Skip to content

cannot show "ALLOW" traffic events waf aws on wazuh  #887

@vidz-45

Description

@vidz-45

Hi, i already setup WAF log AWS send to wazuh, with this document : https://documentation.wazuh.com/current/cloud-security/amazon/services/supported-services/waf.html

but in dashboard i cannot see "ALLOW" traffic events, just BLOK traffic, i already activated logall to yes and i se on wazuh archive the log with aws.action allow is sent to wazuh, but why on dashboard event i cannot see the "ALLOW Traffic" ? just BLOCK traffic

Please Help

Thanks

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions