Wazuh Indexer error code 429
If you see the following error in your ossec.log on the hydra, it means that there are too many connections attempts to your OpenSearch instance(s) at the same time. The error should resolve itself when the connection requests decrease. The Wazuh manager on the hydra uses this connection to publish vulnerability and system information data to OpenSearch for the XDR webui. If the problem persists it is recommended to contact SIEMonster support to troubleshoot the issue with you. In most cases continued error messages are an indication that the OpenSearch instance is overburdened and needs to be increased in capacity.
indexer-connector: ERROR: HTTP response code said error, status code: 429