Wazuh Install - Worlds Best OpenSource EDR!

Join me as we continue on to Phase 3 of the World's Best SIEM Stack Series, installing the Wazuh Manager.

[ArmAikido]

One question. Finally, is this entire series about EDR or SIEM?

[DM-gppd]

Super informative and practical series. But can you please uncover one topic about efficient way of transferring sysmon for linux events from endpoints to backend systems. Because they are stored in XML format and it's not so obvious which forwarders and options should be used.

[photondoh]

I wish wazuh had iso 27001 compliance dashboard.

[VahanTorosyan-fn]

In case if someone has the issue with error "Elasticsearch exception [type=illegal_argument_exception, reason=key [types] is not supported in the metadata section]." when try to see received messages (16:27), you needed to remove this from the Opensearch config file: true (or just comment) and restart wazuh-dashboard and graylog-server

[alejandroparrello]

you're the boss!! 👏☝️😉 regards from Argentina 👋😁

[MrSuhailmt]

Great content. Helped me alot. which tool you are using for ssh? it looks cool.

[krosstty]

Hi, thanks a lot for your great content. It´s possible to help me with follow issue: [Alerts index pattern] No template found for the selected index-pattern title [wazuh-alerts-*]

[pragmatickaos]

I don't understand why Graylog is in the picture. You're already using Fluent Bit, which can already do all the filtering and renaming and much more. It can even integrate with GeoLite2 IP geolocation. I decided not to install Graylog.

[nopromises]

i am deploy wazuh manager graylog successfully i can see data in grafana but i cant see wazuh dashboard security event and and other alert from from wazuh .is there any way to see both dashboard wazuh and grafana?

[amruth]

Hi Bro,
I followed all your steps . regarding wazuh * and graylog. now i am unable to assign a group to wazuh agent . Please guid me

[surathwalpita]

While retrieving data for this widget, the following error(s) occurred:
Elasticsearch exception [type=illegal_argument_exception, reason=key [types] is not supported in the metadata section]. Why I'm having this error ?

[gregg]

Could I do this install on Ubuntu Server or Ubuntu Desktop? I would like to do this using a VM does that require Docker?

[simoner]

fluent-bit is impossible to install on Kali linux

[iamreiver]

You pronounce it wrong.
Huh
Duh
Wazuh