Compatibility matrix

Wazuh software can be installed in many operating systems. Moreover, there's also specific compatibility requirements between different Wazuh products. In order to assist you, check the following compatibility matrix.

Operating system compatibility

Wazuh Manager

Below it shown the compatibility table for the Wazuh manager.

Operating System

Wazuh version

3.0.x - Current

2.1.1

2.1.0

Debian Wheezy/7 or newer

Ubuntu Precise/12.04 - 16.10

Ubuntu Zesty/17.04 or newer

CentOS 6 and RHEL 6 or newer

Fedora (>= 22)

Note

  • The cluster is available since Wazuh v3.0 and it doesn't work on CentOS 5 / RHEL 5.

  • To run the cluster in CentOS 6, check the section Running the cluster in CentOS 6

Wazuh Agent

In this table, you can check our supported OS list where the Wazuh agent can be installed.

Operating System

Wazuh version

3.3.1 - Current

Debian Wheezy/7 or newer

Ubuntu Precise/12.04 or newer

CentOS 5 / RHEL 5

CentOS / RHEL 6 or newer

Fedora 22 or newer

Windows XP 2003 or newer

Windows Server 2008 or newer

Mac OS X

HP-UX 11.31

Solaris 10 - i386

Solaris 11 - i386

Solaris 10 - Sparc

Solaris 11 - Sparc

AIX 5

AIX 6

AIX 7

Suse 11

Suse 12

Amazon Linux

Amazon Linux 2

Product compatibility

When using the full stack of Wazuh software (that means, wazuh-manager, wazuh-agent, wazuh-api and wazuh-app), there are different compatibility requirements in order to make everything work properly.

Manager and agents

The compatibility between Wazuh Agent and Wazuh Manager is guaranteed when the Wazuh Manager has a newer or equal version than the Wazuh Agent.

Note

The Wazuh Manager is also compatible with OSSEC agents, but keep in mind that not all the capabilities will be available for them.

Manager and API

The API requires the same major.minor version than the Wazuh Manager in order to be compatible.

API and Kibana app

The Wazuh app for Kibana requires compatibility between two different products:

  • With the Wazuh API, it requires the same major.minor version.

  • With the Elastic Stack, it's only compatible with the exact same version.

API and Wazuh App version

Elastic Stack version

3.8.x

6.5.4 to 6.7.1*

3.7.x

6.4.2 to 6.5.4*

3.6.x

6.3.2 to 6.4.3*

3.5.x

6.3.2 to 6.4.0*

3.4.x

6.3.1 to 6.3.2*

3.3.x

6.2.4 to 6.3.1*

3.2.x

6.1.0 to 6.2.4*

3.1.x

6.1.0 to 6.1.3*

3.0.x

6.0.0 to 6.1.0*

2.1.1

5.6.5

You can find more information on the Wazuh app for Kibana repository, where you can check a more detailed compatibility matrix between the Wazuh app and Elastic Stack versions.

API and Splunk app

The Splunk app for Wazuh requires compatibility between two different products:

  • With the Wazuh API, it requires the same major.minor version.

  • With Splunk, it's only compatible with the exact same version.

API and Splunk App version

Splunk version

3.8.x

7.2.3 to 7.2.5

3.7.x

7.2.0 to 7.2.1*

3.6.x

7.1.2 to 7.1.3*

3.5.x

7.1.2

3.4.x

7.1.2

3.3.x

7.1.1

3.2.x

7.0.3 to 7.1.1*

You can find more information on the Wazuh app repository, where you can check a more detailed compatibility matrix between the Splunk app for Wazuh and Splunk versions.