Wazuh and AbuseIPDB - Integrating Wazuh and AbuseIPDB API

[@leek4994]

Excellent video! I enjoy the detail and you walking through examples.

[@taylorwalton_socfortress]

Thanks for watching

[@oscarmarte4850]

I like everything you do with wazuh integration. Videos very well explained and detailed the steps, it is appreciated. Cheer up!!

[@SysEngineer_Insights]

congratulations for 5k subscribers. I followed your all steps but there is no logs in integration.log

[@eliasantoniadis8556]

same for me

[@arielitomorales]

same for me too

[@pierreyoboue5473]

And in the documentation it's customerA.py but in your video it is customerA... so what do i will take

[@pierreyoboue5473]

hi, what there is in the var/../secure? because i don't have the file, can you help me please

[@usmanjut4709]

Appreciate your efforts regarding WAZUH. I am getting this error in integrations.log file:
"Wed Aug 17 11:43:35 UTC 2022 Wrong arguments"
Can you let me know about it?

[@vqL3nt1n]

Is it possible to scan and analyze for rdp connexion too ? Thanks

[@Huelilik]

does this method still work? i tried on 2 different vm, debian 11 vm and ubuntu 20 vm but the ossec configuration file keeps crashing when restarting wazuh manager. error in the Api configuration line, these few days I haven't found a way out for this. wazuh I'm using version 4.4.3

[@Huelilik]

everything is working fine at the moment, it turns out that some command line got deleted :(

[@supriyapotdar7253]

How to integrate wazuh with haltdose

[@tndgray]

Another great video! However, is anyone getting this error? integrations]# ./custom-abuseipdb.py
File "/var/ossec/integrations/custom-abuseipdb.py", line 30
debug(apikey)
IndentationError: unexpected indent

[@taylorwalton_socfortress]

It is probably an issue when you copy and paste from Medium. I put the script on github, try copying it here: raw.githubusercontent.com/OpenSecureCo/Demos/main/custom-abuseipdb.py