Modify Full log

[Riccardo Olivetto]

Hi, i've created a custom active response script that use ChatGPT.
The active response script is called correctly, but the alert is generated without it's response. How can I add an additional field to see chatgpt response?

[Federico Ramos]

Hello, Active Response doesn't create new alerts; it's a script that runs based on certain alerts you've configured.

If you want to save the CHATGPT response, you should add a way to persist this data to your script.

[Riccardo Olivetto]

I refer to this article: https://documentation.wazuh.com/current/proof-of-concept-guide/leveraging-llms-for-alert-enrichment.html
The script itself doesn't add the field chatgpt responde, but from the visulization of alerts by GUI there is this additional field.

If i share with you my script can you help me?