wazuh/wazuh-indexer-plugins
1
0
Fork 0
mirror of https://github.com/wazuh/wazuh-indexer-plugins.git synced 2025-12-10 14:32:28 -06:00
Code Issues Packages Projects Releases Wiki Activity

Add browser-extensions and services inventory indices to documentation (#574)

Browse Source 
* Add entries for browser-extensions and services inventory to the documentation

* Update CHANGELOG.md

* Update descriptions

* Format file

---------

Co-authored-by: Álex Ruiz <alejandro.ruiz.becerra@wazuh.com>
This commit is contained in:
Fede Galland 2025-09-16 06:17:26 -03:00 committed by GitHub
parent f06166d09e
commit c51eaff6af
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
2 changed files with 25 additions and 22 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
CHANGELOG.md
View File

@ -31,6 +31,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
- FIM indices rework [(#509)](https://github.com/wazuh/wazuh-indexer-plugins/pull/509)
- Add state.modified_at to stateful indexes [(#561)](https://github.com/wazuh/wazuh-indexer-plugins/pull/561)
- Update GitHub Actions versions in main branch [(#572)](https://github.com/wazuh/wazuh-indexer-plugins/pull/572)
- Add browser-extensions and services inventory indices to documentation [(#574)](https://github.com/wazuh/wazuh-indexer-plugins/pull/574)
### Deprecated
-

46
docs/ref/modules/setup/index.md
View File

@ -11,28 +11,30 @@ The Wazuh Indexer Setup Plugin in responsible for:
The following table lists the indices created by this plugin.
| Index | Description |
| ----------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| `wazuh‑alerts` | Stores alerts generated by the [Wazuh Server](https://documentation.wazuh.com/current/getting-started/components/wazuh-server.html). These are created each time an event trips a rule with a high enough severity (this threshold is configurable). |
| `wazuh‑archives` | Stores all events (archive data) received by the [Wazuh Server](https://documentation.wazuh.com/current/getting-started/components/wazuh-server.html), whether they trip a rule. |
| `wazuh‑states-sca` | Security Configuration Assessment (SCA) scan results. |
| `wazuh-states-fim-files` | File Integrity Monitoring: information about monitored files. |
| `wazuh-states-fim-registry-keys` | File Integrity Monitoring: information about the Windows registry (keys). |
| `wazuh-states-fim-registry-values` | File Integrity Monitoring: information about the Windows registry (values). |
| `wazuh-states-inventory-groups` | Stores existing groups on the endpoint. |
| `wazuh-states-inventory-hardware` | Basic information about the hardware components of the endpoint. |
| `wazuh-states-inventory-hotfixes` | Contains information about the updates installed on Windows endpoints. This information is used by the vulnerability detector module to discover what vulnerabilities have been patched on Windows endpoints. |
| `wazuh-states-inventory-interfaces` | Stores information (up and down interfaces) as well as packet transfer information about the interfaces on a monitored endpoint. |
| `wazuh-states-inventory-monitoring` | Stores the connection status history of Wazuh agents (active, disconnected, pending, or never connected). The index is used by the Wazuh Dashboard to display agent status and historical trends. |
| `wazuh-states-inventory-networks` | Stores the IPv4 and IPv6 addresses associated with each network interface, as referenced in the `wazuh-states-inventory-interfaces` index. |
| `wazuh-states-inventory-packages` | Stores information about the currently installed software on the endpoint. |
| `wazuh-states-inventory-ports` | Basic information about open network ports on the endpoint. |
| `wazuh-states-inventory-processes` | Stores the detected running processes on the endpoints. |
| `wazuh-states-inventory-protocols` | Stores routing configuration details for each network interface, as referenced in the `wazuh-states-inventory-interfaces` index. |
| `wazuh-states-inventory-system` | Operating system information, hostname and architecture. |
| `wazuh-states-inventory-users` | Stores existing users on the endpoint. |
| `wazuh-states-vulnerabilities` | Active vulnerabilities on the endpoint and its details. |
| `wazuh-statistics` | Stores statistics about the Wazuh Server usage and performance. The information includes the number of events decoded, bytes received, and TCP sessions. |
| Index | Description |
| ------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| `wazuh‑alerts` | Stores alerts generated by the [Wazuh Server](https://documentation.wazuh.com/current/getting-started/components/wazuh-server.html). These are created each time an event trips a rule with a high enough severity (this threshold is configurable). |
| `wazuh‑archives` | Stores all events (archive data) received by the [Wazuh Server](https://documentation.wazuh.com/current/getting-started/components/wazuh-server.html), whether they trip a rule. |
| `wazuh‑states-sca` | Security Configuration Assessment (SCA) scan results. |
| `wazuh-states-fim-files` | File Integrity Monitoring: information about monitored files. |
| `wazuh-states-fim-registry-keys` | File Integrity Monitoring: information about the Windows registry (keys). |
| `wazuh-states-fim-registry-values` | File Integrity Monitoring: information about the Windows registry (values). |
| `wazuh-states-inventory-browser-extensions` | Stores browser extensions/add-ons detected on the endpoint (Chromium-based browsers — Chrome/Edge/Brave/Opera —, Firefox, and Safari). |
| `wazuh-states-inventory-groups` | Stores existing groups on the endpoint. |
| `wazuh-states-inventory-hardware` | Basic information about the hardware components of the endpoint. |
| `wazuh-states-inventory-hotfixes` | Contains information about the updates installed on Windows endpoints. This information is used by the vulnerability detector module to discover what vulnerabilities have been patched on Windows endpoints. |
| `wazuh-states-inventory-interfaces` | Stores information (up and down interfaces) as well as packet transfer information about the interfaces on a monitored endpoint. |
| `wazuh-states-inventory-monitoring` | Stores the connection status history of Wazuh agents (active, disconnected, pending, or never connected). The index is used by the Wazuh Dashboard to display agent status and historical trends. |
| `wazuh-states-inventory-networks` | Stores the IPv4 and IPv6 addresses associated with each network interface, as referenced in the `wazuh-states-inventory-interfaces` index. |
| `wazuh-states-inventory-packages` | Stores information about the currently installed software on the endpoint. |
| `wazuh-states-inventory-ports` | Basic information about open network ports on the endpoint. |
| `wazuh-states-inventory-processes` | Stores the detected running processes on the endpoints. |
| `wazuh-states-inventory-protocols` | Stores routing configuration details for each network interface, as referenced in the `wazuh-states-inventory-interfaces` index. |
| `wazuh-states-inventory-services` | Stores system services detected on the endpoint (Windows Services, Linux systemd units, and macOS launchd daemons/agents). |
| `wazuh-states-inventory-system` | Operating system information, hostname and architecture. |
| `wazuh-states-inventory-users` | Stores existing users on the endpoint. |
| `wazuh-states-vulnerabilities` | Active vulnerabilities on the endpoint and its details. |
| `wazuh-statistics` | Stores statistics about the Wazuh Server usage and performance. The information includes the number of events decoded, bytes received, and TCP sessions. |
## Install