Attributed metadata history
Up to 100 retained publisher events per page for 9902bcf78e2eb5c86d006d23122a777cf867a29c9baff6025b1e1034719440ca. Withdrawals and unavailable references remain attributed to their publishers.
intelligence_src_6e56cdca02629afcb8
observed · 2026-10-12 11:05:04 UTC
[v5.0.0] Manager Added Issue Comment #38260 Added HTTPS communication between Wazuh agents and the manager: a new HTTPS transport, protocol, and control plane (connection, configuration, statistics, task dispatch, remote upgrade, and event ingestion) replacing the legacy MQ/DGRAM-based agent-manager protocol end to end. #31295 Added cluster-by-default deployment model: all Wazuh Server installations now run as a cluster node, removing the distinction between clustered and non-clustered deployments. The cluster.disabled configuration option has been removed. #33269 Added stateless metadata enrichment in remoted, centralizing event metadata handling for stateless messages and removing the dependency on wazuh-db for that ingestion path. #33493 Added Engine enrichment support: IOC matching, GeoIP lookup, and event filters. #34477 Added Engine adaptation tier 2: raw archives handling, uncategorized event routing, input-level throttling, and internal metrics exposure. #35623 Added CVSS v4.0 support to the Vulnerability Scanner. #35771 Added Engine metrics collection, normalization, and indexing pipeline. #36000 Added new CVE 5.0 schema fields to the Vulnerability Det
Fingerprint: f2abdabb4d0685b5ac3904106752f66b71307c2dc6e50d67fe19151cb38e3ca0
intelligence_src_6e56cdca02629afcb8
observed · 2026-10-12 11:05:04 UTC
available
Fingerprint: 67a9303dea08fdf586258ed70c3764ab9ece1f2df43973acd476cc303b42522d