MISP Integration help

[Leonardo Ventura]

Hello guys!

How are you doing?

We have misp alerts like this: 

Is there a way, to know which Wazuh Alert originated this specific alert? If we can include it on the logs too? Sometimes the Value is too vague, and we don´t know exactly where it came from.

Thanks!

[Rolly Davany Mougoue Kakanou]

Hello Leonardo,

Could you please share the complete alert, ensuring that any sensitive information is properly obfuscated? Typically, an alert will include the agent ID, which identifies the specific agent that generated the log.

Regards,