Wazuh v4.3.0 - Kibana v7.16.1

Wazuh v4.3.0 - Kibana 7.10.2 , 7.16.x, 7.17.x - Revision 4301

Added

• Support for Kibana 7.16.x
• Support for Kibana 7.17.x
• Added GitHub and Office365 modules #3557
• Added a new Panel module tab for GitHub and Office365 modules
  #3541
  #3945
  #3952
• Added ability to filter the results fo the Network Ports table in the Inventory data section #3639
• Added new endpoint service to collect the frontend logs into a file #3324
• Improved the frontend handle errors strategy: UI, Toasts, console log and log in file
  #3327
  #3321
  #3367
  #3373
  #3374
  #3390
  #3410
  #3408
  #3429
  #3427
  #3417
  #3462
  #3451
  #3442
  #3480
  #3472
  #3434
  #3392
  #3404
  #3432
  #3415
  #3469
  #3448
  #3465
  #3464
  #3478
  #4116
• Added Intelligence tab to Mitre Att&ck module #3368 #3344 #3726
• Added sample data for office365 events #3424
• Created a separate component to check for sample data #3475
• Added a new hook for getting value suggestions #3506
• Added dinamic simple filters and adding simple GitHub filters fields 3531
• Added configuration viewer for Module Office365 on Management > Configuration #3524
• Added base Module Panel view with Office365 setup #3518
• Added specifics and custom filters for Office365 search bar #3533
• Adding Pagination and filter to drilldown tables at Office pannel #3544.
• Simple filters change between panel and drilldown panel #3568.
• Added new fields in Inventory table and Flyout Details #3525
• Added columns selector in agents table #3691
• Added a new workflow for create wazuh packages #3742
• Run template and fields checks in the health check depends on the app configuration #3783
• Added a toast message when there is an error creating a new group #3804
• Added a step to start the agent to the deploy new Windowns agent guide #3846
• Added 3 new panels to Vulnerabilities/Inventory #3893
• Added new fields of Vulnerabilities to the details flyout #3893 #3908
• Added missing fields used in visualizations to the known fiels related to alerts #3924
• Added troubleshooting link to "index pattern was refreshed" toast #3946
• Added more number options to the tables widget in Modules -> "Mitre" #4041
• Management -> groups -> agent: Selectors appear when there are more than 3 options #4126

Changed

• Changed ossec to wazuh in sample-data #3121
• Changed empty fields in FIM tables and syscheck.value_name in discovery now show an empty tag for visual clarity #3279
• Adapted the Mitre tactics and techniques resources to use the API endpoints #3346
• Moved the filterManager subscription to the hook useFilterManager #3517
• Change filter from is to is one of in custom searchbar #3529
• Refactored as module tabs and buttons are rendered #3494
• Updated the deprecated and added new references authd #3663 #3806
• Added time subscription to Discover component #3549
• Refactored as module tabs and buttons are rendered #3494
• Testing logs using the Ruletest Test don't display the rule information if not matching a rule. #3446
• Changed format permissions in FIM inventory #3649
• Changed of request for one that does not return data that is not necessary to optimize times. #3686 #3728
• Rebranding. Replaced the brand logos, set module icons with brand colors #3788
• Changed user for sample data management #3795
• Changed agent install codeblock copy button and powershell terminal warning #3792
• Refactored as the plugin platform name and references is managed #3811
• Removed Dashboard tab for the Vulnerabilities modules #3893
• Display all fields in the Table tab when expading an alert row in the alerts tables of flyouts and the Modules/Security Events/Dashboard table #3908
• Refactored the table in Vulnerabilities/Inventory #3196
• Changed Google Groups app icons #3949
• Removed sorting for Agents or Configuration checksum column in the table of Management/Groups due to this is not supported by the API #3857
• Changed messages in the agent installation guide #4040
• Changed the default wazuh.statistics.shards setting from 2 to 1 #4055
• Removed the migration tasks in the .wazuh and .wazuh-version indices #4098
• Separated the actions of viewing and editing the agent.conf group file #4114

Fixed

• Fixed creation of log files #3384
• Fixed double fetching alerts count when pinnin/unpinning the agent in Mitre Att&ck/Framework #3484
• Query config refactor #3490
• Fixed rules and decoders test flyout clickout event #3412
• Notify when you are registering an agent without permissions #3430
• Remove not used redirectRule query param when clicking the row table on CDB Lists/Decoders #3438
• Fixed the code overflows over the line numbers in the API Console editor #3439
• Don't open the main menu when changing the seleted API or index pattern #3440
• Fix error message in conf managment #3443
• Fix size api selector when name is too long #3445
• Fixed error when edit a rule or decoder #3456
• Fixed index pattern selector doesn't display the ignored index patterns #3458
• Fixed error in /Management/Configuration when cluster is disabled #3553
• Fix the pinned filters were removed when accessing to the Panel tab of a module #3565
• Fixed multi-select component searcher handler #3645
• Fixed order logs properly in Management/Logs #3609
• Fixed the Wazuh API requests to GET // #3661
• Fixed missing mitre tactics #3675
• Fix CDB list view not working with IPv6 #3488
• Fixed the bad requests using Console tool to PUT /active-response API endpoint #3466
• Fixed group agent management table does not update on error #3605
• Fixed not showing packages details in agent inventory for a freeBSD agent SO #3651
• Fixed wazuh token deleted twice #3652
• Fixed handler of error on dev-tools #3687
• Fixed compatibility wazuh 4.3 - kibana 7.13.4 #3685
• Fixed registry values without agent pinned in FIM>Events #3689
• Fixed breadcrumbs style compatibility for Kibana 7.14.2 #3688
• Fixed security alerts table when filters change #3682
• Fixed error that shows we're using X-Pack when we have Basic #3692
• Fixed blank screen in Kibana 7.10.2 #3700
• Fixed related decoder link undefined parameters error #3704
• Fixing Flyouts in Kibana 7.14.2 #3708
• Fixing the bug of index patterns in health-check due to bad copy of a PR #3707
• Fixed styles and behaviour of button filter in the flyout of Inventory section for Integrity monitoring and Vulnerabilities modules #3733
• Fixed height of Evolution card in the Agents section when has no data for the selected time range #3733
• Fix clearing the query filter doesn't update the data in Office 365 and GitHub Panel tab #3722
• Fix wrong deamons in filter list #3710
• Fixing bug when create filename with spaces and throws a bad error #3724
• Fixing bug in security User flyout nonexistant unsubmitted changes warning #3731
• Fixing redirect to new tab when click in a link #3732
• Fixed missing settings in Management/Configuration/Global configuration/Global/Main settings #3737
• Fixed Maximum call stack size exceeded error exporting key-value pairs of a CDB List #3738
• Fixed regex lookahead and lookbehind for safari #3741
• Fixed Vulnerabilities Inventory flyout details filters #3744
• Removed api selector toggle from settings menu since it performed no useful function #3604
• Fixed the requests get #3661
• Fixed Dashboard PDF report error when switching pinned agent state #3748
• Fixed the rendering of the command to deploy new Windows agent not working in some Kibana versions #3753
• Fixed action buttons overlaying to the request text in Tools/API Console #3772
• Fix Rule ID value in reporting tables related to top results #3774
• Fixed github/office365 multi-select filters suggested values #3787
• Fix updating the aggregation data of Panel section when changing the time filter #3790
• Removed the button to remove an agent for a group in the agents' table when it is the default group #3804
• Fixed add single agent to group #3776
• Fix the implicit filters from the search bar can be removables #3777
• Fixed Office365/Github module the side panel tab #3778
• Fixed no wrap text in MITRE ATT&CK intelligence table #3780
• Fixed visualization tooltip position #3781
• Fixed github/office365 multi-select filters suggested values #3787
• Fixed the styles on the evolution card #3796
• Fixed internal user no longer needs permission to make x-pack detection request #3831
• Fixed agents details card style #3845 #3860
• Fixed agents evolutions card #3854
• Fixed search bar query sanitizing in PDF report #3861
• Fixed routing redirection in events documents discover links #3866
• Fixed health-check #3868
• Fixed refreshing agents evolution visualization #3894
• Fixed an error when generating PDF reports due to Wazuh API token expiration #3881
• Fixed the table of Vulnerabilities/Inventory doesn't reload when changing the selected agent #3901
• Fixed backslash breaking exported JSON result #3909
• Fixed the Events view multiple "The index pattern was refreshed successfully" toast #3937
• Fixed a rendering problem in the map visualizations #3942
• Parse error when using # character not at the beginning of the line #3877
• Fixed the rule.mitre.id cell enhancement that doesn't support values with sub techniques #3944
• Fixed error not working the alerts displayed when changing the selected time in some flyouts #3947 #4115
• Fixed the user can not logout when the Kibana server has a basepath configurated #3957
• Fixed fatal cron-job error when Wazuh API is down #3991
• Fixed circular re-directions when API errors are handled #4079
• Fixed agent breadcrumb routing minor error #4101
• Fixed selected text not visible in API Console #4102
• Fixed the 'missing parameters' error on the Manager Logs #4110
• Fixed undefined input reference when switching between rule set view and rule files view #4125
• Fixed not found FIM file toast error #4124 #4124
• Fixed "See full error" on error toast #4119
• Fixed not being able to remove custom filters. #4112
• Fixed spinner not showing when export button is clicked in management views #4120
• Correction of field and value in the section: last registered agent #4127
• Fixed the download agent installer command [#4132] (#4132)