Wazuh | Mailing List

Have you made any changes recently or has the dashboard suddenly stopped working? On Monday, October

Hi Thaynara, I'm thinking that thiscould be a problem after you upgrade your environment. Did you

tail /var/ossec/logs/ossec.log 2024/10/07 13:58:07 wazuh-csyslogd: INFO: Remote syslog server not

I believe I may have made this entirely too difficult and led us down the wrong path. First things

Thank you, I managed to understand and the way I configured it is correct, so please tell me what

Hi Team, I was trying to restore my current stage wazuh server to a new data center (3 server

Hello German, Unfortunately, this is not feasible. If the reason behind you trying to downgrade is as

Hello German, We have a documentation that is helpful when it comes to troubleshooting issues that

Hello Amar, Are you encountering this issue on Wazuh version 4.9? If this is the case, in 4.9 SSO as

Hi, As I mentioned before, the main cause of this problem is usually a high volume of events that the

Hi! Thank you for reaching out to us! For most alerts, Wazuh uses XML decoders to parse the

Additional info On Monday, October 7, 2024 at 8:59:46 PM UTC+7 M Sakarino wrote: Hi Wazuh Team, Here

Thanks! I found out that it helps to uncomment line 26 in var/ossec/ruleset/rules/0350-amazon_rules.

Thanks for responding, but what if we have like 100 agents, it is not flexible to add all IPs as

Hello Chittaranjan The registration values (AgentID, AgentName, AgentIP, and AgentKey) must be the

Hello again everyone, I would appreciate it if anyone could help with this ✔✔✔ Thank you in advance

Hi, You should be able to ignore/disable SCA policies by following what's mentioned in How to

Hi Mithun, It is possible to write a decoder the way you are asking. Need to use Modifiers * To match

Hi Javier, It worked flawlessly. Thank you very much. If I have another problem with this topic, I

Thanks for checking. We are stoaring our archives on a sperate storage to reindex them later (in

I am experiencing this same API connection issue.. What could be the cause of this .. Thank you On

Replying better late than never. I've written a wodle that uses the Google Admin SDK API. This

But now I noticed a new warning in the /var/ossec/logs/ossec.log: 2024/10/07 03:38:03 wazuh-modulesd:

I don't receive the logs with syslog. I receive with log forward API that is put in a folder of

Hi Rodolfo, Thanks for your reply. In fact, it is the automatic refresh option in the calendar field.

Hello Tomasz! Wazuh supports this kind of log, but you need to perform some adjustments: - Option

Hi, thanks for replying. I've re-tested the regex you wrote and it works perfectly now, i had

Hey Olusegun, it seems that the problem is no longer occuring. My config looks like you mentioned and

Thanks Santiago, it's working now Cheers On Monday, October 7, 2024 at 2:46:49 PM UTC+7 Santiago

Hello Nugroho, Apologies for this experience. This is a result of an omitted step of a "