Question - Integrating wazuh SIEM

It´s possible integrate WAZUH SIEM with ERAMBA?

Well, anything is possible. What are you trying to accomplish with the integration? Monitoring eramba events/logs, or pushing incidents into eramba?

For the former, I’m sure that’s easy enough. For the latter, it’s probably something that you’d regret doing unless you are very deliberate about what incidents you plan to raise and track in eramba.

Essentially you’d use the API to post the incident (will probably have to write some code on the sending side), then it should be possible to send some level of feedback using the outbound webhooks back to it.

basically, sending events to eramba and being able to use the eramba incident manager module

I would also be interested in knowing the use cases of that particular module, as well as the dashboards they use for incident management.

Incident management documentation: Incident Management | Eramba learning portal

Reporting documentation: Graphical Reports | Eramba learning portal

API documentation: REST APIs | Eramba learning portal