Post publication live checks for 4.7.5

[davidjiglesias]

Description

This issue attempts to ensure the publication process was correct, attempting checks and live tests for published packages and images.

Tasks

• Ensure that production files are present.
• Deploy the Wazuh Installation Assistant and check the version installed is 4.7.5.
• AMD64 Live installation test.
  • https://ci.wazuh.info/job/Test_install_tier/927/
• WPK versions check.
• WPK upgrade test.
  • Linux
  • MacOS Intel
  • MacOS Apple Silicon
  • Windows
• AMI published.
• Puppet forge module published.
• Docker images published.

[jnasselle]

Ensure that production files are present.

root@wazuh-dev:~# aws s3 ls packages.wazuh.com/4.x/ --recursive  --summarize --human-readable | grep "4.7.5"
2024-05-30 11:51:10   13.5 MiB 4.x/aix/wazuh-agent-4.7.5-1.aix.ppc.rpm
2024-05-30 11:54:32    6.4 MiB 4.x/alpine/v3.12/main/aarch64/wazuh-agent-4.7.5-r1.apk
2024-05-30 11:54:46    6.3 MiB 4.x/alpine/v3.12/main/armhf/wazuh-agent-4.7.5-r1.apk
2024-05-30 11:55:04    5.8 MiB 4.x/alpine/v3.12/main/armv7/wazuh-agent-4.7.5-r1.apk
2024-05-30 11:55:16    6.8 MiB 4.x/alpine/v3.12/main/ppc64le/wazuh-agent-4.7.5-r1.apk
2024-05-30 11:54:03    7.1 MiB 4.x/alpine/v3.12/main/x86/wazuh-agent-4.7.5-r1.apk
2024-05-30 11:53:15    6.7 MiB 4.x/alpine/v3.12/main/x86_64/wazuh-agent-4.7.5-r1.apk
2024-05-30 12:38:08    8.9 MiB 4.x/apt/pool/main/w/wazuh-agent/wazuh-agent_4.7.5-1_amd64.deb
2024-05-30 12:38:09    4.9 MiB 4.x/apt/pool/main/w/wazuh-agent/wazuh-agent_4.7.5-1_arm64.deb
2024-05-30 12:38:11    4.6 MiB 4.x/apt/pool/main/w/wazuh-agent/wazuh-agent_4.7.5-1_armhf.deb
2024-05-30 12:38:13    9.4 MiB 4.x/apt/pool/main/w/wazuh-agent/wazuh-agent_4.7.5-1_i386.deb
2024-05-30 12:38:19    5.5 MiB 4.x/apt/pool/main/w/wazuh-agent/wazuh-agent_4.7.5-1_ppc64el.deb
2024-05-30 12:40:44  172.1 MiB 4.x/apt/pool/main/w/wazuh-dashboard/wazuh-dashboard_4.7.5-1_amd64.deb
2024-05-30 12:52:35  654.4 MiB 4.x/apt/pool/main/w/wazuh-indexer/wazuh-indexer_4.7.5-1_amd64.deb
2024-05-30 13:23:08  164.0 MiB 4.x/apt/pool/main/w/wazuh-manager/wazuh-manager_4.7.5-1_amd64.deb
2024-05-30 13:23:41  113.4 MiB 4.x/apt/pool/main/w/wazuh-manager/wazuh-manager_4.7.5-1_arm64.deb
2024-05-30 11:55:36  155 Bytes 4.x/checksums/wazuh/4.7.5/alpine/aarch64/wazuh-agent-4.7.5-r1.apk.sha512
2024-05-30 11:55:42  155 Bytes 4.x/checksums/wazuh/4.7.5/alpine/armhf/wazuh-agent-4.7.5-r1.apk.sha512
2024-05-30 11:55:49  155 Bytes 4.x/checksums/wazuh/4.7.5/alpine/armv7/wazuh-agent-4.7.5-r1.apk.sha512
2024-05-30 11:55:56  155 Bytes 4.x/checksums/wazuh/4.7.5/alpine/ppc64le/wazuh-agent-4.7.5-r1.apk.sha512
2024-05-30 11:55:29  155 Bytes 4.x/checksums/wazuh/4.7.5/alpine/x86/wazuh-agent-4.7.5-r1.apk.sha512
2024-05-30 11:55:22  155 Bytes 4.x/checksums/wazuh/4.7.5/alpine/x86_64/wazuh-agent-4.7.5-r1.apk.sha512
2024-05-30 11:51:58  148 Bytes 4.x/checksums/wazuh/4.7.5/wazuh-4.7.5-1.zip.sha512
2024-05-30 11:53:51  146 Bytes 4.x/checksums/wazuh/4.7.5/wazuh-4.7.5.ova.sha512
2024-05-30 11:51:54  169 Bytes 4.x/checksums/wazuh/4.7.5/wazuh-agent-4.7.5-1-hpux-11v3-ia64.tar.sha512
2024-05-30 12:51:38  162 Bytes 4.x/checksums/wazuh/4.7.5/wazuh-agent-4.7.5-1.aarch64.rpm.sha512
2024-05-30 11:51:51  162 Bytes 4.x/checksums/wazuh/4.7.5/wazuh-agent-4.7.5-1.aix.ppc.rpm.sha512
2024-05-30 11:52:12  160 Bytes 4.x/checksums/wazuh/4.7.5/wazuh-agent-4.7.5-1.arm64.pkg.sha512
2024-05-30 12:51:44  162 Bytes 4.x/checksums/wazuh/4.7.5/wazuh-agent-4.7.5-1.armv7hl.rpm.sha512
2024-05-30 11:57:56  163 Bytes 4.x/checksums/wazuh/4.7.5/wazuh-agent-4.7.5-1.el5.i386.rpm.sha512
2024-05-30 11:57:50  165 Bytes 4.x/checksums/wazuh/4.7.5/wazuh-agent-4.7.5-1.el5.x86_64.rpm.sha512
2024-05-30 12:51:25  159 Bytes 4.x/checksums/wazuh/4.7.5/wazuh-agent-4.7.5-1.i386.rpm.sha512
2024-05-30 11:52:24  162 Bytes 4.x/checksums/wazuh/4.7.5/wazuh-agent-4.7.5-1.intel64.pkg.sha512
2024-05-30 11:51:50  154 Bytes 4.x/checksums/wazuh/4.7.5/wazuh-agent-4.7.5-1.msi.sha512
2024-05-30 12:51:57  162 Bytes 4.x/checksums/wazuh/4.7.5/wazuh-agent-4.7.5-1.ppc64le.rpm.sha512
2024-05-30 12:51:18  161 Bytes 4.x/checksums/wazuh/4.7.5/wazuh-agent-4.7.5-1.x86_64.rpm.sha512
2024-05-30 13:41:00  160 Bytes 4.x/checksums/wazuh/4.7.5/wazuh-agent_4.7.5-1_amd64.deb.sha512
2024-05-30 13:41:21  160 Bytes 4.x/checksums/wazuh/4.7.5/wazuh-agent_4.7.5-1_arm64.deb.sha512
2024-05-30 13:41:28  160 Bytes 4.x/checksums/wazuh/4.7.5/wazuh-agent_4.7.5-1_armhf.deb.sha512
2024-05-30 13:41:07  159 Bytes 4.x/checksums/wazuh/4.7.5/wazuh-agent_4.7.5-1_i386.deb.sha512
2024-05-30 13:41:41  162 Bytes 4.x/checksums/wazuh/4.7.5/wazuh-agent_4.7.5-1_ppc64el.deb.sha512
2024-05-30 11:52:02  164 Bytes 4.x/checksums/wazuh/4.7.5/wazuh-agent_v4.7.5-sol10-i386.pkg.sha512
2024-05-30 11:51:50  165 Bytes 4.x/checksums/wazuh/4.7.5/wazuh-agent_v4.7.5-sol10-sparc.pkg.sha512
2024-05-30 11:51:49  164 Bytes 4.x/checksums/wazuh/4.7.5/wazuh-agent_v4.7.5-sol11-i386.p5p.sha512
2024-05-30 11:51:49  165 Bytes 4.x/checksums/wazuh/4.7.5/wazuh-agent_v4.7.5-sol11-sparc.p5p.sha512
2024-05-30 12:52:11  165 Bytes 4.x/checksums/wazuh/4.7.5/wazuh-dashboard-4.7.5-1.x86_64.rpm.sha512
2024-05-30 13:41:55  164 Bytes 4.x/checksums/wazuh/4.7.5/wazuh-dashboard_4.7.5-1_amd64.deb.sha512
2024-05-30 12:52:04  163 Bytes 4.x/checksums/wazuh/4.7.5/wazuh-indexer-4.7.5-1.x86_64.rpm.sha512
2024-05-30 13:41:48  162 Bytes 4.x/checksums/wazuh/4.7.5/wazuh-indexer_4.7.5-1_amd64.deb.sha512
2024-05-30 12:51:51  164 Bytes 4.x/checksums/wazuh/4.7.5/wazuh-manager-4.7.5-1.aarch64.rpm.sha512
2024-05-30 12:51:31  163 Bytes 4.x/checksums/wazuh/4.7.5/wazuh-manager-4.7.5-1.x86_64.rpm.sha512
2024-05-30 13:41:13  162 Bytes 4.x/checksums/wazuh/4.7.5/wazuh-manager_4.7.5-1_amd64.deb.sha512
2024-05-30 13:41:34  162 Bytes 4.x/checksums/wazuh/4.7.5/wazuh-manager_4.7.5-1_arm64.deb.sha512
2024-05-30 11:51:49  155 Bytes 4.x/checksums/wazuh/4.7.5/wazuh-wazuh-4.7.5.tar.gz.sha512
2024-05-30 11:52:12  166 Bytes 4.x/checksums/wazuh/4.7.5/wazuh_agent_v4.7.5_linux_x86_64.wpk.sha512
2024-05-30 11:51:50  166 Bytes 4.x/checksums/wazuh/4.7.5/wazuh_agent_v4.7.5_macos_x86_64.wpk.sha512
2024-05-30 11:52:09  161 Bytes 4.x/checksums/wazuh/4.7.5/wazuh_agent_v4.7.5_windows.wpk.sha512
2024-05-30 11:51:08   52.7 MiB 4.x/hp-ux/wazuh-agent-4.7.5-1-hpux-11v3-ia64.tar
2024-05-30 11:51:09    5.5 MiB 4.x/macos/wazuh-agent-4.7.5-1.arm64.pkg
2024-05-30 11:51:33    5.9 MiB 4.x/macos/wazuh-agent-4.7.5-1.intel64.pkg
2024-05-30 11:51:10   56.8 KiB 4.x/puppet-module/wazuh-wazuh-4.7.5.tar.gz
2024-05-30 11:51:10   14.9 MiB 4.x/solaris/i386/10/wazuh-agent_v4.7.5-sol10-i386.pkg
2024-05-30 11:51:09    6.2 MiB 4.x/solaris/i386/11/wazuh-agent_v4.7.5-sol11-i386.p5p
2024-05-30 11:51:09   15.8 MiB 4.x/solaris/sparc/10/wazuh-agent_v4.7.5-sol10-sparc.pkg
2024-05-30 11:51:08    6.1 MiB 4.x/solaris/sparc/11/wazuh-agent_v4.7.5-sol11-sparc.p5p
2024-05-30 11:51:09  150.9 MiB 4.x/stack/dashboard/wazuh-dashboard-base-4.7.5-1-linux-x64.tar.xz
2024-05-30 11:52:05  655.3 MiB 4.x/stack/indexer/wazuh-indexer-base-4.7.5-1-linux-x64.tar.xz
2024-05-30 11:51:09   36.1 MiB 4.x/ui/dashboard/wazuh-4.7.5-1.zip
2024-05-30 11:51:08    2.7 GiB 4.x/vm/wazuh-4.7.5.ova
2024-05-30 11:51:09    6.2 MiB 4.x/windows/wazuh-agent-4.7.5-1.msi
2024-05-30 11:51:21   23.5 MiB 4.x/wpk/linux/x86_64/wazuh_agent_v4.7.5_linux_x86_64.wpk
2024-05-30 11:51:19    5.9 MiB 4.x/wpk/macos/x86_64/pkg/wazuh_agent_v4.7.5_macos_x86_64.wpk
2024-05-30 11:51:19    5.9 MiB 4.x/wpk/windows/wazuh_agent_v4.7.5_windows.wpk
2024-05-30 12:50:16    8.9 MiB 4.x/yum/wazuh-agent-4.7.5-1.aarch64.rpm
2024-05-30 12:50:16    8.3 MiB 4.x/yum/wazuh-agent-4.7.5-1.armv7hl.rpm
2024-05-30 12:50:17    9.4 MiB 4.x/yum/wazuh-agent-4.7.5-1.i386.rpm
2024-05-30 12:50:17    6.9 MiB 4.x/yum/wazuh-agent-4.7.5-1.ppc64le.rpm
2024-05-30 12:50:18    9.0 MiB 4.x/yum/wazuh-agent-4.7.5-1.x86_64.rpm
2024-05-30 12:50:18  264.5 MiB 4.x/yum/wazuh-dashboard-4.7.5-1.x86_64.rpm
2024-05-30 12:50:27  673.2 MiB 4.x/yum/wazuh-indexer-4.7.5-1.x86_64.rpm
2024-05-30 12:50:53  193.4 MiB 4.x/yum/wazuh-manager-4.7.5-1.aarch64.rpm
2024-05-30 12:51:00  165.3 MiB 4.x/yum/wazuh-manager-4.7.5-1.x86_64.rpm
2024-05-30 11:57:42    8.0 MiB 4.x/yum5/i386/wazuh-agent-4.7.5-1.el5.i386.rpm
2024-05-30 11:57:44    7.4 MiB 4.x/yum5/x86_64/wazuh-agent-4.7.5-1.el5.x86_64.rpm
root@wazuh-dev:~# aws s3 ls packages.wazuh.com/4.x/ --recursive  --summarize --human-readable | grep "4.8.0"
2023-12-20 07:11:08  164 Bytes 4.x/checksums/wazuh/4.1.4/wazuh_splunk-4.1.4_8.0.4-1.tar.gz.sha512
2023-12-20 07:11:08  164 Bytes 4.x/checksums/wazuh/4.1.4/wazuh_splunk-4.1.4_8.0.5-1.tar.gz.sha512
2023-12-20 07:11:08  164 Bytes 4.x/checksums/wazuh/4.1.4/wazuh_splunk-4.1.4_8.0.6-1.tar.gz.sha512
2023-12-20 07:11:08  164 Bytes 4.x/checksums/wazuh/4.1.4/wazuh_splunk-4.1.4_8.0.7-1.tar.gz.sha512
2023-12-20 07:11:08  164 Bytes 4.x/checksums/wazuh/4.1.4/wazuh_splunk-4.1.4_8.0.8-1.tar.gz.sha512
2023-12-20 07:12:22    2.3 MiB 4.x/ui/splunk/wazuh_splunk-4.1.4_8.0.4-1.tar.gz
2023-12-20 07:12:23    2.3 MiB 4.x/ui/splunk/wazuh_splunk-4.1.4_8.0.5-1.tar.gz
2023-12-20 07:12:23    2.3 MiB 4.x/ui/splunk/wazuh_splunk-4.1.4_8.0.6-1.tar.gz
2023-12-20 07:12:23    2.3 MiB 4.x/ui/splunk/wazuh_splunk-4.1.4_8.0.7-1.tar.gz
2023-12-20 07:12:23    2.3 MiB 4.x/ui/splunk/wazuh_splunk-4.1.4_8.0.8-1.tar.gz
root@wazuh-dev:~# aws s3 ls packages.wazuh.com/4.x/ --recursive  --summarize --human-readable | grep "4.8.1"
2023-12-20 07:11:08  164 Bytes 4.x/checksums/wazuh/4.1.4/wazuh_splunk-4.1.4_8.1.0-1.tar.gz.sha512
2023-12-20 07:11:08  164 Bytes 4.x/checksums/wazuh/4.1.4/wazuh_splunk-4.1.4_8.1.1-1.tar.gz.sha512
2023-12-20 07:11:08  164 Bytes 4.x/checksums/wazuh/4.1.4/wazuh_splunk-4.1.4_8.1.2-1.tar.gz.sha512
2023-12-20 07:11:13  164 Bytes 4.x/checksums/wazuh/4.2.4/wazuh_splunk-4.2.4_8.1.4-1.tar.gz.sha512
2023-12-20 07:11:28  164 Bytes 4.x/checksums/wazuh/4.3.4/wazuh_splunk-4.3.4_8.1.1-1.tar.gz.sha512
2023-12-20 07:11:28  165 Bytes 4.x/checksums/wazuh/4.3.4/wazuh_splunk-4.3.4_8.1.10-1.tar.gz.sha512
2023-12-20 07:11:28  164 Bytes 4.x/checksums/wazuh/4.3.4/wazuh_splunk-4.3.4_8.1.2-1.tar.gz.sha512
2023-12-20 07:11:28  164 Bytes 4.x/checksums/wazuh/4.3.4/wazuh_splunk-4.3.4_8.1.3-1.tar.gz.sha512
2023-12-20 07:11:28  164 Bytes 4.x/checksums/wazuh/4.3.4/wazuh_splunk-4.3.4_8.1.4-1.tar.gz.sha512
2023-12-20 07:11:28  164 Bytes 4.x/checksums/wazuh/4.3.4/wazuh_splunk-4.3.4_8.1.5-1.tar.gz.sha512
2023-12-20 07:11:28  164 Bytes 4.x/checksums/wazuh/4.3.4/wazuh_splunk-4.3.4_8.1.6-1.tar.gz.sha512
2023-12-20 07:11:28  164 Bytes 4.x/checksums/wazuh/4.3.4/wazuh_splunk-4.3.4_8.1.7-1.tar.gz.sha512
2023-12-20 07:11:28  166 Bytes 4.x/checksums/wazuh/4.3.4/wazuh_splunk-4.3.4_8.1.7.1-1.tar.gz.sha512
2023-12-20 07:11:28  166 Bytes 4.x/checksums/wazuh/4.3.4/wazuh_splunk-4.3.4_8.1.7.2-1.tar.gz.sha512
2023-12-20 07:11:28  164 Bytes 4.x/checksums/wazuh/4.3.4/wazuh_splunk-4.3.4_8.1.8-1.tar.gz.sha512
2023-12-20 07:11:28  164 Bytes 4.x/checksums/wazuh/4.3.4/wazuh_splunk-4.3.4_8.1.9-1.tar.gz.sha512
2023-12-20 07:11:45  162 Bytes 4.x/checksums/wazuh/4.4.4/wazuh_splunk-4.4.4_8.1-1.tar.gz.sha512
2023-12-20 07:11:55  162 Bytes 4.x/checksums/wazuh/4.5.4/wazuh_splunk-4.5.4_8.1-1.tar.gz.sha512
2023-12-20 07:12:23    2.3 MiB 4.x/ui/splunk/wazuh_splunk-4.1.4_8.1.0-1.tar.gz
2023-12-20 07:12:23    2.3 MiB 4.x/ui/splunk/wazuh_splunk-4.1.4_8.1.1-1.tar.gz
2023-12-20 07:12:23    2.3 MiB 4.x/ui/splunk/wazuh_splunk-4.1.4_8.1.2-1.tar.gz
2023-12-20 07:12:24    2.4 MiB 4.x/ui/splunk/wazuh_splunk-4.2.4_8.1.4-1.tar.gz
2023-12-20 07:12:29    2.4 MiB 4.x/ui/splunk/wazuh_splunk-4.3.4_8.1.1-1.tar.gz
2023-12-20 07:12:29    2.4 MiB 4.x/ui/splunk/wazuh_splunk-4.3.4_8.1.10-1.tar.gz
2023-12-20 07:12:29    2.4 MiB 4.x/ui/splunk/wazuh_splunk-4.3.4_8.1.2-1.tar.gz
2023-12-20 07:12:29    2.4 MiB 4.x/ui/splunk/wazuh_splunk-4.3.4_8.1.3-1.tar.gz
2023-12-20 07:12:29    2.4 MiB 4.x/ui/splunk/wazuh_splunk-4.3.4_8.1.4-1.tar.gz
2023-12-20 07:12:29    2.4 MiB 4.x/ui/splunk/wazuh_splunk-4.3.4_8.1.5-1.tar.gz
2023-12-20 07:12:29    2.4 MiB 4.x/ui/splunk/wazuh_splunk-4.3.4_8.1.6-1.tar.gz
2023-12-20 07:12:29    2.4 MiB 4.x/ui/splunk/wazuh_splunk-4.3.4_8.1.7-1.tar.gz
2023-12-20 07:12:29    2.4 MiB 4.x/ui/splunk/wazuh_splunk-4.3.4_8.1.7.1-1.tar.gz
2023-12-20 07:12:29    2.4 MiB 4.x/ui/splunk/wazuh_splunk-4.3.4_8.1.7.2-1.tar.gz
2023-12-20 07:12:29    2.4 MiB 4.x/ui/splunk/wazuh_splunk-4.3.4_8.1.8-1.tar.gz
2023-12-20 07:12:29    2.4 MiB 4.x/ui/splunk/wazuh_splunk-4.3.4_8.1.9-1.tar.gz
2023-12-20 07:12:34    2.4 MiB 4.x/ui/splunk/wazuh_splunk-4.4.4_8.1-1.tar.gz
2023-12-20 07:12:34    2.4 MiB 4.x/ui/splunk/wazuh_splunk-4.5.4_8.1-1.tar.gz
root@wazuh-dev:~# aws s3 ls packages.wazuh.com/4.x/ --recursive  --summarize --human-readable | grep "4.8.2"
2023-12-20 11:30:41  478.2 MiB 4.x/apt/pool/main/w/wazuh-indexer/wazuh-indexer_4.4.0-1.1.1.todelete_amd64.deb
2023-12-20 07:11:13  164 Bytes 4.x/checksums/wazuh/4.2.4/wazuh_splunk-4.2.4_8.2.2-1.tar.gz.sha512
2023-12-20 07:11:28  164 Bytes 4.x/checksums/wazuh/4.3.4/wazuh_splunk-4.3.4_8.2.0-1.tar.gz.sha512
2023-12-20 07:11:28  164 Bytes 4.x/checksums/wazuh/4.3.4/wazuh_splunk-4.3.4_8.2.1-1.tar.gz.sha512
2023-12-20 07:11:28  164 Bytes 4.x/checksums/wazuh/4.3.4/wazuh_splunk-4.3.4_8.2.2-1.tar.gz.sha512
2023-12-20 07:11:28  164 Bytes 4.x/checksums/wazuh/4.3.4/wazuh_splunk-4.3.4_8.2.3-1.tar.gz.sha512
2023-12-20 07:11:28  164 Bytes 4.x/checksums/wazuh/4.3.4/wazuh_splunk-4.3.4_8.2.4-1.tar.gz.sha512
2023-12-20 07:11:28  164 Bytes 4.x/checksums/wazuh/4.3.4/wazuh_splunk-4.3.4_8.2.5-1.tar.gz.sha512
2023-12-20 07:11:28  164 Bytes 4.x/checksums/wazuh/4.3.4/wazuh_splunk-4.3.4_8.2.6-1.tar.gz.sha512
2023-12-20 07:11:45  162 Bytes 4.x/checksums/wazuh/4.4.4/wazuh_splunk-4.4.4_8.2-1.tar.gz.sha512
2023-12-20 07:11:55  162 Bytes 4.x/checksums/wazuh/4.5.4/wazuh_splunk-4.5.4_8.2-1.tar.gz.sha512
2023-12-20 07:12:24    2.4 MiB 4.x/ui/splunk/wazuh_splunk-4.2.4_8.2.2-1.tar.gz
2023-12-20 07:12:29    2.4 MiB 4.x/ui/splunk/wazuh_splunk-4.3.4_8.2.0-1.tar.gz
2023-12-20 07:12:29    2.4 MiB 4.x/ui/splunk/wazuh_splunk-4.3.4_8.2.1-1.tar.gz
2023-12-20 07:12:29    2.4 MiB 4.x/ui/splunk/wazuh_splunk-4.3.4_8.2.2-1.tar.gz
2023-12-20 07:12:29    2.4 MiB 4.x/ui/splunk/wazuh_splunk-4.3.4_8.2.3-1.tar.gz
2023-12-20 07:12:29    2.4 MiB 4.x/ui/splunk/wazuh_splunk-4.3.4_8.2.4-1.tar.gz
2023-12-20 07:12:29    2.4 MiB 4.x/ui/splunk/wazuh_splunk-4.3.4_8.2.5-1.tar.gz
2023-12-20 07:12:29    2.4 MiB 4.x/ui/splunk/wazuh_splunk-4.3.4_8.2.6-1.tar.gz
2023-12-20 07:12:34    2.4 MiB 4.x/ui/splunk/wazuh_splunk-4.4.4_8.2-1.tar.gz
2023-12-20 07:12:34    2.4 MiB 4.x/ui/splunk/wazuh_splunk-4.5.4_8.2-1.tar.gz
root@wazuh-dev:~# aws s3 ls packages.wazuh.com/4.x/ --recursive  --summarize --human-readable | grep "4.9.0"

[jnasselle]

Deploy the Wazuh Installation Assistant and check the version installed is 4.7.5

- CentOS 7

[vagrant@centos7 ~]$ curl -sO https://packages.wazuh.com/4.7/wazuh-install.sh && sudo bash ./wazuh-install.sh -a -i
30/05/2024 18:08:09 INFO: Starting Wazuh installation assistant. Wazuh version: 4.7.5
30/05/2024 18:08:09 INFO: Verbose logging redirected to /var/log/wazuh-install.log
30/05/2024 18:08:15 WARNING: Hardware and system checks ignored.
30/05/2024 18:08:15 INFO: Wazuh web interface port will be 443.
30/05/2024 18:08:16 WARNING: The system has Firewalld enabled. Please ensure that traffic is allowed on these ports: 1515, 1514, 443.
30/05/2024 18:08:16 INFO: Wazuh repository added.
30/05/2024 18:08:16 INFO: --- Configuration files ---
30/05/2024 18:08:16 INFO: Generating configuration files.
30/05/2024 18:08:17 INFO: Created wazuh-install-files.tar. It contains the Wazuh cluster key, certificates, and passwords necessary for installation.
30/05/2024 18:08:17 INFO: --- Wazuh indexer ---
30/05/2024 18:08:17 INFO: Starting Wazuh indexer installation.
30/05/2024 18:09:54 INFO: Wazuh indexer installation finished.
30/05/2024 18:09:54 INFO: Wazuh indexer post-install configuration finished.
30/05/2024 18:09:54 INFO: Starting service wazuh-indexer.
30/05/2024 18:10:08 INFO: wazuh-indexer service started.
30/05/2024 18:10:08 INFO: Initializing Wazuh indexer cluster security settings.
30/05/2024 18:10:18 INFO: Wazuh indexer cluster initialized.
30/05/2024 18:10:18 INFO: --- Wazuh server ---
30/05/2024 18:10:18 INFO: Starting the Wazuh manager installation.
30/05/2024 18:11:11 INFO: Wazuh manager installation finished.
30/05/2024 18:11:11 INFO: Starting service wazuh-manager.
30/05/2024 18:11:27 INFO: wazuh-manager service started.
30/05/2024 18:11:27 INFO: Starting Filebeat installation.
30/05/2024 18:11:40 INFO: Filebeat installation finished.
30/05/2024 18:11:41 INFO: Filebeat post-install configuration finished.
30/05/2024 18:11:41 INFO: Starting service filebeat.
30/05/2024 18:11:41 INFO: filebeat service started.
30/05/2024 18:11:41 INFO: --- Wazuh dashboard ---
30/05/2024 18:11:41 INFO: Starting Wazuh dashboard installation.
30/05/2024 18:13:21 INFO: Wazuh dashboard installation finished.
30/05/2024 18:13:21 INFO: Wazuh dashboard post-install configuration finished.
30/05/2024 18:13:21 INFO: Starting service wazuh-dashboard.
30/05/2024 18:13:21 INFO: wazuh-dashboard service started.
30/05/2024 18:13:47 INFO: Initializing Wazuh dashboard web application.
30/05/2024 18:13:48 INFO: Wazuh dashboard web application initialized.
30/05/2024 18:13:48 INFO: --- Summary ---
30/05/2024 18:13:48 INFO: You can access the web interface https://<wazuh-dashboard-ip>:443
    User: admin
    Password: SBXj8lsJMCH?jBHXJtryWjfQrf92l+B8
30/05/2024 18:13:48 INFO: Installation finished.

• Ubuntu 22.04

vagrant@ubuntu-jammy:~$ curl -sO https://packages.wazuh.com/4.7/wazuh-install.sh && sudo bash ./wazuh-install.sh -a -i
30/05/2024 18:11:45 INFO: Starting Wazuh installation assistant. Wazuh version: 4.7.5
30/05/2024 18:11:45 INFO: Verbose logging redirected to /var/log/wazuh-install.log
30/05/2024 18:12:10 WARNING: Hardware and system checks ignored.
30/05/2024 18:12:10 INFO: Wazuh web interface port will be 443.
30/05/2024 18:12:14 INFO: --- Dependencies ----
30/05/2024 18:12:14 INFO: Installing apt-transport-https.
30/05/2024 18:12:22 INFO: Wazuh repository added.
30/05/2024 18:12:22 INFO: --- Configuration files ---
30/05/2024 18:12:22 INFO: Generating configuration files.
30/05/2024 18:12:24 INFO: Created wazuh-install-files.tar. It contains the Wazuh cluster key, certificates, and passwords necessary for installation.
30/05/2024 18:12:24 INFO: --- Wazuh indexer ---
30/05/2024 18:12:24 INFO: Starting Wazuh indexer installation.
30/05/2024 18:13:36 INFO: Wazuh indexer installation finished.
30/05/2024 18:13:36 INFO: Wazuh indexer post-install configuration finished.
30/05/2024 18:13:36 INFO: Starting service wazuh-indexer.
30/05/2024 18:13:55 INFO: wazuh-indexer service started.
30/05/2024 18:13:55 INFO: Initializing Wazuh indexer cluster security settings.
30/05/2024 18:14:05 INFO: Wazuh indexer cluster initialized.
30/05/2024 18:14:05 INFO: --- Wazuh server ---
30/05/2024 18:14:05 INFO: Starting the Wazuh manager installation.
30/05/2024 18:14:48 INFO: Wazuh manager installation finished.
30/05/2024 18:14:48 INFO: Starting service wazuh-manager.
30/05/2024 18:15:06 INFO: wazuh-manager service started.
30/05/2024 18:15:06 INFO: Starting Filebeat installation.
30/05/2024 18:15:15 INFO: Filebeat installation finished.
30/05/2024 18:15:16 INFO: Filebeat post-install configuration finished.
30/05/2024 18:15:16 INFO: Starting service filebeat.
30/05/2024 18:15:16 INFO: filebeat service started.
30/05/2024 18:15:16 INFO: --- Wazuh dashboard ---
30/05/2024 18:15:16 INFO: Starting Wazuh dashboard installation.
30/05/2024 18:15:55 INFO: Wazuh dashboard installation finished.
30/05/2024 18:15:55 INFO: Wazuh dashboard post-install configuration finished.
30/05/2024 18:15:55 INFO: Starting service wazuh-dashboard.
30/05/2024 18:15:56 INFO: wazuh-dashboard service started.
30/05/2024 18:16:20 INFO: Initializing Wazuh dashboard web application.
30/05/2024 18:16:21 INFO: Wazuh dashboard web application initialized.
30/05/2024 18:16:21 INFO: --- Summary ---
30/05/2024 18:16:21 INFO: You can access the web interface https://<wazuh-dashboard-ip>:443
    User: admin
    Password: ymwZIO?946Jjg9g2dIc3diUNZHs.q5Rs
30/05/2024 18:16:21 INFO: Installation finished.

WPK versions check

• https://packages.wazuh.com/4.x/wpk/windows/versions
• https://packages.wazuh.com/4.x/wpk/linux/x86_64/versions
• https://packages.wazuh.com/4.x/wpk/macos/x86_64/pkg/versions

Everyone has the proper v4.7.5 entry

[jnasselle]

AMI published.

[jnasselle]

macOS AMD64 🟢

root@macos-14 ~ # /Library/Ossec/bin/wazuh-control info
WAZUH_VERSION="v4.7.4"
WAZUH_REVISION="40717"
WAZUH_TYPE="agent"

root@macos-14 ~ # cat /Library/Ossec/logs/upgrade.log
2024/05/30 12:10:51 - Generating Backup.
tar: Removing leading '/' from member names
a Library/Ossec/active-response
a Library/Ossec/active-response/bin
a Library/Ossec/active-response/bin/restart.sh
a Library/Ossec/active-response/bin/firewall-drop
a Library/Ossec/active-response/bin/host-deny
a Library/Ossec/active-response/bin/firewalld-drop
a Library/Ossec/active-response/bin/kaspersky.py
a Library/Ossec/active-response/bin/default-firewall-drop
a Library/Ossec/active-response/bin/npf
a Library/Ossec/active-response/bin/pf
a Library/Ossec/active-response/bin/ip-customblock
a Library/Ossec/active-response/bin/ipfw
a Library/Ossec/active-response/bin/route-null
a Library/Ossec/active-response/bin/restart-wazuh
a Library/Ossec/active-response/bin/wazuh-slack
a Library/Ossec/active-response/bin/kaspersky
a Library/Ossec/active-response/bin/disable-account
a Library/Ossec/bin
a Library/Ossec/bin/wazuh-control
a Library/Ossec/bin/wazuh-logcollector
a Library/Ossec/bin/wazuh-execd
a Library/Ossec/bin/wazuh-syscheckd
a Library/Ossec/bin/manage_agents
a Library/Ossec/bin/agent-auth
a Library/Ossec/bin/wazuh-agentd
a Library/Ossec/bin/wazuh-modulesd
a Library/Ossec/etc
a Library/Ossec/etc/internal_options.conf
a Library/Ossec/etc/wpk_root.pem
a Library/Ossec/etc/localtime
a Library/Ossec/etc/shared
a Library/Ossec/etc/ossec.conf
a Library/Ossec/etc/local_internal_options.conf
a Library/Ossec/etc/client.keys
a Library/Ossec/etc/shared/cis_win2012r2_memberL1_rcl.txt
a Library/Ossec/etc/shared/win_audit_rcl.txt
a Library/Ossec/etc/shared/rootkit_trojans.txt
a Library/Ossec/etc/shared/agent.conf
a Library/Ossec/etc/shared/cis_win2012r2_domainL1_rcl.txt
a Library/Ossec/etc/shared/cis_rhel6_linux_rcl.txt
a Library/Ossec/etc/shared/cis_win2012r2_memberL2_rcl.txt
a Library/Ossec/etc/shared/cis_apache2224_rcl.txt
a Library/Ossec/etc/shared/win_applications_rcl.txt
a Library/Ossec/etc/shared/cis_win2012r2_domainL2_rcl.txt
a Library/Ossec/etc/shared/cis_rhel5_linux_rcl.txt
a Library/Ossec/etc/shared/cis_debian_linux_rcl.txt
a Library/Ossec/etc/shared/system_audit_rcl.txt
a Library/Ossec/etc/shared/merged.mg
a Library/Ossec/etc/shared/win_malware_rcl.txt
a Library/Ossec/etc/shared/ar.conf
a Library/Ossec/etc/shared/cis_rhel7_linux_rcl.txt
a Library/Ossec/etc/shared/cis_mysql5-6_enterprise_rcl.txt
a Library/Ossec/etc/shared/system_audit_ssh.txt
a Library/Ossec/etc/shared/cis_mysql5-6_community_rcl.txt
a Library/Ossec/etc/shared/cis_sles12_linux_rcl.txt
a Library/Ossec/etc/shared/cis_rhel_linux_rcl.txt
a Library/Ossec/etc/shared/rootkit_files.txt
a Library/Ossec/etc/shared/cis_sles11_linux_rcl.txt
a Library/Ossec/lib
a Library/Ossec/lib/libfimdb.dylib
a Library/Ossec/lib/libwazuhshared.dylib
a Library/Ossec/lib/libsysinfo.dylib
a Library/Ossec/lib/libdbsync.dylib
a Library/Ossec/lib/librsync.dylib
a Library/Ossec/lib/libsyscollector.dylib
a Library/Ossec/lib/libwazuhext.dylib
a Library/Ossec/queue
a Library/Ossec/queue/sockets
a Library/Ossec/queue/alerts
a Library/Ossec/queue/syscollector
a Library/Ossec/queue/fim
a Library/Ossec/queue/logcollector
a Library/Ossec/queue/rids
a Library/Ossec/queue/rids/sender_counter
a Library/Ossec/queue/rids/001
a Library/Ossec/queue/logcollector/file_status.json
a Library/Ossec/queue/fim/db
a Library/Ossec/queue/fim/db/fim.db-journal
a Library/Ossec/queue/fim/db/fim.db
a Library/Ossec/queue/syscollector/db
a Library/Ossec/queue/syscollector/norm_config.json
a Library/Ossec/queue/syscollector/db/local.db-journal
a Library/Ossec/queue/syscollector/db/local.db
a Library/Ossec/queue/alerts/execqtar: Library/Ossec/queue/alerts/execq: Library/Ossec/queue/alerts/execq: pax format cannot archive sockets

a Library/Ossec/queue/alerts/cfgaqtar: Library/Ossec/queue/alerts/cfgaq: Library/Ossec/queue/alerts/cfgaq: pax format cannot archive sockets

a Library/Ossec/queue/sockets/syschecktar: Library/Ossec/queue/sockets/syscheck: Library/Ossec/queue/sockets/syscheck: pax format cannot archive sockets

a Library/Ossec/queue/sockets/upgradetar: Library/Ossec/queue/sockets/upgrade: Library/Ossec/queue/sockets/upgrade: pax format cannot archive sockets

a Library/Ossec/queue/sockets/wmodulestar: Library/Ossec/queue/sockets/wmodules: Library/Ossec/queue/sockets/wmodules: pax format cannot archive sockets

a Library/Ossec/queue/sockets/queuetar: Library/Ossec/queue/sockets/queue: Library/Ossec/queue/sockets/queue: pax format cannot archive sockets

a Library/Ossec/queue/sockets/.agent_info
a Library/Ossec/queue/sockets/logcollectortar: Library/Ossec/queue/sockets/logcollector: Library/Ossec/queue/sockets/logcollector: pax format cannot archive sockets

a Library/Ossec/queue/sockets/controltar: Library/Ossec/queue/sockets/control: Library/Ossec/queue/sockets/control: pax format cannot archive sockets

a Library/Ossec/queue/sockets/comtar: Library/Ossec/queue/sockets/com: Library/Ossec/queue/sockets/com: pax format cannot archive sockets

a Library/Ossec/ruleset
a Library/Ossec/ruleset/sca
a Library/Ossec/ruleset/sca/cis_apple_macOS_14.0.yml
a Library/Ossec/wodles
a Library/Ossec/wodles/gcloud
a Library/Ossec/wodles/docker
a Library/Ossec/wodles/azure
a Library/Ossec/wodles/init.py
a Library/Ossec/wodles/utils.py
a Library/Ossec/wodles/aws
a Library/Ossec/wodles/aws/aws-s3
a Library/Ossec/wodles/azure/orm.py
a Library/Ossec/wodles/azure/azure-logs
a Library/Ossec/wodles/docker/DockerListener
a Library/Ossec/wodles/gcloud/gcloud
a Library/Ossec/wodles/gcloud/buckets
a Library/Ossec/wodles/gcloud/tools.py
a Library/Ossec/wodles/gcloud/integration.py
a Library/Ossec/wodles/gcloud/pubsub
a Library/Ossec/wodles/gcloud/exceptions.py
a Library/Ossec/wodles/gcloud/pubsub/subscriber.py
a Library/Ossec/wodles/gcloud/buckets/bucket.py
a Library/Ossec/wodles/gcloud/buckets/access_logs.py
a Library/Ossec/agentless
a Library/Ossec/agentless/ssh.exp
a Library/Ossec/agentless/ssh_pixconfig_diff
a Library/Ossec/agentless/ssh_integrity_check_bsd
a Library/Ossec/agentless/ssh_generic_diff
a Library/Ossec/agentless/ssh_integrity_check_linux
a Library/Ossec/agentless/ssh_asa-fwsmconfig_diff
a Library/Ossec/agentless/main.exp
a Library/Ossec/agentless/ssh_nopass.exp
a Library/Ossec/agentless/ssh_foundry_diff
a Library/Ossec/agentless/register_host.sh
a Library/Ossec/agentless/sshlogin.exp
a Library/Ossec/agentless/su.exp
a Library/Ossec/logs/wazuh
a Library/Ossec/var/selinux
a Library/LaunchDaemons/com.wazuh.agent.plist
a Library/StartupItems/WAZUH
a Library/StartupItems/WAZUH/Wazuh-launcher
a Library/StartupItems/WAZUH/StartupParameters.plist
a Library/StartupItems/WAZUH/WAZUH
2024/05/30 12:10:52 - Backup generated in /Library/Ossec/backup/backup_[05-30-2024_12-10-51].tar.gz
2024/05/30 12:10:52 - Upgrade started.
installer: Package name is Wazuh Agent
installer: Upgrading at base path /
installer: The upgrade was successful.
2024/05/30 12:11:07 - Installation result = 0
2024/05/30 12:11:07 - Waiting connection... Remaining attempts: 30.
2024/05/30 12:11:08 - Status = connected.
2024/05/30 12:11:08 - Connected to manager.
2024/05/30 12:11:08 - Upgrade finished successfully.

root@macos-14 ~ # /Library/Ossec/bin/wazuh-control info
WAZUH_VERSION="v4.7.5"
WAZUH_REVISION="40720"
WAZUH_TYPE="agent"
root@macos-14 ~ #

[root@ip-172-31-42-103 centos]# /var/ossec/bin/agent_control -i 001
Wazuh agent_control. Agent information:
Agent ID: 001
Agent Name: macos-14
IP address: any
Status: Active

Operating system: Darwin |macos-14 |23.4.0 |Darwin Kernel Version 23.4.0: Fri Mar 15 00:11:05 PDT 2024; root:xnu-10063.101.17~1/RELEASE_X86_64 |x86_64
Client version: Wazuh v4.7.5
Configuration hash: ab73af41699f13fdd81903b5f23d8d00
Shared file hash: 4a8724b20dee0124ff9656783c490c4e
Last keep alive: 1717096785

Syscheck last started at: Thu May 30 19:11:01 2024
Syscheck last ended at: Thu May 30 19:11:10 2024

[root@ip-172-31-42-103 centos]# /var/ossec/bin/agent_upgrade -a 001

Upgrading...

Failed upgrades:
Agent 001 status: Timeout reached while waiting for the response from the agent

[damarisg]

Windows 10 🟢

Wazuh 4.7.4 - Agent

Upgrade to Wazuh 4.7.5 - Agent

Upgrade.log

2024-05-30 17:58:01Z - Sysnative Powershell will be used to access the registry.
2024-05-30 17:58:01Z - Current version: v4.7.4.
2024-05-30 17:58:01Z - Generating backup.
2024-05-30 17:58:01Z - Backing up Wazuh home files.
2024-05-30 17:58:42Z - Searching Wazuh-Agent cached MSI through the registry.
2024-05-30 17:58:44Z - Backing up Wazuh-Agent cached MSI: "C:\Windows\Installer\a32bdb.msi".
2024-05-30 17:58:54Z - Trying to stop Wazuh service.
2024-05-30 17:59:59Z - Trying to stop Wazuh service again. Remaining attempts: 5.
2024-05-30 18:00:01Z - Trying to stop Wazuh service again. Remaining attempts: 4.
2024-05-30 18:00:03Z - Trying to stop Wazuh service again. Remaining attempts: 3.
2024-05-30 18:00:05Z - Trying to stop Wazuh service again. Remaining attempts: 2.
2024-05-30 18:00:07Z - Trying to stop Wazuh service again. Remaining attempts: 1.
2024-05-30 18:00:09Z - Killing process.
2024-05-30 18:00:47Z - Starting upgrade processs.
2024-05-30 18:03:08Z - Restarting Wazuh-Agent service.
2024-05-30 18:03:15Z - Installation finished.
2024-05-30 18:03:16Z - Process ID: 4412.
2024-05-30 18:06:54Z - Reading status file: status='connected'.
2024-05-30 18:07:08Z - Upgrade finished successfully.
2024-05-30 18:07:09Z - New version: v4.7.5.

Check Errors on Agent

[damarisg]

CentOS 8 🟢

Wazuh 4.7.4 - Agent

[root@localhost ~]# /var/ossec/bin/wazuh-control info
WAZUH_VERSION="v4.7.4"
WAZUH_REVISION="40717"
WAZUH_TYPE="agent"

Check on Manager

[root@localhost vagrant]# /var/ossec/bin/agent_control -i 002

Wazuh agent_control. Agent information:
Agent ID: 002
Agent Name: agent
IP address: any
Status: Active

Operating system: Linux |agent |4.18.0-240.1.1.el8_3.x86_64 |#1 SMP Thu Nov 19 17:20:08 UTC 2020 |x86_64
Client version: Wazuh v4.7.4
Configuration hash: ab73af41699f13fdd81903b5f23d8d00
Shared file hash: 4a8724b20dee0124ff9656783c490c4e
Last keep alive: 1717096270

Syscheck last started at: Thu May 30 19:11:11 2024 (Scan in progress)
Syscheck last ended at: Unknown

Upgrade to Wazuh 4.7.5 - Agent

On Manager

[root@localhost vagrant]# /var/ossec/bin/agent_upgrade -a 002 -F

Upgrading...

Upgraded agents:
Agent 002 upgraded: Wazuh v4.7.5 -> Wazuh v4.7.5

Check on Agent

[root@localhost ~]# /var/ossec/bin/wazuh-control info
WAZUH_VERSION="v4.7.5"
WAZUH_REVISION="40720"
WAZUH_TYPE="agent"

Upgrade.log - Agent

/var/ossec/var/selinux/wazuh.pp
/usr/lib/systemd/system/wazuh-agent.service
2024/05/30 19:24:16 - Backup generated in /var/ossec/backup/backup_[05-30-2024_19-24-14].tar.gz
2024/05/30 19:24:16 - Upgrade started.

 Wazuh v4.7.5 (Rev. 40720) Installation Script - https://www.wazuh.com

 You are about to start the installation process of Wazuh.
 You must have a C compiler pre-installed in your system.

  - System: Linux agent 4.18.0-240.1.1.el8_3.x86_64 (centos 8.3)
  - User: root
  - Host: agent


  -- Press ENTER to continue or Ctrl-C to abort. --

 - You already have Wazuh installed. Do you want to update it? (y/n):
    - Installation will be made at  /var/ossec .

4- Installing the system

DIR="/var/ossec"
 - Running the Makefile

Stopping Wazuh...
agent
Wait for success...
success
Removing old SCA policies...
Installing SCA policies...


Wait for success...
success
Starting Wazuh...

 - Configuration finished properly.

 - To start Wazuh:
      /var/ossec/bin/wazuh-control start

 - To stop Wazuh:
      /var/ossec/bin/wazuh-control stop

 - The configuration can be viewed or modified at /var/ossec/etc/ossec.conf


   Thanks for using Wazuh.
   Please don't hesitate to contact us if you need help or find
   any bugs.

   Use our public Mailing List at:
          https://groups.google.com/forum/#!forum/wazuh

   More information can be found at:
          - http://www.wazuh.com

    ---  Press ENTER to finish (maybe more information below). ---

 - Update completed.

2024/05/30 19:25:05 - Installation result = 0
2024/05/30 19:25:05 - Waiting connection... Remaining attempts: 30.
2024/05/30 19:25:06 - Status = connected.
2024/05/30 19:25:06 - Connected to manager.
2024/05/30 19:25:06 - Upgrade finished successfully.
2024/05/30 19:32:45 - Generating Backup.
tar: Removing leading `/' from member names
/var/ossec/active-response/
/var/ossec/active-response/bin/
/var/ossec/active-response/bin/restart.sh
tar: Removing leading `/' from hard link targets
/var/ossec/active-response/bin/kaspersky.py
/var/ossec/active-response/bin/firewall-drop
/var/ossec/active-response/bin/default-firewall-drop
/var/ossec/active-response/bin/pf
/var/ossec/active-response/bin/npf
/var/ossec/active-response/bin/ipfw
/var/ossec/active-response/bin/firewalld-drop
/var/ossec/active-response/bin/disable-account
/var/ossec/active-response/bin/host-deny
/var/ossec/active-response/bin/ip-customblock
/var/ossec/active-response/bin/restart-wazuh
/var/ossec/active-response/bin/route-null
/var/ossec/active-response/bin/kaspersky
/var/ossec/active-response/bin/wazuh-slack
/var/ossec/bin/
/var/ossec/bin/wazuh-logcollector
/var/ossec/bin/wazuh-syscheckd
/var/ossec/bin/wazuh-execd
/var/ossec/bin/manage_agents
/var/ossec/bin/wazuh-control
/var/ossec/bin/wazuh-modulesd
/var/ossec/bin/wazuh-agentd
/var/ossec/bin/agent-auth
/var/ossec/etc/
/var/ossec/etc/client.keys
/var/ossec/etc/local_internal_options.conf
/var/ossec/etc/ossec.conf
/var/ossec/etc/shared/
/var/ossec/etc/shared/cis_win2012r2_memberL1_rcl.txt
/var/ossec/etc/shared/cis_win2012r2_memberL2_rcl.txt
/var/ossec/etc/shared/rootkit_files.txt
/var/ossec/etc/shared/rootkit_trojans.txt
/var/ossec/etc/shared/system_audit_rcl.txt
/var/ossec/etc/shared/system_audit_ssh.txt
/var/ossec/etc/shared/win_applications_rcl.txt
/var/ossec/etc/shared/win_audit_rcl.txt
/var/ossec/etc/shared/win_malware_rcl.txt
/var/ossec/etc/shared/merged.mg
/var/ossec/etc/shared/ar.conf
/var/ossec/etc/shared/agent.conf
/var/ossec/etc/shared/cis_apache2224_rcl.txt
/var/ossec/etc/shared/cis_debian_linux_rcl.txt
/var/ossec/etc/shared/cis_mysql5-6_community_rcl.txt
/var/ossec/etc/shared/cis_mysql5-6_enterprise_rcl.txt
/var/ossec/etc/shared/cis_rhel5_linux_rcl.txt
/var/ossec/etc/shared/cis_rhel6_linux_rcl.txt
/var/ossec/etc/shared/cis_rhel7_linux_rcl.txt
/var/ossec/etc/shared/cis_rhel_linux_rcl.txt
/var/ossec/etc/shared/cis_sles11_linux_rcl.txt
/var/ossec/etc/shared/cis_sles12_linux_rcl.txt
/var/ossec/etc/shared/cis_win2012r2_domainL1_rcl.txt
/var/ossec/etc/shared/cis_win2012r2_domainL2_rcl.txt
/var/ossec/etc/localtime
/var/ossec/etc/internal_options.conf~
/var/ossec/etc/internal_options.conf
/var/ossec/etc/wpk_root.pem
/var/ossec/lib/
/var/ossec/lib/libwazuhext.so
/var/ossec/lib/libwazuhshared.so
/var/ossec/lib/libdbsync.so
/var/ossec/lib/librsync.so
/var/ossec/lib/libsysinfo.so
/var/ossec/lib/libfimdb.so
/var/ossec/lib/libsyscollector.so
/var/ossec/lib/libstdc++.so.6
/var/ossec/lib/libgcc_s.so.1
/var/ossec/queue/
/var/ossec/queue/alerts/
tar: /var/ossec/queue/alerts/execq: socket ignored
tar: /var/ossec/queue/alerts/cfgaq: socket ignored
/var/ossec/queue/fim/
/var/ossec/queue/fim/db/
/var/ossec/queue/fim/db/fim.db-journal
/var/ossec/queue/fim/db/fim.db
/var/ossec/queue/logcollector/
/var/ossec/queue/logcollector/file_status.json
/var/ossec/queue/rids/
/var/ossec/queue/rids/002
/var/ossec/queue/rids/sender_counter
/var/ossec/queue/sockets/
/var/ossec/queue/sockets/.agent_info
tar: /var/ossec/queue/sockets/com: socket ignored
tar: /var/ossec/queue/sockets/queue: socket ignored
tar: /var/ossec/queue/sockets/syscheck: socket ignored
tar: /var/ossec/queue/sockets/logcollector: socket ignored
tar: /var/ossec/queue/sockets/wmodules: socket ignored
tar: /var/ossec/queue/sockets/upgrade: socket ignored
tar: /var/ossec/queue/sockets/control: socket ignored
/var/ossec/queue/syscollector/
/var/ossec/queue/syscollector/db/
/var/ossec/queue/syscollector/db/local.db-journal
/var/ossec/queue/syscollector/db/local.db
/var/ossec/queue/syscollector/norm_config.json
/var/ossec/ruleset/
/var/ossec/ruleset/sca/
/var/ossec/ruleset/sca/cis_centos8_linux.yml
/var/ossec/wodles/
/var/ossec/wodles/aws/
/var/ossec/wodles/aws/aws-s3
/var/ossec/wodles/azure/
/var/ossec/wodles/azure/azure-logs
/var/ossec/wodles/azure/orm.py
/var/ossec/wodles/docker/
/var/ossec/wodles/docker/DockerListener
/var/ossec/wodles/gcloud/
/var/ossec/wodles/gcloud/buckets/
/var/ossec/wodles/gcloud/buckets/bucket.py
/var/ossec/wodles/gcloud/buckets/access_logs.py
/var/ossec/wodles/gcloud/pubsub/
/var/ossec/wodles/gcloud/pubsub/subscriber.py
/var/ossec/wodles/gcloud/gcloud
/var/ossec/wodles/gcloud/integration.py
/var/ossec/wodles/gcloud/tools.py
/var/ossec/wodles/gcloud/exceptions.py
/var/ossec/wodles/__init__.py
/var/ossec/wodles/utils.py
/var/ossec/agentless/
/var/ossec/agentless/main.exp
/var/ossec/agentless/register_host.sh
/var/ossec/agentless/ssh_asa-fwsmconfig_diff
/var/ossec/agentless/ssh.exp
/var/ossec/agentless/ssh_foundry_diff
/var/ossec/agentless/ssh_generic_diff
/var/ossec/agentless/ssh_integrity_check_bsd
/var/ossec/agentless/ssh_integrity_check_linux
/var/ossec/agentless/sshlogin.exp
/var/ossec/agentless/ssh_nopass.exp
/var/ossec/agentless/ssh_pixconfig_diff
/var/ossec/agentless/su.exp
/var/ossec/logs/wazuh/
/var/ossec/var/selinux/
/var/ossec/var/selinux/wazuh.pp
/usr/lib/systemd/system/wazuh-agent.service
2024/05/30 19:32:47 - Backup generated in /var/ossec/backup/backup_[05-30-2024_19-32-45].tar.gz
2024/05/30 19:32:47 - Upgrade started.

 Wazuh v4.7.5 (Rev. 40720) Installation Script - https://www.wazuh.com

 You are about to start the installation process of Wazuh.
 You must have a C compiler pre-installed in your system.

  - System: Linux agent 4.18.0-240.1.1.el8_3.x86_64 (centos 8.3)
  - User: root
  - Host: agent


  -- Press ENTER to continue or Ctrl-C to abort. --

 - You already have Wazuh installed. Do you want to update it? (y/n):
    - Installation will be made at  /var/ossec .

4- Installing the system

DIR="/var/ossec"
 - Running the Makefile

Stopping Wazuh...
agent
Wait for success...
success
Removing old SCA policies...
Installing SCA policies...


Wait for success...
success
Starting Wazuh...

 - Configuration finished properly.

 - To start Wazuh:
      /var/ossec/bin/wazuh-control start

 - To stop Wazuh:
      /var/ossec/bin/wazuh-control stop

 - The configuration can be viewed or modified at /var/ossec/etc/ossec.conf


   Thanks for using Wazuh.
   Please don't hesitate to contact us if you need help or find
   any bugs.

   Use our public Mailing List at:
          https://groups.google.com/forum/#!forum/wazuh

   More information can be found at:
          - http://www.wazuh.com

    ---  Press ENTER to finish (maybe more information below). ---

 - Update completed.

2024/05/30 19:33:40 - Installation result = 0
2024/05/30 19:33:40 - Waiting connection... Remaining attempts: 30.
2024/05/30 19:33:41 - Status = connected.
2024/05/30 19:33:41 - Connected to manager.
2024/05/30 19:33:41 - Upgrade finished successfully.
[root@localhost ~]#  cat /var/ossec/logs/upgrade.log
2024/05/30 19:24:14 - Generating Backup.
tar: Removing leading `/' from member names
/var/ossec/active-response/
/var/ossec/active-response/bin/
/var/ossec/active-response/bin/default-firewall-drop
tar: Removing leading `/' from hard link targets
/var/ossec/active-response/bin/disable-account
/var/ossec/active-response/bin/firewall-drop
/var/ossec/active-response/bin/firewalld-drop
/var/ossec/active-response/bin/host-deny
/var/ossec/active-response/bin/ip-customblock
/var/ossec/active-response/bin/ipfw
/var/ossec/active-response/bin/kaspersky
/var/ossec/active-response/bin/kaspersky.py
/var/ossec/active-response/bin/npf
/var/ossec/active-response/bin/pf
/var/ossec/active-response/bin/restart-wazuh
/var/ossec/active-response/bin/restart.sh
/var/ossec/active-response/bin/route-null
/var/ossec/active-response/bin/wazuh-slack
/var/ossec/bin/
/var/ossec/bin/agent-auth
/var/ossec/bin/manage_agents
/var/ossec/bin/wazuh-agentd
/var/ossec/bin/wazuh-control
/var/ossec/bin/wazuh-execd
/var/ossec/bin/wazuh-logcollector
/var/ossec/bin/wazuh-modulesd
/var/ossec/bin/wazuh-syscheckd
/var/ossec/etc/
/var/ossec/etc/client.keys
/var/ossec/etc/internal_options.conf
/var/ossec/etc/local_internal_options.conf
/var/ossec/etc/localtime
/var/ossec/etc/ossec.conf
/var/ossec/etc/shared/
/var/ossec/etc/shared/cis_apache2224_rcl.txt
/var/ossec/etc/shared/cis_debian_linux_rcl.txt
/var/ossec/etc/shared/cis_mysql5-6_community_rcl.txt
/var/ossec/etc/shared/cis_mysql5-6_enterprise_rcl.txt
/var/ossec/etc/shared/cis_rhel5_linux_rcl.txt
/var/ossec/etc/shared/cis_rhel6_linux_rcl.txt
/var/ossec/etc/shared/cis_rhel7_linux_rcl.txt
/var/ossec/etc/shared/cis_rhel_linux_rcl.txt
/var/ossec/etc/shared/cis_sles11_linux_rcl.txt
/var/ossec/etc/shared/cis_sles12_linux_rcl.txt
/var/ossec/etc/shared/cis_win2012r2_domainL1_rcl.txt
/var/ossec/etc/shared/cis_win2012r2_domainL2_rcl.txt
/var/ossec/etc/shared/cis_win2012r2_memberL1_rcl.txt
/var/ossec/etc/shared/cis_win2012r2_memberL2_rcl.txt
/var/ossec/etc/shared/rootkit_files.txt
/var/ossec/etc/shared/rootkit_trojans.txt
/var/ossec/etc/shared/system_audit_rcl.txt
/var/ossec/etc/shared/system_audit_ssh.txt
/var/ossec/etc/shared/win_applications_rcl.txt
/var/ossec/etc/shared/win_audit_rcl.txt
/var/ossec/etc/shared/win_malware_rcl.txt
/var/ossec/etc/shared/merged.mg
/var/ossec/etc/shared/ar.conf
/var/ossec/etc/shared/agent.conf
/var/ossec/etc/wpk_root.pem
/var/ossec/lib/
/var/ossec/lib/libdbsync.so
/var/ossec/lib/libfimdb.so
/var/ossec/lib/libgcc_s.so.1
/var/ossec/lib/librsync.so
/var/ossec/lib/libstdc++.so.6
/var/ossec/lib/libsyscollector.so
/var/ossec/lib/libsysinfo.so
/var/ossec/lib/libwazuhext.so
/var/ossec/lib/libwazuhshared.so
/var/ossec/queue/
/var/ossec/queue/alerts/
tar: /var/ossec/queue/alerts/execq: socket ignored
tar: /var/ossec/queue/alerts/cfgaq: socket ignored
/var/ossec/queue/fim/
/var/ossec/queue/fim/db/
/var/ossec/queue/fim/db/fim.db-journal
/var/ossec/queue/fim/db/fim.db
/var/ossec/queue/logcollector/
/var/ossec/queue/logcollector/file_status.json
/var/ossec/queue/rids/
/var/ossec/queue/rids/002
/var/ossec/queue/rids/sender_counter
/var/ossec/queue/sockets/
/var/ossec/queue/sockets/.agent_info
tar: /var/ossec/queue/sockets/com: socket ignored
tar: /var/ossec/queue/sockets/queue: socket ignored
tar: /var/ossec/queue/sockets/syscheck: socket ignored
tar: /var/ossec/queue/sockets/logcollector: socket ignored
tar: /var/ossec/queue/sockets/wmodules: socket ignored
tar: /var/ossec/queue/sockets/upgrade: socket ignored
tar: /var/ossec/queue/sockets/control: socket ignored
/var/ossec/queue/syscollector/
/var/ossec/queue/syscollector/db/
/var/ossec/queue/syscollector/db/local.db-journal
/var/ossec/queue/syscollector/db/local.db
/var/ossec/queue/syscollector/norm_config.json
/var/ossec/ruleset/
/var/ossec/ruleset/sca/
/var/ossec/ruleset/sca/cis_centos8_linux.yml
/var/ossec/wodles/
/var/ossec/wodles/__init__.py
/var/ossec/wodles/aws/
/var/ossec/wodles/aws/aws-s3
/var/ossec/wodles/azure/
/var/ossec/wodles/azure/azure-logs
/var/ossec/wodles/azure/orm.py
/var/ossec/wodles/docker/
/var/ossec/wodles/docker/DockerListener
/var/ossec/wodles/gcloud/
/var/ossec/wodles/gcloud/buckets/
/var/ossec/wodles/gcloud/buckets/access_logs.py
/var/ossec/wodles/gcloud/buckets/bucket.py
/var/ossec/wodles/gcloud/exceptions.py
/var/ossec/wodles/gcloud/gcloud
/var/ossec/wodles/gcloud/integration.py
/var/ossec/wodles/gcloud/pubsub/
/var/ossec/wodles/gcloud/pubsub/subscriber.py
/var/ossec/wodles/gcloud/tools.py
/var/ossec/wodles/utils.py
/var/ossec/agentless/
/var/ossec/agentless/main.exp
/var/ossec/agentless/register_host.sh
/var/ossec/agentless/ssh.exp
/var/ossec/agentless/ssh_asa-fwsmconfig_diff
/var/ossec/agentless/ssh_foundry_diff
/var/ossec/agentless/ssh_generic_diff
/var/ossec/agentless/ssh_integrity_check_bsd
/var/ossec/agentless/ssh_integrity_check_linux
/var/ossec/agentless/ssh_nopass.exp
/var/ossec/agentless/ssh_pixconfig_diff
/var/ossec/agentless/sshlogin.exp
/var/ossec/agentless/su.exp
/var/ossec/logs/wazuh/
/var/ossec/var/selinux/
/var/ossec/var/selinux/wazuh.pp
/usr/lib/systemd/system/wazuh-agent.service
2024/05/30 19:24:16 - Backup generated in /var/ossec/backup/backup_[05-30-2024_19-24-14].tar.gz
2024/05/30 19:24:16 - Upgrade started.

 Wazuh v4.7.5 (Rev. 40720) Installation Script - https://www.wazuh.com

 You are about to start the installation process of Wazuh.
 You must have a C compiler pre-installed in your system.

  - System: Linux agent 4.18.0-240.1.1.el8_3.x86_64 (centos 8.3)
  - User: root
  - Host: agent


  -- Press ENTER to continue or Ctrl-C to abort. --

 - You already have Wazuh installed. Do you want to update it? (y/n):
    - Installation will be made at  /var/ossec .

4- Installing the system

DIR="/var/ossec"
 - Running the Makefile

Stopping Wazuh...
agent
Wait for success...
success
Removing old SCA policies...
Installing SCA policies...


Wait for success...
success
Starting Wazuh...

 - Configuration finished properly.

 - To start Wazuh:
      /var/ossec/bin/wazuh-control start

 - To stop Wazuh:
      /var/ossec/bin/wazuh-control stop

 - The configuration can be viewed or modified at /var/ossec/etc/ossec.conf


   Thanks for using Wazuh.
   Please don't hesitate to contact us if you need help or find
   any bugs.

   Use our public Mailing List at:
          https://groups.google.com/forum/#!forum/wazuh

   More information can be found at:
          - http://www.wazuh.com

    ---  Press ENTER to finish (maybe more information below). ---

 - Update completed.

2024/05/30 19:25:05 - Installation result = 0
2024/05/30 19:25:05 - Waiting connection... Remaining attempts: 30.
2024/05/30 19:25:06 - Status = connected.
2024/05/30 19:25:06 - Connected to manager.
2024/05/30 19:25:06 - Upgrade finished successfully.
2024/05/30 19:32:45 - Generating Backup.
tar: Removing leading `/' from member names
/var/ossec/active-response/
/var/ossec/active-response/bin/
/var/ossec/active-response/bin/restart.sh
tar: Removing leading `/' from hard link targets
/var/ossec/active-response/bin/kaspersky.py
/var/ossec/active-response/bin/firewall-drop
/var/ossec/active-response/bin/default-firewall-drop
/var/ossec/active-response/bin/pf
/var/ossec/active-response/bin/npf
/var/ossec/active-response/bin/ipfw
/var/ossec/active-response/bin/firewalld-drop
/var/ossec/active-response/bin/disable-account
/var/ossec/active-response/bin/host-deny
/var/ossec/active-response/bin/ip-customblock
/var/ossec/active-response/bin/restart-wazuh
/var/ossec/active-response/bin/route-null
/var/ossec/active-response/bin/kaspersky
/var/ossec/active-response/bin/wazuh-slack
/var/ossec/bin/
/var/ossec/bin/wazuh-logcollector
/var/ossec/bin/wazuh-syscheckd
/var/ossec/bin/wazuh-execd
/var/ossec/bin/manage_agents
/var/ossec/bin/wazuh-control
/var/ossec/bin/wazuh-modulesd
/var/ossec/bin/wazuh-agentd
/var/ossec/bin/agent-auth
/var/ossec/etc/
/var/ossec/etc/client.keys
/var/ossec/etc/local_internal_options.conf
/var/ossec/etc/ossec.conf
/var/ossec/etc/shared/
/var/ossec/etc/shared/cis_win2012r2_memberL1_rcl.txt
/var/ossec/etc/shared/cis_win2012r2_memberL2_rcl.txt
/var/ossec/etc/shared/rootkit_files.txt
/var/ossec/etc/shared/rootkit_trojans.txt
/var/ossec/etc/shared/system_audit_rcl.txt
/var/ossec/etc/shared/system_audit_ssh.txt
/var/ossec/etc/shared/win_applications_rcl.txt
/var/ossec/etc/shared/win_audit_rcl.txt
/var/ossec/etc/shared/win_malware_rcl.txt
/var/ossec/etc/shared/merged.mg
/var/ossec/etc/shared/ar.conf
/var/ossec/etc/shared/agent.conf
/var/ossec/etc/shared/cis_apache2224_rcl.txt
/var/ossec/etc/shared/cis_debian_linux_rcl.txt
/var/ossec/etc/shared/cis_mysql5-6_community_rcl.txt
/var/ossec/etc/shared/cis_mysql5-6_enterprise_rcl.txt
/var/ossec/etc/shared/cis_rhel5_linux_rcl.txt
/var/ossec/etc/shared/cis_rhel6_linux_rcl.txt
/var/ossec/etc/shared/cis_rhel7_linux_rcl.txt
/var/ossec/etc/shared/cis_rhel_linux_rcl.txt
/var/ossec/etc/shared/cis_sles11_linux_rcl.txt
/var/ossec/etc/shared/cis_sles12_linux_rcl.txt
/var/ossec/etc/shared/cis_win2012r2_domainL1_rcl.txt
/var/ossec/etc/shared/cis_win2012r2_domainL2_rcl.txt
/var/ossec/etc/localtime
/var/ossec/etc/internal_options.conf~
/var/ossec/etc/internal_options.conf
/var/ossec/etc/wpk_root.pem
/var/ossec/lib/
/var/ossec/lib/libwazuhext.so
/var/ossec/lib/libwazuhshared.so
/var/ossec/lib/libdbsync.so
/var/ossec/lib/librsync.so
/var/ossec/lib/libsysinfo.so
/var/ossec/lib/libfimdb.so
/var/ossec/lib/libsyscollector.so
/var/ossec/lib/libstdc++.so.6
/var/ossec/lib/libgcc_s.so.1
/var/ossec/queue/
/var/ossec/queue/alerts/
tar: /var/ossec/queue/alerts/execq: socket ignored
tar: /var/ossec/queue/alerts/cfgaq: socket ignored
/var/ossec/queue/fim/
/var/ossec/queue/fim/db/
/var/ossec/queue/fim/db/fim.db-journal
/var/ossec/queue/fim/db/fim.db
/var/ossec/queue/logcollector/
/var/ossec/queue/logcollector/file_status.json
/var/ossec/queue/rids/
/var/ossec/queue/rids/002
/var/ossec/queue/rids/sender_counter
/var/ossec/queue/sockets/
/var/ossec/queue/sockets/.agent_info
tar: /var/ossec/queue/sockets/com: socket ignored
tar: /var/ossec/queue/sockets/queue: socket ignored
tar: /var/ossec/queue/sockets/syscheck: socket ignored
tar: /var/ossec/queue/sockets/logcollector: socket ignored
tar: /var/ossec/queue/sockets/wmodules: socket ignored
tar: /var/ossec/queue/sockets/upgrade: socket ignored
tar: /var/ossec/queue/sockets/control: socket ignored
/var/ossec/queue/syscollector/
/var/ossec/queue/syscollector/db/
/var/ossec/queue/syscollector/db/local.db-journal
/var/ossec/queue/syscollector/db/local.db
/var/ossec/queue/syscollector/norm_config.json
/var/ossec/ruleset/
/var/ossec/ruleset/sca/
/var/ossec/ruleset/sca/cis_centos8_linux.yml
/var/ossec/wodles/
/var/ossec/wodles/aws/
/var/ossec/wodles/aws/aws-s3
/var/ossec/wodles/azure/
/var/ossec/wodles/azure/azure-logs
/var/ossec/wodles/azure/orm.py
/var/ossec/wodles/docker/
/var/ossec/wodles/docker/DockerListener
/var/ossec/wodles/gcloud/
/var/ossec/wodles/gcloud/buckets/
/var/ossec/wodles/gcloud/buckets/bucket.py
/var/ossec/wodles/gcloud/buckets/access_logs.py
/var/ossec/wodles/gcloud/pubsub/
/var/ossec/wodles/gcloud/pubsub/subscriber.py
/var/ossec/wodles/gcloud/gcloud
/var/ossec/wodles/gcloud/integration.py
/var/ossec/wodles/gcloud/tools.py
/var/ossec/wodles/gcloud/exceptions.py
/var/ossec/wodles/__init__.py
/var/ossec/wodles/utils.py
/var/ossec/agentless/
/var/ossec/agentless/main.exp
/var/ossec/agentless/register_host.sh
/var/ossec/agentless/ssh_asa-fwsmconfig_diff
/var/ossec/agentless/ssh.exp
/var/ossec/agentless/ssh_foundry_diff
/var/ossec/agentless/ssh_generic_diff
/var/ossec/agentless/ssh_integrity_check_bsd
/var/ossec/agentless/ssh_integrity_check_linux
/var/ossec/agentless/sshlogin.exp
/var/ossec/agentless/ssh_nopass.exp
/var/ossec/agentless/ssh_pixconfig_diff
/var/ossec/agentless/su.exp
/var/ossec/logs/wazuh/
/var/ossec/var/selinux/
/var/ossec/var/selinux/wazuh.pp
/usr/lib/systemd/system/wazuh-agent.service
2024/05/30 19:32:47 - Backup generated in /var/ossec/backup/backup_[05-30-2024_19-32-45].tar.gz
2024/05/30 19:32:47 - Upgrade started.

 Wazuh v4.7.5 (Rev. 40720) Installation Script - https://www.wazuh.com

 You are about to start the installation process of Wazuh.
 You must have a C compiler pre-installed in your system.

  - System: Linux agent 4.18.0-240.1.1.el8_3.x86_64 (centos 8.3)
  - User: root
  - Host: agent


  -- Press ENTER to continue or Ctrl-C to abort. --

 - You already have Wazuh installed. Do you want to update it? (y/n):
    - Installation will be made at  /var/ossec .

4- Installing the system

DIR="/var/ossec"
 - Running the Makefile

Stopping Wazuh...
agent
Wait for success...
success
Removing old SCA policies...
Installing SCA policies...


Wait for success...
success
Starting Wazuh...

 - Configuration finished properly.

 - To start Wazuh:
      /var/ossec/bin/wazuh-control start

 - To stop Wazuh:
      /var/ossec/bin/wazuh-control stop

 - The configuration can be viewed or modified at /var/ossec/etc/ossec.conf


   Thanks for using Wazuh.
   Please don't hesitate to contact us if you need help or find
   any bugs.

   Use our public Mailing List at:
          https://groups.google.com/forum/#!forum/wazuh

   More information can be found at:
          - http://www.wazuh.com

    ---  Press ENTER to finish (maybe more information below). ---

 - Update completed.

2024/05/30 19:33:40 - Installation result = 0
2024/05/30 19:33:40 - Waiting connection... Remaining attempts: 30.
2024/05/30 19:33:41 - Status = connected.
2024/05/30 19:33:41 - Connected to manager.
2024/05/30 19:33:41 - Upgrade finished successfully.
[root@localhost ~]#  cat /var/ossec/logs/upgrade.log
2024/05/30 19:24:14 - Generating Backup.
tar: Removing leading `/' from member names
/var/ossec/active-response/
/var/ossec/active-response/bin/
/var/ossec/active-response/bin/default-firewall-drop
tar: Removing leading `/' from hard link targets
/var/ossec/active-response/bin/disable-account
/var/ossec/active-response/bin/firewall-drop
/var/ossec/active-response/bin/firewalld-drop
/var/ossec/active-response/bin/host-deny
/var/ossec/active-response/bin/ip-customblock
/var/ossec/active-response/bin/ipfw
/var/ossec/active-response/bin/kaspersky
/var/ossec/active-response/bin/kaspersky.py
/var/ossec/active-response/bin/npf
/var/ossec/active-response/bin/pf
/var/ossec/active-response/bin/restart-wazuh
/var/ossec/active-response/bin/restart.sh
/var/ossec/active-response/bin/route-null
/var/ossec/active-response/bin/wazuh-slack
/var/ossec/bin/
/var/ossec/bin/agent-auth
/var/ossec/bin/manage_agents
/var/ossec/bin/wazuh-agentd
/var/ossec/bin/wazuh-control
/var/ossec/bin/wazuh-execd
/var/ossec/bin/wazuh-logcollector
/var/ossec/bin/wazuh-modulesd
/var/ossec/bin/wazuh-syscheckd
/var/ossec/etc/
/var/ossec/etc/client.keys
/var/ossec/etc/internal_options.conf
/var/ossec/etc/local_internal_options.conf
/var/ossec/etc/localtime
/var/ossec/etc/ossec.conf
/var/ossec/etc/shared/
/var/ossec/etc/shared/cis_apache2224_rcl.txt
/var/ossec/etc/shared/cis_debian_linux_rcl.txt
/var/ossec/etc/shared/cis_mysql5-6_community_rcl.txt
/var/ossec/etc/shared/cis_mysql5-6_enterprise_rcl.txt
/var/ossec/etc/shared/cis_rhel5_linux_rcl.txt
/var/ossec/etc/shared/cis_rhel6_linux_rcl.txt
/var/ossec/etc/shared/cis_rhel7_linux_rcl.txt
/var/ossec/etc/shared/cis_rhel_linux_rcl.txt
/var/ossec/etc/shared/cis_sles11_linux_rcl.txt
/var/ossec/etc/shared/cis_sles12_linux_rcl.txt
/var/ossec/etc/shared/cis_win2012r2_domainL1_rcl.txt
/var/ossec/etc/shared/cis_win2012r2_domainL2_rcl.txt
/var/ossec/etc/shared/cis_win2012r2_memberL1_rcl.txt
/var/ossec/etc/shared/cis_win2012r2_memberL2_rcl.txt
/var/ossec/etc/shared/rootkit_files.txt
/var/ossec/etc/shared/rootkit_trojans.txt
/var/ossec/etc/shared/system_audit_rcl.txt
/var/ossec/etc/shared/system_audit_ssh.txt
/var/ossec/etc/shared/win_applications_rcl.txt
/var/ossec/etc/shared/win_audit_rcl.txt
/var/ossec/etc/shared/win_malware_rcl.txt
/var/ossec/etc/shared/merged.mg
/var/ossec/etc/shared/ar.conf
/var/ossec/etc/shared/agent.conf
/var/ossec/etc/wpk_root.pem
/var/ossec/lib/
/var/ossec/lib/libdbsync.so
/var/ossec/lib/libfimdb.so
/var/ossec/lib/libgcc_s.so.1
/var/ossec/lib/librsync.so
/var/ossec/lib/libstdc++.so.6
/var/ossec/lib/libsyscollector.so
/var/ossec/lib/libsysinfo.so
/var/ossec/lib/libwazuhext.so
/var/ossec/lib/libwazuhshared.so
/var/ossec/queue/
/var/ossec/queue/alerts/
tar: /var/ossec/queue/alerts/execq: socket ignored
tar: /var/ossec/queue/alerts/cfgaq: socket ignored
/var/ossec/queue/fim/
/var/ossec/queue/fim/db/
/var/ossec/queue/fim/db/fim.db-journal
/var/ossec/queue/fim/db/fim.db
/var/ossec/queue/logcollector/
/var/ossec/queue/logcollector/file_status.json
/var/ossec/queue/rids/
/var/ossec/queue/rids/002
/var/ossec/queue/rids/sender_counter
/var/ossec/queue/sockets/
/var/ossec/queue/sockets/.agent_info
tar: /var/ossec/queue/sockets/com: socket ignored
tar: /var/ossec/queue/sockets/queue: socket ignored
tar: /var/ossec/queue/sockets/syscheck: socket ignored
tar: /var/ossec/queue/sockets/logcollector: socket ignored
tar: /var/ossec/queue/sockets/wmodules: socket ignored
tar: /var/ossec/queue/sockets/upgrade: socket ignored
tar: /var/ossec/queue/sockets/control: socket ignored
/var/ossec/queue/syscollector/
/var/ossec/queue/syscollector/db/
/var/ossec/queue/syscollector/db/local.db-journal
/var/ossec/queue/syscollector/db/local.db
/var/ossec/queue/syscollector/norm_config.json
/var/ossec/ruleset/
/var/ossec/ruleset/sca/
/var/ossec/ruleset/sca/cis_centos8_linux.yml
/var/ossec/wodles/
/var/ossec/wodles/__init__.py
/var/ossec/wodles/aws/
/var/ossec/wodles/aws/aws-s3
/var/ossec/wodles/azure/
/var/ossec/wodles/azure/azure-logs
/var/ossec/wodles/azure/orm.py
/var/ossec/wodles/docker/
/var/ossec/wodles/docker/DockerListener
/var/ossec/wodles/gcloud/
/var/ossec/wodles/gcloud/buckets/
/var/ossec/wodles/gcloud/buckets/access_logs.py
/var/ossec/wodles/gcloud/buckets/bucket.py
/var/ossec/wodles/gcloud/exceptions.py
/var/ossec/wodles/gcloud/gcloud
/var/ossec/wodles/gcloud/integration.py
/var/ossec/wodles/gcloud/pubsub/
/var/ossec/wodles/gcloud/pubsub/subscriber.py
/var/ossec/wodles/gcloud/tools.py
/var/ossec/wodles/utils.py
/var/ossec/agentless/
/var/ossec/agentless/main.exp
/var/ossec/agentless/register_host.sh
/var/ossec/agentless/ssh.exp
/var/ossec/agentless/ssh_asa-fwsmconfig_diff
/var/ossec/agentless/ssh_foundry_diff
/var/ossec/agentless/ssh_generic_diff
/var/ossec/agentless/ssh_integrity_check_bsd
/var/ossec/agentless/ssh_integrity_check_linux
/var/ossec/agentless/ssh_nopass.exp
/var/ossec/agentless/ssh_pixconfig_diff
/var/ossec/agentless/sshlogin.exp
/var/ossec/agentless/su.exp
/var/ossec/logs/wazuh/
/var/ossec/var/selinux/
/var/ossec/var/selinux/wazuh.pp
/usr/lib/systemd/system/wazuh-agent.service
2024/05/30 19:24:16 - Backup generated in /var/ossec/backup/backup_[05-30-2024_19-24-14].tar.gz
2024/05/30 19:24:16 - Upgrade started.

 Wazuh v4.7.5 (Rev. 40720) Installation Script - https://www.wazuh.com

 You are about to start the installation process of Wazuh.
 You must have a C compiler pre-installed in your system.

  - System: Linux agent 4.18.0-240.1.1.el8_3.x86_64 (centos 8.3)
  - User: root
  - Host: agent


  -- Press ENTER to continue or Ctrl-C to abort. --

 - You already have Wazuh installed. Do you want to update it? (y/n):
    - Installation will be made at  /var/ossec .

4- Installing the system

DIR="/var/ossec"
 - Running the Makefile

Stopping Wazuh...
agent
Wait for success...
success
Removing old SCA policies...
Installing SCA policies...


Wait for success...
success
Starting Wazuh...

 - Configuration finished properly.

 - To start Wazuh:
      /var/ossec/bin/wazuh-control start

 - To stop Wazuh:
      /var/ossec/bin/wazuh-control stop

 - The configuration can be viewed or modified at /var/ossec/etc/ossec.conf


   Thanks for using Wazuh.
   Please don't hesitate to contact us if you need help or find
   any bugs.

   Use our public Mailing List at:
          https://groups.google.com/forum/#!forum/wazuh

   More information can be found at:
          - http://www.wazuh.com

    ---  Press ENTER to finish (maybe more information below). ---

 - Update completed.

2024/05/30 19:25:05 - Installation result = 0
2024/05/30 19:25:05 - Waiting connection... Remaining attempts: 30.
2024/05/30 19:25:06 - Status = connected.
2024/05/30 19:25:06 - Connected to manager.
2024/05/30 19:25:06 - Upgrade finished successfully.
2024/05/30 19:32:45 - Generating Backup.
tar: Removing leading `/' from member names
/var/ossec/active-response/
/var/ossec/active-response/bin/
/var/ossec/active-response/bin/restart.sh
tar: Removing leading `/' from hard link targets
/var/ossec/active-response/bin/kaspersky.py
/var/ossec/active-response/bin/firewall-drop
/var/ossec/active-response/bin/default-firewall-drop
/var/ossec/active-response/bin/pf
/var/ossec/active-response/bin/npf
/var/ossec/active-response/bin/ipfw
/var/ossec/active-response/bin/firewalld-drop
/var/ossec/active-response/bin/disable-account
/var/ossec/active-response/bin/host-deny
/var/ossec/active-response/bin/ip-customblock
/var/ossec/active-response/bin/restart-wazuh
/var/ossec/active-response/bin/route-null
/var/ossec/active-response/bin/kaspersky
/var/ossec/active-response/bin/wazuh-slack
/var/ossec/bin/
/var/ossec/bin/wazuh-logcollector
/var/ossec/bin/wazuh-syscheckd
/var/ossec/bin/wazuh-execd
/var/ossec/bin/manage_agents
/var/ossec/bin/wazuh-control
/var/ossec/bin/wazuh-modulesd
/var/ossec/bin/wazuh-agentd
/var/ossec/bin/agent-auth
/var/ossec/etc/
/var/ossec/etc/client.keys
/var/ossec/etc/local_internal_options.conf
/var/ossec/etc/ossec.conf
/var/ossec/etc/shared/
/var/ossec/etc/shared/cis_win2012r2_memberL1_rcl.txt
/var/ossec/etc/shared/cis_win2012r2_memberL2_rcl.txt
/var/ossec/etc/shared/rootkit_files.txt
/var/ossec/etc/shared/rootkit_trojans.txt
/var/ossec/etc/shared/system_audit_rcl.txt
/var/ossec/etc/shared/system_audit_ssh.txt
/var/ossec/etc/shared/win_applications_rcl.txt
/var/ossec/etc/shared/win_audit_rcl.txt
/var/ossec/etc/shared/win_malware_rcl.txt
/var/ossec/etc/shared/merged.mg
/var/ossec/etc/shared/ar.conf
/var/ossec/etc/shared/agent.conf
/var/ossec/etc/shared/cis_apache2224_rcl.txt
/var/ossec/etc/shared/cis_debian_linux_rcl.txt
/var/ossec/etc/shared/cis_mysql5-6_community_rcl.txt
/var/ossec/etc/shared/cis_mysql5-6_enterprise_rcl.txt
/var/ossec/etc/shared/cis_rhel5_linux_rcl.txt
/var/ossec/etc/shared/cis_rhel6_linux_rcl.txt
/var/ossec/etc/shared/cis_rhel7_linux_rcl.txt
/var/ossec/etc/shared/cis_rhel_linux_rcl.txt
/var/ossec/etc/shared/cis_sles11_linux_rcl.txt
/var/ossec/etc/shared/cis_sles12_linux_rcl.txt
/var/ossec/etc/shared/cis_win2012r2_domainL1_rcl.txt
/var/ossec/etc/shared/cis_win2012r2_domainL2_rcl.txt
/var/ossec/etc/localtime
/var/ossec/etc/internal_options.conf~
/var/ossec/etc/internal_options.conf
/var/ossec/etc/wpk_root.pem
/var/ossec/lib/
/var/ossec/lib/libwazuhext.so
/var/ossec/lib/libwazuhshared.so
/var/ossec/lib/libdbsync.so
/var/ossec/lib/librsync.so
/var/ossec/lib/libsysinfo.so
/var/ossec/lib/libfimdb.so
/var/ossec/lib/libsyscollector.so
/var/ossec/lib/libstdc++.so.6
/var/ossec/lib/libgcc_s.so.1
/var/ossec/queue/
/var/ossec/queue/alerts/
tar: /var/ossec/queue/alerts/execq: socket ignored
tar: /var/ossec/queue/alerts/cfgaq: socket ignored
/var/ossec/queue/fim/
/var/ossec/queue/fim/db/
/var/ossec/queue/fim/db/fim.db-journal
/var/ossec/queue/fim/db/fim.db
/var/ossec/queue/logcollector/
/var/ossec/queue/logcollector/file_status.json
/var/ossec/queue/rids/
/var/ossec/queue/rids/002
/var/ossec/queue/rids/sender_counter
/var/ossec/queue/sockets/
/var/ossec/queue/sockets/.agent_info
tar: /var/ossec/queue/sockets/com: socket ignored
tar: /var/ossec/queue/sockets/queue: socket ignored
tar: /var/ossec/queue/sockets/syscheck: socket ignored
tar: /var/ossec/queue/sockets/logcollector: socket ignored
tar: /var/ossec/queue/sockets/wmodules: socket ignored
tar: /var/ossec/queue/sockets/upgrade: socket ignored
tar: /var/ossec/queue/sockets/control: socket ignored
/var/ossec/queue/syscollector/
/var/ossec/queue/syscollector/db/
/var/ossec/queue/syscollector/db/local.db-journal
/var/ossec/queue/syscollector/db/local.db
/var/ossec/queue/syscollector/norm_config.json
/var/ossec/ruleset/
/var/ossec/ruleset/sca/
/var/ossec/ruleset/sca/cis_centos8_linux.yml
/var/ossec/wodles/
/var/ossec/wodles/aws/
/var/ossec/wodles/aws/aws-s3
/var/ossec/wodles/azure/
/var/ossec/wodles/azure/azure-logs
/var/ossec/wodles/azure/orm.py
/var/ossec/wodles/docker/
/var/ossec/wodles/docker/DockerListener
/var/ossec/wodles/gcloud/
/var/ossec/wodles/gcloud/buckets/
/var/ossec/wodles/gcloud/buckets/bucket.py
/var/ossec/wodles/gcloud/buckets/access_logs.py
/var/ossec/wodles/gcloud/pubsub/
/var/ossec/wodles/gcloud/pubsub/subscriber.py
/var/ossec/wodles/gcloud/gcloud
/var/ossec/wodles/gcloud/integration.py
/var/ossec/wodles/gcloud/tools.py
/var/ossec/wodles/gcloud/exceptions.py
/var/ossec/wodles/__init__.py
/var/ossec/wodles/utils.py
/var/ossec/agentless/
/var/ossec/agentless/main.exp
/var/ossec/agentless/register_host.sh
/var/ossec/agentless/ssh_asa-fwsmconfig_diff
/var/ossec/agentless/ssh.exp
/var/ossec/agentless/ssh_foundry_diff
/var/ossec/agentless/ssh_generic_diff
/var/ossec/agentless/ssh_integrity_check_bsd
/var/ossec/agentless/ssh_integrity_check_linux
/var/ossec/agentless/sshlogin.exp
/var/ossec/agentless/ssh_nopass.exp
/var/ossec/agentless/ssh_pixconfig_diff
/var/ossec/agentless/su.exp
/var/ossec/logs/wazuh/
/var/ossec/var/selinux/
/var/ossec/var/selinux/wazuh.pp
/usr/lib/systemd/system/wazuh-agent.service
2024/05/30 19:32:47 - Backup generated in /var/ossec/backup/backup_[05-30-2024_19-32-45].tar.gz
2024/05/30 19:32:47 - Upgrade started.

 Wazuh v4.7.5 (Rev. 40720) Installation Script - https://www.wazuh.com

 You are about to start the installation process of Wazuh.
 You must have a C compiler pre-installed in your system.

  - System: Linux agent 4.18.0-240.1.1.el8_3.x86_64 (centos 8.3)
  - User: root
  - Host: agent


  -- Press ENTER to continue or Ctrl-C to abort. --

 - You already have Wazuh installed. Do you want to update it? (y/n):
    - Installation will be made at  /var/ossec .

4- Installing the system

DIR="/var/ossec"
 - Running the Makefile

Stopping Wazuh...
agent
Wait for success...
success
Removing old SCA policies...
Installing SCA policies...


Wait for success...
success
Starting Wazuh...

 - Configuration finished properly.

 - To start Wazuh:
      /var/ossec/bin/wazuh-control start

 - To stop Wazuh:
      /var/ossec/bin/wazuh-control stop

 - The configuration can be viewed or modified at /var/ossec/etc/ossec.conf


   Thanks for using Wazuh.
   Please don't hesitate to contact us if you need help or find
   any bugs.

   Use our public Mailing List at:
          https://groups.google.com/forum/#!forum/wazuh

   More information can be found at:
          - http://www.wazuh.com

    ---  Press ENTER to finish (maybe more information below). ---

 - Update completed.

2024/05/30 19:33:40 - Installation result = 0
2024/05/30 19:33:40 - Waiting connection... Remaining attempts: 30.
2024/05/30 19:33:41 - Status = connected.
2024/05/30 19:33:41 - Connected to manager.
2024/05/30 19:33:41 - Upgrade finished successfully.
[root@localhost ~]#  cat /var/ossec/logs/upgrade.log
2024/05/30 19:24:14 - Generating Backup.
tar: Removing leading `/' from member names
/var/ossec/active-response/
/var/ossec/active-response/bin/
/var/ossec/active-response/bin/default-firewall-drop
tar: Removing leading `/' from hard link targets
/var/ossec/active-response/bin/disable-account
/var/ossec/active-response/bin/firewall-drop
/var/ossec/active-response/bin/firewalld-drop
/var/ossec/active-response/bin/host-deny
/var/ossec/active-response/bin/ip-customblock
/var/ossec/active-response/bin/ipfw
/var/ossec/active-response/bin/kaspersky
/var/ossec/active-response/bin/kaspersky.py
/var/ossec/active-response/bin/npf
/var/ossec/active-response/bin/pf
/var/ossec/active-response/bin/restart-wazuh
/var/ossec/active-response/bin/restart.sh
/var/ossec/active-response/bin/route-null
/var/ossec/active-response/bin/wazuh-slack
/var/ossec/bin/
/var/ossec/bin/agent-auth
/var/ossec/bin/manage_agents
/var/ossec/bin/wazuh-agentd
/var/ossec/bin/wazuh-control
/var/ossec/bin/wazuh-execd
/var/ossec/bin/wazuh-logcollector
/var/ossec/bin/wazuh-modulesd
/var/ossec/bin/wazuh-syscheckd
/var/ossec/etc/
/var/ossec/etc/client.keys
/var/ossec/etc/internal_options.conf
/var/ossec/etc/local_internal_options.conf
/var/ossec/etc/localtime
/var/ossec/etc/ossec.conf
/var/ossec/etc/shared/
/var/ossec/etc/shared/cis_apache2224_rcl.txt
/var/ossec/etc/shared/cis_debian_linux_rcl.txt
/var/ossec/etc/shared/cis_mysql5-6_community_rcl.txt
/var/ossec/etc/shared/cis_mysql5-6_enterprise_rcl.txt
/var/ossec/etc/shared/cis_rhel5_linux_rcl.txt
/var/ossec/etc/shared/cis_rhel6_linux_rcl.txt
/var/ossec/etc/shared/cis_rhel7_linux_rcl.txt
/var/ossec/etc/shared/cis_rhel_linux_rcl.txt
/var/ossec/etc/shared/cis_sles11_linux_rcl.txt
/var/ossec/etc/shared/cis_sles12_linux_rcl.txt
/var/ossec/etc/shared/cis_win2012r2_domainL1_rcl.txt
/var/ossec/etc/shared/cis_win2012r2_domainL2_rcl.txt
/var/ossec/etc/shared/cis_win2012r2_memberL1_rcl.txt
/var/ossec/etc/shared/cis_win2012r2_memberL2_rcl.txt
/var/ossec/etc/shared/rootkit_files.txt
/var/ossec/etc/shared/rootkit_trojans.txt
/var/ossec/etc/shared/system_audit_rcl.txt
/var/ossec/etc/shared/system_audit_ssh.txt
/var/ossec/etc/shared/win_applications_rcl.txt
/var/ossec/etc/shared/win_audit_rcl.txt
/var/ossec/etc/shared/win_malware_rcl.txt
/var/ossec/etc/shared/merged.mg
/var/ossec/etc/shared/ar.conf
/var/ossec/etc/shared/agent.conf
/var/ossec/etc/wpk_root.pem
/var/ossec/lib/
/var/ossec/lib/libdbsync.so
/var/ossec/lib/libfimdb.so
/var/ossec/lib/libgcc_s.so.1
/var/ossec/lib/librsync.so
/var/ossec/lib/libstdc++.so.6
/var/ossec/lib/libsyscollector.so
/var/ossec/lib/libsysinfo.so
/var/ossec/lib/libwazuhext.so
/var/ossec/lib/libwazuhshared.so
/var/ossec/queue/
/var/ossec/queue/alerts/
tar: /var/ossec/queue/alerts/execq: socket ignored
tar: /var/ossec/queue/alerts/cfgaq: socket ignored
/var/ossec/queue/fim/
/var/ossec/queue/fim/db/
/var/ossec/queue/fim/db/fim.db-journal
/var/ossec/queue/fim/db/fim.db
/var/ossec/queue/logcollector/
/var/ossec/queue/logcollector/file_status.json
/var/ossec/queue/rids/
/var/ossec/queue/rids/002
/var/ossec/queue/rids/sender_counter
/var/ossec/queue/sockets/
/var/ossec/queue/sockets/.agent_info
tar: /var/ossec/queue/sockets/com: socket ignored
tar: /var/ossec/queue/sockets/queue: socket ignored
tar: /var/ossec/queue/sockets/syscheck: socket ignored
tar: /var/ossec/queue/sockets/logcollector: socket ignored
tar: /var/ossec/queue/sockets/wmodules: socket ignored
tar: /var/ossec/queue/sockets/upgrade: socket ignored
tar: /var/ossec/queue/sockets/control: socket ignored
/var/ossec/queue/syscollector/
/var/ossec/queue/syscollector/db/
/var/ossec/queue/syscollector/db/local.db-journal
/var/ossec/queue/syscollector/db/local.db
/var/ossec/queue/syscollector/norm_config.json
/var/ossec/ruleset/
/var/ossec/ruleset/sca/
/var/ossec/ruleset/sca/cis_centos8_linux.yml
/var/ossec/wodles/
/var/ossec/wodles/__init__.py
/var/ossec/wodles/aws/
/var/ossec/wodles/aws/aws-s3
/var/ossec/wodles/azure/
/var/ossec/wodles/azure/azure-logs
/var/ossec/wodles/azure/orm.py
/var/ossec/wodles/docker/
/var/ossec/wodles/docker/DockerListener
/var/ossec/wodles/gcloud/
/var/ossec/wodles/gcloud/buckets/
/var/ossec/wodles/gcloud/buckets/access_logs.py
/var/ossec/wodles/gcloud/buckets/bucket.py
/var/ossec/wodles/gcloud/exceptions.py
/var/ossec/wodles/gcloud/gcloud
/var/ossec/wodles/gcloud/integration.py
/var/ossec/wodles/gcloud/pubsub/
/var/ossec/wodles/gcloud/pubsub/subscriber.py
/var/ossec/wodles/gcloud/tools.py
/var/ossec/wodles/utils.py
/var/ossec/agentless/
/var/ossec/agentless/main.exp
/var/ossec/agentless/register_host.sh
/var/ossec/agentless/ssh.exp
/var/ossec/agentless/ssh_asa-fwsmconfig_diff
/var/ossec/agentless/ssh_foundry_diff
/var/ossec/agentless/ssh_generic_diff
/var/ossec/agentless/ssh_integrity_check_bsd
/var/ossec/agentless/ssh_integrity_check_linux
/var/ossec/agentless/ssh_nopass.exp
/var/ossec/agentless/ssh_pixconfig_diff
/var/ossec/agentless/sshlogin.exp
/var/ossec/agentless/su.exp
/var/ossec/logs/wazuh/
/var/ossec/var/selinux/
/var/ossec/var/selinux/wazuh.pp
/usr/lib/systemd/system/wazuh-agent.service
2024/05/30 19:24:16 - Backup generated in /var/ossec/backup/backup_[05-30-2024_19-24-14].tar.gz
2024/05/30 19:24:16 - Upgrade started.

 Wazuh v4.7.5 (Rev. 40720) Installation Script - https://www.wazuh.com

 You are about to start the installation process of Wazuh.
 You must have a C compiler pre-installed in your system.

  - System: Linux agent 4.18.0-240.1.1.el8_3.x86_64 (centos 8.3)
  - User: root
  - Host: agent


  -- Press ENTER to continue or Ctrl-C to abort. --

 - You already have Wazuh installed. Do you want to update it? (y/n):
    - Installation will be made at  /var/ossec .

4- Installing the system

DIR="/var/ossec"
 - Running the Makefile

Stopping Wazuh...
agent
Wait for success...
success
Removing old SCA policies...
Installing SCA policies...


Wait for success...
success
Starting Wazuh...

 - Configuration finished properly.

 - To start Wazuh:
      /var/ossec/bin/wazuh-control start

 - To stop Wazuh:
      /var/ossec/bin/wazuh-control stop

 - The configuration can be viewed or modified at /var/ossec/etc/ossec.conf


   Thanks for using Wazuh.
   Please don't hesitate to contact us if you need help or find
   any bugs.

   Use our public Mailing List at:
          https://groups.google.com/forum/#!forum/wazuh

   More information can be found at:
          - http://www.wazuh.com

    ---  Press ENTER to finish (maybe more information below). ---

 - Update completed.

2024/05/30 19:25:05 - Installation result = 0
2024/05/30 19:25:05 - Waiting connection... Remaining attempts: 30.
2024/05/30 19:25:06 - Status = connected.
2024/05/30 19:25:06 - Connected to manager.
2024/05/30 19:25:06 - Upgrade finished successfully.
2024/05/30 19:32:45 - Generating Backup.
tar: Removing leading `/' from member names
/var/ossec/active-response/
/var/ossec/active-response/bin/
/var/ossec/active-response/bin/restart.sh
tar: Removing leading `/' from hard link targets
/var/ossec/active-response/bin/kaspersky.py
/var/ossec/active-response/bin/firewall-drop
/var/ossec/active-response/bin/default-firewall-drop
/var/ossec/active-response/bin/pf
/var/ossec/active-response/bin/npf
/var/ossec/active-response/bin/ipfw
/var/ossec/active-response/bin/firewalld-drop
/var/ossec/active-response/bin/disable-account
/var/ossec/active-response/bin/host-deny
/var/ossec/active-response/bin/ip-customblock
/var/ossec/active-response/bin/restart-wazuh
/var/ossec/active-response/bin/route-null
/var/ossec/active-response/bin/kaspersky
/var/ossec/active-response/bin/wazuh-slack
/var/ossec/bin/
/var/ossec/bin/wazuh-logcollector
/var/ossec/bin/wazuh-syscheckd
/var/ossec/bin/wazuh-execd
/var/ossec/bin/manage_agents
/var/ossec/bin/wazuh-control
/var/ossec/bin/wazuh-modulesd
/var/ossec/bin/wazuh-agentd
/var/ossec/bin/agent-auth
/var/ossec/etc/
/var/ossec/etc/client.keys
/var/ossec/etc/local_internal_options.conf
/var/ossec/etc/ossec.conf
/var/ossec/etc/shared/
/var/ossec/etc/shared/cis_win2012r2_memberL1_rcl.txt
/var/ossec/etc/shared/cis_win2012r2_memberL2_rcl.txt
/var/ossec/etc/shared/rootkit_files.txt
/var/ossec/etc/shared/rootkit_trojans.txt
/var/ossec/etc/shared/system_audit_rcl.txt
/var/ossec/etc/shared/system_audit_ssh.txt
/var/ossec/etc/shared/win_applications_rcl.txt
/var/ossec/etc/shared/win_audit_rcl.txt
/var/ossec/etc/shared/win_malware_rcl.txt
/var/ossec/etc/shared/merged.mg
/var/ossec/etc/shared/ar.conf
/var/ossec/etc/shared/agent.conf
/var/ossec/etc/shared/cis_apache2224_rcl.txt
/var/ossec/etc/shared/cis_debian_linux_rcl.txt
/var/ossec/etc/shared/cis_mysql5-6_community_rcl.txt
/var/ossec/etc/shared/cis_mysql5-6_enterprise_rcl.txt
/var/ossec/etc/shared/cis_rhel5_linux_rcl.txt
/var/ossec/etc/shared/cis_rhel6_linux_rcl.txt
/var/ossec/etc/shared/cis_rhel7_linux_rcl.txt
/var/ossec/etc/shared/cis_rhel_linux_rcl.txt
/var/ossec/etc/shared/cis_sles11_linux_rcl.txt
/var/ossec/etc/shared/cis_sles12_linux_rcl.txt
/var/ossec/etc/shared/cis_win2012r2_domainL1_rcl.txt
/var/ossec/etc/shared/cis_win2012r2_domainL2_rcl.txt
/var/ossec/etc/localtime
/var/ossec/etc/internal_options.conf~
/var/ossec/etc/internal_options.conf
/var/ossec/etc/wpk_root.pem
/var/ossec/lib/
/var/ossec/lib/libwazuhext.so
/var/ossec/lib/libwazuhshared.so
/var/ossec/lib/libdbsync.so
/var/ossec/lib/librsync.so
/var/ossec/lib/libsysinfo.so
/var/ossec/lib/libfimdb.so
/var/ossec/lib/libsyscollector.so
/var/ossec/lib/libstdc++.so.6
/var/ossec/lib/libgcc_s.so.1
/var/ossec/queue/
/var/ossec/queue/alerts/
tar: /var/ossec/queue/alerts/execq: socket ignored
tar: /var/ossec/queue/alerts/cfgaq: socket ignored
/var/ossec/queue/fim/
/var/ossec/queue/fim/db/
/var/ossec/queue/fim/db/fim.db-journal
/var/ossec/queue/fim/db/fim.db
/var/ossec/queue/logcollector/
/var/ossec/queue/logcollector/file_status.json
/var/ossec/queue/rids/
/var/ossec/queue/rids/002
/var/ossec/queue/rids/sender_counter
/var/ossec/queue/sockets/
/var/ossec/queue/sockets/.agent_info
tar: /var/ossec/queue/sockets/com: socket ignored
tar: /var/ossec/queue/sockets/queue: socket ignored
tar: /var/ossec/queue/sockets/syscheck: socket ignored
tar: /var/ossec/queue/sockets/logcollector: socket ignored
tar: /var/ossec/queue/sockets/wmodules: socket ignored
tar: /var/ossec/queue/sockets/upgrade: socket ignored
tar: /var/ossec/queue/sockets/control: socket ignored
/var/ossec/queue/syscollector/
/var/ossec/queue/syscollector/db/
/var/ossec/queue/syscollector/db/local.db-journal
/var/ossec/queue/syscollector/db/local.db
/var/ossec/queue/syscollector/norm_config.json
/var/ossec/ruleset/
/var/ossec/ruleset/sca/
/var/ossec/ruleset/sca/cis_centos8_linux.yml
/var/ossec/wodles/
/var/ossec/wodles/aws/
/var/ossec/wodles/aws/aws-s3
/var/ossec/wodles/azure/
/var/ossec/wodles/azure/azure-logs
/var/ossec/wodles/azure/orm.py
/var/ossec/wodles/docker/
/var/ossec/wodles/docker/DockerListener
/var/ossec/wodles/gcloud/
/var/ossec/wodles/gcloud/buckets/
/var/ossec/wodles/gcloud/buckets/bucket.py
/var/ossec/wodles/gcloud/buckets/access_logs.py
/var/ossec/wodles/gcloud/pubsub/
/var/ossec/wodles/gcloud/pubsub/subscriber.py
/var/ossec/wodles/gcloud/gcloud
/var/ossec/wodles/gcloud/integration.py
/var/ossec/wodles/gcloud/tools.py
/var/ossec/wodles/gcloud/exceptions.py
/var/ossec/wodles/__init__.py
/var/ossec/wodles/utils.py
/var/ossec/agentless/
/var/ossec/agentless/main.exp
/var/ossec/agentless/register_host.sh
/var/ossec/agentless/ssh_asa-fwsmconfig_diff
/var/ossec/agentless/ssh.exp
/var/ossec/agentless/ssh_foundry_diff
/var/ossec/agentless/ssh_generic_diff
/var/ossec/agentless/ssh_integrity_check_bsd
/var/ossec/agentless/ssh_integrity_check_linux
/var/ossec/agentless/sshlogin.exp
/var/ossec/agentless/ssh_nopass.exp
/var/ossec/agentless/ssh_pixconfig_diff
/var/ossec/agentless/su.exp
/var/ossec/logs/wazuh/
/var/ossec/var/selinux/
/var/ossec/var/selinux/wazuh.pp
/usr/lib/systemd/system/wazuh-agent.service
2024/05/30 19:32:47 - Backup generated in /var/ossec/backup/backup_[05-30-2024_19-32-45].tar.gz
2024/05/30 19:32:47 - Upgrade started.

 Wazuh v4.7.5 (Rev. 40720) Installation Script - https://www.wazuh.com

 You are about to start the installation process of Wazuh.
 You must have a C compiler pre-installed in your system.

  - System: Linux agent 4.18.0-240.1.1.el8_3.x86_64 (centos 8.3)
  - User: root
  - Host: agent


  -- Press ENTER to continue or Ctrl-C to abort. --

 - You already have Wazuh installed. Do you want to update it? (y/n):
    - Installation will be made at  /var/ossec .

4- Installing the system

DIR="/var/ossec"
 - Running the Makefile

Stopping Wazuh...
agent
Wait for success...
success
Removing old SCA policies...
Installing SCA policies...


Wait for success...
success
Starting Wazuh...

 - Configuration finished properly.

 - To start Wazuh:
      /var/ossec/bin/wazuh-control start

 - To stop Wazuh:
      /var/ossec/bin/wazuh-control stop

 - The configuration can be viewed or modified at /var/ossec/etc/ossec.conf


   Thanks for using Wazuh.
   Please don't hesitate to contact us if you need help or find
   any bugs.

   Use our public Mailing List at:
          https://groups.google.com/forum/#!forum/wazuh

   More information can be found at:
          - http://www.wazuh.com

    ---  Press ENTER to finish (maybe more information below). ---

 - Update completed.

2024/05/30 19:33:40 - Installation result = 0
2024/05/30 19:33:40 - Waiting connection... Remaining attempts: 30.
2024/05/30 19:33:41 - Status = connected.
2024/05/30 19:33:41 - Connected to manager.
2024/05/30 19:33:41 - Upgrade finished successfully.

[jnasselle]

LGTM!

[damarisg]

LGTM!