OwlH alternatives

[Peter Santiago]

Hi everyone,

I am trying to get the latest release of OwlH working to have it used with Wazuh.

Unfortunately, the latest version of OwlH is having some problems ( used v0.17.2.20201031 installer).

Are there any alternatives to get NIDS alerts into Wazuh (e.g. Security Onion) ?

Any suggestions?

Thanks

[Jose Antonio Izquierdo]

Hi vanyell2001, 

I think I can help you with any OwlH deployment error you may face. Can you provide details about that problem? also, please, feel free to reach me about OwlH using our slack workspace (http://bit.ly/owlhslack)

Anyway, if you don't want to use OwlH to manage your Suricata and Zeek NIDS probes, you can still integrate Suricata directly with wazuh. 

Here -https://documentation.wazuh.com/current/learning-wazuh/suricata.html

You may have the needed details to successfully integrate your Suricata probes with Wazuh. 

If you need other NIDS integration like Zeek let me know. 

Looking forward to hearing from you about your OwlH problem or your NIDS integration with Wazuh. 

Thanks 

Jose.