Hello Jack,
At the moment, Wazuh 5 is still in beta, not a stable production release. The latest stable release is still Wazuh 4.14.7, released on 29 July 2026.
Wazuh 5.0.0 is available as a beta and it is marked as v5.0.0 Beta 4.
https://github.com/wazuh/wazuh/releasesSo for production, I would recommend staying on the latest 4.x release for now and using Wazuh 5 only in a lab or test environment.
The main thing I would like to mention is that Wazuh 5 is not just a normal upgrade. It introduces major architectural changes. The 5.0 beta documentation says in-place upgrades from 4.x are not supported. You need to deploy a new Wazuh 5.x environment and recreate supported configuration, certificates, and security settings. It also says indexed data from 4.x cannot be migrated because the index schemas and mappings are different.
https://documentation.wazuh.com/5.0-beta/transitioning-from-4x-to-5x/index.htmlThe major changes include:
New detection/data analysis engine
Findings replacing alerts in the new engine model
New manager configuration path
Changes to indexer compatibility settings
No direct copy of old 4.x config files
No migration of old indexed data/snapshots
The Wazuh 5 beta docs also show the new data analysis model, where "findings" serve the same role that alerts served in Wazuh 4.x, so there is a shift.
For now, I would suggest you:
Use the current Wazuh 4.X for production.
Build a separate Wazuh 5 beta lab.
Test your custom rules, decoders, integrations, dashboards, and agent compatibility.
Do not migrate production until Wazuh 5 is officially stable.
Keep historical 4.x data in the old environment if needed.
Ref:
https://documentation.wazuh.com/current/release-notes/index.htmlhttps://documentation.wazuh.com/5.0-beta/https://documentation.wazuh.com/5.0-beta/transitioning-from-4x-to-5x/index.htmlhttps://github.com/wazuh/wazuh/releasesIn summary, I would suggest not treating Wazuh 5 as production-ready yet. Use it for evaluation and migration testing only until the official stable release is published.