Wazuh | Mailing List

Hi, Yes, the workaround I shared is a bit complicated, and you can reduce duplicate events by

Hi Chic Check this latest decoder i worked on , it covers the fields you mentionned. In case you need

Hi CreativeWolf. As a wrap-up, you're trying to stop showing some vulnerabilities in the

Jorge, I am getting the volumes that need to be r/w working. But, I am running into an interesting

Im changing my wazuh api password by api curl -u "wazuh:newpassword" -k -X GET "https:

Hi, For a clean server restart with Wazuh 4.9, there is a recommended order based on component

Hi, The reason you get this error "AxiosError: Error getting the authorization token" is

Good afternoon! I've made some adjustments to the ctx.Alerts.0 design. I'm aggregating by

Hi Chandra, The logs contain entries like the following: LOG: connection received: host=... port=...

Hi Arsal, Could you share your <key_request> configuration and the script you are using? Please

It is an AIO architecture Attachment command results El martes, 3 de febrero de 2026 a las 9:29:12

Try Check by selecting explorer agent On Mon, Feb 2, 2026, 2:48 PM Aamir Sohail <rana.prince0508@

I'm trying to collect active agents by API its self hosted docker single node Em segunda-feira, 2

Thanx dear , understood but the issue is that there is a specific time window during which a known

Hey, Cedrick! Thanks, will try that! cheers chic Cedrick Foko schrieb am Donnerstag, 29. Januar 2026

Hello Suvadip, I've created new decoders for the logs you sent me. Please replace the decoders

Hello team, while downloading csv reports, only 10k lines are exporting and the alerts or data is in

Hi Himanshu, Sorry for the delay. These are the logs in /var/ossec/logs/integration.log /tmp/

Hi Facu, We should probably review the event triggering rule 60204. Could you share the raw event so

Hello , The reason your rule did not work is because, from what you shared, you used if_matched_sid

Hi, I'd like to clarify a point from my previous response. Since srcip is a static (built-in)

Hi Tengku, The issue you are facing are noise coming from docker, kube8, containerd. You can suppress

Hi Akshay, First of all, verify the FortiGate alerts are generating on the alerts.json file: /var/

Thanks!! It's really works! вторник, 27 января 2026 г. в 15:40:05 UTC+3, John Adewale Olatunde:

Hi, Apologies for the late response. For monitoring network-level attacks, you can consider

Hello @Richmond, Apologies for the delayed response, and thank you for your reply. Please find below

Hi Marcos, It works! Great! I also applied the same to "filebeat-7.10.2-wazuh-archives-pipeline

Hello, i have ERRORS in my wazuh-cluster.log [2026-01-30T14:11:17378][ERROR][oonct

Veera: Thanks for the detailed explanation of both cases. When should FIM events be expected after a

Hello, Glad to help! I tried this validator and it seemed to work -> https://www.liquid-