Fede Galland

I'm facing the same problem. Did you find any solutions or workarounds? Thanks!

Setting the `OPENSEARCH_TMPDIR` environment variable from the `wazuh-indexer.service` unit to something other than `/tmp` seems to solve the issue. * `/tmp` is mounted with `noexec`: ```shell root@ubuntu2204:~/tests# mount | grep...

Changing the `OPENSEARCH_TMPDIR` variable allows the service to start, but `/tmp` seems to keep being used even if mounted with the `noexec` flag: ```shell root@ubuntu2204:~# systemctl cat wazuh-indexer --no-pager #...

Another suggestion: If you are using ssl bump to transparently proxy HTTPS with squid, your `category adblock` block, should include the following: option block-bumped-connect on

@dgamboa1605 here are my observations based on your test results: ### `read` - The `read` metrics for `4.12.0` appear to stay at zero throughout, which likely indicates that the Indexer...

@dgamboa1605 > I would like to address the File Descriptor (FD) metrics. The increase observed in version 4.13 was significantly higher compared to previous versions. While we understand that higher...