Wazuh app for Splunk offers an option to visualize Wazuh Alerts and API data. Wazuh helps you to gain deeper security visibility into your infrastructure by monitoring hosts at an operating system and application level.
- An already installed Wazuh Manager with access to the API.
- Splunk Universal Forwarder where Wazuh Manager is installed.
- At least one Splunk Enterprise indexer.
| Splunk version | Wazuh version | Installation |
|---|---|---|
| 7.0.3 | 3.2.1 | https://packages.wazuh.com/3.x/splunkapp/v3.2.1_7.0.3.tar.gz |
| 7.1.1 | 3.2.2 | https://packages.wazuh.com/3.x/splunkapp/v3.2.2_7.1.1.tar.gz |
| 7.1.1 | 3.2.3 | https://packages.wazuh.com/3.x/splunkapp/v3.2.3_7.1.1.tar.gz |
| 7.1.1 | 3.2.4 | https://packages.wazuh.com/3.x/splunkapp/v3.2.4_7.1.1.tar.gz |
| 7.1.1 | 3.3.0 | https://packages.wazuh.com/3.x/splunkapp/v3.3.0_7.1.1.tar.gz |
| 7.1.1 | 3.3.1 | https://packages.wazuh.com/3.x/splunkapp/v3.3.1_7.1.1.tar.gz |
| 7.1.2 | 3.4.0 | https://packages.wazuh.com/3.x/splunkapp/v3.4.0_7.1.2.tar.gz |
| 7.1.2 | 3.5.0 | https://packages.wazuh.com/3.x/splunkapp/v3.5.0_7.1.2.tar.gz |
| 7.1.2 | 3.6.0 | https://packages.wazuh.com/3.x/splunkapp/v3.6.0_7.1.2.tar.gz |
| 7.1.3 | 3.6.1 | https://packages.wazuh.com/3.x/splunkapp/v3.6.1_7.1.3.tar.gz |
Remove the app using splunk plugin tool
$SPLUNK_HOME/bin/splunk remove app SplunkAppForWazuh
Install the app
$SPLUNK_HOME/bin/splunk install app <last package file>
If you want to contribute to our project please don't hesitate to send a pull request. You can also join our users mailing list, by sending an email to mailto:wazuh+subscribe@googlegroups.com, to ask questions and participate in discussions.
Copyright (C) 2018 Wazuh, Inc.
This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version.
Find more information about this on the LICENSE file.