wazuh extension error: connect to the host via ssh: ssh: connect to host 192.168.56.51 port 5985: Connection refused

[cyberranger001]

System Info:
I am on an Ubuntu 24.04 host (Desktop PC)
Using VMware Workstation 17.5
Doing my lab deployments with Docker

Hi,
I am trying to add the wazuh extension to the GOADv3 lab after successfully provisioning the lab. I have added the Exchange server and the windows 10 machine with no issue but when I try to add wazuh, the provisioning fails with this error:

fatal: [wazuh]: UNREACHABLE! => {"changed": false, "msg": "Failed to connect to the host via ssh: ssh: connect to host 192.168.56.51 port 5985: Connection timed out", "unreachable": true}

It looks like for some reason vagrant is trying to ssh to the Ubuntu box over port 5985 instead of 22.

I have gone through all the inventory and vagrant files to try to find out if there is any place where it is set for the ssh connection to be done over 5985 but I cannot find any. I have also gone on the Ubuntu 22 box for wazuh and tried to even manually open and enable 5985 but that did not work.

I also tried to change the Vagrant file to do the ssh auth with username and password but that didn't work as well.

Would really appreciate some help/pointers on how to fix this pls.

There is a message at the start of the provisioning:

**GOAD-WAZUH: Vagrant insecure key detected. Vagrant will automatically replace
GOAD-WAZUH: this with a newly generated keypair for better security.**

Was wondering if this has anything to do with it