Groups
Groups
Sign in
Groups
Groups
Wazuh | Mailing List
Conversations
About
Send feedback
Help
Group path
Wazuh | Mailing List
Contact owners and managers
1–30 of 16820
Welcome to Wazuh mailing list. Our team will be happy to answer and help with all your questions.
We look forward to your feedback and contributions.
Mark all as read
Report group
0 selected
German DiCasas
,
Christian Borla
2
Sep 4
Vulnerability report and kernels
Hi German, There isn't a built-in setting in Vulnerability Detection/Inventory that automatically
unread,
Vulnerability report and kernels
Hi German, There isn't a built-in setting in Vulnerability Detection/Inventory that automatically
Sep 4
Nguyen Xuan Dong
,
Matías Exequiel García
6
Sep 4
We replayed 24 ATT&CK techniques against a default Wazuh install. Three of them raised an alert.
Hi Nguyen, I would suggest using Wazuh 4.14.7 for the re-run, since it is the latest stable version
unread,
We replayed 24 ATT&CK techniques against a default Wazuh install. Three of them raised an alert.
Hi Nguyen, I would suggest using Wazuh 4.14.7 for the re-run, since it is the latest stable version
Sep 4
Noa LEDET
,
Olamilekan Abdullateef Ajani
6
Sep 3
Wazuh Main Server installation error : User is not registered in Wazuh API
I forget this file attached below 😅 Le lundi 31 août 2026 à 17:54:03 UTC+2, Olamilekan Abdullateef
unread,
Wazuh Main Server installation error : User is not registered in Wazuh API
I forget this file attached below 😅 Le lundi 31 août 2026 à 17:54:03 UTC+2, Olamilekan Abdullateef
Sep 3
Ваня Бакуренко
, …
Francisco Sousa
6
Sep 3
HELP: Custom PowerShell Event ID 4104 rule matches in wazuh-logtest but no alert is generated in the Dashboard
Olamilekan's parent is the right one and mine was one level too high. The event walks 60000, then
unread,
HELP: Custom PowerShell Event ID 4104 rule matches in wazuh-logtest but no alert is generated in the Dashboard
Olamilekan's parent is the right one and mine was one level too high. The event walks 60000, then
Sep 3
ekta dhussa
,
Olamilekan Abdullateef Ajani
2
Sep 3
Decoders required for switches
Hello, Wazuh already has Fortinet and Cisco ISO decoders bundled out of the box, you can find the
unread,
Decoders required for switches
Hello, Wazuh already has Fortinet and Cisco ISO decoders bundled out of the box, you can find the
Sep 3
No Data
,
Olamilekan Abdullateef Ajani
6
Sep 2
Vulnerbility Scanner SHows alert on Fixed Package
Hello, I have created a github issue for this here: https://github.com/wazuh/wazuh/issues/38817 I
unread,
Vulnerbility Scanner SHows alert on Fixed Package
Hello, I have created a github issue for this here: https://github.com/wazuh/wazuh/issues/38817 I
Sep 2
Varun Nagar
,
Olamilekan Abdullateef Ajani
5
Sep 2
Accessing the Source Code to Wazuh
Hello Varun, It looks like you built the installer from the main branch. From what I see, main is
unread,
Accessing the Source Code to Wazuh
Hello Varun, It looks like you built the installer from the main branch. From what I see, main is
Sep 2
Alex
, …
Francisco Sousa
9
Sep 2
How to prevent "queue flooding" and scale log ingestion to 500,000+ events?
Before you add a fourth node, there are three numbers already in this thread that decide whether a
unread,
How to prevent "queue flooding" and scale log ingestion to 500,000+ events?
Before you add a fourth node, there are three numbers already in this thread that decide whether a
Sep 2
Fernando Montanher
, …
Hextra Srl
16
Sep 1
Title: Canonical vulnerabilities no longer appearing in Wazuh CTI
Thanks Francisco, that matches what we already found today ( with wazuh_modules.debug=2 in
unread,
Title: Canonical vulnerabilities no longer appearing in Wazuh CTI
Thanks Francisco, that matches what we already found today ( with wazuh_modules.debug=2 in
Sep 1
Felix Andorfer
,
Olamilekan Abdullateef Ajani
2
Aug 31
Filtered alias not applied to new daily wazuh-alerts index
Hello, This is an expected behaviour. The wildcard in your _aliases request only matches indices that
unread,
Filtered alias not applied to new daily wazuh-alerts index
Hello, This is an expected behaviour. The wildcard in your _aliases request only matches indices that
Aug 31
Shreya Chakrabarty
, …
Olamilekan Abdullateef Ajani
8
Aug 31
Urgent Help required!
Hello Shreya, I am glad the previous issue is resolved. Regarding the 0 Critical alerts, the Overview
unread,
Urgent Help required!
Hello Shreya, I am glad the previous issue is resolved. Regarding the 0 Critical alerts, the Overview
Aug 31
Monesh
, …
Francisco Sousa
4
Aug 28
req email alerting
Hi Monesh, Answering on the thread rather than by private mail, so the next person with the same
unread,
req email alerting
Hi Monesh, Answering on the thread rather than by private mail, so the next person with the same
Aug 28
EA
, …
Francisco Sousa
8
Aug 26
Exclude Event ID 4625 (SubStatus 0xC000006F) from Rule 60204 Frequency Correlation
Hi Eren, First, the honest part: your data ruled out my suggestion, and it was right to.
unread,
Exclude Event ID 4625 (SubStatus 0xC000006F) from Rule 60204 Frequency Correlation
Hi Eren, First, the honest part: your data ruled out my suggestion, and it was right to.
Aug 26
Suvadip Ghosh
,
Olamilekan Abdullateef Ajani
2
Aug 26
AWS Security Hub events not coming in UI
Hello, The Fetching logs finished log infor only means the AWS wodle ran, doesn't necessarily
unread,
AWS Security Hub events not coming in UI
Hello, The Fetching logs finished log infor only means the AWS wodle ran, doesn't necessarily
Aug 26
Mr VR
, …
Francisco Sousa
7
Aug 25
Wazuh Indexer High Disk Usage
Hi Vignesh, One thing about that last step, from your own ls -lrth: the directories under nodes/0/
unread,
Wazuh Indexer High Disk Usage
Hi Vignesh, One thing about that last step, from your own ls -lrth: the directories under nodes/0/
Aug 25
DIWAHAR RAHAWID
,
Darío Ortega Leyva
2
Aug 25
Application Whitelisting not working as expected
Hi Diwahar, The GitHub repository you followed is community content. It is not part of the official
unread,
Application Whitelisting not working as expected
Hi Diwahar, The GitHub repository you followed is community content. It is not part of the official
Aug 25
Arjun P
, …
xrisbarney
6
Aug 24
Help me find the alerts tab on wazuh
Hey Arjun, Robby, Hasitha, I somehow found this thread and deployed a release for the plugin for 4.14
unread,
Help me find the alerts tab on wazuh
Hey Arjun, Robby, Hasitha, I somehow found this thread and deployed a release for the plugin for 4.14
Aug 24
Mithun Haridas
,
Olamilekan Abdullateef Ajani
6
Aug 21
Renaming field data.Timestamp to data.timestamp
Hello, Thanks for the clarification. From testing, I was able to isolate the conditions in the
unread,
Renaming field data.Timestamp to data.timestamp
Hello, Thanks for the clarification. From testing, I was able to isolate the conditions in the
Aug 21
Varun Nagar
, …
Francisco Sousa
3
Aug 21
Custom Dashboard and User creation
Hello Varun, Building on Olamilekan's answer, one shift of angle on the management dashboard,
unread,
Custom Dashboard and User creation
Hello Varun, Building on Olamilekan's answer, one shift of angle on the management dashboard,
Aug 21
M Jones
,
josue....@wazuh.com
4
Aug 20
Wazuh 5 - O365 Logs
Thanks, that helps a lot. Did you followed https://documentation.wazuh.com/5.0-beta/cloud-security/
unread,
Wazuh 5 - O365 Logs
Thanks, that helps a lot. Did you followed https://documentation.wazuh.com/5.0-beta/cloud-security/
Aug 20
Uni AT
,
Olamilekan Abdullateef Ajani
5
Aug 20
Wazuh/Opensearch error with the "generate and download" feature
Dear Olamilekan, Sorry for the long time without answering. We were discussing the issue internally
unread,
Wazuh/Opensearch error with the "generate and download" feature
Dear Olamilekan, Sorry for the long time without answering. We were discussing the issue internally
Aug 20
wazuh user
, …
Francisco Sousa
7
Aug 20
WAZUH SERVER MIGRATION
The piece that clears up the confusion is what "restore" actually means here, because
unread,
WAZUH SERVER MIGRATION
The piece that clears up the confusion is what "restore" actually means here, because
Aug 20
exe
,
Diego Cappri
4
Aug 20
rsyslog and kafka help
Thank you for the help, is it possible to send the syslog logs directly from the sonicwall to the
unread,
rsyslog and kafka help
Thank you for the help, is it possible to send the syslog logs directly from the sonicwall to the
Aug 20
Narasimha Naidu B
, …
Nguyen Xuan Dong
5
Aug 17
Request for Guidance on Wazuh Attack Detection and Alerting
The rule list above is the right starting point, so this is only the other half of it: how to run the
unread,
Request for Guidance on Wazuh Attack Detection and Alerting
The rule list above is the right starting point, so this is only the other half of it: how to run the
Aug 17
Uni AT
, …
Md. Nazmur Sakib
9
Aug 17
Issue to enable <logall_json> when <logall> is disabled
Thank you for the update. Feel free to let me know if you face any similar issues in the future. On
unread,
Issue to enable <logall_json> when <logall> is disabled
Thank you for the update. Feel free to let me know if you face any similar issues in the future. On
Aug 17
Jack Martin
,
Olamilekan Abdullateef Ajani
2
Aug 14
Request for GitHub Integration Support in Wazuh On-Premises
Hello Jack, Wazuh On-Premises support GitHub monitoring, but only for GitHub organization audit logs.
unread,
Request for GitHub Integration Support in Wazuh On-Premises
Hello Jack, Wazuh On-Premises support GitHub monitoring, but only for GitHub organization audit logs.
Aug 14
Daniil Sobolev
, …
Vinícius Fontoura de Abreu
6
Aug 13
Same agent/same hostname for a frequency alerts
Brenno, sorry for the long delay... It turns out my solution was simpler: 1. I set up my network
unread,
Same agent/same hostname for a frequency alerts
Brenno, sorry for the long delay... It turns out my solution was simpler: 1. I set up my network
Aug 13
Ali Melikov
, …
Olamilekan Abdullateef Ajani
18
Aug 13
Syscheck real time monitoring issue
Hello Ali, I looked through the thread, and based on the latest debug message: Unable to add
unread,
Syscheck real time monitoring issue
Hello Ali, I looked through the thread, and based on the latest debug message: Unable to add
Aug 13
Max
, …
Francisco Sousa
5
Aug 13
Wazuh Server Cluster - When nominating a new Master node
Hi Max, I run a 400+ agent cluster (one master, multiple workers), so your question hits close to
unread,
Wazuh Server Cluster - When nominating a new Master node
Hi Max, I run a 400+ agent cluster (one master, multiple workers), so your question hits close to
Aug 13
Sachin Singh Rana
,
Md. Nazmur Sakib
2
Aug 13
Sophos Central Integration with Wazuh
Hi Sachin, Configure the script to write each collected event to a log file, for example: /var/log/
unread,
Sophos Central Integration with Wazuh
Hi Sachin, Configure the script to write each collected event to a log file, for example: /var/log/
Aug 13