Skip to content

Commit ecfff36

Browse files
authored
Merge pull request #8948 from wazuh/bug/idr357-remove-states-fim-indices
Remove wazuh-states-fim-* index references
2 parents caba0b3 + 272522a commit ecfff36

File tree

5 files changed

+4
-42
lines changed

5 files changed

+4
-42
lines changed

CHANGELOG.md

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -12,6 +12,10 @@ All notable changes to this project will be documented in this file.
1212
- **Post-release**: Updated the upgrade guide for Wazuh central components. ([#8934](https://github.com/wazuh/wazuh-documentation/pull/8934)) ([#8941](https://github.com/wazuh/wazuh-documentation/pull/8941)) ([#8944](https://github.com/wazuh/wazuh-documentation/pull/8944))
1313
- **Post-release**: Added indexer connector configuration steps to vulnerability detection documentation and removed troubleshooting section. ([#8942](https://github.com/wazuh/wazuh-documentation/pull/8942))
1414

15+
### Fixed
16+
17+
- **Post-release**: Removed wazuh-states-fim index references. ([#8948](https://github.com/wazuh/wazuh-documentation/pull/8948))
18+
1519
## [v4.13.0]
1620

1721
### Added
-229 KB
Binary file not shown.
-200 KB
Binary file not shown.
-201 KB
Binary file not shown.

source/user-manual/wazuh-indexer/wazuh-indexer-indices.rst

Lines changed: 0 additions & 42 deletions
Original file line numberDiff line numberDiff line change
@@ -13,8 +13,6 @@ An index is a collection of documents that relate to each other. The Wazuh index
1313
- :ref:`wazuh‑monitoring-* <wazuh_monitoring_indices>`: This is the index pattern for the status of the Wazuh agents.
1414
- :ref:`wazuh‑statistics-* <wazuh_statistics_indices>`: This is the index pattern that shows the performance metrics of the Wazuh server. It contains information that shows how many events are received, processed and dropped by the Wazuh server.
1515
- :ref:`wazuh-states-vulnerabilities-* <wazuh_states_vulnerabilities_indices>`: This is the index pattern for information about vulnerabilities detected in the endpoints being monitored.
16-
- :ref:`wazuh-states-fim-files-* <wazuh_states_fim_files_indices>`: This is the index pattern for monitored files and directories on monitored endpoints.
17-
- :ref:`wazuh-states-fim-registries-* <wazuh_states_fim_registries_indices>`: This is the index pattern for Windows registry files on a monitored endpoint.
1816
- :ref:`wazuh-states-inventory-hardware-* <wazuh_states_inventory_hardware_indices>`: This is the index pattern for basic information about hardware components on a monitored endpoint.
1917
- :ref:`wazuh-states-inventory-hotfixes-* <wazuh_states_inventory_hotfixes_indices>`: This is the index pattern for updates installed on a Windows endpoint. The Wazuh vulnerability detection module uses this to discover what vulnerabilities have been patched on a Windows endpoint.
2018
- :ref:`wazuh-states-inventory-interfaces-* <wazuh_states_inventory_interfaces_indices>`: This is the index pattern for ``up`` and ``down`` status information, and packet transfer information about network interfaces on a monitored endpoint.
@@ -509,46 +507,6 @@ To visualize this information in the Wazuh dashboard, click on **Vulnerability D
509507
:align: center
510508
:width: 80%
511509

512-
.. _wazuh_states_fim_files_indices:
513-
514-
The wazuh-states-fim-files-* indices
515-
------------------------------------
516-
517-
The ``wazuh-states-fim-files-*`` index stores information about files and directories being monitored by the Wazuh File Integrity Monitoring (FIM) module. Each record within this index represents the state of a file or directory on an endpoint at the time it was scanned. This includes metadata such as file paths, permissions, ownership, and cryptographic hashes.
518-
519-
By keeping track of these details, the index provides a baseline snapshot of the monitored file systems. When changes occur, like a file being created, modified, or deleted, Wazuh can compare the new state against the information in this index to quickly detect anomalies.
520-
521-
In practical terms, this index serves as a historical ledger of the monitored endpoint's file system, ensuring that system integrity can be validated and investigated whenever suspicious activity arises. For example, if you navigate to **File Integrity Monitoring** > **Inventory** > **Files**, you will see information relating to monitored files.
522-
523-
.. thumbnail:: /images/manual/wazuh-indexer/wazuh-states-fim-files-indices.png
524-
:title: Wazuh states FIM files indices
525-
:alt: Wazuh states FIM files indices
526-
:align: center
527-
:width: 80%
528-
529-
.. _wazuh_states_fim_registries_indices:
530-
531-
The wazuh-states-fim-registries-* indices
532-
-----------------------------------------
533-
534-
The ``wazuh-states-fim-registries-*`` index stores information collected by the Wazuh File Integrity Monitoring (FIM) module for the Windows Registry on the monitored endpoint. Each document in this index represents the state of a monitored registry key or value, including details such as key paths, permissions, and associated values.
535-
536-
This index acts as a reference point for detecting changes in the Windows Registry. When a key or value is created, modified, or removed, Wazuh compares the new state against the records stored here, allowing administrators to spot unauthorized or suspicious changes.
537-
538-
The Windows Registry is often a target for persistence mechanisms, privilege escalation, and configuration tampering; therefore, this index is important for monitoring system integrity on Windows endpoints. For example, if you navigate to **File Integrity Monitoring** > **Inventory** > **Registry keys** or **Registry values**, you will see information relating to Windows registry keys and values.
539-
540-
.. thumbnail:: /images/manual/wazuh-indexer/wazuh-states-fim-registries-indices1.png
541-
:title: Wazuh states FIM registries indices
542-
:alt: Wazuh states FIM registries indices
543-
:align: center
544-
:width: 80%
545-
546-
.. thumbnail:: /images/manual/wazuh-indexer/wazuh-states-fim-registries-indices2.png
547-
:title: Wazuh states FIM registries indices
548-
:alt: Wazuh states FIM registries indices
549-
:align: center
550-
:width: 80%
551-
552510
.. _wazuh_states_inventory_hardware_indices:
553511

554512
The wazuh-states-inventory-hardware-* indices

0 commit comments

Comments
 (0)