CR-2026-02-26: Wazuh SIEM Integration — Verification
Pre-Change Verification
| Check | Status |
|---|---|
Wazuh cluster health is green |
[ ] |
OpenSearch indexer accessible |
[ ] |
Syslog port 514 reachable on Wazuh manager |
[ ] |
Wazuh agents installed on target servers |
[ ] |
Post-Change Verification
| Check | Status |
|---|---|
pfSense syslog sending to Wazuh |
[x] |
ISE syslog target configured |
[ ] |
WLC syslog sending to Wazuh |
[ ] |
Archives indexing in OpenSearch |
[ ] |
Wazuh agents reporting from all servers |
[ ] |
Wazuh agents reporting from all workstations |
[ ] |
Filebeat processing archives without errors |
[ ] |