Wazuh Reporting

28 views
Skip to first unread message

никита какдела

unread,
Feb 26, 2026, 7:40:49 AM (7 days ago) Feb 26
to Wazuh | Mailing List
Hello team!
I have encountered a problem with AUTOMATICALLY uploading reports from wazuh. I came across an article about report generation.

https://documentation.wazuh.com/current/user-manual/capabilities/system-inventory/generating-system-inventory-reports.html

But can I do it automatically? Through the API or some other method and forward it to the mail, for example? I am interested in reports from Malware Detection, File Integrity Monitoring, Threat Hunting, MITRE ATT&CK, and IT Hygiene modules. I see the "Generate Report" button, but I want to understand if it can be automated. Thanks for the reply.

Olamilekan Abdullateef Ajani

unread,
Feb 26, 2026, 8:25:30 AM (6 days ago) Feb 26
to Wazuh | Mailing List

Hello Bless,

As you have rightly mentioned, those reports can only be generated from the dashboard as seen. This feature to automate the PDF reports via emails is in development. However, you can check out this alternative means using OpenSearch reporting CLI which would allow you to automatically generate and send custom dashboard PDF reports via emails.
Please check it out and let me know. 

Ref:
https://github.com/wazuh/integrations/tree/main/integrations/custom_dashboard_pdf_email_report

никита какдела

unread,
Feb 26, 2026, 11:42:05 PM (6 days ago) Feb 26
to Wazuh | Mailing List
Unfortunately, the CLI is completely unusable. He just takes a screenshot of the dashboard, it's no good. I will attach two reports for comparison.
четверг, 26 февраля 2026 г. в 16:25:30 UTC+3, Olamilekan Abdullateef Ajani:
wazuh-module-overview-mitre-1772141428.pdf
On_demand_report_2026-02-26T15_34_37.116Z_a87697c0-1328-11f1-adca-6f08a0265c16.pdf

Olamilekan Abdullateef Ajani

unread,
Feb 27, 2026, 7:33:46 AM (6 days ago) Feb 27
to Wazuh | Mailing List
Hello Bless,

As I mentioned earlier, this works more as a borrowed functionality from opensearchCLI; it simply takes a snapshot of the current dashboard state and sends it to you as a report via email.

To get the most value from it, I would recommend customizing your dashboard to include all the information you like to see reflected in the report. That way, the snapshot will be more meaningful and aligned with your needs.
At the moment, this serves as a practical workaround for your requirement. The full feature is still listed in the backlog (as noted in the GitHub repository), but based on the roadmap, you can expect a complete implementation in the near future.

Regards,

Reply all
Reply to author
Forward
0 new messages