wazuh-dashboard
wazuh-dashboard copied to clipboard
Vulnerability detector module not showing any events after initial scan
Describe the bug
The Vulnerability Detection module is not showing any alerts in the Events tab after the baseline scan.
According to the team, this is expected because the baseline scan goes to the wazuh-states-vulnerabilities index (used in Dashboard and Inventory) and the vulnerability detector alerts go to wazuh-events-* indices (used in Events).
However, I do think we should consider including the alerts generated in the initial scan in the list to be consistent with the ones generated by the vulnerability detector on subsequent scans.
To Reproduce
Steps to reproduce the behavior:
- Setup an all-in-one manager
- Add a linux agent
- Go to the Vulnerability Detection module
- See the alerts generated
- Go to the Events tab
- See
"No results match your search criteria"message
Expected behavior The Events tab shows the list of events generated during the baseline scan.
Screenshots
Images
Host/Environment (please complete the following information):
- OS: Ubuntu 22.04
- Browser and version [e.g. 22]: Firefox 121.0.1
This is not an issue with the dashboard, the change is related to the expected behaviour of the new VD (see comment)