wazuh to misp issue

[Sakai Edit]

trying to montor suricata agent inside ubuntu server and my other proxmox servers 

[Rafael Bailon Robles]

Wazuh has official documentation for integrating Suricata: Network IDS integration. I’ve reviewed the file you attached. I understand you want to integrate Wazuh with MISP. The official documentation contains information on this:

• External API integration
• Custom integration
• How to integrate external software using Integrator

You need to perform a custom integration. Based on the attached file, it appears you haven’t yet checked the logs for errors. You can start by searching for errors with cat /var/ossec/logs/ossec.log | grep -i -E "error|warn". You can also look for wazuh-integratord errors in the log file.

​