Wazuh

Wazuh is a free, open-source and enterprise-ready security monitoring solution for threat detection, integrity monitoring, incident response and compliance.

Configuring the Connector for Wazuh

To configure Lucidum to ingest data from Wazuh:

1. Log in to Lucidum.

2. In the left pane, click Connector.

3. In the Connector page, click Add Connector.

4. Scroll until you find the Connector you want to configure. Click Connect. The Settings page appears.

5. In the Settings page, enter the following:

   • Host (required) – The hostname of the Wazuh server.

   • Port (optional) - The port to be used in the connection (Default is 55000).

   • Username (required) – The user name and password for an account that has read access to the API.

   • Password (required) – The user name and password for an account that has read access to the API. 

   • Verify SSL. For future use.

6. To test the configuration, click Test.

   • If the connector is configured correctly, Lucidum displays a list of services that are accessible with the connector.

   • If the connector is not configured correctly, Lucidum displays an error message.