Add information to documentation about changing file ownership.

[ghvrtx]

📌 Request Details

Required Information

• Target version: 4.x

• Request type
  • Product update
  • Fixes or corrections
  • Improvement
  • Other:
• Affected Documentation
  • Documentation section(s): Modify default decoders
  • Specific page URLs: https://documentation.wazuh.com/current/user-manual/ruleset/decoders/custom.html#modify-default-decoders

Description

Hello. I've read the follow article (Modify default decoders) https://documentation.wazuh.com/current/user-manual/ruleset/decoders/custom.html#modify-default-decoders and I suggest to mention in this article that before restart wazuh manager we have to change ownership of custom decoder file (for example: /var/ossec/etc/decoders/0310-ssh_decoders.xml) to wazuh:wazuh (user owner: group owner) - command: chown wazuh:wazuh /var/ossec/etc/decoders/0310-ssh_decoders.xml Because, usually we do changes under root user and the file owner and group owner is root for new file (for our example file: 0310-ssh_decoders.xml). If we didn't change owners of new file, we can't successfully restart wazuh manager service.