If you followed the Wazuh docs about multi-node cluster with Open Distro you have to change the admin password at some point:
After changing the password be sure to also adjust it on every node in /etc/filebeat/filebeat.yml as everything seems to work but no new events are added!