Vikman Fernandez-Castro
Vikman Fernandez-Castro
https://github.com/wazuh/wazuh/issues/15196 was already closed. Unblocking this issue.
@juliamagan I think this is a duplicate of https://github.com/wazuh/wazuh-packages/issues/2195.
@juliamagan confirmed that this happens in older versions. Thus, this is not a stopper.
Switching objective to: - https://github.com/wazuh/wazuh-packages/issues/2904
@oliveiralive Sorry for the late response. 4.3.0 introduced a change in the ruleset parser (#10720) that relaxed the restrictions: - If a rule ID is duplicated, the rule is simply...
Removing ETA as we're prioritizing other issues.
This issue may be related to: - #14018 - #14190
Hi, Having the same issue in Audit 2.4 (on Ubuntu 16.04) - 2.8 (on CentOS 7): Command: ```sh [root@centos ~]# rm-rf /home/vagrant/test ``` Log fragment: ``` type=SYSCALL msg=audit(1568884449.796:774): arch=c000003e syscall=263...
@pcmoore Thank you for your prompt response. We had this issue on the following systems: |Distro|Kernel|Audit| |---|---|---| |CentOS 7|3.10.0-957.21.3.el7.x86_64|2.8.4| |Ubuntu 16.04|4.15.0-62-generic|2.4.5| And it seems to work on: |Distro|Kernel|Audit| |---|---|---| |Fedora...
@sempervictus The determination of the agent's IP must happen in each agent. The agent sends its IP address within the notify (keepalive-like) message. The manager is limited to storing it...