Skip to content

[feature request] Allow filter by agent.group in Wazuh Modules/Security events #14225

Description

@carlosdams
Wazuh version Component Install type Install method Platform
4.x Security events Manager N/A Any

Description:
Allow filtering by group of agents in Security events (screenshots below)

Viable workaround: It is already possible to identify Agent's groups by adding a label in the different groups, then leverage this label to filter it in Wazuh Dashboard.

We need to consider to add this feature out-of-the-box in Wazuh to properly set the Agent's group name into the alerts, so we can just filter those alerts using a field such as 'agent.group'

Wazuh 4.2.x :
image

Wazuh 4.3.x:
image

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions