Cloudron works great with Wazuh/Ossec agent

[Mastadamus]

Just wanted to report that, I installed Wazuh/ossec agent on my cloudron server to grab logs and send to a security onion. I've been running it alongside the Cloudron now for a while. I've been getting alerts, logs sent back etc. Everything is going well. So if you want a HIDS on your Cloudron server, Wazuh works.

[girish]

@mastadamus So, one can just install the Wazuh agent like in https://documentation.wazuh.com/current/installation-guide/wazuh-agent/wazuh_agent_package_linux.html and that should be it?

[Mastadamus]

@girish yep and then you got to point it out your wazuh server using the ossec.conf file

[Mastadamus]

@mastadamus IF you want it to grab cloudron specific logs, you gotta edit the ossec.conf file to give it a location of the logs as well.