Sec Onion Master don't get Logs from Wazuh Agents

[admarnelson]

Help me understand some point here: Sec Onion 2.3.70 worked perfectly I updated to 2.3.91 begins work bad now I did new update to 2.3.100 I can't get event logs from wazuh agent installed on windows and no any logs host or network
I installed wazuh agent the same version as Master. an ideia please...

[dougburks]

First, please edit the Title of this discussion and change it from Help me !!!!! to something that is search friendly, relevant to the discussion, and has fewer exclamation points.

If you're having problems with the Wazuh agent, I'd recommend checking the Wazuh agent logs for clues.

[admarnelson]

New instalation 2.3.100 standlone and wazuh agent installed but no logs coming to the Master. what is the problem?

[admarnelson]

I check to menu view log on agent wazuh. logs are sending

[dougburks]

Have you run so-allow to allow the traffic through the host firewall?

Are there any network firewalls that could be blocking the traffic?

Have you run tcpdump to confirm that the Wazuh agent traffic is reaching the management interface?

[admarnelson]

I decided reinstalled hold version 2.3.70 standlone. its working. I don't understand.

I follow this link here: https://noctedefensor.com/security-onion-wazuh-installation/

[admarnelson]

Anyway. 2.3.7 not bad. I will keep this version for while.
Thanks @dougburks

[admarnelson]

I would like make the SecurityOnion as my company SIEM.

[dougburks]

I just did a fresh installation of Security Onion 2.3.100 and then installed the Wazuh agent and sysmon on a Windows box and verified that Wazuh and sysmon logs are flowing properly:

[admarnelson]

I would like get direct oficial contact with you @dougburks there are some questions to make (business)
If you don't mind to provide your contacts

[dougburks]

For business inquiries, please go to https://securityonionsolutions.com/, select the product or service that you're interested in, and use the contact form on that page to get in touch with the appropriate team. Thanks!