User bandwidth usage

[Erwin Brotonel]

Hi Wazuh Teams,

Can Wazuh monitor per user bandwidth usage? If so, how to do it on the Wazuh?

Thank you. Appreciate your help on this.

Regards,

Erwin

[elw...@wazuh.com]

Hello Erwin,

This can be approached in the same way that Wazuh monitors servers, and containers resources usage, which is monitoring the output of commands or tools which provide that information, below you can find examples:

• https://github.com/wazuh/wazuh/blob/master/etc/ossec.conf#L221-L225 by default Wazuh monitors disk space usage.
  
• https://medium.com/@karkoubelwali/monitor-docker-containers-resources-using-wazuh-dc28c4813a89 containers CPU, RAM usage.
  

In the case, of bandwidth, you might use one of the tools mentioned here https://www.binarytides.com/linux-commands-monitor-network/ and define a localfile (https://documentation.wazuh.com/current/user-manual/reference/ossec-conf/localfile.html#configuration-examples) command then monitor its output by Wazuh.

I hope this helps.

Regards,
Wali

[Massimiliano De Falco]

Hi all, any idea for the same question for win10? I need to know the  bandwidth users usage from win10 agents (v.4.3.10).