PBA+J

Good morning @AnnaTuen! Thank you for this; I have questions naturally as your experience level seems to be above my own. 1. What is the purpose for adding a Wazuh user in Unraid GUI? Why is this required? 2. According to Wazuh's documentation, it is able to run on Ubuntu, so why did you utilize Slackware? Is it because that is Unraid's base? 3. ossec.conf - Can you elaborate on this? What did you change that was specific to your environment? Also, was this on the VM, or within Unraid itsself? 4. What is 'N1'? 5. What did you zip and copy to N1? What is N1? Where is N1? Why? 6. You stated that you created an ossec directory on the share? What share? Did you create a new share within unraid? I'm confused. 7. What did your user.script look like? ~essentially, I'm asking for a little more detail. Also, I noticed that within the Unraid GUI, there is the option for syslog to export to 'ip'. Couldn't this be ingested by Wazuh? PFsense has the ability for syslog exporting as well. Do you think it would be easier to simply install an Ubuntu instance, setup Wazuh and simply export Unraid syslog into the Ubuntu instance? Thanks, -Ace

Have you tried stopping and restarting the docker service? You should be able to use the template function to reinstall with previous mappings…or edit them all as a last resort.

Version: 6.12.4 Title references it all. Mover does not move on schedule or when immediately invoked. I show files in my data share that are located on SSD/NVME which should be moved to the Array daily at 0340, or when the mover is invoked. At @Squid's guidance, I have removed the mover tuning plugin and verified that it works. I am posting here under plugin system. Diag attached. loki-diagnostics-20231126-1054.zip

Thanks @Squid

Version: 6.12.4 Title references it all. Mover does not move on schedule or when immediately invoked. I show files in my data share that are located on SSD/NVME which should be moved to the Array daily at 0340, or when the mover is invoked. Diag attached. loki-diagnostics-20231126-1032.zip

Seeing as how I have 87 files in que and can only unpack 1-2 before stalling, it's what's working now

Confirmed, this works.

If I wanted to restart every 3 minutes, I can use CA User Scripts to accomplish this, correct? I labeled it NZB Restart I used the following in the scripts: #!/bin/bash docker restart binhex-nzbget I run in the background on Custom and set this input for custom: */3 * * * * That should restart NZB every 3 minutes, right?

I saw that it was asked whether there were unpack issues...I do have that exact issue. After about 2-4 unpacks, it hangs and I have to stop and start again, or restart. It's been like that since install.