Hi Uni AT, The task:status permission alone may not be enough in this case, since the upgrade task

Good afternoon, Thank you very much for the initial information. Please, when you have any further

Hello, From what you shared, the saved search itself looks valid. The ID shown in the error is the

Hello again, So I tested this on my side with Wazuh 4.14.7 manager and 4.14.7 agents. I used Ubuntu

Hi CRIZ, Currently, you cannot create a child decoder under syscheck_integrity_changed. That decoder

Hi Team, Could you p​tegrating Sophos Central logs into Wazuh? We have attempted the configuration,

Yes. You are correct; the UI fails because it looks for the master node Wazuh manager API. We are

Hi Bayu, The error you're encountering is related to the timestamp format. The Wazuh Indexer is

The syslog/port/listener side is a standard Wazuh setup regardless of vendor. The guide covers it

Hi George, Apologies for the delay. If you change the decoder name, it may affect the child decoders

Hi, This is working fine for me, and with just a sample, it is difficult to understand. Can you

Hi Soc Support I am glad that your issue has been resolved. Let us know if you need further

Hello Jack, I checked this further on a Wazuh 5.0 instance, and I need to clarify one thing. Event ID

Hello CRTZ, FIM monitors file system changes to detect the creation, modification, and deletion of

Hi Chukwudalu Chisimdi Okonkwo, Thanks for your support Regards, On Tuesday, August 4, 2026 at 2:52:

Thank you for the detailed information and the screenshots — that helped us confirm the cause. This

Hello Kamran, I have reviewed your Windows agent.conf file and here are a couple that will help you

What kind of custom configuration you would like to do will depend on what type of logs you want to

Hello. There is indeed a limit on the event size, but it's not the limit that's causing your

Hi, Thank you for your valuable response. I will try the methods you mentioned above and will get

Hello Jack, At the moment, Wazuh 5 is still in beta, not a stable production release. The latest

Hello, When I said export/save important config files, I took the reference from the Wazuh back up

Hello, Thank you for your answer. The file modifications were done on the host, not inside the

Ok. I am waiting your response среда, 5 августа 2026 г. в 16:17:36 UTC+4, Stuti Gupta: Hi In the

Reference Links: https://documentation.wazuh.com/current/user-manual/capabilities/log-data-collection

Hi, Without tenants, you cannot restrict a user to a single dashboard. Dashboards are stored in the

Increasing the RAM on the Wazuh server can solve this problem. It's possible to use large CDB

Hello, Wazuh can help with this, but mainly through log collection. The agent on the Docker host can

Hi, The O365 wodle ingests data from the Office 365 Management Activity API. Within that API, Azure

Thank you so much for the help On Monday, July 27, 2026 at 5:31:16 PM UTC+5:30 hasitha.upekshitha@