You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Question:
How can I get the agent.labels.group field to appear in the wazuh-states-vulnerabilities-* index so that I can filter and group vulnerabilities by this field?
Suggestions for improvement:
I found a similar improvement with adding a field in this issue #157.
Please improve similar functionality for labels.
The text was updated successfully, but these errors were encountered:
Background:
I found a post at https://groups.google.com/g/wazuh/c/IJMvVJh21wI
I looked at the functionality described at https://documentation.wazuh.com/current/user-manual/agents/labels.html
My current situation:
When distributing wazuh agents via an ansible role (https://github.com/wazuh/wazuh-ansible/tree/master/roles/wazuh/ansible-wazuh-agent) I give them an additional parameter label in ossec.conf. The result is
As a result, I can see new messages in the wazuh-alerts-* index
Sample message:
Question:
How can I get the agent.labels.group field to appear in the wazuh-states-vulnerabilities-* index so that I can filter and group vulnerabilities by this field?
Suggestions for improvement:
I found a similar improvement with adding a field in this issue #157.
Please improve similar functionality for labels.
The text was updated successfully, but these errors were encountered: