Compatibility matrix
Wazuh software can be installed in many operating systems, but depending on your needs, some systems may not be compatible. Moreover, there's also specific compatibility requirements between different Wazuh products. In order to assist you, check the following compatibility matrix.
Operating system compatibility
Manager
Below it shown the compatibility table for the Wazuh manager. It is recommended using CentOS / RHEL 7 as the operating system for Wazuh managers, due to their stability and full compatibility with the Wazuh modules.
Operating System |
Wazuh version |
|||||||||
3.7.x |
3.6.x |
3.5.x |
3.4.x |
3.3.x |
3.2.x |
3.1.0 |
3.0.0 |
2.1.1 |
2.1.0 |
|
Debian Wheezy/7 |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
Debian Jessie/8 |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
Debian Stretch/9 |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
Ubuntu Precise/12.04 |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
Ubuntu Trusty/14.04 |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
Ubuntu Vivid/15.04 |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
Ubuntu Wily/15.10 * |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
Ubuntu Xenial/16.04 |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
Ubuntu Yakkety/16.10 |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
Ubuntu Zesty/17.04 |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✗ |
✗ |
Ubuntu Artful/17.10 |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✗ |
✗ |
Ubuntu Bionic/18.04 |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✗ |
✗ |
CentOS 5 / RHEL 5 * |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✗ |
✓ |
✓ |
✓ |
CentOS 6 / RHEL 6 ** |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
CentOS 7 / RHEL 7 |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
Fedora (>= 22) |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
(*) In these systems, the Wazuh API is not available.
(**) To run the cluster in CentOS 6, check the section Running the cluster in CentOS 6
Note
The cluster is available since Wazuh v3.0 and it doesn't work on CentOS 5 / RHEL 5.
Agent
In this table, you can check our supported OS list where the Wazuh agent can be installed.
Operating System |
Wazuh version |
|||||||||||||
3.7.x |
3.6.x |
3.5.0 |
3.4.0 |
3.3.1 |
3.3.0 |
3.2.4 |
3.2.3 |
3.2.2 |
3.2.1 |
3.2.0 |
3.1.0 |
3.0.0 |
2.1.x |
|
Debian Wheezy/7 or newer |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
Ubuntu Precise/12.04 or newer |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
CentOS 5 / RHEL 5 |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
CentOS / RHEL 6 or newer |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
Fedora 22 or newer |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
Windows XP 2003 or newer |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
Windows Server 2008 or newer |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
Mac OS X |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
HP-UX 11.31 |
✓ |
✓ |
✓ |
✓ |
✓ |
✗ |
✗ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
Solaris 10 - i386 |
✓ |
✓ |
✓ |
✓ |
✓ |
✗ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✗ |
✓ |
Solaris 11 - i386 |
✓ |
✓ |
✓ |
✓ |
✓ |
✗ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✗ |
✓ |
Solaris 10 - Sparc |
✓ |
✓ |
✓ |
✓ |
✓ |
✗ |
✗ |
✓ |
✓ |
✓ |
✓ |
✓ |
✗ |
✓ |
Solaris 11 - Sparc |
✓ |
✓ |
✓ |
✓ |
✓ |
✗ |
✗ |
✓ |
✓ |
✓ |
✓ |
✓ |
✗ |
✓ |
AIX 5 |
✓ |
✓ |
✓ |
✓ |
✓ |
✗ |
✗ |
✓ |
✓ |
✓ |
✓ |
✓ |
✗ |
✓ |
AIX 6 |
✓ |
✓ |
✓ |
✓ |
✓ |
✗ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✗ |
✓ |
AIX 7 |
✓ |
✓ |
✓ |
✓ |
✓ |
✗ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✗ |
✓ |
Suse 11 |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✗ |
✗ |
✗ |
✗ |
Suse 12 |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✗ |
✗ |
✗ |
✓ |
Amazon Linux |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
Product compatibility
When using the full stack of Wazuh software (that means, wazuh-manager
, wazuh-agent
, wazuh-api
and wazuh-app
), there are different compatibility requirements in order to make everything work properly.
Manager and agents
The compatibility between agent and manager is guaranteed when the agent has an equal or older version than the manager.
Agent version |
Manager version |
|||||||||||||||||
3.7.2 |
3.7.1 |
3.7.0 |
3.6.1 |
3.6.0 |
3.5.0 |
3.4.0 |
3.3.1 |
3.3.0 |
3.2.4 |
3.2.3 |
3.2.2 |
3.2.1 |
3.2.0 |
3.1.0 |
3.0.0 |
2.1.1 |
2.1.0 |
|
3.7.2 |
✓ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
3.7.1 |
✓ |
✓ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
3.7.0 |
✓ |
✓ |
✓ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
3.6.1 |
✓ |
✓ |
✓ |
✓ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
3.6.0 |
✓ |
✓ |
✓ |
✓ |
✓ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
3.5.0 |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
3.4.0 |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
3.3.1 |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
3.3.0 |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
3.2.4 |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
3.2.3 |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
3.2.2 |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
3.2.1 |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✗ |
✗ |
✗ |
✗ |
✗ |
3.2.0 |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✗ |
✗ |
✗ |
✗ |
3.1.0 |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✗ |
✗ |
✗ |
3.0.0 |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✗ |
✗ |
2.1.1 |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✗ |
2.1.0 |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
Note
The Wazuh manager is also compatible with OSSEC agents, but keep in mind that not all the capabilities will be available for them.
Manager and API
The API requires the same major.minor
version than the manager in order to be compatible.
API version |
Manager version |
||||||||
3.7.x |
3.6.x |
3.5.x |
3.4.x |
3.3.x |
3.2.x |
3.1.x |
3.0.x |
2.1.x |
|
3.7.x |
✓ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
3.6.x |
✗ |
✓ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
3.5.x |
✗ |
✗ |
✓ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
3.4.x |
✗ |
✗ |
✗ |
✓ |
✗ |
✗ |
✗ |
✗ |
✗ |
3.3.x |
✗ |
✗ |
✗ |
✗ |
✓ |
✗ |
✗ |
✗ |
✗ |
3.2.x |
✗ |
✗ |
✗ |
✗ |
✗ |
✓ |
✗ |
✗ |
✗ |
3.1.x |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
✓ |
✗ |
✗ |
3.0.x |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
✓ |
✗ |
2.1.x |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
✓ |
API and Kibana app
The Wazuh app for Kibana requires compatibility between two different products:
With the Wazuh API, it requires the same
major.minor
version.With the Elastic Stack, it's only compatible with the exact same version.
App version |
Elastic Stack version |
API version |
||||||||
3.7.x |
3.6.x |
3.5.x |
3.4.x |
3.3.x |
3.2.x |
3.1.x |
3.0.x |
2.1.1 |
||
3.7.x |
6.4.2 to 6.5.4* |
✓ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
3.6.x |
6.3.2 to 6.4.3* |
✗ |
✓ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
3.5.x |
6.3.2 to 6.4.0* |
✗ |
✗ |
✓ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
3.4.x |
6.3.1 to 6.3.2* |
✗ |
✗ |
✗ |
✓ |
✗ |
✗ |
✗ |
✗ |
✗ |
3.3.x |
6.2.4 to 6.3.1* |
✗ |
✗ |
✗ |
✗ |
✓ |
✗ |
✗ |
✗ |
✗ |
3.2.x |
6.1.0 to 6.2.4* |
✗ |
✗ |
✗ |
✗ |
✗ |
✓ |
✗ |
✗ |
✗ |
3.1.x |
6.1.0 to 6.1.3* |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
✓ |
✗ |
✗ |
3.0.x |
6.0.0 to 6.1.0* |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
✓ |
✗ |
2.1.1 |
5.6.5 |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
✓ |
(*) In these Wazuh app versions, there are different compatible releases for the Elastic Stack.
You can find more information on the Wazuh app for Kibana repository, where you can check a more detailed compatibility matrix between the Wazuh app and Elastic Stack versions.
API and Splunk app
The Splunk app for Wazuh requires compatibility between two different products:
With the Wazuh API, it requires the same
major.minor
version.With Splunk, it's only compatible with the exact same version.
App version |
Splunk version |
API version |
||||||||
3.7.x |
3.6.x |
3.5.x |
3.4.x |
3.3.x |
3.2.x |
3.1.x |
3.0.x |
2.1.1 |
||
3.7.x |
7.2.0 to 7.2.1* |
✓ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
3.6.x |
7.1.2 to 7.1.3* |
✗ |
✓ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
3.5.x |
7.1.2 |
✗ |
✗ |
✓ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
3.4.x |
7.1.2 |
✗ |
✗ |
✗ |
✓ |
✗ |
✗ |
✗ |
✗ |
✗ |
3.3.x |
7.1.1 |
✗ |
✗ |
✗ |
✗ |
✓ |
✗ |
✗ |
✗ |
✗ |
3.2.x |
7.0.3 to 7.1.1* |
✗ |
✗ |
✗ |
✗ |
✗ |
✓ |
✗ |
✗ |
✗ |
(*) In these Wazuh app versions, there are different compatible releases for Splunk.
You can find more information on the Wazuh app repository, where you can check a more detailed compatibility matrix between the Splunk app for Wazuh and Splunk versions.