11 15:06:54,750 - wazuh_testing - DEBUG - 2022/02/11 19:06:17 wazuh-db[16456] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent mitre 2022-02-11 15:06:54,750 - wazuh_testing - DEBUG - 2022/02/11 19:06:45 wazuh-syscheckd[22685] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ 2022-02-11 15:06:54,750 - wazuh_testing - DEBUG - 2022/02/11 19:06:17 wazuh-db[16456] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent global 2022-02-11 15:06:54,751 - wazuh_testing - DEBUG - 2022/02/11 19:06:45 wazuh-syscheckd[22685] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ OK? 2022-02-11 15:06:54,751 - wazuh_testing - DEBUG - 2022/02/11 19:06:17 wazuh-db[16456] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent tasks 2022-02-11 15:06:54,751 - wazuh_testing - DEBUG - 2022/02/11 19:06:17 wazuh-db[16456] main.c:231 at main(): DEBUG: Template file removed again: queue/db/.template.db 2022-02-11 15:06:54,751 - wazuh_testing - DEBUG - 2022/02/11 19:06:45 wazuh-syscheckd[22685] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-11 15:06:54,751 - wazuh_testing - DEBUG - 2022/02/11 19:06:17 wazuh-authd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:06:54,751 - wazuh_testing - DEBUG - 2022/02/11 19:06:45 wazuh-syscheckd[22685] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-11 15:06:54,751 - wazuh_testing - DEBUG - 2022/02/11 19:06:18 wazuh-authd: INFO: Exiting... 2022-02-11 15:06:54,751 - wazuh_testing - DEBUG - 2022/02/11 19:06:45 wazuh-syscheckd[22685] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 15:06:54,751 - wazuh_testing - DEBUG - 2022/02/11 19:06:23 wazuh-db[17375] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 15:06:54,752 - wazuh_testing - DEBUG - 2022/02/11 19:06:45 wazuh-syscheckd[22685] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 15:06:54,752 - wazuh_testing - DEBUG - 2022/02/11 19:06:23 wazuh-db[17375] main.c:101 at main(): DEBUG: Wazuh home directory: /var/ossec 2022-02-11 15:06:54,752 - wazuh_testing - DEBUG - 2022/02/11 19:06:45 wazuh-syscheckd[22685] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 15:06:54,752 - wazuh_testing - DEBUG - 2022/02/11 19:06:23 wazuh-syscheckd[17379] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 15:06:54,752 - wazuh_testing - DEBUG - 2022/02/11 19:06:45 wazuh-syscheckd[22685] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 15:06:54,752 - wazuh_testing - DEBUG - 2022/02/11 19:06:23 wazuh-syscheckd[17379] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 15:06:54,752 - wazuh_testing - DEBUG - 2022/02/11 19:06:45 wazuh-syscheckd[22685] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 15:06:54,752 - wazuh_testing - DEBUG - 2022/02/11 19:06:45 wazuh-syscheckd[22685] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 15:06:54,752 - wazuh_testing - DEBUG - 2022/02/11 19:06:23 wazuh-syscheckd[17379] syscheck-config.c:122 at organize_syscheck_dirs(): DEBUG: No directory entries to organize in syscheck configuration. 2022-02-11 15:06:54,753 - wazuh_testing - DEBUG - 2022/02/11 19:06:45 wazuh-execd: INFO: Started (pid: 22698). 2022-02-11 15:06:54,753 - wazuh_testing - DEBUG - 2022/02/11 19:06:25 wazuh-csyslogd: INFO: Remote syslog server not configured. Clean exit. 2022-02-11 15:06:54,753 - wazuh_testing - DEBUG - 2022/02/11 19:06:47 wazuh-agentd: INFO: (1410): Reading authentication keys file. 2022-02-11 15:06:54,753 - wazuh_testing - DEBUG - 2022/02/11 19:06:25 wazuh-dbd: INFO: Database not configured. Clean exit. 2022-02-11 15:06:54,753 - wazuh_testing - DEBUG - 2022/02/11 19:06:47 wazuh-agentd: INFO: Using notify time: 10 and max time to reconnect: 60 2022-02-11 15:06:54,753 - wazuh_testing - DEBUG - 2022/02/11 19:06:25 wazuh-integratord: INFO: Remote integrations not configured. Clean exit. 2022-02-11 15:06:54,753 - wazuh_testing - DEBUG - 2022/02/11 19:06:47 wazuh-agentd: INFO: Version detected -> Linux |wazuh-agent1 |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64 [Debian GNU/Linux|debian: 10 (buster)] - Wazuh v4.2.5 2022-02-11 15:06:54,753 - wazuh_testing - DEBUG - 2022/02/11 19:06:25 wazuh-agentlessd: INFO: Not configured. Exiting. 2022-02-11 15:06:54,753 - wazuh_testing - DEBUG - 2022/02/11 19:06:47 wazuh-agentd: INFO: Started (pid: 22709). 2022-02-11 15:06:54,753 - wazuh_testing - DEBUG - 2022/02/11 19:06:25 wazuh-authd: INFO: Started (pid: 17445). 2022-02-11 15:06:54,754 - wazuh_testing - DEBUG - 2022/02/11 19:06:47 wazuh-agentd: INFO: Server IP Address: wazuh-manager/172.17.0.2 2022-02-11 15:06:54,754 - wazuh_testing - DEBUG - 2022/02/11 19:06:25 wazuh-authd: INFO: Accepting connections on port 1515. No password required. 2022-02-11 15:06:54,754 - wazuh_testing - DEBUG - 2022/02/11 19:06:47 wazuh-agentd: INFO: Using AES as encryption method. 2022-02-11 15:06:54,754 - wazuh_testing - DEBUG - 2022/02/11 19:06:25 wazuh-authd: INFO: Setting network timeout to 1.000000 sec. 2022-02-11 15:06:54,754 - wazuh_testing - DEBUG - 2022/02/11 19:06:47 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 15:06:54,754 - wazuh_testing - DEBUG - 2022/02/11 19:06:26 wazuh-db[17459] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 15:06:54,754 - wazuh_testing - DEBUG - 2022/02/11 19:06:26 wazuh-db[17459] main.c:101 at main(): DEBUG: Wazuh home directory: /var/ossec 2022-02-11 15:06:54,754 - wazuh_testing - DEBUG - 2022/02/11 19:06:47 wazuh-agentd: INFO: (4102): Connected to the server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 15:06:54,754 - wazuh_testing - DEBUG - 2022/02/11 19:06:26 wazuh-db[17459] main.c:122 at main(): DEBUG: Template file removed: /var/ossec/queue/db/.template.db 2022-02-11 15:06:54,754 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 15:06:54,755 - wazuh_testing - DEBUG - 2022/02/11 19:06:26 wazuh-db[17459] main.c:178 at main(): INFO: Started (pid: 17461). 2022-02-11 15:06:54,755 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 15:06:54,755 - wazuh_testing - DEBUG - 2022/02/11 19:06:27 wazuh-execd: INFO: (1350): Active response disabled. 2022-02-11 15:06:54,755 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-11 15:06:54,755 - wazuh_testing - DEBUG - 2022/02/11 19:06:27 wazuh-execd: INFO: Started (pid: 17484). 2022-02-11 15:06:54,755 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-11 15:06:54,755 - wazuh_testing - DEBUG - 2022/02/11 19:06:28 wazuh-analysisd: INFO: Total rules enabled: '3882' 2022-02-11 15:06:54,755 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-11 15:06:54,755 - wazuh_testing - DEBUG - 2022/02/11 19:06:28 wazuh-analysisd: INFO: Started (pid: 17498). 2022-02-11 15:06:54,755 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-11 15:06:54,755 - wazuh_testing - DEBUG - 2022/02/11 19:06:28 wazuh-db[17459] main.c:290 at run_dealer(): DEBUG: New client connected (6). 2022-02-11 15:06:54,755 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-11 15:06:54,756 - wazuh_testing - DEBUG - 2022/02/11 19:06:28 wazuh-analysisd: INFO: (7200): Logtest started 2022-02-11 15:06:54,756 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ 2022-02-11 15:06:54,756 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 15:06:54,756 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ OK? 2022-02-11 15:06:54,756 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 15:06:54,756 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-11 15:06:54,756 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] syscheck-config.c:122 at organize_syscheck_dirs(): DEBUG: No directory entries to organize in syscheck configuration. 2022-02-11 15:06:54,756 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-11 15:06:54,756 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] main.c:118 at main(): INFO: (6678): No directory provided for syscheck to monitor. 2022-02-11 15:06:54,756 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 15:06:54,756 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] main.c:136 at main(): INFO: (6001): File integrity monitoring disabled. 2022-02-11 15:06:54,756 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 15:06:54,757 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 rootcheck[17593] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled. 2022-02-11 15:06:54,757 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 15:06:54,757 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:06:54,757 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 15:06:54,757 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] syscom.c:123 at syscom_main(): DEBUG: (6284): Local requests thread ready. 2022-02-11 15:06:54,757 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 15:06:54,757 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] mq_op.c:47 at StartMQ(): DEBUG: Connected succesfully to 'queue/sockets/queue' after 0 attempts 2022-02-11 15:06:54,757 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 15:06:54,757 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] mq_op.c:48 at StartMQ(): DEBUG: (unix_domain) Maximum send buffer set to: '212992'. 2022-02-11 15:06:54,757 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 rootcheck[22721] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled. 2022-02-11 15:06:54,757 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] main.c:185 at main(): INFO: Started (pid: 17595). 2022-02-11 15:06:54,757 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:06:54,758 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] main.c:215 at main(): DEBUG: (6357): Maximum disk quota size limit configured to '1048576 KB'. 2022-02-11 15:06:54,758 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] syscom.c:123 at syscom_main(): DEBUG: (6284): Local requests thread ready. 2022-02-11 15:06:54,758 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] run_check.c:194 at start_daemon(): DEBUG: (6320): Setting process priority to: '10' 2022-02-11 15:06:54,758 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] mq_op.c:47 at StartMQ(): DEBUG: Connected succesfully to 'queue/sockets/queue' after 0 attempts 2022-02-11 15:06:54,758 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:06:54,758 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] mq_op.c:48 at StartMQ(): DEBUG: (unix_domain) Maximum send buffer set to: '212992'. 2022-02-11 15:06:54,758 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] main.c:185 at main(): INFO: Started (pid: 22723). 2022-02-11 15:06:54,758 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] run_check.c:229 at start_daemon(): INFO: (6000): Starting daemon... 2022-02-11 15:06:54,758 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] run_check.c:232 at start_daemon(): INFO: (6010): File integrity monitoring scan frequency: 43200 seconds 2022-02-11 15:06:54,758 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] main.c:193 at main(): INFO: (6003): Monitoring path: '/bin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 15:06:54,758 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 15:06:54,758 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] main.c:193 at main(): INFO: (6003): Monitoring path: '/boot', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 15:06:54,758 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] main.c:193 at main(): INFO: (6003): Monitoring path: '/etc', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 15:06:54,759 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] main.c:193 at main(): INFO: (6003): Monitoring path: '/sbin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 15:06:54,759 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644602789}} 2022-02-11 15:06:54,759 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir1', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 15:06:54,759 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 15:06:54,759 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir2', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | realtime'. 2022-02-11 15:06:54,759 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 15:06:54,759 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir3', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | whodata'. 2022-02-11 15:06:54,759 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 15:06:54,759 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/bin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 15:06:54,759 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644602789}} 2022-02-11 15:06:54,759 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-db[17459] main.c:290 at run_dealer(): DEBUG: New client connected (10). 2022-02-11 15:06:54,759 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/sbin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 15:06:54,759 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.000 sec (0.000 clock sec) 2022-02-11 15:06:54,759 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] main.c:215 at main(): DEBUG: (6357): Maximum disk quota size limit configured to '1048576 KB'. 2022-02-11 15:06:54,760 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-db[17459] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 000 query: syscheck scan_info_update start_scan 1644602789 2022-02-11 15:06:54,760 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mtab' 2022-02-11 15:06:54,760 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 0, path count: 0 2022-02-11 15:06:54,760 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-db[17459] main.c:290 at run_dealer(): DEBUG: New client connected (11). 2022-02-11 15:06:54,760 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/hosts.deny' 2022-02-11 15:06:54,760 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-db[17459] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 000 query: syscheck scan_info_update end_scan 1644602789 2022-02-11 15:06:54,760 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mail/statistics' 2022-02-11 15:06:54,760 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:06:54,760 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random-seed' 2022-02-11 15:06:54,760 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:06:54,760 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random.seed' 2022-02-11 15:06:54,761 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:06:54,761 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/adjtime' 2022-02-11 15:06:54,761 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. 2022-02-11 15:06:54,761 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/httpd/logs' 2022-02-11 15:06:54,761 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] run_check.c:568 at symlink_checker_thread(): DEBUG: (6033): Starting symbolic link updater. Interval '600'. 2022-02-11 15:06:54,761 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] run_check.c:82 at fim_send_sync_msg(): DEBUG: (6317): Sending integrity control message: {"component":"fim_file","type":"integrity_clear","data":{"id":1644602789,"version":2}} 2022-02-11 15:06:54,761 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/utmpx' 2022-02-11 15:06:54,761 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-syscheckd[17593] fim_sync.c:70 at fim_run_integrity(): DEBUG: Finished calculating FIM integrity. Time: 0.000 seconds. 2022-02-11 15:06:54,762 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/wtmpx' 2022-02-11 15:06:54,762 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-db[17459] main.c:290 at run_dealer(): DEBUG: New client connected (13). 2022-02-11 15:06:54,762 - wazuh_testing - DEBUG - 2022/02/11 19:06:29 wazuh-db[17459] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 000 query: fim_file integrity_clear {"id":1644602789,"version":2} 2022-02-11 15:06:54,762 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/cups/certs' 2022-02-11 15:06:54,762 - wazuh_testing - DEBUG - 2022/02/11 19:06:30 wazuh-remoted: INFO: Started (pid: 17614). Listening on port 1514/TCP (secure). 2022-02-11 15:06:54,762 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/dumpdates' 2022-02-11 15:06:54,762 - wazuh_testing - DEBUG - 2022/02/11 19:06:30 wazuh-db[17459] main.c:290 at run_dealer(): DEBUG: New client connected (12). 2022-02-11 15:06:54,762 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/svc/volatile' 2022-02-11 15:06:54,762 - wazuh_testing - DEBUG - 2022/02/11 19:06:30 wazuh-db[17459] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: reset-agents-connection synced 2022-02-11 15:06:54,762 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/security' 2022-02-11 15:06:54,762 - wazuh_testing - DEBUG - 2022/02/11 19:06:30 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 12 disconnected. 2022-02-11 15:06:54,762 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/debug' 2022-02-11 15:06:54,763 - wazuh_testing - DEBUG - 2022/02/11 19:06:30 wazuh-remoted: INFO: (1410): Reading authentication keys file. 2022-02-11 15:06:54,763 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/dev/core' 2022-02-11 15:06:54,763 - wazuh_testing - DEBUG - 2022/02/11 19:06:31 wazuh-logcollector: INFO: (1950): Analyzing file: '/var/ossec/logs/active-responses.log'. 2022-02-11 15:06:54,763 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '^/proc' 2022-02-11 15:06:54,763 - wazuh_testing - DEBUG - 2022/02/11 19:06:31 wazuh-logcollector: INFO: (1950): Analyzing file: '/var/log/dpkg.log'. 2022-02-11 15:06:54,763 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '.log$|.swp$' 2022-02-11 15:06:54,763 - wazuh_testing - DEBUG - 2022/02/11 19:06:31 wazuh-logcollector: INFO: Started (pid: 17649). 2022-02-11 15:06:54,763 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] main.c:235 at main(): INFO: (6004): No diff for file: '/etc/ssl/private.key' 2022-02-11 15:06:54,763 - wazuh_testing - DEBUG - 2022/02/11 19:06:32 wazuh-monitord: INFO: Started (pid: 17668). 2022-02-11 15:06:54,763 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] main.c:245 at main(): INFO: (6016): Directory set for real time monitoring: '/testdir2'. 2022-02-11 15:06:54,764 - wazuh_testing - DEBUG - 2022/02/11 19:06:33 wazuh-modulesd: INFO: Started (pid: 17680). 2022-02-11 15:06:54,764 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] syscheck_audit.c:243 at audit_init(): WARNING: (6924): Who-data engine cannot start because Auditd is not running. 2022-02-11 15:06:54,764 - wazuh_testing - DEBUG - 2022/02/11 19:06:33 wazuh-modulesd:agent-upgrade: INFO: (8153): Module Agent Upgrade started. 2022-02-11 15:06:54,764 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] main.c:264 at main(): WARNING: (6913): Who-data engine could not start. Switching who-data to real-time. 2022-02-11 15:06:54,764 - wazuh_testing - DEBUG - 2022/02/11 19:06:33 wazuh-modulesd:ciscat: INFO: Module disabled. Exiting... 2022-02-11 15:06:54,764 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] run_check.c:194 at start_daemon(): DEBUG: (6320): Setting process priority to: '10' 2022-02-11 15:06:54,764 - wazuh_testing - DEBUG - 2022/02/11 19:06:33 wazuh-modulesd:osquery: INFO: Module disabled. Exiting... 2022-02-11 15:06:54,764 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:06:54,764 - wazuh_testing - DEBUG - 2022/02/11 19:06:33 wazuh-modulesd:syscollector: INFO: Module disabled. Exiting... 2022-02-11 15:06:54,765 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] run_check.c:229 at start_daemon(): INFO: (6000): Starting daemon... 2022-02-11 15:06:54,765 - wazuh_testing - DEBUG - 2022/02/11 19:06:33 sca: INFO: Module disabled. Exiting. 2022-02-11 15:06:54,765 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] run_check.c:232 at start_daemon(): INFO: (6010): File integrity monitoring scan frequency: 20 seconds 2022-02-11 15:06:54,765 - wazuh_testing - DEBUG - 2022/02/11 19:06:33 wazuh-modulesd:database: INFO: Module started. 2022-02-11 15:06:54,765 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 15:06:54,765 - wazuh_testing - DEBUG - 2022/02/11 19:06:33 wazuh-modulesd:download: INFO: Module started. 2022-02-11 15:06:54,765 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644602808}} 2022-02-11 15:06:54,765 - wazuh_testing - DEBUG - 2022/02/11 19:06:33 wazuh-modulesd:control: INFO: Starting control thread. 2022-02-11 15:06:54,765 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 15:06:54,765 - wazuh_testing - DEBUG - 2022/02/11 19:06:33 wazuh-db[17459] main.c:290 at run_dealer(): DEBUG: New client connected (12). 2022-02-11 15:06:54,765 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-11 15:06:54,766 - wazuh_testing - DEBUG - 2022/02/11 19:06:33 wazuh-db[17459] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-name {"id":0,"name":"wazuh-manager"} 2022-02-11 15:06:54,766 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-11 15:06:54,766 - wazuh_testing - DEBUG - 2022/02/11 19:06:33 wazuh-modulesd:task-manager: INFO: (8200): Module Task Manager started. 2022-02-11 15:06:54,766 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-11 15:06:54,766 - wazuh_testing - DEBUG - 2022/02/11 19:06:33 wazuh-db[17459] main.c:290 at run_dealer(): DEBUG: New client connected (16). 2022-02-11 15:06:54,766 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-11 15:06:54,766 - wazuh_testing - DEBUG - 2022/02/11 19:06:33 wazuh-db[17459] wdb_parser.c:928 at wdb_parse(): DEBUG: Task query: set_timeout {"now":1644602793,"interval":900} 2022-02-11 15:06:54,766 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 15:06:54,766 - wazuh_testing - DEBUG - 2022/02/11 19:06:33 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 16 disconnected. 2022-02-11 15:06:54,766 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 15:06:54,767 - wazuh_testing - DEBUG - 2022/02/11 19:06:33 wazuh-db[17459] main.c:290 at run_dealer(): DEBUG: New client connected (16). 2022-02-11 15:06:54,767 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644602808}} 2022-02-11 15:06:54,767 - wazuh_testing - DEBUG - 2022/02/11 19:06:33 wazuh-db[17459] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":0,"version":"Wazuh v4.2.5","manager_host":"wazuh-manager","node_name":"wazuh-master","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-manager |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64","os_arch":"x86_64"} 2022-02-11 15:06:54,767 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.334 sec (0.330 clock sec) 2022-02-11 15:06:54,767 - wazuh_testing - DEBUG - 2022/02/11 19:06:33 wazuh-db[17459] wdb_parser.c:928 at wdb_parse(): DEBUG: Task query: delete_old {"timestamp":1643997993} 2022-02-11 15:06:54,767 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1621, path count: 1627 2022-02-11 15:06:54,767 - wazuh_testing - DEBUG - 2022/02/11 19:06:33 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 16 disconnected. 2022-02-11 15:06:54,767 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:06:54,768 - wazuh_testing - DEBUG - 2022/02/11 19:06:33 wazuh-db[17459] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: insert-agent {"id":1,"name":"wazuh-agent1","register_ip":"any","internal_key":"1111111111111111111111111111111111111111111111111111111111111111","group":"default","date_add":0} 2022-02-11 15:06:54,768 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:06:54,768 - wazuh_testing - DEBUG - 2022/02/11 19:06:33 wazuh-db[17459] wdb_global.c:89 at wdb_global_insert_agent(): DEBUG: SQLite: UNIQUE constraint failed: agent.id 2022-02-11 15:06:54,768 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] run_check.c:387 at fim_run_realtime(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-11 15:06:54,768 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] run_check.c:543 at log_realtime_status(): INFO: (6012): Real-time file integrity monitoring started. 2022-02-11 15:06:54,768 - wazuh_testing - DEBUG - 2022/02/11 19:06:33 wazuh-db[17459] wdb_parser.c:4784 at wdb_parse_global_insert_agent(): DEBUG: Global DB Cannot execute SQL query; err database queue/db/global.db: UNIQUE constraint failed: agent.id 2022-02-11 15:06:54,768 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:06:54,768 - wazuh_testing - DEBUG - 2022/02/11 19:06:33 wazuh-db[17459] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-group {"id":1,"group":"default"} 2022-02-11 15:06:54,768 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. 2022-02-11 15:06:54,768 - wazuh_testing - DEBUG - 2022/02/11 19:06:33 wazuh-db[17459] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: delete-agent-belong 1 2022-02-11 15:06:54,769 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] run_check.c:568 at symlink_checker_thread(): DEBUG: (6033): Starting symbolic link updater. Interval '600'. 2022-02-11 15:06:54,769 - wazuh_testing - DEBUG - 2022/02/11 19:06:33 wazuh-db[17459] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: find-group default 2022-02-11 15:06:54,769 - wazuh_testing - DEBUG - 2022/02/11 19:06:48 wazuh-syscheckd[22721] run_check.c:82 at fim_send_sync_msg(): DEBUG: (6317): Sending integrity control message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1644602808,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"9a33f0b60c5bb05102b85ed3b9bf0650f65ac565"}} 2022-02-11 15:06:54,769 - wazuh_testing - DEBUG - 2022/02/11 19:06:33 wazuh-db[17459] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: insert-agent-belong {"id_group":1,"id_agent":1} 2022-02-11 15:06:54,769 - wazuh_testing - DEBUG - 2022/02/11 19:06:33 wazuh-db[17459] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: get-all-agents last_id 0 2022-02-11 15:06:54,769 - wazuh_testing - DEBUG - 2022/02/11 19:06:33 wazuh-db[17459] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: select-groups 2022-02-11 15:06:54,770 - wazuh_testing - DEBUG - 2022/02/11 19:06:33 wazuh-db[17459] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: find-group default 2022-02-11 15:06:54,770 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-agent1 and message: .*Sending integrity control message: (.+)$ 2022-02-11 15:06:54,770 - wazuh_testing - DEBUG - 2022/02/11 19:06:33 wazuh-db[17459] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: get-all-agents last_id 0 2022-02-11 15:06:54,770 - wazuh_testing - DEBUG - 2022/02/11 19:06:33 wazuh-db[17459] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: select-agent-group 1 2022-02-11 15:06:54,770 - wazuh_testing - DEBUG - 2022/02/11 19:06:33 wazuh-db[17459] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: delete-agent-belong 1 2022-02-11 15:06:54,771 - wazuh_testing - DEBUG - 2022/02/11 19:06:33 wazuh-db[17459] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: find-group default 2022-02-11 15:06:54,771 - wazuh_testing - DEBUG - 2022/02/11 19:06:33 wazuh-db[17459] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: insert-agent-belong {"id_group":1,"id_agent":1} 2022-02-11 15:06:54,771 - wazuh_testing - DEBUG - 2022/02/11 19:06:33 wazuh-db[17459] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: select-agent-name 1 2022-02-11 15:06:54,771 - wazuh_testing - DEBUG - 2022/02/11 19:06:33 wazuh-db[17459] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: select-agent-name 1 2022-02-11 15:06:54,772 - wazuh_testing - DEBUG - 2022/02/11 19:06:36 wazuh-db[17459] main.c:290 at run_dealer(): DEBUG: New client connected (16). 2022-02-11 15:06:54,772 - wazuh_testing - DEBUG - 2022/02/11 19:06:36 wazuh-db[17459] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-keepalive {"id":1,"connection_status":"pending","sync_status":"synced"} 2022-02-11 15:06:54,772 - wazuh_testing - DEBUG - 2022/02/11 19:06:36 wazuh-db[17459] main.c:290 at run_dealer(): DEBUG: New client connected (18). 2022-02-11 15:06:54,772 - wazuh_testing - DEBUG - 2022/02/11 19:06:36 wazuh-db[17459] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64","os_arch":"x86_64"} 2022-02-11 15:06:54,773 - wazuh_testing - DEBUG - 2022/02/11 19:06:39 wazuh-db[17459] main.c:290 at run_dealer(): DEBUG: New client connected (19). 2022-02-11 15:06:54,773 - wazuh_testing - DEBUG - 2022/02/11 19:06:39 wazuh-db[17459] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1644602784 2022-02-11 15:06:54,773 - wazuh_testing - DEBUG - 2022/02/11 19:06:39 wazuh-db[17459] main.c:290 at run_dealer(): DEBUG: New client connected (20). 2022-02-11 15:06:54,773 - wazuh_testing - DEBUG - 2022/02/11 19:06:39 wazuh-db[17459] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck save2 {"path":"/testdir1/testdir1.txt","version":2,"timestamp":1644602799,"attributes":{"type":"file","size":0,"perm":"rw-r--r--","uid":"0","gid":"0","user_name":"root","group_name":"root","inode":17179747,"mtime":1644602779,"hash_md5":"d41d8cd98f00b204e9800998ecf8427e","hash_sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","hash_sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","checksum":"c6a35a987856464956920b5b3f8e4240dee330f4"}} 2022-02-11 15:06:54,774 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-manager and message: .*Agent 001 query: (.+) save2 2022-02-11 15:06:55,745 - wazuh_testing - DEBUG - Cleaning temporal files... 2022-02-11 15:06:55,746 - wazuh_testing - DEBUG - Checking results... 2022-02-11 15:06:55,748 - wazuh_testing - DEBUG - Received from wazuh-agent1 the expected message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1644602808,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"9a33f0b60c5bb05102b85ed3b9bf0650f65ac565"}} 2022-02-11 15:06:55,748 - wazuh_testing - DEBUG - Received from wazuh-manager the expected message: syscheck 2022-02-11 15:07:11,431 - wazuh_testing - DEBUG - Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-11 15:07:11,432 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-11 15:07:11,432 - wazuh_testing - DEBUG - Starting file composer for wazuh-agent1 and path: /var/ossec/logs/ossec.log. Composite file in /home/camila/Escritorio/repo/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-agent1_ossec.log.tmp 2022-02-11 15:07:11,434 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-agent1 and message: .*Initializing FIM Integrity Synchronization check. (.+)$ 2022-02-11 15:07:12,935 - wazuh_testing - DEBUG - 2022/02/11 19:07:00 wazuh-logcollector: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:07:12,936 - wazuh_testing - DEBUG - 2022/02/11 19:07:00 wazuh-syscheckd[22721] sig_op.c:49 at HandleSIG(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:07:12,936 - wazuh_testing - DEBUG - 2022/02/11 19:07:00 wazuh-agentd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:07:12,936 - wazuh_testing - DEBUG - 2022/02/11 19:07:01 wazuh-execd: INFO: (1314): Shutdown received. Deleting responses. 2022-02-11 15:07:12,937 - wazuh_testing - DEBUG - 2022/02/11 19:07:01 wazuh-execd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:07:12,937 - wazuh_testing - DEBUG - 2022/02/11 19:07:04 wazuh-syscheckd[23213] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 15:07:12,937 - wazuh_testing - DEBUG - 2022/02/11 19:07:04 wazuh-syscheckd[23213] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 15:07:12,937 - wazuh_testing - DEBUG - 2022/02/11 19:07:04 wazuh-syscheckd[23213] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-11 15:07:12,937 - wazuh_testing - DEBUG - 2022/02/11 19:07:04 wazuh-syscheckd[23213] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-11 15:07:12,937 - wazuh_testing - DEBUG - 2022/02/11 19:07:04 wazuh-syscheckd[23213] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-11 15:07:12,938 - wazuh_testing - DEBUG - 2022/02/11 19:07:04 wazuh-syscheckd[23213] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-11 15:07:12,938 - wazuh_testing - DEBUG - 2022/02/11 19:07:04 wazuh-syscheckd[23213] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-11 15:07:12,938 - wazuh_testing - DEBUG - 2022/02/11 19:07:04 wazuh-syscheckd[23213] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ 2022-02-11 15:07:12,938 - wazuh_testing - DEBUG - 2022/02/11 19:07:04 wazuh-syscheckd[23213] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ OK? 2022-02-11 15:07:12,939 - wazuh_testing - DEBUG - 2022/02/11 19:07:04 wazuh-syscheckd[23213] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-11 15:07:12,939 - wazuh_testing - DEBUG - 2022/02/11 19:07:04 wazuh-syscheckd[23213] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-11 15:07:12,939 - wazuh_testing - DEBUG - 2022/02/11 19:07:04 wazuh-syscheckd[23213] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 15:07:12,939 - wazuh_testing - DEBUG - 2022/02/11 19:07:04 wazuh-syscheckd[23213] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 15:07:12,940 - wazuh_testing - DEBUG - 2022/02/11 19:07:04 wazuh-syscheckd[23213] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 15:07:12,940 - wazuh_testing - DEBUG - 2022/02/11 19:07:04 wazuh-syscheckd[23213] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 15:07:12,940 - wazuh_testing - DEBUG - 2022/02/11 19:07:04 wazuh-syscheckd[23213] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 15:07:12,940 - wazuh_testing - DEBUG - 2022/02/11 19:07:04 wazuh-syscheckd[23213] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 15:07:12,940 - wazuh_testing - DEBUG - 2022/02/11 19:07:04 wazuh-execd: INFO: Started (pid: 23226). 2022-02-11 15:07:12,941 - wazuh_testing - DEBUG - 2022/02/11 19:07:05 wazuh-agentd: INFO: (1410): Reading authentication keys file. 2022-02-11 15:07:12,941 - wazuh_testing - DEBUG - 2022/02/11 19:07:05 wazuh-agentd: INFO: Using notify time: 10 and max time to reconnect: 60 2022-02-11 15:07:12,941 - wazuh_testing - DEBUG - 2022/02/11 19:07:05 wazuh-agentd: INFO: Version detected -> Linux |wazuh-agent1 |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64 [Debian GNU/Linux|debian: 10 (buster)] - Wazuh v4.2.5 2022-02-11 15:07:12,941 - wazuh_testing - DEBUG - 2022/02/11 19:07:05 wazuh-agentd: INFO: Started (pid: 23237). 2022-02-11 15:07:12,942 - wazuh_testing - DEBUG - 2022/02/11 19:07:05 wazuh-agentd: INFO: Server IP Address: wazuh-manager/172.17.0.2 2022-02-11 15:07:12,942 - wazuh_testing - DEBUG - 2022/02/11 19:07:05 wazuh-agentd: INFO: Using AES as encryption method. 2022-02-11 15:07:12,942 - wazuh_testing - DEBUG - 2022/02/11 19:07:05 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 15:07:12,942 - wazuh_testing - DEBUG - 2022/02/11 19:07:05 wazuh-agentd: INFO: (4102): Connected to the server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 15:07:12,943 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 15:07:12,943 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 15:07:12,943 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-11 15:07:12,944 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-11 15:07:12,944 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-11 15:07:12,944 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-11 15:07:12,945 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-11 15:07:12,945 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ 2022-02-11 15:07:12,945 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ OK? 2022-02-11 15:07:12,946 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-11 15:07:12,946 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-11 15:07:12,946 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 15:07:12,946 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 15:07:12,947 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 15:07:12,947 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 15:07:12,947 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 15:07:12,948 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 15:07:12,948 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 rootcheck[23249] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled. 2022-02-11 15:07:12,948 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:07:12,949 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] syscom.c:123 at syscom_main(): DEBUG: (6284): Local requests thread ready. 2022-02-11 15:07:12,949 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] mq_op.c:47 at StartMQ(): DEBUG: Connected succesfully to 'queue/sockets/queue' after 0 attempts 2022-02-11 15:07:12,949 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] mq_op.c:48 at StartMQ(): DEBUG: (unix_domain) Maximum send buffer set to: '212992'. 2022-02-11 15:07:12,949 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:185 at main(): INFO: Started (pid: 23251). 2022-02-11 15:07:12,950 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:193 at main(): INFO: (6003): Monitoring path: '/bin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 15:07:12,950 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:193 at main(): INFO: (6003): Monitoring path: '/boot', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 15:07:12,950 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:193 at main(): INFO: (6003): Monitoring path: '/etc', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 15:07:12,950 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:193 at main(): INFO: (6003): Monitoring path: '/sbin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 15:07:12,951 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir1', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 15:07:12,951 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir2', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | realtime'. 2022-02-11 15:07:12,951 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir3', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | whodata'. 2022-02-11 15:07:12,952 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/bin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 15:07:12,952 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/sbin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 15:07:12,952 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:215 at main(): DEBUG: (6357): Maximum disk quota size limit configured to '1048576 KB'. 2022-02-11 15:07:12,952 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mtab' 2022-02-11 15:07:12,953 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/hosts.deny' 2022-02-11 15:07:12,953 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mail/statistics' 2022-02-11 15:07:12,953 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random-seed' 2022-02-11 15:07:12,953 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random.seed' 2022-02-11 15:07:12,954 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/adjtime' 2022-02-11 15:07:12,954 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/httpd/logs' 2022-02-11 15:07:12,954 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/utmpx' 2022-02-11 15:07:12,954 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/wtmpx' 2022-02-11 15:07:12,954 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/cups/certs' 2022-02-11 15:07:12,955 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/dumpdates' 2022-02-11 15:07:12,955 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/svc/volatile' 2022-02-11 15:07:12,955 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/security' 2022-02-11 15:07:12,955 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/debug' 2022-02-11 15:07:12,955 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/dev/core' 2022-02-11 15:07:12,955 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '^/proc' 2022-02-11 15:07:12,955 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '.log$|.swp$' 2022-02-11 15:07:12,956 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:235 at main(): INFO: (6004): No diff for file: '/etc/ssl/private.key' 2022-02-11 15:07:12,956 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:245 at main(): INFO: (6016): Directory set for real time monitoring: '/testdir2'. 2022-02-11 15:07:12,956 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] syscheck_audit.c:243 at audit_init(): WARNING: (6924): Who-data engine cannot start because Auditd is not running. 2022-02-11 15:07:12,956 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:264 at main(): WARNING: (6913): Who-data engine could not start. Switching who-data to real-time. 2022-02-11 15:07:12,956 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] run_check.c:194 at start_daemon(): DEBUG: (6320): Setting process priority to: '10' 2022-02-11 15:07:12,956 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:07:12,957 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] run_check.c:229 at start_daemon(): INFO: (6000): Starting daemon... 2022-02-11 15:07:12,957 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] run_check.c:232 at start_daemon(): INFO: (6010): File integrity monitoring scan frequency: 20 seconds 2022-02-11 15:07:12,957 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 15:07:12,957 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644602826}} 2022-02-11 15:07:12,957 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 15:07:12,957 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-11 15:07:12,958 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-11 15:07:12,958 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-11 15:07:12,958 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-11 15:07:12,958 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 15:07:12,958 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 15:07:12,958 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644602826}} 2022-02-11 15:07:12,958 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.322 sec (0.321 clock sec) 2022-02-11 15:07:12,959 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1622, path count: 1628 2022-02-11 15:07:12,959 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:07:12,959 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:07:12,959 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] run_check.c:387 at fim_run_realtime(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-11 15:07:12,959 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:07:12,959 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] run_check.c:543 at log_realtime_status(): INFO: (6012): Real-time file integrity monitoring started. 2022-02-11 15:07:12,960 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. 2022-02-11 15:07:12,960 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-agent1 and message: .*Initializing FIM Integrity Synchronization check. (.+)$ 2022-02-11 15:07:13,937 - wazuh_testing - DEBUG - Cleaning temporal files... 2022-02-11 15:07:13,937 - wazuh_testing - DEBUG - Checking results... 2022-02-11 15:07:13,938 - wazuh_testing - DEBUG - Received from wazuh-agent1 the expected message: Sync interval is 300 seconds.
-------------------------------Captured log call--------------------------------
DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:1005 Cleaning temporal files... DEBUG wazuh_testing:monitoring.py:994 Checking results... DEBUG wazuh_testing:monitoring.py:1000 Received from wazuh-agent1 the expected message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1644602808,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"9a33f0b60c5bb05102b85ed3b9bf0650f65ac565"}} DEBUG wazuh_testing:monitoring.py:1000 Received from wazuh-manager the expected message: syscheck DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:1005 Cleaning temporal files... DEBUG wazuh_testing:monitoring.py:994 Checking results... DEBUG wazuh_testing:monitoring.py:1000 Received from wazuh-agent1 the expected message: Sync interval is 300 seconds.

Passed

test_synchronization.py::test_synchronization[testdir1-modify-wazuh-manager]

44.50

------------------------------Captured stderr call------------------------------
2022-02-11 15:07:27,441 - wazuh_testing - DEBUG - Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-11 15:07:27,442 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-11 15:07:27,442 - wazuh_testing - DEBUG - Starting file composer for wazuh-agent1 and path: /var/ossec/logs/ossec.log. Composite file in /home/camila/Escritorio/repo/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-agent1_ossec.log.tmp 2022-02-11 15:07:27,443 - wazuh_testing - DEBUG - Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-11 15:07:27,444 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-agent1 and message: .*Sending integrity control message: (.+)$ 2022-02-11 15:07:27,445 - wazuh_testing - DEBUG - Starting file composer for wazuh-manager and path: /var/ossec/logs/ossec.log. Composite file in /home/camila/Escritorio/repo/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-manager_ossec.log.tmp 2022-02-11 15:07:27,445 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-11 15:07:27,447 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-manager and message: .*Agent 001 query: (.+) save2 2022-02-11 15:07:28,946 - wazuh_testing - DEBUG - 2022/02/11 19:07:00 wazuh-logcollector: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:07:28,946 - wazuh_testing - DEBUG - 2022/02/11 19:07:00 wazuh-syscheckd[22721] sig_op.c:49 at HandleSIG(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:07:28,946 - wazuh_testing - DEBUG - 2022/02/11 19:07:00 wazuh-agentd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:07:28,947 - wazuh_testing - DEBUG - 2022/02/11 19:07:01 wazuh-execd: INFO: (1314): Shutdown received. Deleting responses. 2022-02-11 15:07:28,947 - wazuh_testing - DEBUG - 2022/02/11 19:07:01 wazuh-execd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:07:28,947 - wazuh_testing - DEBUG - 2022/02/11 19:07:04 wazuh-syscheckd[23213] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 15:07:28,947 - wazuh_testing - DEBUG - 2022/02/11 19:07:04 wazuh-syscheckd[23213] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 15:07:28,947 - wazuh_testing - DEBUG - 2022/02/11 19:07:04 wazuh-syscheckd[23213] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-11 15:07:28,948 - wazuh_testing - DEBUG - 2022/02/11 19:07:04 wazuh-syscheckd[23213] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-11 15:07:28,948 - wazuh_testing - DEBUG - 2022/02/11 19:07:04 wazuh-syscheckd[23213] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-11 15:07:28,948 - wazuh_testing - DEBUG - 2022/02/11 19:07:04 wazuh-syscheckd[23213] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-11 15:07:28,948 - wazuh_testing - DEBUG - 2022/02/11 19:07:04 wazuh-syscheckd[23213] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-11 15:07:28,948 - wazuh_testing - DEBUG - 2022/02/11 19:07:04 wazuh-syscheckd[23213] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ 2022-02-11 15:07:28,949 - wazuh_testing - DEBUG - 2022/02/11 19:07:04 wazuh-syscheckd[23213] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ OK? 2022-02-11 15:07:28,949 - wazuh_testing - DEBUG - 2022/02/11 19:07:04 wazuh-syscheckd[23213] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-11 15:07:28,949 - wazuh_testing - DEBUG - 2022/02/11 19:07:00 wazuh-db[17459] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-connection-status {"id":1,"connection_status":"disconnected","sync_status":"synced"} 2022-02-11 15:07:28,949 - wazuh_testing - DEBUG - 2022/02/11 19:07:04 wazuh-syscheckd[23213] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-11 15:07:28,949 - wazuh_testing - DEBUG - 2022/02/11 19:07:04 wazuh-syscheckd[23213] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 15:07:28,949 - wazuh_testing - DEBUG - 2022/02/11 19:07:00 wazuh-db[17459] main.c:290 at run_dealer(): DEBUG: New client connected (34). 2022-02-11 15:07:28,950 - wazuh_testing - DEBUG - 2022/02/11 19:07:00 wazuh-db[17459] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: get-labels 1 2022-02-11 15:07:28,950 - wazuh_testing - DEBUG - 2022/02/11 19:07:04 wazuh-syscheckd[23213] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 15:07:28,950 - wazuh_testing - DEBUG - 2022/02/11 19:07:03 wazuh-db[17459] main.c:290 at run_dealer(): DEBUG: New client connected (35). 2022-02-11 15:07:28,950 - wazuh_testing - DEBUG - 2022/02/11 19:07:04 wazuh-syscheckd[23213] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 15:07:28,950 - wazuh_testing - DEBUG - 2022/02/11 19:07:03 wazuh-db[17459] wdb_parser.c:928 at wdb_parse(): DEBUG: Task query: upgrade_cancel_tasks {"node":"wazuh-master"} 2022-02-11 15:07:28,950 - wazuh_testing - DEBUG - 2022/02/11 19:07:03 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 35 disconnected. 2022-02-11 15:07:28,950 - wazuh_testing - DEBUG - 2022/02/11 19:07:04 wazuh-syscheckd[23213] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 15:07:28,950 - wazuh_testing - DEBUG - 2022/02/11 19:07:04 wazuh-db[17459] wdb.c:918 at wdb_commit_old(): DEBUG: Agent '001' database commited. Time: 12.950 ms. 2022-02-11 15:07:28,950 - wazuh_testing - DEBUG - 2022/02/11 19:07:04 wazuh-syscheckd[23213] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 15:07:28,950 - wazuh_testing - DEBUG - 2022/02/11 19:07:05 wazuh-db[17459] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-keepalive {"id":1,"connection_status":"pending","sync_status":"synced"} 2022-02-11 15:07:28,951 - wazuh_testing - DEBUG - 2022/02/11 19:07:04 wazuh-syscheckd[23213] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 15:07:28,951 - wazuh_testing - DEBUG - 2022/02/11 19:07:04 wazuh-execd: INFO: Started (pid: 23226). 2022-02-11 15:07:28,951 - wazuh_testing - DEBUG - 2022/02/11 19:07:05 wazuh-agentd: INFO: (1410): Reading authentication keys file. 2022-02-11 15:07:28,951 - wazuh_testing - DEBUG - 2022/02/11 19:07:05 wazuh-agentd: INFO: Using notify time: 10 and max time to reconnect: 60 2022-02-11 15:07:28,951 - wazuh_testing - DEBUG - 2022/02/11 19:07:09 wazuh-db[17459] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64","os_arch":"x86_64"} 2022-02-11 15:07:28,952 - wazuh_testing - DEBUG - 2022/02/11 19:07:05 wazuh-agentd: INFO: Version detected -> Linux |wazuh-agent1 |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64 [Debian GNU/Linux|debian: 10 (buster)] - Wazuh v4.2.5 2022-02-11 15:07:28,952 - wazuh_testing - DEBUG - 2022/02/11 19:07:09 wazuh-db[17459] main.c:290 at run_dealer(): DEBUG: New client connected (35). 2022-02-11 15:07:28,952 - wazuh_testing - DEBUG - 2022/02/11 19:07:05 wazuh-agentd: INFO: Started (pid: 23237). 2022-02-11 15:07:28,952 - wazuh_testing - DEBUG - 2022/02/11 19:07:05 wazuh-agentd: INFO: Server IP Address: wazuh-manager/172.17.0.2 2022-02-11 15:07:28,952 - wazuh_testing - DEBUG - 2022/02/11 19:07:09 wazuh-db[17459] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1644602826 2022-02-11 15:07:28,952 - wazuh_testing - DEBUG - 2022/02/11 19:07:05 wazuh-agentd: INFO: Using AES as encryption method. 2022-02-11 15:07:28,952 - wazuh_testing - DEBUG - 2022/02/11 19:07:09 wazuh-db[17459] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update end_scan 1644602826 2022-02-11 15:07:28,953 - wazuh_testing - DEBUG - 2022/02/11 19:07:05 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 15:07:28,953 - wazuh_testing - DEBUG - 2022/02/11 19:07:05 wazuh-agentd: INFO: (4102): Connected to the server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 15:07:28,953 - wazuh_testing - DEBUG - 2022/02/11 19:07:09 wazuh-db[17459] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_global {"id":1644602826,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"2dbbef457fb1035aa4d3d07136ae76c39c48b00d"} 2022-02-11 15:07:28,953 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 15:07:28,953 - wazuh_testing - DEBUG - 2022/02/11 19:07:09 wazuh-db[17459] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 1.182 ms. 2022-02-11 15:07:28,953 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 15:07:28,954 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-11 15:07:28,954 - wazuh_testing - DEBUG - 2022/02/11 19:07:09 wazuh-db[17459] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602826,"version":2,"begin":"/bin/bash","end":"/sbin/ctrlaltdel","tail":"/sbin/debugfs","checksum":"478eb6380ccc2c04fef49b0edc2715bece72ba41"} 2022-02-11 15:07:28,954 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-11 15:07:28,954 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-11 15:07:28,954 - wazuh_testing - DEBUG - 2022/02/11 19:07:09 wazuh-db[17459] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602826,"version":2,"begin":"/sbin/debugfs","end":"/usr/sbin/zic","checksum":"3cb26071ac7e52939e4a34b9d7f55ff82f58ad4e"} 2022-02-11 15:07:28,955 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-11 15:07:28,955 - wazuh_testing - DEBUG - 2022/02/11 19:07:09 wazuh-db[17459] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.671 ms. 2022-02-11 15:07:28,955 - wazuh_testing - DEBUG - 2022/02/11 19:07:09 wazuh-db[17459] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.582 ms. 2022-02-11 15:07:28,955 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-11 15:07:28,955 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ 2022-02-11 15:07:28,956 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ OK? 2022-02-11 15:07:28,956 - wazuh_testing - DEBUG - 2022/02/11 19:07:09 wazuh-db[17459] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602826,"version":2,"begin":"/sbin/debugfs","end":"/usr/bin/pdb","tail":"/usr/bin/pdb2","checksum":"f1309942196ee399d692f23219704ad1db631d61"} 2022-02-11 15:07:28,956 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-11 15:07:28,956 - wazuh_testing - DEBUG - 2022/02/11 19:07:09 wazuh-db[17459] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602826,"version":2,"begin":"/usr/bin/pdb2","end":"/usr/sbin/zic","checksum":"f13d51f7876684d6bc17db143ee1529b892c54d2"} 2022-02-11 15:07:28,956 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-11 15:07:28,956 - wazuh_testing - DEBUG - 2022/02/11 19:07:09 wazuh-db[17459] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.342 ms. 2022-02-11 15:07:28,956 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 15:07:28,957 - wazuh_testing - DEBUG - 2022/02/11 19:07:09 wazuh-db[17459] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.341 ms. 2022-02-11 15:07:28,957 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 15:07:28,957 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 15:07:28,957 - wazuh_testing - DEBUG - 2022/02/11 19:07:09 wazuh-db[17459] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602826,"version":2,"begin":"/sbin/debugfs","end":"/usr/bin/dpkg-divert","tail":"/usr/bin/dpkg-genbuildinfo","checksum":"c206e7c385b330ee12511b43349def3ec4588d46"} 2022-02-11 15:07:28,957 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 15:07:28,957 - wazuh_testing - DEBUG - 2022/02/11 19:07:09 wazuh-db[17459] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.228 ms. 2022-02-11 15:07:28,957 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 15:07:28,958 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 15:07:28,958 - wazuh_testing - DEBUG - 2022/02/11 19:07:09 wazuh-db[17459] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602826,"version":2,"begin":"/usr/bin/dpkg-genbuildinfo","end":"/usr/bin/pdb","checksum":"fcd12ca69011f5033c3706ba868e7f2983050598"} 2022-02-11 15:07:28,958 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 rootcheck[23249] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled. 2022-02-11 15:07:28,958 - wazuh_testing - DEBUG - 2022/02/11 19:07:09 wazuh-db[17459] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.240 ms. 2022-02-11 15:07:28,958 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:07:28,958 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] syscom.c:123 at syscom_main(): DEBUG: (6284): Local requests thread ready. 2022-02-11 15:07:28,959 - wazuh_testing - DEBUG - 2022/02/11 19:07:09 wazuh-db[17459] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602826,"version":2,"begin":"/sbin/debugfs","end":"/usr/bin/apt-extracttemplates","tail":"/usr/bin/apt-ftparchive","checksum":"da3daabf2d28484c437d2cb826023e29d23a2d5a"} 2022-02-11 15:07:28,959 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] mq_op.c:47 at StartMQ(): DEBUG: Connected succesfully to 'queue/sockets/queue' after 0 attempts 2022-02-11 15:07:28,959 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] mq_op.c:48 at StartMQ(): DEBUG: (unix_domain) Maximum send buffer set to: '212992'. 2022-02-11 15:07:28,959 - wazuh_testing - DEBUG - 2022/02/11 19:07:09 wazuh-db[17459] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602826,"version":2,"begin":"/usr/bin/apt-ftparchive","end":"/usr/bin/dpkg-divert","checksum":"ab79628f5b16446ec1a1f2daeaf1afd2511680e1"} 2022-02-11 15:07:28,959 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:185 at main(): INFO: Started (pid: 23251). 2022-02-11 15:07:28,959 - wazuh_testing - DEBUG - 2022/02/11 19:07:09 wazuh-db[17459] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.146 ms. 2022-02-11 15:07:28,959 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:193 at main(): INFO: (6003): Monitoring path: '/bin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 15:07:28,960 - wazuh_testing - DEBUG - 2022/02/11 19:07:09 wazuh-db[17459] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.132 ms. 2022-02-11 15:07:28,960 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:193 at main(): INFO: (6003): Monitoring path: '/boot', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 15:07:28,960 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:193 at main(): INFO: (6003): Monitoring path: '/etc', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 15:07:28,960 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:193 at main(): INFO: (6003): Monitoring path: '/sbin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 15:07:28,960 - wazuh_testing - DEBUG - 2022/02/11 19:07:09 wazuh-db[17459] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602826,"version":2,"begin":"/sbin/debugfs","end":"/sbin/mkswap","tail":"/sbin/nameif","checksum":"57eae3b131abc8053756527449ccaf84d8226ff2"} 2022-02-11 15:07:28,960 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir1', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 15:07:28,961 - wazuh_testing - DEBUG - 2022/02/11 19:07:09 wazuh-db[17459] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.088 ms. 2022-02-11 15:07:28,961 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir2', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | realtime'. 2022-02-11 15:07:28,961 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir3', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | whodata'. 2022-02-11 15:07:28,961 - wazuh_testing - DEBUG - 2022/02/11 19:07:10 wazuh-db[17459] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602826,"version":2,"begin":"/sbin/nameif","end":"/usr/bin/apt-extracttemplates","checksum":"f5f36473141791bf5b496a9285bac2f0fb3a2719"} 2022-02-11 15:07:28,961 - wazuh_testing - DEBUG - 2022/02/11 19:07:10 wazuh-db[17459] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.109 ms. 2022-02-11 15:07:28,961 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/bin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 15:07:28,961 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/sbin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 15:07:28,962 - wazuh_testing - DEBUG - 2022/02/11 19:07:10 wazuh-db[17459] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602826,"version":2,"begin":"/sbin/nameif","end":"/sbin/sulogin","tail":"/sbin/swaplabel","checksum":"c21468dc0dfc12ca36a7129f43587e57807e1deb"} 2022-02-11 15:07:28,962 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:215 at main(): DEBUG: (6357): Maximum disk quota size limit configured to '1048576 KB'. 2022-02-11 15:07:28,962 - wazuh_testing - DEBUG - 2022/02/11 19:07:10 wazuh-db[17459] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.075 ms. 2022-02-11 15:07:28,962 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mtab' 2022-02-11 15:07:28,962 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/hosts.deny' 2022-02-11 15:07:28,962 - wazuh_testing - DEBUG - 2022/02/11 19:07:10 wazuh-db[17459] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602826,"version":2,"begin":"/sbin/swaplabel","end":"/usr/bin/apt-extracttemplates","checksum":"922551d30ee500f190c84394e6f5e33042196bdb"} 2022-02-11 15:07:28,962 - wazuh_testing - DEBUG - 2022/02/11 19:07:10 wazuh-db[17459] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.057 ms. 2022-02-11 15:07:28,962 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mail/statistics' 2022-02-11 15:07:28,962 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random-seed' 2022-02-11 15:07:28,962 - wazuh_testing - DEBUG - 2022/02/11 19:07:10 wazuh-db[17459] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602826,"version":2,"begin":"/sbin/swaplabel","end":"/sbin/zramctl","tail":"/testdir1/testdir1.txt","checksum":"1212bd95c0c53ba86e112b40a0b267faf3f2be0d"} 2022-02-11 15:07:28,962 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random.seed' 2022-02-11 15:07:28,962 - wazuh_testing - DEBUG - 2022/02/11 19:07:10 wazuh-db[17459] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.067 ms. 2022-02-11 15:07:28,963 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/adjtime' 2022-02-11 15:07:28,963 - wazuh_testing - DEBUG - 2022/02/11 19:07:10 wazuh-db[17459] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602826,"version":2,"begin":"/testdir1/testdir1.txt","end":"/usr/bin/apt-extracttemplates","checksum":"bd3208a06ad6392c802615508a0f25ef35ae98ef"} 2022-02-11 15:07:28,963 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/httpd/logs' 2022-02-11 15:07:28,963 - wazuh_testing - DEBUG - 2022/02/11 19:07:10 wazuh-db[17459] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.045 ms. 2022-02-11 15:07:28,963 - wazuh_testing - DEBUG - 2022/02/11 19:07:10 wazuh-db[17459] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602826,"version":2,"begin":"/testdir1/testdir1.txt","end":"/usr/bin/aclocal-1.16","tail":"/usr/bin/addpart","checksum":"8de439726eb5d2b1a8a45f1aa48035c3c65668b1"} 2022-02-11 15:07:28,963 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/utmpx' 2022-02-11 15:07:28,963 - wazuh_testing - DEBUG - 2022/02/11 19:07:10 wazuh-db[17459] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.059 ms. 2022-02-11 15:07:28,963 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/wtmpx' 2022-02-11 15:07:28,964 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/cups/certs' 2022-02-11 15:07:28,964 - wazuh_testing - DEBUG - 2022/02/11 19:07:10 wazuh-db[17459] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602826,"version":2,"begin":"/usr/bin/addpart","end":"/usr/bin/apt-extracttemplates","checksum":"7d1a3bbe28f2c9e567f8311757d46ea5365d7112"} 2022-02-11 15:07:28,964 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/dumpdates' 2022-02-11 15:07:28,964 - wazuh_testing - DEBUG - 2022/02/11 19:07:10 wazuh-db[17459] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.060 ms. 2022-02-11 15:07:28,964 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/svc/volatile' 2022-02-11 15:07:28,964 - wazuh_testing - DEBUG - 2022/02/11 19:07:10 wazuh-db[17459] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602826,"version":2,"begin":"/usr/bin/[","end":"/usr/bin/aclocal-1.16","checksum":"0f1d35a6565c33bf9697c50fd2d7d2a4ebccbc45"} 2022-02-11 15:07:28,964 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/security' 2022-02-11 15:07:28,964 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/debug' 2022-02-11 15:07:28,964 - wazuh_testing - DEBUG - 2022/02/11 19:07:10 wazuh-db[17459] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602826,"version":2,"begin":"/testdir1/testdir1.txt","end":"/usr/bin/2to3-2.7","tail":"/usr/bin/[","checksum":"ce3ab35c3a7bcb48bae0ffb9bce0e53960550037"} 2022-02-11 15:07:28,964 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/dev/core' 2022-02-11 15:07:28,964 - wazuh_testing - DEBUG - 2022/02/11 19:07:10 wazuh-db[17459] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.070 ms. 2022-02-11 15:07:28,964 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '^/proc' 2022-02-11 15:07:28,965 - wazuh_testing - DEBUG - 2022/02/11 19:07:10 wazuh-db[17459] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.070 ms. 2022-02-11 15:07:28,965 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '.log$|.swp$' 2022-02-11 15:07:28,965 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:235 at main(): INFO: (6004): No diff for file: '/etc/ssl/private.key' 2022-02-11 15:07:28,965 - wazuh_testing - DEBUG - 2022/02/11 19:07:10 wazuh-db[17459] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602826,"version":2,"begin":"/testdir1/testdir1.txt","end":"/testdir1/testdir1.txt","tail":"/testdir1/tmp8qs7q6sl","checksum":"15e61ea56faffb636aacff1c74bc8540b0fde9bf"} 2022-02-11 15:07:28,965 - wazuh_testing - DEBUG - 2022/02/11 19:07:10 wazuh-db[17459] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.047 ms. 2022-02-11 15:07:28,965 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:245 at main(): INFO: (6016): Directory set for real time monitoring: '/testdir2'. 2022-02-11 15:07:28,965 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] syscheck_audit.c:243 at audit_init(): WARNING: (6924): Who-data engine cannot start because Auditd is not running. 2022-02-11 15:07:28,965 - wazuh_testing - DEBUG - 2022/02/11 19:07:11 wazuh-db[17459] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602826,"version":2,"begin":"/testdir1/tmp8qs7q6sl","end":"/usr/bin/2to3-2.7","checksum":"654471fafc7ffe79760db9d87d32107666ee22bd"} 2022-02-11 15:07:28,965 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] main.c:264 at main(): WARNING: (6913): Who-data engine could not start. Switching who-data to real-time. 2022-02-11 15:07:28,965 - wazuh_testing - DEBUG - 2022/02/11 19:07:11 wazuh-db[17459] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.048 ms. 2022-02-11 15:07:28,965 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] run_check.c:194 at start_daemon(): DEBUG: (6320): Setting process priority to: '10' 2022-02-11 15:07:28,965 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:07:28,965 - wazuh_testing - DEBUG - 2022/02/11 19:07:11 wazuh-db[17459] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602826,"version":2,"begin":"/testdir1/tmp8qs7q6sl","end":"/testdir1/tmp8qs7q6sl","tail":"/usr/bin/2to3-2.7","checksum":"91102bad86e53267c1c2ef184cab6005e339ff18"} 2022-02-11 15:07:28,966 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] run_check.c:229 at start_daemon(): INFO: (6000): Starting daemon... 2022-02-11 15:07:28,966 - wazuh_testing - DEBUG - 2022/02/11 19:07:11 wazuh-db[17459] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602826,"version":2,"begin":"/usr/bin/2to3-2.7","end":"/usr/bin/2to3-2.7","checksum":"f621f8dd560e58c5f017dfd42d98bb3a72466d1d"} 2022-02-11 15:07:28,966 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] run_check.c:232 at start_daemon(): INFO: (6010): File integrity monitoring scan frequency: 20 seconds 2022-02-11 15:07:28,966 - wazuh_testing - DEBUG - 2022/02/11 19:07:11 wazuh-db[17459] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.029 ms. 2022-02-11 15:07:28,966 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 15:07:28,966 - wazuh_testing - DEBUG - 2022/02/11 19:07:11 wazuh-db[17459] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file save2 {"path":"/testdir1/tmp8qs7q6sl","timestamp":1644602826,"version":2,"attributes":{"type":"file","size":8,"perm":"rw-r--r--","uid":"0","gid":"0","user_name":"root","group_name":"root","inode":17314759,"mtime":1644602822,"hash_md5":"e770e54c4c42d3307c141c0c8948992a","hash_sha1":"9eab19985b11b15f91f936e463ea74f1dfe88e32","hash_sha256":"b1893f8d4b1596c20d6f83a784b2b0468c22fb83ce4ff2033ff86a37865d41d8","checksum":"a042cb95c2754fce4039fa24db07ce0759f16ba3"}} 2022-02-11 15:07:28,966 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644602826}} 2022-02-11 15:07:28,966 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 15:07:28,966 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-11 15:07:28,966 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-11 15:07:28,967 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-manager and message: .*Agent 001 query: (.+) save2 2022-02-11 15:07:28,967 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-11 15:07:28,967 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-11 15:07:28,967 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 15:07:28,967 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 15:07:28,967 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644602826}} 2022-02-11 15:07:28,967 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.322 sec (0.321 clock sec) 2022-02-11 15:07:28,968 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1622, path count: 1628 2022-02-11 15:07:28,968 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:07:28,968 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:07:28,968 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] run_check.c:387 at fim_run_realtime(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-11 15:07:28,968 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:07:28,968 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] run_check.c:543 at log_realtime_status(): INFO: (6012): Real-time file integrity monitoring started. 2022-02-11 15:07:28,968 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. 2022-02-11 15:07:28,969 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] run_check.c:568 at symlink_checker_thread(): DEBUG: (6033): Starting symbolic link updater. Interval '600'. 2022-02-11 15:07:28,969 - wazuh_testing - DEBUG - 2022/02/11 19:07:06 wazuh-syscheckd[23249] run_check.c:82 at fim_send_sync_msg(): DEBUG: (6317): Sending integrity control message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1644602826,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"2dbbef457fb1035aa4d3d07136ae76c39c48b00d"}} 2022-02-11 15:07:28,969 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-agent1 and message: .*Sending integrity control message: (.+)$ 2022-02-11 15:07:29,953 - wazuh_testing - DEBUG - Cleaning temporal files... 2022-02-11 15:07:29,953 - wazuh_testing - DEBUG - Checking results... 2022-02-11 15:07:29,955 - wazuh_testing - DEBUG - Received from wazuh-manager the expected message: fim_file 2022-02-11 15:07:29,955 - wazuh_testing - DEBUG - Received from wazuh-agent1 the expected message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1644602826,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"2dbbef457fb1035aa4d3d07136ae76c39c48b00d"}} 2022-02-11 15:07:55,737 - wazuh_testing - DEBUG - Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-11 15:07:55,739 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-11 15:07:55,739 - wazuh_testing - DEBUG - Starting file composer for wazuh-manager and path: /var/ossec/logs/ossec.log. Composite file in /home/camila/Escritorio/repo/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-manager_ossec.log.tmp 2022-02-11 15:07:55,740 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-manager and message: .*Initializing FIM Integrity Synchronization check. (.+)$ 2022-02-11 15:07:57,242 - wazuh_testing - DEBUG - 2022/02/11 19:07:34 wazuh-modulesd:syscollector: INFO: Stop received for Syscollector. 2022-02-11 15:07:57,242 - wazuh_testing - DEBUG - 2022/02/11 19:07:34 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 12 disconnected. 2022-02-11 15:07:57,242 - wazuh_testing - DEBUG - 2022/02/11 19:07:34 wazuh-monitord: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:07:57,242 - wazuh_testing - DEBUG - 2022/02/11 19:07:34 wazuh-logcollector: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:07:57,243 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-remoted: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:07:57,243 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 36 disconnected. 2022-02-11 15:07:57,243 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 24 disconnected. 2022-02-11 15:07:57,243 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 18 disconnected. 2022-02-11 15:07:57,243 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 16 disconnected. 2022-02-11 15:07:57,244 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-syscheckd[17593] sig_op.c:49 at HandleSIG(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:07:57,244 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-analysisd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:07:57,244 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 35 disconnected. 2022-02-11 15:07:57,244 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 37 disconnected. 2022-02-11 15:07:57,244 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 34 disconnected. 2022-02-11 15:07:57,245 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 32 disconnected. 2022-02-11 15:07:57,245 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 31 disconnected. 2022-02-11 15:07:57,245 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 30 disconnected. 2022-02-11 15:07:57,245 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 28 disconnected. 2022-02-11 15:07:57,246 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 27 disconnected. 2022-02-11 15:07:57,246 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 29 disconnected. 2022-02-11 15:07:57,246 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 23 disconnected. 2022-02-11 15:07:57,246 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 26 disconnected. 2022-02-11 15:07:57,246 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 20 disconnected. 2022-02-11 15:07:57,247 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 21 disconnected. 2022-02-11 15:07:57,247 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 22 disconnected. 2022-02-11 15:07:57,247 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 6 disconnected. 2022-02-11 15:07:57,247 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 25 disconnected. 2022-02-11 15:07:57,247 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 11 disconnected. 2022-02-11 15:07:57,248 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 10 disconnected. 2022-02-11 15:07:57,248 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 13 disconnected. 2022-02-11 15:07:57,248 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 19 disconnected. 2022-02-11 15:07:57,248 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-execd: INFO: (1314): Shutdown received. Deleting responses. 2022-02-11 15:07:57,249 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-execd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:07:57,249 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:468 at handler(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:07:57,249 - wazuh_testing - DEBUG - 2022/02/11 19:07:36 wazuh-db[17459] wdb.c:872 at wdb_close_all(): DEBUG: Closing all databases... 2022-02-11 15:07:57,249 - wazuh_testing - DEBUG - 2022/02/11 19:07:36 wazuh-db[17459] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent 001 2022-02-11 15:07:57,250 - wazuh_testing - DEBUG - 2022/02/11 19:07:36 wazuh-db[17459] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent 000 2022-02-11 15:07:57,250 - wazuh_testing - DEBUG - 2022/02/11 19:07:36 wazuh-db[17459] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent mitre 2022-02-11 15:07:57,250 - wazuh_testing - DEBUG - 2022/02/11 19:07:36 wazuh-db[17459] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent global 2022-02-11 15:07:57,250 - wazuh_testing - DEBUG - 2022/02/11 19:07:36 wazuh-db[17459] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent tasks 2022-02-11 15:07:57,251 - wazuh_testing - DEBUG - 2022/02/11 19:07:36 wazuh-db[17459] main.c:231 at main(): DEBUG: Template file removed again: queue/db/.template.db 2022-02-11 15:07:57,251 - wazuh_testing - DEBUG - 2022/02/11 19:07:36 wazuh-authd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:07:57,251 - wazuh_testing - DEBUG - 2022/02/11 19:07:36 wazuh-authd: INFO: Exiting... 2022-02-11 15:07:57,252 - wazuh_testing - DEBUG - 2022/02/11 19:07:42 wazuh-db[18325] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 15:07:57,252 - wazuh_testing - DEBUG - 2022/02/11 19:07:42 wazuh-db[18325] main.c:101 at main(): DEBUG: Wazuh home directory: /var/ossec 2022-02-11 15:07:57,252 - wazuh_testing - DEBUG - 2022/02/11 19:07:42 wazuh-syscheckd[18329] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 15:07:57,253 - wazuh_testing - DEBUG - 2022/02/11 19:07:42 wazuh-syscheckd[18329] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 15:07:57,253 - wazuh_testing - DEBUG - 2022/02/11 19:07:42 wazuh-syscheckd[18329] syscheck-config.c:122 at organize_syscheck_dirs(): DEBUG: No directory entries to organize in syscheck configuration. 2022-02-11 15:07:57,253 - wazuh_testing - DEBUG - 2022/02/11 19:07:45 wazuh-csyslogd: INFO: Remote syslog server not configured. Clean exit. 2022-02-11 15:07:57,253 - wazuh_testing - DEBUG - 2022/02/11 19:07:45 wazuh-dbd: INFO: Database not configured. Clean exit. 2022-02-11 15:07:57,254 - wazuh_testing - DEBUG - 2022/02/11 19:07:45 wazuh-integratord: INFO: Remote integrations not configured. Clean exit. 2022-02-11 15:07:57,254 - wazuh_testing - DEBUG - 2022/02/11 19:07:45 wazuh-agentlessd: INFO: Not configured. Exiting. 2022-02-11 15:07:57,254 - wazuh_testing - DEBUG - 2022/02/11 19:07:45 wazuh-authd: INFO: Started (pid: 18395). 2022-02-11 15:07:57,254 - wazuh_testing - DEBUG - 2022/02/11 19:07:45 wazuh-authd: INFO: Accepting connections on port 1515. No password required. 2022-02-11 15:07:57,255 - wazuh_testing - DEBUG - 2022/02/11 19:07:45 wazuh-authd: INFO: Setting network timeout to 1.000000 sec. 2022-02-11 15:07:57,255 - wazuh_testing - DEBUG - 2022/02/11 19:07:45 wazuh-db[18406] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 15:07:57,256 - wazuh_testing - DEBUG - 2022/02/11 19:07:45 wazuh-db[18406] main.c:101 at main(): DEBUG: Wazuh home directory: /var/ossec 2022-02-11 15:07:57,256 - wazuh_testing - DEBUG - 2022/02/11 19:07:45 wazuh-db[18406] main.c:122 at main(): DEBUG: Template file removed: /var/ossec/queue/db/.template.db 2022-02-11 15:07:57,256 - wazuh_testing - DEBUG - 2022/02/11 19:07:45 wazuh-db[18406] main.c:178 at main(): INFO: Started (pid: 18408). 2022-02-11 15:07:57,256 - wazuh_testing - DEBUG - 2022/02/11 19:07:46 wazuh-execd: INFO: (1350): Active response disabled. 2022-02-11 15:07:57,257 - wazuh_testing - DEBUG - 2022/02/11 19:07:46 wazuh-execd: INFO: Started (pid: 18431). 2022-02-11 15:07:57,257 - wazuh_testing - DEBUG - 2022/02/11 19:07:47 wazuh-analysisd: INFO: Total rules enabled: '3882' 2022-02-11 15:07:57,257 - wazuh_testing - DEBUG - 2022/02/11 19:07:47 wazuh-analysisd: INFO: Started (pid: 18445). 2022-02-11 15:07:57,257 - wazuh_testing - DEBUG - 2022/02/11 19:07:47 wazuh-db[18406] main.c:290 at run_dealer(): DEBUG: New client connected (6). 2022-02-11 15:07:57,257 - wazuh_testing - DEBUG - 2022/02/11 19:07:47 wazuh-analysisd: INFO: (7200): Logtest started 2022-02-11 15:07:57,258 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 15:07:57,258 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 15:07:57,258 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] syscheck-config.c:122 at organize_syscheck_dirs(): DEBUG: No directory entries to organize in syscheck configuration. 2022-02-11 15:07:57,258 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] main.c:118 at main(): INFO: (6678): No directory provided for syscheck to monitor. 2022-02-11 15:07:57,259 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] main.c:136 at main(): INFO: (6001): File integrity monitoring disabled. 2022-02-11 15:07:57,259 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 rootcheck[18540] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled. 2022-02-11 15:07:57,259 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:07:57,259 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] syscom.c:123 at syscom_main(): DEBUG: (6284): Local requests thread ready. 2022-02-11 15:07:57,259 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] mq_op.c:47 at StartMQ(): DEBUG: Connected succesfully to 'queue/sockets/queue' after 0 attempts 2022-02-11 15:07:57,260 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] mq_op.c:48 at StartMQ(): DEBUG: (unix_domain) Maximum send buffer set to: '212992'. 2022-02-11 15:07:57,260 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] main.c:185 at main(): INFO: Started (pid: 18542). 2022-02-11 15:07:57,260 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] main.c:215 at main(): DEBUG: (6357): Maximum disk quota size limit configured to '1048576 KB'. 2022-02-11 15:07:57,260 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] run_check.c:194 at start_daemon(): DEBUG: (6320): Setting process priority to: '10' 2022-02-11 15:07:57,260 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:07:57,261 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] run_check.c:229 at start_daemon(): INFO: (6000): Starting daemon... 2022-02-11 15:07:57,261 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] run_check.c:232 at start_daemon(): INFO: (6010): File integrity monitoring scan frequency: 43200 seconds 2022-02-11 15:07:57,261 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 15:07:57,261 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644602868}} 2022-02-11 15:07:57,261 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 15:07:57,261 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-db[18406] main.c:290 at run_dealer(): DEBUG: New client connected (10). 2022-02-11 15:07:57,262 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 15:07:57,262 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 000 query: syscheck scan_info_update start_scan 1644602868 2022-02-11 15:07:57,262 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 15:07:57,262 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644602868}} 2022-02-11 15:07:57,262 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.000 sec (0.000 clock sec) 2022-02-11 15:07:57,262 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 0, path count: 0 2022-02-11 15:07:57,263 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-db[18406] main.c:290 at run_dealer(): DEBUG: New client connected (12). 2022-02-11 15:07:57,263 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:07:57,263 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 000 query: syscheck scan_info_update end_scan 1644602868 2022-02-11 15:07:57,263 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:07:57,263 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:07:57,263 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. 2022-02-11 15:07:57,264 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-manager and message: .*Initializing FIM Integrity Synchronization check. (.+)$ 2022-02-11 15:07:58,244 - wazuh_testing - DEBUG - Cleaning temporal files... 2022-02-11 15:07:58,244 - wazuh_testing - DEBUG - Checking results... 2022-02-11 15:07:58,246 - wazuh_testing - DEBUG - Received from wazuh-manager the expected message: Sync interval is 300 seconds.
-------------------------------Captured log call--------------------------------
DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:1005 Cleaning temporal files... DEBUG wazuh_testing:monitoring.py:994 Checking results... DEBUG wazuh_testing:monitoring.py:1000 Received from wazuh-manager the expected message: fim_file DEBUG wazuh_testing:monitoring.py:1000 Received from wazuh-agent1 the expected message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1644602826,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"2dbbef457fb1035aa4d3d07136ae76c39c48b00d"}} DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:1005 Cleaning temporal files... DEBUG wazuh_testing:monitoring.py:994 Checking results... DEBUG wazuh_testing:monitoring.py:1000 Received from wazuh-manager the expected message: Sync interval is 300 seconds.

Passed

test_synchronization.py::test_synchronization[testdir1-delete-wazuh-agent1]

39.76

------------------------------Captured stderr call------------------------------
2022-02-11 15:08:12,752 - wazuh_testing - DEBUG - Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-11 15:08:12,754 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-11 15:08:12,754 - wazuh_testing - DEBUG - Starting file composer for wazuh-agent1 and path: /var/ossec/logs/ossec.log. Composite file in /home/camila/Escritorio/repo/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-agent1_ossec.log.tmp 2022-02-11 15:08:12,755 - wazuh_testing - DEBUG - Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-11 15:08:12,755 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-agent1 and message: .*Sending integrity control message: (.+)$ 2022-02-11 15:08:12,756 - wazuh_testing - DEBUG - Starting file composer for wazuh-manager and path: /var/ossec/logs/ossec.log. Composite file in /home/camila/Escritorio/repo/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-manager_ossec.log.tmp 2022-02-11 15:08:12,756 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-11 15:08:12,758 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-manager and message: .*Agent 001 query: (.+) save2 2022-02-11 15:08:14,256 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-agentd: ERROR: (1137): Lost connection with manager. Setting lock. 2022-02-11 15:08:14,257 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-agentd: INFO: Closing connection to server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 15:08:14,257 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 15:08:14,257 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-agentd: ERROR: (1216): Unable to connect to '172.17.0.2:1514/tcp': 'Connection refused'. 2022-02-11 15:08:14,257 - wazuh_testing - DEBUG - 2022/02/11 19:07:43 wazuh-syscheckd[23748] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 15:08:14,257 - wazuh_testing - DEBUG - 2022/02/11 19:07:43 wazuh-syscheckd[23748] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644602863}} 2022-02-11 15:08:14,257 - wazuh_testing - DEBUG - 2022/02/11 19:07:43 wazuh-syscheckd[23748] wait_op.c:101 at os_wait(): WARNING: Process locked due to agent is offline. Waiting for connection... 2022-02-11 15:08:14,257 - wazuh_testing - DEBUG - 2022/02/11 19:07:45 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 15:08:14,257 - wazuh_testing - DEBUG - 2022/02/11 19:07:45 wazuh-agentd: ERROR: (1216): Unable to connect to '172.17.0.2:1514/tcp': 'Connection refused'. 2022-02-11 15:08:14,257 - wazuh_testing - DEBUG - 2022/02/11 19:07:55 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 15:08:14,257 - wazuh_testing - DEBUG - 2022/02/11 19:07:55 wazuh-agentd: INFO: (4102): Connected to the server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 15:08:14,257 - wazuh_testing - DEBUG - 2022/02/11 19:07:55 wazuh-agentd: INFO: Server responded. Releasing lock. 2022-02-11 15:08:14,257 - wazuh_testing - DEBUG - 2022/02/11 19:07:58 wazuh-syscheckd[23748] wait_op.c:116 at os_wait(): INFO: Agent is now online. Process unlocked, continuing... 2022-02-11 15:08:14,257 - wazuh_testing - DEBUG - 2022/02/11 19:07:58 wazuh-syscheckd[23748] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 15:08:14,257 - wazuh_testing - DEBUG - 2022/02/11 19:07:58 wazuh-syscheckd[23748] fim_db.c:436 at fim_db_check_transaction(): DEBUG: Database transaction completed. 2022-02-11 15:08:14,257 - wazuh_testing - DEBUG - 2022/02/11 19:07:58 wazuh-syscheckd[23748] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-11 15:08:14,258 - wazuh_testing - DEBUG - 2022/02/11 19:07:58 wazuh-syscheckd[23748] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-11 15:08:14,258 - wazuh_testing - DEBUG - 2022/02/11 19:07:58 wazuh-syscheckd[23748] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"event","data":{"path":"/testdir1/tmpcc_tqg9q","version":2,"mode":"scheduled","type":"added","timestamp":1644602878,"attributes":{"type":"file","size":8,"perm":"rw-r--r--","uid":"0","gid":"0","user_name":"root","group_name":"root","inode":17314758,"mtime":1644602858,"hash_md5":"e770e54c4c42d3307c141c0c8948992a","hash_sha1":"9eab19985b11b15f91f936e463ea74f1dfe88e32","hash_sha256":"b1893f8d4b1596c20d6f83a784b2b0468c22fb83ce4ff2033ff86a37865d41d8","checksum":"a186cd744f1485e851c656efb673d004757437fa"}}} 2022-02-11 15:08:14,258 - wazuh_testing - DEBUG - 2022/02/11 19:07:58 wazuh-syscheckd[23748] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-11 15:08:14,258 - wazuh_testing - DEBUG - 2022/02/11 19:07:58 wazuh-syscheckd[23748] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-11 15:08:14,258 - wazuh_testing - DEBUG - 2022/02/11 19:07:59 wazuh-syscheckd[23748] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 15:08:14,259 - wazuh_testing - DEBUG - 2022/02/11 19:07:59 wazuh-syscheckd[23748] create_db.c:220 at fim_scan(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-11 15:08:14,259 - wazuh_testing - DEBUG - 2022/02/11 19:07:59 wazuh-syscheckd[23748] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 15:08:14,259 - wazuh_testing - DEBUG - 2022/02/11 19:07:59 wazuh-syscheckd[23748] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644602879}} 2022-02-11 15:08:14,259 - wazuh_testing - DEBUG - 2022/02/11 19:07:59 wazuh-syscheckd[23748] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 15.590 sec (0.563 clock sec) 2022-02-11 15:08:14,259 - wazuh_testing - DEBUG - 2022/02/11 19:07:34 wazuh-modulesd:syscollector: INFO: Stop received for Syscollector. 2022-02-11 15:08:14,259 - wazuh_testing - DEBUG - 2022/02/11 19:07:59 wazuh-syscheckd[23748] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1622, path count: 1628 2022-02-11 15:08:14,259 - wazuh_testing - DEBUG - 2022/02/11 19:08:04 wazuh-logcollector: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:08:14,259 - wazuh_testing - DEBUG - 2022/02/11 19:07:34 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 12 disconnected. 2022-02-11 15:08:14,259 - wazuh_testing - DEBUG - 2022/02/11 19:08:05 wazuh-syscheckd[23748] sig_op.c:49 at HandleSIG(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:08:14,260 - wazuh_testing - DEBUG - 2022/02/11 19:08:05 wazuh-agentd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:08:14,260 - wazuh_testing - DEBUG - 2022/02/11 19:07:34 wazuh-monitord: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:08:14,260 - wazuh_testing - DEBUG - 2022/02/11 19:08:05 wazuh-execd: INFO: (1314): Shutdown received. Deleting responses. 2022-02-11 15:08:14,260 - wazuh_testing - DEBUG - 2022/02/11 19:07:34 wazuh-logcollector: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:08:14,260 - wazuh_testing - DEBUG - 2022/02/11 19:08:05 wazuh-execd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:08:14,260 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-remoted: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:08:14,260 - wazuh_testing - DEBUG - 2022/02/11 19:08:05 wazuh-syscheckd[24445] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 15:08:14,260 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 36 disconnected. 2022-02-11 15:08:14,260 - wazuh_testing - DEBUG - 2022/02/11 19:08:05 wazuh-syscheckd[24445] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 15:08:14,260 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 24 disconnected. 2022-02-11 15:08:14,260 - wazuh_testing - DEBUG - 2022/02/11 19:08:05 wazuh-syscheckd[24445] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-11 15:08:14,260 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 18 disconnected. 2022-02-11 15:08:14,260 - wazuh_testing - DEBUG - 2022/02/11 19:08:05 wazuh-syscheckd[24445] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-11 15:08:14,261 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 16 disconnected. 2022-02-11 15:08:14,261 - wazuh_testing - DEBUG - 2022/02/11 19:08:05 wazuh-syscheckd[24445] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-11 15:08:14,261 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-syscheckd[17593] sig_op.c:49 at HandleSIG(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:08:14,261 - wazuh_testing - DEBUG - 2022/02/11 19:08:05 wazuh-syscheckd[24445] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-11 15:08:14,261 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-analysisd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:08:14,261 - wazuh_testing - DEBUG - 2022/02/11 19:08:05 wazuh-syscheckd[24445] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-11 15:08:14,261 - wazuh_testing - DEBUG - 2022/02/11 19:08:05 wazuh-syscheckd[24445] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ 2022-02-11 15:08:14,261 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 35 disconnected. 2022-02-11 15:08:14,261 - wazuh_testing - DEBUG - 2022/02/11 19:08:05 wazuh-syscheckd[24445] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ OK? 2022-02-11 15:08:14,261 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 37 disconnected. 2022-02-11 15:08:14,261 - wazuh_testing - DEBUG - 2022/02/11 19:08:05 wazuh-syscheckd[24445] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-11 15:08:14,261 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 34 disconnected. 2022-02-11 15:08:14,261 - wazuh_testing - DEBUG - 2022/02/11 19:08:05 wazuh-syscheckd[24445] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-11 15:08:14,262 - wazuh_testing - DEBUG - 2022/02/11 19:08:05 wazuh-syscheckd[24445] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 15:08:14,262 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 32 disconnected. 2022-02-11 15:08:14,262 - wazuh_testing - DEBUG - 2022/02/11 19:08:05 wazuh-syscheckd[24445] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 15:08:14,262 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 31 disconnected. 2022-02-11 15:08:14,262 - wazuh_testing - DEBUG - 2022/02/11 19:08:05 wazuh-syscheckd[24445] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 15:08:14,262 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 30 disconnected. 2022-02-11 15:08:14,262 - wazuh_testing - DEBUG - 2022/02/11 19:08:05 wazuh-syscheckd[24445] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 15:08:14,262 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 28 disconnected. 2022-02-11 15:08:14,262 - wazuh_testing - DEBUG - 2022/02/11 19:08:05 wazuh-syscheckd[24445] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 15:08:14,262 - wazuh_testing - DEBUG - 2022/02/11 19:08:05 wazuh-syscheckd[24445] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 15:08:14,262 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 27 disconnected. 2022-02-11 15:08:14,262 - wazuh_testing - DEBUG - 2022/02/11 19:08:05 wazuh-execd: INFO: Started (pid: 24458). 2022-02-11 15:08:14,262 - wazuh_testing - DEBUG - 2022/02/11 19:08:06 wazuh-agentd: INFO: (1410): Reading authentication keys file. 2022-02-11 15:08:14,263 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 29 disconnected. 2022-02-11 15:08:14,263 - wazuh_testing - DEBUG - 2022/02/11 19:08:06 wazuh-agentd: INFO: Using notify time: 10 and max time to reconnect: 60 2022-02-11 15:08:14,263 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 23 disconnected. 2022-02-11 15:08:14,263 - wazuh_testing - DEBUG - 2022/02/11 19:08:06 wazuh-agentd: INFO: Version detected -> Linux |wazuh-agent1 |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64 [Debian GNU/Linux|debian: 10 (buster)] - Wazuh v4.2.5 2022-02-11 15:08:14,263 - wazuh_testing - DEBUG - 2022/02/11 19:08:06 wazuh-agentd: INFO: Started (pid: 24469). 2022-02-11 15:08:14,263 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 26 disconnected. 2022-02-11 15:08:14,263 - wazuh_testing - DEBUG - 2022/02/11 19:08:06 wazuh-agentd: INFO: Server IP Address: wazuh-manager/172.17.0.2 2022-02-11 15:08:14,263 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 20 disconnected. 2022-02-11 15:08:14,263 - wazuh_testing - DEBUG - 2022/02/11 19:08:06 wazuh-agentd: INFO: Using AES as encryption method. 2022-02-11 15:08:14,263 - wazuh_testing - DEBUG - 2022/02/11 19:08:06 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 15:08:14,263 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 21 disconnected. 2022-02-11 15:08:14,263 - wazuh_testing - DEBUG - 2022/02/11 19:08:06 wazuh-agentd: INFO: (4102): Connected to the server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 15:08:14,264 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 22 disconnected. 2022-02-11 15:08:14,264 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 6 disconnected. 2022-02-11 15:08:14,264 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 15:08:14,264 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 25 disconnected. 2022-02-11 15:08:14,264 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 15:08:14,264 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 11 disconnected. 2022-02-11 15:08:14,264 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-11 15:08:14,264 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-11 15:08:14,264 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 10 disconnected. 2022-02-11 15:08:14,264 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-11 15:08:14,265 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 13 disconnected. 2022-02-11 15:08:14,265 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-11 15:08:14,265 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:352 at run_worker(): DEBUG: Client 19 disconnected. 2022-02-11 15:08:14,265 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-11 15:08:14,265 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ 2022-02-11 15:08:14,265 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-execd: INFO: (1314): Shutdown received. Deleting responses. 2022-02-11 15:08:14,265 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ OK? 2022-02-11 15:08:14,265 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-execd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:08:14,265 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-11 15:08:14,265 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-11 15:08:14,265 - wazuh_testing - DEBUG - 2022/02/11 19:07:35 wazuh-db[17459] main.c:468 at handler(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:08:14,265 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 15:08:14,266 - wazuh_testing - DEBUG - 2022/02/11 19:07:36 wazuh-db[17459] wdb.c:872 at wdb_close_all(): DEBUG: Closing all databases... 2022-02-11 15:08:14,266 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 15:08:14,266 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 15:08:14,266 - wazuh_testing - DEBUG - 2022/02/11 19:07:36 wazuh-db[17459] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent 001 2022-02-11 15:08:14,266 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 15:08:14,266 - wazuh_testing - DEBUG - 2022/02/11 19:07:36 wazuh-db[17459] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent 000 2022-02-11 15:08:14,266 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 15:08:14,266 - wazuh_testing - DEBUG - 2022/02/11 19:07:36 wazuh-db[17459] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent mitre 2022-02-11 15:08:14,266 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 15:08:14,266 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 rootcheck[24481] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled. 2022-02-11 15:08:14,266 - wazuh_testing - DEBUG - 2022/02/11 19:07:36 wazuh-db[17459] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent global 2022-02-11 15:08:14,267 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:08:14,267 - wazuh_testing - DEBUG - 2022/02/11 19:07:36 wazuh-db[17459] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent tasks 2022-02-11 15:08:14,267 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] syscom.c:123 at syscom_main(): DEBUG: (6284): Local requests thread ready. 2022-02-11 15:08:14,267 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] mq_op.c:47 at StartMQ(): DEBUG: Connected succesfully to 'queue/sockets/queue' after 0 attempts 2022-02-11 15:08:14,267 - wazuh_testing - DEBUG - 2022/02/11 19:07:36 wazuh-db[17459] main.c:231 at main(): DEBUG: Template file removed again: queue/db/.template.db 2022-02-11 15:08:14,267 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] mq_op.c:48 at StartMQ(): DEBUG: (unix_domain) Maximum send buffer set to: '212992'. 2022-02-11 15:08:14,267 - wazuh_testing - DEBUG - 2022/02/11 19:07:36 wazuh-authd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:08:14,267 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] main.c:185 at main(): INFO: Started (pid: 24483). 2022-02-11 15:08:14,267 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] main.c:193 at main(): INFO: (6003): Monitoring path: '/bin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 15:08:14,267 - wazuh_testing - DEBUG - 2022/02/11 19:07:36 wazuh-authd: INFO: Exiting... 2022-02-11 15:08:14,268 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] main.c:193 at main(): INFO: (6003): Monitoring path: '/boot', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 15:08:14,268 - wazuh_testing - DEBUG - 2022/02/11 19:07:42 wazuh-db[18325] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 15:08:14,268 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] main.c:193 at main(): INFO: (6003): Monitoring path: '/etc', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 15:08:14,268 - wazuh_testing - DEBUG - 2022/02/11 19:07:42 wazuh-db[18325] main.c:101 at main(): DEBUG: Wazuh home directory: /var/ossec 2022-02-11 15:08:14,268 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] main.c:193 at main(): INFO: (6003): Monitoring path: '/sbin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 15:08:14,268 - wazuh_testing - DEBUG - 2022/02/11 19:07:42 wazuh-syscheckd[18329] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 15:08:14,268 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir1', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 15:08:14,268 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir2', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | realtime'. 2022-02-11 15:08:14,269 - wazuh_testing - DEBUG - 2022/02/11 19:07:42 wazuh-syscheckd[18329] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 15:08:14,269 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir3', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | whodata'. 2022-02-11 15:08:14,269 - wazuh_testing - DEBUG - 2022/02/11 19:07:42 wazuh-syscheckd[18329] syscheck-config.c:122 at organize_syscheck_dirs(): DEBUG: No directory entries to organize in syscheck configuration. 2022-02-11 15:08:14,269 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/bin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 15:08:14,269 - wazuh_testing - DEBUG - 2022/02/11 19:07:45 wazuh-csyslogd: INFO: Remote syslog server not configured. Clean exit. 2022-02-11 15:08:14,269 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/sbin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 15:08:14,269 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] main.c:215 at main(): DEBUG: (6357): Maximum disk quota size limit configured to '1048576 KB'. 2022-02-11 15:08:14,269 - wazuh_testing - DEBUG - 2022/02/11 19:07:45 wazuh-dbd: INFO: Database not configured. Clean exit. 2022-02-11 15:08:14,270 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mtab' 2022-02-11 15:08:14,270 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/hosts.deny' 2022-02-11 15:08:14,270 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mail/statistics' 2022-02-11 15:08:14,270 - wazuh_testing - DEBUG - 2022/02/11 19:07:45 wazuh-integratord: INFO: Remote integrations not configured. Clean exit. 2022-02-11 15:08:14,270 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random-seed' 2022-02-11 15:08:14,270 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random.seed' 2022-02-11 15:08:14,270 - wazuh_testing - DEBUG - 2022/02/11 19:07:45 wazuh-agentlessd: INFO: Not configured. Exiting. 2022-02-11 15:08:14,271 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/adjtime' 2022-02-11 15:08:14,271 - wazuh_testing - DEBUG - 2022/02/11 19:07:45 wazuh-authd: INFO: Started (pid: 18395). 2022-02-11 15:08:14,271 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/httpd/logs' 2022-02-11 15:08:14,271 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/utmpx' 2022-02-11 15:08:14,271 - wazuh_testing - DEBUG - 2022/02/11 19:07:45 wazuh-authd: INFO: Accepting connections on port 1515. No password required. 2022-02-11 15:08:14,271 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/wtmpx' 2022-02-11 15:08:14,271 - wazuh_testing - DEBUG - 2022/02/11 19:07:45 wazuh-authd: INFO: Setting network timeout to 1.000000 sec. 2022-02-11 15:08:14,271 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/cups/certs' 2022-02-11 15:08:14,271 - wazuh_testing - DEBUG - 2022/02/11 19:07:45 wazuh-db[18406] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 15:08:14,272 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/dumpdates' 2022-02-11 15:08:14,272 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/svc/volatile' 2022-02-11 15:08:14,272 - wazuh_testing - DEBUG - 2022/02/11 19:07:45 wazuh-db[18406] main.c:101 at main(): DEBUG: Wazuh home directory: /var/ossec 2022-02-11 15:08:14,272 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/security' 2022-02-11 15:08:14,272 - wazuh_testing - DEBUG - 2022/02/11 19:07:45 wazuh-db[18406] main.c:122 at main(): DEBUG: Template file removed: /var/ossec/queue/db/.template.db 2022-02-11 15:08:14,272 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/debug' 2022-02-11 15:08:14,272 - wazuh_testing - DEBUG - 2022/02/11 19:07:45 wazuh-db[18406] main.c:178 at main(): INFO: Started (pid: 18408). 2022-02-11 15:08:14,272 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/dev/core' 2022-02-11 15:08:14,272 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '^/proc' 2022-02-11 15:08:14,273 - wazuh_testing - DEBUG - 2022/02/11 19:07:46 wazuh-execd: INFO: (1350): Active response disabled. 2022-02-11 15:08:14,273 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '.log$|.swp$' 2022-02-11 15:08:14,273 - wazuh_testing - DEBUG - 2022/02/11 19:07:46 wazuh-execd: INFO: Started (pid: 18431). 2022-02-11 15:08:14,273 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] main.c:235 at main(): INFO: (6004): No diff for file: '/etc/ssl/private.key' 2022-02-11 15:08:14,273 - wazuh_testing - DEBUG - 2022/02/11 19:07:47 wazuh-analysisd: INFO: Total rules enabled: '3882' 2022-02-11 15:08:14,273 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] main.c:245 at main(): INFO: (6016): Directory set for real time monitoring: '/testdir2'. 2022-02-11 15:08:14,273 - wazuh_testing - DEBUG - 2022/02/11 19:07:47 wazuh-analysisd: INFO: Started (pid: 18445). 2022-02-11 15:08:14,274 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] syscheck_audit.c:243 at audit_init(): WARNING: (6924): Who-data engine cannot start because Auditd is not running. 2022-02-11 15:08:14,274 - wazuh_testing - DEBUG - 2022/02/11 19:07:47 wazuh-db[18406] main.c:290 at run_dealer(): DEBUG: New client connected (6). 2022-02-11 15:08:14,274 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] main.c:264 at main(): WARNING: (6913): Who-data engine could not start. Switching who-data to real-time. 2022-02-11 15:08:14,274 - wazuh_testing - DEBUG - 2022/02/11 19:07:47 wazuh-analysisd: INFO: (7200): Logtest started 2022-02-11 15:08:14,274 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] run_check.c:194 at start_daemon(): DEBUG: (6320): Setting process priority to: '10' 2022-02-11 15:08:14,274 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:08:14,274 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 15:08:14,275 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] run_check.c:229 at start_daemon(): INFO: (6000): Starting daemon... 2022-02-11 15:08:14,275 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 15:08:14,275 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] syscheck-config.c:122 at organize_syscheck_dirs(): DEBUG: No directory entries to organize in syscheck configuration. 2022-02-11 15:08:14,275 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] run_check.c:232 at start_daemon(): INFO: (6010): File integrity monitoring scan frequency: 20 seconds 2022-02-11 15:08:14,275 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] main.c:118 at main(): INFO: (6678): No directory provided for syscheck to monitor. 2022-02-11 15:08:14,276 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 15:08:14,276 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] main.c:136 at main(): INFO: (6001): File integrity monitoring disabled. 2022-02-11 15:08:14,276 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644602887}} 2022-02-11 15:08:14,276 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 rootcheck[18540] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled. 2022-02-11 15:08:14,276 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 15:08:14,276 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:08:14,277 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-11 15:08:14,277 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] syscom.c:123 at syscom_main(): DEBUG: (6284): Local requests thread ready. 2022-02-11 15:08:14,277 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-11 15:08:14,277 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] mq_op.c:47 at StartMQ(): DEBUG: Connected succesfully to 'queue/sockets/queue' after 0 attempts 2022-02-11 15:08:14,277 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-11 15:08:14,278 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] mq_op.c:48 at StartMQ(): DEBUG: (unix_domain) Maximum send buffer set to: '212992'. 2022-02-11 15:08:14,278 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-11 15:08:14,278 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] main.c:185 at main(): INFO: Started (pid: 18542). 2022-02-11 15:08:14,278 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 15:08:14,278 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 15:08:14,278 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] main.c:215 at main(): DEBUG: (6357): Maximum disk quota size limit configured to '1048576 KB'. 2022-02-11 15:08:14,279 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644602887}} 2022-02-11 15:08:14,279 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] run_check.c:194 at start_daemon(): DEBUG: (6320): Setting process priority to: '10' 2022-02-11 15:08:14,279 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.393 sec (0.389 clock sec) 2022-02-11 15:08:14,279 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:08:14,279 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1621, path count: 1627 2022-02-11 15:08:14,279 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] run_check.c:229 at start_daemon(): INFO: (6000): Starting daemon... 2022-02-11 15:08:14,279 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:08:14,280 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:08:14,280 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] run_check.c:232 at start_daemon(): INFO: (6010): File integrity monitoring scan frequency: 43200 seconds 2022-02-11 15:08:14,280 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] run_check.c:387 at fim_run_realtime(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-11 15:08:14,280 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 15:08:14,280 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] run_check.c:543 at log_realtime_status(): INFO: (6012): Real-time file integrity monitoring started. 2022-02-11 15:08:14,280 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644602868}} 2022-02-11 15:08:14,281 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:08:14,281 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. 2022-02-11 15:08:14,281 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 15:08:14,281 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] run_check.c:568 at symlink_checker_thread(): DEBUG: (6033): Starting symbolic link updater. Interval '600'. 2022-02-11 15:08:14,281 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-db[18406] main.c:290 at run_dealer(): DEBUG: New client connected (10). 2022-02-11 15:08:14,281 - wazuh_testing - DEBUG - 2022/02/11 19:08:07 wazuh-syscheckd[24481] run_check.c:82 at fim_send_sync_msg(): DEBUG: (6317): Sending integrity control message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1644602887,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"da739814f627066b1cd796980bc8358da55cbb0d"}} 2022-02-11 15:08:14,282 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 15:08:14,282 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 000 query: syscheck scan_info_update start_scan 1644602868 2022-02-11 15:08:14,282 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-agent1 and message: .*Sending integrity control message: (.+)$ 2022-02-11 15:08:14,282 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 15:08:14,283 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644602868}} 2022-02-11 15:08:14,283 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.000 sec (0.000 clock sec) 2022-02-11 15:08:14,283 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 0, path count: 0 2022-02-11 15:08:14,284 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-db[18406] main.c:290 at run_dealer(): DEBUG: New client connected (12). 2022-02-11 15:08:14,284 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:08:14,284 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 000 query: syscheck scan_info_update end_scan 1644602868 2022-02-11 15:08:14,285 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:08:14,285 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:08:14,285 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. 2022-02-11 15:08:14,285 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] run_check.c:568 at symlink_checker_thread(): DEBUG: (6033): Starting symbolic link updater. Interval '600'. 2022-02-11 15:08:14,286 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] run_check.c:82 at fim_send_sync_msg(): DEBUG: (6317): Sending integrity control message: {"component":"fim_file","type":"integrity_clear","data":{"id":1644602868,"version":2}} 2022-02-11 15:08:14,286 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-syscheckd[18540] fim_sync.c:70 at fim_run_integrity(): DEBUG: Finished calculating FIM integrity. Time: 0.000 seconds. 2022-02-11 15:08:14,287 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-db[18406] main.c:290 at run_dealer(): DEBUG: New client connected (13). 2022-02-11 15:08:14,287 - wazuh_testing - DEBUG - 2022/02/11 19:07:48 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 000 query: fim_file integrity_clear {"id":1644602868,"version":2} 2022-02-11 15:08:14,287 - wazuh_testing - DEBUG - 2022/02/11 19:07:49 wazuh-remoted: INFO: Started (pid: 18560). Listening on port 1514/TCP (secure). 2022-02-11 15:08:14,287 - wazuh_testing - DEBUG - 2022/02/11 19:07:49 wazuh-db[18406] main.c:290 at run_dealer(): DEBUG: New client connected (11). 2022-02-11 15:08:14,288 - wazuh_testing - DEBUG - 2022/02/11 19:07:49 wazuh-db[18406] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: reset-agents-connection synced 2022-02-11 15:08:14,288 - wazuh_testing - DEBUG - 2022/02/11 19:07:49 wazuh-db[18406] main.c:352 at run_worker(): DEBUG: Client 11 disconnected. 2022-02-11 15:08:14,288 - wazuh_testing - DEBUG - 2022/02/11 19:07:49 wazuh-remoted: INFO: (1410): Reading authentication keys file. 2022-02-11 15:08:14,289 - wazuh_testing - DEBUG - 2022/02/11 19:07:50 wazuh-logcollector: INFO: (1950): Analyzing file: '/var/ossec/logs/active-responses.log'. 2022-02-11 15:08:14,289 - wazuh_testing - DEBUG - 2022/02/11 19:07:50 wazuh-logcollector: INFO: (1950): Analyzing file: '/var/log/dpkg.log'. 2022-02-11 15:08:14,289 - wazuh_testing - DEBUG - 2022/02/11 19:07:50 wazuh-logcollector: INFO: Started (pid: 18592). 2022-02-11 15:08:14,290 - wazuh_testing - DEBUG - 2022/02/11 19:07:51 wazuh-monitord: INFO: Started (pid: 18611). 2022-02-11 15:08:14,290 - wazuh_testing - DEBUG - 2022/02/11 19:07:52 wazuh-modulesd: INFO: Started (pid: 18627). 2022-02-11 15:08:14,290 - wazuh_testing - DEBUG - 2022/02/11 19:07:52 wazuh-modulesd:agent-upgrade: INFO: (8153): Module Agent Upgrade started. 2022-02-11 15:08:14,291 - wazuh_testing - DEBUG - 2022/02/11 19:07:52 wazuh-modulesd:ciscat: INFO: Module disabled. Exiting... 2022-02-11 15:08:14,291 - wazuh_testing - DEBUG - 2022/02/11 19:07:52 wazuh-modulesd:osquery: INFO: Module disabled. Exiting... 2022-02-11 15:08:14,291 - wazuh_testing - DEBUG - 2022/02/11 19:07:52 wazuh-modulesd:syscollector: INFO: Module disabled. Exiting... 2022-02-11 15:08:14,292 - wazuh_testing - DEBUG - 2022/02/11 19:07:52 sca: INFO: Module disabled. Exiting. 2022-02-11 15:08:14,292 - wazuh_testing - DEBUG - 2022/02/11 19:07:52 wazuh-modulesd:database: INFO: Module started. 2022-02-11 15:08:14,293 - wazuh_testing - DEBUG - 2022/02/11 19:07:52 wazuh-modulesd:download: INFO: Module started. 2022-02-11 15:08:14,293 - wazuh_testing - DEBUG - 2022/02/11 19:07:52 wazuh-modulesd:control: INFO: Starting control thread. 2022-02-11 15:08:14,294 - wazuh_testing - DEBUG - 2022/02/11 19:07:52 wazuh-db[18406] main.c:290 at run_dealer(): DEBUG: New client connected (11). 2022-02-11 15:08:14,294 - wazuh_testing - DEBUG - 2022/02/11 19:07:52 wazuh-db[18406] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-name {"id":0,"name":"wazuh-manager"} 2022-02-11 15:08:14,295 - wazuh_testing - DEBUG - 2022/02/11 19:07:52 wazuh-modulesd:task-manager: INFO: (8200): Module Task Manager started. 2022-02-11 15:08:14,295 - wazuh_testing - DEBUG - 2022/02/11 19:07:52 wazuh-db[18406] main.c:290 at run_dealer(): DEBUG: New client connected (16). 2022-02-11 15:08:14,295 - wazuh_testing - DEBUG - 2022/02/11 19:07:52 wazuh-db[18406] wdb_parser.c:928 at wdb_parse(): DEBUG: Task query: set_timeout {"now":1644602872,"interval":900} 2022-02-11 15:08:14,296 - wazuh_testing - DEBUG - 2022/02/11 19:07:52 wazuh-db[18406] main.c:352 at run_worker(): DEBUG: Client 16 disconnected. 2022-02-11 15:08:14,296 - wazuh_testing - DEBUG - 2022/02/11 19:07:52 wazuh-db[18406] main.c:290 at run_dealer(): DEBUG: New client connected (19). 2022-02-11 15:08:14,297 - wazuh_testing - DEBUG - 2022/02/11 19:07:52 wazuh-db[18406] wdb_parser.c:928 at wdb_parse(): DEBUG: Task query: delete_old {"timestamp":1643998072} 2022-02-11 15:08:14,297 - wazuh_testing - DEBUG - 2022/02/11 19:07:52 wazuh-db[18406] main.c:352 at run_worker(): DEBUG: Client 19 disconnected. 2022-02-11 15:08:14,297 - wazuh_testing - DEBUG - 2022/02/11 19:07:52 wazuh-db[18406] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":0,"version":"Wazuh v4.2.5","manager_host":"wazuh-manager","node_name":"wazuh-master","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-manager |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64","os_arch":"x86_64"} 2022-02-11 15:08:14,298 - wazuh_testing - DEBUG - 2022/02/11 19:07:52 wazuh-db[18406] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: insert-agent {"id":1,"name":"wazuh-agent1","register_ip":"any","internal_key":"1111111111111111111111111111111111111111111111111111111111111111","group":"default","date_add":0} 2022-02-11 15:08:14,298 - wazuh_testing - DEBUG - 2022/02/11 19:07:52 wazuh-db[18406] wdb_global.c:89 at wdb_global_insert_agent(): DEBUG: SQLite: UNIQUE constraint failed: agent.id 2022-02-11 15:08:14,299 - wazuh_testing - DEBUG - 2022/02/11 19:07:52 wazuh-db[18406] wdb_parser.c:4784 at wdb_parse_global_insert_agent(): DEBUG: Global DB Cannot execute SQL query; err database queue/db/global.db: UNIQUE constraint failed: agent.id 2022-02-11 15:08:14,299 - wazuh_testing - DEBUG - 2022/02/11 19:07:52 wazuh-db[18406] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-group {"id":1,"group":"default"} 2022-02-11 15:08:14,299 - wazuh_testing - DEBUG - 2022/02/11 19:07:52 wazuh-db[18406] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: delete-agent-belong 1 2022-02-11 15:08:14,300 - wazuh_testing - DEBUG - 2022/02/11 19:07:52 wazuh-db[18406] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: find-group default 2022-02-11 15:08:14,300 - wazuh_testing - DEBUG - 2022/02/11 19:07:52 wazuh-db[18406] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: insert-agent-belong {"id_group":1,"id_agent":1} 2022-02-11 15:08:14,300 - wazuh_testing - DEBUG - 2022/02/11 19:07:52 wazuh-db[18406] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: get-all-agents last_id 0 2022-02-11 15:08:14,301 - wazuh_testing - DEBUG - 2022/02/11 19:07:52 wazuh-db[18406] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: select-groups 2022-02-11 15:08:14,301 - wazuh_testing - DEBUG - 2022/02/11 19:07:52 wazuh-db[18406] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: find-group default 2022-02-11 15:08:14,302 - wazuh_testing - DEBUG - 2022/02/11 19:07:52 wazuh-db[18406] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: get-all-agents last_id 0 2022-02-11 15:08:14,302 - wazuh_testing - DEBUG - 2022/02/11 19:07:52 wazuh-db[18406] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: select-agent-group 1 2022-02-11 15:08:14,303 - wazuh_testing - DEBUG - 2022/02/11 19:07:52 wazuh-db[18406] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: delete-agent-belong 1 2022-02-11 15:08:14,303 - wazuh_testing - DEBUG - 2022/02/11 19:07:52 wazuh-db[18406] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: find-group default 2022-02-11 15:08:14,304 - wazuh_testing - DEBUG - 2022/02/11 19:07:52 wazuh-db[18406] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: insert-agent-belong {"id_group":1,"id_agent":1} 2022-02-11 15:08:14,304 - wazuh_testing - DEBUG - 2022/02/11 19:07:52 wazuh-db[18406] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: select-agent-name 1 2022-02-11 15:08:14,304 - wazuh_testing - DEBUG - 2022/02/11 19:07:52 wazuh-db[18406] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: select-agent-name 1 2022-02-11 15:08:14,305 - wazuh_testing - DEBUG - 2022/02/11 19:07:55 wazuh-db[18406] main.c:290 at run_dealer(): DEBUG: New client connected (16). 2022-02-11 15:08:14,305 - wazuh_testing - DEBUG - 2022/02/11 19:07:55 wazuh-db[18406] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-keepalive {"id":1,"connection_status":"pending","sync_status":"synced"} 2022-02-11 15:08:14,306 - wazuh_testing - DEBUG - 2022/02/11 19:07:55 wazuh-db[18406] main.c:290 at run_dealer(): DEBUG: New client connected (18). 2022-02-11 15:08:14,307 - wazuh_testing - DEBUG - 2022/02/11 19:07:55 wazuh-db[18406] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64","os_arch":"x86_64"} 2022-02-11 15:08:14,307 - wazuh_testing - DEBUG - 2022/02/11 19:07:58 wazuh-db[18406] wdb.c:918 at wdb_commit_old(): DEBUG: Agent 'mitre' database commited. Time: 0.020 ms. 2022-02-11 15:08:14,308 - wazuh_testing - DEBUG - 2022/02/11 19:07:58 wazuh-db[18406] main.c:290 at run_dealer(): DEBUG: New client connected (19). 2022-02-11 15:08:14,308 - wazuh_testing - DEBUG - 2022/02/11 19:07:58 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1644602863 2022-02-11 15:08:14,309 - wazuh_testing - DEBUG - 2022/02/11 19:07:58 wazuh-db[18406] main.c:290 at run_dealer(): DEBUG: New client connected (20). 2022-02-11 15:08:14,309 - wazuh_testing - DEBUG - 2022/02/11 19:07:58 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck save2 {"path":"/testdir1/tmpcc_tqg9q","version":2,"timestamp":1644602878,"attributes":{"type":"file","size":8,"perm":"rw-r--r--","uid":"0","gid":"0","user_name":"root","group_name":"root","inode":17314758,"mtime":1644602858,"hash_md5":"e770e54c4c42d3307c141c0c8948992a","hash_sha1":"9eab19985b11b15f91f936e463ea74f1dfe88e32","hash_sha256":"b1893f8d4b1596c20d6f83a784b2b0468c22fb83ce4ff2033ff86a37865d41d8","checksum":"a186cd744f1485e851c656efb673d004757437fa"}} 2022-02-11 15:08:14,310 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-manager and message: .*Agent 001 query: (.+) save2 2022-02-11 15:08:15,262 - wazuh_testing - DEBUG - Cleaning temporal files... 2022-02-11 15:08:15,263 - wazuh_testing - DEBUG - Checking results... 2022-02-11 15:08:15,264 - wazuh_testing - DEBUG - Received from wazuh-agent1 the expected message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1644602887,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"da739814f627066b1cd796980bc8358da55cbb0d"}} 2022-02-11 15:08:15,264 - wazuh_testing - DEBUG - Received from wazuh-manager the expected message: syscheck 2022-02-11 15:08:30,269 - wazuh_testing - DEBUG - Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-11 15:08:30,270 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-11 15:08:30,271 - wazuh_testing - DEBUG - Starting file composer for wazuh-agent1 and path: /var/ossec/logs/ossec.log. Composite file in /home/camila/Escritorio/repo/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-agent1_ossec.log.tmp 2022-02-11 15:08:30,272 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-agent1 and message: .*Initializing FIM Integrity Synchronization check. (.+)$ 2022-02-11 15:08:31,773 - wazuh_testing - DEBUG - 2022/02/11 19:08:20 wazuh-logcollector: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:08:31,774 - wazuh_testing - DEBUG - 2022/02/11 19:08:20 wazuh-syscheckd[24481] sig_op.c:49 at HandleSIG(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:08:31,774 - wazuh_testing - DEBUG - 2022/02/11 19:08:20 wazuh-agentd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:08:31,774 - wazuh_testing - DEBUG - 2022/02/11 19:08:20 wazuh-execd: INFO: (1314): Shutdown received. Deleting responses. 2022-02-11 15:08:31,774 - wazuh_testing - DEBUG - 2022/02/11 19:08:20 wazuh-execd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:08:31,775 - wazuh_testing - DEBUG - 2022/02/11 19:08:23 wazuh-syscheckd[24907] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 15:08:31,775 - wazuh_testing - DEBUG - 2022/02/11 19:08:23 wazuh-syscheckd[24907] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 15:08:31,775 - wazuh_testing - DEBUG - 2022/02/11 19:08:23 wazuh-syscheckd[24907] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir1' due to [(2)-(No such file or directory)]. 2022-02-11 15:08:31,775 - wazuh_testing - DEBUG - 2022/02/11 19:08:23 wazuh-syscheckd[24907] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-11 15:08:31,775 - wazuh_testing - DEBUG - 2022/02/11 19:08:23 wazuh-syscheckd[24907] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-11 15:08:31,776 - wazuh_testing - DEBUG - 2022/02/11 19:08:23 wazuh-syscheckd[24907] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-11 15:08:31,776 - wazuh_testing - DEBUG - 2022/02/11 19:08:23 wazuh-syscheckd[24907] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-11 15:08:31,776 - wazuh_testing - DEBUG - 2022/02/11 19:08:23 wazuh-syscheckd[24907] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-11 15:08:31,776 - wazuh_testing - DEBUG - 2022/02/11 19:08:23 wazuh-syscheckd[24907] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ 2022-02-11 15:08:31,777 - wazuh_testing - DEBUG - 2022/02/11 19:08:23 wazuh-syscheckd[24907] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ OK? 2022-02-11 15:08:31,777 - wazuh_testing - DEBUG - 2022/02/11 19:08:23 wazuh-syscheckd[24907] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-11 15:08:31,777 - wazuh_testing - DEBUG - 2022/02/11 19:08:23 wazuh-syscheckd[24907] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-11 15:08:31,777 - wazuh_testing - DEBUG - 2022/02/11 19:08:23 wazuh-syscheckd[24907] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 15:08:31,777 - wazuh_testing - DEBUG - 2022/02/11 19:08:23 wazuh-syscheckd[24907] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 15:08:31,778 - wazuh_testing - DEBUG - 2022/02/11 19:08:23 wazuh-syscheckd[24907] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 15:08:31,778 - wazuh_testing - DEBUG - 2022/02/11 19:08:23 wazuh-syscheckd[24907] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 15:08:31,778 - wazuh_testing - DEBUG - 2022/02/11 19:08:23 wazuh-syscheckd[24907] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 15:08:31,778 - wazuh_testing - DEBUG - 2022/02/11 19:08:23 wazuh-syscheckd[24907] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 15:08:31,778 - wazuh_testing - DEBUG - 2022/02/11 19:08:23 wazuh-execd: INFO: Started (pid: 24921). 2022-02-11 15:08:31,779 - wazuh_testing - DEBUG - 2022/02/11 19:08:24 wazuh-agentd: INFO: (1410): Reading authentication keys file. 2022-02-11 15:08:31,779 - wazuh_testing - DEBUG - 2022/02/11 19:08:24 wazuh-agentd: INFO: Using notify time: 10 and max time to reconnect: 60 2022-02-11 15:08:31,779 - wazuh_testing - DEBUG - 2022/02/11 19:08:24 wazuh-agentd: INFO: Version detected -> Linux |wazuh-agent1 |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64 [Debian GNU/Linux|debian: 10 (buster)] - Wazuh v4.2.5 2022-02-11 15:08:31,779 - wazuh_testing - DEBUG - 2022/02/11 19:08:24 wazuh-agentd: INFO: Started (pid: 24931). 2022-02-11 15:08:31,780 - wazuh_testing - DEBUG - 2022/02/11 19:08:24 wazuh-agentd: INFO: Server IP Address: wazuh-manager/172.17.0.2 2022-02-11 15:08:31,780 - wazuh_testing - DEBUG - 2022/02/11 19:08:24 wazuh-agentd: INFO: Using AES as encryption method. 2022-02-11 15:08:31,780 - wazuh_testing - DEBUG - 2022/02/11 19:08:24 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 15:08:31,780 - wazuh_testing - DEBUG - 2022/02/11 19:08:24 wazuh-agentd: INFO: (4102): Connected to the server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 15:08:31,781 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 15:08:31,781 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 15:08:31,781 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir1' due to [(2)-(No such file or directory)]. 2022-02-11 15:08:31,781 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-11 15:08:31,782 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-11 15:08:31,782 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-11 15:08:31,782 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-11 15:08:31,782 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-11 15:08:31,783 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ 2022-02-11 15:08:31,784 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ OK? 2022-02-11 15:08:31,784 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-11 15:08:31,784 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-11 15:08:31,784 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 15:08:31,785 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 15:08:31,785 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 15:08:31,785 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 15:08:31,786 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 15:08:31,786 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 15:08:31,786 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 rootcheck[24943] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled. 2022-02-11 15:08:31,786 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:08:31,786 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] syscom.c:123 at syscom_main(): DEBUG: (6284): Local requests thread ready. 2022-02-11 15:08:31,787 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] mq_op.c:47 at StartMQ(): DEBUG: Connected succesfully to 'queue/sockets/queue' after 0 attempts 2022-02-11 15:08:31,787 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] mq_op.c:48 at StartMQ(): DEBUG: (unix_domain) Maximum send buffer set to: '212992'. 2022-02-11 15:08:31,787 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:185 at main(): INFO: Started (pid: 24945). 2022-02-11 15:08:31,787 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:193 at main(): INFO: (6003): Monitoring path: '/bin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 15:08:31,788 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:193 at main(): INFO: (6003): Monitoring path: '/boot', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 15:08:31,788 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:193 at main(): INFO: (6003): Monitoring path: '/etc', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 15:08:31,788 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:193 at main(): INFO: (6003): Monitoring path: '/sbin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 15:08:31,788 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir1', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 15:08:31,789 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir2', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | realtime'. 2022-02-11 15:08:31,789 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir3', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | whodata'. 2022-02-11 15:08:31,789 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/bin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 15:08:31,789 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/sbin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 15:08:31,790 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:215 at main(): DEBUG: (6357): Maximum disk quota size limit configured to '1048576 KB'. 2022-02-11 15:08:31,790 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mtab' 2022-02-11 15:08:31,790 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/hosts.deny' 2022-02-11 15:08:31,790 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mail/statistics' 2022-02-11 15:08:31,791 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random-seed' 2022-02-11 15:08:31,791 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random.seed' 2022-02-11 15:08:31,791 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/adjtime' 2022-02-11 15:08:31,791 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/httpd/logs' 2022-02-11 15:08:31,791 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/utmpx' 2022-02-11 15:08:31,792 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/wtmpx' 2022-02-11 15:08:31,792 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/cups/certs' 2022-02-11 15:08:31,792 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/dumpdates' 2022-02-11 15:08:31,792 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/svc/volatile' 2022-02-11 15:08:31,792 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/security' 2022-02-11 15:08:31,792 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/debug' 2022-02-11 15:08:31,792 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/dev/core' 2022-02-11 15:08:31,793 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '^/proc' 2022-02-11 15:08:31,793 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '.log$|.swp$' 2022-02-11 15:08:31,793 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:235 at main(): INFO: (6004): No diff for file: '/etc/ssl/private.key' 2022-02-11 15:08:31,793 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:245 at main(): INFO: (6016): Directory set for real time monitoring: '/testdir2'. 2022-02-11 15:08:31,793 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] syscheck_audit.c:243 at audit_init(): WARNING: (6924): Who-data engine cannot start because Auditd is not running. 2022-02-11 15:08:31,793 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:264 at main(): WARNING: (6913): Who-data engine could not start. Switching who-data to real-time. 2022-02-11 15:08:31,794 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] run_check.c:194 at start_daemon(): DEBUG: (6320): Setting process priority to: '10' 2022-02-11 15:08:31,794 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:08:31,794 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] run_check.c:229 at start_daemon(): INFO: (6000): Starting daemon... 2022-02-11 15:08:31,794 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] run_check.c:232 at start_daemon(): INFO: (6010): File integrity monitoring scan frequency: 20 seconds 2022-02-11 15:08:31,794 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 15:08:31,794 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644602905}} 2022-02-11 15:08:31,795 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 15:08:31,795 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-11 15:08:31,795 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-11 15:08:31,795 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-11 15:08:31,795 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-11 15:08:31,795 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 15:08:31,795 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 15:08:31,795 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644602905}} 2022-02-11 15:08:31,796 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.341 sec (0.339 clock sec) 2022-02-11 15:08:31,796 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1620, path count: 1626 2022-02-11 15:08:31,796 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:08:31,796 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:08:31,796 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:08:31,796 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. 2022-02-11 15:08:31,797 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-agent1 and message: .*Initializing FIM Integrity Synchronization check. (.+)$ 2022-02-11 15:08:32,776 - wazuh_testing - DEBUG - Cleaning temporal files... 2022-02-11 15:08:32,776 - wazuh_testing - DEBUG - Checking results... 2022-02-11 15:08:32,777 - wazuh_testing - DEBUG - Received from wazuh-agent1 the expected message: Sync interval is 300 seconds.
-------------------------------Captured log call--------------------------------
DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:1005 Cleaning temporal files... DEBUG wazuh_testing:monitoring.py:994 Checking results... DEBUG wazuh_testing:monitoring.py:1000 Received from wazuh-agent1 the expected message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1644602887,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"da739814f627066b1cd796980bc8358da55cbb0d"}} DEBUG wazuh_testing:monitoring.py:1000 Received from wazuh-manager the expected message: syscheck DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:1005 Cleaning temporal files... DEBUG wazuh_testing:monitoring.py:994 Checking results... DEBUG wazuh_testing:monitoring.py:1000 Received from wazuh-agent1 the expected message: Sync interval is 300 seconds.

Passed

test_synchronization.py::test_synchronization[testdir1-delete-wazuh-manager]

47.73

------------------------------Captured stderr call------------------------------
2022-02-11 15:08:50,717 - wazuh_testing - DEBUG - Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-11 15:08:50,719 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log 2022-02-11 15:08:50,719 - wazuh_testing - DEBUG - Starting file composer for wazuh-agent1 and path: /var/ossec/logs/ossec.log. Composite file in /home/camila/Escritorio/repo/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-agent1_ossec.log.tmp 2022-02-11 15:08:50,720 - wazuh_testing - DEBUG - Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-11 15:08:50,720 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-agent1 and message: .*Sending integrity control message: (.+)$ 2022-02-11 15:08:50,721 - wazuh_testing - DEBUG - Starting file composer for wazuh-manager and path: /var/ossec/logs/ossec.log. Composite file in /home/camila/Escritorio/repo/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-manager_ossec.log.tmp 2022-02-11 15:08:50,721 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-11 15:08:50,723 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-manager and message: .*Agent 001 query: (.+) save2 2022-02-11 15:08:52,222 - wazuh_testing - DEBUG - 2022/02/11 19:08:20 wazuh-logcollector: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:08:52,222 - wazuh_testing - DEBUG - 2022/02/11 19:08:20 wazuh-syscheckd[24481] sig_op.c:49 at HandleSIG(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:08:52,223 - wazuh_testing - DEBUG - 2022/02/11 19:08:20 wazuh-agentd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:08:52,223 - wazuh_testing - DEBUG - 2022/02/11 19:08:20 wazuh-execd: INFO: (1314): Shutdown received. Deleting responses. 2022-02-11 15:08:52,223 - wazuh_testing - DEBUG - 2022/02/11 19:08:20 wazuh-execd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:08:52,223 - wazuh_testing - DEBUG - 2022/02/11 19:08:23 wazuh-syscheckd[24907] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 15:08:52,224 - wazuh_testing - DEBUG - 2022/02/11 19:08:23 wazuh-syscheckd[24907] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 15:08:52,224 - wazuh_testing - DEBUG - 2022/02/11 19:08:23 wazuh-syscheckd[24907] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir1' due to [(2)-(No such file or directory)]. 2022-02-11 15:08:52,224 - wazuh_testing - DEBUG - 2022/02/11 19:08:23 wazuh-syscheckd[24907] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-11 15:08:52,224 - wazuh_testing - DEBUG - 2022/02/11 19:08:23 wazuh-syscheckd[24907] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-11 15:08:52,224 - wazuh_testing - DEBUG - 2022/02/11 19:08:23 wazuh-syscheckd[24907] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-11 15:08:52,225 - wazuh_testing - DEBUG - 2022/02/11 19:08:23 wazuh-syscheckd[24907] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-11 15:08:52,225 - wazuh_testing - DEBUG - 2022/02/11 19:08:23 wazuh-syscheckd[24907] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-11 15:08:52,225 - wazuh_testing - DEBUG - 2022/02/11 19:08:23 wazuh-syscheckd[24907] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ 2022-02-11 15:08:52,225 - wazuh_testing - DEBUG - 2022/02/11 19:08:23 wazuh-syscheckd[24907] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ OK? 2022-02-11 15:08:52,225 - wazuh_testing - DEBUG - 2022/02/11 19:08:20 wazuh-db[18406] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-connection-status {"id":1,"connection_status":"disconnected","sync_status":"synced"} 2022-02-11 15:08:52,226 - wazuh_testing - DEBUG - 2022/02/11 19:08:23 wazuh-syscheckd[24907] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-11 15:08:52,226 - wazuh_testing - DEBUG - 2022/02/11 19:08:20 wazuh-db[18406] main.c:290 at run_dealer(): DEBUG: New client connected (35). 2022-02-11 15:08:52,226 - wazuh_testing - DEBUG - 2022/02/11 19:08:23 wazuh-syscheckd[24907] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-11 15:08:52,226 - wazuh_testing - DEBUG - 2022/02/11 19:08:20 wazuh-db[18406] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: get-labels 1 2022-02-11 15:08:52,226 - wazuh_testing - DEBUG - 2022/02/11 19:08:23 wazuh-syscheckd[24907] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 15:08:52,226 - wazuh_testing - DEBUG - 2022/02/11 19:08:22 wazuh-db[18406] main.c:290 at run_dealer(): DEBUG: New client connected (36). 2022-02-11 15:08:52,226 - wazuh_testing - DEBUG - 2022/02/11 19:08:22 wazuh-db[18406] wdb_parser.c:928 at wdb_parse(): DEBUG: Task query: upgrade_cancel_tasks {"node":"wazuh-master"} 2022-02-11 15:08:52,226 - wazuh_testing - DEBUG - 2022/02/11 19:08:23 wazuh-syscheckd[24907] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 15:08:52,226 - wazuh_testing - DEBUG - 2022/02/11 19:08:22 wazuh-db[18406] main.c:352 at run_worker(): DEBUG: Client 36 disconnected. 2022-02-11 15:08:52,227 - wazuh_testing - DEBUG - 2022/02/11 19:08:23 wazuh-syscheckd[24907] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 15:08:52,227 - wazuh_testing - DEBUG - 2022/02/11 19:08:23 wazuh-db[18406] wdb.c:918 at wdb_commit_old(): DEBUG: Agent '001' database commited. Time: 11.810 ms. 2022-02-11 15:08:52,227 - wazuh_testing - DEBUG - 2022/02/11 19:08:24 wazuh-db[18406] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-keepalive {"id":1,"connection_status":"pending","sync_status":"synced"} 2022-02-11 15:08:52,227 - wazuh_testing - DEBUG - 2022/02/11 19:08:23 wazuh-syscheckd[24907] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 15:08:52,227 - wazuh_testing - DEBUG - 2022/02/11 19:08:23 wazuh-syscheckd[24907] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 15:08:52,227 - wazuh_testing - DEBUG - 2022/02/11 19:08:23 wazuh-syscheckd[24907] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 15:08:52,228 - wazuh_testing - DEBUG - 2022/02/11 19:08:23 wazuh-execd: INFO: Started (pid: 24921). 2022-02-11 15:08:52,228 - wazuh_testing - DEBUG - 2022/02/11 19:08:24 wazuh-agentd: INFO: (1410): Reading authentication keys file. 2022-02-11 15:08:52,228 - wazuh_testing - DEBUG - 2022/02/11 19:08:28 wazuh-db[18406] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64","os_arch":"x86_64"} 2022-02-11 15:08:52,228 - wazuh_testing - DEBUG - 2022/02/11 19:08:28 wazuh-db[18406] main.c:290 at run_dealer(): DEBUG: New client connected (33). 2022-02-11 15:08:52,228 - wazuh_testing - DEBUG - 2022/02/11 19:08:24 wazuh-agentd: INFO: Using notify time: 10 and max time to reconnect: 60 2022-02-11 15:08:52,228 - wazuh_testing - DEBUG - 2022/02/11 19:08:28 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1644602905 2022-02-11 15:08:52,228 - wazuh_testing - DEBUG - 2022/02/11 19:08:24 wazuh-agentd: INFO: Version detected -> Linux |wazuh-agent1 |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64 [Debian GNU/Linux|debian: 10 (buster)] - Wazuh v4.2.5 2022-02-11 15:08:52,229 - wazuh_testing - DEBUG - 2022/02/11 19:08:24 wazuh-agentd: INFO: Started (pid: 24931). 2022-02-11 15:08:52,229 - wazuh_testing - DEBUG - 2022/02/11 19:08:28 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update end_scan 1644602905 2022-02-11 15:08:52,229 - wazuh_testing - DEBUG - 2022/02/11 19:08:24 wazuh-agentd: INFO: Server IP Address: wazuh-manager/172.17.0.2 2022-02-11 15:08:52,229 - wazuh_testing - DEBUG - 2022/02/11 19:08:24 wazuh-agentd: INFO: Using AES as encryption method. 2022-02-11 15:08:52,229 - wazuh_testing - DEBUG - 2022/02/11 19:08:28 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_global {"id":1644602905,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"c7d4e863493255e1f6dd0a90c6f1bba963e76a4b"} 2022-02-11 15:08:52,229 - wazuh_testing - DEBUG - 2022/02/11 19:08:24 wazuh-agentd: INFO: Trying to connect to server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 15:08:52,230 - wazuh_testing - DEBUG - 2022/02/11 19:08:28 wazuh-db[18406] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.639 ms. 2022-02-11 15:08:52,230 - wazuh_testing - DEBUG - 2022/02/11 19:08:24 wazuh-agentd: INFO: (4102): Connected to the server (wazuh-manager/172.17.0.2:1514/tcp). 2022-02-11 15:08:52,230 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 15:08:52,230 - wazuh_testing - DEBUG - 2022/02/11 19:08:28 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602905,"version":2,"begin":"/bin/bash","end":"/sbin/chcpu","tail":"/sbin/ctrlaltdel","checksum":"57402e3268a27191e04bfc132831045ee0296f32"} 2022-02-11 15:08:52,230 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 15:08:52,230 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir1' due to [(2)-(No such file or directory)]. 2022-02-11 15:08:52,231 - wazuh_testing - DEBUG - 2022/02/11 19:08:28 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602905,"version":2,"begin":"/sbin/ctrlaltdel","end":"/usr/sbin/zic","checksum":"3b41a81d6e4d0a0cbef3d511ad9d87bc241c6525"} 2022-02-11 15:08:52,231 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir2' due to [(2)-(No such file or directory)]. 2022-02-11 15:08:52,231 - wazuh_testing - DEBUG - 2022/02/11 19:08:28 wazuh-db[18406] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.585 ms. 2022-02-11 15:08:52,231 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] syscheck-config.c:1218 at read_attr(): DEBUG: Could not check the real path of '/testdir3' due to [(2)-(No such file or directory)]. 2022-02-11 15:08:52,231 - wazuh_testing - DEBUG - 2022/02/11 19:08:28 wazuh-db[18406] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.601 ms. 2022-02-11 15:08:52,231 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node ^/proc 2022-02-11 15:08:52,232 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node ^/proc OK? 2022-02-11 15:08:52,232 - wazuh_testing - DEBUG - 2022/02/11 19:08:28 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602905,"version":2,"begin":"/sbin/ctrlaltdel","end":"/usr/bin/pdb","tail":"/usr/bin/pdb2","checksum":"7002e71f8a0a01cb65aadb40c212bd7eb99628a7"} 2022-02-11 15:08:52,232 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 0 2022-02-11 15:08:52,232 - wazuh_testing - DEBUG - 2022/02/11 19:08:28 wazuh-db[18406] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.290 ms. 2022-02-11 15:08:52,233 - wazuh_testing - DEBUG - 2022/02/11 19:08:28 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602905,"version":2,"begin":"/usr/bin/pdb2","end":"/usr/sbin/zic","checksum":"f13d51f7876684d6bc17db143ee1529b892c54d2"} 2022-02-11 15:08:52,233 - wazuh_testing - DEBUG - 2022/02/11 19:08:28 wazuh-db[18406] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.301 ms. 2022-02-11 15:08:52,233 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] syscheck-config.c:2520 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ 2022-02-11 15:08:52,233 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] syscheck-config.c:2527 at process_option_regex(): DEBUG: Found ignore regex node .log$|.swp$ OK? 2022-02-11 15:08:52,233 - wazuh_testing - DEBUG - 2022/02/11 19:08:28 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602905,"version":2,"begin":"/usr/bin/dpkg-genchanges","end":"/usr/bin/pdb","checksum":"ff9bbbbd6461e1dbdffe13c29b2906bb00bc7a1b"} 2022-02-11 15:08:52,234 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] syscheck-config.c:2528 at process_option_regex(): DEBUG: Found ignore regex size 1 2022-02-11 15:08:52,234 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] config.c:95 at Read_Syscheck_Config(): DEBUG: (6208): Reading Client Configuration [etc/ossec.conf] 2022-02-11 15:08:52,234 - wazuh_testing - DEBUG - 2022/02/11 19:08:28 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602905,"version":2,"begin":"/sbin/ctrlaltdel","end":"/usr/bin/dpkg-genbuildinfo","tail":"/usr/bin/dpkg-genchanges","checksum":"bb676047497d09140f97bb2e25f3ee35609f9ac3"} 2022-02-11 15:08:52,234 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 15:08:52,234 - wazuh_testing - DEBUG - 2022/02/11 19:08:28 wazuh-db[18406] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.207 ms. 2022-02-11 15:08:52,235 - wazuh_testing - DEBUG - 2022/02/11 19:08:28 wazuh-db[18406] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.201 ms. 2022-02-11 15:08:52,235 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 15:08:52,235 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 15:08:52,235 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] agent_op.c:208 at os_read_agent_profile(): DEBUG: Calling os_read_agent_profile(). 2022-02-11 15:08:52,235 - wazuh_testing - DEBUG - 2022/02/11 19:08:28 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602905,"version":2,"begin":"/sbin/ctrlaltdel","end":"/usr/bin/apt-ftparchive","tail":"/usr/bin/apt-get","checksum":"250b2f6fc0cab9fc45ba6ac43a777b2ff67ea1c8"} 2022-02-11 15:08:52,235 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] agent_op.c:227 at os_read_agent_profile(): DEBUG: os_read_agent_profile() = [debian, debian10] 2022-02-11 15:08:52,236 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] config.c:375 at ReadConfig(): DEBUG: agent_config element does not have any attributes. 2022-02-11 15:08:52,236 - wazuh_testing - DEBUG - 2022/02/11 19:08:28 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602905,"version":2,"begin":"/usr/bin/apt-get","end":"/usr/bin/dpkg-genbuildinfo","checksum":"56074249484c9c92717d5c3bd886ddd98c728323"} 2022-02-11 15:08:52,236 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 rootcheck[24943] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled. 2022-02-11 15:08:52,236 - wazuh_testing - DEBUG - 2022/02/11 19:08:28 wazuh-db[18406] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.120 ms. 2022-02-11 15:08:52,236 - wazuh_testing - DEBUG - 2022/02/11 19:08:28 wazuh-db[18406] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.125 ms. 2022-02-11 15:08:52,236 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:08:52,236 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] syscom.c:123 at syscom_main(): DEBUG: (6284): Local requests thread ready. 2022-02-11 15:08:52,236 - wazuh_testing - DEBUG - 2022/02/11 19:08:28 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602905,"version":2,"begin":"/sbin/ctrlaltdel","end":"/sbin/mkhomedir_helper","tail":"/sbin/mkswap","checksum":"7a7df0bd9bb5154b28eb072bebe1af0b79c59afb"} 2022-02-11 15:08:52,236 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] mq_op.c:47 at StartMQ(): DEBUG: Connected succesfully to 'queue/sockets/queue' after 0 attempts 2022-02-11 15:08:52,237 - wazuh_testing - DEBUG - 2022/02/11 19:08:28 wazuh-db[18406] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.067 ms. 2022-02-11 15:08:52,237 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] mq_op.c:48 at StartMQ(): DEBUG: (unix_domain) Maximum send buffer set to: '212992'. 2022-02-11 15:08:52,237 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:185 at main(): INFO: Started (pid: 24945). 2022-02-11 15:08:52,237 - wazuh_testing - DEBUG - 2022/02/11 19:08:29 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602905,"version":2,"begin":"/sbin/mkswap","end":"/usr/bin/apt-ftparchive","checksum":"a47a6c5678344283714ed664abc9a85413fc444d"} 2022-02-11 15:08:52,237 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:193 at main(): INFO: (6003): Monitoring path: '/bin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 15:08:52,237 - wazuh_testing - DEBUG - 2022/02/11 19:08:29 wazuh-db[18406] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.114 ms. 2022-02-11 15:08:52,237 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:193 at main(): INFO: (6003): Monitoring path: '/boot', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 15:08:52,238 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:193 at main(): INFO: (6003): Monitoring path: '/etc', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 15:08:52,238 - wazuh_testing - DEBUG - 2022/02/11 19:08:29 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602905,"version":2,"begin":"/sbin/mkswap","end":"/sbin/start-stop-daemon","tail":"/sbin/sulogin","checksum":"b356159685213d77a501787c4ba65eff3cf7fba1"} 2022-02-11 15:08:52,238 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:193 at main(): INFO: (6003): Monitoring path: '/sbin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 15:08:52,238 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir1', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 15:08:52,239 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir2', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | realtime'. 2022-02-11 15:08:52,239 - wazuh_testing - DEBUG - 2022/02/11 19:08:29 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602905,"version":2,"begin":"/sbin/sulogin","end":"/usr/bin/apt-ftparchive","checksum":"a9b1eb7c788d7e88889b5abba258bd64f03e7546"} 2022-02-11 15:08:52,239 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:193 at main(): INFO: (6003): Monitoring path: '/testdir3', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | whodata'. 2022-02-11 15:08:52,239 - wazuh_testing - DEBUG - 2022/02/11 19:08:29 wazuh-db[18406] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.063 ms. 2022-02-11 15:08:52,239 - wazuh_testing - DEBUG - 2022/02/11 19:08:29 wazuh-db[18406] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.073 ms. 2022-02-11 15:08:52,239 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/bin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 15:08:52,239 - wazuh_testing - DEBUG - 2022/02/11 19:08:29 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602905,"version":2,"begin":"/sbin/sulogin","end":"/sbin/wipefs","tail":"/sbin/zramctl","checksum":"086fb81bf040732edfe2a920d67de456c77c8c3d"} 2022-02-11 15:08:52,239 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:193 at main(): INFO: (6003): Monitoring path: '/usr/sbin', with options 'size | permissions | owner | group | mtime | inode | hash_md5 | hash_sha1 | hash_sha256 | scheduled'. 2022-02-11 15:08:52,239 - wazuh_testing - DEBUG - 2022/02/11 19:08:29 wazuh-db[18406] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.052 ms. 2022-02-11 15:08:52,240 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:215 at main(): DEBUG: (6357): Maximum disk quota size limit configured to '1048576 KB'. 2022-02-11 15:08:52,240 - wazuh_testing - DEBUG - 2022/02/11 19:08:29 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602905,"version":2,"begin":"/sbin/zramctl","end":"/usr/bin/apt-ftparchive","checksum":"174a46ff91239e95a534c5be9f1126cf6bcaba27"} 2022-02-11 15:08:52,240 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mtab' 2022-02-11 15:08:52,240 - wazuh_testing - DEBUG - 2022/02/11 19:08:29 wazuh-db[18406] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.061 ms. 2022-02-11 15:08:52,240 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/hosts.deny' 2022-02-11 15:08:52,240 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/mail/statistics' 2022-02-11 15:08:52,240 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random-seed' 2022-02-11 15:08:52,241 - wazuh_testing - DEBUG - 2022/02/11 19:08:29 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602905,"version":2,"begin":"/sbin/zramctl","end":"/usr/bin/addpart","tail":"/usr/bin/addr2line","checksum":"fb4a71a3419fae54401ef5cbedba509446f836eb"} 2022-02-11 15:08:52,241 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/random.seed' 2022-02-11 15:08:52,241 - wazuh_testing - DEBUG - 2022/02/11 19:08:29 wazuh-db[18406] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.055 ms. 2022-02-11 15:08:52,241 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/adjtime' 2022-02-11 15:08:52,241 - wazuh_testing - DEBUG - 2022/02/11 19:08:29 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602905,"version":2,"begin":"/usr/bin/addr2line","end":"/usr/bin/apt-ftparchive","checksum":"59201a3f75bcbf8838c851c3821c5407a36b74bb"} 2022-02-11 15:08:52,241 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/httpd/logs' 2022-02-11 15:08:52,241 - wazuh_testing - DEBUG - 2022/02/11 19:08:29 wazuh-db[18406] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.053 ms. 2022-02-11 15:08:52,242 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/utmpx' 2022-02-11 15:08:52,242 - wazuh_testing - DEBUG - 2022/02/11 19:08:29 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602905,"version":2,"begin":"/sbin/zramctl","end":"/usr/bin/[","tail":"/usr/bin/aclocal","checksum":"d083d6d286795943f55fdf45b82f6bd7837af9fe"} 2022-02-11 15:08:52,242 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/wtmpx' 2022-02-11 15:08:52,242 - wazuh_testing - DEBUG - 2022/02/11 19:08:29 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602905,"version":2,"begin":"/usr/bin/aclocal","end":"/usr/bin/addpart","checksum":"6d0f3eb4c663d5a1d575d605ff8c76994f48d9b2"} 2022-02-11 15:08:52,242 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/cups/certs' 2022-02-11 15:08:52,242 - wazuh_testing - DEBUG - 2022/02/11 19:08:29 wazuh-db[18406] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.078 ms. 2022-02-11 15:08:52,242 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/dumpdates' 2022-02-11 15:08:52,242 - wazuh_testing - DEBUG - 2022/02/11 19:08:29 wazuh-db[18406] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.091 ms. 2022-02-11 15:08:52,242 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/etc/svc/volatile' 2022-02-11 15:08:52,242 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/security' 2022-02-11 15:08:52,242 - wazuh_testing - DEBUG - 2022/02/11 19:08:29 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602905,"version":2,"begin":"/sbin/zramctl","end":"/sbin/zramctl","tail":"/usr/bin/2to3-2.7","checksum":"58b2b87ce2162d80a895c740e0ed2124836230b7"} 2022-02-11 15:08:52,242 - wazuh_testing - DEBUG - 2022/02/11 19:08:29 wazuh-db[18406] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.045 ms. 2022-02-11 15:08:52,242 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/sys/kernel/debug' 2022-02-11 15:08:52,243 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:224 at main(): INFO: (6206): Ignore 'file' entry '/dev/core' 2022-02-11 15:08:52,243 - wazuh_testing - DEBUG - 2022/02/11 19:08:30 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602905,"version":2,"begin":"/usr/bin/2to3-2.7","end":"/usr/bin/[","checksum":"97375af060bd460f67eb174cbf79b28414737339"} 2022-02-11 15:08:52,243 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '^/proc' 2022-02-11 15:08:52,243 - wazuh_testing - DEBUG - 2022/02/11 19:08:30 wazuh-db[18406] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.125 ms. 2022-02-11 15:08:52,243 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:229 at main(): INFO: (6207): Ignore 'file' sregex '.log$|.swp$' 2022-02-11 15:08:52,243 - wazuh_testing - DEBUG - 2022/02/11 19:08:33 wazuh-db[18406] wdb.c:918 at wdb_commit_old(): DEBUG: Agent 'tasks' database commited. Time: 0.042 ms. 2022-02-11 15:08:52,243 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:235 at main(): INFO: (6004): No diff for file: '/etc/ssl/private.key' 2022-02-11 15:08:52,243 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:245 at main(): INFO: (6016): Directory set for real time monitoring: '/testdir2'. 2022-02-11 15:08:52,243 - wazuh_testing - DEBUG - 2022/02/11 19:08:34 wazuh-db[18406] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64","os_arch":"x86_64"} 2022-02-11 15:08:52,243 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] syscheck_audit.c:243 at audit_init(): WARNING: (6924): Who-data engine cannot start because Auditd is not running. 2022-02-11 15:08:52,243 - wazuh_testing - DEBUG - 2022/02/11 19:08:44 wazuh-db[18406] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-connection-status {"id":1,"connection_status":"disconnected","sync_status":"synced"} 2022-02-11 15:08:52,243 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] main.c:264 at main(): WARNING: (6913): Who-data engine could not start. Switching who-data to real-time. 2022-02-11 15:08:52,243 - wazuh_testing - DEBUG - 2022/02/11 19:08:44 wazuh-db[18406] main.c:290 at run_dealer(): DEBUG: New client connected (36). 2022-02-11 15:08:52,244 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] run_check.c:194 at start_daemon(): DEBUG: (6320): Setting process priority to: '10' 2022-02-11 15:08:52,244 - wazuh_testing - DEBUG - 2022/02/11 19:08:44 wazuh-db[18406] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: get-labels 1 2022-02-11 15:08:52,244 - wazuh_testing - DEBUG - 2022/02/11 19:08:44 wazuh-db[18406] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-keepalive {"id":1,"connection_status":"pending","sync_status":"synced"} 2022-02-11 15:08:52,244 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:08:52,244 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] run_check.c:229 at start_daemon(): INFO: (6000): Starting daemon... 2022-02-11 15:08:52,244 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] run_check.c:232 at start_daemon(): INFO: (6010): File integrity monitoring scan frequency: 20 seconds 2022-02-11 15:08:52,244 - wazuh_testing - DEBUG - 2022/02/11 19:08:48 wazuh-db[18406] wdb_parser.c:649 at wdb_parse(): DEBUG: Global query: update-agent-data {"id":1,"version":"Wazuh v4.2.5","config_sum":"ab73af41699f13fdd81903b5f23d8d00","merged_sum":"2c45c95db2954d2c7d0ea533f09e81a5","manager_host":"wazuh-manager","node_name":"wazuh-master","agent_ip":"172.17.0.3","labels":"#\"_manager_hostname\":wazuh-manager\n#\"_agent_ip\":172.17.0.3\n#\"_node_name\":wazuh-master\n#\"_wazuh_version\":Wazuh v4.2.5","connection_status":"active","sync_status":"synced","os_name":"Debian GNU/Linux","os_version":"10","os_major":"10","os_codename":"buster","os_platform":"debian","os_uname":"Linux |wazuh-agent1 |5.10.0-1051-oem |#53-Ubuntu SMP Thu Oct 28 08:11:53 UTC 2021 |x86_64","os_arch":"x86_64"} 2022-02-11 15:08:52,244 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 15:08:52,244 - wazuh_testing - DEBUG - 2022/02/11 19:08:48 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update start_scan 1644602925 2022-02-11 15:08:52,244 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644602905}} 2022-02-11 15:08:52,244 - wazuh_testing - DEBUG - 2022/02/11 19:08:48 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: syscheck scan_info_update end_scan 1644602925 2022-02-11 15:08:52,244 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 15:08:52,245 - wazuh_testing - DEBUG - 2022/02/11 19:08:48 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_global {"id":1644602925,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"f812f739216402ad732850016f51b80184e1c3b5"} 2022-02-11 15:08:52,245 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] fs_op.c:129 at HasFilesystem(): DEBUG: statfs(/etc/modules-load.d/modules.conf): No such file or directory 2022-02-11 15:08:52,245 - wazuh_testing - DEBUG - 2022/02/11 19:08:48 wazuh-db[18406] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 1.276 ms. 2022-02-11 15:08:52,245 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] create_db.c:1493 at fim_check_ignore(): DEBUG: (6204): Ignoring 'file' '/etc/hosts.deny' due to '/etc/hosts.deny' 2022-02-11 15:08:52,245 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir2'. '-1' '2':'No such file or directory' 2022-02-11 15:08:52,245 - wazuh_testing - DEBUG - 2022/02/11 19:08:48 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602925,"version":2,"begin":"/bin/bash","end":"/sbin/chcpu","tail":"/sbin/ctrlaltdel","checksum":"57402e3268a27191e04bfc132831045ee0296f32"} 2022-02-11 15:08:52,245 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] run_realtime.c:79 at realtime_adddir(): DEBUG: (6272): Unable to add inotify watch to real time monitoring: '/testdir3'. '-1' '2':'No such file or directory' 2022-02-11 15:08:52,245 - wazuh_testing - DEBUG - 2022/02/11 19:08:48 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602925,"version":2,"begin":"/sbin/ctrlaltdel","end":"/usr/sbin/zic","checksum":"81ecad988859141973e1ab19a521a39864158960"} 2022-02-11 15:08:52,245 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 15:08:52,245 - wazuh_testing - DEBUG - 2022/02/11 19:08:48 wazuh-db[18406] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.243 ms. 2022-02-11 15:08:52,245 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 15:08:52,245 - wazuh_testing - DEBUG - 2022/02/11 19:08:48 wazuh-db[18406] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.641 ms. 2022-02-11 15:08:52,246 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644602905}} 2022-02-11 15:08:52,246 - wazuh_testing - DEBUG - 2022/02/11 19:08:48 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602925,"version":2,"begin":"/sbin/ctrlaltdel","end":"/usr/bin/pdb","tail":"/usr/bin/pdb2","checksum":"80a42a0ab0451f4cf56bfa55fc49230292bd6d09"} 2022-02-11 15:08:52,246 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.341 sec (0.339 clock sec) 2022-02-11 15:08:52,246 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 1620, path count: 1626 2022-02-11 15:08:52,246 - wazuh_testing - DEBUG - 2022/02/11 19:08:48 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602925,"version":2,"begin":"/usr/bin/pdb2","end":"/usr/sbin/zic","checksum":"f13d51f7876684d6bc17db143ee1529b892c54d2"} 2022-02-11 15:08:52,246 - wazuh_testing - DEBUG - 2022/02/11 19:08:48 wazuh-db[18406] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.364 ms. 2022-02-11 15:08:52,246 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:08:52,246 - wazuh_testing - DEBUG - 2022/02/11 19:08:48 wazuh-db[18406] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.282 ms. 2022-02-11 15:08:52,246 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:08:52,246 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:08:52,247 - wazuh_testing - DEBUG - 2022/02/11 19:08:48 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602925,"version":2,"begin":"/sbin/ctrlaltdel","end":"/usr/bin/dpkg-divert","tail":"/usr/bin/dpkg-genbuildinfo","checksum":"e52fccff97771ce2898026d8c43d54ed93bca388"} 2022-02-11 15:08:52,247 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. 2022-02-11 15:08:52,247 - wazuh_testing - DEBUG - 2022/02/11 19:08:48 wazuh-db[18406] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.059 ms. 2022-02-11 15:08:52,247 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] run_check.c:387 at fim_run_realtime(): DEBUG: (6345): Folders monitored with real-time engine: 0 2022-02-11 15:08:52,247 - wazuh_testing - DEBUG - 2022/02/11 19:08:48 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602925,"version":2,"begin":"/usr/bin/dpkg-genbuildinfo","end":"/usr/bin/pdb","checksum":"fcd12ca69011f5033c3706ba868e7f2983050598"} 2022-02-11 15:08:52,247 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] run_check.c:543 at log_realtime_status(): INFO: (6012): Real-time file integrity monitoring started. 2022-02-11 15:08:52,247 - wazuh_testing - DEBUG - 2022/02/11 19:08:48 wazuh-db[18406] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.064 ms. 2022-02-11 15:08:52,247 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] run_check.c:568 at symlink_checker_thread(): DEBUG: (6033): Starting symbolic link updater. Interval '600'. 2022-02-11 15:08:52,247 - wazuh_testing - DEBUG - 2022/02/11 19:08:25 wazuh-syscheckd[24943] run_check.c:82 at fim_send_sync_msg(): DEBUG: (6317): Sending integrity control message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1644602905,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"c7d4e863493255e1f6dd0a90c6f1bba963e76a4b"}} 2022-02-11 15:08:52,247 - wazuh_testing - DEBUG - 2022/02/11 19:08:48 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602925,"version":2,"begin":"/sbin/ctrlaltdel","end":"/usr/bin/apt-extracttemplates","tail":"/usr/bin/apt-ftparchive","checksum":"92cc39200dab2354529d328a2be95e5921adae93"} 2022-02-11 15:08:52,248 - wazuh_testing - DEBUG - 2022/02/11 19:08:48 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602925,"version":2,"begin":"/usr/bin/apt-ftparchive","end":"/usr/bin/dpkg-divert","checksum":"ab79628f5b16446ec1a1f2daeaf1afd2511680e1"} 2022-02-11 15:08:52,248 - wazuh_testing - DEBUG - 2022/02/11 19:08:48 wazuh-db[18406] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.137 ms. 2022-02-11 15:08:52,248 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-agent1 and message: .*Sending integrity control message: (.+)$ 2022-02-11 15:08:52,248 - wazuh_testing - DEBUG - 2022/02/11 19:08:48 wazuh-db[18406] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.146 ms. 2022-02-11 15:08:52,248 - wazuh_testing - DEBUG - 2022/02/11 19:08:48 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602925,"version":2,"begin":"/sbin/ctrlaltdel","end":"/sbin/mkhomedir_helper","tail":"/sbin/mkswap","checksum":"7a7df0bd9bb5154b28eb072bebe1af0b79c59afb"} 2022-02-11 15:08:52,248 - wazuh_testing - DEBUG - 2022/02/11 19:08:48 wazuh-db[18406] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.086 ms. 2022-02-11 15:08:52,249 - wazuh_testing - DEBUG - 2022/02/11 19:08:49 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602925,"version":2,"begin":"/sbin/mkswap","end":"/usr/bin/apt-extracttemplates","checksum":"789b85401ff44d1e17ff45b8cbceb2568127d4c5"} 2022-02-11 15:08:52,249 - wazuh_testing - DEBUG - 2022/02/11 19:08:49 wazuh-db[18406] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.099 ms. 2022-02-11 15:08:52,249 - wazuh_testing - DEBUG - 2022/02/11 19:08:49 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602925,"version":2,"begin":"/sbin/mkswap","end":"/sbin/start-stop-daemon","tail":"/sbin/sulogin","checksum":"b356159685213d77a501787c4ba65eff3cf7fba1"} 2022-02-11 15:08:52,249 - wazuh_testing - DEBUG - 2022/02/11 19:08:49 wazuh-db[18406] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.062 ms. 2022-02-11 15:08:52,250 - wazuh_testing - DEBUG - 2022/02/11 19:08:49 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602925,"version":2,"begin":"/sbin/sulogin","end":"/usr/bin/apt-extracttemplates","checksum":"fd1df3c927498886385531f01ec392a2734e1e1a"} 2022-02-11 15:08:52,250 - wazuh_testing - DEBUG - 2022/02/11 19:08:49 wazuh-db[18406] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.074 ms. 2022-02-11 15:08:52,250 - wazuh_testing - DEBUG - 2022/02/11 19:08:49 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602925,"version":2,"begin":"/sbin/sulogin","end":"/sbin/wipefs","tail":"/sbin/zramctl","checksum":"086fb81bf040732edfe2a920d67de456c77c8c3d"} 2022-02-11 15:08:52,250 - wazuh_testing - DEBUG - 2022/02/11 19:08:49 wazuh-db[18406] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.054 ms. 2022-02-11 15:08:52,250 - wazuh_testing - DEBUG - 2022/02/11 19:08:49 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602925,"version":2,"begin":"/sbin/zramctl","end":"/usr/bin/apt-extracttemplates","checksum":"a221e825e1dec11fda1a6c48f09571f135defaec"} 2022-02-11 15:08:52,251 - wazuh_testing - DEBUG - 2022/02/11 19:08:49 wazuh-db[18406] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.077 ms. 2022-02-11 15:08:52,251 - wazuh_testing - DEBUG - 2022/02/11 19:08:49 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602925,"version":2,"begin":"/sbin/zramctl","end":"/usr/bin/aclocal-1.16","tail":"/usr/bin/addpart","checksum":"8165c1bf9ac3f5b0b7be338983832e921d56b373"} 2022-02-11 15:08:52,251 - wazuh_testing - DEBUG - 2022/02/11 19:08:49 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602925,"version":2,"begin":"/usr/bin/addpart","end":"/usr/bin/apt-extracttemplates","checksum":"7d1a3bbe28f2c9e567f8311757d46ea5365d7112"} 2022-02-11 15:08:52,251 - wazuh_testing - DEBUG - 2022/02/11 19:08:49 wazuh-db[18406] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.056 ms. 2022-02-11 15:08:52,252 - wazuh_testing - DEBUG - 2022/02/11 19:08:49 wazuh-db[18406] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.070 ms. 2022-02-11 15:08:52,252 - wazuh_testing - DEBUG - 2022/02/11 19:08:49 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602925,"version":2,"begin":"/sbin/zramctl","end":"/usr/bin/2to3-2.7","tail":"/usr/bin/[","checksum":"7d9914f9ff84dac403f643ddb0544ab834c05b6c"} 2022-02-11 15:08:52,252 - wazuh_testing - DEBUG - 2022/02/11 19:08:49 wazuh-db[18406] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.046 ms. 2022-02-11 15:08:52,252 - wazuh_testing - DEBUG - 2022/02/11 19:08:49 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602925,"version":2,"begin":"/usr/bin/[","end":"/usr/bin/aclocal-1.16","checksum":"0f1d35a6565c33bf9697c50fd2d7d2a4ebccbc45"} 2022-02-11 15:08:52,253 - wazuh_testing - DEBUG - 2022/02/11 19:08:49 wazuh-db[18406] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.052 ms. 2022-02-11 15:08:52,253 - wazuh_testing - DEBUG - 2022/02/11 19:08:49 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602925,"version":2,"begin":"/sbin/zramctl","end":"/sbin/zramctl","tail":"/testdir1/testdir1.txt","checksum":"58b2b87ce2162d80a895c740e0ed2124836230b7"} 2022-02-11 15:08:52,253 - wazuh_testing - DEBUG - 2022/02/11 19:08:49 wazuh-db[18406] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.041 ms. 2022-02-11 15:08:52,253 - wazuh_testing - DEBUG - 2022/02/11 19:08:50 wazuh-db[18406] wdb.c:918 at wdb_commit_old(): DEBUG: Agent 'global' database commited. Time: 12.014 ms. 2022-02-11 15:08:52,254 - wazuh_testing - DEBUG - 2022/02/11 19:08:50 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602925,"version":2,"begin":"/testdir1/testdir1.txt","end":"/usr/bin/2to3-2.7","checksum":"5638e8b2e6a31f94836128a7a67c93bba0ebeea6"} 2022-02-11 15:08:52,254 - wazuh_testing - DEBUG - 2022/02/11 19:08:50 wazuh-db[18406] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.038 ms. 2022-02-11 15:08:52,254 - wazuh_testing - DEBUG - 2022/02/11 19:08:50 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_left {"id":1644602925,"version":2,"begin":"/testdir1/testdir1.txt","end":"/testdir1/testdir1.txt","tail":"/usr/bin/2to3-2.7","checksum":"6faac2cab2ff7c3295d470b0c6d457dc581a5227"} 2022-02-11 15:08:52,254 - wazuh_testing - DEBUG - 2022/02/11 19:08:50 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file integrity_check_right {"id":1644602925,"version":2,"begin":"/usr/bin/2to3-2.7","end":"/usr/bin/2to3-2.7","checksum":"f621f8dd560e58c5f017dfd42d98bb3a72466d1d"} 2022-02-11 15:08:52,255 - wazuh_testing - DEBUG - 2022/02/11 19:08:50 wazuh-db[18406] wdb_integrity.c:307 at wdbi_query_checksum(): DEBUG: Agent '001' fim_file range checksum: Time: 0.034 ms. 2022-02-11 15:08:52,255 - wazuh_testing - DEBUG - 2022/02/11 19:08:50 wazuh-db[18406] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 001 query: fim_file save2 {"path":"/testdir1/testdir1.txt","timestamp":1644602925,"version":2,"attributes":{"type":"file","size":0,"perm":"rw-r--r--","uid":"0","gid":"0","user_name":"root","group_name":"root","inode":17179747,"mtime":1644602921,"hash_md5":"d41d8cd98f00b204e9800998ecf8427e","hash_sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","hash_sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","checksum":"aae9c4268dcd0c81147f0fab24c0aeeec69f99fb"}} 2022-02-11 15:08:52,255 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-manager and message: .*Agent 001 query: (.+) save2 2022-02-11 15:08:53,228 - wazuh_testing - DEBUG - Cleaning temporal files... 2022-02-11 15:08:53,228 - wazuh_testing - DEBUG - Checking results... 2022-02-11 15:08:53,230 - wazuh_testing - DEBUG - Received from wazuh-agent1 the expected message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1644602905,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"c7d4e863493255e1f6dd0a90c6f1bba963e76a4b"}} 2022-02-11 15:08:53,231 - wazuh_testing - DEBUG - Received from wazuh-manager the expected message: fim_file 2022-02-11 15:09:17,918 - wazuh_testing - DEBUG - Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-11 15:09:17,919 - wazuh_testing - DEBUG - Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log 2022-02-11 15:09:17,919 - wazuh_testing - DEBUG - Starting file composer for wazuh-manager and path: /var/ossec/logs/ossec.log. Composite file in /home/camila/Escritorio/repo/wazuh-qa/tests/system/test_fim/test_synchronization/tmp/wazuh-manager_ossec.log.tmp 2022-02-11 15:09:17,920 - wazuh_testing - DEBUG - Starting QueueMonitor for wazuh-manager and message: .*Initializing FIM Integrity Synchronization check. (.+)$ 2022-02-11 15:09:19,422 - wazuh_testing - DEBUG - 2022/02/11 19:08:58 wazuh-modulesd:syscollector: INFO: Stop received for Syscollector. 2022-02-11 15:09:19,422 - wazuh_testing - DEBUG - 2022/02/11 19:08:58 wazuh-db[18406] main.c:352 at run_worker(): DEBUG: Client 11 disconnected. 2022-02-11 15:09:19,423 - wazuh_testing - DEBUG - 2022/02/11 19:08:58 wazuh-monitord: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:09:19,423 - wazuh_testing - DEBUG - 2022/02/11 19:08:58 wazuh-logcollector: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:09:19,423 - wazuh_testing - DEBUG - 2022/02/11 19:08:58 wazuh-remoted: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:09:19,423 - wazuh_testing - DEBUG - 2022/02/11 19:08:58 wazuh-db[18406] main.c:352 at run_worker(): DEBUG: Client 34 disconnected. 2022-02-11 15:09:19,423 - wazuh_testing - DEBUG - 2022/02/11 19:08:58 wazuh-db[18406] main.c:352 at run_worker(): DEBUG: Client 24 disconnected. 2022-02-11 15:09:19,423 - wazuh_testing - DEBUG - 2022/02/11 19:08:58 wazuh-db[18406] main.c:352 at run_worker(): DEBUG: Client 18 disconnected. 2022-02-11 15:09:19,424 - wazuh_testing - DEBUG - 2022/02/11 19:08:58 wazuh-db[18406] main.c:352 at run_worker(): DEBUG: Client 16 disconnected. 2022-02-11 15:09:19,424 - wazuh_testing - DEBUG - 2022/02/11 19:08:58 wazuh-syscheckd[18540] sig_op.c:49 at HandleSIG(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:09:19,424 - wazuh_testing - DEBUG - 2022/02/11 19:08:58 wazuh-analysisd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:09:19,424 - wazuh_testing - DEBUG - 2022/02/11 19:08:58 wazuh-db[18406] main.c:352 at run_worker(): DEBUG: Client 36 disconnected. 2022-02-11 15:09:19,424 - wazuh_testing - DEBUG - 2022/02/11 19:08:58 wazuh-db[18406] main.c:352 at run_worker(): DEBUG: Client 33 disconnected. 2022-02-11 15:09:19,425 - wazuh_testing - DEBUG - 2022/02/11 19:08:58 wazuh-db[18406] main.c:352 at run_worker(): DEBUG: Client 32 disconnected. 2022-02-11 15:09:19,426 - wazuh_testing - DEBUG - 2022/02/11 19:08:58 wazuh-db[18406] main.c:352 at run_worker(): DEBUG: Client 35 disconnected. 2022-02-11 15:09:19,426 - wazuh_testing - DEBUG - 2022/02/11 19:08:58 wazuh-db[18406] main.c:352 at run_worker(): DEBUG: Client 31 disconnected. 2022-02-11 15:09:19,426 - wazuh_testing - DEBUG - 2022/02/11 19:08:58 wazuh-db[18406] main.c:352 at run_worker(): DEBUG: Client 29 disconnected. 2022-02-11 15:09:19,426 - wazuh_testing - DEBUG - 2022/02/11 19:08:58 wazuh-db[18406] main.c:352 at run_worker(): DEBUG: Client 28 disconnected. 2022-02-11 15:09:19,427 - wazuh_testing - DEBUG - 2022/02/11 19:08:58 wazuh-db[18406] main.c:352 at run_worker(): DEBUG: Client 30 disconnected. 2022-02-11 15:09:19,427 - wazuh_testing - DEBUG - 2022/02/11 19:08:58 wazuh-db[18406] main.c:352 at run_worker(): DEBUG: Client 25 disconnected. 2022-02-11 15:09:19,427 - wazuh_testing - DEBUG - 2022/02/11 19:08:58 wazuh-db[18406] main.c:352 at run_worker(): DEBUG: Client 27 disconnected. 2022-02-11 15:09:19,427 - wazuh_testing - DEBUG - 2022/02/11 19:08:58 wazuh-db[18406] main.c:352 at run_worker(): DEBUG: Client 20 disconnected. 2022-02-11 15:09:19,427 - wazuh_testing - DEBUG - 2022/02/11 19:08:58 wazuh-db[18406] main.c:352 at run_worker(): DEBUG: Client 22 disconnected. 2022-02-11 15:09:19,428 - wazuh_testing - DEBUG - 2022/02/11 19:08:58 wazuh-db[18406] main.c:352 at run_worker(): DEBUG: Client 13 disconnected. 2022-02-11 15:09:19,428 - wazuh_testing - DEBUG - 2022/02/11 19:08:58 wazuh-db[18406] main.c:352 at run_worker(): DEBUG: Client 6 disconnected. 2022-02-11 15:09:19,428 - wazuh_testing - DEBUG - 2022/02/11 19:08:58 wazuh-db[18406] main.c:352 at run_worker(): DEBUG: Client 19 disconnected. 2022-02-11 15:09:19,428 - wazuh_testing - DEBUG - 2022/02/11 19:08:58 wazuh-db[18406] main.c:352 at run_worker(): DEBUG: Client 23 disconnected. 2022-02-11 15:09:19,428 - wazuh_testing - DEBUG - 2022/02/11 19:08:58 wazuh-db[18406] main.c:352 at run_worker(): DEBUG: Client 21 disconnected. 2022-02-11 15:09:19,429 - wazuh_testing - DEBUG - 2022/02/11 19:08:58 wazuh-db[18406] main.c:352 at run_worker(): DEBUG: Client 12 disconnected. 2022-02-11 15:09:19,429 - wazuh_testing - DEBUG - 2022/02/11 19:08:58 wazuh-db[18406] main.c:352 at run_worker(): DEBUG: Client 10 disconnected. 2022-02-11 15:09:19,429 - wazuh_testing - DEBUG - 2022/02/11 19:08:58 wazuh-db[18406] main.c:352 at run_worker(): DEBUG: Client 26 disconnected. 2022-02-11 15:09:19,429 - wazuh_testing - DEBUG - 2022/02/11 19:08:58 wazuh-execd: INFO: (1314): Shutdown received. Deleting responses. 2022-02-11 15:09:19,430 - wazuh_testing - DEBUG - 2022/02/11 19:08:58 wazuh-execd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:09:19,430 - wazuh_testing - DEBUG - 2022/02/11 19:08:59 wazuh-db[18406] main.c:468 at handler(): INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:09:19,430 - wazuh_testing - DEBUG - 2022/02/11 19:08:59 wazuh-db[18406] wdb.c:872 at wdb_close_all(): DEBUG: Closing all databases... 2022-02-11 15:09:19,430 - wazuh_testing - DEBUG - 2022/02/11 19:08:59 wazuh-db[18406] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent 001 2022-02-11 15:09:19,431 - wazuh_testing - DEBUG - 2022/02/11 19:08:59 wazuh-db[18406] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent 000 2022-02-11 15:09:19,431 - wazuh_testing - DEBUG - 2022/02/11 19:08:59 wazuh-db[18406] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent mitre 2022-02-11 15:09:19,431 - wazuh_testing - DEBUG - 2022/02/11 19:08:59 wazuh-db[18406] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent global 2022-02-11 15:09:19,432 - wazuh_testing - DEBUG - 2022/02/11 19:08:59 wazuh-db[18406] wdb.c:876 at wdb_close_all(): DEBUG: Closing database for agent tasks 2022-02-11 15:09:19,432 - wazuh_testing - DEBUG - 2022/02/11 19:08:59 wazuh-db[18406] main.c:231 at main(): DEBUG: Template file removed again: queue/db/.template.db 2022-02-11 15:09:19,432 - wazuh_testing - DEBUG - 2022/02/11 19:08:59 wazuh-authd: INFO: (1225): SIGNAL [(15)-(Terminated)] Received. Exit Cleaning... 2022-02-11 15:09:19,432 - wazuh_testing - DEBUG - 2022/02/11 19:09:00 wazuh-authd: INFO: Exiting... 2022-02-11 15:09:19,433 - wazuh_testing - DEBUG - 2022/02/11 19:09:04 wazuh-db[19330] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 15:09:19,433 - wazuh_testing - DEBUG - 2022/02/11 19:09:04 wazuh-db[19330] main.c:101 at main(): DEBUG: Wazuh home directory: /var/ossec 2022-02-11 15:09:19,433 - wazuh_testing - DEBUG - 2022/02/11 19:09:04 wazuh-syscheckd[19334] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 15:09:19,433 - wazuh_testing - DEBUG - 2022/02/11 19:09:04 wazuh-syscheckd[19334] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 15:09:19,434 - wazuh_testing - DEBUG - 2022/02/11 19:09:04 wazuh-syscheckd[19334] syscheck-config.c:122 at organize_syscheck_dirs(): DEBUG: No directory entries to organize in syscheck configuration. 2022-02-11 15:09:19,434 - wazuh_testing - DEBUG - 2022/02/11 19:09:07 wazuh-csyslogd: INFO: Remote syslog server not configured. Clean exit. 2022-02-11 15:09:19,435 - wazuh_testing - DEBUG - 2022/02/11 19:09:07 wazuh-dbd: INFO: Database not configured. Clean exit. 2022-02-11 15:09:19,435 - wazuh_testing - DEBUG - 2022/02/11 19:09:07 wazuh-integratord: INFO: Remote integrations not configured. Clean exit. 2022-02-11 15:09:19,435 - wazuh_testing - DEBUG - 2022/02/11 19:09:07 wazuh-agentlessd: INFO: Not configured. Exiting. 2022-02-11 15:09:19,436 - wazuh_testing - DEBUG - 2022/02/11 19:09:07 wazuh-authd: INFO: Started (pid: 19400). 2022-02-11 15:09:19,436 - wazuh_testing - DEBUG - 2022/02/11 19:09:07 wazuh-authd: INFO: Accepting connections on port 1515. No password required. 2022-02-11 15:09:19,436 - wazuh_testing - DEBUG - 2022/02/11 19:09:07 wazuh-authd: INFO: Setting network timeout to 1.000000 sec. 2022-02-11 15:09:19,437 - wazuh_testing - DEBUG - 2022/02/11 19:09:08 wazuh-db[19414] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 15:09:19,437 - wazuh_testing - DEBUG - 2022/02/11 19:09:08 wazuh-db[19414] main.c:101 at main(): DEBUG: Wazuh home directory: /var/ossec 2022-02-11 15:09:19,438 - wazuh_testing - DEBUG - 2022/02/11 19:09:08 wazuh-db[19414] main.c:122 at main(): DEBUG: Template file removed: /var/ossec/queue/db/.template.db 2022-02-11 15:09:19,438 - wazuh_testing - DEBUG - 2022/02/11 19:09:08 wazuh-db[19414] main.c:178 at main(): INFO: Started (pid: 19416). 2022-02-11 15:09:19,438 - wazuh_testing - DEBUG - 2022/02/11 19:09:09 wazuh-execd: INFO: (1350): Active response disabled. 2022-02-11 15:09:19,438 - wazuh_testing - DEBUG - 2022/02/11 19:09:09 wazuh-execd: INFO: Started (pid: 19439). 2022-02-11 15:09:19,439 - wazuh_testing - DEBUG - 2022/02/11 19:09:10 wazuh-analysisd: INFO: Total rules enabled: '3882' 2022-02-11 15:09:19,439 - wazuh_testing - DEBUG - 2022/02/11 19:09:10 wazuh-analysisd: INFO: Started (pid: 19453). 2022-02-11 15:09:19,439 - wazuh_testing - DEBUG - 2022/02/11 19:09:10 wazuh-db[19414] main.c:290 at run_dealer(): DEBUG: New client connected (6). 2022-02-11 15:09:19,440 - wazuh_testing - DEBUG - 2022/02/11 19:09:10 wazuh-analysisd: INFO: (7200): Logtest started 2022-02-11 15:09:19,440 - wazuh_testing - DEBUG - 2022/02/11 19:09:11 wazuh-syscheckd[19548] debug_op.c:70 at _log(): DEBUG: Logging module auto-initialized 2022-02-11 15:09:19,440 - wazuh_testing - DEBUG - 2022/02/11 19:09:11 wazuh-syscheckd[19548] config.c:87 at Read_Syscheck_Config(): DEBUG: (6287): Reading configuration file: 'etc/ossec.conf' 2022-02-11 15:09:19,440 - wazuh_testing - DEBUG - 2022/02/11 19:09:11 wazuh-syscheckd[19548] syscheck-config.c:122 at organize_syscheck_dirs(): DEBUG: No directory entries to organize in syscheck configuration. 2022-02-11 15:09:19,440 - wazuh_testing - DEBUG - 2022/02/11 19:09:11 wazuh-syscheckd[19548] main.c:118 at main(): INFO: (6678): No directory provided for syscheck to monitor. 2022-02-11 15:09:19,441 - wazuh_testing - DEBUG - 2022/02/11 19:09:11 wazuh-syscheckd[19548] main.c:136 at main(): INFO: (6001): File integrity monitoring disabled. 2022-02-11 15:09:19,441 - wazuh_testing - DEBUG - 2022/02/11 19:09:11 rootcheck[19548] rootcheck.c:202 at rootcheck_init(): INFO: Rootcheck disabled. 2022-02-11 15:09:19,441 - wazuh_testing - DEBUG - 2022/02/11 19:09:11 wazuh-syscheckd[19548] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:09:19,441 - wazuh_testing - DEBUG - 2022/02/11 19:09:11 wazuh-syscheckd[19548] syscom.c:123 at syscom_main(): DEBUG: (6284): Local requests thread ready. 2022-02-11 15:09:19,441 - wazuh_testing - DEBUG - 2022/02/11 19:09:11 wazuh-syscheckd[19548] mq_op.c:47 at StartMQ(): DEBUG: Connected succesfully to 'queue/sockets/queue' after 0 attempts 2022-02-11 15:09:19,441 - wazuh_testing - DEBUG - 2022/02/11 19:09:11 wazuh-syscheckd[19548] mq_op.c:48 at StartMQ(): DEBUG: (unix_domain) Maximum send buffer set to: '212992'. 2022-02-11 15:09:19,442 - wazuh_testing - DEBUG - 2022/02/11 19:09:11 wazuh-syscheckd[19548] main.c:185 at main(): INFO: Started (pid: 19550). 2022-02-11 15:09:19,442 - wazuh_testing - DEBUG - 2022/02/11 19:09:11 wazuh-syscheckd[19548] main.c:215 at main(): DEBUG: (6357): Maximum disk quota size limit configured to '1048576 KB'. 2022-02-11 15:09:19,442 - wazuh_testing - DEBUG - 2022/02/11 19:09:11 wazuh-syscheckd[19548] run_check.c:194 at start_daemon(): DEBUG: (6320): Setting process priority to: '10' 2022-02-11 15:09:19,442 - wazuh_testing - DEBUG - 2022/02/11 19:09:11 wazuh-syscheckd[19548] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:09:19,442 - wazuh_testing - DEBUG - 2022/02/11 19:09:11 wazuh-syscheckd[19548] run_check.c:229 at start_daemon(): INFO: (6000): Starting daemon... 2022-02-11 15:09:19,442 - wazuh_testing - DEBUG - 2022/02/11 19:09:11 wazuh-syscheckd[19548] run_check.c:232 at start_daemon(): INFO: (6010): File integrity monitoring scan frequency: 43200 seconds 2022-02-11 15:09:19,443 - wazuh_testing - DEBUG - 2022/02/11 19:09:11 wazuh-syscheckd[19548] create_db.c:128 at fim_scan(): INFO: (6008): File integrity monitoring scan started. 2022-02-11 15:09:19,443 - wazuh_testing - DEBUG - 2022/02/11 19:09:11 wazuh-syscheckd[19548] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_start","data":{"timestamp":1644602951}} 2022-02-11 15:09:19,443 - wazuh_testing - DEBUG - 2022/02/11 19:09:11 wazuh-syscheckd[19548] create_db.c:135 at fim_scan(): DEBUG: (6348): Size of 'queue/diff' folder: 0.00000 KB. 2022-02-11 15:09:19,443 - wazuh_testing - DEBUG - 2022/02/11 19:09:11 wazuh-db[19414] main.c:290 at run_dealer(): DEBUG: New client connected (10). 2022-02-11 15:09:19,443 - wazuh_testing - DEBUG - 2022/02/11 19:09:11 wazuh-db[19414] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 000 query: syscheck scan_info_update start_scan 1644602951 2022-02-11 15:09:19,443 - wazuh_testing - DEBUG - 2022/02/11 19:09:11 wazuh-syscheckd[19548] create_db.c:202 at fim_scan(): DEBUG: (6342): Maximum number of entries to be monitored: '100000' 2022-02-11 15:09:19,443 - wazuh_testing - DEBUG - 2022/02/11 19:09:11 wazuh-syscheckd[19548] create_db.c:224 at fim_scan(): INFO: (6009): File integrity monitoring scan ended. 2022-02-11 15:09:19,444 - wazuh_testing - DEBUG - 2022/02/11 19:09:11 wazuh-syscheckd[19548] run_check.c:102 at send_syscheck_msg(): DEBUG: (6321): Sending FIM event: {"type":"scan_end","data":{"timestamp":1644602951}} 2022-02-11 15:09:19,444 - wazuh_testing - DEBUG - 2022/02/11 19:09:11 wazuh-syscheckd[19548] create_db.c:1587 at fim_print_info(): DEBUG: (6330): The scan has been running during: 0.000 sec (0.000 clock sec) 2022-02-11 15:09:19,444 - wazuh_testing - DEBUG - 2022/02/11 19:09:11 wazuh-syscheckd[19548] create_db.c:1599 at fim_print_info(): DEBUG: (6336): Fim inode entries: 0, path count: 0 2022-02-11 15:09:19,444 - wazuh_testing - DEBUG - 2022/02/11 19:09:11 wazuh-db[19414] main.c:290 at run_dealer(): DEBUG: New client connected (12). 2022-02-11 15:09:19,444 - wazuh_testing - DEBUG - 2022/02/11 19:09:11 wazuh-syscheckd[19548] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:09:19,444 - wazuh_testing - DEBUG - 2022/02/11 19:09:11 wazuh-db[19414] wdb_parser.c:246 at wdb_parse(): DEBUG: Agent 000 query: syscheck scan_info_update end_scan 1644602951 2022-02-11 15:09:19,444 - wazuh_testing - DEBUG - 2022/02/11 19:09:11 wazuh-syscheckd[19548] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:09:19,444 - wazuh_testing - DEBUG - 2022/02/11 19:09:11 wazuh-syscheckd[19548] pthreads_op.c:45 at CreateThreadJoinable(): DEBUG: Thread stack size set to: 8192 KiB 2022-02-11 15:09:19,445 - wazuh_testing - DEBUG - 2022/02/11 19:09:11 wazuh-syscheckd[19548] fim_sync.c:57 at fim_run_integrity(): DEBUG: Initializing FIM Integrity Synchronization check. Sync interval is 300 seconds. 2022-02-11 15:09:19,445 - wazuh_testing - DEBUG - Finishing QueueMonitor for wazuh-manager and message: .*Initializing FIM Integrity Synchronization check. (.+)$ 2022-02-11 15:09:20,425 - wazuh_testing - DEBUG - Cleaning temporal files... 2022-02-11 15:09:20,425 - wazuh_testing - DEBUG - Checking results... 2022-02-11 15:09:20,427 - wazuh_testing - DEBUG - Received from wazuh-manager the expected message: Sync interval is 300 seconds.
-------------------------------Captured log call--------------------------------
DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-agent1 and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:1005 Cleaning temporal files... DEBUG wazuh_testing:monitoring.py:994 Checking results... DEBUG wazuh_testing:monitoring.py:1000 Received from wazuh-agent1 the expected message: {"component":"fim_file","type":"integrity_check_global","data":{"id":1644602905,"version":2,"begin":"/bin/bash","end":"/usr/sbin/zic","checksum":"c7d4e863493255e1f6dd0a90c6f1bba963e76a4b"}} DEBUG wazuh_testing:monitoring.py:1000 Received from wazuh-manager the expected message: fim_file DEBUG wazuh_testing:monitoring.py:899 Add new file composer process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:903 Add new file monitor process for wazuh-manager and path: /var/ossec/logs/ossec.log DEBUG wazuh_testing:monitoring.py:1005 Cleaning temporal files... DEBUG wazuh_testing:monitoring.py:994 Checking results... DEBUG wazuh_testing:monitoring.py:1000 Received from wazuh-manager the expected message: Sync interval is 300 seconds.

Packages	{"pluggy": "0.13.1", "py": "1.10.0", "pytest": "6.2.2"}
Platform	Linux-5.10.0-1051-oem-x86_64-with-glibc2.29
Plugins	{"html": "3.1.1", "metadata": "1.11.0", "testinfra": "5.0.0"}
Python	3.8.10

R3.html

Environment

Summary

Results