Wazuh | Mailing List

Hi Emar, Could you please share the agent group config to identify any other issues? Basically, by

Glad to know the issue is resolved. On Sunday, March 15, 2026 at 1:14:35 PM UTC+5:30 Dmitry Mikheev

Hi Hasitha, I managed to remove the existing filebeat and re-installed a the correct version and it

Hi Bayu, The current status is not visible in this screenshot. It should show connected or

Hi, This behaviour is not expected. The Office 365 Management Activity API requires the tenant ID in

Hi CRiaks, Yes, you are right. Wazuh's built-in mailer, wazuh-maild, does not support

Hi mt, Yes, you are right. This is not mentioned explicitly in the documentation, but we can confirm

Hi Emar, I have tested and verified that you can use the restrict option to monitor a specific file

Yes, it is technically possible to connect Wazuh Manager and Wazuh Dashboard to OpenSearch instead of

Hello, could u give me a sample log and wazuh-logtest result? Em sexta-feira, 6 de março de 2026 às

I checked that log and same, the sca created is not shown. The agent is over a windows 11. The yml

The logs seem to point at a ERR_SSL_TLSV1_ALERT_UNKNOWN_CA error. Since you mentioned to me that you

You tell me to use 60009 for all iis rules? For the first and then to link all the rules from that?

Based on the logs you have shared 2026/03/13 00:22:45 wazuh-agent: ERROR: (1216): Unable to connect

Hello team and community. Are there any updates on this issue? вторник, 3 марта 2026 г. в 11:17:39

Hello Max, Check out the below resources: Using Helm with Kubernetes: A Guide to Helm Charts and

Once the logs go to the Application event channel. Wazuh can collect the logs from the Application

Hi Analytics FG. Hi, In Wazuh, the Vulnerability Inventory and the alerts generated by the

Hi George, Yes, exactly. For wazuh-logtest you should use the raw log line exactly as it arrives to

Hi Federico, certificates are all issued in the following way: Certificate: Data: Version: 3 (0x2)

This behavior is related to how Wazuh AWS S3 integrations work by default: VPC Flow logs: Wazuh

Hi Nahuel, Well, I'm back at it because I can't let this go, I have to figure this out. I

You can follow these steps to delete the default admin user and replace it with a new admin user. Log

Hello, It is normal for this process to take a significant amount of time given the volume of logs

Hello. To apply a single configuration to all agents in your environment, you can use centralized

Hello Medpro524, After reviewing your rule logic, I found some issues even though they are mostly

Hi there Ham For a MSSP deployment, the best option is to use Cross-Cluster Search. Check out our

Hi, yes when it states "and later" It will typically support all the later versions. New

Hi Muhammad Usman, You can read this document to understand how to create decoders from rules.

Hi Hasitha, The issue with was fixed by increasing heap size to 2gb given i have 4gb system. However,