Do you know the way to send event to the Wazuh server without wazuh agent.

[JayJay-K]

Question

Hello.

Now I'm gathering security events with json format from the Tetragon solution.
And I deployed Vector and its source is tetragon event file.

Now I hope to send them to Wazuh server without Wazuh agent.
I know Wazuh solution introduces SSH connection from Wazuh server to endpoint to get an events.
But it's not a proper solution to get Tetragon events from endpoint.

Additionally, Wazuh solution recommand using Wazuh agent to get Tetragon events with following connections
endpoint:[Tetragon event log file --> Wazuh agent] ------> server:[Wazuh server]
But I hope to use vector to send Tetragon event to Wazuh server without Wazuh agent.

Do you happen to have a good idea for it?
Thanks.

Vector Config

No response

Vector Logs

No response