Vulnerabilities not showing CVEs

[DerGast01]

Hi at all!
I'm using Wazuh (the latest version, on Ubuntu) for a Windows Environment.
I've activated the Vulnarabilities Scan. It works fine for some Clients and Servers, but not for all! :)
I reinstalled the Wazuh Agent (4.4.2.1), but there is no input, although there is a "Last Scan time" showing.
The ossec Conf. on the Agent is the same like the other Agents.

Any ideas?

Kind regards
Daniel

[Tostti]

Hello @DerGast01, hope you are well!

I will be helping you to solve this issue, I have a few questions:

• Which version of Windows have the agents that are failing?
• Are you applying syscollector configuration via Centralized configuration?

The log Unable to send file 'merged.mg' to agent ID '020' indicates that there was a problem in the communication between the server and the agent to send the file. Part of that file contains the configuration applied via Centralized configuration, meaning that if Syscollector was configured there, it is possible that the agent didn't receive the information.
To verify that, you can navigate to <installation path>/shared/agent.conf and verify if its content is the expected.

I will be looking forward to your answer!

Kind regards,

[DerGast01]

Hey Tostti!
Thank you for your reply.
I posted my problem also in this group.
wazuh/wazuh#17294
Maybe there are some helpful Information for you/me?

[Tostti]

Hi @DerGast01, I see that a coworker was already providing support in wazuh/wazuh#17294.
In that case, I will proceed to close this issue and refer it in the other thread so all the information is in the same place.
Have a great day!