opensearch integration with wazuh

[57 Tushar Thakare]

Wazuh Version: 4.4.5

Opensearch version: 2.9.0

Hello everyone. is it possible to integrate with this two technologies.

if possible then how we can do that, share the documentation.

thanks

[Federico Rodriguez]

Hi Tushar Thakare, 

Wazuh Dashboard 4.4.5 is based on OpenSearch 2.6.0 and is not compatible with OpenSearch 2.9.0 In the roadmap, we plan to release Wazuh Dashboard 4.6.0 based on OpenSearch 2.6.0 and Wazuh Dashboard 4.7.0 based on OpenSearch 2.9.0:
https://github.com/wazuh/wazuh-dashboard/wiki/Compatibility

Hope it helps!

[57 Tushar Thakare]

Hello Federico Rodriguez,

I want to install and integrate openserch, logstash, kibana, wazuh.

can you share me documentation for this requirement.

thanks

[Federico Rodriguez]

Keep in mind that Kibana is part of Elasticsearch stack and not part of OpenSearch stack.

Wazuh currently offers 2 ways to visualize the information which are officially supported.

• Wazuh Dashboard (Recommended): 

Wazuh provides a stack with Wazuh dashboard and Wazuh indexer, both applications are based on distributions of OpenSearch Dashboards and OpenSearch respectively. The Wazuh dashboard application has integrated a compatible Wazuh plugin. You can read more about these stack components here:

https://documentation.wazuh.com/4.4/getting-started/components/index.html
https://documentation.wazuh.com/4.4/getting-started/components/wazuh-dashboard.html
https://documentation.wazuh.com/4.4/getting-started/components/wazuh-indexer.html

To install Wazuh Dashboard and Wazuh Indexer use this guide:
https://documentation.wazuh.com/current/installation-guide/index.html

• Kibana:

To integrate Wazuh with Kibana you can follow this guide:
https://documentation.wazuh.com/current/deployment-options/elastic-stack/index.html

Be mindful of the compatibility matrix


Other installation alternatives are listed here:
https://documentation.wazuh.com/current/deployment-options/index.html

[57 Tushar Thakare]

Hello Federico Rodriguez,

Thanks for the information.

I want install wazuh(to analyze security events and data) and opensearch (to store the data,query) and compatible wazuh dashboard and opensearch dashboard.

so for this requirement please share the documentation or steps to do that, compatible versions.

please find the below attachment: sample dashboard

thanks.

[Nguyên Bùi]

any update?

Vào lúc 14:05:55 UTC+7 ngày Thứ Hai, 14 tháng 8, 2023, 57 Tushar Thakare đã viết: