Add post action after a content upgrade

wazuh / wazuh

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

https://wazuh.com/

Other

9.44k stars 1.49k forks source link

Add post action after a content upgrade #23482

Closed Dwordcito closed 1 week ago

Dwordcito commented 2 weeks ago

Description

This issue aims to add a post action after a content upgrade to force a complete rescan.

This behavior should be orchestrated as a full rescan and should be run for all items in the local inventory. If the agent is offline, items should not be indexed at that time, but should be added to the index database, so that when they come online, synchronization takes place and exposes the documents into the index.

Rebits commented 1 week ago

This issue seems to be affecting Vulnerability Detection E2E (https://github.com/wazuh/wazuh-qa/issues/5397#issuecomment-2124334542)

Report: Test_e2e_system_289_test_vulnerability_detector.zip

This behavior is also evident in the report found at https://github.com/wazuh/wazuh/issues/23523 with modules debug enabled.