From 83f1548a8679d055d7bf8a69f4327a4aafa5dc56 Mon Sep 17 00:00:00 2001 From: Javier Medeot Date: Tue, 20 May 2025 15:44:49 -0300 Subject: [PATCH 1/2] Add OVA troubleshooting section --- .../virtual-machine/virtual-machine.rst | 45 +++++++++++++++---- 1 file changed, 36 insertions(+), 9 deletions(-) diff --git a/source/deployment-options/virtual-machine/virtual-machine.rst b/source/deployment-options/virtual-machine/virtual-machine.rst index 304fddb6e8..2aa744d847 100644 --- a/source/deployment-options/virtual-machine/virtual-machine.rst +++ b/source/deployment-options/virtual-machine/virtual-machine.rst @@ -1,16 +1,13 @@ .. Copyright (C) 2015, Wazuh, Inc. .. meta:: - :description: The pre-built Wazuh Virtual Machine includes all Wazuh components ready-to-use. Test all Wazuh capabilities with our OVA. - -.. _virtual_machine: + :description: The pre-built Wazuh Virtual Machine includes all Wazuh components ready-to-use. Test all Wazuh capabilities with our OVA. Virtual Machine (OVA) ===================== Wazuh provides a pre-built virtual machine image in Open Virtual Appliance (OVA) format. This can be directly imported to VirtualBox or other OVA compatible virtualization systems. Take into account that this VM only runs on 64-bit systems with x86_64/AMD64 architecture. It does not provide high availability and scalability out of the box. However, these can be implemented by using :doc:`distributed deployment `. - Download the `virtual appliance (OVA) `_, which includes Amazon Linux 2023 and the Wazuh central components. - Wazuh manager |WAZUH_CURRENT_OVA| @@ -64,7 +61,7 @@ Import and access the virtual machine #. Start the machine. #. Access the virtual machine using the following user and password. You can use the virtualization platform or access it via SSH. - + .. code-block:: none user: wazuh-user @@ -87,14 +84,12 @@ Shortly after starting the VM, the Wazuh dashboard can be accessed from the web user: admin password: admin - You can find ```` by typing the following command in the VM: .. code-block:: none ip a - Configuration files ------------------- @@ -103,9 +98,9 @@ All components included in this virtual image are configured to work out-of-the- - Wazuh manager: ``/var/ossec/etc/ossec.conf`` - Wazuh indexer: ``/etc/wazuh-indexer/opensearch.yml`` - + - Filebeat-OSS: ``/etc/filebeat/filebeat.yml`` - + - Wazuh dashboard: - ``/etc/wazuh-dashboard/opensearch_dashboards.yml`` @@ -123,6 +118,38 @@ In case of using VirtualBox, once the virtual machine is imported it may run int Once the virtual machine is imported and running, the next step is to :doc:`deploy the Wazuh agents ` on the systems to be monitored. +Troubleshooting +--------------- + +VM fails to start on AMD processors with VMware +^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ + +**Issue**: + +- After importing the Wazuh OVA into VMware Workstation on a host with an AMD processor, the VM fails to start with the error: + + .. code-block:: none + + The CPU has been disabled by the guest operating system. Power off or reset the virtual machine. + +**Workaround**: + +#. Locate and edit the VM’s ``.vmx`` file after importing the OVA. +#. Add the following lines to the end of the file to resolve compatibility issues between the VM and AMD processors. + + .. code-block:: ini + + cpuid.0.eax = "0000:0000:0000:0000:0000:0000:0000:1011" + cpuid.0.ebx = "0111:0101:0110:1110:0110:0101:0100:0111" + cpuid.0.ecx = "0110:1100:0110:0101:0111:0100:0110:1110" + cpuid.0.edx = "0100:1001:0110:0101:0110:1110:0110:1001" + cpuid.1.eax = "0000:0000:0000:0001:0000:0110:0111:0001" + cpuid.1.ebx = "0000:0010:0000:0001:0000:1000:0000:0000" + cpuid.1.ecx = "1000:0010:1001:1000:0010:0010:0000:0011" + cpuid.1.edx = "0000:0111:1000:1011:1111:1011:1111:1111" + featureCompat.enable = "FALSE" + +#. Save the file and power on the VM. Upgrading the VM ---------------- From 6b34defc1f6d065f4e24924593c855fdbbdd1e1c Mon Sep 17 00:00:00 2001 From: Javier Medeot Date: Tue, 20 May 2025 15:51:41 -0300 Subject: [PATCH 2/2] Update documentation changelog --- CHANGELOG.md | 1 + 1 file changed, 1 insertion(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index 01a6e0291a..43b135c357 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -8,6 +8,7 @@ All notable changes to this project will be documented in this file. - Added the ``authentication_pool_size`` option to the Wazuh server API configuration section. ([#8287](https://github.com/wazuh/wazuh-documentation/pull/8287)) - Added clarifications that `` is required in `active-response` blocks in *Use cases* and *Active response* reference sections. ([#8428](https://github.com/wazuh/wazuh-documentation/pull/8428)) - Added new section on creating agent groups. ([#8436](https://github.com/wazuh/wazuh-documentation/pull/8436)) +- **Post-release**: Backported troubleshooting steps to the *Virtual Machine (OVA)* installation guide. ([#8563](https://github.com/wazuh/wazuh-documentation/pull/8563)) ### Changed