Wazuh - Splunk app
Clone or download
Latest commit 2ef72df Jan 14, 2019
Permalink
Type Name Latest commit message Commit time
Failed to load latest commit information.
SplunkAppForWazuh Bump version Dec 14, 2018
tests Included some tests Nov 16, 2018
.eslintignore Ignoring third-party libraries Oct 4, 2018
.eslintrc.json Allowing AMD requirejs in eESlint Sep 13, 2018
.gitignore Ignoring VSCode temp folder Aug 23, 2018
CHANGELOG.md Bump version Dec 14, 2018
LICENSE Added repo files Aug 11, 2018
README.md Update README.md Jan 14, 2019
package.json Bump version Dec 14, 2018

README.md

Splunk app for Wazuh

Slack Email Documentation Documentation

Wazuh app for Splunk offers an option to visualize Wazuh Alerts and API data. Wazuh helps you to gain deeper security visibility into your infrastructure by monitoring hosts at an operating system and application level.


Documentation

Requisites

  1. An already installed Wazuh Manager with access to the API.
  2. Splunk Universal Forwarder where Wazuh Manager is installed.
  3. At least one Splunk Enterprise indexer.

Installation

Splunk version Wazuh version Installation
7.0.3 3.2.1 https://packages.wazuh.com/3.x/splunkapp/v3.2.1_7.0.3.tar.gz
7.1.1 3.2.2 https://packages.wazuh.com/3.x/splunkapp/v3.2.2_7.1.1.tar.gz
7.1.1 3.2.3 https://packages.wazuh.com/3.x/splunkapp/v3.2.3_7.1.1.tar.gz
7.1.1 3.2.4 https://packages.wazuh.com/3.x/splunkapp/v3.2.4_7.1.1.tar.gz
7.1.1 3.3.0 https://packages.wazuh.com/3.x/splunkapp/v3.3.0_7.1.1.tar.gz
7.1.1 3.3.1 https://packages.wazuh.com/3.x/splunkapp/v3.3.1_7.1.1.tar.gz
7.1.2 3.4.0 https://packages.wazuh.com/3.x/splunkapp/v3.4.0_7.1.2.tar.gz
7.1.2 3.5.0 https://packages.wazuh.com/3.x/splunkapp/v3.5.0_7.1.2.tar.gz
7.1.2 3.6.0 https://packages.wazuh.com/3.x/splunkapp/v3.6.0_7.1.2.tar.gz
7.1.3 3.6.1 https://packages.wazuh.com/3.x/splunkapp/v3.6.1_7.1.3.tar.gz
7.2.0 3.7.0 https://packages.wazuh.com/3.x/splunkapp/v3.7.0_7.2.0.tar.gz
7.2.1 3.7.0 https://packages.wazuh.com/3.x/splunkapp/v3.7.0_7.2.1.tar.gz
7.2.1 3.7.1 https://packages.wazuh.com/3.x/splunkapp/v3.7.1_7.2.1.tar.gz
7.2.1 3.7.2 https://packages.wazuh.com/3.x/splunkapp/v3.7.2_7.2.1.tar.gz

Upgrade

Remove the app using splunk plugin tool

$SPLUNK_HOME/bin/splunk remove app SplunkAppForWazuh

Install the app

 $SPLUNK_HOME/bin/splunk install app <last package file>

Contribute

If you want to contribute to our project please don't hesitate to send a pull request. You can also join our users mailing list, by sending an email to mailto:wazuh+subscribe@googlegroups.com, to ask questions and participate in discussions.

Copyright & License

Copyright (C) 2018 Wazuh, Inc.

This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version.

Find more information about this on the LICENSE file.

References