You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
To complement the recently introduced journald log collection feature in Wazuh, this issue proposes adding a dedicated systemd-journald events tab to the Wazuh Dashboard's "Log Collection" section. This new tab will enable users to visualize journald configuration from their agent.
Background
Wazuh now supports the collection of systemd-journald logs, providing detailed insights into system and service behaviors. To fully leverage this feature, it's crucial to present journald log configutation in the Wazuh Dashboard in an intuitive and accessible manner, akin to how Windows, macOS, and other log types are currently displayed.
Configuration and API Response Examples
Example Configurations and Corresponding API Outputs:
Implement a systemd-journald events tab in the Wazuh Dashboard's "Log Collection" section.
The interface should dynamically display journald log configurations and filters based on the API's response, as illustrated in the examples above.
Ensure the UI provides an intuitive and informative experience, allowing users to easily interpret the journald log configuration.
Tasks
Design and implement the UI for displaying journald logs, with attention to displaying detailed filter configurations.
Develop the necessary backend and frontend integrations to fetch and present journald log data configuration.
Validate the implementation with different journald log configurations to ensure accuracy and usability.
Additional Considerations
Given the potential complexity and variety of journald log configurations, the design should prioritize clarity and ease of navigation.
This feature is a critical step towards leveraging the full capabilities of journald log collection within the Wazuh ecosystem, offering users a comprehensive toolset for system monitoring and analysis.
The text was updated successfully, but these errors were encountered:
The array structure represents a logic structure, meaning that we should represent the filters in a logic expression. Array's array represents an OR structure, and objects on arrays represent an AND structure. Then we should change the filter representation.
Change the filters table structure to a logic expression structure.
After a meeting, it has been decided to revert to the table structure, representing filter groups as OR units and separated from other filter units by an AND, displayed in the table with an element that will appear on the left as 'Filters Group'.
Description
To complement the recently introduced
journald
log collection feature in Wazuh, this issue proposes adding a dedicatedsystemd-journald
events tab to the Wazuh Dashboard's "Log Collection" section. This new tab will enable users to visualizejournald
configuration from their agent.Background
Wazuh now supports the collection of
systemd-journald
logs, providing detailed insights into system and service behaviors. To fully leverage this feature, it's crucial to presentjournald
log configutation in the Wazuh Dashboard in an intuitive and accessible manner, akin to how Windows, macOS, and other log types are currently displayed.Configuration and API Response Examples
Example Configurations and Corresponding API Outputs:
Basic
journald
Log Collection:Configuration:
API Output:
journald
Log Collection with Filters:Configuration:
API Output:
Complex
journald
Configuration with Multiple Filters:Configuration:
API Output:
Requirements
systemd-journald
events tab in the Wazuh Dashboard's "Log Collection" section.journald
log configurations and filters based on the API's response, as illustrated in the examples above.journald
log configuration.Tasks
journald
logs, with attention to displaying detailed filter configurations.journald
log data configuration.journald
log configurations to ensure accuracy and usability.Additional Considerations
journald
log configurations, the design should prioritize clarity and ease of navigation.This feature is a critical step towards leveraging the full capabilities of
journald
log collection within the Wazuh ecosystem, offering users a comprehensive toolset for system monitoring and analysis.The text was updated successfully, but these errors were encountered: