Wazuh API 3.7.0

Added

• Added support for queries in agents, rootcheck and syscheck API requests (#128)
• Added API support for multigroups (#159)
• Add hash parameter to GET/agents/groups/:group_id/files API call (#166)
• Retieve agent configuration on demand: GET/agents/:agent_id/config/:component/:configuration API call (#72)
• Added statistical data for analysisd and remoted. (#158) (#213)
  • GET/manager/stats/analysisd to query Analysisd statistics.
  • GET/manager/stats/remoted to query Remoted statistics.
  • GET/cluster/:node_id/stats/analysisd to query Remoted statistics on a specific node.
  • GET/cluster/:node_id/stats/remoted to query Remoted statistics on a specific node.
• Add OS Query wodle configuration to GET/manager/configuration API call (wazuh/wazuh#1585)
• Add Vulnerability detector wodle configuration to GET/manager/configuration API call (wazuh/wazuh#1453)
• Check if an agent's group configuration is synchronized: GET/agent/:agent_id/group/is_sync API call (#180)
• Prevent using API in worker nodes (#229)

Changed

• Changed api.log permissions. Now it is installed with 640 permissions and ossec:ossec owner (#164)
• Field group from agents API calls is now returned as a list (wazuh/wazuh#1437)
• Improve symbolic link for htpasswd (#205)

Fixed

• Fixed error showing logs containing strange characters (wazuh/wazuh#1584)
• Fixed error when registering an agent named % (#178)
• Fix error when limiting results in syscollector API calls (wazuh/wazuh#1457)
• NodeJS 5 compatibility (#209)

Removed

• Removed id field from syscollector network API calls (#169)
• Removed event filter from GET/syscheck/:agent_id API call (#721)

Wazuh API 3.6.1

Added

• Add PUT/active-response/:agent_id API call (#151).

Wazuh API 3.6.0

Added

• Name and ip filters to GET /agents request (#143).

Wazuh API 3.5.0

Added

• Show authenticated user in API logs (#67).
• New API requests for Syscollector (#89):
  • GET/experimental/syscollector/processes.
  • GET/syscollector/:agent_id/processes.
  • GET/experimental/syscollector/ports.
  • GET/syscollector/:agent_id/ports.
  • GET/experimental/syscollector/netaddr.
  • GET/syscollector/:agent_id/netaddr.
  • GET/experimental/syscollector/netproto.
  • GET/syscollector/:agent_id/netproto.
  • GET/experimental/syscollector/netiface.
  • GET/syscollector/:agent_id/netiface.
• Option to download the wpk using HTTP in UPDATE/agents/:agent_id/upgrade. (#109)
• Rotate log files at midnight. (#117)
• New API requests for the CIS-CAT module (#142):
  • GET/experimental/ciscat/results.
  • GET/ciscat/:agent_id/results.

Changed

• Renamed merged_sum and conf_sum fields to mergedSum and configSum in GET/agents/groups (wazuh/wazuh#761).
• Added more log levels to the output in GET/manager/logs/summary: error, info, critical, warning and debug (wazuh/wazuh#856).
• Updated api-register-agent.ps1 to use TLS 1.2 (#51).
• Input validation accepts more characters (#83).

Fixed

• Fixed bug when reading logs with non-ascii characters in GET/manager/logs (wazuh/wazuh#856).
• Fixed error sorting fields that have both uppercase and lowercase characters (wazuh/wazuh#814).
• Adapted api-register-agent.ps1 to the changes of ossec.conf (#51).

Wazuh API 3.4.0

Added

• Improved agent registration/removal bash script (#71).
• New API request: GET/agents/stats/distinct. (#115)
• Installer option for disabling API service setup. (#129)

Changed

• Move "Multiple DB requests" to /experimental. (#124)

Fixed

• Fixed purge filter in DELETE/agents (#122)

Wazuh API 3.3.1

Changed

• Output of DELETE/agents: Added attributes total_affected_agents and total_failed_ids. (Wazuh #795)

Fixed

• Fixed configure_api tries to remove preloaded_vars even if it doesn't exist. (#106)
• Fixed crash for requests with wrong headers. (#107)

Wazuh API 3.3.0

Added

• Filter by group in GET/agents API call. (#97)
• Filter by status in GET/agents/groups/:group_id and GET/agents/no_group API calls. (#97)
• Sort by lastKeepAlive in GET/agents API call. (#97)

Changed

• Modified limit parameter to retrieve all items using limit=0. Available in all requests that return lists. (#96)

Fixed

• Fixed bug that limited the number of agents deleted by DELETE/agents to a maximum of 500. (Wazuh #740)
• Fixed error message when an invalid character was used with select parameter (#98).

Wazuh API 3.2.4

There are no changes for Wazuh API in this version.

Wazuh API 3.2.3

Added

• New API requests:
  • GET/rules/gdpr (#78).
  • GET/agents/no_group.
  • GET/cluster/healthcheck.
  • GET/cluster/nodes/:node_name.
• A parameter in request GET/rules to filter by GDPR requirements (#78).
• Parameters in GET/cluster/nodes: search, sort, offset, limit, select. And a new filter: type.
• A parameter in request GET/agents to filter agents by cluster nodes.

Changed

• Output of GET/nodes: Added a new attribute version.

Removed

• The following requests have been removed:
  • GET/cluster/agents: Duplicated request (GET/agents).
  • GET/cluster/node: Duplicated request (GET/cluster/config).
  • GET/cluster/files: It will not be available in this version of the cluster.

Wazuh API 3.2.2

Added

• Added an option in config.js to run the API with root privileges for debug purposes and troubleshooting. The API runs as ossec by default. (#68)

Changed

• Changed mode from 750 to 660 in /configuration/auth/user file after installing it.