Wazuh agentless configuration to send suricata detections to wazuh dashborad

[kiran]

Hi,


can you help me with the agentless configuration to send suricata detections to wazuh dashboard.


Thanks

[Mauricio Aguilar]

Hi kiran,

Do you have any particular inconvenience?

Here are some related pages that might help:

https://wazuh.com/blog/responding-to-network-attacks-with-suricata-and-wazuh-xdr/

https://wazuh.com/blog/monitoring-dhcp-starvation-attack-with-suricata-and-wazuh/
https://wazuh.com/blog/detecting-amadey-malware/

https://documentation.wazuh.com/current/user-manual/ruleset/getting-started.html

https://documentation.wazuh.com/current/search.html?q=suricata&check_keywords=yes&area=default

Best regards,

Mauricio.

[kiran]

Hi,

yes i need  help to specific configuration.

The below config performs ssh integrity check 

<agentless>
  <type>ssh_integrity_check_linux</type>
  <frequency>36000</frequency>
  <host>us...@test.com</host>
  <state>periodic</state>
  <arguments>/bin /etc /sbin</arguments>
</agentless>

I need an similar agentless configuration to send suricata detections to dashboard.


Thanks

[kiran kumaar]

Hi,

Do you have an update on this?

Thanks 

--
You received this message because you are subscribed to the Google Groups "Wazuh | Mailing List" group.
To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+un...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/wazuh/9bd4b3a3-f613-46e2-90b2-5e14a6899123n%40googlegroups.com.

[Mauricio Aguilar]

Hi Kiran, sorry for the delay.

Do you need something like the attached image?

Please check our documentation on:

https://documentation.wazuh.com/current/user-manual/capabilities/agentless-monitoring/index.html

https://documentation.wazuh.com/current/user-manual/capabilities/agentless-monitoring/agentless-configuration.html

Regards.