Help with the AWS-S3 module

26 views
Skip to first unread message

ocerna0721

unread,
Jan 31, 2024, 12:37:53 PM1/31/24
to Wazuh | Mailing List
Hello, community,

I need help. I've managed to get the AWS module working, but two graphs still don't show data. I've attached a screenshot:

aws_missing_data.JPG
Here is the configuration code in ossec.conf:

<wodle name="aws-s3">
    <disabled>no</disabled>
    <interval>10m</interval>
    <run_on_start>yes</run_on_start>
    <skip_on_error>yes</skip_on_error>
   
    <bucket type="cloudtrail">
      <name>wazuh-cloudtrail-tss</name>
      <aws_profile>default</aws_profile>
      <iam_role_arn>arn:aws:iam::471112768710:role/wazuh-role-tss</iam_role_arn>
    </bucket>
   
    <bucket type="vpcflow">
      <name>wazuh-cloudtrail-tss</name>
      <aws_profile>default</aws_profile>
      <iam_role_arn>arn:aws:iam::471112768710:role/wazuh-role-tss</iam_role_arn>
    </bucket>
  </wodle>

Federico Ramos

unread,
Feb 2, 2024, 5:55:49 AM2/2/24
to Wazuh | Mailing List
Hi, can you share the `ossec.log` logs located in `/var/ossec/logs/ossec.log` ?
Reply all
Reply to author
Forward
0 new messages