search

wazuh / wazuh-documentation

Wazuh - Project documentation
https://wazuh.com
193 stars 337 forks source link

wazuh-modulesd: WARNING: The 'vulnerability-detector' configuration is deprecated, please update your settings to use the new 'vulnerability-detection' instead #7404

Open peerlesssec opened 3 months ago

peerlesssec commented 3 months ago

Today we have upgraded our Wazuh from 4.7 to 4.8 and received the message in vulnerability dashboard "Vulnerability detection seems to be disabled or has a problem Please check the cluster status. Also, you can check the vulnerability detection documentation.

I have changed the ossec.conf file as:

yes yes 5m 60m 6h yes ...... .......

Please help to fix the issue.

Thanks & Regards, Suman Banerjee

peerlesssec commented 3 months ago

Output of command: cat /var/ossec/logs/ossec.log | grep -i -E "vulnerability"

2024/06/14 19:55:07 wazuh-modulesd: WARNING: The 'vulnerability-detector' config uration is deprecated, please update your settings to use the new 'vulnerability -detection' instead (default values will be used based on your previous configur ations). See https://documentation.wazuh.com 2024/06/14 19:55:13 wazuh-modulesd: WARNING: The 'vulnerability-detector' config uration is deprecated, please update your settings to use the new 'vulnerability -detection' instead (default values will be used based on your previous configur ations). See https://documentation.wazuh.com 2024/06/14 19:55:14 wazuh-modulesd:vulnerability-scanner: INFO: Stopping vulnera bility_scanner module. 2024/06/14 19:55:32 wazuh-modulesd: WARNING: The 'vulnerability-detector' config uration is deprecated, please update your settings to use the new 'vulnerability -detection' instead (default values will be used based on your previous configur ations). See https://documentation.wazuh.com 2024/06/14 19:55:32 wazuh-modulesd:vulnerability-scanner: INFO: Starting vulnera bility_scanner module. 2024/06/14 19:55:44 wazuh-modulesd:vulnerability-scanner: INFO: Vulnerability sc anner module started 2024/06/14 20:16:26 wazuh-modulesd: WARNING: The 'vulnerability-detector' config uration is deprecated, please update your settings to use the new 'vulnerability -detection' instead (default values will be used based on your previous configur ations). See https://documentation.wazuh.com 2024/06/14 20:16:29 wazuh-modulesd: WARNING: The 'vulnerability-detector' config uration is deprecated, please update your settings to use the new 'vulnerability -detection' instead (default values will be used based on your previous configur ations). See https://documentation.wazuh.com 2024/06/14 20:20:38 wazuh-modulesd:vulnerability-scanner: INFO: Stopping vulnera bility_scanner module. 2024/06/14 20:20:55 wazuh-modulesd:vulnerability-scanner: INFO: Starting vulnera bility_scanner module. 2024/06/14 20:20:56 wazuh-modulesd:vulnerability-scanner: INFO: Vulnerability sc anner module started 2024/06/14 20:25:01 wazuh-modulesd:vulnerability-scanner: INFO: Stopping vulnera bility_scanner module. 2024/06/14 20:26:44 wazuh-modulesd:vulnerability-scanner: INFO: Starting vulnera bility_scanner module. 2024/06/14 20:27:10 wazuh-modulesd:vulnerability-scanner: INFO: Vulnerability sc anner module started 2024/06/14 20:37:32 wazuh-modulesd:vulnerability-scanner: INFO: Stopping vulnera bility_scanner module. 2024/06/14 20:37:48 wazuh-modulesd:vulnerability-scanner: INFO: Starting vulnera bility_scanner module. 2024/06/14 20:37:57 wazuh-modulesd:vulnerability-scanner: INFO: Vulnerability sc anner module started 2024/06/14 20:46:49 wazuh-modulesd:vulnerability-scanner: INFO: Stopping vulnera bility_scanner module. 2024/06/14 20:47:04 wazuh-modulesd:vulnerability-scanner: INFO: Starting vulnera bility_scanner module. 2024/06/14 20:47:05 wazuh-modulesd:vulnerability-scanner: INFO: Vulnerability sc anner module started

davidcr01 commented 2 months ago

Hello.

As it is said in the logs, the Vulnerability Detector module has been deprecated, and now it is refactored to the Vulnerability Detection module. If you have upgraded to 4.8, it is expected the old Vulnerability Detector does not work. More related information is here.

To solve this issue, we have dedicated documentation that explains how to migrate to this new module. Please, take a look to it: https://documentation.wazuh.com/current/user-manual/capabilities/vulnerability-detection/configuring-scans.html#configuring-vulnerability-detection.

Hope it helps!