hi, A gentle reminder for a response to this issue Thanks & Regards, Rahul M On Tuesday, July 21,

Hi Team, Could you please share the latest output of the explain command so I can see exactly where

Hello, The issue is that <match> and <regex> only operate on the log body — they can'

Hello Frederico, The issue is with the extra colon from the log source, Wazuh treats that colon as

Hello, Thanks for the update. Since the nc message sent through the HAProxy VIP appeared in archives.

Hi Tristan, From everything you have shared, this is what I understand so far: You first tried to

Hello, I made sample decoders and rules to help with the logs you shared, the logs were grouped in

Hi Asmit, Yes, we believe this is possible. Instead of using a personal access token with the native

Hello MaP, To prevent false alerts from Sysmon, you have three options. Firstly, Sysmon configuration

Hello, Thank you, I'll follow it up there. Best regards, From: 'Olamilekan Abdullateef Ajani

The "Agent key already in use" warning occurs because an agent is trying to register or re-

Hi, Glad this has been resolved, thank you for the feedback. Regards, On Monday, July 20, 2026 at 5:

The group "default" appeared after completing the specified actions. Thanks. понедельник,

Hi doc dodo, I don't see anything wrong in the configuration. I was looking for custom

Hi Aditya, Is your issue resolved, or are you still facing it. On Thursday, July 2, 2026 at 4:42:25

Hi Stuti, good... Right now it is working the sibling decoder. I will be testing . Thanks Regards

Hello, I have an update after checking this internally. This is a known limitation with the alert id

Hi Stuti, Even after changing the script as you tested still not working for me not sure what is the

Hi Unai, You can achieve your use case by making a custom mail integration. Custom integration I will

Hi Max, The main difference is that they relate to different Wazuh components and are used for

Hi, Yes, it is possible to upgrade a Wazuh agent from 4.3.9 to 4.12.0 remotely from the Wazuh

For Windows Server 2022 with Wazuh 4.14.x, those audit‑policy steps are effectively mandatory if the

Hello Vignesh, A key thing to establish first: wazuh-states-vulnerabilities-* is a stateful index,

I would like to share this information here in case anyone needs it. You can use the existing default

Hi Mahad, SST file under /var/ossec/queue/vd: Occupies around 7 GB, and it contains all the

Hi NASHATH, I noticed that the <nodes> section in your master configuration includes all of the

Greetings Facu, The issue is the `Path` attribute in your <Query> and <Select> elements.

Hi, First of all, if possible, I recommend installing an agent, since it's the easiest way to do

Hi Jaswantha, I would like to complement the information shared by Nazmur The Wazuh Vulnerability

Sorry for the delay. I was discussing your issue with the internal team. I somehow overlooked some