# Question - Integrating wazuh SIEM

**URL:** https://discussions.eramba.org/t/question-integrating-wazuh-siem/3291
**Category:** Forum - Software
**Created:** [June 21, 2023, 4:40pm UTC](https://discussions.eramba.org/t/question-integrating-wazuh-siem/3291 "2023-06-21T16:40:59Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![AJNavarro](https://discussions.eramba.org/letter_avatar_proxy/v4/letter/a/a87d85/32.png) [@AJNavarro](https://discussions.eramba.org/u/AJNavarro)
#### Post date: [June 21, 2023, 4:40pm UTC](https://discussions.eramba.org/t/question-integrating-wazuh-siem/3291/1 "2023-06-21T16:40:59Z")

</div>

It´s possible integrate WAZUH SIEM with ERAMBA?

---

<div class="post-metadata">

### Author: ![david.schroth](https://discussions.eramba.org/letter_avatar_proxy/v4/letter/d/43a26b/32.png) [@david.schroth](https://discussions.eramba.org/u/david.schroth)
#### Post date: [June 21, 2023, 5:06pm UTC](https://discussions.eramba.org/t/question-integrating-wazuh-siem/3291/2 "2023-06-21T17:06:37Z")

</div>

Well, anything is possible. What are you trying to accomplish with the integration? Monitoring eramba events/logs, or pushing incidents into eramba?

For the former, I’m sure that’s easy enough. For the latter, it’s probably something that you’d regret doing unless you are very deliberate about what incidents you plan to raise and track in eramba.

Essentially you’d use the API to post the incident (will probably have to write some code on the sending side), then it should be possible to send some level of feedback using the outbound webhooks back to it.

---

<div class="post-metadata">

### Author: ![AJNavarro](https://discussions.eramba.org/letter_avatar_proxy/v4/letter/a/a87d85/32.png) [@AJNavarro](https://discussions.eramba.org/u/AJNavarro)
#### Post date: [June 21, 2023, 8:21pm UTC](https://discussions.eramba.org/t/question-integrating-wazuh-siem/3291/3 "2023-06-21T20:21:42Z")

</div>

basically, sending events to eramba and being able to use the eramba incident manager module

I would also be interested in knowing the use cases of that particular module, as well as the dashboards they use for incident management.

---

<div class="post-metadata">

### Author: ![kisero](https://discussions.eramba.org/user_avatar/discussions.eramba.org/kisero/32/2925_2.png) [@kisero](https://discussions.eramba.org/u/kisero)
#### Post date: [June 22, 2023, 4:46am UTC](https://discussions.eramba.org/t/question-integrating-wazuh-siem/3291/4 "2023-06-22T04:46:24Z")

</div>

> [@AJNavarro](#):
>
> basically, sending events to eramba and being able to use the eramba incident manager module

Incident management documentation: [Incident Management | Eramba learning portal](https://www.eramba.org/learning/courses/19/episodes/240)

Reporting documentation: [Graphical Reports | Eramba learning portal](https://www.eramba.org/learning/courses/30/episodes/228)

API documentation: [REST APIs | Eramba learning portal](https://www.eramba.org/learning/courses/29/episodes/271)
