DEV Community

#siem

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Wazuh snort decoder cuts the last octet off srcip and dstip (4.14.x)

Wazuh snort decoder cuts the last octet off srcip and dstip (4.14.x)

Comments
3 min read
Wazuh active response: Cannot read 'srcip' from data

Wazuh active response: Cannot read 'srcip' from data

Comments
5 min read
Wazuh: wazuh-analysisd segfault after a ruleset reload (4.13 and later)

Wazuh: wazuh-analysisd segfault after a ruleset reload (4.13 and later)

Comments
4 min read
Wazuh custom rule never fires: shadowed by a sibling rule (and analysisd -t exits 0)

Wazuh custom rule never fires: shadowed by a sibling rule (and analysisd -t exits 0)

Comments
4 min read
Wazuh alert is in alerts.json but missing from the dashboard: mapper_parsing_exception

Wazuh alert is in alerts.json but missing from the dashboard: mapper_parsing_exception

Comments
5 min read
Wazuh SIEM: Deploy Open Source Threat Detection

Wazuh SIEM: Deploy Open Source Threat Detection

Comments
3 min read
Wazuh 5.0 rc2: eight things that still change for your 4.x custom rules

Wazuh 5.0 rc2: eight things that still change for your 4.x custom rules

Comments
4 min read
Wazuh SIEM: Open Source Threat Detection Deployment

Wazuh SIEM: Open Source Threat Detection Deployment

Comments
3 min read
Lightweight Log Analysis Tools Needed for Self-Hosted Environments to Enhance Security Without Full SIEM

Lightweight Log Analysis Tools Needed for Self-Hosted Environments to Enhance Security Without Full SIEM

Comments
6 min read
Splunk, SIEM platforms and the risk of an unauthenticated management API

Splunk, SIEM platforms and the risk of an unauthenticated management API

Comments
2 min read
Detection content as code: reviewing a change the way you review software

Detection content as code: reviewing a change the way you review software

Comments
2 min read
Splunk Patched an Unauthenticated RCE in Its Own SIEM — Here's What You Need to Know

Splunk Patched an Unauthenticated RCE in Its Own SIEM — Here's What You Need to Know

Comments
2 min read
Wazuh: 17,587 Fingerprint Matches on the Security Platform Watching Everything

Wazuh: 17,587 Fingerprint Matches on the Security Platform Watching Everything

Comments
3 min read
I Used to Use Splunk. Here’s Why My Team Switched

I Used to Use Splunk. Here’s Why My Team Switched

Comments
6 min read
Why We're Seeing More MSSPs Move Off Licensed SIEM (and Build Their Own)

Why We're Seeing More MSSPs Move Off Licensed SIEM (and Build Their Own)

1
Comments 2
3 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.