Intermediate Estimated time: 1 min Category: Monitoring Published 💡 Prerequisites

Observability: Centralized Logging with Wazuh¶

Guide to integrating application logs into the Wazuh SIEM platform.

Overview¶

Integration of structured (JSON) logs for security analysis and auditing.

Agent Configuration¶

Add the following block to ossec.conf:

<localfile>
  <location>/var/log/app/output.json</location>
  <log_format>json</log_format>
  <label key="app_name">frikiteam-service</label>
</localfile>

References¶

Wazuh Documentation