Nate Uribe
Nate Uribe
Hi! Just to check a few things - Are you seeing alerts in Wazuh? By default, only alerts with a severity of 7 or greater will be sent to Iris....
Hmm, ok. I wonder if lowering the `7` within the block within the `/var/ossec/etc/ossec.conf` file would help show alerts. It's possible that no events with a level of 7 or...
No worries - Looks like the issue is probably on the Wazuh side, since you are able to run it manually and the alerts show in Iris; can you check...
Ok, the script looks fine to me. The only thing that stands out to me in the `/var/ossec/etc/ossec.conf` file is the `` of the config; here's what it looks for...
Hmm, I'm not using VMs to run Wazuh and Iris, as I have them both running on the same machine. I don't think the Wazuh agent is required to get...