Move to Wazuh

[jlruizmlg]

Hello,

First awesome work, thank for your contribution with Ossec community.
I have a quick question, any thought to move to Wazuh?

https://github.com/wazuh/wazuh/blob/master/CHANGELOG.md

The last version has a new improvements and tools as for example Openscap and Auditd integration.

I can help with the code here.

regards!!

[dj-wasabi]

Hi @jlruizmlg

I did not know that wazuh existed. Seems very interesting from what I can see right now. I'm not sure how different the wazuh is compared with Ossec. So maybe better to create a seperate role for this? Or is it "easy" enough to make a variable like use_wazuh and if set to True Wazuh is configured, otherwise the default Ossec?

Kind regards,
Werner

[jlruizmlg]

Hi @dj-wasabi sorry for the delay, both options looks great! let me know if i can help here.

[KFPJ4XL9JMNP]

Very good, Thanks