Wazuh agent not showing any events or other data after successfull registration

[Milan Patel]

Hello,

I have deployed wazuh agent 4.3.10 and it shows just system inventory data but I would like to see All kind of data like Security events, Integrity monitoring, System audit, Vulnerability scan.

I configured everything but not seeing anything yet.

Could you please help me to resolve this issue.

Thanks,

[Abdullah Al Rafi Fahim]

Hello Milan,

Thank you for using Wazuh!

Are you facing this issue for all of your agents or only one specific agent? Can you please let us know OS of the agent machine and status of the agent (active/disconnected)?

I would like to suggest you to review this documentation to understand the capabilities like File Integrity Monitoring, Vulnerability Detection etc., how they work and how to configure them properly: https://documentation.wazuh.com/current/user-manual/capabilities/index.html

If the agent is active and you have enabled and configured the capabilities according to the documentation, you can also check if the alerts are generating in the alerts.json file of Wazuh Manager with the logs collected from the agents with the following command:

tail -f /var/ossec/logs/alerts/alerts.json

I hope it helps. Please let us know the updates regarding the configuration and troubleshoot.