Reviewing Wazuh deployment - Possible to pull from Restful API?
I am reviewing the use of Wazuh, to work as a local SIEM for some local systems. Several of the systems have a REST API that can be used to pull logs from them, instead of installing a local agent on the server. Is there any way to set this up directly in Wazuh, or would this still require a local script to pull it to a local file to be ingested. If it can, can someone point me to a document on how to do so?
Posted Nov 12, 2024, 8:19 PM UTC
12