Custom Report

[George B]

Hello community , 

How can I costume the reports so that it does not have visualization. I want to display only the summary alerts

Best regards! 

[Christian Borla]

Hi!
I hope you are doing fine!
Wazuh include an option to generate reports by alert level, in following link you can find some examples.

configuration on manager side.

<ossec_config>
   <reports>
      <level>10</level>
      <title>Daily report: Alerts with level higher than 10</title>
      <email_to>exa...@test.com</email_to>
   </reports>
</ossec_config>

A way to avoid report noise, is disabling the showlogs option in configuration block.
In other hand, it's not possible configure the report frequency or not visualize some reports sections, it's a predefined structure:

Report 'Daily report: File changes' completed.
Top entries for 'Level'
Top entries for 'Group'
 Top entries for 'Location'
 Top entries for 'Rule'
 Top entries for 'Filenames'

Let me know if this information is useful to you.
Regards.

[George B]

Thank you very much for your reply 

I would say that this way helped me. But I would like to modify the reports to pdf format so that only show alerts summary. 

For example, in the report below, display only Alerts summary and not visualizations (Alerts, Alerts evolution top 5 agents, Alert level evolution, Top agents) 

Is there a way to modify the pdf reports? 

Thank you very much. 

[Christian Borla]

Hi!
Sorry for the delay!

The Wazuh report can not be edited,  you can use Kibana Visualize and Kibana Dashboards to create your custom reports.
I leave you here some tutorials, to see the options and usage of these tools. OpenDistro/OpenSearch Kibana and ElasticStack Kibana have some differences, but is a good way to start customize your own reports.

1. 8 ways to visualize proportions in Kibana.
2. Your First Visualization with Kibana Lens.

You can use as reference the Dashboards you like from the WazuhApp.
Let me know if that helps.
Regards.