Skip to content

Commit 767a04d

Browse files
authored
Merge pull request #8779 from wazuh/enhancement/idr-275-update-command-outputs
Update command outputs
2 parents 6f5d68c + c039457 commit 767a04d

File tree

11 files changed

+337
-292
lines changed

11 files changed

+337
-292
lines changed

CHANGELOG.md

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -47,6 +47,7 @@ All notable changes to this project will be documented in this file.
4747
- **Post-release**: Updated the vulnerability detection capability section. ([#8693](https://github.com/wazuh/wazuh-documentation/pull/8693))
4848
- **Post-release**: Changed the warning note on using the `$` and `&` characters when changing passwords in Docker deployments. ([#8694](https://github.com/wazuh/wazuh-documentation/pull/8694))
4949
- **Post-release**: Changed Windows commands in the backup guide to PowerShell. ([#8761](https://github.com/wazuh/wazuh-documentation/pull/8761))
50+
- **Post-release**: Updated 4.12.0 command output examples. ([#8779](https://github.com/wazuh/wazuh-documentation/pull/8779))
5051

5152
### Fixed
5253

source/deployment-options/offline-installation/step-by-step.rst

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -335,13 +335,13 @@ To verify that the Wazuh cluster is enabled and all the nodes are connected, exe
335335
336336
An example output of the command looks as follows:
337337

338-
.. code-block:: none
339-
:class: output
338+
.. code-block:: none
339+
:class: output
340340
341-
NAME TYPE VERSION ADDRESS
342-
master-node master |WAZUH_CURRENT| 10.0.0.3
343-
worker-node1 worker |WAZUH_CURRENT| 10.0.0.4
344-
worker-node2 worker |WAZUH_CURRENT| 10.0.0.5
341+
NAME TYPE VERSION ADDRESS
342+
wazuh-1 master 4.12.0 10.0.0.3
343+
wazuh-3 worker 4.12.0 10.0.0.5
344+
wazuh-2 worker 4.12.0 10.0.0.4
345345
346346
Note that ``10.0.0.3``, ``10.0.0.4``, ``10.0.0.5`` are example IPs.
347347

source/installation-guide/wazuh-server/step-by-step.rst

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -265,13 +265,13 @@ To verify that the Wazuh cluster is enabled and all the nodes are connected, exe
265265
266266
An example output of the command looks as follows:
267267

268-
.. code-block:: none
269-
:class: output
268+
.. code-block:: none
269+
:class: output
270270
271-
NAME TYPE VERSION ADDRESS
272-
master-node master |WAZUH_CURRENT| 10.0.0.3
273-
worker-node1 worker |WAZUH_CURRENT| 10.0.0.4
274-
worker-node2 worker |WAZUH_CURRENT| 10.0.0.5
271+
NAME TYPE VERSION ADDRESS
272+
master-node master 4.12.0 10.0.0.3
273+
worker-node1 worker 4.12.0 10.0.0.4
274+
worker-node2 worker 4.12.0 10.0.0.5
275275
276276
Note that ``10.0.0.3``, ``10.0.0.4``, ``10.0.0.5`` are example IPs.
277277

source/user-manual/agent/agent-management/listing/listing.rst

Lines changed: 90 additions & 63 deletions
Original file line numberDiff line numberDiff line change
@@ -15,66 +15,93 @@ The :api-ref:`GET /agents <operation/api.controllers.agent_controller.get_agents
1515
.. code-block:: json
1616
:class: output
1717
18-
{
19-
"data": {
20-
"affected_items": [
21-
{
22-
"os": {
23-
"arch": "x86_64",
24-
"major": "7",
25-
"minor": "9",
26-
"name": "CentOS Linux",
27-
"platform": "centos",
28-
"uname": "Linux |wazuhagent |3.10.0-1160.105.1.el7.x86_64 |#1 SMP Thu Dec 7 15:39:45 UTC 2023 |x86_64",
29-
"version": "7.9"
30-
},
31-
"node_name": "node01",
32-
"name": "CentOS",
33-
"registerIP": "any",
34-
"version": "Wazuh v4.8.0",
35-
"mergedSum": "4a8724b20dee0124ff9656783c490c4e",
36-
"dateAdd": "2024-02-14T09:59:19+00:00",
37-
"ip": "192.168.33.27",
38-
"configSum": "ab73af41699f13fdd81903b5f23d8d00",
39-
"group": [
40-
"default"
41-
],
42-
"group_config_status": "synced",
43-
"status": "active",
44-
"manager": "wazuhserver",
45-
"status_code": 0,
46-
"id": "004",
47-
"lastKeepAlive": "2024-02-14T10:32:57+00:00"
48-
},
49-
{
50-
"os": {
51-
"arch": "x86_64",
52-
"codename": "Jammy Jellyfish",
53-
"major": "22",
54-
"minor": "04",
55-
"name": "Ubuntu",
56-
"platform": "ubuntu",
57-
"uname": "Linux |wazuhserver |5.15.0-84-generic |#93-Ubuntu SMP Tue Sep 5 17:16:10 UTC 2023 |x86_64",
58-
"version": "22.04.3 LTS"
59-
},
60-
"node_name": "node01",
61-
"name": "wazuhserver",
62-
"registerIP": "127.0.0.1",
63-
"version": "Wazuh v4.8.0",
64-
"dateAdd": "2024-01-17T13:28:27+00:00",
65-
"ip": "127.0.0.1",
66-
"group_config_status": "synced",
67-
"status": "active",
68-
"manager": "wazuhserver",
69-
"status_code": 0,
70-
"id": "000",
71-
"lastKeepAlive": "9999-12-31T23:59:59+00:00"
72-
}
73-
],
74-
"total_affected_items": 2,
75-
"total_failed_items": 0,
76-
"failed_items": []
77-
},
78-
"message": "All selected agents information was returned",
79-
"error": 0
80-
}
18+
{
19+
"data": {
20+
"affected_items": [
21+
{
22+
"os": {
23+
"arch": "x86_64",
24+
"major": "9",
25+
"name": "CentOS Stream",
26+
"platform": "centos",
27+
"uname": "Linux |ag-centos9s |5.14.0-391.el9.x86_64 |#1 SMP PREEMPT_DYNAMIC Tue Nov 28 20:35:49 UTC 2023 |x86_64",
28+
"version": "9"
29+
},
30+
"name": "ag-centos9s",
31+
"lastKeepAlive": "2025-08-18T18:40:48+00:00",
32+
"version": "Wazuh v4.12.0",
33+
"group": [
34+
"default"
35+
],
36+
"id": "001",
37+
"status": "active",
38+
"manager": "centos8a",
39+
"registerIP": "any",
40+
"mergedSum": "cb5dc59d195320bb20b6039a519a8c0e",
41+
"ip": "172.16.1.85",
42+
"configSum": "ab73af41699f13fdd81903b5f23d8d00",
43+
"group_config_status": "synced",
44+
"node_name": "wazuh-1",
45+
"dateAdd": "2025-08-18T16:49:29+00:00",
46+
"status_code": 0
47+
},
48+
{
49+
"os": {
50+
"arch": "x86_64",
51+
"codename": "Jammy Jellyfish",
52+
"major": "22",
53+
"minor": "04",
54+
"name": "Ubuntu",
55+
"platform": "ubuntu",
56+
"uname": "Linux |ag-ubuntu22 |5.15.0-91-generic |#101-Ubuntu SMP Tue Nov 14 13:30:08 UTC 2023 |x86_64",
57+
"version": "22.04.3 LTS"
58+
},
59+
"name": "ag-ubuntu22",
60+
"lastKeepAlive": "2025-08-18T18:40:40+00:00",
61+
"version": "Wazuh v4.12.0",
62+
"group": [
63+
"default"
64+
],
65+
"id": "002",
66+
"status": "active",
67+
"manager": "centos8b",
68+
"registerIP": "any",
69+
"mergedSum": "cb5dc59d195320bb20b6039a519a8c0e",
70+
"ip": "172.16.1.83",
71+
"configSum": "ab73af41699f13fdd81903b5f23d8d00",
72+
"group_config_status": "synced",
73+
"node_name": "wazuh-2",
74+
"dateAdd": "2025-08-18T17:05:02+00:00",
75+
"status_code": 0
76+
},
77+
{
78+
"os": {
79+
"arch": "x86_64",
80+
"major": "8",
81+
"minor": "5",
82+
"name": "CentOS Linux",
83+
"platform": "centos",
84+
"uname": "Linux |centos8a |4.18.0-348.7.1.el8_5.x86_64 |#1 SMP Wed Dec 22 13:25:12 UTC 2021 |x86_64",
85+
"version": "8.5"
86+
},
87+
"name": "centos8a",
88+
"lastKeepAlive": "9999-12-31T23:59:59+00:00",
89+
"version": "Wazuh v4.12.0",
90+
"id": "000",
91+
"status": "active",
92+
"manager": "centos8a",
93+
"registerIP": "127.0.0.1",
94+
"ip": "127.0.0.1",
95+
"group_config_status": "synced",
96+
"node_name": "wazuh-1",
97+
"dateAdd": "2025-08-18T16:33:54+00:00",
98+
"status_code": 0
99+
}
100+
],
101+
"total_affected_items": 3,
102+
"total_failed_items": 0,
103+
"failed_items": []
104+
},
105+
"message": "All selected agents information was returned",
106+
"error": 0
107+
}

source/user-manual/agent/agent-management/remote-upgrading/wpk-files/install-custom-wpk.rst

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -66,4 +66,4 @@ Follow the steps below to upgrade a Wazuh agent using a custom WPK file in a WPK
6666
Upgrading...
6767
6868
Upgraded agents:
69-
Agent 001 upgraded: Wazuh v4.7.2 -> Wazuh v4.8.0
69+
Agent 001 upgraded: Wazuh v4.7.2 -> Wazuh v4.12.0

source/user-manual/agent/agent-management/remove-agents/remove.rst

Lines changed: 7 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -17,25 +17,22 @@ Run the following command on the Wazuh server:
1717
.. code-block:: none
1818
1919
****************************************
20-
* Wazuh v4.8.0 Agent manager. *
20+
* Wazuh v4.12.0 Agent manager. *
2121
* The following options are available: *
2222
****************************************
23-
(A)dd an a,gent (A).
23+
(A)dd an agent (A).
2424
(E)xtract key for an agent (E).
2525
(L)ist already added agents (L).
2626
(R)emove an agent (R).
2727
(Q)uit.
2828
Choose your action: A,E,L,R or Q: r
2929
30-
Available agents:
30+
Available agents:
3131
ID: 002, Name: Ubuntu, IP: any
32-
3332
Provide the ID of the agent to be removed (or '\q' to quit): 002
3433
Confirm deleting it?(y/n): y
3534
Agent '002' removed.
3635
37-
manage_agents: Exiting.
38-
3936
You can run the following command on the Wazuh server and specifiy the Wazuh agent ID by using the ``-r`` option. Replace ``<WAZUH_AGENT_ID>`` with the agent ID of the Wazuh agent:
4037

4138
.. code-block:: console
@@ -45,17 +42,17 @@ You can run the following command on the Wazuh server and specifiy the Wazuh age
4542
.. code-block:: none
4643
4744
****************************************
48-
* Wazuh v4.8.0 Agent manager. *
45+
* Wazuh v4.12.0 Agent manager. *
4946
* The following options are available: *
5047
****************************************
5148
(A)dd an agent (A).
5249
(E)xtract key for an agent (E).
5350
(L)ist already added agents (L).
5451
(R)emove an agent (R).
5552
(Q)uit.
56-
Choose your action: A,E,L,R or Q:
57-
Available agents:
58-
ID: 001, Name: new, IP: any
53+
Choose your action: A,E,L,R or Q:
54+
Available agents:
55+
ID: 001, Name: centos9, IP: any
5956
Provide the ID of the agent to be removed (or '\q' to quit): 001
6057
Confirm deleting it?(y/n): y
6158
Agent '001' removed.

source/user-manual/api/use-cases.rst

Lines changed: 25 additions & 25 deletions
Original file line numberDiff line numberDiff line change
@@ -414,31 +414,31 @@ The following request enumerates two active agents:
414414
:class: output
415415
416416
{
417-
"data": {
418-
"affected_items": [
419-
{
420-
"node_name": "worker2",
421-
"status": "active",
422-
"manager": "wazuh-worker2",
423-
"version": "Wazuh v4.7.4",
424-
"id": "001",
425-
"name": "wazuh-agent1"
426-
},
427-
{
428-
"node_name": "worker2",
429-
"status": "active",
430-
"manager": "wazuh-worker2",
431-
"version": "Wazuh v4.7.4",
432-
"id": "002",
433-
"name": "wazuh-agent2"
434-
}
435-
],
436-
"total_affected_items": 9,
437-
"total_failed_items": 0,
438-
"failed_items": []
439-
},
440-
"message": "All selected agents information was returned",
441-
"error": 0
417+
"data": {
418+
"affected_items": [
419+
{
420+
"manager": "centos8a",
421+
"name": "ag-centos9s",
422+
"id": "001",
423+
"node_name": "wazuh-1",
424+
"status": "active",
425+
"version": "Wazuh v4.12.0"
426+
},
427+
{
428+
"manager": "centos8b",
429+
"name": "ag-ubuntu22",
430+
"id": "002",
431+
"node_name": "wazuh-2",
432+
"status": "active",
433+
"version": "Wazuh v4.12.0"
434+
}
435+
],
436+
"total_affected_items": 3,
437+
"total_failed_items": 0,
438+
"failed_items": []
439+
},
440+
"message": "All selected agents information was returned",
441+
"error": 0
442442
}
443443
444444
Add a new Wazuh agent by sending an API request with the agent name and its IP address:

source/user-manual/capabilities/command-monitoring/command-output-analysis.rst

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -106,16 +106,16 @@ Wazuh server
106106
:emphasize-lines: 11
107107
108108
# /var/ossec/bin/wazuh-logtest
109-
Starting wazuh-logtest v|WAZUH_CURRENT|
109+
Starting wazuh-logtest v4.12.0
110110
Type one log per line
111111
112112
MemFree: 90008 kB
113113
114114
**Phase 1: Completed pre-decoding.
115-
full event: 'MemFree: 90008 kB'
115+
full event: 'MemFree: 90008 kB'
116116
117117
**Phase 2: Completed decoding.
118-
No decoder matched.
118+
No decoder matched.
119119
120120
You can see that there is no decoder available to decode the log as highlighted. You need to create a decoder to extract information from the log.
121121

@@ -135,18 +135,18 @@ Wazuh server
135135
:emphasize-lines: 11,12,13
136136
137137
# /var/ossec/bin/wazuh-logtest
138-
Starting wazuh-logtest v|WAZUH_CURRENT|
138+
Starting wazuh-logtest v4.12.0
139139
Type one log per line
140140
141141
MemFree: 90008 kB
142142
143143
**Phase 1: Completed pre-decoding.
144-
full event: 'MemFree: 90008 kB'
144+
full event: 'MemFree: 90008 kB'
145145
146146
**Phase 2: Completed decoding.
147-
name: 'unused-memory'
148-
free_memory: '90008'
149-
unit_of_measurment: 'kB'
147+
name: 'unused-memory'
148+
free_memory: '90008'
149+
unit_of_measurment: 'kB'
150150
151151
#. The decoded output of the command needs to trigger a rule to generate an alert. Add the custom rule below to the ``/var/ossec/etc/rules/local_rules.xml`` file to generate an alert when the Command module executes the ``grep MemFree /proc/meminfo`` command. The rule uses the ``<decoded_as>`` tag to reference the ``unused-memory`` decoder created above:
152152

0 commit comments

Comments
 (0)