Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Vulnerability detector module not showing any events after initial scan #155

Open
GGP1 opened this issue Mar 14, 2024 · 1 comment
Open

Comments

@GGP1
Copy link
Member

GGP1 commented Mar 14, 2024

Describe the bug

The Vulnerability Detection module is not showing any alerts in the Events tab after the baseline scan.

According to the team, this is expected because the baseline scan goes to the wazuh-states-vulnerabilities index (used in Dashboard and Inventory) and the vulnerability detector alerts go to wazuh-events-* indices (used in Events).

However, I do think we should consider including the alerts generated in the initial scan in the list to be consistent with the ones generated by the vulnerability detector on subsequent scans.

To Reproduce

Steps to reproduce the behavior:

  1. Setup an all-in-one manager
  2. Add a linux agent
  3. Go to the Vulnerability Detection module
  4. See the alerts generated
  5. Go to the Events tab
  6. See "No results match your search criteria" message

Expected behavior
The Events tab shows the list of events generated during the baseline scan.

Screenshots

Images

ubuntu_2
ubuntu_3
ubuntu_4

Host/Environment (please complete the following information):

  • OS: Ubuntu 22.04
  • Browser and version [e.g. 22]: Firefox 121.0.1
@sebasfalcone
Copy link
Member

This is not an issue with the dashboard, the change is related to the expected behaviour of the new VD (see comment)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants