Skip to content

Wazuh v3.2.3 - Kibana v6.2.4

Compare
Choose a tag to compare
@JuanjiJG JuanjiJG released this 01 Jun 18:27

Highlights for this version

  • Support for Wazuh v3.2.3.
  • New functionality - Reporting (#510):
    • Generate PDF logs on the Overview and Agents tabs, with the new button next to Panels and Discover.
    • The report will contain the current visualizations from the tab where you generated it.
    • List all your generated reports, download or deleted them at the new Management/Reporting tab.
    • Warning: If you leave the tab while generating a report, the process will be aborted.
  • Added warning/error messages about the total RAM on the server side (#502):
    • None of this messages will prevent the user from accessing the app, it's just a recommendation.
    • If your server has less than 2GB of RAM, you'll get an error message when opening the app.
    • If your server has between 2GB and 3GB of RAM, you'll get a warning message.
    • If your server has more than 3GB of RAM, you won't get any kind of message.
  • Refactoring and added loading bar to Manager Logs and Groups tabs (#505).
  • Added more Syscheck options to Management/Agents configuration tabs (#509).
  • Brand-new extension - GDPR Alerts (#453):
    • A new extension, enabled by default.
    • Visualize alerts related to the GDPR compliance on the Overview and Agents tabs.
    • The Ruleset tab has been updated to include GDPR filters on the Rules subtab.
  • Brand-new Management tab - Monitoring (#490):
    • Visualize your Wazuh cluster, both master and clients.
      • Get the current cluster configuration.
      • Nodes listing, sorting, searching, etc.
    • Get a more in-depth cluster status thanks to the newly added Timelion visualizations.
    • The Detail view gives you a summary of the node's healthcheck.
  • Brand-new tab - Dev tools (#449):
    • Find it on the top navbar, next to Discover.
    • Execute Wazuh API requests directly from the app.
    • This tab uses your currently selected API from Settings.
    • You can type different API requests on the input window, select one with the cursor, and click on the Play button to execute it.
    • You can also type comments on the input window.
  • More improvements for the Manager/Ruleset tab (#446):
    • A new colour palette for regex, order and rule description arguments.
    • Added return to List view on Ruleset button while on Detail view.
    • Fixed line height on all table headers.
    • Removed unused, old code from Ruleset controllers.
  • Added option on config.yml to enable/disable the wazuh-monitoring index (#441):
    • Configure the frequency time to generate new indices.
    • The default frequency time has been increased to 1 hour.
    • When disabled, useful metrics will appear on Overview/General replacing the Agent status visualization.
  • Added CSV exporting button to the app (#431):
    • Implemented new logic to fetch data from the Wazuh API and download it in CSV format.
    • Currently available for the Ruleset, Logs and Groups sections on the Manager tab and also the Agents tab.
  • More refactoring to the app backend (#439):
    • Standardized error output from the server side.
    • Drastically reduced the error management logic on the client side.
    • Applied the Facade pattern when importing/exporting modules.
    • Deleted unused/deprecated/useless methods both from server and client side.
    • Some optimizations to variable type usages.
  • Refactoring to Kibana filters management (#452 & #459):
    • Added new class to build queries from the base query.
    • The filter management is being done on controllers instead of the discover directive.
    • Now we are emitting specific events whenever we are fetching data or communicating to the discover directive.
    • The number of useless requests to fetch data has been reduced.
    • The synchronization actions are working as expected regardless the amount of data and/or the number of machine resources.
    • Fixed several bugs about filter usage and transition to different app tabs.
  • Added confirmation message when the user deletes an API entry on Settings/API (#428).
  • Added support for filters on the Manager/Logs tab when realtime is enabled (#433).
  • Added more filter options to the Detail view on Manager/Ruleset (#434).

Take a look at the changelog file for a complete list of what's new on this release.