CVE and update status of the FreeBSD ports tree3,295 unaddressed CVEs in 670 portsAll times are CET
Port details

security/wazuh-server 4.14.9

Components for analyze the data received from the agents

Port info

Maintainer
acm@FreeBSD.org
Packages
latest: 4.14.9
Upstream
up to date
Last update
to 4.14.9 · 47b0693c6d
Quarterly
not in the 2026Q4 packages
WWW
https://wazuh.com/
Links
cgit · VuXML

Install

Package
# pkg install wazuh-server
installs 4.14.9 from latest
Port
# cd /usr/ports/security/wazuh-server && make install clean
# make -C /usr/ports/security/wazuh-server config  # change options first
Size
19 KiB download · 113 KiB installed
Depends on
security/wazuh-manager 4.14.9, sysutils/beats8 8.19.21_2, sysutils/logstash8 8.19.21_2
License
GPLv2
Options
3 of 3 on in the package: FILEBEAT LOGSTASH WAZUH-MANAGER
pkg-message
Shown after installing
Wazuh server components were installed

1) Wazuh server componenets are based on Wazuh manager and Filebeat projects.
   This guide help you to adapt wazuh configuration for it works on FreeBSD
   using apps are part of ports tree. We are using an alternative way to
   configure wazuh server components on FreeBSD. It is necessary configure
   logstash between filebeat and opensearch because FreeBSD does not include
   versions lesser or equal to 7.16.x of Filebeat into ports tree.

2) Do not forget take a look to wazuh-manager post install message to configure
   the wazuh-server component.

   # pkg info -D -x wazuh-manager | less

3) Copy /usr/local/etc/wazuh-server/filebeat.yml to /usr/local/etc/beats/
   directory

4) Copy /usr/local/etc/wazuh-server/logstash.conf and /usr/local/etc/wazuh-server/wazuh-template.json
   files to /usr/local/etc/logstash/ directory

5) You can use my own version of wazuh certificates generator for generate
   root, admin, indexer, server and dashboard certificates used by wazuh
   components.

   https://people.freebsd.org/~acm/ports/wazuh/wazuh-gen-certs.tar.gz

6) Edit filebeat.yml and logstash.yml files and changes options accord to your
   setup. For example host, ssl, filter, etc. Sample files can give you a good
   guide about that.

7) Install logstash-output-opensearch plugin. Fetch it from rubygems site or opensearch github

   # cd /usr/local/logstash/bin
   # sh -c "JAVA_HOME=/usr/local/openjdk21 ./logstash-plugin install logstash-output-opensearch"

   If there are some issues installing this plugin, try installing gem file directly:

   # fetch https://rubygems.org/downloads/logstash-output-opensearch-2.0.3-java.gem -o \
     /tmp/logstash-output-opensearch-2.0.3-java.gem
   # sh -c "JAVA_HOME=/usr/local/openjdk21 ./logstash-plugin install /tmp/logstash-output-opensearch-2.0.3-java.gem"

8) Check if logstash-output-opensearch plugin was installed

   # sh -c "JAVA_HOME=/usr/local/openjdk21 ./logstash-plugin list | grep logstash-output-opensearch"

9) Add Filebeat and Logstash to /etc/rc.conf

   # sysrc filebeat_enable="YES"
   # sysrc logstash_enable="YES"

10) Current version of logstash8 uses openjdk24 by default, but it doesn't work with logstash-output-opensearch.
    Change it to openjdk21 adding the following:

   # sysrc logstash_java_home="/usr/local/openjdk21"

11) Start Filebeat and Logstash services
   
   # service filebeat start
   # service logstash start

12) You can look more useful information at the following link:

    https://documentation.wazuh.com/current/installation-guide/wazuh-server/step-by-step.html

    Take on mind wazuh arquitecture on FreeBSD is configurated not similar like
    you can read at wazuh guide. Some times you could decided configure logstash
    on another host. If it is your case you must adapt some points in this guide.

13) Enjoy it

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 164.14.94.14.8–
FreeBSD 154.14.9✗–
FreeBSD 14✗4.14.8✗

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 15✗✗–
FreeBSD 14✗4.14.8✗

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 4.14.9.

Fixed (0)

No VuXML entries for this package.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (40)

Jose Alonso Cardenas Marquez (acm) · 4.14.9 MFH 2026Q4 ✓
security/wazuh*: update to 4.14.9

- Update cpython bundle to 3.11.17
- Remove obsolete patch file
- Use PYTHON_DISTVERSION for avoid temporarily pkg-plist issues when
  system python is updated. The best is keep system python and bundle
  python with the same version.

ChangeLog at:   https://documentation.wazuh.com/current/release-notes/release-4-14-9.html
PR:		299490
47b0693c6d
Jose Alonso Cardenas Marquez (acm) · 4.14.8
security/wazuh-*: Update to 4.14.8

ChangeLog at:   https://documentation.wazuh.com/current/release-notes/release-4-14-8.html
8801f12993
Jose Alonso Cardenas Marquez (acm) · 4.14.7
security/wazuh-*: Update to 4.14.7

ChangeLog:     https://documentation.wazuh.com/current/release-notes/release-4-14-7.html
2341115f80
Jose Alonso Cardenas Marquez (acm) · 4.14.6 MFH 2026Q3 ✓
security/wazuh-*: Update to 4.14.6

ChangeLog at:   https://documentation.wazuh.com/current/release-notes/release-4-14-6.html
ffbf7ab241
Jose Alonso Cardenas Marquez (acm) · 4.14.5
security/wazuh*: Update to 4.14.15

ChangeLog at:   https://documentation.wazuh.com/current/release-notes/release-4-14-5.html
a611917c0a
Jose Alonso Cardenas Marquez (acm) · 4.14.4
security/wazuh*: Update to 4.14.4

ChangeLog at:   https://documentation.wazuh.com/current/release-notes/release-4-14-4.html
e74caed54d
Jose Alonso Cardenas Marquez (acm) · 4.14.3
security/wazuh-*: Update to 4.14.3

- Fallback to 0 when elapsed-times is a non-numeric value
- Fix getPorts function issues on all versions of FreeBSD
- Update entry about java version into wazuh-indexer/pkg-message file
- Use a modified version of Python async inotify module to
  work on FreeBSD (https://github.com/alonsobsd/asyncinotify)
- Define USE=inotify when INOTIFY option is selected

ChangeLog at:   https://documentation.wazuh.com/current/release-notes/release-4-14-3.html
35fcd6a4cc
Jose Alonso Cardenas Marquez (acm) · 4.14.2
security/wazuh-server: fix fetch

PR:		292580
Reported by:	Trond Endrestøl <Trond.Endrestol at ximalas.info>
5d600fc1a1
Jose Alonso Cardenas Marquez (acm) · 4.14.2
security/wazuh-*: Update to 4.14.2

- Now, Wazuh source code is obtained from https://github.com/alonsobsd/wazuh-freebsd.
  This repository includes all changes to run Wazuh Suite on FreeBSD. dtxdf and I
  will maintain this repository in where will try to add all Wazuh features to
  FreeBSD.
- wazuh-dashboards : Update version of opensearch to 2.19.4

ChangeLog at:   https://documentation.wazuh.com/current/release-notes/release-4-14-2.html
Reviewed by:	acm dtxdf
Tested by:	acm dtxdf
b1f52980fe
Adam Weinberger (adamw) · 4.14.1_3
security/wazuh-server: Switch FILEBEAT dep from beats7 to beats8

beats7 has been removed and wazuh-server built happily with beats8 for
me.

While here, fix some trailing whitespace and bump PORTREVISION.
ce6831e12e
Jose Alonso Cardenas Marquez (acm) · 4.14.1_2
security/wazuh-*: Improve ports

- agent and manager: Avoid change permissions to local.sqlite file.
  Now it uses read-only mode.
- manager: dos2unix to api.yaml file
- server: logstash8 was updated to 8.19.9 and it needs openjdk21+
- Bump PORTREVISION

Reported by:	dtxdf
a4242bfeaf
Jose Alonso Cardenas Marquez (acm) · 4.14.1_1
security/wazuh-server: Update pkg-message file about logstash-output-opensearch

- Modify pkg-message entries about logstash-output-opensearch plugin
- Change openjdk11 to openjdk17
- Bump PORTREVISION
801e78b112
Jesús Daniel Colmenares Oviedo (dtxdf) · 4.14.1
security/wazuh-server: Fix stage phase when BUILD_AS_NON_ROOT=yes

Approved by:    acm@
4aab74a779
Jose Alonso Cardenas Marquez (acm) · 4.14.1
security/wazuh: Update to 4.14.1

- Python bundle update to 3.11.4
- wazuh-agent and wazuh-manager : Add support for 15-RELEASE and 16-CURRENT
- wazuh-agent and wazuh-manager : Improve FreeBSD system information functions
- wazuh-dashboards : Update version of opensearch to 2.19.3
- wazuh-manager: Update pkg-message with entries about vulnerability detector
  and indexer connector configuration

ChangeLog at:   https://documentation.wazuh.com/current/release-notes/release-4-14-1.html
PR:		290771 290782 291040
e39ac10bca
Jose Alonso Cardenas Marquez (acm) · 4.12.0_1
security/wazuh-server: Fix logstash configuration name

- Bump PORTREVISION
4a1928b49f
Jose Alonso Cardenas Marquez (acm) · 4.12.0
security/wazuh-*: Updatet to 4.12.0

- Update bundle python to 3.11.12
- Update opensearch dependency to 2.19.1
- Update opensearch-dashboards dependency to 2.19.1

ChangeLog at:   https://documentation.wazuh.com/current/release-notes/release-4-12-0.html
Sponsored by:   Entersekt
8e222d0e95
Jose Alonso Cardenas Marquez (acm) · 4.11.2
security/wazuh-*: Update to 4.11.2

ChangeLog at:   https://documentation.wazuh.com/current/release-notes/release-4-11-2.html
Sponsored by:   Entersekt
f2cf9cc0e3
Jose Alonso Cardenas Marquez (acm) · 4.11.1
security/wazuh-*: Update to 4.11.1

- security/wazuh-manager: Remove bsolete patch
- security/wazuh-manager: Update http-request to 75384783d339a817b8d8f13f778051a878d642a6

ChangeLog at:   https://documentation.wazuh.com/current/release-notes/release-4-11-1.html
Sponsored by:   Entersekt
916c623068
Jose Alonso Cardenas Marquez (acm) · 4.11.0
security/wazuh-*: Update to 4.11.0

- Update py-pyarrow whl to 19.0.1

ChangeLog at:   https://documentation.wazuh.com/current/release-notes/release-4-11-0.html
Sponsored by:   Entersekt
1e06b54ca9
Jose Alonso Cardenas Marquez (acm) · 4.10.1
security/wazuh-*: Update to 4.10.1

- Update bundle python to 3.11.11
- Update opensearch dependency to 2.16.x
- Update opensearch-dashboards dependency to 2.16.x

ChangeLog at:	https://documentation.wazuh.com/current/release-notes/release-4-10-1.html
397e095752
Jose Alonso Cardenas Marquez (acm) · 4.9.2
security/wazuh-*: Update to 4.9.2

- wazuh-manager: Remove support for freebsd13-aarch64
- wazuh-manager: Cache files were generated from python3.11 instead of python3.10
- wazuh-manager: Remove obsolete patch files
- wazuh-dashboards : Use opensearch-dashboards230 instead of opensearch-dashboards210

ChangeLog at:	https://github.com/wazuh/wazuh/releases
		https://github.com/wazuh/wazuh-dashboard-plugins/releases
PR:		282160
Reported by:	Ian Dickens <ian at south-border.com>
96a8778888
Jose Alonso Cardenas Marquez (acm) · 4.7.5
security/wazuh-*: Update to 4.7.5

- Fix build/installation on aarch64
- Fix runtime issues on 14.x and 15.x because of openssl3 support [1]

PR:		279363
Reported by:	girgen [1]
e9a4fa124d
Jose Alonso Cardenas Marquez (acm) · 4.7.4
security/wazuh-*: Update to 4.7.4

- Fix wazuh-agent segment fault (agent and manager) [1]
- Improve configuration files (agent and manager)
- Update py-pyarrow into cache file to 15.0.2 (manager)
- Update cache files used by wazuh-manager.
- Other minor modifications

ChangeLog at:	https://documentation.wazuh.com/current/release-notes/release-4-7-4.html
Obtained from:	https://github.com/wazuh/wazuh/issues/23154 [1]
d75dd772ea
Jose Alonso Cardenas Marquez (acm) · 4.7.3
security/wazuh-*: Update to 4.7.3

ChangeLog at:	https://documentation.wazuh.com/current/release-notes/release-4-7-3.html
dca13c8c6c
Jose Alonso Cardenas Marquez (acm) · 4.7.2
security/wazuh-*: Update to 4.7.2

- Install FreeBSD rules, decoders and SCA files by default
- Strip python binary and so files
- Add devel/libffi and databases/arrow to LIB_DEPENDS
- Update pkg-message files
- Othe minor modifications

ChangeLog at:	https://documentation.wazuh.com/current/release-notes/release-4-7-2.html
06af245d1f
Jose Alonso Cardenas Marquez (acm) · 4.7.1_1
security/wazuh-server: Bump PORTREVISION. wazuh-manager was updated
01fea3160e
Jose Alonso Cardenas Marquez (acm) · 4.7.1
securty/wazuh-*: Update to 4.7.1

- Remove support for 12.x (EoL)
- Change some config files to sample files
- Fix syscollector issue when network port is equal to *

ChangeLog at:	https://documentation.wazuh.com/current/release-notes/release-4-7-1.html
970d2df7ee
Jose Alonso Cardenas Marquez (acm) · 4.7.0
security/wazuh: Update to 4.7.0

- Fix ssl=openssl build [1]
- Fix permissions of backup/db directory. Now backup are generated without
  problems
- Add support for get ports info
- Add support for get processes info
- Add a better way for get memory info
- Add new decoders and rules files (https://github.com/alonsobsd/wazuh-freebsd)
- Update FreeBSD sca files (https://github.com/alonsobsd/wazuh-freebsd)
- Minor changes to SysInfo::getPackages function
- Another minor modifications
PR:		275008
Reported by:	franco _at_ opnsense.org [1]
abaf8dc39c
Jose Alonso Cardenas Marquez (acm) · 4.6.0
security/wazuh-*: Update to 4.6.0

- security/wazuh-manager: Deactivate CIS files. The are renamed to yml.deprecated
- security/wazuh-agent: Don't install all CIS files
- Turn security.keys a sample file. It helps to avoid remove client.keys on update
- Update pkg-message.in files
- Another minor modifications
d7b99124a0
Jose Alonso Cardenas Marquez (acm) · 4.5.4
security/wazuh-*: Update to 4.5.4

ChangeLog at:	https://documentation.wazuh.com/current/release-notes/release-4-5-4.html
a8e4946f00
Jose Alonso Cardenas Marquez (acm) · 4.5.3
security/wazuh-*: Update to 4.5.3

- security/wazuh-agent: Enable INOTIFY option by default. It enables Kevent
  based real time monitoring. See some examples like use it at:
  https://wazuh.com/blog/detecting-common-linux-persistence-techniques-with-wazuh/
- security/wazuh-manager: Add entries to pkg-message.in about FreeBSD SCA files
  and FreeBSD decoders and rules files. I'll maintain update versions of these
  files at https://github.com/alonsobsd/wazuh-freebsd
- security/wazuh-dashboard: Update project url to new one
- Othe minor modifications
45aab66eae
Jose Alonso Cardenas Marquez (acm) · 4.5.2
security/wazuh-*: update to 4.5.2

- wazuh-indexer and wazuh-dashboards now use 2.10.0 version of opensearch and
  opensearch-dashboard

ChangeLog at:	https://documentation.wazuh.com/current/release-notes/release-4-5-2.html
a1b512e016
Jose Alonso Cardenas Marquez (acm) · 4.5.0
security/wazuh-*: Update to 4.5.0

- wazuh-indexer and wazuh-dashboards now use 2.9.0 version of opensearch and
  opensearch-dashboard
- Revert beats dependency to beats7 (filebeat) at security/wazuh-server. beats8
  has some issues with filebeat (Take a look at PR/272701)
3bfa0c383e
Jose Alonso Cardenas Marquez (acm) · 4.4.4
security/wazuh-*: Update to 4.4.4

- Add python path files from lang/python39/files
- wazuh-indexer and wazuh-dashboards now use 2.8.0 version of opensearch and
  opensearch-dashboard
- Update beats dependency to beats8 (filebeat) at security/wazuh-server
08d0f06faa
Jose Alonso Cardenas Marquez (acm) · 4.4.3
security/wazuh-*: Update to 4.4.3

- Mark IGNORE on FreeBSD 12-aarch64
- Use makepatch to generate patch files
- Fix typo at wazuh-agent and wazuh-manager pkg-message files [1]
- Fix some linking issues when devel/libsysinfo is installed (using ports).
  wazuh-manager compile/install a library with the same name like libsysinfo and
  it is used by syscollector feature.
- wazuh-dashboard use opensearch-dashboards 2.7.0
- Some other modifications

ChangeLog at:	https://github.com/wazuh/wazuh/releases
PR:		271376
Reported by:	lambert _ at _ sanesecurityguy.com [1]
55048ca1c7
Jose Alonso Cardenas Marquez (acm) · 4.4.1
security/wazuh-*: update to 4.4.1

ChangeLog at:	https://github.com/wazuh/wazuh/releases/tag/v4.4.1
3f387b5f46
Jose Alonso Cardenas Marquez (acm) · 4.4.0
security/wazuh-*: Update to 4.4.0

- security/wazuh-manager: Add support for aarch64

ChangeLog at:	https://github.com/wazuh/wazuh/releases/tag/v4.4.0
72044b5eaa
Jose Alonso Cardenas Marquez (acm) · 4.3.10
security/wazuh-*: Update to 4.3.10

ChangeLog at:	https://github.com/wazuh/wazuh/releases/tag/v4.3.10
bdb2089d27
Jose Alonso Cardenas Marquez (acm) · 4.3.9
security/wazuh-*: update to 4.3.9

ChangeLog at:	https://github.com/wazuh/wazuh/releases/tag/v4.3.9
eed33d5e03
Jose Alonso Cardenas Marquez (acm) · 4.3.8
security/wazuh-server: New port: Components for analyze the data received from the agents

Wazuh is a free and open source platform used for threat prevention, detection,
and response. It is capable of protecting workloads across on-premises,
virtualized, containerized, and cloud-based environments.

Wazuh solution consists of an endpoint security agent, deployed to the
monitored systems, and a management server, which collects and analyzes data
gathered by the agents. Besides, Wazuh has been fully integrated with the
Elastic Stack, providing a search engine and data visualization tool that
allows users to navigate through their security alerts.
844dbce667