Wazuh

Open-source XDR and SIEM with agents, indexer and dashboard.

Provider: default
Kind: Monitoring
Category: Operations
Official docs: https://documentation.wazuh.com/current/getting-started/index.html

Properties · 3 set by this component

property	type	values	required	kind default	this component
agentBased · component property	boolean	—	no	true	inherited
alertGrouping	boolean	—	no	false	inherited
collectorMode	enum	pull \| push	no	pull	▸ push
deployment · component property	enum	self-hosted \| cloud	no	self-hosted	inherited
independentOfMonitored	boolean	—	no	false	inherited
managed	boolean	—	no	false	▸ false
retentionDays	integer	—	no	—	inherited
signal	enum	metrics \| logs \| traces \| alerts \| all	no	metrics	▸ logs

Rules that apply · 0

Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.

No rule reads this kind yet. That is a gap, not a guarantee.

Use it in a design

nodes:
  - { id: "wazuh", component: "wazuh" }

Other Monitoring products · 174

ActionTrailalibaba-actiontrailalibabacloudmonitoring Application Real-Time Monitoring Servicealibaba-armsalibabacloudmonitoring CloudMonitoralibaba-cloud-monitoralibabacloudmonitoring Database Autonomy Servicealibaba-dasalibabacloudmonitoring Simple Log Servicealibaba-log-servicealibabacloudmonitoring Security Centeralibaba-security-centeralibabacloudmonitoring Amazon CloudWatch investigationsaws-aiopsawsmonitoring AWS Audit Manageraws-audit-managerawsmonitoring AWS CloudTrailaws-cloudtrailawsmonitoring AWS CloudTrail Lakeaws-cloudtrail-lakeawsmonitoring Amazon CloudWatch Application Insightsaws-cloudwatch-application-insightsawsmonitoring Amazon CloudWatch Application Signalsaws-cloudwatch-application-signalsawsmonitoring Amazon CloudWatch Internet Monitoraws-cloudwatch-internet-monitorawsmonitoring Amazon CloudWatch Logsaws-cloudwatch-logsawsmonitoring Amazon CloudWatch Network Flow Monitoraws-cloudwatch-network-flow-monitorawsmonitoring Amazon CloudWatch Network Monitoraws-cloudwatch-network-monitorawsmonitoring Amazon CloudWatch RUMaws-cloudwatch-rumawsmonitoring Amazon CloudWatch Syntheticsaws-cloudwatch-syntheticsawsmonitoring Amazon CodeGuru Profileraws-codeguru-profilerawsmonitoring AWS Compute Optimizeraws-compute-optimizerawsmonitoring Amazon Detectiveaws-detectiveawsmonitoring Amazon DevOps Guruaws-devops-guruawsmonitoring Amazon GuardDutyaws-guarddutyawsmonitoring Amazon Inspectoraws-inspectorawsmonitoring AWS IoT Device Defenderaws-iot-device-defenderawsmonitoring Amazon Macieaws-macieawsmonitoring Amazon Managed Grafanaaws-managed-grafanaawsmonitoring Amazon Managed Service for Prometheusaws-managed-prometheusawsmonitoring AWS Migration Hubaws-migration-hubawsmonitoring AWS Resilience Hubaws-resilience-hubawsmonitoring AWS Security Hub CSPMaws-security-hubawsmonitoring AWS Security Incident Responseaws-security-incident-responseawsmonitoring AWS Trusted Advisoraws-trusted-advisorawsmonitoring AWS X-Rayaws-xrayawsmonitoring Amazon CloudWatchcloudwatchawsmonitoring Azure Advisorazure-advisorazuremonitoring Application Insightsazure-application-insightsazuremonitoring Microsoft Defender External Attack Surface Managementazure-defender-easmazuremonitoring Microsoft Defender for Cloudazure-defender-for-cloudazuremonitoring Microsoft Defender for IoTazure-defender-for-iotazuremonitoring

and 134 more → Monitoring page

Source

1# yaml-language-server: $schema=../../schema/component.schema.json
2# Wazuh: free and open source XDR and SIEM; agents forward endpoint events to the Wazuh server, which
3# stores them in the Wazuh indexer and raises alerts ("Getting started with Wazuh").
4schemaVersion: "1"
5type: "component"
6id: "wazuh"
7kind: "monitoring"
8provider: "default"
9docs: "https://documentation.wazuh.com/current/getting-started/index.html"
10defaults:
11  signal: "logs"
12  collectorMode: "push"
13  managed: false
14properties:
15  deployment:
16    type: "enum"
17    values: ["self-hosted", "cloud"]
18    default: "self-hosted"
19  agentBased:
20    type: "boolean"
21    default: true

The same page as markdown, for an agent: /catalogue/components/wazuh.md