Topics

1

Zenarmor (Sensei) / Zenarmor 1.14: External Elastic database - no data available in reports

« on: August 07, 2023, 11:03:16 am »

After updating to 1.14, there is no report available/no data available in the dashboard or in the reporting, live sessions, activity explorer, etc.
Reboots performed.
Accessing the firewall via the ip address, with FQDN all fields are "network error".

Running licensed Home version, OPNSense 23.7

2

Zenarmor (Sensei) / Sensei - External elastic search - socket/open file descriptors exhaustion

« on: August 08, 2021, 03:51:41 pm »

Hi everybody!

I have the following issue with Sensei 1.9.3 on an external elastic search database. The number of opened sockets from OPNsense to ES is increasing around 1 TCP socket per second, and the sockets do not seem to be closing on either side (they show connected on both OPNSense and ES) at the same rate as they are being created. This leads to open file descriptors exhaustion on ES side, after a period of time.

I opened a ticket with SunnyValley as well, but wondering if there is some mitigation on the ES side. I tried setting a lower TCP keepalive interval, but this is usually good for connections passing through a firewall in order to avoid state table timeouts, but I do not think it is the case here.

thanks a lot,
Serban

3

Zenarmor (Sensei) / SOLVED - External eslasticsearch - no status page, no device count

« on: July 30, 2021, 11:38:39 am »

Hi to the community !!

Started playing with Sensei, deployed 1.9.3 on 21.7 version with an external ES database. Installation runs just fine, indices are created and populated, etc....I am running this in passive mode.
Reports and the dahsboard looks fine, although not entirely populated. Device count is at 0, which is strange as it records connections and does reporting on types of traffic.
More problematic is that the status page is not loading, and on the configuration/uninstall the three options are all grayed out.

An install on the same FW with local ES or local Mongo runs just fine.

Anyone encountered this and has a solution? I also opened a ticket with SunnyValley.

Thanks a lot !!
Serban