Inventory Category - Operating System

[cborla]

Description

This epic focuses on extending the existing Operating System inventory table in syscollector. The goal is to improve reporting on OS metadata such as name, version, platform, and kernel details, while ensuring full compatibility with previously stored entries.

Functional Requirements

• Add fields and normalize data related to OS and kernel across all platforms.
• Preserve the stateful model of OS inventory.
• Align data with the Wazuh Common Schema (WCS), maintaining ECS compatibility where applicable.
• Ensure backward compatibility with existing OS inventory data on the server.

Non-Functional Requirements

• Consistent output across platforms.
• Legacy data should remain valid and compatible.
• System must gracefully skip unavailable fields per platform.

Plan

Agent

• Extend the OS inventory table to include updated metadata.
• Normalize platform-specific differences into a unified schema.

Related Collector Issues

• Integrate extended Operating System table into syscollector wazuh#30208

Server

• Continue supporting older OS table versions.
• Store and synchronize the updated data through Rsync without format breaks.

Dashboard

• Visualize OS version, architecture, and kernel data.
• Retain compatibility with prior visualizations and filters.

Deliverables

• Updated OS inventory schema and implementation.
• Integration tests to ensure server compatibility.
• Documentation of new fields and fallback behaviors.

Acceptance Criteria

• Updated OS data is emitted consistently across supported platforms.
• Server synchronizes the updated schema without breaking existing behavior.
• API and dashboard remain functional with both legacy and extended data.