Compatibility matrix

When upgrading Wazuh there are specific compatibility requirements to take into consideration.

Wazuh central components and agents

The Wazuh central components must share the same version numbers down to the patch category for the correct operation. For example:

  • Wazuh manager 4.3.1, Wazuh indexer 4.3.1, and Wazuh dashboard 4.3.1.

  • The Wazuh indexer 4.3.1 is compatible with Filebeat-OSS 7.10.2.

The Wazuh manager version must always be newer than or equal to the Wazuh agents versions. For example:

  • Wazuh manager 4.3.1 and Wazuh agent 4.2.6

  • Wazuh manager 4.3.1 and Wazuh agent 4.3.1

The Wazuh manager is also compatible with OSSEC agents but not all capabilities are available with them.

Elastic and the Wazuh Kibana plugin

The following Elastic Stack and Open Distro for Elasticsearch versions are compatible with the Wazuh manager 4.3.1 using the Wazuh Kibana plugin:

Elastic Stack version

Open Distro version

7.10.2

1.13.2

7.16.0–7.16.3

7.17.0–7.17.3

You can find more information on the Wazuh Kibana plugin repository.

Splunk and the Wazuh Splunk app

The following Splunk versions are compatible with the Wazuh manager 4.3.1 using the Wazuh Splunk app 4.3.1:

Splunk version

8.1.1–8.1.10

8.2.0–8.2.6

You can find more information on the Wazuh Splunk app repository.