Customize email alert

[Joaquim António]

Hello Wazuh team,

We have configured our Wazuh server to send certain events via email, following the documentation:

https://documentation.wazuh.com/current/user-manual/manager/alert-management.html#configuring-email-alerts

We receive the whole event and its fields in text. However, is it possible to alter the format of the email alerts, to send a link to view the specific alert in the dashboard instead, for example?

Thank you in advance.

[Olamilekan Abdullateef Ajani]

Hello 

To achieve this, you need external custom integration. You can take a cue from this blog here on the configuration.

It requires a postfix integration and a custom script added to the integration section on the wazuh server here: /var/ossec/integrations/You can find a sample custom script in the blog I shared and modify it to reference the customization you require in the email.

Once that is set, you need to add the integration block to the wazuh manager referencing the integration script as well as the customization you mentioned.

I made a sample custom script from this and it worked by referencing the URL and linking back to the dashboard, please attached for your reference.

Please let me know if you require further assistance on this.

Ref:
https://documentation.wazuh.com/current/user-manual/manager/integration-with-external-apis.html#custom-integration

[Joaquim António]

Hello Olamilekan,

Thank you!

Best regards,

Joaquim António