Hello.
Unfortunately, Wazuh does not support an option to change the language of the email reports.
One alternative to achieve this is to use the Wazuh integrator module and a script to send custom emails. In the Wazuh manager configuration (/var/ossec/etc/ossec.conf) add the following configuration:
<integration>
<name>custom-email-alerts</name>
<group>multiple_drops|authentication_failures</group>
<alert_format>json</alert_format>
</integration>
Add the
custom script to send emails in
/var/ossec/integrations/custom-email-alerts and give it the right ownership and permissions:
chown root:wazuh /var/ossec/integrations/custom-email-alerts chmod 750 /var/ossec/integrations/custom-email-alerts
At this point, modify the custom-email-alerts script to your liking.
Hope it helps.