Wazuh SiemをChatGPT、Claude、Geminiに接続

• 01 / 01アラートの調査方法

最速日

774ms

最遅日

1207ms

14日間の傾向

遅延傾向+24%

Wazuh Connector

準備完了です。MCPクライアントを選択し、セットアップ手順に従ってください。

コネクタリンクhttps://edge.vinkius.com/vk_preview_REUf3LN8uLwAvmnqLRFwWwNJqnVgVW6WS1Ew5q4A/mcpコピー

Claude Desktop

以下の手順で数秒で接続できます。

1. 1In Claude Desktop, open Settings → Connectors.
2. 2Click “Add custom connector” and paste the connector link above as the remote MCP server URL.
3. 3Click Add and start a new chat — Wazuh capabilities are ready to use.

設定 · claude_desktop_config.jsonコピー

{
  "mcpServers": {
    "wazuh-siem-mcp": {
      "url": "https://edge.vinkius.com/vk_preview_REUf3LN8uLwAvmnqLRFwWwNJqnVgVW6WS1Ew5q4A/mcp"
    }
  }
}

• Claude
• ChatGPT
• Cursor
• VS Code
• Windsurf
• Claude Code
• JetBrains
• Cline

各クライアントの手順ガイドはこちらです。 接続方法

Claude向けのガイド付きセットアップ？ WazuhをClaudeや他のAIに設定する

このConnectorが対応するすべてのAIクライアントを見る ↑

• 01

  セキュリティアナリスト

  Wazuhダッシュボードを操作することなく、エージェントのステータスやFIMの結果を素早く照会できます。

• 02

  DevSecOpsエンジニア

  ターミナルベースのAIツールから、エージェントのアップグレードやクラスターのヘルスチェックを自動化できます。

• 03

  インシデントレスポンダー

  調査中にMITREのマッピングやマネージャーのログを即座に取得し、迅速な対応を支援します。

• 01

  How do I connect my Wazuh instance?

  You provide your Wazuh API URL and credentials to Vinkius. Once connected, the MCP is ready to use in any compatible client.

• 02

  Can I filter my agent queries?

  Yes, many capabilities in this MCP support WQL filtering to help you target specific agents or data sets.

• 03

  Does this MCP support agent upgrades?

  Yes, you can use the upgrade_agents capability to manage version updates for your enrolled agents.

• 04

  Is my Wazuh data secure?

  Vinkius manages the connection and credentials, allowing your AI client to interact with your API securely.

• 05

  Can I modify rules through my AI client?

  Yes, the update_rule_file capability allows you to change Wazuh rules directly through your agent.

• 06

  Can I filter agents by specific operating systems or versions?

  Yes! The list_agents capability supports WQL (Wazuh Query Language). You can use queries like os.name=ubuntu;os.version>18 to find specific endpoints.

• 07

  How do I check for unauthorized file changes on my servers?

  You can use the get_syscheck capability. It retrieves File Integrity Monitoring (FIM) results, allowing you to audit file modifications, deletions, or additions across your agents.

• 08

  Is it possible to check the health of the Wazuh manager cluster?

  Absolutely. Use get_manager_status to check daemon health or list_cluster_nodes to see the status of all nodes in your Wazuh cluster.

• 

  Datadog Cloud SIEM AIコネクタ

  Manage cloud security via Datadog — search security signals, triage alerts, and audit detection rules directly

  表示
• 

  Levo.ai (API Security & Observability) AIコネクタ

  Secure your APIs via Levo.ai — audit endpoints, monitor sensitive data (PII/PHI), and manage OWASP vulnerabili

  表示
• 

  CrowdStrike Falcon AIコネクタ

  Detect threats, manage endpoints, investigate incidents, and query telemetry from CrowdStrike Falcon — the #1

  表示
• 

  Lacework (Cloud Security & CNAPP) AIコネクタ

  Secure your cloud via Lacework — search security alerts, monitor vulnerabilities, and audit cloud asset invent

  表示

おすすめ

• 

  Patchstack Security AIコネクタ

  Monitor WordPress security via Patchstack — track vulnerabilities, manage site software, and receive alerts di

  表示
• 

  Halo Security AIコネクタ

  Automate attack surface management via Halo Security — monitor assets, scans, and vulnerabilities directly fro

  表示
• 

  HCL AppScan AIコネクタ

  Manage security scans and vulnerabilities with HCL AppScan — track issues and audit applications via AI.

  表示
• 

  Elastic Security AIコネクタ

  Manage SIEM and SOC operations via Elastic Security — monitor detection rules, search security alerts (Signals

  表示