You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
|`wazuh‑alerts`| Stores alerts generated by the [Wazuh Server](https://documentation.wazuh.com/current/getting-started/components/wazuh-server.html). These are created each time an event trips a rule with a high enough severity (this threshold is configurable). |
17
-
|`wazuh‑archives`| Stores all events (archive data) received by the [Wazuh Server](https://documentation.wazuh.com/current/getting-started/components/wazuh-server.html), whether they trip a rule. |
|`wazuh-states-fim-files`| File Integrity Monitoring: information about monitored files. |
20
-
|`wazuh-states-fim-registry-keys`| File Integrity Monitoring: information about the Windows registry (keys). |
21
-
|`wazuh-states-fim-registry-values`| File Integrity Monitoring: information about the Windows registry (values). |
22
-
|`wazuh-states-inventory-browser-extensions`| Stores browser extensions/add-ons detected on the endpoint (Chromium-based browsers — Chrome/Edge/Brave/Opera —, Firefox, and Safari). |
23
-
|`wazuh-states-inventory-groups`| Stores existing groups on the endpoint. |
24
-
|`wazuh-states-inventory-hardware`| Basic information about the hardware components of the endpoint. |
25
-
|`wazuh-states-inventory-hotfixes`| Contains information about the updates installed on Windows endpoints. This information is used by the vulnerability detector module to discover what vulnerabilities have been patched on Windows endpoints. |
26
-
|`wazuh-states-inventory-interfaces`| Stores information (up and down interfaces) as well as packet transfer information about the interfaces on a monitored endpoint. |
27
-
|`wazuh-states-inventory-monitoring`| Stores the connection status history of Wazuh agents (active, disconnected, pending, or never connected). The index is used by the Wazuh Dashboard to display agent status and historical trends. |
28
-
|`wazuh-states-inventory-networks`| Stores the IPv4 and IPv6 addresses associated with each network interface, as referenced in the `wazuh-states-inventory-interfaces` index. |
29
-
|`wazuh-states-inventory-packages`| Stores information about the currently installed software on the endpoint. |
30
-
|`wazuh-states-inventory-ports`| Basic information about open network ports on the endpoint. |
31
-
|`wazuh-states-inventory-processes`| Stores the detected running processes on the endpoints. |
32
-
|`wazuh-states-inventory-protocols`| Stores routing configuration details for each network interface, as referenced in the `wazuh-states-inventory-interfaces` index. |
33
-
|`wazuh-states-inventory-services`| Stores system services detected on the endpoint (Windows Services, Linux systemd units, and macOS launchd daemons/agents). |
34
-
|`wazuh-states-inventory-system`| Operating system information, hostname and architecture. |
35
-
|`wazuh-states-inventory-users`| Stores existing users on the endpoint. |
36
-
|`wazuh-states-vulnerabilities`| Active vulnerabilities on the endpoint and its details. |
37
-
|`wazuh-statistics`| Stores statistics about the Wazuh Server usage and performance. The information includes the number of events decoded, bytes received, and TCP sessions. |
|`wazuh‑alerts`| Stores alerts generated by the [Wazuh Server](https://documentation.wazuh.com/current/getting-started/components/wazuh-server.html). These are created each time an event trips a rule with a high enough severity (this threshold is configurable). |
17
+
|`wazuh‑archives`| Stores all events (archive data) received by the [Wazuh Server](https://documentation.wazuh.com/current/getting-started/components/wazuh-server.html), whether they trip a rule. |
|`wazuh-states-fim-files`| File Integrity Monitoring: information about monitored files. |
20
+
|`wazuh-states-fim-registry-keys`| File Integrity Monitoring: information about the Windows registry (keys). |
21
+
|`wazuh-states-fim-registry-values`| File Integrity Monitoring: information about the Windows registry (values). |
22
+
|`wazuh-states-inventory-browser-extensions`| Stores browser extensions/add-ons detected on the endpoint (Chromium-based browsers — Chrome/Edge/Brave/Opera —, Firefox, and Safari). |
23
+
|`wazuh-states-inventory-groups`| Stores existing groups on the endpoint. |
24
+
|`wazuh-states-inventory-hardware`| Basic information about the hardware components of the endpoint. |
25
+
|`wazuh-states-inventory-hotfixes`| Contains information about the updates installed on Windows endpoints. This information is used by the vulnerability detector module to discover what vulnerabilities have been patched on Windows endpoints. |
26
+
|`wazuh-states-inventory-interfaces`| Stores information (up and down interfaces) as well as packet transfer information about the interfaces on a monitored endpoint. |
27
+
|`wazuh-states-inventory-monitoring`| Stores the connection status history of Wazuh agents (active, disconnected, pending, or never connected). The index is used by the Wazuh Dashboard to display agent status and historical trends. |
28
+
|`wazuh-states-inventory-networks`| Stores the IPv4 and IPv6 addresses associated with each network interface, as referenced in the `wazuh-states-inventory-interfaces` index. |
29
+
|`wazuh-states-inventory-packages`| Stores information about the currently installed software on the endpoint. |
30
+
|`wazuh-states-inventory-ports`| Basic information about open network ports on the endpoint. |
31
+
|`wazuh-states-inventory-processes`| Stores the detected running processes on the endpoints. |
32
+
|`wazuh-states-inventory-protocols`| Stores routing configuration details for each network interface, as referenced in the `wazuh-states-inventory-interfaces` index. |
33
+
|`wazuh-states-inventory-services`| Stores system services detected on the endpoint (Windows Services, Linux systemd units, and macOS launchd daemons/agents). |
34
+
|`wazuh-states-inventory-system`| Operating system information, hostname and architecture. |
35
+
|`wazuh-states-inventory-users`| Stores existing users on the endpoint. |
36
+
|`wazuh-states-vulnerabilities`| Active vulnerabilities on the endpoint and its details. |
37
+
|`wazuh-statistics`| Stores statistics about the Wazuh Server usage and performance. The information includes the number of events decoded, bytes received, and TCP sessions. |
0 commit comments