About this document

Wazuh Local Rules Configuration Guide by sachin.kumar is a document available to read on EtoBox.

The document provides instructions for editing the local_rules.xml file in Wazuh to suppress specific authentication failure alerts related to SSH brute force and P2P connections. It includes the creation of a suppression group with two rules, each with a unique ID and description. Finally, it instructs to restart the Wazuh manager service to apply the changes.

Author

sachin.kumar

Language

EN