Among others, this scenario has:
- one or more locations, data centers, departmental network, etc
- one or more OlwH Nodes with Suricata and Zeek (there is no limitation in nodes number)
- each node is connected to a SPAN port or Port mirror
- one sing OwlH Master and OwlH UI to manage all them
Option:
- A wazuh infrastructure to integrate with.