wazuh/wazuh-documentation v5.0.0-beta5

Wazuh v5.0.0 Beta 5

on GitHub

Added

• Added documentation for the reporting plugin in the Wazuh dashboard package generation guide. (#8682)
• Added references for FIM (Syscheck) and inventory (Syscollector) state persistence settings. (#8801)
• Added documentation for SCA state persistence settings. (#8841)
• Added ARM64 support for Linux and macOS WPK packages. (#8851)
• Added integrity_interval to the syscheck synchronization configuration and updated the response_timeout default value. (#9099)
• Added integrity_interval to the SCA and the syscollector synchronization configuration. (#9164)
• Added Upgrading to Wazuh 5.x sub-section to the Upgrade guide. (#9435)
• Added the Data analysis documentation to the User manual. (#9743)
• Added the Migration guide documentation. (#9772) (#9792) (#9817) (#9873) (#10028)
• Added the Security configuration assessment use case to the Proof of concept guide. (#9777)
• Added the Network IDS integration use case to the Proof of concept guide. (#9831)
• Added the Detecting a Cross-Site Scripting (XSS) attack use case to the Proof of concept guide. (#9916)
• Added the Wazuh CTI documentation as a new top-level section. (#9989) (#9990)
• Added the Incident response dashboard section, the Email notification channel, and the AI Assistant configuration documentation to the Wazuh dashboard section. (#10033)
• Added the Installation Assistant and Certs tool documentation to the Reference section. (#10047)

Changed

• Replaced indexer_cluster_initial_master_nodes with indexer_initial_cluster_manager_nodes in Puppet deployment documentation. (#8666)
• Updated the File Integrity Monitoring documentation to remove deprecated settings (max_interval, queue_size, thread_pool, database, and registry_enabled), add the missing check_device setting, and fix the max_eps definition in the synchronization settings table. (#8735)
• Updated the FIM documentation to change the default FIM who-data mode provider to eBPF. (#8805)
• Updated references in steps and links to 5.x. (#8853) (#9658) (#9660)
• Updated version numbers in commands in the Installation from sources documentation. (#9397)
• Updated the Installation guide. (#9545) (#9682) (#9692) (#9736) (#9771) (#9962) (#9968) (#9969) (#9994) (#10002) (#10019)
• Updated the Installation alternatives documentation. (#9587) (#9576) (#9589) (#9591) (#9591) (#9597) (#9606) (#9607) (#9674)
• Updated the Wazuh agent documentation in User manual. (#9665) (#9669) (#9701) (#9702) (#9812) (#9993) (#10035)
• Updated the Wazuh dashboard documentation in User manual. (#9688) (#10033) (#10036)
• Updated the Quickstart documentation. (#9680) (#9769)
• Updated the Wazuh server documentation to the new Wazuh manager documentation in the User manual. (#9728) (#9737)
• Updated the User administration documentation. (#9745) (#9758) (#9765) (#9766) (#9775) (#10040)
• Updated the Monitoring GitHub documentation. (#9836) (#9840) (#9949)
• Updated the Monitoring Office 365 documentation. (#9935)
• Updated the Proof of concept guide use cases for File integrity monitoring, Vulnerability detection, Monitoring Docker events, Detecting an SQL injection attack, Network IDS integration, Monitoring AWS infrastructure, Detecting hidden processes, and Blocking a known malicious actor. (#9777) (#9831) (#9916)
• Updated the Container security documentation. (#9816) (#9819) (#9823)
• Updated the System inventory documentation. (#9820) (#9832)
• Updated the Security configuration assessment capability documentation. (#9834) (#9849)
• Updated the Vulnerability detection capability documentation and added a Use cases section. (#9835) (#9841) (#10018)
• Updated the Command monitoring capability documentation. (#9883) (#9915)
• Updated the File integrity monitoring capability documentation to Wazuh 5.0. (#9961)
• Updated the minimum required password length for Wazuh API users to 12 characters in the Deploying with Kubernetes documentation. (#9941)
• Updated the Using Wazuh for GDPR compliance documentation in Regulatory compliance to Wazuh 5.0. (#9944)
• Updated the Wazuh indexer API reference, removing the non-tracked version number from its page header, grouping its sections by plugin, and fixing a duplicate tag name that could merge two unrelated sections. (#10015) (#10016) (#10017) (#10025) (#10041) (#10042) (#10043) (#10044) (#10048)
• Updated the Using Wazuh for TSC compliance documentation in Regulatory compliance to Wazuh 5.0. (#10027) (#10045)
• Updated the Log data collection capability documentation to Wazuh 5.0, covering Wazuh agent configuration, collecting logs from files and operating systems, log data analysis, and new use cases. (#10034) (#10037)
• Updated the Reference documentation to Wazuh 5.0, splitting the local configuration reference into separate wazuh-manager.conf and ossec.conf sections, renaming manager daemons and tools with the wazuh-manager- prefix, updating the internal configuration, daemons, and tools references, and removing documentation for configuration sections and CLI tools no longer supported in Wazuh 5.0. (#10047)

Removed

• Removed all agent-auth references as this tool is now deprecated. (#8718)
• Removed compatibility.override_main_response_version setting from Wazuh Indexer configuration as it is no longer supported in OpenSearch 3.0. (#8609)
• Removed several Rootcheck configuration options and added a corresponding note to the central components upgrade guide. (#8759)
• Removed references to the server version of the manage_agents tool. (#8792)
• Removed cron.prefix, cron.statistics.*, and wazuh.monitoring.* configuration settings from the Wazuh dashboard. (#8790)
• Removed references to deprecated client communication and FIM configuration options. (#8809)
• Removed documentation and references to deprecated Wazuh Manager daemons: wazuh-agentlessd, wazuh-csyslogd, wazuh-dbd, wazuh-integratord, wazuh-maild, and wazuh-reportd. (#8778)
• Removed documentation and references to deprecated CLI tools: clear_stats, update_ruleset, and wazuh-regex. (#8778)
• Removed documentation to deprecated fluent-forward tool. (#8778)
• Removed support for legacy operating systems, including Red Hat 5, CentOS 5, Oracle Linux 5, SUSE Linux Enterprise Server 11, AIX, HP-UX, Solaris, Windows XP, Windows Vista, and Windows Server 2003. (#8894)
• Removed deprecated configuration variables in the Deployment with Puppet documentation. (#9378)
• Removed Osquery references as this capability is now deprecated. (#8958)