Hello Jack, I checked this further on a Wazuh 5.0 instance, and I need to clarify one thing. Event ID

Hello Hasitha, It works for me. Thank you so much for your help, really appreciate it! On Saturday, 8

Hi Victor, At my office i have Sophos XGS2100/SFOS22.0 MR1→Wazuh4.14.x, could you provide the

Good morning, I believe I may not have explained the issue clearly enough before, so I will try to

Hello CRTZ, FIM monitors file system changes to detect the creation, modification, and deletion of

Hi Chukwudalu Chisimdi Okonkwo, Thanks for your support Regards, On Tuesday, August 4, 2026 at 2:52:

Thank you for the detailed information and the screenshots — that helped us confirm the cause. This

Hello Kamran, I have reviewed your Windows agent.conf file and here are a couple that will help you

What kind of custom configuration you would like to do will depend on what type of logs you want to

Hello. There is indeed a limit on the event size, but it's not the limit that's causing your

Hi, Thank you for your valuable response. I will try the methods you mentioned above and will get

Hello Jack, At the moment, Wazuh 5 is still in beta, not a stable production release. The latest

Hello, When I said export/save important config files, I took the reference from the Wazuh back up

Hello, Thank you for your answer. The file modifications were done on the host, not inside the

Ok. I am waiting your response среда, 5 августа 2026 г. в 16:17:36 UTC+4, Stuti Gupta: Hi In the

Reference Links: https://documentation.wazuh.com/current/user-manual/capabilities/log-data-collection

Hi, Without tenants, you cannot restrict a user to a single dashboard. Dashboards are stored in the

Hi , Sorry for the very delayed response to your request. We're using central configuration to

Increasing the RAM on the Wazuh server can solve this problem. It's possible to use large CDB

Hello, Wazuh can help with this, but mainly through log collection. The agent on the Docker host can

Hi, The O365 wodle ingests data from the Office 365 Management Activity API. Within that API, Azure

Thank you so much for the help On Monday, July 27, 2026 at 5:31:16 PM UTC+5:30 hasitha.upekshitha@

For this config file to persist even after the configuration changes, you can bind the file to an

Hi yazid, First, please check alerts.log and verify whether today's alerts are present. If there

Hello, A decoder can only extract values that already exist in the log, and a rule <field> is

Hi Max, A few things I will share with you that will help you understand the architecture better and

Hi, thank you for providing the detailed information and for sharing the troubleshooting steps you

Thanks a lot it works , I will let you know for more logs On Thursday, July 30, 2026 at 2:06:46 AM

Hi Stuti, It's resolved! Those permissions were needed under Cluster_permissions, not

Hi Rahul, Yes, your understanding is correct. I am sharing my test results for your reference. I have