Wazuh | Mailing List

It has a bad cipher, but the API fails when it is down. But when I go back to without the setting, it

Hi team Please can you guide me how to delete or repair this issue output from: GET _cluster/

Hi team Please help me to check my State management polices are miss as below, i checked the cluster

Hello German, It seems there are some issues with the feeds, please try this: Stop the manager

The dashboards keeps the same certificates as those are created from the same root CA, the certs are

Hello, Sumit. Thank you for reaching out. I can provide some basic guidance, as your inquiry covers

Spoke too soon again. Sorry. I am getting alerts for both rules. On Friday, 17 January 2025 at 11:46:

Hi, I need your help, I didn't find much information about it in the documentation. I want to

curl: (52) Empty reply from server Em sexta-feira, 17 de janeiro de 2025 às 10:22:31 UTC-4, Diego

Hi! Wazuh is a security platform that provides unified XDR and SIEM protection for endpoints and

Hello German, Three issues are observable from the logs you shared: 1. Log rotation problem 2.

Hello Emre, Please share the out put of the following command: cat /var/ossec/logs/ossec.log | grep -

Hi! I'm reviewing this, I will answer you ASAP! On Friday, January 17, 2025 at 1:33:18 PM UTC+1

Could you make a python script that reads the /var/ossec/logs/archives/archives.json (logall_json

Hi Jaime, Currently here are the official available single sign identity providers. Okta Microsoft

Hi Pablo, Waiting for your response with a perfect solution for this issue. On Friday, January 17,

Hello Damian, i indeed executed step 5 but still i am not getting any events on the vulnerability

Hello, I would like to make exceptions for certain tasks. I attempted to add exceptions for some

Hi, Please refer to the GitHub issue: https://github.com/wazuh/wazuh/issues/27687#issuecomment-

Hi Redant, From the shared log, it might be realed to JVM issue. To mitigate this issue, you can

Hi Tap Please Check this for compression. It is compressing data by default https://opensearch.org/

Hi ΣЯMЦЯΣПZ, You're very welcome! I'm glad to hear your issue was resolved! If you run into

Hi, I'd like to revisit this topic. Has anyone managed to create an Active Response that blocks a

Hello David, From what you have mentioned, you can see the alerts in the archive.json file and it has

Hello MG, Wazuh does not delay informing about vulnerabilities, in fact you can verify the feed

For testing Let's ingest the logs in this way. First, increase the rule 5501 level to 13. Add

Hi, thanks for the answer and your input! Regarding answer 4: I tried your code snippet in a test

Hi Kerim, You can send separate emails for each alert by using the <do_not_group/> tag in the

Hi shiyas, Sorry for the late response. Please configure your Suricata configuration following this

For this error but according to the journaml file (journalctl -xeu wazuh-manager.service) the