Integration Wazuh Telegram with Active Response
I created this script because using the Wazuh integration module, the alerts on Telegram were delayed.
In this way they were normalized.
I hope it helps you too.
-
Create File
sudo vi /var/ossec/active-response/bin/wazuh-telegram.sh
-
Paste the Script - wazuh-telegram.sh (Attachment)
-
Set permissions
chmod 750 /var/ossec/active-response/bin/wazuh-telegram.sh chown root:wazuh /var/ossec/active-response/bin/wazuh-telegram.sh
-
Config Ossec.conf (Attachment)
Simple!