Thanks Francisco — agreed, and the restart behavior is an important addition. I had been thinking

Hello Klein, Thank you for sharing this. But think this PR will not be merged, as there is no

Hello, you're right. This version is not supposed to be vulnerable. Let me do some research and

That would be fine if there was any naming standard and things were not changing daily ;) Currently I

Those two lines aren't the same field, and for 4688 only one of them lives in EventData. The

You can check this document for a similar use case. Monitoring Windows resources with Performance

Hello, This is just to update you on the issue you raised. The sanitization mentioned has been

Hello, Wazuh does not currently accept TLS syslog directly. The built-in syslog listener supports

Hello, When integrating network devices like a FortiGate firewall, the better approach is to use a

Francisco, I'm taking the correction. You're right that the agent-package reasoning was the

Hi Raju! You will find vulnerability information in two types of indices. wazuh-states-

Hi Gabriel, Firstly, have you followed the Docker installation guide? If not, please check the

Hello , I am running a wazuh version v 5.0.0 beta. Latest one. On Tue, 8 Sept, 2026, 5:34 pm '

Hello, This just confirms that the API itself is working. It validates the RBAC database and listens

Hi Roman, You can't reverse the direction. In Wazuh, the agent is always the client and the

Hi German, There isn't a built-in setting in Vulnerability Detection/Inventory that automatically

Olamilekan's parent is the right one and mine was one level too high. The event walks 60000, then

Hello, Wazuh already has Fortinet and Cisco ISO decoders bundled out of the box, you can find the

Hello Varun, It looks like you built the installer from the main branch. From what I see, main is

Before you add a fourth node, there are three numbers already in this thread that decide whether a

Thanks Francisco, that matches what we already found today ( with wazuh_modules.debug=2 in

Hello, This is an expected behaviour. The wildcard in your _aliases request only matches indices that

Hello Shreya, I am glad the previous issue is resolved. Regarding the 0 Critical alerts, the Overview

Hi Monesh, Answering on the thread rather than by private mail, so the next person with the same

Hi Eren, First, the honest part: your data ruled out my suggestion, and it was right to.

Hello, The Fetching logs finished log infor only means the AWS wodle ran, doesn't necessarily

Hi Vignesh, One thing about that last step, from your own ls -lrth: the directories under nodes/0/

Hi Diwahar, The GitHub repository you followed is community content. It is not part of the official

Hey Arjun, Robby, Hasitha, I somehow found this thread and deployed a release for the plugin for 4.14

Hello, Thanks for the clarification. From testing, I was able to isolate the conditions in the