wazuh-splunk
wazuh-splunk copied to clipboard
Interactive guides for configuring extensions
Hi team, it's frustrating for the user opening a dashboard and see no alerts. Sometimes is due to the selected time range and that's fine but some modules need to be configured because they don't come pre-configured with Wazuh, here is where this ticket makes sense.
Proposals:
- [x] Create a base component for any interactive guide for configuring modules.
- [x] Add the ability to add the configuration for the module from the app.
- [ ] The guide should be valid for both manager configurations (ossec.conf) and centralized configurations (agent.conf).
Update
We are currently designing how should these interactive guides look like, some ideas:
Update
Configuration block for Syscheck, Command wodle and Localfile can now be generated following the different steps in the interactive guide as shown in this example:
Currently working on improving the styling of the guide and adapting it to include more configuration sections
Update
- Added new module guides: Osquery,Docker-Listener.
- When the module needs additional steps, an info message is shown when the configuration block is generated:
- Created a new component to show a message when the user is in a specific dashboard and that module is not configured, example Docker Listener:
When clicking on one of the groups the agents belongs to, the user is redirected to that
agent.conf
with the guide of that specific module opened: