Wazuh Integration Problem with Slack

[Muhammad Khubaib]

Dear Sir, 

Hope you are doing well. 

I have great experience on Wazhu. 

I am facing a problem related to Slack integrations. I am receiving alerts on slack after some delay. Let me add some screenshots for better understanding.

In screenshot, you can see I am receiving an alert at 11:11 am on Dashboard but receiving a notification at 12:00 on slack. 

I shell be very thankful to you for help.

Thanks,

[Harshal Paliwal]

Hi Team,

Thank you for your valuable feedback and thanks for using the Wazuh.

Can you please let me know if this issue happening for all alerts or with some alerts only?

Also, let me know if there is any timezone difference between the servers.

Waiting for your response soon.

Regards,

[Muhammad Khubaib]

Thank you very much for the reply.
This issue is happening for all alerts. It was working fine.
I encountered this problem when I enabled the audit module on all my servers and experienced that my memory was full due to ossecc logs and I got delayed Slack notifications.

[Muhammad Khubaib]

Yes, there is a time difference but it was working fine before. When the alerts came on the Wudu dashboard, it was immediately showing alerts on Slack. But now it is getting delayed.

[Muhammad Khubaib]

Another thing I also observed is that when I set the slack alarm to level 3 alert it gets immediate notification but when I set the slack alarm to level 6 or higher it gets delayed. .