Why is it that in the v4.7 is deprecated the vulnerability scan?

[Jaime-Moranchel]

So I'm searching in the docs to run a manual vulnerability scan and it says that in ver 4.7 it's deprecated, but in 4.6 it is not.
Why???

link to the docs:
https://documentation.wazuh.com/current/user-manual/api/reference.html#operation/api.controllers.vulnerability_controller.run_vulnerability_scan

[MiguelazoDS]

Hi @Jaime-Moranchel,

The vulnerability detector module will change soon, the vulnerabilities will be indexed to the Wazuh-indexer following the elastic common schema and will no longer be stored in individual databases, which let us have a general overview of the vulnerabilities for all agents and not a single agent as it is today.
In 4.7 you still can use everything was present in 4.6.

Regards!

[sebasfalcone]

Inactive thread, fell free to re open it if necessary

[Rudiedevries]

I am trying to pull vulnerability details via API to MSSQL to build reports with historical data, but now this API call has been removed.
How can I pull these details now?

[MiguelazoDS]

Hi @Rudiedevries,

As vulnerabilities are directly indexed into wazuh-indexer you can use the OpenSearch API to get the vulnerabilities.
Please take a look at https://opensearch.org/docs/latest/api-reference/search/

Regards!