How to Create and Configure a Dashboard in Wazuh

Logging into Wazuh

• Log into your Wazuh server.
• Ensure you have an agent installed and it is active.
• If the agent is disconnected, start the agent to make it active.

Creating the First Dashboard

• Navigate to the main menu.
• Select Dashboard and click Create your first dashboard.
• Choose Data Table to display values.

Configuring the Data Table

• Select Wazuh Alerts.
• In the metrics and bucket section, choose Split Table.
  • Select Column and then choose Timestamp as the field.
  • Set the field order to Ascending.
  • Define the size of table rows and columns.
  • Select the type and click Update.

Adding Values

• Add additional values like First Name or logs from Security Events.
• Select Wazuh -> Agent Host -> Set order to Ascending and add required values.
• Continue adding fields such as Rule Groups ordered ascending with a size of 20.
• Select Timestamp and other desired values to make the data readable and visualizable.

Saving the Dashboard

• Save the dashboard with a name, e.g., Table Monitoring.
• Verify if the dashboard has been saved correctly.

Creating Visualizations

• Create initial visualizations before creating the dashboard.
• Example: Visualization using Pie Chart.
  • Select Wazuh Alerts -> Split Slice -> Select Terms and Timestamp in ascending order.
  • Define the number of values and label the data.
• Create visualizations for various fields like Agent Name, Description, etc.

Adding Visualizations to Dashboard

• Edit the dashboard and add new visualizations.
• Click Add and select the desired visualization (e.g., Pie Chart).
• Set the position and location for the new visualization.
• Save the updated dashboard.

Tips

• Always name and save your visualizations and dashboards appropriately.
• Multiple types of visualizations can be created to suit various data analysis needs.

Final Steps

• Review the created dashboard.
• Share feedback or ask questions if any issues arise during the configuration.

Conclusion

• If you have any queries or issues, feel free to comment.
• Don't forget to like, subscribe, and share the channel for more tutorials and guides.

Thank you for watching!