I installed wazuh from this link
https://documentation.wazuh.com/current/deployment-options/virtual-machine/virtual-machine.html When use ls -llh
-rwxr-x--- 1 root root 845 Oct 10 11:11 custom-telegram
-rwxr-x--- 1 root root 995 Oct 10 11:14 custom-telegram.py
-rwxr-x--- 1 root wazuh 4.3K Sep 5 14:45 pagerduty
-rwxr-x--- 1 root wazuh 1.1K Sep 5 14:45 shuffle
-rwxr-x--- 1 root wazuh 4.4K Sep 5 14:45 shuffle.py
-rwxr-x--- 1 root wazuh 1.1K Sep 5 14:45 slack
-rwxr-x--- 1 root wazuh 3.8K Sep 5 14:45 slack.py
-rwxr-x--- 1 root wazuh 1.1K Sep 5 14:45 virustotal
-rwxr-x--- 1 root wazuh 6.8K Sep 5 14:45 virustotal.py
but I don't use chown root:ossec, I use root:root
I don't know it's doesn't work because of root:root root:ossec or something else I dont't know
I already create bot and group bot, I use chat id group to fill on the file.py
but chat id I dont know we use chat id group or chat id user