Hey, i want to send logs from graylog to wazuh!
I can’t speak of sending Graylog → Wazuh but I do know that Wazuh → Graylog does not work because how each handles Opensearch is fundamentally incompatible
Hey @gsmith ! hope all is well. Yeah life has been busy to say the least haha
With respect to the issue at hand, here is what I found digging around:
Always great content, however I’m not sure if you’re aware Taylor but if you are trying to use Graylog ingestion and indices and expect to use the Wazuh dashboard for alerts it doesn’t work. It breaks absolutely everything. Graylog secretly changes all the key pair fields to use an underscore whereas the Wazuh uses a dot in field names…
