Security configuration assessment Wazuh Help!

[TheLotus 24]

Could someone explain to me why when I correct a bad configuration, that change is not reflected, the number of corrections does not decrease.

[Md. Nazmur Sakib]

Hi TheLotus,

Good Day!

Based on my findings you need to restart the endpoint after hardening your endpoint to reflect it immediately on the Wazuh Dashboard otherwise it will reflect after the interval time as defined in the configuration.

  <sca>

    <enabled>yes</enabled>

    <scan_on_start>yes</scan_on_start>

    <interval>12h</interval>

    <skip_nfs>yes</skip_nfs>

  </sca>

If they still do not reflect on your Dashboard. Recheck if you are configuring it correctly and share the control ID of CIS.

Let me know the update on the issue.

[Md. Nazmur Sakib]

Hi  TheLotus

Let me know if you need any further assistance on this.