Trendmicro vision one XDR intregration with wazuh manager(4.7).

[Rakesh Raushan]

Heyy, i want to intregration trendmicro vision one XDR with wazuh manager (4.7), please help me that how to integrate it with syslog or api.

[Mauricio Aguilar]

Hi Rakesh,

Thanks for using Wazuh!

In Wazuh, Agents process information and send it to the Manager.
Therefore, I understand that what you should do is to configure your server that records Trend Micro logs as an Agent, so that it decodes (Decoder) and generates an alert (Rule) that will be sent to the Manager. That is, you should create a Custom Rule and a Custom Decoder.

https://documentation.wazuh.com/current/user-manual/ruleset/getting-started.html
https://documentation.wazuh.com/current/user-manual/ruleset/custom.html

Best regards,

Mauricio