To force a vulnerability scan, the wazuh agents in the configuration should be set to:
Linux:
<wodle name="syscollector">
<disabled>no</disabled>
<interval>1h</interval>
<os>yes</os>
<packages>yes</packages>
</wodle>
Windows
<wodle name="syscollector">
<disabled>no</disabled>
<interval>1h</interval>
<os>yes</os>
<packages>yes</packages>
<hotfixes>yes</hotfixes>
</wodle>
and in the manager configuration:
<vulnerability-detector>
<enabled>yes</enabled>
<interval>30m</interval>
<run_on_start>yes</run_on_start>
<provider name="nvd">
<enabled>yes</enabled>
<update_from_year>2012</update_from_year>
<update_interval>1h</update_interval>
</provider>
</vulnerability-detector>
then restart wazuh-manager.
