Configuration SYNCHRONIZED NOT SYNCHRONIZED
Edit configuration Main configurations
Name Description
Global configuration Global and remote settings
Cluster Master node configuration
Registration service Automatic agent registration service
Name Description
Global configuration Logging settings that apply to the agent
Communication Settings related to the connection with the manager
Anti-flooding settings Agent bucket parameters to avoid event flooding
Labels User-defined information about the agent included in alerts
Alerts and output management
Name Description
Alerts Settings related to the alerts and their format
Integrations Slack, VirusTotal and PagerDuty integrations with external APIs
Auditing and policy monitoring
Name Description
Policy monitoring Configuration to ensure compliance with security policies, standards and hardening guides
OpenSCAP Configuration assessment and automation of compliance monitoring using SCAP checks
CIS-CAT Configuration assessment using CIS scanner and SCAP checks
System threats and incident response
Name Description
Vulnerabilities Discover what applications are affected by well-known vulnerabilities
Osquery Expose an operating system as a high-performance relational database
Inventory data Gather relevant information about system OS, hardware, networking and packages
Active response Active threat addressing by inmmediate response
Active response Active threat addressing by inmmediate response
Commands Configuration options of the Command wodle
Docker listener Monitor and collect the activity from Docker containers such as creation, running, starting, stopping or pausing events
Log data analysis
Name Description
Log collection Log analysis from text files, Windows events or syslog outputs
Integrity monitoring Identify changes in content, permissions, ownership, and attributes of files
Agentless Run integrity checks on devices such as routers, firewalls and switches
Cloud security monitoring
Name Description
Amazon S3 Security events related to Amazon AWS services, collected directly via AWS API
More info about this section Wazuh administration documentation Wazuh capabilities documentation Local configuration reference