Groups
Groups
Sign in
Groups
Groups
Wazuh | Mailing List
Conversations
About
Send feedback
Help
Group path
Wazuh | Mailing List
Contact owners and managers
1–30 of 16747
Welcome to Wazuh mailing list. Our team will be happy to answer and help with all your questions.
We look forward to your feedback and contributions.
Mark all as read
Report group
0 selected
doc dodo
,
Federico Gustavo Galland
4
Jul 17
Wazuh-agent is block connections
Hi doc dodo, I don't see anything wrong in the configuration. I was looking for custom
unread,
Wazuh-agent is block connections
Hi doc dodo, I don't see anything wrong in the configuration. I was looking for custom
Jul 17
doc dodo
,
hariha...@wazuh.com
3
Jul 17
Unable to find the id of the group 'default'
The problem arose a long time ago, after moving to another server, but we only noticed the errors in
unread,
Unable to find the id of the group 'default'
The problem arose a long time ago, after moving to another server, but we only noticed the errors in
Jul 17
Aditya Firman Nugroho
, …
Stuti Gupta
3
Jul 17
Error Instaling Wazuh Server Cluter , but Dashboard and Indexer is Fine.
Hi Aditya, Is your issue resolved, or are you still facing it. On Thursday, July 2, 2026 at 4:42:25
unread,
Error Instaling Wazuh Server Cluter , but Dashboard and Indexer is Fine.
Hi Aditya, Is your issue resolved, or are you still facing it. On Thursday, July 2, 2026 at 4:42:25
Jul 17
xeption
,
Himanshu Sharma
19
Jul 17
Assistance Required: Wazuh Indices Retention Policy Issue
Hi Team, Following up on the retention policy issue — please try the approach below to force the
unread,
Assistance Required: Wazuh Indices Retention Policy Issue
Hi Team, Following up on the retention policy issue — please try the approach below to force the
Jul 17
German DiCasas
,
Stuti Gupta
4
Jul 16
decoder sibling
Hi Stuti, good... Right now it is working the sibling decoder. I will be testing . Thanks Regards
unread,
decoder sibling
Hi Stuti, good... Right now it is working the sibling decoder. I will be testing . Thanks Regards
Jul 16
никита какдела
,
Olamilekan Abdullateef Ajani
8
Jul 16
active response id
Hello, I have an update after checking this internally. This is a known limitation with the alert id
unread,
active response id
Hello, I have an update after checking this internally. This is a known limitation with the alert id
Jul 16
DIWAHAR RAHAWID
,
Stuti Gupta
9
Jul 16
Wazuh Active Response.
Hi Stuti, Even after changing the script as you tested still not working for me not sure what is the
unread,
Wazuh Active Response.
Hi Stuti, Even after changing the script as you tested still not working for me not sure what is the
Jul 16
Unai
,
Md. Nazmur Sakib
2
Jul 16
Group rules into one mail
Hi Unai, You can achieve your use case by making a custom mail integration. Custom integration I will
unread,
Group rules into one mail
Hi Unai, You can achieve your use case by making a custom mail integration. Custom integration I will
Jul 16
Max
,
Stuti Gupta
2
Jul 16
Differences between the Wazuh users between Indexer and Manager
Hi Max, The main difference is that they relate to different Wazuh components and are used for
unread,
Differences between the Wazuh users between Indexer and Manager
Hi Max, The main difference is that they relate to different Wazuh components and are used for
Jul 16
Nam Vũ
,
Stuti Gupta
2
Jul 15
Upgrade Wazuh_Agent
Hi, Yes, it is possible to upgrade a Wazuh agent from 4.3.9 to 4.12.0 remotely from the Wazuh
unread,
Upgrade Wazuh_Agent
Hi, Yes, it is possible to upgrade a Wazuh agent from 4.3.9 to 4.12.0 remotely from the Wazuh
Jul 15
Facu Basgall
,
Ifeanyi Onyia Odike
4
Jul 15
FIM whodata not working
For Windows Server 2022 with Wazuh 4.14.x, those audit‑policy steps are effectively mandatory if the
unread,
FIM whodata not working
For Windows Server 2022 with Wazuh 4.14.x, those audit‑policy steps are effectively mandatory if the
Jul 15
Mr VR
,
Aishat Motunrayo Awujola
2
Jul 15
wazuh-states-vulnerabilities backup
Hello Vignesh, A key thing to establish first: wazuh-states-vulnerabilities-* is a stateful index,
unread,
wazuh-states-vulnerabilities backup
Hello Vignesh, A key thing to establish first: wazuh-states-vulnerabilities-* is a stateful index,
Jul 15
doc dodo
,
Md. Nazmur Sakib
2
Jul 15
new fortimail log
I would like to share this information here in case anyone needs it. You can use the existing default
unread,
new fortimail log
I would like to share this information here in case anyone needs it. You can use the existing default
Jul 15
Mahad Mansoor
,
Md. Nazmur Sakib
2
Jul 14
GB's of data in /queue/indexer/wazuh-states-vulnerabilities-wazuh_cluster/
Hi Mahad, SST file under /var/ossec/queue/vd: Occupies around 7 GB, and it contains all the
unread,
GB's of data in /queue/indexer/wazuh-states-vulnerabilities-wazuh_cluster/
Hi Mahad, SST file under /var/ossec/queue/vd: Occupies around 7 GB, and it contains all the
Jul 14
NASHATH NASAR
,
Stuti Gupta
5
Jul 14
WORKER SYNC ISSUE
Hi NASHATH, I noticed that the <nodes> section in your master configuration includes all of the
unread,
WORKER SYNC ISSUE
Hi NASHATH, I noticed that the <nodes> section in your master configuration includes all of the
Jul 14
José Santiago Pérez Fernández
,
Olamilekan Abdullateef Ajani
3
Jul 13
Possible CVE-2026-23863 false positive in WhatsApp Desktop
Hello, Thank you for reproducing and confirming the issue. Please let me know if you need any
unread,
Possible CVE-2026-23863 false positive in WhatsApp Desktop
Hello, Thank you for reproducing and confirming the issue. Please let me know if you need any
Jul 13
Facu Basgall
,
Ezequiel Montero
2
Jul 13
Filter group agentes Event ID not working
Greetings Facu, The issue is the `Path` attribute in your <Query> and <Select> elements.
unread,
Filter group agentes Event ID not working
Greetings Facu, The issue is the `Path` attribute in your <Query> and <Select> elements.
Jul 13
Asmit Desai
,
antonio...@wazuh.com
2
Jul 13
Agentless Monitoring of ModSecurity Events
Hi, First of all, if possible, I recommend installing an agent, since it's the easiest way to do
unread,
Agentless Monitoring of ModSecurity Events
Hi, First of all, if possible, I recommend installing an agent, since it's the easiest way to do
Jul 13
Jaswantha Ragesh
, …
Cristian Padilla López
3
Jul 10
Query Regarding Missing Applications in Wazuh Inventory and Vulnerability Detection
Hi Jaswantha, I would like to complement the information shared by Nazmur The Wazuh Vulnerability
unread,
Query Regarding Missing Applications in Wazuh Inventory and Vulnerability Detection
Hi Jaswantha, I would like to complement the information shared by Nazmur The Wazuh Vulnerability
Jul 10
Ahmed Awwad
,
Md. Nazmur Sakib
8
Jul 10
indexer-connector: WARNING: Failed to sync agent
Sorry for the delay. I was discussing your issue with the internal team. I somehow overlooked some
unread,
indexer-connector: WARNING: Failed to sync agent
Sorry for the delay. I was discussing your issue with the internal team. I somehow overlooked some
Jul 10
Jörg Schin.
,
Marcel Kemp
5
Jul 9
Failed to create the testing environment: Resource with UUID '' does not exist
Thanks for looking into the issues, and it's good to know they've already been identified. I
unread,
Failed to create the testing environment: Resource with UUID '' does not exist
Thanks for looking into the issues, and it's good to know they've already been identified. I
Jul 9
CRIZ
,
Olamilekan Abdullateef Ajani
2
Jul 8
Issue Using Process Paths as Keys in CDB List for Process Creation Whitelisting
Hello, Each line in a CDB list is a unique key which is followed by a colon separator. The forward
unread,
Issue Using Process Paths as Keys in CDB List for Process Creation Whitelisting
Hello, Each line in a CDB list is a unique key which is followed by a colon separator. The forward
Jul 8
Nahid Hasan
,
Stuti Gupta
4
Jul 8
CVE mismatch between Debian security tracker and Wazuh CTI
Hello Stuti, Thank you so much for looking into it. Regards. On Wednesday, July 8, 2026 at 1:48:26 PM
unread,
CVE mismatch between Debian security tracker and Wazuh CTI
Hello Stuti, Thank you so much for looking into it. Regards. On Wednesday, July 8, 2026 at 1:48:26 PM
Jul 8
Paul Charran
,
Stuti Gupta
5
Jul 8
Wazuh Unable to chroot to directory
Hi Paul, Firstly, it is not recommended to change the ownership or permissions of the Wazuh
unread,
Wazuh Unable to chroot to directory
Hi Paul, Firstly, it is not recommended to change the ownership or permissions of the Wazuh
Jul 8
Isaac S.
,
Md. Nazmur Sakib
3
Jul 7
Maximum number of agents in a node
Hello Nazmur Thank you for your response. I understand then that it is important to check the EPS. I
unread,
Maximum number of agents in a node
Hello Nazmur Thank you for your response. I understand then that it is important to check the EPS. I
Jul 7
DIWAHAR RAHAWID
3
Jul 7
Active Response | Working in Older version | Not Working in Newer Version
Hi Team, Please help us with the request. Regards Diwahar On Thursday, July 2, 2026 at 7:41:07 PM UTC
unread,
Active Response | Working in Older version | Not Working in Newer Version
Hi Team, Please help us with the request. Regards Diwahar On Thursday, July 2, 2026 at 7:41:07 PM UTC
Jul 7
Asmit Desai
,
Md. Nazmur Sakib
2
Jul 7
"What data does Wazuh's <integration> block (e.g. Shuffle/custom hook_url) actually send in the outbound POST — full alert JSON or a subset?"
Hi Asmit, It forwards the fields you define in the script from the alerts.json file. For example,
unread,
"What data does Wazuh's <integration> block (e.g. Shuffle/custom hook_url) actually send in the outbound POST — full alert JSON or a subset?"
Hi Asmit, It forwards the fields you define in the script from the alerts.json file. For example,
Jul 7
German DiCasas
,
Jorge Eduardo Silva Jackson
5
Jul 6
GPO Agent install
Hi German, Good question. Let me clarify that point. Centralized configuration itself does not
unread,
GPO Agent install
Hi German, Good question. Let me clarify that point. Centralized configuration itself does not
Jul 6
Gokul Suresh
,
Olamilekan Abdullateef Ajani
6
Jul 6
Vulnerability Detection Queries
Hello Just to clarify, I wasn't saying that it isn't possible to identify active CVEs using
unread,
Vulnerability Detection Queries
Hello Just to clarify, I wasn't saying that it isn't possible to identify active CVEs using
Jul 6
Julien Bard
,
Md. Nazmur Sakib
7
Jul 6
The Wazuh server refuse to start
Thank you for the update. On Monday, July 6, 2026 at 5:37:46 PM UTC+6 bardj...@gmail.com wrote: Hi, I
unread,
The Wazuh server refuse to start
Thank you for the update. On Monday, July 6, 2026 at 5:37:46 PM UTC+6 bardj...@gmail.com wrote: Hi, I
Jul 6