Wazuh 4.0 pdf report generation query

[Daniel Hinojo]

Good morning Dear, I would like to make the following two queries :

1: The reports that are generated in PDF (Security events report) can be scheduled any task to send me every day or week automatically to the email, how? 

 2.- Can the report generated in pdf (Security events report) be personalized? I mean to add some other box in that generation of pdf report?  

[jeremias...@wazuh.com]

Hello Daniel!
Thank you for using Wazuh!
Let me answer these questions:

1. You can use Daily Reports to be sent once a day via email (automatically) as shown in the documentation. If you want weekly reports, there is an option to generate them manually using the reportd daemon,  executing the following command: 

• # cat /var/ossec/logs/alerts/alerts.log | /var/ossec/bin/ossec-reportd -n "Daily report: Alerts with level higher than 10" -s -f level 10 2> report-test.txt 

2. Wazuh report isn't designed to dynamically modify the content of the report. As Wazuh is open source you can modify Wazuh App modules to adapt them to your necessity, but it's not guaranteed to work correctly after any modification. i.e., if you need to modify the title of the pdf, you can heck tab-description.js and modify the title and the description following the below steps (I have attached snapshots of these steps from a similar question thread):

- go to /usr/share/kibana/plugins/wazuh/server/reporting/tab-description.js

- change the title or description that you want to change. (Under responsibility)

- restart Kibana using systemctl restart kibana.
Also, the controller file that generates the content of the report is located here.

Let me know if this helps, and if you have further doubts please don't hesitate to ask.
Best regards.

[Daniel Hinojo]

Thanks for your answer but point 1 is not very clear to me, what I was referring to is that the report that is generated in PDF (Security events report) is sent daily, weekly or monthly, for example we start on January 1 and It ends on January 31st, on February 1st you should be sending the report in pdf of the Security events report for that month. It can also be daily, for example every day at 8:00 am, that sends a report of the alerts that have been collected in the last 24 hours as the Security events report in pdf. Thanks for the support  

[jeremias...@wazuh.com]

Hi Daniel,
Sorry for the misunderstanding. Let me ask other co-workers if there is a way to configure this and I will get back ASAP.
Regards!

[Daniel Hinojo]

Thanks Jeremias

[jeremias...@wazuh.com]

Hi Daniel,
I got in contact with the team in charge of Wazuh App and the PDF reports. And they explained to me that there isn't functionality to send these reports via e-mail.
This is because the PDF report isn't generated by Wazuh App itself to automate the sending of the report.
Sorry for not having a positive answer on this.

If you have further doubts, please don't hesitate to ask.
Regards.