Project

General

Profile

Actions
Copy link

Support #335

open

Support #314: OAM - Alerts and delivery thereof

OAM: Centralized syslog to Wazuh

Support #335: OAM: Centralized syslog to Wazuh

Added by Charles N 2 days ago. Updated 1 day ago.

Status:
New
Priority:
Normal
Assignee:
Charles N
Target version:
TSYS Group - Potential to Kinetic Ready
Start date:
08/06/2026
Due date:
08/31/2026 (Due in 23 days)
% Done:

0%

Estimated time:

Description

Parent/umbrella: #314 (OAM - Alerts and delivery thereof).

Scope

  • Set up syslog receiving on Wazuh.
  • Point all hosts' syslog at Wazuh.
  • Clean up noisy syslog traffic from hosts (reduce volume/noise).
  • Configure syslog alerts in Wazuh.

Dependencies

  • Depends on: E (Reverse DNS - needed for readable syslog hostnames).

Updated by Charles N 1 day ago Actions
Copy link
 #1

  • Due date set to 08/31/2026

Updated by Charles N 1 day ago Actions
Copy link
 #2

  • Target version set to Potential to Kinetic Ready

Updated by Charles N 1 day ago Actions
Copy link
 #3

Wazuh agent deployed fleet-wide via KNELIAC (security_wazuh role, package held). Centralized syslog collection to Wazuh still pending - rsyslog not yet deployed fleet-wide (per PFVCluster DRIFT-2026-07-30 audit). KNELIAC system_config role manages rsyslog config but fleet rollout incomplete.

Actions
Copy link

Also available in: PDF Atom