Verbinden Sie Wazuh Siem mit ChatGPT, Claude und Gemini

• 01 / 01Warnungen untersuchen

Schnellster Tag

774ms

Langsamster Tag

1207ms

14-Tage-Trend

Verlangsamend+24%

Wazuh Connector

Alles bereit. Wählen Sie Ihren MCP-Client und folgen Sie den Einrichtungsschritten.

Connector-Linkhttps://edge.vinkius.com/vk_preview_REUf3LN8uLwAvmnqLRFwWwNJqnVgVW6WS1Ew5q4A/mcpKopieren

Claude Desktop

Folgen Sie den Schritten unten, um sich in Sekunden zu verbinden.

1. 1In Claude Desktop, open Settings → Connectors.
2. 2Click “Add custom connector” and paste the connector link above as the remote MCP server URL.
3. 3Click Add and start a new chat — Wazuh capabilities are ready to use.

Konfiguration · claude_desktop_config.jsonKopieren

{
  "mcpServers": {
    "wazuh-siem-mcp": {
      "url": "https://edge.vinkius.com/vk_preview_REUf3LN8uLwAvmnqLRFwWwNJqnVgVW6WS1Ew5q4A/mcp"
    }
  }
}

• Claude
• ChatGPT
• Cursor
• VS Code
• Windsurf
• Claude Code
• JetBrains
• Cline

Schritt-für-Schritt-Anleitungen für jeden Client finden Sie im Guide. Verbinden

Geführte Einrichtung für Claude? Wazuh in Claude und anderen KI-Tools einrichten

Alle KI-Clients ansehen, mit denen dieser Connector funktioniert ↑

• 01

  Security Analyst

  Fragt schnell Agentenstatus und FIM-Ergebnisse ab, ohne das Wazuh-Dashboard nutzen zu müssen.

• 02

  DevSecOps Engineer

  Automatisiert Agenten-Upgrades und überwacht die Cluster-Gesundheit direkt über terminalbasierte KI-Capabilities.

• 03

  Incident Responder

  Ruft während laufender Untersuchungen sofort MITRE-Mappings und Manager-Logs ab.

• 01

  How do I connect my Wazuh instance?

  You provide your Wazuh API URL and credentials to Vinkius. Once connected, the MCP is ready to use in any compatible client.

• 02

  Can I filter my agent queries?

  Yes, many capabilities in this MCP support WQL filtering to help you target specific agents or data sets.

• 03

  Does this MCP support agent upgrades?

  Yes, you can use the upgrade_agents capability to manage version updates for your enrolled agents.

• 04

  Is my Wazuh data secure?

  Vinkius manages the connection and credentials, allowing your AI client to interact with your API securely.

• 05

  Can I modify rules through my AI client?

  Yes, the update_rule_file capability allows you to change Wazuh rules directly through your agent.

• 06

  Can I filter agents by specific operating systems or versions?

  Yes! The list_agents capability supports WQL (Wazuh Query Language). You can use queries like os.name=ubuntu;os.version>18 to find specific endpoints.

• 07

  How do I check for unauthorized file changes on my servers?

  You can use the get_syscheck capability. It retrieves File Integrity Monitoring (FIM) results, allowing you to audit file modifications, deletions, or additions across your agents.

• 08

  Is it possible to check the health of the Wazuh manager cluster?

  Absolutely. Use get_manager_status to check daemon health or list_cluster_nodes to see the status of all nodes in your Wazuh cluster.

• 

  Datadog Cloud SIEM KI-Connector

  Manage cloud security via Datadog — search security signals, triage alerts, and audit detection rules directly

  Ansehen
• 

  Levo.ai (API Security & Observability) KI-Connector

  Secure your APIs via Levo.ai — audit endpoints, monitor sensitive data (PII/PHI), and manage OWASP vulnerabili

  Ansehen
• 

  CrowdStrike Falcon KI-Connector

  Detect threats, manage endpoints, investigate incidents, and query telemetry from CrowdStrike Falcon — the #1

  Ansehen
• 

  Lacework (Cloud Security & CNAPP) KI-Connector

  Secure your cloud via Lacework — search security alerts, monitor vulnerabilities, and audit cloud asset invent

  Ansehen

Vorschläge

• 

  Patchstack Security KI-Connector

  Monitor WordPress security via Patchstack — track vulnerabilities, manage site software, and receive alerts di

  Ansehen
• 

  Halo Security KI-Connector

  Automate attack surface management via Halo Security — monitor assets, scans, and vulnerabilities directly fro

  Ansehen
• 

  HCL AppScan KI-Connector

  Manage security scans and vulnerabilities with HCL AppScan — track issues and audit applications via AI.

  Ansehen
• 

  Elastic Security KI-Connector

  Manage SIEM and SOC operations via Elastic Security — monitor detection rules, search security alerts (Signals

  Ansehen