Wazuh | Mailing List

Hello, Thank you once again for the follow up. Subsequent to the below, I did try various other

Hi Nazmur Sakib, My policy works well, because I trigger an alert each time the field data.sca.check.

Hi Ayadoss, Wazuh has different log collection methods. Check this comment for your reference: https:

Hello, This error is caused because the self-signed certificate used in the AMI is not trusted by the

Hi Micael, This section shared files behaviour highlights the functionality of grouping Wazuh agents.

Hello Comment installer ova watchguard ?...s'il vous plaît les étapes en détails dans le but de

Hi Scott can you please tell me the directory of the path of wazuh-install-files? On Friday, April 4,

You need to first create custom index pattern on Filebeat for each Wazuh server node. Repeat steps 1

Update: I followed the advice in this link: https://groups.google.com/g/wazuh/c/F8wWzgB-YQM and was

Hi Team, As per the documentation, I have set up the server and configured the agentless setup.

Hi Ariel, Thank you for your email. I installed Wazuh Manager and all products, integrated 5 x

Hi Sakip, Am not able to get the log for Cisco C9300 Switch. Here is below details ,FYR kindly help

It seems that your indexer has reached the maximum shard limit. A single-node indexer cluster can

Hello, Thanks for the clarification, now I understand. You want the rule to trigger based on the

Hello! Could you please share the output of the commands below for further troubleshooting on this: `

Someone from the team is working on this query on your post on the Slack community. https://wazuh.

Hi Grzegorz, At this moment, it is not possible to limit the use of the API to only some specific

Ayooluwa, your procedure from the manual solved my issue. Thanks a lot wtorek, 15 kwietnia 2025 o 18:

Yes. If you comment out these in ossec.conf of your Wazuh manager, it will only stop reading logs

After restarting the services, you need to wait a few minutes to get the dashboard properly up and

sorry this is my Custom Script (ip-bloc.py) #!/usr/bin/env /usr/bin/python3 import sys import json

I have checked old articles, but they are not helpful, as most of them talk about the Wazuh dashboard

Hello Cybersaoc, Please note the use of labels in a rule would not work, labels are only for

Hello, To better understand this, I would need to see the full log and test this out to see the

Hi ShtrudelMan, By Auditing, I believe you are referring to ensuring regulatory compliance.

I assume you're referring to the recent news suggesting that MITRE might hypothetically cease

Hello, I'm writing to understand how Wazuh monitors user logins to the dashboard, including the

Hi Igor, Have you added this rule to the local_rules.xml file and windows_custom_rules.xml? <group

You can write rules like this <group name="windows,mssql"> <rule id="100104

OK, i will. Thanks for help. I don't have that version available in apt repository yet. Dana