Integrations

This section describes the Wazuh integrations with cloud services and third-party platforms for log collection, security monitoring, and threat detection.

Cloud service integrations

• GCP (Google Cloud Platform) – Monitor Google Cloud audit logs via Pub/Sub and Cloud Storage.
• AWS CloudTrail – Collect and analyze AWS CloudTrail logs.
• AWS CloudWatch Logs – Monitor AWS CloudWatch log groups.
• AWS Security Hub – Ingest findings from AWS Security Hub.
• Amazon Security Lake – Retrieve security data from Amazon Security Lake.
• Office 365 – Collect audit logs from Microsoft Office 365.
• GitHub – Monitor GitHub organization audit logs.
• Azure – Integrate with Azure Log Analytics, Storage, and Graph API.
• Microsoft Graph Security API – Retrieve security alerts and events from Microsoft Graph.