Compatibility matrix

Wazuh software can be installed in many operating systems, but depending on your needs, some systems may not be compatible. Moreover, there’s also specific compatibility requirements between different Wazuh products. In order to assist you, check the following compatibility matrix.

Operating system compatibility

Manager

Below it shown the compatibility table for the Wazuh manager. It is recommended using CentOS / RHEL 7 as the operating system for Wazuh managers, due to their stability and full compatibility with the Wazuh modules.

Operating System

Wazuh version

3.6.x

3.5.x

3.4.x

3.3.x

3.2.x

3.1.0

3.0.0

2.1.1

2.1.0

Debian Wheezy/7

Debian Jessie/8

Debian Stretch/9

Ubuntu Precise/12.04

Ubuntu Trusty/14.04

Ubuntu Vivid/15.04

Ubuntu Wily/15.10 *

Ubuntu Xenial/16.04

Ubuntu Yakkety/16.10

Ubuntu Zesty/17.04

Ubuntu Artful/17.10

Ubuntu Bionic/18.04

CentOS 5 / RHEL 5 *

CentOS 6 / RHEL 6 **

CentOS 7 / RHEL 7

Fedora (>= 22)

(*) In these systems, the Wazuh API is not available.

(**) To run the cluster in CentOS 6, check the section Running the cluster in CentOS 6

Note

The cluster is available since Wazuh v3.0 and it doesn’t work on CentOS 5 / RHEL 5.

Agent

In this table, you can check our supported OS list where the Wazuh agent can be installed.

Operating System

Wazuh version

3.6.x

3.5.0

3.4.0

3.3.1

3.3.0

3.2.4

3.2.3

3.2.2

3.2.1

3.2.0

3.1.0

3.0.0

2.1.x

Debian Wheezy/7 or newer

Ubuntu Precise/12.04 or newer

CentOS 5 / RHEL 5

CentOS / RHEL 6 or newer

Fedora 22 or newer

Windows XP 2003 or newer

Windows Server 2008 or newer

Mac OS X

HP-UX 11.31

Solaris 10 - i386

Solaris 11 - i386

Solaris 10 - Sparc

Solaris 11 - Sparc

AIX 5

AIX 6

AIX 7

Suse 11

Suse 12

Amazon Linux

Product compatibility

When using the full stack of Wazuh software (that means, wazuh-manager, wazuh-agent, wazuh-api and wazuh-app), there are different compatibility requirements in order to make everything work properly.

Manager and agents

The compatibility between agent and manager is guaranteed when the agent has an equal or older version than the manager.

Agent version

Manager version

3.6.1

3.6.0

3.5.0

3.4.0

3.3.1

3.3.0

3.2.4

3.2.3

3.2.2

3.2.1

3.2.0

3.1.0

3.0.0

2.1.1

2.1.0

3.6.1

3.6.0

3.5.0

3.4.0

3.3.1

3.3.0

3.2.4

3.2.3

3.2.2

3.2.1

3.2.0

3.1.0

3.0.0

2.1.1

2.1.0

Note

The Wazuh manager is also compatible with OSSEC agents, but keep in mind that not all the capabilities will be available for them.

Manager and API

The API requires the same major.minor version than the manager in order to be compatible.

API version

Manager version

3.6.x

3.5.x

3.4.x

3.3.x

3.2.x

3.1.x

3.0.x

2.1.x

3.6.x

3.5.x

3.4.x

3.3.x

3.2.x

3.1.x

3.0.x

2.1.x

API and Kibana app

The Wazuh app for Kibana requires compatibility between two different products:

  • With the Wazuh API, it requires the same major.minor version.

  • With the Elastic Stack, it’s only compatible with the exact same version.

App version

Elastic Stack version

API version

3.6.x

3.5.x

3.4.x

3.3.x

3.2.x

3.1.x

3.0.x

2.1.1

3.6.x

6.3.2 to 6.4.3*

3.5.x

6.3.2 to 6.4.0*

3.4.x

6.3.1 to 6.3.2*

3.3.x

6.2.4 to 6.3.1*

3.2.x

6.1.0 to 6.2.4*

3.1.x

6.1.0 to 6.1.3*

3.0.x

6.0.0 to 6.1.0*

2.1.1

5.6.5

(*) In these Wazuh app versions, there are different compatible releases for the Elastic Stack.

You can find more information on the Wazuh app for Kibana repository, where you can check a more detailed compatibility matrix between the Wazuh app and Elastic Stack versions.

API and Splunk app

The Splunk app for Wazuh requires compatibility between two different products:

  • With the Wazuh API, it requires the same major.minor version.

  • With Splunk, it’s only compatible with the exact same version.

App version

Splunk version

API version

3.6.x

3.5.x

3.4.x

3.3.x

3.2.x

3.1.x

3.0.x

2.1.1

3.6.x

7.1.2 to 7.1.3*

3.5.x

7.1.2

3.4.x

7.1.2

3.3.x

7.1.1

3.2.x

7.0.3 to 7.1.1*

(*) In these Wazuh app versions, there are different compatible releases for Splunk.

You can find more information on the Wazuh app repository, where you can check a more detailed compatibility matrix between the Splunk app for Wazuh and Splunk versions.