Wazuh Security Monitoring (Live)
The Wazuh dashboard provides centralized visibility over security events across all monitored servers and devices. It uses Filebeat for log collection, Elasticsearch (Wazuh Indexer) for indexing, and OpenSearch Dashboards for visualization.
The system analyzes real incidents and correlates data using MITRE ATT&CK, detecting failed logins, file integrity changes (FIM), rootkit detections, vulnerabilities (CVE), and SCA results.
When a threat is detected, Wazuh can send alerts via Email, Telegram, or Slack with details about the source, agent, and threat level. Through integrations with Prometheus and Alertmanager, security and performance data are combined for a complete infrastructure overview.