Nicolás Mariano Koremblum

As part of the issue, Wazuh's SCA decoder has been tested, and some of the logs collected at the end of the operations chain (after being processed) are the following:...

The problem seems to be that you have installed the package and immediately tried to unload the service. On this issue: https://github.com/wazuh/wazuh/issues/21636, the service has been modified to not be...

Hi @wazuh-seguinfo, When you say that not all the information is decoded, how do you know? Can you share the output with us? And also what would the expected output...

Do you happen to have the archives (json) enabled? You can check that out on the `ossec.conf` file (label `logall_json`)

Yes, indeed. I need the full complete log, without modifications (just the minimal needed to hide sensitive information). I tried to test the log that you have shared with us,...

Hi again @wazuh-seguinfo, how are you collecting these logs?

Ok, I understand, how is your configuration to collect such logs? (`ossec.conf` configuration)

I am sorry for the confusion, could you please share with us your agent's `ossec.conf` file?

> Rechecking of the above comment through Github actions, with [this PR](https://github.com/wazuh/wazuh/pull/23334) ( modified some files to force the same ITs as in this issue) the results were: > ##...

I either was able to reproduce the errors of `test_wazuh_db` ```bash root@30-u22-manager:~# python3 -m pytest -s -l /root/wazuh/tests/integration/test_wazuh_db/test_databases/test_wazuh_db.py ======================================== test session starts ========================================= platform linux -- Python 3.10.12, pytest-7.1.2, pluggy-1.4.0...