Wazuh | Mailing List

Hi team, I am having a similar issue but I am using single node docker instance v4.9.2. since I am

Hi German, The general timeframe is global for a dashboard or a visualization. However, if the data

Check if the Wazuh manager and dashboard services are running: systemctl status wazuh-manager

Hi Fabian, My goal is to affect the newly created indices not the past ones, mainly the archives and

Hi German! Sorry for the late reply. I will do some research on how to solve this problem. And I will

Hi, Can you give me more context, please? 1. What documentation are you following? https://groups.

Hello Jaik I believe the issue you are experiencing is similar to this https://github.com/wazuh/wazuh

Hello! In this case, if the label that you assigned to the groups is not present in the

I have the use_source_ip option set to no and allowed-ips is configured for the 10.xx.xx.xx network,

There seems to be a problem in the communication between the indexer and the manager, as filebeat is

I have a question for you. If you create an internal user outside of SSO and assign it to a role,

Hi Todor, No problem at all, and thank you for the clarification. It's understandable that

Hello Diwahar, This can be achieved by configuring Wazuh to monitor specific Windows Event Logs

Hi Kobrik, I tried to reproduce your issue, but it works fine for me. Could you share the steps you

Thank you. I for sure will try this. What I meant was that there's an event source that generates

Hello, the result of the commands четверг, 28 ноября 2024 г. в 08:46:53 UTC+3, Aditya Sharma: Hi Team

Thanks so much Bony!! Em segunda-feira, 2 de dezembro de 2024 às 06:54:44 UTC-3, Bony V John escreveu

Thank you @Mxnita, this seemingly fixed the issue for me too, i'll post again if not ;) On

Hello Rudi, Thank you for bringing this to our notice. I will confirm this to validate and give you a

Hi David As you have tested, the rule would be working correctly. Can you tell me how you tested it

Hello, If you want to send logs to the Wazuhh dashboard without decoders and rules, then you'll

Hi, It seems that the previous output does not contain the complete log. Could you please run the

Hi Dmitry, Let's try with osregex to capture the path, I believe this will work for you. In

Hi Felix, It is happening due to the pre-decoder pattern. In Wazuh version 5.0, the rule engine will

Hello Luan, Could you please run the following commands on the Wazuh manager and share the output for

Hi Uma Mahesh, If you want to detect only potentially harmful files for example executable files. You

Hi Furkan, By default Wazuh alerts receiving only level 3 or above. I believe it will work with match

Hi Fabrice, The error message indicates that the Wazuh Dashboard (running OpenSearch Dashboards)

Hi, Javier. Wazuh version is 4.8.0. I checked alerts.log and wazih-cluster-log but could not really

Hello Yossif, The field GeoLocation.country_name is enriched by Wazuh-Indexer based on some