Wazuh agents online but not hitting manager.

[Defence Technology]

Good day team,

The wazuh agents shows online in wazuh manager UI, but seems there is no security

events and also FIM.

Please assist to solve this issue.

Much appreciate.

[Anthony Faruna]

Hello 

Thank you for using Wazuh 

There is a possibility that alerts are not been generated 

Please check the logs to see if alerts are generated with this command: tail -n5 /var/ossec/logs/alerts/alerts.json and share the output with me 

Best Regards

[Defence Technology]

Hi Anthony,

Thank you for reply.

I've attached the output screenshot.

[Anthony Faruna]

Hello

The screenshot you shared shows that the time of the agent and the manager are different

Please confirm the time zone of both the agent and the manager.

Then login to the dashboard and confirm if the events are reporting 

Best Regards

--
You received this message because you are subscribed to a topic in the Google Groups "Wazuh mailing list" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/wazuh/pJxoONttrf4/unsubscribe.
To unsubscribe from this group and all its topics, send an email to wazuh+un...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/wazuh/1ee90689-6351-46a8-8117-725789e16128n%40googlegroups.com.

[Defence Technology]

Hi Anthony,

Thank you for your reply.

I have check the Ubuntu wazuh manager time and wazuh windows agent time are following +0800 Standard Singapore Time.