wazuh and praeco/elastalert configuration

[John]

Dear team,

We have deployed wazuh in our environment and want to integrate praeco and elastalert on top of it for our alerting engine. Is any one has done this integration in their environment. Any help would be highly appreciated.

Thanks!

[Federico Gustavo Galland]

Hi John,

We are not experts in praeco or elastalert, but we can try and give you some general pointers on this potential setup.

For that it would be great to have a more detailed description of the use cases you are after and of your current Wazuh setup.

Looking forward to your answer,

Fede